Multi-tenancy is great, until one of your tenants starts acting shady. In the age of shared compute, containerized platforms often serve teams, partners, or even third-party users on the same infrastructure. But how do you prevent one “guest” from peeking into another’s room… or walking off with the furniture?

In this no-fluff, all-action talk explores how modern isolation CNCF Sandbox tools like Confidential Containers, Inclavare Containers, and Enarx offer hardware-backed protections that go far beyond traditional namespaces and seccomp profiles. Learn how features like encrypted memory, secure verification of workloads, and enclave-based runtimes help lock down containers without burning down your CI/CD pipeline.

Whether you're building a secure data science platform, internal ML hub, or a public-facing container platform, this talk shows you how to rent out your compute to sketchy tenants, without getting hacked.