Vultr Security

Shared responsibility model: Vultr secures infrastructure (hypervisor, network, physical data centers), customers secure applications, data, and access. Security features are included at no additional cost -- firewalls, DDoS protection, and encryption are not sold as premium add-ons.

Vultr Firewall: Free, stateful, tag-based rules for Cloud Compute, HF, Bare Metal, and VKE. DDoS Protection: Always-on, multi-layer, free. VPC Isolation: Private VPCs with subnets, peering, and per-resource firewalls. No public IP required for private workloads. Private Networking: Free intra-VPC traffic. Selectable private network for cluster backends. Encryption at Rest: AES-256 for Block Storage, Object Storage, Managed Databases. Encryption in Transit: TLS 1.2+ for all APIs. Auto Let's Encrypt TLS for load balancers.

IAM: RBAC with granular permissions per resource type. API keys with scoped access. Sub-accounts for team management. SSO: SAML-based SSO for the Vultr control panel (dedicated account plans). OIDC for VKE clusters. Two-Factor Authentication: TOTP and SMS options available per user account. Audit Log: Track team actions -- create, modify, destroy resource events. Compliance: SOC 2 Type II, PCI DSS Level 1, GDPR. ISO 27001 roadmap; HIPAA BAA on request via enterprise sales.