Security

Hardened by default

We front-load secure defaults so users avoid common first-boot misconfigurations.

SSH key-only login

Server access uses SSH public keys. Password authentication is disabled by default.

Root SSH disabled

Direct root login over SSH is disabled. Access is through a dedicated application user.

Dedicated sudo user

A botvps user is provisioned with sudo access. Passwordless sudo can be enabled in the hardening profile.

Firewall baseline

Default firewall denies inbound traffic, allows SSH, and only opens service ports you explicitly enable.

Default profile applies key-only SSH access, blocks root SSH login, provisions dedicated sudo user, and enforces baseline firewall rules.

Secure from the start.

Every VPS ships with these defaults. No extra config, no add-on cost.