YS::Desktop is a type 1 hypervisor for workstations from the French company Kerys Software. It runs several isolated environments, called security domains, each with one or more virtual machines, side by side on a single physical PC. It is aimed at privileged-access workstations, regulated or sensitive environments, development environments and IT/OT convergence zones. According to the vendor it separates the CPU cores of the hypervisor and the VMs and encrypts at hypervisor level. Administrators manage policy through a central management console that the customer deploys itself. YS::Desktop is installed as the first operating system on the workstation, via PXE, HTTP boot or a USB key.
Kerys Software SAS is based in Palaiseau, France; its legal notice names no parent company. The management console runs wherever the customer chooses; according to the vendor, Kerys has no visibility into the console or its configurations. Control over workstations and policy therefore stays with the organisation. For a European organisation this is self-hosted software from a French vendor, with no vendor cloud environment required.