Bare-metal servers on hardware we own and operate in Ontario. One fixed monthly price. Full root access. No hyperscaler in the middle.
Automatic failover built in
Full root access
Honest SLA, Published Uptime
What Cephlon Metal Is
For years, Cephlon has run its own infrastructure - our own servers, network, and racks in Ontario - instead of AWS, Azure, or Google Cloud. Privacy was the reason: "Confidential by Design" works best when we control the hardware. People kept asking to get in on it. So we're opening a portion up.
Cephlon Metal gives you a dedicated physical server built on the same architecture we trust with Cephlon's own systems - deployed separately for you, isolated on its own firewalled network segment, under Canadian privacy law. Your OS, your keys, your data. We keep it powered, connected, and protected - and we stay out of the rest.
The Private Access Suite
No IP babysitting - that's the point.
Every server ships with its own hostname - like yourname.onmetal.ca, or bring your own domain. If a network path fails, we re-route within minutes. No action needed from you.
Web traffic can ride Cloudflare's network for built-in DDoS shielding - no extra setup, no exposed origin.
SSH and friends get your own dedicated ports, separate from web traffic - direct, predictable, and yours alone.
Private access with nothing exposed to the public internet at all. Need a dedicated public IPv4 instead? Available by request for qualified workloads - just ask.
Pricing
All prices monthly, shown in US$ / C$ — you pay in your own currency, plus applicable taxes.
Any Metal M or L, run by Cephlon — the hardware without the ops.
Request Invite →Fully isolated shared Instances on the same hardware, network, and rules — by request during the founding period.
Included with every server
Optional Extras
Each add-on joins your server’s monthly invoice — arranged during onboarding, or any time after. Just ask.
| Add-on | Monthly · US$ / C$ |
|---|---|
| Memory — installed in balanced sets | |
| +32 GB ECC RAM | US$15 / C$20 |
| +64 GB ECC RAM | US$26 / C$35 |
| +128 GB ECC RAM subject to platform limits | US$48 / C$65 |
| Storage — always brand-new drives | |
| +500 GB SSD Metal tiers | US$12 / C$16 |
| +1 TB SSD Metal tiers | US$23 / C$31 |
| +2 TB SSD Metal tiers | US$46 / C$62 |
| +100 GB SSD Instances | US$5 / C$6 |
| Backup vault — versioned, off-server, managed by Cephlon | |
| 250 GB vault included with Managed | US$11 / C$15 |
| 500 GB vault | US$20 / C$27 |
| 1 TB vault | US$36 / C$49 |
| Access & software | |
| Cephlon Connect private access — nothing exposed to the public internet | US$10 / C$13 |
| Windows Server bring your own valid licence | Free |
Annual billing = 2 months free, setup included. One-time setup otherwise US$59 / C$79 — waived for Founding-10. Prices locked 12 months — while the component market reprices, we don’t.
Why Cephlon
Ontario hardware we own - Canadian privacy jurisdiction, not a US hyperscaler.
Bare metal: your OS, your keys. Optional guided full-disk
encryption and iDRAC-handoff mode.
See the Transparency page
The people who racked your server are the people who reply.
We collect only what we need to operate the service - billing records and network flow data for abuse prevention. No content inspection, no analytics mining, nothing sold. Ever.
We publish our real, measured uptime and back our SLA with defined service credits. We build to our own published standard - and show you exactly how it works, from network isolation to precisely what we log.
FAQ
Enterprise-grade server platforms - plus custom builds we engineer in-house - with dual power supplies, ECC memory, and out-of-band management. Every unit passes a 72-hour burn-in before it carries a customer, and drives are always brand new.
Cephlon Site 00 · RM1, Ontario, Canada. Access-controlled, camera-monitored, biometric entry. We don't publish the street address - that's part of the point.
Practically, no - your OS, your accounts, your keys. Details on the Transparency page
Billing records and network flow data for abuse prevention. No packet contents, no file access, no workload analytics.
You get something better for most workloads: a dedicated hostname with automatic failover, your own dedicated ports, and Cloudflare shielding for web. Need a dedicated public IPv4? Available by request for qualified workloads - contact us.
Illegal content, spam, attacks, and (for now) public game-server hosting. Port 25 is closed by default - running a legitimate mail workload? Contact us; qualified use cases are handled case-by-case. Read the full AUP →
Instances go live in 24–48 hours; metal is provisioned within 5 business days. Both are hand-provisioned today — self-serve automation is coming.
Dual PSUs, spares on the shelf, humans nearby. SLA breaches earn credits automatically - the full SLA and credit schedule are published on the SLA page.
Not unless you ask - by design. Backup vault add-on (or Managed) only.
Yes - isolated shared Instances from US$35 / C$45 monthly, by request during the founding period.
Invite-only launch. Request your founding invite today.
Error message