VMHeaven

Pentesting Dedicated Bare metal for pentests

A whole machine to yourself: no neighbours, no shared kernel, no hypervisor between you and the hardware. Scanning and scraping are allowed by policy, the box sits on an isolated network segment, and the serial console and power control in the panel get you back in at 3 a.m. without opening a ticket.

  • Single-tenant bare metal
  • ECC memory
  • Local disks
  • Isolated network segment

From€245/mo

Choose your plan

Xeon E5-2697v2

most ordered build

In stock

Netherlands

CPU

24C / 48T · Intel

Memory

128 GB DDR3

Storage

1 TB HDD

Uplink

10 Gbit/s port · 1 Gbit/s included

€245/mo

Order Xeon E5-2697v2
Serial consoleIsolated segmentScanning allowed

01Plans

Bare metal for pentest labs

Prepaid monthly, cancel anytime. The flag on each build shows where it stands, and stock and prices come live from our catalogue.

Single-tenant bare metal · serial console · 10 Gbit/s port · 1 Gbit/s included

01

Xeon E5-2697v2

2 in stock

CPU24C / 48T · Intel
Memory128 GB DDR3
Storage1 TB HDD
Network10 Gbit/s port1 Gbit/s included

€245/mo

No stock, or not what you are looking for?

Contact us for a custom quote and get your custom server ready in 3 to 14 days. Prepayment may be required.

Telegram
contact@vmheaven.io

02Performance

Single tenant, scanning allowed

Every core, all the memory and the whole uplink belong to one customer. Nothing is shared or oversold.

All cores yours

No steal time and no noisy neighbour: a wide scan gets the whole CPU, around the clock.

Labs on one box

Run Proxmox or your own KVM stack and keep attacker and target VMs on one machine.

Your own tooling

Custom kernels, raw sockets, packet capture: install whatever the engagement needs, as root.

Full-disk encryption

Captures and client data stay on drives that only you use, encrypted if you like.

03Platform

What you actually get

Scanning is allowed

zmap, masscan and wide probing are permitted against systems you are authorised to test.

Isolated network segment

Your traffic sits apart from regular customer ranges, so your scans never taint someone else's reputation.

ECC memory

Every build runs ECC memory, and the table lists the cores and threads of each machine, so you can size a scan job before you order.

Local disks

Results and captures stay on the machine's own drives. The table lists their type and size.

Console and power control from day one

An out-of-band serial console and power control in the panel, at no extra cost.

24/7 engineers

Support that knows what a scan window is, on Discord, Telegram and email at any hour.

04Operating Systems

Your stack, your image

Ready-made templates for popular Linux distributions and Windows Server: reinstall in one click, anytime.

Coming soon

  • AlmaLinux
  • Fedora
  • Arch Linux
  • openSUSE

05Use Cases

What people run on it

Typical workloads our customers deploy on this line.

  • Red team infrastructure
  • Internet-wide scanning
  • Large-scale scraping
  • C2 lab environments
  • Malware analysis labs
  • Security research
  • OSINT pipelines
  • CTF infrastructure

Only test systems you own or have written permission to assess; attacks against third parties are never allowed. See our Terms of Service. The same machines on the other three lines, with live stock: Amsterdam dedicated servers on all four lines.

06FAQ

Dedicated server questions

Everything you need to know before deploying, and a human if you need more.

Still have questions?

Real engineers on the other end: typical first response within about two hours.

Email us Discord Telegram

< 2 hours Typical first response

24/7/365 Engineers on shift

1000+ Customers supported

No shared kernel and no neighbours: every core stays yours while a scan runs, captures land on your own disks, and no other customer sits on the box to be affected by either. The KVM line is the cheaper way in; this is what you put a lab or a long engagement on.

As often as you like, with your own tools: the disks are yours alone until the machine goes back, and full-disk encryption is welcome. The panel gives you power control and a serial console for when the network is down; it has no one-click reinstall for dedicated servers.

Your traffic from the ranges our other customers sit on. Scanning collects reputation damage, and this keeps it off machines that did nothing to earn it. It does not make you anonymous, and it does not widen what you are allowed to test.

Configurations we hold in stock are handed over within a few hours. Custom builds (specific disk layouts, extra RAM, additional uplinks) are ready in 3 to 14 days, and we confirm a date before you pay.

The servers are unmanaged by default: you get full root, a serial console and power control in the panel, and you run the stack. We handle hardware, network and DDoS mitigation. If you need us to take over OS and monitoring, ask sales for a managed add-on.

Yes. Every server and hosting plan includes always-on, automatic DDoS mitigation at no extra cost, in whichever location it runs.

07Use cases & related

Related plans and guides

Other servers we run for neighbouring jobs, each with its starting price, and three guides worth reading before you order.

Related plans

GuidesFrom the VMHeaven blog

GuidesRunning nmap, masscan and zmap from a VPS without getting null-routed~10 minGuidesKali Linux on a VPS for pentesting: the setup that works~9 minComparisonsVPS vs dedicated server: how to know which you need~6 min

Ready to deploy?

Enterprise-grade compute in the EU: no contracts, cancel anytime.

View All Plans Talk to Sales