Confidential Computing and Satellite Link Security for Critical Workloads

CYSEC SA is a Swiss deep-tech security vendor, incorporated in May 2018 and headquartered at the EPFL Innovation Park in Lausanne, with further offices in Toulouse and Esch-sur-Alzette. The company builds hardware-rooted protection for workloads that cannot tolerate compromise: satellite operators and space agencies, energy and industrial infrastructure, defence programmes, and regulated enterprises running sensitive data in public cloud or at the edge. Its stated positioning is security without a throughput penalty, from cloud deployments through to orbit.

The ARCA portfolio spans three product lines. ARCA Trusted OS encapsulates virtual machines inside CPU-level trusted execution environments, using AMD SEV-SNP or Intel TDX to isolate workloads from the hypervisor, the cloud provider and co-tenants. A self-hosted ARCA Verification Manager vets each VM during early boot, reports live state through an embedded agent, and releases full-disk encryption keys only after successful attestation, with those keys held in customer HSM or Vault instances rather than in the cloud.

Alongside the compute stack, ARCA SATLINK implements the CCSDS Space Data Link Security standard for frame-level encryption of satellite traffic, and ARCA SATCOM bridges legacy and cloud-native ground-segment architectures with sovereign encryption. The SATLINK work has been validated in orbit aboard ESA's OPS-SAT. Differentiation rests on sovereignty and deployment breadth: the entire attestation chain runs on customer infrastructure with no third-party cloud dependency, and supported targets include Azure Confidential Compute, Broadcom vSphere 9.0+ and Proxmox.