Legal
Acceptable use
Bulletproof does not mean anything goes. These rules apply to every VPS, dedicated server, hosting plan and domain, next to our terms of service.
Updated November 8, 2026
Not allowed
These are removed without warning.
- Child sexual abuse material
- Malware distribution
- Ransomware
- Layer 4 or Layer 7 DDoS attacks
Anything that is illegal in the country your server is in is removed as well. We follow the law of Lithuania for Vilnius and of Iran for Tehran.
DMCA notices
Foreign DMCA and copyright notices are not forwarded to you and nothing is taken down because of them. Only a valid court order from the country the server is in can lead to action.
Fair use
Traffic has no monthly cap and no charge per TB. The port is shared with the other servers on the host, so we expect fair use.
When we limit a server
- We watch for servers that send far more traffic than usual for minutes on end (attacks, scans) or keep the CPU near full for hours (miners), because that hurts everyone on the same host.
- Such a server can have its network speed or CPU limited, or its network cut, until the problem stops.
- Servers running anything on the list above are removed.
Report abuse
Seen something on our network that breaks these rules? Open the chat with the button at the bottom of this page, no account needed, or message us on Telegram at @BulletproofToBot.
- Give the IP address or domain, what you saw and when (with the timezone).
- Add evidence such as a URL, log lines or a sample. Never send child sexual abuse material itself, describe where it is.
- Reports about anything on the list above are checked and acted on. Foreign copyright notices are not, as explained under DMCA notices.
Payments, renewals and deletion are in the terms of service. What we store about you is on the privacy page.