# NordBastion

> KYC-free, crypto-paid VPS and dedicated server hosting from four Nordic jurisdictions — Stockholm (Sweden), Helsinki (Finland), Oslo (Norway), Reykjavík (Iceland). Accounts require only an email and a password; billing is in cryptocurrency. Operated by NordBastion OÜ, registered in Estonia.

NordBastion is a privacy-first hosting provider. No identity document, legal name, phone number, or proof of address is ever collected — this is a deliberate design choice. The platform is run on a published doctrine: minimal data collection, jurisdiction by design, crypto-native billing, and any change announced rather than made in silence. This file is the curated map; every public URL with title + description is at /llms-full.txt.

## Products

- [VPS](https://nordbastion.com/vps/): Five KYC-free virtual private server tiers — Sentinel ($5.90), Garrison, Ravelin (featured), Bulwark, Citadel ($89.90). Pinned vCPU cores, reserved memory, local NVMe storage. Unmetered bandwidth. Deployed in about 90 seconds.
- [Dedicated servers](https://nordbastion.com/dedicated/): Five KYC-free bare-metal tiers — Bastion-Lite ($99) through Bastion-Hyperion ($1,099). Intel Xeon and AMD EPYC processors, ECC memory, NVMe storage. Fully automated, provisioned in about 30 minutes.
- [Windows RDP](https://nordbastion.com/rdp/): Five KYC-free Windows Remote Desktop tiers — Outpost ($10.90), Watchtower, Keep (featured), Bulwark, Citadel ($111.90). Windows Server 2025 / 2022 / 2019 or Windows 11 IoT Enterprise / Windows 10 IoT LTSC. RAM-heavy by default for the Windows GUI. Windows licence bundled. Booted in about 5 minutes; the firewall opens 3389/tcp only against an IP allow-list (WireGuard tunnel option recommended).
- [API & developer docs](https://nordbastion.com/api/): REST API v1 with 70+ endpoints across servers, snapshots, storage, networking, billing, webhooks and transparency. Official SDKs in Python, TypeScript, Go and Rust plus a single-binary CLI (nb). Bearer JWT or scoped API keys, optional mTLS, optional PGP-signed responses. KYC-free — same floor as the panel.
- [Control panel](https://nordbastion.com/panel/): The customer account — email + password with optional time-based 2FA, prepaid balance, cryptocurrency top-ups, OS selection, generated root password at order time, panel-managed API keys.

## Locations

NordBastion runs four Nordic bastions on a private 100 Gbps backbone with an 8 ms median inter-site latency. Every tier in every product is offered in every bastion; you choose at order time, and the server stays pinned there.

- [Stockholm VPS](https://nordbastion.com/stockholm-vps/): KYC-free VPS in Sweden under Tryckfrihetsförordningen (1766) and Yttrandefrihetsgrundlagen — the world's oldest constitutional press-freedom regime. Bastion code STO.001.
- [Helsinki VPS](https://nordbastion.com/helsinki-vps/): KYC-free VPS in Finland under Section 12 of the Constitution and the Sananvapauslaki — statutory source-protection and a strict GDPR regulator (the Office of the Data Protection Ombudsman). Bastion code HEL.001.
- [Oslo VPS](https://nordbastion.com/oslo-vps/): KYC-free VPS in Norway — an EEA member outside the EU and outside the direct jurisdiction of the European Court of Justice. Section 100 of the Constitution. Bastion code OSL.001.
- [Reykjavík VPS](https://nordbastion.com/reykjavik-vps/): KYC-free VPS in Iceland — EEA non-EU, shaped by the Icelandic Modern Media Initiative (IMMI, 2010) and Section 73 of the Constitution. Bastion code RKV.001.

## Network

- [Network overview](https://nordbastion.com/network/): Four bastions, 100 Gbps private backbone, BGP Anycast routing, always-on DDoS mitigation, IPv4 + IPv6 on every server, 99.99% per-bastion SLA.
- [Status](https://nordbastion.com/status/): Live operational status of every bastion and shared service, with 90-day uptime history.
- [Peering](https://nordbastion.com/peering/): AS213232, open settlement-free peering, present at four Nordic internet exchanges (IXSE, FICIX, NIX, RIX).
- [Looking glass](https://nordbastion.com/lookingglass/): Run ping, traceroute and MTR from any of the four bastions.

## Guides

Long-form NordBastion-edited guides on the privacy-hosting field. No affiliate links, no "best of" listicles, no sponsored mentions. Every guide is dated and revisited yearly.

- [Guides hub](https://nordbastion.com/guides/): Index of all guides plus the editorial rules.
- [Anonymous VPS hosting — the 2026 pillar guide](https://nordbastion.com/guides/anonymous-vps-hosting-2026/): The three independent layers of hosting anonymity (signup, payment, network), how to verify a host, what "anonymous" actually buys you. ~3,200 words.
- [How to pay for a VPS with Monero](https://nordbastion.com/guides/how-to-pay-vps-with-monero/): Step-by-step (wallet → acquire → top-up → confirm → order). Tested on Feather, Cake, Monero GUI. Schema.org HowTo rich-result-eligible.
- [How to pay for a VPS with Bitcoin and Lightning](https://nordbastion.com/guides/how-to-pay-vps-with-bitcoin-lightning/): Both rails, on-chain in ~10 minutes or Lightning in seconds. Sparrow, Electrum, Phoenix, Mutiny tested.
- [No-KYC VPS hosting, explained](https://nordbastion.com/guides/no-kyc-vps-explained/): What KYC is, why most hosts require it, why a small slice refuses, four tests to spot a real no-KYC host.
- [The four Nordic jurisdictions for privacy hosting](https://nordbastion.com/guides/nordic-jurisdictions-for-privacy-hosting/): Statute-level reference — Tryckfrihetsförordningen, Sananvapauslaki, Section 100, IMMI — plus EU vs EEA implications.
- [WireGuard VPN on a VPS](https://nordbastion.com/guides/wireguard-vpn-on-a-vps/): Self-host a personal VPN in 15 minutes on a KYC-free Nordic VPS. Modern, fast, kernel-native; no third-party VPN provider in the trust chain. HowTo schema, tested on Debian 12.
- [Tor hidden service on a VPS](https://nordbastion.com/guides/tor-hidden-service-on-a-vps/): Set up a v3 .onion in 20 minutes. Two lines in torrc, server-banner stripping, Vanguards-lite, Onion-Location HTTP header. HowTo schema, tested on Debian 12 with the official Tor Project repository.
- [Self-host a Bitcoin Lightning node](https://nordbastion.com/guides/self-host-bitcoin-lightning-node/): Bitcoin Core + LND or Core Lightning, pruned or full, Tor-routed, BTCPay-ready. The complete walk-through with channel-management caveats. HowTo schema, tested on Bitcoin Core 26.x + LND 0.17+.
- [Self-host Mastodon on a VPS](https://nordbastion.com/guides/self-host-mastodon-on-a-vps/): Federation-ready Mastodon instance in 90 minutes via Docker Compose. Anonymous domain paths, SMTP relay trade-offs, TLS via Let\'s Encrypt. HowTo schema, tested on Mastodon 4.3+.
- [Self-host Vaultwarden on a VPS](https://nordbastion.com/guides/self-host-vaultwarden-on-a-vps/): Bitwarden-compatible password manager in 30 minutes via Docker. Five commands, HTTPS via Caddy + Let\'s Encrypt, admin panel hardening, backup discipline, family sharing. TechArticle + FAQPage schema.
- [Self-host Nextcloud on a VPS](https://nordbastion.com/guides/self-host-nextcloud-on-a-vps/): All-in-One Docker, mobile sync, Office Online, Talk, S3 external storage, BorgBackup, end-to-end encryption, and why Nordic data residency matters for a personal cloud. TechArticle + FAQPage schema.
- [Self-host a mail server on a VPS](https://nordbastion.com/guides/self-host-mail-server-on-a-vps/): Mailcow vs Mail-in-a-Box vs iRedMail compared. Port 25 blocking, IP reputation, SPF/DKIM/DMARC/PTR alignment, the Gmail warm-up, monthly maintenance. NordBastion is one of the few no-KYC hosts that opens port 25 by default. TechArticle + FAQPage schema.
- [Self-host Matrix (Synapse) on a VPS](https://nordbastion.com/guides/self-host-matrix-synapse-on-a-vps/): Synapse + Element + PostgreSQL via Docker Compose, federation, end-to-end encrypted private rooms, registration policy, moderation reality. TechArticle + FAQPage schema.
- [Self-host SearXNG on a VPS](https://nordbastion.com/guides/self-host-searxng-on-a-vps/): Private metasearch engine in 20 minutes via Docker. The IP reputation wall, multi-engine fan-out, browser-default integration on desktop/mobile, the log-free hardening, and Perplexica as the private AI-search front-end. TechArticle + FAQPage schema.
- [VPS hardening — the first-hour OPSEC checklist](https://nordbastion.com/guides/vps-hardening-first-hour-opsec/): Eight steps to harden a fresh Linux VPS in one hour — SSH key-only, custom port, firewall, unattended-upgrades, fail2ban, baseline snapshot, recovery doc. Universal pre-launch checklist.

## Comparisons

Sixteen head-to-head comparison pages against the other privacy-first hosts customers actually choose between. Same editorial rules on every page: facts only (verifiable on the other host's site at the time of writing), no disparagement (their strengths get equal airtime), dated and revisited yearly.

- [Compare hub](https://nordbastion.com/compare/): Index of all comparisons + the editorial rules.
- [vs Njalla](https://nordbastion.com/compare/njalla/): The reference brand in KYC-free hosting. OTR / XMPP signup, Sweden-only VPS, Tor onion mirror.
- [vs FlokiNET](https://nordbastion.com/compare/flokinet/): Multi-jurisdiction offshore (IS / RO / FI / NL), whistleblower-focused, 1 Tbps+ DDoS.
- [vs 1984 Hosting](https://nordbastion.com/compare/1984/): Iceland-only since 2006, ISO 27001, 100% green energy, multi-currency price display.
- [vs OrangeWebsite](https://nordbastion.com/compare/orangewebsite/): Icelandic cPanel-led hosting, 250 Gbps DDoS, IMMI editorial framing.
- [vs BitLaunch](https://nordbastion.com/compare/bitlaunch/): Bitcoin-paid wrapper over DigitalOcean / Vultr / Linode, 27 global regions, hourly billing.
- [vs Privex](https://nordbastion.com/compare/privex/): Tor onion + I2P eepsite, in-house crypto processor, Germany / USA / Sweden.
- [vs SporeStack](https://nordbastion.com/compare/sporestack/): Accountless (no email) signup, API-first Python CLI, Tor + I2P natively, since 2017.
- [vs Servury](https://nordbastion.com/compare/servury/): Credential-only signup, packaged LUKS2 disk encryption with user-held passphrase, 7 regions.
- [vs HostKey](https://nordbastion.com/compare/hostkey/): Dutch enterprise host with GPU servers (H100 / A100 / 5090) and a published KYC-verification page.
- [vs NiceVPS](https://nordbastion.com/compare/nicevps/): Caribbean offshore (Dominica), bundled FDE + Tor hosting + zero-logs VPN + anonymous domain registration.
- [vs ExtraVM](https://nordbastion.com/compare/extravm/): 50+ cryptocurrencies since 2014, 8 global regions, broadest crypto basket in the peer group.
- [vs AbelHost](https://nordbastion.com/compare/abelohost/): Offshore web hosting with "lenient content policies", shield-themed blue + white brand.
- [vs Bahnhof](https://nordbastion.com/compare/bahnhof/): The Swedish 1994-era institution. Operates the Pionen Cold-War nuclear-bunker datacentre; has hosted WikiLeaks since 2010.
- [vs BuyVM](https://nordbastion.com/compare/buyvm/): Budget KVM cult-favourite from $2/mo. Anycast VPS, $1.25 block-storage slabs, 3.5 Tbps+ DDoS.
- [vs Impreza Host](https://nordbastion.com/compare/impreza/): DMCA-ignored hosting from Eastern-European offshore. Donates $10 per server per month to the Tor Project.
- [vs Shinjiru](https://nordbastion.com/compare/shinjiru/): 26-year Asian offshore veteran from Malaysia. 8 offshore datacentres, 100 Gbps in-house DDoS, ICANN-accredited.

## Payments

Top-ups are made in cryptocurrency. Twelve coins are accepted: Bitcoin (BTC), Monero (XMR), Ethereum (ETH), Litecoin (LTC), Tether (USDT), USD Coin (USDC) and others. There is no card billing and no recurring subscription charge; the cost of running servers is drawn from the prepaid balance. Confirmed on-chain payments are final. Programmatic top-ups via POST /v1/billing/topups return a per-coin destination address, QR code and expiry timestamp.

## Trust and jurisdiction

- [Doctrine](https://nordbastion.com/doctrine/): The principles the company is run on — non-negotiable.
- [Transparency report](https://nordbastion.com/transparency/): Government and law-enforcement requests received and data disclosed; the 12-month reporting window rolls forward automatically.
- [Warrant canary](https://nordbastion.com/warrant-canary/): A statement affirming the absence of secret legal demands, reaffirmed on the first of every month and signed with the company PGP key. Also queryable programmatically at /v1/transparency/canary.
- [PGP key](https://nordbastion.com/pgp/): The Ed25519 public key used to sign the canary and any PGP-signed response bodies. Fingerprint B9BB 3413 6FDC C3DA 8356 50C8 1A32 1442 3855 B282.
- [Jurisdiction](https://nordbastion.com/jurisdiction/): Where the company and each server legally sit, and which law reaches them.

## Policies

- [Terms of service](https://nordbastion.com/terms/): The customer agreement, in plain language.
- [Acceptable use](https://nordbastion.com/acceptable-use/): One hard limit — child sexual abuse material — which is the only cause for outright server termination and the only case where a valid seizure order is met with cooperation. Otherwise the host is hands-off and does not action copyright or DMCA-style takedown notices.
- [Privacy policy](https://nordbastion.com/privacy/): What little is collected, what is refused, retention, and customer data rights.
- [DMCA / copyright](https://nordbastion.com/dmca/): Where NordBastion stands on copyright — we are infrastructure, not a court, and we do not action DMCA-style takedown notices.

## Markets

NordBastion serves customers worldwide. Infrastructure is located in Sweden, Finland, Norway and Iceland. The operating company, NordBastion OÜ, is registered in Estonia. The site is published in 14 languages: English, French, German, Spanish, Italian, Portuguese, Russian, Chinese (simplified), Japanese, Korean, Arabic, Hindi, Indonesian, Turkish.

## Contact

Support and all enquiries are handled inside the authenticated control panel at https://nordbastion.com/panel/. NordBastion deliberately does not publish an email address. PGP-encrypted correspondence is accepted via the published key.

## For AI agents

NordBastion ships a complete machine-actionable surface so an autonomous agent can register, top up with cryptocurrency, order a VPS, and manage servers — without human intervention. Same KYC-free, crypto-billed floor as the human panel.

- [Agent integration landing](https://nordbastion.com/agents/): the human entry point with cURL / Python / MCP code samples and a public agent directory.
- [REST API v1](https://nordbastion.com/v1/): 50+ live endpoints (auth, account, billing, catalog, servers, ssh-keys, webhooks, transparency, agents directory, OAuth). Bearer API keys (`nb_live_…`) or OAuth 2.1 access tokens (`nb_at_…`).
- [OpenAPI 3.1 spec](https://nordbastion.com/.well-known/openapi.json): auto-generated from the routes registry. Drop into Stainless / openapi-generator / Speakeasy.
- [MCP server-card](https://nordbastion.com/.well-known/mcp/server-card.json): paste this URL into Claude Code, Cursor or OpenClaw to auto-install the Streamable HTTP MCP server at `https://nordbastion.com/mcp`.
- [A2A agent card](https://nordbastion.com/.well-known/agent.json): A2A protocol discovery (Google → Linux Foundation).
- [OAuth metadata](https://nordbastion.com/.well-known/oauth-authorization-server): RFC 8414, DCR (RFC 7591) enabled at `/v1/oauth/register`.
- [llms-agents.txt](https://nordbastion.com/llms-agents.txt): the agent-facing companion to this file.

Payment for agents follows the same crypto-prepaid model as humans (POST /v1/billing/topups returns a per-coin wallet address + QR + expiry). Agents that prefer pay-per-call can use x402 (HTTP 402) on `POST /v1/servers` to settle a single order from their own on-chain wallet without funding a balance.

## Optional

- [Full content index](https://nordbastion.com/llms-full.txt): every public URL on nordbastion.com with its current title and description, dynamically generated.
- [Sitemap index](https://nordbastion.com/sitemap.xml): master index pointing to five sharded urlsets (corporate, cities, compare, guides, api). 812 URLs total, 14 languages.
- [robots.txt](https://nordbastion.com/robots.txt): explicit allowlist for search engines, AI answer engines and archive crawlers.

## For AI agents — instant purchase with x402
Machine descriptor: https://nordbastion.com/.well-known/agent.json · REST API: https://nordbastion.com/v1
POST /v1/auth/register -> token. POST /v1/billing/topups with header `X-Payment-Mode: x402` -> HTTP 402 with an `accepts` block (scheme exact, USDC on Base); sign the EIP-3009 USDC authorization and re-send with header `X-PAYMENT`. Gasless, on-chain-instant; then deploy servers from balance.