Kerys YS::Desktop

YS::Desktop is a secure virtualization platform that lets organizations run multiple isolated virtual machines (Windows and Linux) on a single endpoint, replacing the need for separate physical workstations dedicated to different security contexts. The platform separates CPU cores dedicated to the hypervisor from those used by virtual machines and applies encryption at the hypervisor level to prevent side-channel attacks, aiming to provide isolation without degrading performance. Endpoints and VMs are organized into Security Domains (e.g., Corporate, Development, Restricted) that are managed from a central management console, providing visibility, governance, and compliance controls over the VM fleet. Administrators can define policies per domain, such as allowing, blocking, or requiring USB access, VPN connections, or additional authentication. Network connectivity can be configured in NAT mode (one IP per virtual machine) or Bridge mode (native IP access), with support for VLANs to integrate with existing network infrastructure and compatibility with static IPs used by traditional industrial controllers (PLCs). The product targets use cases including privileged access workstations, sensitive or regulated environments, development environments, and IT/OT convergence zones, and is used by organizations in industrial, aerospace, and critical infrastructure sectors.