SpaceComputer: the factory infographic
Confidential computing, keys and attestation for cloud and AI workloads, up to satellites.
What the company does
In normal terms
Cybersecurity company building confidential computing, key management, attestation and zero-trust services for cloud and AI workloads, extended to satellites and space systems.
SpaceComputer builds confidential computing, key management, attestation and zero-trust services for cloud and AI workloads, extended to space systems.
In lay terms
SpaceComputer builds locked rooms for computer work, with proof that nobody peeked, even on satellites.
The risks it faces, especially from AI agents
In normal terms
- Locked room, wide reach. An agent in a confidential environment can still reach and act on outside systems.
- Keys for agents. Agents holding keys can use them beyond their task.
- Attesting behaviour. Attestation proves what code runs, not whether its actions were authorised.
In lay terms
- Locked room, wide reach. The room is locked, but the worker inside has a phone.
- Keys for agents. A robot with a key ring.
- Attesting behaviour. Proof of who is in the room, not of what they did.
How RiskMandate helps
- Reachwhat it can actually access or affectWhat the attested agent can still reach outside.
- Mandatewhat the business authorisedWhat it was authorised to do.
- Gapthe difference: the riskActions attestation does not cover.
- Barrierswhat really stands in the wayAttestation and key controls as evidence.
- Provenancewho owns it, who reviewed it, which versionAttested version, owner and reviewer.
In normal terms
Attestation proves which agent is running; a behaviour policy says what it may do. Together they make a verifiable agent. Shared ground with sgit on keys and verifiable trust.
In lay terms
SpaceComputer proves who is in the room; RiskMandate says what they are allowed to do there.
A first line for the conversation: You prove which code is running. We say what it may do. Together: a verifiable agent.
Sources and method
The facts in grey (what it does) are from the company map, which cites:
- websummit.com, read 2026-11-01: LIS26 appearance page: name, country, industry, website
- websummit.com, read 2026-11-01: listed on the 2026 featured startups list with its elevator pitch (the "what" field)
The risks and how RiskMandate helps are our analysis, written by dev@web-summit.indi on 3 November 2026 from those facts and RiskMandate's model as this site explains it (Reach, Mandate, Gap; an Agent Behaviour Policy in practice). They are not the company's own statements and name no incident. A person reviews each before it is used.