Edera's $5M seed bets containers should run like virtual machines, not namespaces

Edera secures Kubernetes and AI workloads by changing how containers are run: isolation through virtualization rather than Linux namespaces.

Treating a container like a virtual machine guest — no shared kernel state, memory-safe Rust control plane — secures workloads by construction instead of by patching.

$5M seed led by 645 Ventures and Eniac Ventures, with FPV Ventures, Generationship, Precursor Ventures and Rosecliff Ventures; angels include Joe Beda and Filippo Valsorda.

Emily Long, former COO of unicorn Chainguard, co-founded Edera in April 2024 with Chainguard principal engineer Ariadne Conill and Alex Zenla, a former engineer who advised Google on IoT, to make infrastructure secure by default.

The seven-person company built two products: Protect Kubernetes, which isolates containers and eliminates container escapes, and Protect AI, which isolates workloads from the GPU driver and handles GPU configuration for AI workloads. It works anywhere containers run — public cloud, private cloud, on-premise — without virtualization extensions or custom infrastructure.

Containers share a kernel by design, so one escape compromises the host — virtualization removes that shared surface.

Kubernetes spread from web infrastructure into sensitive domains where 'good enough' isolation stopped being good enough.

AI workloads added a new unsolved surface: GPUs, whose drivers are outside most container security models.

Founders from Chainguard knew exactly where supply-chain and runtime security tooling left off.

When a security model is structurally flawed, patching it loses to replacing its foundation — and credibility comes from founders who have run the vulnerable systems themselves.

As of September 18, 2024, Edera was a seven-person company working with design partners and no paying customers, with a $5M seed to develop Protect Kubernetes and Protect AI.