Student or indie developer, same story: a three-euro Netcup VPS, fresh Debian, joy of ssh root@. Two days later, a botnet scans port 22. The VPS joins a brute-force campaign — because nobody closed the door.
Netcup is not less secure than other IaaS. It is as bare as Hetzner or an OVH VPS — sometimes with a lower invoice.
Netcup in brief
Netcup is a German host known for competitive VPS and root servers, datacenters in Germany, high price score in our directory. Support is mainly German and English. Ideal for small projects, self-hosted mail, or lab — not turnkey WordPress.
| Element | Included | Your responsibility |
|---|---|---|
| Hypervisor | Yes | — |
| OS install | Yes | Hardening |
| Network firewall | Partial / to configure | Rules |
| Backup | Optional snapshots | Off-site copy |
| Monitoring | Basic | Alerts |
A "secure" Netcup VPS does not exist on delivery — it exists after your first sixty minutes.
Day-one checklist
Apply these steps in order before exposing any service publicly. Start with system updates (apt update && apt upgrade or equivalent). Create a sudo user and disable direct root login.
Configure SSH keys only with PasswordAuthentication no. Enable a firewall (ufw or nftables): port 22 restricted to trusted IPs, ports 80 and 443 if web server. Install fail2ban on SSH at minimum. Set timezone and NTP sync for coherent logs.
Take an initial snapshot only after hardening — not before, or you freeze a vulnerable server.
Classic first-VPS mistakes
Installing Docker before firewall opens ports you have not filtered yet. Exposing MySQL or Redis "temporarily" often leaves permanent attack surface. Forgetting reverse DNS and SPF if sending mail from the VPS causes silent rejections.
Believing Germany automatically guarantees GDPR compliance without a signed DPA is another common error. Document Netcup as processor if you handle personal data.
For admin access, compare VPN or bastion depending on team size.
The peak: low price, full attack surface
Decide and move forward without blind spots
If you lack admin time, stay on shared hosting rather than leaving a VPS open. Otherwise, order Netcup, apply the full checklist, then test restore from snapshot and encrypted external backup. See the Netcup profile and compare tool for German alternatives like Hetzner.
Frequently asked questions
Is Netcup suitable for a first VPS?
Yes for tight budget in Germany, provided you plan regular admin time.
Which location to choose at Netcup?
Germany for standard EU residence — verify exact offer at order time.
How to secure SSH from install?
Keys only, no password, firewall restricting IPs, fail2ban on SSH.
Do Netcup snapshots replace backup?
No — add encrypted external copy outside the Netcup account for ransomware and human error.
A first Netcup VPS is proven at the firewall — not at the advertised monthly price.