tech from europe

ProvenCore

🇫🇷 FR

Formally verified secure OS and TEE for microprocessors

GDPRCommon Criteria EAL7
ProvenCore is a secure operating system and trusted execution environment for microprocessors, built by French cybersecurity firm ProvenRun. It provides a formally verified microkernel with strong isolation between the kernel and trusted applications, ensuring resilience even if the surrounding Linux environment fails. Supports ARM Cortex-A and RISC-V architectures, with SDK and GlobalPlatform TEE integration.

Features

Core architecture and isolation

  • Formally verified microkernel with minimal codebase
  • Isolation between kernel and Trusted Applications
  • Protection of application integrity and sensitive operations
  • Communication limited to authorized applications and processes

Security services and root of trust

  • Secure key storage and key-management services
  • Cryptographic operations
  • True random number generation (TRNG)
  • Secure firmware updates
  • Runtime integrity monitoring
  • Trusted UI

Resilience

  • Trusted Applications remain operational if Linux normal world fails or crashes
  • Reduces denial-of-service risk

Certification and standards

  • Common Criteria EAL7
  • FIPS 140-3 alignment
  • SESIP, PSA, CSPN, BSZ, and eIDAS compliance or alignment
  • Applications can be added or updated without jeopardizing existing certifications

Developer tools and compatibility

  • SDK with APIs, documentation, and debugging tools
  • Reusable libraries
  • Alignment with GlobalPlatform TEE specifications
  • Supports reuse of OP-TEE Trusted Applications

Hardware and platform compatibility

  • SiFive WorldGuard integration for RISC-V
  • Deployment on SiFive Intelligence X280
  • Xilinx Zynq UltraScale+ platforms
  • STMicroelectronics STM32L5
  • Kalray MPPA processors
  • ASPEED BMC platforms with OpenBMC compatibility

Pricing

Pricing available on request from the vendor.

Work at ProvenCore?

We could not yet verify a single trust point for you against a public source, so there is no badge to issue — it carries a check date, and we will not print one we did not earn. Point us at a public page (a DPA, a trust centre, a certificate, an imprint) and we will re-check; the badge follows automatically.

Claiming the profile with a work email gets you a form for correcting anything we got wrong, and a note whenever we re-check you.

Claim this profile →

Something wrong on this page? Write to hello@tech-from-europe.eu with a public link and we will re-check it.

Integrations

SiFive WorldGuardGlobalPlatform TEEOP-TEESiFive Intelligence X280Xilinx Zynq UltraScale+STMicroelectronics STM32L5Kalray MPPAASPEED BMCOpenBMC

ProvenCore: frequently asked questions

Which tools does ProvenCore integrate with?
ProvenCore connects with SiFive WorldGuard, GlobalPlatform TEE, OP-TEE, SiFive Intelligence X280, Xilinx Zynq UltraScale+, STMicroelectronics STM32L5, Kalray MPPA and ASPEED BMC, plus 1 more integrations we found.

Feature, pricing and integration details are based on web research (as of 2026-10-07), without guarantee, errors are possible. The vendor's website prevails.