Intel® Software Guard Extensions
Relentless Attention to Security Innovation. Our Work is Never Done.
Intel® Software Guard Extensions (Intel® SGX) helps protect data in use via unique application isolation technology. Protect selected code and data from modification using hardened enclaves with Intel SGX.
Typical security measures may assist data at rest and in transit, but often fall short of protecting data while it is actively used in memory.
Intel SGX helps protect data in use via application isolation technology. By protecting selected code and data from modification, developers can partition their application into hardened enclaves or trusted execution modules to help increase application security. To learn more about the enhanced security features of Intel SGX, download the Product Brief.
Explore new ways to enhance security protections. Increase data privacy and confidentiality via application isolation and hardware-based attestation.
Get Started
Take advantage of open-source and commercial solutions built on library operating system (LibOS) technology. One example of an open-source solution is Gramine. It allows for unmodified applications to be protected within an enclave while deploying to cloud service providers to speed your time to market. Other commercial LibOS offerings are available from companies such as Fortanix* and Scontain. You can also develop your own customized security solution using the robust SDKs and testing capabilities of Intel® DevCloud.
For Gramine
A library operating system for securing an existing Linux* application.
For Linux*
Use the Intel SGX SDK to create or adapt your Linux application.
For Windows*
Use the Intel SGX SDK to create or adapt your Windows* application.
Additional SDK Options
Download and use a third-party SDK.
Attestation
Intel SGX remote attestation is an important security feature that allows you to verify that your enclave is an Intel SGX enclave before you share data to it. With Intel SGX remote attestation, you can trust your data is running on a platform that has the latest security updates and information about the software running in the enclave. You gain the ability to have unique granular-level control and protection at both the enclave and application level.
Ecosystem
See all the solutions and services that Intel's partners have built and are offering to customers using Intel SGX.