Caution is a hosting platform aimed at teams running workloads they cannot afford to have tampered with or exfiltrated, such as AI inference, crypto custody, fintech ledgers, and healthcare systems. Developers deploy their software into secure enclaves and then hand customers, auditors, or counterparties a cryptographic proof that the exact release approved in the build pipeline is what is actually executing in production, rather than an opaque binary they have to take on faith. The company pairs reproducible builds, so an enclave image can be independently rebuilt from source and matched against what is deployed, with multi-hardware attestation, so proofs do not rest on a single vendor's root of trust like Intel TDX, AMD SEV, or AWS Nitro.
The launch matters now because confidential compute has largely stayed in the "trust us" zone, where attestation confirms code has not changed at runtime but cannot confirm what the code originally was. Caution's argument is that attestation without reproducible builds is still a black box, since there is no way to prove the code in the enclave matches the published source. The company positions the platform as fully open source infrastructure that customers and outside reviewers can inspect, which is unusual for hosting products in this category. It is currently in private beta, with access gated through a conversation with their engineering team.
Caution is part of Y Combinator's S26 batch and was founded by Anton Livaja, CEO, and Lance Vick, CTO, both longtime security engineers channeling prior work securing high-value systems into the product. For founders and operators evaluating where to put sensitive services, the launch is worth a look as an alternative to standard cloud hosting when the question "what is actually running on that server right now" has to be answerable with evidence rather than a status page.
Comments (15)
Sign in to join the discussion.
P
Priya RaghavanAug 4, 2026
The pitch is tight but I need to know: is the demo hitting a real enclave or is that a very confident loading spinner?
M
Moussa DembéléAug 4, 2026
Deploying to enclaves in minutes is a bold promise. What happens when a customer's compliance team asks for the attestation trail six months later?
T
Tomas LindqvistAug 4, 2026
Attestation as a product feature is one of those things every security team asks for and then quietly forgets to implement. Curious how you handle key rotation without breaking the proof chain.
L
Lucia SombraAug 4, 2026
Feels adjacent to what Fly and Turnkey are circling from different angles. The verifiable prod release angle is the sharpest wedge I've seen in the space.
K
Kwame O.Aug 4, 2026
"software you can't afford to have hacked" is such a menacing tagline. Half your leads are going to arrive already sweating.
R
Reyna AlcázarAug 4, 2026
Every enclave demo I've ever seen works flawlessly on stage and then falls apart the moment a real workload with real dependencies shows up. Prove me wrong.
M
Mei TanakaAug 4, 2026
Docs or it didn't ship. Where's the SDK repo and does the quickstart actually take minutes or is that marketing minutes?
F
Farida NasserAug 4, 2026
S26 batch already flexing. The tweet copy reads like a founder who's had this exact argument with a CISO 40 times.
C
Chidi OkaforAug 4, 2026
How small is the team behind this? Enclave hosting is not a two-person weekend project so I'm genuinely curious about the shape of the crew.
R
Ravi J.Aug 4, 2026
First 10 seconds of the launch video do their job but the cut to the dashboard is jarring. Someone tell the editor about cross-fades.
Q
quietsageAug 4, 2026
You don't get to say your binary is trustworthy. The math does.
J
Jorge VillanuevaAug 4, 2026
We tried to ship something like this internally around 2020 and it died in a security review meeting. Glad someone is doing it as an actual product.
A
Anya VolkovaAug 4, 2026
The landing page buries the deploy flow under three paragraphs of trust language. Show the terminal in the hero, not the manifesto.
H
Hana K.Aug 4, 2026
Been three weeks out from launching my own security thing for about eight months. This tweet just made me close my laptop and rethink my life.
I
Ilya BergmanAug 4, 2026
Building in the runtime security space and honestly this framing is cleaner than what most of us have been using. Slightly annoyed, mostly impressed.
Work With Us
Book an intro call to explore our suite of services. We might have a waitlist.
Caution
Know what runs on a server
Know what runs on a server
Tags
TLVC Rating
Community Rating
No ratings yet
to rate this launch.
Caution is a hosting platform aimed at teams running workloads they cannot afford to have tampered with or exfiltrated, such as AI inference, crypto custody, fintech ledgers, and healthcare systems. Developers deploy their software into secure enclaves and then hand customers, auditors, or counterparties a cryptographic proof that the exact release approved in the build pipeline is what is actually executing in production, rather than an opaque binary they have to take on faith. The company pairs reproducible builds, so an enclave image can be independently rebuilt from source and matched against what is deployed, with multi-hardware attestation, so proofs do not rest on a single vendor's root of trust like Intel TDX, AMD SEV, or AWS Nitro. The launch matters now because confidential compute has largely stayed in the "trust us" zone, where attestation confirms code has not changed at runtime but cannot confirm what the code originally was. Caution's argument is that attestation without reproducible builds is still a black box, since there is no way to prove the code in the enclave matches the published source. The company positions the platform as fully open source infrastructure that customers and outside reviewers can inspect, which is unusual for hosting products in this category. It is currently in private beta, with access gated through a conversation with their engineering team. Caution is part of Y Combinator's S26 batch and was founded by Anton Livaja, CEO, and Lance Vick, CTO, both longtime security engineers channeling prior work securing high-value systems into the product. For founders and operators evaluating where to put sensitive services, the launch is worth a look as an alternative to standard cloud hosting when the question "what is actually running on that server right now" has to be answerable with evidence rather than a status page.
Comments (15)
The pitch is tight but I need to know: is the demo hitting a real enclave or is that a very confident loading spinner?
Deploying to enclaves in minutes is a bold promise. What happens when a customer's compliance team asks for the attestation trail six months later?
Attestation as a product feature is one of those things every security team asks for and then quietly forgets to implement. Curious how you handle key rotation without breaking the proof chain.
Feels adjacent to what Fly and Turnkey are circling from different angles. The verifiable prod release angle is the sharpest wedge I've seen in the space.
"software you can't afford to have hacked" is such a menacing tagline. Half your leads are going to arrive already sweating.
Every enclave demo I've ever seen works flawlessly on stage and then falls apart the moment a real workload with real dependencies shows up. Prove me wrong.
Docs or it didn't ship. Where's the SDK repo and does the quickstart actually take minutes or is that marketing minutes?
S26 batch already flexing. The tweet copy reads like a founder who's had this exact argument with a CISO 40 times.
How small is the team behind this? Enclave hosting is not a two-person weekend project so I'm genuinely curious about the shape of the crew.
First 10 seconds of the launch video do their job but the cut to the dashboard is jarring. Someone tell the editor about cross-fades.
You don't get to say your binary is trustworthy. The math does.
We tried to ship something like this internally around 2020 and it died in a security review meeting. Glad someone is doing it as an actual product.
The landing page buries the deploy flow under three paragraphs of trust language. Show the terminal in the hero, not the manifesto.
Been three weeks out from launching my own security thing for about eight months. This tweet just made me close my laptop and rethink my life.
Building in the runtime security space and honestly this framing is cleaner than what most of us have been using. Slightly annoyed, mostly impressed.