Developers
Containers
Run any Docker image inside a trusted execution environment (TEE), measured for anyone to verify.
Thinkr Containers runs your Docker image inside a trusted execution environment (TEE), on AMD SEV-SNP or Intel TDX, with NVIDIA GPUs in confidential computing mode. Clients verify the enclave's remote attestation before they send a request.
Containers opens to developers from its waitlist.
How it works
Pin the image
Name your image by its SHA-256 digest, with its ports, secrets, and resources, in one config file.
Tag a release
Each tag is measured and recorded in a transparency log before it deploys.
Run it in a TEE
The image boots inside an enclave on AMD SEV-SNP or Intel TDX, with any GPU in confidential computing mode.
Verify, then connect
Clients verify the enclave's remote attestation against the logged measurement, then send their first request.
Features
Any Docker image runs as you built it, with no rewrite and no special build.
Clients verify the enclave's remote attestation before any request reaches your workload.
Each release is measured and recorded in a transparency log, so anyone can match what runs to its source.
Updates need no downtime: tag a new release, and the enclave moves to it while the service keeps running.
Pull images from a private registry. The verification stays pinned to the digest of the image.
Confidential GPUs, one or several: NVIDIA Hopper and Blackwell in confidential computing mode, dedicated and never preempted.
Platforms
| Part | Value |
|---|---|
| CPU | AMD SEV-SNP · Intel TDX |
| GPU | NVIDIA Hopper · Blackwell |
| GPU mode | Confidential computing |
| GPUs | One or more |
| Measurements | Transparency log |
| Verification | Remote attestation |