If you are a cloud provider dealing with the tradeoff between container speed and VM security — this project developed a common code base and deployment tools that let you run unikernels as lightweight as containers but with the isolation of virtual machines. The toolkit was validated through multiple operational use cases across a 12-partner consortium with 7 industry players.
Secure Lightweight Virtual Machines You Can Build and Deploy Like Regular Apps
Imagine you want to run an app in the cloud securely, but your two options are either a heavy, expensive virtual machine or a lightweight but less secure container. UNICORE built a toolkit that gives you the best of both worlds — tiny virtual machines called unikernels that are as secure as full VMs but as light and fast as containers. Think of it like stripping a car down to just the engine and wheels needed for one specific route — nothing extra to break or get hacked. The toolkit makes building these stripped-down systems as simple as compiling a normal application.
What needed solving
Companies running cloud workloads face an uncomfortable choice: use containers that are fast but vulnerable to security breaches, or use full virtual machines that are secure but expensive and resource-heavy. Unikernels could solve this, but building them has been prohibitively complex and time-consuming, keeping this technology locked in research labs instead of production environments.
What was built
UNICORE built a common code base and toolkit for creating unikernels — ultra-lightweight virtual machines — from existing applications. The project delivered a complete API and library implementation with security primitives, deployment tools, and validated everything through multiple real-world use cases across 12 partners in 9 countries.
Who needs this
Who can put this to work
If you are an IoT company struggling to run secure software on resource-constrained devices — this project built lean, efficient operating system images specifically designed for devices with limited memory and processing power. The final API and library implementation covers all functionality needed for real deployment scenarios, not just lab demos.
If you are a financial institution that needs to isolate workloads securely without the overhead cost of full virtual machines — this project created security and safety primitives along with verification and validation tools for the generated software. The EUR 4,322,297 project delivered deployable tools tested across use cases in 9 countries.
Quick answers
What would it cost to adopt UNICORE's unikernel toolkit?
The project's outputs are open-source tools and APIs, so there is no licensing fee for the core technology. Integration costs would depend on your existing infrastructure and the complexity of migrating workloads from containers or VMs. Based on available project data, the toolkit was designed to make unikernel creation 'as easy as compiling an app for an existing OS,' which suggests reduced development time compared to building unikernels from scratch.
Can this scale to production workloads in a real data center?
The project completed a 'Final Deployment, Evaluation and Market Impact' deliverable that included performance evaluation of all use cases in operational settings. With 7 industry partners actively involved in development and testing, the tools were built for production scenarios, not just research labs. However, scaling details would need to be verified through the project's final reports.
Who owns the intellectual property and how is it licensed?
The project was funded under Horizon 2020 as an Innovation Action (IA), meaning IP typically stays with the consortium partners who created it. With 3 SMEs and 7 industry partners in the consortium, commercial exploitation plans were part of the final deliverable on market impact. Specific licensing terms would need to be discussed with the coordinator at Universitatea Politehnica din Bucuresti.
How does this compare to existing container solutions like Docker or Kubernetes?
Unikernels eliminate the shared OS kernel that makes containers vulnerable to breakout attacks, providing VM-level isolation at near-container performance. The UNICORE toolkit addresses the main barrier to unikernel adoption — the 'overwhelming development time and costs' — by automating the build process through a common code base. This means you get better security without sacrificing the speed and efficiency containers offer.
What specific applications were tested during the project?
The project mentions web server and Python unikernel applications as early examples supported by the initial API implementation. Multiple use cases were deployed and evaluated across the consortium, with the final deliverable covering all functionality needed by project use cases. Detailed performance results are available in the 26 deliverables produced.
Is this ready for regulated industries with compliance requirements?
The project developed verification and validation tools specifically for the generated software, along with dedicated security and safety primitives. These features were designed to support compliance-sensitive deployments. Based on available project data, the security primitives were implemented in both initial and final versions, suggesting iterative hardening through testing.
Who built it
The UNICORE consortium is strongly industry-oriented with 7 out of 12 partners (58%) coming from industry, including 3 SMEs. This is a good sign for commercial viability — the technology was not built in an academic vacuum. The consortium spans 9 countries (BE, CH, DE, ES, FR, IL, IT, NL, RO), covering major European cloud and tech markets. The coordinator is Universitatea Politehnica din Bucuresti in Romania, a well-known technical university. The mix of 4 universities providing research depth and 7 industry players driving practical use cases suggests the outputs are designed for real-world adoption, not just publications.
- UNIVERSITATEA POLITEHNICA DIN BUCURESTICoordinator · RO
- UNIVERSITE DE LIEGEparticipant · BE
- NEXTWORKS SRLparticipant · IT
- CORRECT NETWORKS SRLparticipant · RO
- STICHTING VUparticipant · NL
- ECOLE POLYTECHNIQUE FEDERALE DE LAUSANNEparticipant · CH
- CONSORCI DE SERVEIS UNIVERSITARIS DE CATALUNYAparticipant · ES
- ACCELLERANparticipant · BE
- EKINOPS FRANCEparticipant · FR
- NEC LABORATORIES EUROPE GMBHparticipant · DE
- ORANGE ROMANIA SAparticipant · RO
- IBM ISRAEL - SCIENCE AND TECHNOLOGY LTDparticipant · IL
Coordinator is Universitatea Politehnica din Bucuresti (Romania). SciTransfer can facilitate a direct introduction to the project team.
Talk to the team behind this work.
Want to explore how unikernel technology could improve your cloud security and reduce infrastructure costs? SciTransfer can connect you directly with the UNICORE team and provide a tailored briefing for your use case.