The Vir2us controller is a lightweight client that resides within the kernel and attests the computers bios on boot up to eliminate low-level exploits and corruption. This sealed controller serves up virtual isolated computer environments in containers from pristine application templates, which are disposed of after each use. Every application, file and process is isolated and controlled by a sophisticated service hierarchy and class matrix that determines at the most granular level what can be done with that file and application.