control panel also over Tor
Anonymous VPS and VDS in eight locations, and Blackbox: a VPS whose memory not even the host can read. Pay in crypto, cash or card. We never ask who you are.
XMR · BTC · LTC · ETH · TRX · BNB · USDT · USDC · cash by mail · card
Open the control panela working demo: deploy, reboot and shred boxes in this tabMemory encrypted by the CPU with AMD SEV-SNP, a LUKS2 disk behind a passphrase only you type, no guest agent, and a boot chain the CPU measures and signs. No logs and no KYC, at a price you would pay for an ordinary VPS.
With measured boot, a Blackbox never boots from its own disk. Firmware, kernel, initramfs and command line go into one launch measurement the CPU signs, and you check it from your own computer before the passphrase leaves your keyboard.
Change one byte of the four and this number changes. Nothing the host does can make other bytes produce it.
Signed in siliconAMD SEV-SNP · EPYC 7B13
$ blackbox-verify \ --host 203.0.113.7
verdictPASS
$ ssh root@203.0.113.7 unlock
Please unlock disk root_crypt: ********
Disk unlocked. Booting.
over SSH, never into the console
On a fail
Do not type it. The machine is not what it claims to be.
Every one of them is on by default or one click away, on every size.
Memory is encrypted by the CPU with AMD SEV-SNP, under a key that never leaves the chip. Nobody can read it, even from the hypervisor. The disk is LUKS2, with a passphrase only you ever type.
$ dmesg | grep -i "memory encryption"Memory Encryption Features active: AMD SEV SEV-ES SEV-SNP
Firmware, kernel, initramfs and command line are part of a launch measurement the CPU signs. Change a byte and the number changes, and the verifier refuses before you type your passphrase.
$ blackbox-verify --host 203.0.113.7reported measurement matchverdict OK
An ordinary VPS has an agent inside that the host can use to reset root, run a command or read a file. A Blackbox has none, and no virtio port for one. That is why there is no reset-password button.
$ ls /dev/virtio-ports/ls: cannot access '/dev/virtio-ports/': No such file or directory
Hand the node your own UKI by URL and SHA-256, write your own pre-encrypted disk image over the volume, or boot any ISO. On a measured machine the CPU measures your bytes, not ours.
$ ukify build --linux vmlinuz --initrd initrd.img --output blackbox.efiA dedicated IPv4 and a whole /64 of IPv6 routed to your machine. Eighteen quintillion addresses that are yours alone.
2001:db8:0:149::/64 routed to your VMAnnounce your own RPKI-verified space over the network, or run your own BGP session with transit and originate your prefixes yourself. Panel buttons, not tickets.
example ASN and prefix
Set rDNS for your IPv4 and IPv6 from the panel, live within a minute. Mail servers need it; you do not need us for it.
$ dig -x 203.0.113.7 +shortmail.example.com.
Run a Tor relay, a VPN exit or a mail server and reports will come, most automated and many wrong. A human reads every one and talks to you first. No script suspends you because a blocklist said so.
Every tier is protected identically: same silicon, same encryption, same keys nobody else holds. Core, Plus, Max and Ultra differ only in size.
Blackboxstart here
In stock
EPYC 7B13 · SEV-SNP
$9.99 per month
Blackbox
In stock
EPYC 7B13 · SEV-SNP
$19.99 per month
Blackbox
In stock
EPYC 7B13 · SEV-SNP
$39.99 per month
Blackbox
In stock
EPYC 7B13 · SEV-SNP
$79.99 per month
Encrypted memory hides what is on the machine. It is not anonymity, and it does not hide that the machine exists.
The console
Serial and VNC pass through the host. Watch the boot there; never type a secret into it.
Metadata
Traffic volume, packet headers, CPU use and the fact the machine exists are visible, as at any transit provider.
The first boot
The root filesystem starts as a stock image the host could read. Encrypt it at first boot, or write your own pre-encrypted disk.
We can stop or delete the machine. We cannot read it.
Both start from nothing. absolute generates a credential, takes the payment and has the server live in about 30 seconds. A typical cloud wants your name, phone, card and passport, then stops to check them.
absolute
~30s
From payment seen to a live server. The credential is the whole account.
a typical cloud
stuck at 7 of 11
Name, phone, card and birthday go in. Then a passport scan, and up to 72 hours of review.
Shown with Monero at an example rate. BTC, LTC and XMR get a fresh address per invoice; ETH, TRX, BNB, USDT and USDC draw from a small pool, one open invoice per address; every coin is watched on self-hosted nodes. Cash by mail asks for nothing more. A card goes through a card processor, which handles the card and sees the amount and an opaque customer record, never the plan or the server.
A typical cloud keeps all 14 things below on every customer, long after they cancel. absolute asks for none of them. Two can exist only by your choice: a support ticket if you open one, a card processor ID if you pay by card.
records=> select name, email, ip records-> from customers records-> where email is not null; name | email | ip ------+-------+---- (0 rows) records=>
Customer records, by host
| absolute keeps 0by default | ‘privacy’ host keeps 5 | budget VPS keeps 9 | typical cloud keeps 14 | |
|---|---|---|---|---|
| not kept | kept | kept | kept | |
| signup IP | not kept | kept | kept | kept |
| login IP history | not kept | kept | kept | kept |
| card processor ID | kept only if you choose | kept | kept | kept |
| support tickets | kept only if you choose | kept | kept | kept |
| legal name | not kept | not kept | kept | kept |
| phone | not kept | not kept | kept | kept |
| card number | not kept | not kept | kept | kept |
| billing address | not kept | not kept | kept | kept |
| date of birth | not kept | not kept | not kept | kept |
| ID scan | not kept | not kept | not kept | kept |
| selfie | not kept | not kept | not kept | kept |
| access logs | not kept | not kept | not kept | kept |
| traffic flow logs | not kept | not kept | not kept | kept |
Rows are composites, not named companies: what each kind of host typically asks for at signup and still holds after you cancel. On absolute’s row, no email, phone, name, address or ID is ever asked for, and neither visitor IP addresses nor traffic are logged. Delete the account and every record naming it goes; invoices stay as anonymous amounts and dates.
Six things every plan includes, in all eight locations. Plans start at $9.99 a month.
A randomly generated 32-character credential is the whole account. No email, no phone, no KYC.
account: 32-char credential, email: none, phone: none, kyc: none
xmr, watched on a self-hosted node
Payment confirmed, credentials in your panel. Nobody reviews you first.
live: about 30 s after payment, review: none
Install anything. No managed-hosting guardrails. Reinstall to another OS from the panel.
access: root or RDP, systems: 8, reinstall: from the panel
Seven-day minimum, prorated, then renew on whatever cycle you set. Delete it the moment the job is done.
minimum: 7 days, prorated, cycle: yours to set, account with no balance or services: deleted after 24 h
No packet inspection, no flow logs, no activity monitoring. Web access logs go to /dev/null.
web access logs: /dev/null, packet inspection: none, flow logs: none
Never a shared address. The standard line is unmetered.
ipv4: dedicated, standard line: unmetered, blackbox: 4 TB–32 TB / 31 days
New York, Montreal, four cities in Western Europe, Singapore and Hong Kong. Every plan in every one of them has a dedicated IPv4 and full root or RDP. No packet inspection, no flow logs.
Montreal runs on owned hardware in a colo, and it is the only place a Blackbox lives: SEV-SNP encrypted RAM, a LUKS2 disk only your passphrase opens, measured boot.
The nearest location is guessed from your time zone, here in the browser: no IP lookup, no location prompt, nothing sent. Pick a row to pin it on the map. Prices are per month; stock is a snapshot and changes. Land: Natural Earth, public domain.
Every plan in every location, priced per month. Rent for as little as seven days. Stop renewing and the server expires: expired services are removed along with their data.
Location
YULCanada
Montreal
Owned hardware in a Montreal colo. Home of Blackbox: SEV-SNP, LUKS2, BYOIP, rDNS.
Blackbox · Zero-knowledge VPS
Transfer is counted as the larger of inbound or outbound, never both. Past the allowance the port slows to 10 Mbps instead of billing you.
Blackbox
$9.99 per month
Blackbox
$19.99 per month
Blackbox
$39.99 per month
Blackbox
$79.99 per month
Standard line · VPS and VDS · unmetered
VPS
$15.59 per month
VDS
$17.99 per month
VPS
$25.19 per month
VPS
$34.79 per month
VPS
$44.39 per month
VDS
$45.59 per month
VDS
$71.99 per month
11 plans in Montreal. 48 across all 8 locations.
Seven-day minimum, prorated. Then renew on whatever cycle you set.
Prices in USD, per month. Once a payment is confirmed the server is live in about 30 seconds.
Crypto
Watched on self-hosted nodes, with no payment company in between. A fresh address per invoice on BTC, LTC and XMR.
Ethereum-family and Tron coins use a small pool of addresses instead, and a pooled address is never shared by two open invoices.
Cash by mail
For the patient. Put the credential in the envelope, not your name.
Card
Through a card processor, which sees an amount and an opaque customer record, never what it was for.
Opening the card form loads the processor's script, so it also sees your IP address and browser, as any card processor does.
A random credential is the whole account: no email, no password, no reset link.
If it goes stale, disappears or fails to verify, assume the worst. A canary sings until it can’t; silence is the message.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
As of :
This statement is updated and re-signed monthly.
Proof of freshness: Bitcoin block 973588, mined 2026-10-30 08:14:27 UTC, hash 000000000000000000013c7a5e92d04bf1863ac9e27d5b0f48e6a1d3c9b2f57e
-----BEGIN PGP SIGNATURE-----
Signature block.-----END PGP SIGNATURE-----
# import the key, first time only
curl -s https://absolute.example/pgp.txt | gpg --import
# verify the canary
curl -s https://absolute.example/canary.txt | gpg --verify
Key fingerprint C7A1 0E4D 5B38 92F6 1D0C A4E7 3F95 2D81 61F0 3B92
Every canary is signed with the same ed25519 key. Check the fingerprint gpg prints against this page; a new key would mean something happened.
Each one names a recent Bitcoin block, when it was mined and its hash, so it can't be written in advance and left on a timer.
The same file is published on the clearnet site and the onion address. Fetch both; diff should print nothing.
If a month is missed, the file disappears or the signature fails, don't wait for an explanation. There won't be one.
What people ask before they pay. None of it needs your name.
Open a ticket from the control panel, over its onion address if you like. It doesn’t ask who’s asking either.
You set up a server without handing over a name, an email address or a phone number, and there is no KYC: a randomly generated 32-character credential is the whole account. That covers what we learn. What your server gives away is up to you, because privacy stays a shared responsibility: use key-based SSH and strong passwords, and don’t run scripts from sources you don’t know. The panel has an onion address if you’d rather it never saw your IP either.
No traffic logs: no packet inspection, no flow logs, no activity monitoring, and the web server’s access log goes to /dev/null. What is stored is what an account needs to work: the credential, your balance, invoices (amount, method, time), the address each crypto payment was sent to, your servers’ configuration (hostname, IP, OS, specs, expiry) and your support tickets. An account with a zero balance, no services and no open tickets is deleted after 24 hours. The canary says whether anyone has asked for any of it.
Crypto (XMR, BTC, LTC, ETH, TRX, BNB, USDT, USDC), watched on self-hosted nodes, with a fresh address per invoice on BTC, LTC and XMR. Cash by mail, with the credential in the envelope rather than your name. Or a card, through a processor that sees an amount and an opaque customer record, never what it was for; its card form does see your IP, as any processor’s does. Once the payment is confirmed the server is live in about 30 seconds, credentials in your panel. Nobody reviews you first.
A VPS shares its host’s resources and is the budget line, from $15.59/mo in 5 locations. A VDS keeps its cores to itself, from $16.79/mo in 5 locations. Both are unmetered with a dedicated IPv4. Blackbox is the zero-knowledge VPS: AMD SEV-SNP encrypted RAM, a LUKS2 disk only you can unlock, measured boot and no guest agent, in Montreal, from $9.99/mo with 4 TB of transfer per 31 days on Core. If the host should be unable to read the machine, it’s Blackbox.
Because it needs the whole stack, down to the CPU, the firmware it boots and the network that routes your addresses. That only exists on the owned hardware in a Montreal colo, which is also where LUKS2, bring-your-own IP and ASN, and reverse DNS you set yourself live. The other 7 locations sell the standard VPS and VDS lines.
No. There is no guest agent inside a Blackbox and no virtio port for one, so the host has no way to run anything in it. That is the point, and why there is no reset-password button. The disk is the same: you type the LUKS2 passphrase yourself, over SSH, after blackbox-verify prints PASS. Lose it and nobody can recover the data, us included. Keep it somewhere that isn’t the server.
Core includes 4 TB per 31 days and each tier doubles it (Plus 8 TB, Max 16 TB, Ultra 32 TB). Transfer is counted as the larger of inbound or outbound, never both. Past the allowance the port slows to 10 Mbps instead of billing you. The standard VPS and VDS lines are unmetered.
Yes. The minimum is seven days, prorated; after that, renew on whatever cycle you set, or delete the server the moment the job is done. Deleting the account destroys every server and every record naming it; invoices stay as anonymous financial records (amount, method, status, dates).
Debian 12 and 13, Ubuntu 24.04 LTS and 26.04 LTS, Rocky Linux 9, AlmaLinux 9 and 10, CentOS 10, FreeBSD 14 and 15, OpenBSD 7.8 and 7.9, Windows Server 2022 and 2025. Full root or RDP from the first minute, and reinstall to another from the panel whenever you like. A Blackbox also boots any ISO, your own kernel as a UKI, or a disk image you built and encrypted at home.
On a Blackbox, a person, every time. Run a Tor relay, a VPN exit or a mail server and reports will come, most of them automated and many of them wrong. A human reads each one and talks to you before anything happens to the machine. No script suspends you because a blocklist said so.
One credential, no name to give.
from $9.99/mocrypto, cash or card