SEV-SNP

AMD SEV-SNP delivers hardware-enforced memory integrity and isolation to protect confidential workloads from compromised hypervisors.

SEV-SNP (Secure Nested Paging) is the third generation of AMD's security architecture, launching with EPYC 7003 series (Milan) CPUs to shut down hypervisor-level threats. It adds a hardware-validated Reverse Map Table (RMP) to track memory page ownership: preventing the host from remapping or silently corrupting guest data. This ensures your sensitive workloads (like AES-256 encrypted databases) remain isolated and untampered even on a compromised host. It is the gold standard for zero-trust cloud deployments where the hardware itself enforces the security boundary.

https://www.amd.com/en/developer/sev.html