What CHERI Alliance does

CHERI Alliance is a non-profit Community Interest Company (C.I.C.) based in Cambridge, UK, formed in 2024 to drive global industrial adoption of CHERI (Capability Hardware Enhanced RISC Instructions), a hardware-based memory protection technology developed over more than a decade by the University of Cambridge and SRI International with funding from DARPA, UKRI, EPSRC, and ERC. The organization coordinates an ecosystem of CPU IP vendors (Arm, Codasip, Microsoft, lowRISC, SCI Semiconductor, Capabilities Limited), operating system projects (CHERI Linux, CheriBSD, seL4, Zephyr, FreeRTOS, CHERIoT RTOS), and toolchains (LLVM, QEMU, GDB, U-boot) through 16 Working Groups, an Ambassador Program, and recurring conferences (CHERI Blossoms, CHERITech).

CHERI itself extends conventional ISAs (Arm, x86, RISC-V, MIPS) with unforgeable capabilities that replace pointers, enforcing fine-grained memory bounds and scalable software compartmentalization in silicon. It claims to mitigate roughly 70% of CVEs that are memory-safety related, requires only about 0.5% of C/C++ code lines to be modified for porting, and adds less than 3% runtime overhead. The Alliance's commercial activity centers on the CHERI Enabled certification program — £1,000 for members and £3,000 for non-members for a first certification, with reduced recertification fees — and on undisclosed membership dues from technology providers, systems integrators, academic institutions, and government/public-sector organizations.

Its primary customers are technology providers building CHERI-enabled processors, tools, and chips, and downstream systems integrators deploying those into automotive, IoT, defense, cloud, browser, and operating-system products. Revenue and headcount are not publicly disclosed; the organization operates with 1-10 staff and is governed by a board drawn from Codasip, lowRISC, University of Cambridge, Google, Capabilities Limited, and NCSC.

Name

CHERI Alliance

Legal name

CHERI Alliance

Website

https://cheri-alliance.org

Company type

Private

Founded year

2024

Operating status

Operating

Headcount range

11–50 employees

Short description

CHERI Alliance is a UK-based non-profit Community Interest Company that coordinates global adoption of CHERI hardware-based memory protection through membership, working groups, conferences, and a CHERI Enabled certification program for semiconductor, systems, and government organizations.

Ownership category

akta.pro rank

Headquarters

HQ city

Cambridge

HQ country

United States

HQ region

North America

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Marketing or Sales, Technology or R&D

Revenue model

1. Membership fees: Organizations join the CHERI Alliance to collaborate on standardization, promotion, and education of CHERI technology. Membership provides access to Working Groups, technical resources, networking, and visibility within the ecosystem.
2. Product certification fees: The CHERI Enabled certification program charges fees for product certification: £3,000 for non-members (first certification), £1,000 for members; recertification fees are £1,500 for non-members and £500 for members.

Pricing tiers

Go-to-market motion1 record

Distribution channels1 record

Marketing channels8 records

Core offering

CHERI Alliance is an industry-led non-profit consortium that promotes the global adoption of CHERI (Capability Hardware Enhanced RISC Instructions) technology, a hardware-based memory protection and software compartmentalization architecture. It coordinates working groups, runs the CHERI Enabled certification program for compliant products, organizes community events, and manages the CHERI trademark and ecosystem across industry, academia, and government.

Product overview

CHERI Alliance operates as a security technology standards organization promoting CHERI (Capability Hardware Enhanced RISC Instructions) - a hardware-based memory protection technology. The organization does not offer a single unified product but rather manages a portfolio of CHERI-enabled hardware IP cores (CHERIoT Ibex, X730, CHERIoT Kudu, CVA6-CHERI), development platforms (Arm Morello boards, Sonata, X730 Evaluation Kit), operating systems (CHERI Linux, CheriBSD, seL4, CHERIoT RTOS, FreeRTOS, Zephyr), and software development tools (LLVM compiler, QEMU emulator, GDB debugger, U-boot bootloader). The ecosystem also includes a certification program (CHERI Enabled) that validates products correctly implementing CHERI technology. The technology provides fine-grained memory protection and scalable software compartmentalization by extending conventional hardware ISAs with capabilities that replace traditional pointers.

Differentiator

Problem solved

Functional benefit

Brands

• CHERI Enabled: A certification program logo identifying products certified by the CHERI Alliance as correctly implementing CHERI technology.
• CHERI Blossoms
• CHERITech
• CHERI Alliance Ambassador Program

Products and services

• CHERI Enabled Certification Program Certification program validating products that correctly implement CHERI technology. Certified products may display the CHERI Enabled logo. Fees are £3,000 for non-members and £1,000 for members for first certification, with recertification at £1,500 and £500 respectively.
• CHERI Alliance Membership Organizational membership providing access to Working Groups, technical resources, networking, reduced certification fees, and visibility within the CHERI ecosystem.
• Arm Morello Development Platform Development platform integrating CHERI technology into an ARMv8-A processor architecture, providing a complete environment for developing and testing secure-by-design software components.
• Sonata Development Platform Open-source CHERI-enabled development platform from lowRISC/Sunburst project, designed for high-integrity operational technology applications and available for purchase from Mouser.
• X730 Evaluation Kit Evaluation and development board from Codasip for prototyping with the X730 CHERI-RISC-V application processor.

Quantifiable outcome

• ~70% of CVEs prevented through memory safety
• +2 more outcomes

Segments4 records

Ideal customer profiles4 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature4 records

Partnerships

14 partnerships are on record, tiered core and secondary.

• University of CambridgecoreStrategic or Co-development PartnerThe CHERI Alliance builds on over a decade of pioneering research by the University of Cambridge. The university provides foundational research expertise and continues to drive CHERI research and standardization through the CHERI Research Centre.
• SRI InternationalcoreStrategic or Co-development PartnerSRI International co-developed CHERI technology with University of Cambridge over more than a decade of research. SRI continues to contribute to CHERI Working Groups and research efforts.
• The Capable HubcoreStrategic or Co-development PartnerThe Capable Hub strengthens the CHERI ecosystem by improving availability, quality, and upstream alignment of CHERI-enabled open-source software. It provides engineering resources and infrastructure.
• ArmcoreTechnology or IntegrationArm developed the Morello platform integrating CHERI technology into ARMv8-A processor architecture. Arm supports CHERI through the Digital Security by Design (DSbD) programme and provides Morello development boards.
• GooglecoreStrategic or Co-development PartnerGoogle supports CHERI development and has contributed to the ecosystem. Google researchers have presented on memory safety and CHERI at alliance events.
• MicrosoftcoreStrategic or Co-development PartnerMicrosoft supports CHERI technology and has developed CHERIoT, including the CHERIoT-Ibex processor core certified as CHERI Enabled. Microsoft contributes to Working Groups and ecosystem development.
• CodasipcoreStrategic or Co-development PartnerCodasip is a founding member of the CHERI Alliance and one of the most active industrial players. Codasip developed the X730, the first commercially licensable processor implementing CHERI-RISC-V, and contributes actively to Working Groups.
• lowRISCcoreStrategic or Co-development PartnerlowRISC develops open-source CHERI implementations including the Sonata board and CVA6-CHERI processor. lowRISC hosts Working Groups and contributes to open-source CHERI software ecosystem.
• SCI SemiconductorcoreStrategic or Co-development PartnerSCI Semiconductor developed the Iceni chip, a CHERI-enabled product, and contributes to CHERIoT development including the Kudu high-performance embedded processor. Active contributor to Working Groups.
• Capabilities LimitedcoreTechnology or IntegrationCapabilities Limited contributes to CHERI software ecosystem, develops CVA6-CHERI processor support, and participates in Working Groups including QEMU and seL4 integration.
• Wind RiversecondaryTechnology or IntegrationWind River is implementing CHERI support in VxWorks RTOS for safety-critical real-time and virtualized systems, contributing to seL4 Working Group.
• NCSC (National Cyber Security Centre)coreStrategic or Co-development PartnerNCSC supports CHERI adoption and standardization efforts, with representatives contributing to Working Groups and events to advance cybersecurity by design.
• RISC-V InternationalcoreTechnology or IntegrationRISC-V International hosts the CHERI-RISC-V specification development and Special Interest Group, enabling standardized CHERI extensions for RISC-V architecture.
• Digital Security by Design (DSbD)coreStrategic or Co-development PartnerDSbD is a UK government initiative that helped promote and create a CHERI ecosystem, with the CHERI Alliance building on this work to extend CHERI adoption globally.

Scale indicators5 records

Recent moves6 records

Expansion highlights5 records

Broad incumbents

• Linux Foundation: Large, well-funded open-source foundation that hosts multiple industry-wide projects, working groups, and certification programmes. Directly comparable as a membership-driven technology consortium, but with far broader scope and resources than CHERI Alliance.

Direct peers

• Apache Software Foundation: Open-source software foundation running working groups, managing trademarks, and stewarding community-driven technology projects. Comparable as a member-funded standards/governance body for shared technology infrastructure.
• Eclipse Foundation: Open-source foundation hosting working groups and member-driven projects across embedded, IoT, and enterprise software. Similar member-fee and governance model to CHERI Alliance, especially on IoT/embedded tooling adjacencies.
• Wi-Fi Alliance: Industry consortium certifying Wi-Fi products and certifying member companies, with a comparable fee-for-certification and membership-fee revenue model. Operates in adjacent wireless/embedded technology standardisation.
• Bluetooth SIG: Technology consortium that drives industry adoption of a wireless standard through membership fees, certification programmes, and working groups. Analogous to CHERI Alliance in monetising ecosystem output via certification and member services.
• Khronos Group: Consortium defining open standards for graphics, compute, and sensor APIs (OpenGL, Vulkan, OpenCL). Highly comparable as an industry-led body with member fees, working groups, and a conformance certification programme.
• Cloud Native Computing Foundation (CNCF): Linux Foundation sub-foundation running Kubernetes and cloud-native standards through working groups, member programmes, and certifications. Comparable operating model for community-led infrastructure technology adoption.
• RISC-V International: Open hardware ISA consortium that hosts the CHERI-RISC-V specification under a Special Interest Group. Shares the same non-profit consortium model, member-driven governance, and standardisation mission for hardware architecture adoption.
• Trusted Computing Group: Industry standards body developing hardware-rooted security specifications (TPM, DICE, etc.) with a similar member-consortium model and certification programme structure. Comparable as a peer in defining and certifying hardware security technologies.

Emerging players

• Rust Foundation: Non-profit foundation stewarding the Rust programming language, the principal software-language competitor to CHERI for memory safety. Indirect peer - not a consortium on the same technology axis, but competing for the same regulatory-driven memory-safety narrative and member funding.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks5 records

Key highlights7 records

Customer concentration

• GitHubgithub.com/CHERI-Alliance
• YouTubeyoutube.com/@CHERI-Alliance
• LinkedInlinkedin.com/company/cheri-alliance

Revenue estimate

Valuation estimate

Number of profiles

Profiles9 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about CHERI Alliance