hostcloak.com · defensive only · guides
“Secure” is a big word. For most solo operators the useful version is smaller: is this VPS quieter than easy radar, and do I know what to fix next?
You cannot answer that from vibes, a firewall checkbox you set months ago, or a blog checklist you never finished. You answer it by looking at the box from the outside, the way strangers already can.
Authorized hosts only. Not a pentest. Not a compliance certificate. No root password.
Contabo and similar providers give you a public IP and a control panel. A firewall checkbox in the panel is not the same as knowing what still answers from the internet. If you run a Contabo VPS you own, HostCloak’s outside-in Surface Guard is the same check: DNS or public IP you control, no root password, grade + fix order.
HostCloak Surface Guard takes a DNS host or public IP you control and returns:
No root password. Free tier: $0 · 1 host · 1 successful scan/day.
A clean day on HostCloak means the public surface looked quieter — not that nothing bad can ever happen.
No. It is a defensive snapshot of presence and hygiene, plus an order of work. Treat it as a starting map.
Yes. Copy is written for operators. Fixes are defensive and plain.
Free is enough for a first honest look. Pro is $19/mo (deeper Surface Guard, history, PDF, alerts, Live Deck). Agency is $49/mo.
Next step: name a DNS name or public IP you own at /scan. Quiet what's loud on a host you own.
Defensive posture only — presence, hygiene, and fix order. Not a pentest. Not a compliance certificate. HostCloak never asks for a root password. Scan only hosts you own or have written authorization to assess.