SciTransfer
UNICORE · Project

Secure Lightweight Virtual Machines You Can Build and Deploy Like Regular Apps

digitalPilotedTRL 7

Imagine you want to run an app in the cloud securely, but your two options are either a heavy, expensive virtual machine or a lightweight but less secure container. UNICORE built a toolkit that gives you the best of both worlds — tiny virtual machines called unikernels that are as secure as full VMs but as light and fast as containers. Think of it like stripping a car down to just the engine and wheels needed for one specific route — nothing extra to break or get hacked. The toolkit makes building these stripped-down systems as simple as compiling a normal application.

By the numbers
EUR 4,322,297
Total EU funding for unikernel toolkit development
12
Consortium partners across industry and academia
9
Countries represented in the consortium
7
Industry partners involved in development and testing
26
Total deliverables produced
3
SMEs in the consortium with commercial exploitation interest
The business problem

What needed solving

Companies running cloud workloads face an uncomfortable choice: use containers that are fast but vulnerable to security breaches, or use full virtual machines that are secure but expensive and resource-heavy. Unikernels could solve this, but building them has been prohibitively complex and time-consuming, keeping this technology locked in research labs instead of production environments.

The solution

What was built

UNICORE built a common code base and toolkit for creating unikernels — ultra-lightweight virtual machines — from existing applications. The project delivered a complete API and library implementation with security primitives, deployment tools, and validated everything through multiple real-world use cases across 12 partners in 9 countries.

Audience

Who needs this

Cloud service providers looking to offer more secure hosting without performance penaltiesIoT platform companies needing lightweight secure OS for edge devicesEnterprise IT departments running security-sensitive workloads in shared infrastructureManaged security service providers offering isolated execution environmentsDevOps teams wanting VM-level isolation with container-like deployment speed
Business applications

Who can put this to work

Cloud Computing & Data Centers
enterprise
Target: Cloud service providers and managed hosting companies

If you are a cloud provider dealing with the tradeoff between container speed and VM security — this project developed a common code base and deployment tools that let you run unikernels as lightweight as containers but with the isolation of virtual machines. The toolkit was validated through multiple operational use cases across a 12-partner consortium with 7 industry players.

IoT & Edge Computing
any
Target: IoT platform companies and embedded systems integrators

If you are an IoT company struggling to run secure software on resource-constrained devices — this project built lean, efficient operating system images specifically designed for devices with limited memory and processing power. The final API and library implementation covers all functionality needed for real deployment scenarios, not just lab demos.

Financial Services & Cybersecurity
enterprise
Target: Banks, fintech firms, and security-sensitive enterprises

If you are a financial institution that needs to isolate workloads securely without the overhead cost of full virtual machines — this project created security and safety primitives along with verification and validation tools for the generated software. The EUR 4,322,297 project delivered deployable tools tested across use cases in 9 countries.

Frequently asked

Quick answers

What would it cost to adopt UNICORE's unikernel toolkit?

The project's outputs are open-source tools and APIs, so there is no licensing fee for the core technology. Integration costs would depend on your existing infrastructure and the complexity of migrating workloads from containers or VMs. Based on available project data, the toolkit was designed to make unikernel creation 'as easy as compiling an app for an existing OS,' which suggests reduced development time compared to building unikernels from scratch.

Can this scale to production workloads in a real data center?

The project completed a 'Final Deployment, Evaluation and Market Impact' deliverable that included performance evaluation of all use cases in operational settings. With 7 industry partners actively involved in development and testing, the tools were built for production scenarios, not just research labs. However, scaling details would need to be verified through the project's final reports.

Who owns the intellectual property and how is it licensed?

The project was funded under Horizon 2020 as an Innovation Action (IA), meaning IP typically stays with the consortium partners who created it. With 3 SMEs and 7 industry partners in the consortium, commercial exploitation plans were part of the final deliverable on market impact. Specific licensing terms would need to be discussed with the coordinator at Universitatea Politehnica din Bucuresti.

How does this compare to existing container solutions like Docker or Kubernetes?

Unikernels eliminate the shared OS kernel that makes containers vulnerable to breakout attacks, providing VM-level isolation at near-container performance. The UNICORE toolkit addresses the main barrier to unikernel adoption — the 'overwhelming development time and costs' — by automating the build process through a common code base. This means you get better security without sacrificing the speed and efficiency containers offer.

What specific applications were tested during the project?

The project mentions web server and Python unikernel applications as early examples supported by the initial API implementation. Multiple use cases were deployed and evaluated across the consortium, with the final deliverable covering all functionality needed by project use cases. Detailed performance results are available in the 26 deliverables produced.

Is this ready for regulated industries with compliance requirements?

The project developed verification and validation tools specifically for the generated software, along with dedicated security and safety primitives. These features were designed to support compliance-sensitive deployments. Based on available project data, the security primitives were implemented in both initial and final versions, suggesting iterative hardening through testing.

Consortium

Who built it

The UNICORE consortium is strongly industry-oriented with 7 out of 12 partners (58%) coming from industry, including 3 SMEs. This is a good sign for commercial viability — the technology was not built in an academic vacuum. The consortium spans 9 countries (BE, CH, DE, ES, FR, IL, IT, NL, RO), covering major European cloud and tech markets. The coordinator is Universitatea Politehnica din Bucuresti in Romania, a well-known technical university. The mix of 4 universities providing research depth and 7 industry players driving practical use cases suggests the outputs are designed for real-world adoption, not just publications.

How to reach the team

Coordinator is Universitatea Politehnica din Bucuresti (Romania). SciTransfer can facilitate a direct introduction to the project team.

Next steps

Talk to the team behind this work.

Want to explore how unikernel technology could improve your cloud security and reduce infrastructure costs? SciTransfer can connect you directly with the UNICORE team and provide a tailored briefing for your use case.