“In other words, we run a VM per customer.”
Thinkst gives every Canary customer its own EC2 instance and lets the AWS hypervisor be the security boundary. Mean load sits around 0.04. That buys thousands of mostly idle machines and a bill that grows linearly with customers. In exchange, a bug exposes one tenant instead of all of them. Shared multi-tenant infrastructure is cheaper right up until the breach that hits every customer at once.