Free on every VPS

A firewall in front of every VPS.

Decide what gets in and what goes out, before traffic reaches your server. Write the rules once and use them on all your VPS.

No logs of who connects to your server.

A server firewall decides which traffic may reach a server and what it may send out. Bulletproof.to runs it on the host in front of every VPS, so blocked traffic never reaches your system. You set the rules in the panel and it costs nothing.

What the firewall does

In and out

Rules for traffic coming in and for what your server sends, each side with its own default.

Reusable firewalls

Make a firewall once, apply it to many servers.

IP lists

Name a group of addresses, like your office, and use it in any rule.

My IP in one click

Open SSH only for the address you are connecting from.

Temporary rules

Open a port for an hour, a day or a week, it closes by itself.

Protected from the first boot

Your default firewall is written before a new VPS starts.

Common services

SSH, web, RDP, mail, databases, WireGuard and more, one click each.

Lockout warning

The panel tells you before you block your own way in.

Many servers, one set of rules

Change it once, every server follows.

A firewall is a named set of rules. Tick the servers that use it, and when you add or change a rule the panel writes it to all of them. Mark one as the default and every VPS you order starts with it.

  • Up to 20 firewalls and 40 rules each
  • A server that leaves a firewall keeps its rules as its own
  • Pick another firewall, or none, when ordering
Fine control

Open a port for an hour, or only from your address.

Block your server from sending mail, let a database in only from your own address with My IP, or open a port for an hour while you test. Temporary rules close by themselves.

  • Ports, ranges like 8000-8100 and lists like 80,443
  • IPv4 addresses and ranges, or your named IP lists
  • A rule can apply to one of the server's own addresses

Outside your system

The rules run on the host, in front of the virtual machine. They work whatever you install, and keep working when the system inside is busy or broken.

Applied within a minute

Save in the panel or through the API and the rules reach the server within a minute. Replies to your own connections get through.

Nothing kept about visitors

No connection logs.

Questions

Does the firewall cost extra?

No.

Where does it filter?

On the host, in front of the virtual machine, before traffic reaches your system. It works whatever runs inside, Linux, Windows or anything else, and keeps working if the system inside is busy or broken.

Can I use the same rules on many servers?

Yes. Make a firewall once and tick the servers that use it. Change it later and every one of them follows. Mark one as the default and every new VPS starts with it, before its first boot.

Can I lock myself out?

The panel warns you when no rule lets SSH or Remote Desktop in. If it happens anyway, the console in the panel still reaches the server, and you can change or turn off the firewall in the panel at any time.

Do you keep logs of blocked connections?

No. We do not log connections or the addresses that reach your server.

Can I block outgoing traffic?

Yes. Outgoing rules work like incoming ones, with their own default. A common one blocks sending mail on port 25, another limits the server to what it needs for updates.

Is it for dedicated servers too?

The panel firewall is for VPS. On a dedicated server use the firewall inside your system (nftables, ufw, Windows Firewall).

Does it block by country?

Not today. You can allow or block any IPv4 address or range, and group them in IP lists.

KVM servers in Vilnius and Tehran.

No KYC, paid in crypto, from €14.99 a month.

Live chat

Humans, usually within minutes

No account or email needed. The conversation stays in this browser, and moves to your account when you log in.

Prefer Telegram?