CanaryBit accelerates AI-driven security

The Aruba Cloud to protect sensitive data and develop advanced digital services.

The customer

Headquartered in Stockholm but with a strongly European footprint, CanaryBit is a company founded in 2020 that develops and provides cutting-edge cybersecurity solutions, focusing on data protection and regulatory compliance to help solve the problem faced by organizations that are reluctant to share their digital assets due to regulatory concerns, compliance needs, policy constraints and reputational risks.

The services offered, brought together within the Confidential Cloud suite, make it possible to create environments protected by Confidential Computing principles across various types of infrastructure, in a manner that is completely agnostic to the vendors used.

Particularly active in research, the company is pursuing a path toward developing next-generation technology solutions, such as homomorphic encryption and post-quantum computing, needed to guarantee state-of-the-art security for the data environments of customers active especially in the aerospace and defense, energy, automotive and cybersecurity sectors.

The need

Confidential Computing protects data even while it is in use, as well as at rest and in transit, across multiple partners.

The solution

A wider range of bare metal machines and more advanced models convinced CanaryBit to choose Aruba as a partner.

The benefits

Simplified provisioning, solid certifications and a concrete commitment to European technological sovereignty.

The need

Protecting data even while it is being processed

Confidential Computing is a fundamental technology aimed at creating a secure platform where different parties can collaborate, sharing information, data and applications while complying with reliable, verifiable governance constraints.

The core idea is to protect data not only when it is “at rest” (encrypted in storage) or “in transit” (encrypted during transmission), but especially when it is “in use,” i.e., while it is being processed.

Traditionally, in fact, data in use tends to be left unencrypted, leaving it exposed to potential unauthorized access or breaches. CanaryBit uses Confidential Computing as the cornerstone for protecting its infrastructure and guaranteeing end-to-end data security: a crucial solution for pooling digital assets among partners without giving up confidentiality or exclusive ownership of them.

CanaryBit began developing solutions of this kind by turning to large cloud providers, which at the time were the only ones able to supply the hardware platforms capable of supporting Confidential Computing's security mechanisms.

Wanting to build zero-trust solutions that were fully independent of the underlying infrastructure, however, the company soon needed to complement the cloud with the availability of physical machines in on-premise environments.

"We initially started with the first machines available from a foreign supplier, buying a server and thereby gaining access to the technology we needed", recalls Stefano Cucchiella, founder and CTO of CanaryBit. "Even though customer service wasn't satisfactory, at the time that was the only viable option. Then, as we grew, the need to frequently configure the physical machines, combined with the growth of our team, led to operational difficulties with team members getting in each other's way. This situation pushed us to acquire a larger number of physical machines".

The solution

Aruba bare metal servers to grow without limits

The search for an alternative supplier brought CanaryBit into contact with Aruba, whose range of options for provisioning bare metal servers immediately stood out as broader than that of the previous provider, with the added advantage of access to newer, more technologically advanced models.

The level of customer support service also proved to be in line with expectations:

"Aruba really satisfied us because it proved to be competent and extremely helpful. The combination of access to the machines and their related support is exactly what we were looking for, so we could focus on our work with the peace of mind of having the technology base we needed, without surprises or worries", says Cucchiella.

The benefits

A single partner, guaranteed European sovereignty

Choosing Aruba simplified machine procurement, allowing CanaryBit to work with a single provider to meet all the needs related to the different physical configurations the company needs to be able to experiment with.

This made it possible to create a complete “setup pool” on which to test tool and product suites, effectively replicating customers' typical on-premises environments through internally configured virtualizations.

Aruba's infrastructure-level certifications proved useful in attesting to the reliability and solidity of the environment, aligning with CanaryBit's commitment to European sovereignty and the transparency of the technology supply chain.

In fact, the company identifies its activities as “Made for Europe,” being strongly guided and shaped by European Union laws and regulations in order to position itself as an “EU Compliant” solution.

"We have committed to building an entirely European company, from investors to employees, promoting the concept of European sovereignty at both the technology and business level", Cucchiella explains. "With this in mind, we are heavily involved in European projects, which represent a valuable resource for funding product development as an alternative to traditional venture capital investors. Participating in European projects allows us to develop cutting-edge solutions and connect with potential customers"

Stefano Cucchiellafounder and CTO of CanaryBit

Future developments

Confidential Computing's current focus on processors and execution environments is about to be extended to the network side as well, through Trusted IO, a new technology dedicated to protecting network interfaces, which CanaryBit intends to explore with Aruba as a potential partner.

The company's strategic development also envisages the gradual, ongoing evolution of its server fleet: expanding capacity and resources will in fact be necessary both to create a dedicated Confidential AI offering, with secure environments for various artificial intelligence activities, and to implement Confidential Computing solutions with next-generation GPU servers.