BitCloudVPSSecurity
Report vulnerabilities to [email protected]. Do not test other customers' VMs, send denial-of-service traffic at the edge, or social-engineer staff.
The machine-readable policy is at /.well-known/security.txt.
Verify us
Trust is verified, not requested. Three public artifacts exist so you can check our posture without contacting anyone:
- Warrant canary — dated statement that no warrants, gag orders, or seizures have been received. Absence of an update is a signal.
- Status log — what broke and when, edited only when something actually happens.
- Looking glass — indicative RTT from every location, so you can audit our network claims.
Encrypted correspondence: request our PGP public key by email at [email protected] and verify any fingerprint over a second channel before relying on it. Support tickets live in the client panel.