Security
Your models stay yours. Single-tenant by design.
The simplest security model in GPU cloud: one customer per server. No shared GPUs, no hypervisor between you and the hardware, and a clean, erased machine at the start of every rental.
Dedicated hardware
GPUs, CPU, memory and disks are reserved for one customer. Nothing is sliced across tenants.
Key-only SSH
Servers are delivered with your public key and password logins disabled. You control who has access.
Isolated management
Out-of-band management interfaces sit on a separate network that is never exposed to customers or the internet.
Secure erase
Local NVMe drives are securely erased between customers, and every node is re-imaged before delivery.
Least-privilege staff access
Only on-duty technicians can touch hardware, and only for maintenance or support you request.
Hardened website
coregpu.io uses HTTPS everywhere, HSTS, a strict Content Security Policy and no third-party trackers.
Shared responsibility
With root access, you secure what runs on the server: patch the OS and your software, keep SSH keys private, restrict open ports and back up your data. Our quickstart covers the basics.
Found a vulnerability in our website or infrastructure? Write to our security team through our contact form. Please give us reasonable time to fix it before any public disclosure.
Security questions
Another question? Our engineers answer within one business day.
Contact usCan CoreGPU staff access my server?
Not in normal operation. You hold root access and the SSH keys. Our technicians handle hardware, and access a server only for support you request or for maintenance we have announced.
What happens to my data when I stop?
At the end of your rental, local storage is securely erased before the server is assigned to anyone else. Export what you want to keep before your last day.
Is my GPU shared with anyone?
No. Each server and its GPUs are dedicated to a single customer for the whole month.
How do I report a vulnerability?
Write to our security team through our contact form with the details. We acknowledge reports quickly and do not pursue good-faith research that respects user privacy.