secretflow/spu

SPU (Secure Processing Unit) aims to be a provable, measurable secure computation device, which provides computation ability while keeping your private data protected.

What it solves

SPU (Secure Processing Unit) provides a way to perform computations on private data while keeping that data protected. It acts as a programmable device for secure computation, ensuring that sensitive information remains private during processing.

How it works

SPU utilizes a secure runtime that evaluates XLA-like tensor operations. It uses Secure Multi-Party Computation (MPC) as its underlying evaluation engine to ensure that privacy is provably protected during the computation process.

Who it’s for

It is primarily designed to be used as an underlying secure computing device within the SecretFlow framework, rather than as a standalone tool for end-users.

Highlights

  • Provable Security: Focuses on providing a measurable and provable level of security for data privacy.
  • XLA-like Operations: Supports tensor operations similar to XLA for efficient computation.
  • MPC-powered: Uses Secure Multi-Party Computation as the core engine for the privacy-preserving mechanism.
  • Hardware Support: Compatible with various platforms including Linux (x86_64 and aarch64), macOS, and experimental support for NVIDIA GPUs via CUDA.

Related

  • Project
    BUAA-BDA/OpenHuFu

    An open-source data federation system for efficient and secure query processing using secure multi-party computation (SMC) to prevent raw data sharing.

  • Project
    tensorflow/tensorflow

    An end-to-end open source platform for machine learning that provides tools and libraries for building and deploying ML-powered applications.

  • Project
    OpenMined/TenSEAL

    TenSEAL is a Python library for homomorphic encryption on tensors, built on Microsoft SEAL. It lets you run arithmetic operations on encrypted data, enabling privacy-preserving machine learning without exposing raw information.

  • Project
    Dstack-TEE/dstack

    dstack is an open-source framework for confidential AI that allows you to deploy Docker containers into hardware-protected virtual machines, ensuring data privacy and cryptographic verifiability.

  • Project
    ASCIT31/Dark-Moon

    DarkMoon is an open‑source, CLI‑driven platform that uses a local or cloud LLM to autonomously run full penetration‑testing campaigns. It discovers the target, dispatches ~50 specialist agents (web, AD, Kubernetes, cloud, AI endpoints, etc.), executes real offensive tools through a logged MCP layer, and records the exact command and raw output as proof. Results are emitted as JSON/Markdown with severity, CVSS and MITRE tags. Integrations exist for GitHub, GitLab, Jenkins, IDEs and monitoring tools. A paid Pro tier adds a web dashboard and automated remediation PRs. The tool runs in Docker, supports privacy‑preserving tokenisation, and was benchmarked to find 57 bugs in OWASP Juice Shop in ~28 min.