$ security --status
Security & reliability
You're trusting us with client work and your payment information — here's exactly how that trust is earned and maintained.
Network isolation
Every instance is isolated at the network level — on hardware where the router supports it, via its own dedicated VLAN through Proxmox SDN; elsewhere, via host-level firewall rules that block VM-to-VM traffic outright. Either way, no other customer can see, scan, or reach your instance.
Encryption
All traffic between your browser and your instance (console access, RDP tunnel, and the dashboard) is encrypted with TLS. Virtual disks are stored on encrypted-at-rest storage on the host.
Access control
Our own infrastructure access uses a dedicated, narrowly-scoped Proxmox API token — never the root account — and every administrative action is written to an audit log. Support staff cannot log into your instance without your explicit request.
Built and operated in-house
The server fleet, the provisioning pipeline, the dashboard you're using right now, and the team keeping it online are all part of the same operation — sourced, configured, written, and maintained by us. No white-label control panel, no outsourced NOC, no reseller layer marking up someone else's cloud.
Payments
All billing is handled by Stripe. We never store your card number — Stripe is PCI-DSS Level 1 certified, the highest level of certification in the payments industry.
Reliability
Every node reports a heartbeat we track continuously — its live reliability score, visible right on the picker, is computed from that real history, not a marketing number. A node that goes degraded is automatically pulled out of rotation for new launches and flagged for the team to investigate.
Destroy means destroy
You control your own instance lifecycle. When you destroy an instance, its disk is securely wiped and cannot be recovered — by us or anyone else — same second the job runs.
Account security
Passwords are hashed with bcrypt and never stored in plaintext. Login and signup are rate-limited well below brute-force range, on top of the site's general rate limit.
Found a security issue?
We take reports seriously and respond quickly. Email main@staticgpu.com — please don't test isolation boundaries against other customers' live instances.