Ross ROSS = Recommend OSS · open-source software intelligence for agents

enarx/enarx

Enarx: Confidential Computing with WebAssembly observed · 2026-08-28

github.com/enarx/enarx · homepage · Rust · Apache-2.0 (permissive) observed · 2026-08-28

Health v2 · maintenance only

52/100

  • Activity 65
  • Release rhythm 8
  • Longevity 100
How is this computed?

round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-03. Adoption (stars, forks) is never an input.

  • gap_med: n/a
  • age_days: 2555
  • days_rel: n/a
  • days_push: 211
  • n_releases_24m: 0

Full methodology

Adoption not part of the score

1425 stars · 158 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Enarx is an open-source command-line tool and runtime for running applications inside hardware Trusted Execution Environments (TEEs) such as Intel SGX and AMD SEV-SNP. It uses a WebAssembly (Wasm/WASI) runtime based on wasmtime so applications written in many languages can be deployed confidentially without rewrites, with hardware-neutral attestation.

Use cases

  • run a WebAssembly application inside an Intel SGX or AMD SEV-SNP enclave
  • deploy sensitive workloads to untrusted cloud hosts with data-in-use encryption
  • run the same wasm binary across different CPU architectures and TEE vendors
  • attest a remote enclave before sending it secrets or keys
  • publish and deploy wasm packages to a remote package host
  • process PII, healthcare, or financial data in compliance with GDPR or HIPAA
  • protect cryptographic key management and payment processing workloads

When to choose

  • you need confidential computing (data protection in use) without rewriting apps for a specific TEE SDK
  • you want hardware-vendor-neutral deployment of the same wasm artifact across SGX and SEV-SNP
  • you need remote attestation integrated into the deployment workflow
  • your workload is written in Rust, C/C++, Go, or another language with Wasm/WASI support

When to avoid

  • you need full native performance or system access beyond what WASI provides
  • your target hardware lacks SGX or SEV-SNP support (full TEE support requires Linux with KVM)
  • you need a general-purpose container or VM sandbox rather than a TEE-based runtime
  • you depend on languages or WASI features with only experimental tier support

Facets

cli-tool · maturity active

security cryptography interpreter deployment cli security cloud-computing developer-tools privacy infrastructure-as-code windows rust cli confidential-computing webassembly tee intel-sgx amd-sev-snp attestation wasm-runtime wasi linux macos

10 sources

Member repositories

RepositoryRoleHealth v2
enarx/enarxmain52

For agents

markdown · JSON · MCP: product_card(name="enarx/enarx")

Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem