The Curious Engineer

All blogs / Security

Edera

edera.dev

Edera is the secure execution platform for all software. Hardware-enforced isolation for every workload, agent, and container — with zero performance tax.

SecurityDevOps / SRE / infrastructure

’24’25’26
Posts
180 from 20 Jun 2024 to 30 Oct 2026
Posting
weekly (89 in the last year)
Kind
company blog

2026 79

  1. Read it Now
  2. Events | Edera
  3. Read it Now
  4. Read more
  5. Read more
  6. Confidential Computing & Edera: Stronger Together | Edera
  7. Secure Multi-Tenant Isolation for Kubernetes | Edera
  8. Untrusted Code Execution Without the Risk | Edera
  9. AI Agent Sandboxing | Edera
  10. Read more
  11. Read more
  12. Read it Now
  13. Read it Now
  14. Read it Now
  15. Read it Now
  16. Read it Now
  17. Read it Now
  18. Read it Now
  19. Read it Now
  20. Read it Now
  21. Read it Now
  22. Read it Now
  23. Read it Now
  24. Read it Now
  25. Read it Now
  26. Why AI Agent Escapes Demand Assume-Breach Architecture
  27. Lessons from TARmageddon: What Rust Can Learn
  28. Edera 1.12 Release: SPIFFE Identity, SBOMs & Faster Zones
  29. AI Agent VM Escape: Why Isolation Is a Spectrum
  30. Sandbox Types Compared: Self-Hosted vs Managed, Dev vs Prod
  31. Secure Builds With Edera Zones and SPIRE (Webinar)
  32. Rewriting 9pfs in Rust: Faster, Memory-Safe Filesystem I/O
  33. Kernel Observability for AI Agents on Kubernetes
  34. Edera 1.11 Release Notes: Run VMs and Containers Together
  35. Sysbox Runtime Risk: Kernel Attack Surface in CI/CD Explained
  36. The Sysbox Alternative for True Kernel Isolation
  37. Open-Weight AI Models & the New Vulnerability Discovery Era
  38. Two Escalation Chains, One Shared-Kernel Flaw: AI Breach Analysis
  39. How Edera Closed the Xen dom0 NUMA I/O Gap for Good
  40. Xen Grant Tables and dom0 NUMA Blind Spot Explained
  41. NUMA-Aware Zone Placement in Edera Explained
  42. NUMA Explained: Why Memory Distance Slows Your VMs
  43. Docker-in-Docker Security Risks and How to Escape Them
  44. Kubernetes User Namespaces Don't Fix the Shared Kernel
  45. AI Patching Isn't Enough: The Case for Resilient Infrastructure
  46. Container Escape Benchmark: Zero Escapes Against Edera Zones
  47. Kubernetes Isolation With Full Observability and Autoscaling
  48. Edera and Minimus Partner for Container Security
  49. Edera vs Kata Containers | Production Container Isolation for Kubernetes
  50. Edera vs gVisor | High-Performance Container Isolation
  51. Dirty Frag: What It Is and Why It Matters for Container Security
  52. Edge Workload Isolation When You Can't Patch the Kernel
  53. The Vine Blog | Edera
  54. CVE-2026-5747: Why VMM Attack Surfaces Can't Be Patched Away
  55. LLM Zero-Day Discovery: Why Container Isolation Fails
  56. Linux User Namespaces: 262% More Kernel Attack Surface
  57. CVE-2026-33579: The OpenClaw /pair approve Vulnerability
  58. Edera Turns Two: GPU Security, KVM, and What's Next
  59. The GPU-on-Kubernetes Security Risk Nobody's Talking About
  60. Securing the AI Grid: Why Telecom Edge Isolation Matters
  61. ocirender: Streaming OCI Layer Merge for Rust Infrastructure
  62. Edera Brings Zone Isolation to KVM Infrastructure
  63. Kernel Memory Blindspots in Kubernetes AI Workloads
  64. CrackArmor: AppArmor Flaws Expose Linux Kernel Risk
  65. Edera for GPUs: Secure Multi-Tenant GPU Infrastructure
  66. Edera vs runc on EKS: CPU, Memory & Startup Benchmarks
  67. SOC 2 Security Theater: Why Compliance Isn't Real Security
  68. What the F--- Is That? | Edera
  69. AI Agent Sandbox vs Containers: What Actually Isolates?
  70. SPIFFE, SPIRE & Zero Trust Without Confidential Hardware
  71. Production AI Agent Sandboxing for Secure Infrastructure
  72. Kata Containers CVE-2026-24834: MicroVM Trust Failure
  73. Run Untrusted Code Safely with Styrojail Sandbox
  74. Why Production-Grade Sandbox Isolation Took Two Years to Build
  75. Modern Cloud Attacks Exploit Trust Models, Not Break-Ins
  76. Kata, gVisor, or Firecracker? Container Isolation Guide
  77. Edera vs Firecracker: MicroVM vs Container Isolation
  78. Shared Linux Kernels: The Cloud Security Risk We Ignore
  79. How to Secure Agentic AI Without Sacrificing Performance

2025 64

  1. MCP Security Risks Explained: Securing AI Agents with Isolation
  2. Confidential Computing Explained: How Encrypted Execution Really Works
  3. Edera Delivers Secure Workload Isolation for Federal Systems
  4. Why It’s Time to Rebuild Kubernetes Foundations
  5. Edera + Falco: A Better Model for Cloud-Native Detection
  6. How Edera Delivers Enterprise-Grade Security
  7. Meet Sprout: A Rust-Based Bootloader for Cloud-Native
  8. How Rust + Xen Shrink the Hypervisor Attack Surface
  9. AI Agents Explained: From Chatbots to Autonomous Systems
  10. Real Kubernetes Isolation: Beyond Namespaces
  11. Multitenancy Explained: Secure and Efficient Containers
  12. Where to Find Edera at KubeCon North America 2025
  13. Why Prevention Beats Detection-Only Security
  14. CVE-2025-62518 Shows the Cost of Open Source Abandonware
  15. Edera Now Supports Azure Linux and Bare-Metal AI
  16. What a Hardened Runtime Is and Why It Matters
  17. Container Isolation Explained for Kubernetes and Beyond
  18. Why GPU Runtime Security Is Failing AI Clouds
  19. How Edera Neutralizes the Chaotic Deputy Problem
  20. What Zones Are and How Edera Uses Them
  21. Why Hardened Containers Aren’t Enough for Runtime Security
  22. Paravirtualization Explained Simply
  23. How Edera Enhances Confidential Computing Workloads
  24. Rob Gil on AI Security, Strategy, and Board-Level Priorities
  25. Why Data Warehouses Need Isolation for Untrusted Code
  26. Apple PCC vs. Confidential Computing: What’s the Difference?
  27. How to Secure Agentic AI With Hardened Runtime Isolation
  28. Hardened Runtime: The New AI and Cloud Security Perimeter
  29. Software License Agreement | Edera
  30. Fixing SandboxChanged Errors in Kubernetes Runtimes
  31. Edera Launches Hardened Runtime Standard for AI Security
  32. MCP Flaw Reveals Major AI Development Security Gaps
  33. Edera’s Isolation Blocks CVE-2025-23266 Escapes
  34. Explaining Remote Attestation in Confidential Computing
  35. AI Security Begins at the Infrastructure Layer
  36. Why Edera Rewrote Xen’s Control Plane in Rust
  37. What Engineers Should Know About Container Isolation
  38. A Runtime Built for Highly Regulated and Secure Systems
  39. What the Guillotine Paper Means for AI Hypervisors
  40. Why Showing Up Matters in Tech and Community
  41. How to Future-Proof AI Infrastructure at Scale
  42. How Edera Integrates With eBPF for Better Security
  43. Confidential Computing Explained Clearly
  44. Apple Validates Hypervisor-Isolated Containers—Why It Matters
  45. Celebrating LGBTQ+ Innovators in Tech History
  46. Meet Cedar Sunbeam: Edera’s Pawsitivity Pal
  47. How Edera Turns Container Alerts Into Actionable Insights
  48. Edera Performance Benchmarks: Security Without Sacrifice
  49. Secure-by-Default Isolation for Privileged Containers
  50. How Workload Identity Strengthens Sovereign AI
  51. How Edera Accelerates Confidential Computing Adoption
  52. Why Namespace Isolation Isn’t Security
  53. What Gardening Teaches Us About Open Source Work
  54. Edera 1.0 Launches With Hardened Runtime Security
  55. Styrolite: A New Rust-Built Linux Container Runtime
  56. Defining Container Isolation for Modern Multi-Tenant Cloud
  57. Edera Joins CNCF and Linux Foundation Ahead of KubeCon
  58. Why Kubernetes Overprovisioning Burns Cloud Budget
  59. Isolation Without Compromise: A Recipe for Security
  60. Strong Isolation That Also Cuts Cloud Costs
  61. Edera Raises $15M to Advance Cloud and AI Security
  62. 2024 Exploitation Trends and the Shift Toward Prevention
  63. NVIDIA Toolkit Flaw Shows Why Strong Isolation Matters
  64. 7 NVIDIA GPU Flaws That Put AI Infrastructure at Risk

2024 18

  1. Edera Commits to CISA’s Secure by Design Principles
  2. New Tool Shows Whether You’re Safe From Container Escapes
  3. How Edera Isolates Kubernetes by Design
  4. A New Model for Kubernetes Trust Boundaries and Isolation
  5. How OpenPaX Brings Memory Safety Back to Linux Apps
  6. Why Psychological Safety Shapes Strong Security Teams
  7. Kim Scott on Leadership, Culture, and Radical Candor
  8. Building Lasting Security Foundations With Edera
  9. Why Isolation Stops NVIDIA AI Vulnerabilities Cold
  10. Edera’s $5M Seed Fuels Secure-By-Design Kubernetes
  11. Edera Raises $5M for Secure-by-Design Kubernetes Security
  12. Stephen Augustus on Open Source Leadership and Security
  13. Rethinking the Container Security Status Quo
  14. Meet Daisy: Another Pawsitivity Pal
  15. The Hidden Risks of Legacy Code in Modern Systems
  16. Privacy Policy | Edera
  17. Terms | Edera
  18. Joe Beda on Kubernetes, Security, and Community Insights

Undated 19

  1. Press | Edera
  2. Raves and Love | Edera
  3. Careers | Edera
  4. Edera for GPUs | Edera
  5. Edera for Containers | Edera
  6. Hardware-Isolated Containers for Kubernetes | Edera
  7. Architecting for Untrusted Code and AI | Edera
  8. New IDC Analyst Brief: Containment for AI Workloads | Edera
  9. ROI Opportunity Calculator for Agent Isolation | Edera
  10. Why container isolation isnt optional lessons from redishell
  11. Why edera built on xen a secure container foundation
  12. Why gpus are the weak link in ai security
  13. Why hybrid clouds are making a comeback with ai infrastructure
  14. Why i joined edera as field cto
  15. Xen vs kvm why xen offers superior security in virtualization
  16. Yolo mode for ai agents without the yolo running claude code with kernel isolation
  17. Your laptop is not a build system
  18. Your monitoring stack just became a rce vector a deep dive into the kubernetes nodes proxy rce
  19. Your pods kernel has better metrics than your monitoring stack