The control plane for confidential computing

MarbleRun makes it easy to deploy, scale, and verify SGX-based apps on Kubernetes. It runs alongside your favorite service mesh and takes care of all things confidential computing. It’s open source, written in Go, and truly cloud native.

📢 Announcing MarbleRun 0.5.0

Deploy your cluster on an even wider range of systems with generic DCAP support!


Everything always encrypted

All services run in secure enclaves; your data and code are encrypted even at runtime. Between enclaves, data is transmitted via mTLS.

End-to-end verifiability

Get cryptographic proof that the topology of your cluster adheres to a manifest defined in simple JSON.

Keep using your existing tools

Despite using the latest confidential-computing tech, MarbleRun works frictionless with K8s, Helm and normal services meshes like Istio or Linkerd.

Cloud native and cloud agnostic

MarbleRun is written in Go and uses standards like gRPC and HTTP REST. It scales and secures your apps in any cloud that has Intel SGX - like Azure.

Deploy your first app in minutes

Usability and simplicity (and security of course!) are our guiding principles. Porting and deploying existing distributed Go apps only takes a few simple steps.

Open source and open standards

MarbleRun is open source and builds upon the industry standard Open Enclave. It has support for EGo, Graphene, and Occlum based services.


Deploying and managing data-centric confidential applications in the cloud with EdgelessDB and MarbleRun

We show you how to easily get started with data-centric confidential computing applications by leveraging EdgelessDB and MarbleRun.

Confidential multi-stakeholder AI

We demonstrate how a multi-stakeholder scenario can be organized with MarbleRun through a common manifest.

Why services meshes?

We give intro to the service mesh concept and discuss crucial properties in the context of confidential computing.

An introduction to MarbleRun

We describe key features and the architecture of MarbleRun.

Running Graphene on MarbleRun

We give an intro to MarbleRun’s support for Graphene-based applications.

Running Occlum on MarbleRun

We give an intro to MarbleRun’s support for Occlum-based applications.