AMD SEV-SNP

SEV-SNP (Secure Nested Paging) is AMD's hardware-enforced confidential computing solution: it provides strong memory encryption and integrity protection for virtual machines running on EPYC processors.

SEV-SNP is the third generation of AMD Secure Encrypted Virtualization (SEV), available on AMD EPYC 7003 series and newer processors. It builds on SEV and SEV-ES by introducing hardware-based memory integrity protection, which actively mitigates malicious hypervisor-based attacks like data replay and memory re-mapping. This ensures the guest VM's data-in-use remains confidential and uncompromised within its Trusted Execution Environment (TEE), a critical feature for multi-tenant cloud and zero-trust environments. The technology also supports cryptographic attestation for remote verification of the VM's security posture.

https://www.amd.com/en/technologies/confidential-computing