Dev tools · alternatives · 2026
24 alternatives to Confidential computing for high-assurance RISC-V embedded systems
Dear HN community! Looking forward to hearing your feedback on ACE (assured confidential execution), technology that implements VM-based trusted execution environment (TEE) for embedded RISC-V systems with focus on a formally verified and auditable firmware. We target high-assurance systems that can benefit from compartmentalization and hardware-backed isolation. The key ingredient called security monitor (firmware) is implemented in Rust. The formal specification is defined as annotations directly in code and gets translated to Coq using RefinedRust automation. ACE design is now part of the…
ACE is a trusted execution environment for embedded RISC-V systems that creates isolated virtual machine compartments with hardware-backed security. Built for high-assurance applications requiring strong isolation, the… Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes.
- 1
32-bit RISC-V CPU in ~800 lines of C89. Contribute to mnurzia/rv development by creating an account on GitHub.
2023 · github.com · its alternatives →
- 2AR
2021 · guillaume.baierouge.fr · its alternatives →
- 3
A Fully Homomorphic Encryption Brainfuck virtual machine - f-prime/arcanevm
2019 · github.com · its alternatives →
- 4RA
2016 · jamesmunns.com · its alternatives →
- 5
To try it out, simply build the project yourself from source, or use attached bootable ISO image of the system (in Releases on Github) and run it in QEMU. https://blog.vxn.dev/rou2exos-rusted-edition
2025 · github.com · its alternatives →
- 6
- 7
Move your SVN into the cloud
2017 · get.assembla.com · its alternatives →
- 8
I'm a software engineer who keeps getting pulled into DevOps no matter how hard I try to escape it. I recently moved into a Lead DevOps Engineer role writing tooling to automate a lot of the pain away. On my own time outside of work, I built Artifact Keeper — a self-hosted artifact registry that supports 45+ package formats. Security scanning, SSO, replication, WASM plugins — it's all in the MIT-licensed release. No enterprise tier. No feature gates. No surprise invoices. Your package managers — pip, npm, docker, cargo, helm, go, all of them — talk directly to it using their native…
Feb 2026 · github.com · its alternatives →
- 9
RISC-V's compressed instruction (RVC) extension is intended as an add-on to the regular, 32-bit instruction set, not a replacement or competitor. Its designers intended RVC instructions to be expanded into regular 32-bit RV32I equivalents via a pre-decoder. What happens if we explicitly architect a RISC-V CPU to execute RVC instructions, and "mop up" any RV32I instructions that aren't convenient via a microcode layer? What architectural optimizations are unlocked as a result? "Minimax" is an experimental RISC-V implementation intended to establish if an RVC-optimized CPU is, in practice, any…
2022 · github.com · its alternatives →
- 10
Hi HN, To truly understand how operating systems and network protocols work, I decided to combine two classic learning tools: the xv6 teaching OS and a from-scratch TCP/IP stack. I'm excited to share the result: my own from-scratch TCP/IP networking stack running directly inside the xv6-riscv (https://github.com/pandax381/xv6-riscv-net) kernel. The project uses a modern virtio-net driver, allowing it to run seamlessly in QEMU and communicate with the host machine. Key features: - From-Scratch Stack: The core is powered by microps…
2025 · github.com · its alternatives →
- 11
Hello Everyone, I'm excited to introduce a new open-source observability platform and would love to hear your feedback. We are aware that there are lots of open-source/commercial tools out there. However, we believe that monitoring the clusters and extracting actionable insights requires deep know-how about the tools/domain. We mainly focused on this problem. - Alaz is an eBPF agent installed on your K8s cluster as DaemonSet. Thanks to eBPF, Alaz collects traces directly from Linux kernels. This means there's no need for sidecars, instrumentations, or service restarts. - The UI not…
2023 · github.com · its alternatives →
- 12
VM with JIT-compiler for ATMega32 written in Rust. Contribute to MackieLoeffel/avr-vm development by creating an account on GitHub.
2017 · github.com · its alternatives →
- 13BI
Self-hosted virtual machines for background coding agents.
Jun 2026 · bastion.computer · its alternatives →
- 14
- 15
The fastest RVA23 RISC-V sandbox. Contribute to libriscv/libriscv development by creating an account on GitHub.
2020 · github.com · its alternatives →
- 16LV
Hello HN! We've been working on a new hypervisor https://kwarantine.xyz that can run strongly isolated containers. This is still a WIP, but we wanted to give the community an idea about our approach, its benefits, and various use cases it unlocks. Today, VMs are used to host containers, and make up for the lack of strong security as well as kernel isolation in containers. This work adds this missing security piece in containers. We plan on launching a free private beta soon. Meanwhile, we'd deeply appreciate any feedback, and happy to answer any questions here or on our slack…
2021 · its alternatives →
- 17
AnyLeaf: Cutting-edge SUAS hardware
2021 · anyleaf.org · its alternatives →
- 18
We built PrivateClaw because the hosted OpenClaw platforms on the market today require you to trust them with plaintext. PrivateClaw removes that requirement at the hardware layer. PrivateClaw runs AI agents inside Trusted Execution Environments (TEEs), backed by AMD’s SEV-SNP standard. This means that your data is encrypted at the hardware level, enforced by the AMD Secure Processor outside the host OS trust boundary. PrivateClaw comes with inference that also runs inside TEEs, which means your prompts and completions are private as well. How it works: Each user gets a dedicated CVM…
Apr 2026 · privateclaw.dev · its alternatives →
- 19
“Audit-ready execution-layer defense for high-value cross
Jan 2026 · app.notion.com · its alternatives →
- 20
MCP Guardian▲12You can read more about EQTY Lab's enterprise-focused usage of this tooling here: https://www.eqtylab.io/blog/securing-model-context-protocol
Dec 2025 · guardianmcp.dev · its alternatives →
- 21
- 22
Hi HN, this is Prashant from H2Loop. Embedded engineers that we work with were annoyed that generic AI tools hallucinated register addresses, generated code for peripherals that don't exist on the chip and mixed up timer quirks between similar platforms like STM32F4 and F7. The code looks clean but it just won't boot. This made them go back to the datasheet every time. So we built Hydron, an AI tool that writes datasheet-grounded code for your hardware. Demo: Hydron setting up sleep-mode CPU logging for an onboard temp sensor on an STM32U385 - https://boot.hydron.sh/zzzDemo…
Jun 2026 · hydron.sh · its alternatives →
- 23
Just sharing this project [0] I've worked on a while ago, it's not that interesting but I was proud of making it. It has a CLI and a GUI that is done with Dear ImGui and includes an instruction editor, memory and registers viewer, and a canvas that is manipulated with an extra instruction made specifically for the GUI! This is not my first attempt at a virtual machine implementation, I've done the popular LC-3 VM before [1], check it out if you're interested to see Rust code rather than C++ ;) [0]: https://github.com/faresbakhit/vole-sim [1]:…
2025 · faresbakhit.github.io · its alternatives →
- 24
This is the repository for the Zero Trust VPN code run by VP.NET that allows you to verify that the servers are running the same code as the repository using Intel SGX for hardware guarantees.
2025 · github.com · its alternatives →
Also compare
- RISC-V core written in 600 lines of C89 alternatives
- A RISC-V core in Racket alternatives
- ArcaneVM – A Fully Homomorphic Encryption Brainfuck Virtual Machine alternatives
- Rust, ARM Cortex M, and a Generated HAL alternatives
- A DOS-like hobby OS written in Rust and x86 assembly alternatives
- AEVS alternatives
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →