VMHeaven

Pentesting DedicatedBare metal for pentests

A whole machine to yourself — no neighbours, no shared kernel, no hypervisor between you and the hardware. Scanning and scraping are allowed by policy, the box sits on an isolated network segment, and you get IPMI so you can rebuild it at 3 a.m. without opening a ticket.

Bare metal

most ordered build

Sold out

Available in Germany & the Netherlands

€—/mo

Order Bare metal
IPMI includedIsolated segmentScanning allowed

01Plans

Four builds, one whole machine

Prepaid monthly, cancel anytime — pick your location, prices update instantly.

Single-tenant bare metal · IPMI included · Fair use

No server is offered in this category right now — ask us for a custom build.

Need a different configuration? Ask for a custom build.

02Performance

Single tenant, no compromises

Every core, every byte of RAM and the full uplink belong to you — nothing is shared, nothing is oversold.

Single-thread performance

indexed · higher is better

Hi-CPU KVM

high-frequency Ryzen / Genoa

0%

Standard KVM

EPYC · Xeon Platinum

0%

Typical cloud vCPU

shared 2.4 GHz

0%

Dedicated high-frequency cores · DDR5 ECC · enterprise storage

All cores yours

No steal time, no noisy neighbour — the whole CPU is dedicated.

Scanning allowed

zmap and masscan run from an isolated range, by policy.

IPMI & rescue

Out-of-band console and rescue boot — rebuild without a ticket.

Your disks only

Local enterprise disks, no shared storage layer, full-disk encryption welcome.

03Platform

What you actually get

Scanning is allowed

zmap, masscan and wide probing are permitted — against systems you are authorized to test.

Isolated network segment

Your traffic sits apart from regular customer ranges, so your scans never taint someone else's reputation.

EPYC / Xeon / Ryzen

Server-grade CPUs with ECC memory — enough parallelism to keep a wide scan job saturated.

Local enterprise disks

Fast local storage in RAID — results and captures stay on your own machine.

IPMI from day one

Out-of-band access, remote reinstall and a rescue system included at no extra cost.

Engineers who get it

Support that knows what a scan window is — Discord, Telegram and email, 24/7.

04Operating Systems

Your stack, your image

Ready-made templates for popular Linux distributions and Windows Server — reinstall in one click, anytime.

Ubuntu

LTS releases — the default choice

  • 24.04 LTS
  • 22.04 LTS
  • 20.04 LTS

Debian

Stable and lean, for servers that just run

  • 13 (Trixie)
  • 12 (Bookworm)
  • 11 (Bullseye)

CentOS

CentOS Stream, RHEL-compatible

  • Stream 9
  • Stream 8

Rocky Linux

Enterprise Linux, RHEL-compatible

  • 9.4

Windows Server

Ready for Remote Desktop

  • 2022 Standard
  • 2019 Standard
Coming soonAlmaLinuxFedoraArch LinuxopenSUSE

05Use Cases

What people run on it

Typical workloads our customers deploy on this line.

Red team infrastructure
Internet-wide scanning
Large-scale scraping
C2 lab environments
Malware analysis labs
Security research
OSINT pipelines
CTF infrastructure

Only test systems you own or have written permission to assess — attacks against third parties are never allowed. See our Terms of Service.

06FAQ

Dedicated server questions

Everything you need to know before deploying — and a human if you need more.

Still have questions?

Real engineers on the other end — typical first response under an hour, around the clock.

Email us Discord Telegram

< 1 hour Typical first response

24/7/365 Engineers on shift

1000+ Customers supported

Ready to deploy in seconds?

Enterprise-grade compute in Germany or the Netherlands — no contracts, cancel anytime, backed by our 99.5% uptime SLA.

View Plans Talk to Sales