Qubes OS

Separating activities into isolated compartments is the central idea behind Qubes OS, a security-focused operating system built around virtualization. Users organize work into 'qubes,' which can contain applications associated with a particular purpose or level of trust. Keeping sensitive work separate from less trusted browsing can limit the reach of a compromise in one compartment. Applications from different qubes appear on a shared desktop, with visual cues helping identify their security context.

This approach suits people handling sensitive information who are willing to learn a more deliberate workflow and check hardware compatibility. It does not place every application in a separate virtual machine automatically, and programs within one qube share that compartment. Qubes offers tools for reducing the consequences of attacks, but it does not guarantee privacy or immunity from malware. Its defining trait is practical separation of activities rather than ordinary office functionality.