A real Linux server. No public IP to scan.
A Cube is a full Linux server — root access, its own kernel, any vCPU, RAM and disk you want, billed by the minute. Your app is public. Your server isn't.
- No session limit
- Own kernel per Cube
- Expose only what you want
- Installs of our packages, last 30 days
- 6,103
- Counted by npm, not by us — check it yourself, where npm lists each package's weekly count.
- Cheaper than sandbox providers
- 92% less
- At the same size, on their published rates — see the arithmetic
Fewer doors. All of them yours.
A typical VPS is handed a public IPv4 the moment it boots, and from then on the whole internet can scan it, brute-force it and point traffic at it. A Cube is not reachable from outside at all until you decide it should be.
Websites and APIs
Point a domain at us with one CNAME. We issue and renew the certificate, terminate HTTPS at our ingress and forward to your Cube over an internal, mutually authenticated connection — so the machine running your app is never addressed directly.
SSH, databases, anything TCP
Open a port when you need one and close it when you don't. Every mapping can be locked to an IP allowlist, so the only things that can reach your database are the addresses you named.
Outbound is just normal
apt and npm installs, Docker pulls, API calls, webhooks out — all unrestricted. Private inbound does not mean a sandboxed network you have to fight; it means nothing arrives that you did not ask for.
From nothing to root, in one command
No VPCs, no security groups, no IAM. Create a Cube in the dashboard or from your terminal, and you're SSH'd into your own isolated server in seconds.
krova cubes create --name web-1 \ --image ubuntu-24.04 \ --ssh-key "$(cat ~/.ssh/id_ed25519.pub)" \ --vcpu 2 --ram 4 --disk 40✓ Cube provisioned · booted and readykrova ssh web-1ubuntu@web-1:~$Not a container. Not a fragile VPS.
A Cube is a real virtual machine with the speed of a container — the isolation you need without the overhead you don't.
What is a Cube?
A Cube is a lightweight microVM — built on Firecracker, the same isolation technology behind AWS Lambda and Fargate. Each Cube boots its own kernel in complete isolation from every other Cube — never the shared kernel a container hands every tenant on the box.
Firecracker gives you the isolation of a virtual machine with the speed of a container. Krova Cloud is the platform on top: one-click or one-API-call provisioning, per-minute billing, custom domains with automatic HTTPS, snapshots, and team access — without running the hypervisor yourself.
What you can build on a Cube
The isolation of a VM makes a Cube safe for the things a shared box can't handle — and it still runs your everyday workloads.
Everything ships with every Cube
No add-ons to buy. Snapshots, custom domains with automatic HTTPS, team access and the full REST API come with every Cube.
Full root access
- Your SSH key baked in at creation
- Run any software — no restrictions
- Full systemd, package managers, kernel modules
Networking & domains
- Custom domains with one CNAME + automatic HTTPS
- Managed ingress — no certificates to handle
- TCP port forwarding with IP whitelists
Snapshots & backups
- Automatic snapshots on a schedule, no downtime to take one
- Restore in a click, or clone a snapshot into a whole new Cube
- Export a Cube as a portable .cube file and import it back
Teams & permissions
- Spaces to organize by project or team
- Granular per-Cube access control
- Per-Space credit balance and billing
Power off & restart
- Power off to stop compute billing — start again in seconds
- Restart to boot against the current kernel, disk preserved
- Auto power-off when credits run out
API & automation
- Full v1 REST API for the whole lifecycle
- Scoped API keys + idempotency
- Outbound webhooks on every change
Provision a Cube from your own code
A fully-typed TypeScript SDK, a CLI, an MCP server for Claude & Cursor, webhook verification, an n8n node, and a public REST API — all open-source and published on npm. Spin up a Cube per user, per agent, or per build.
Or just run a server. Still half the bill.
A Cube is a general-purpose Linux server too — up to 69% less than an equivalent instance on Lightsail, DigitalOcean, Vultr or Linode. Every figure below is current and real, and you're billed by the minute.
| Feature | Krova Cloud | AWS Lightsail | DigitalOcean | Vultr | Linode |
|---|---|---|---|---|---|
| Internet exposure | No public IP to scan | Public IPv4 | Public IPv4 | Public IPv4 | Public IPv4 |
| Sizing | Any vCPU/RAM/disk | Fixed plans | Fixed plans | Fixed plans | Fixed plans |
| Hardened per-cube sandbox | Jailer + own kernel | — | — | — | — |
| 8 GB RAM / month | $20 | $44 | $48 | $40 | $48 |
Frequently asked questions
Does my Cube have a public IP address?
Your Cube reaches the internet completely normally — apt and npm installs, Docker pulls, outbound API calls and webhooks all work — and your sites and APIs are reachable worldwide over HTTPS. What it deliberately does not have is an inbound address of its own, and that is a security feature rather than a missing one. Unlike a typical VPS, where every instance is handed a public IP the whole internet can scan and probe, a Cube lives on a private network: nothing reaches it from outside unless you explicitly map a port, and every port mapping can be locked to an IP allowlist. Web traffic on your custom domains enters through Krova Cloud's own managed ingress tier, which terminates HTTPS and forwards to your Cube over an internal, mutually authenticated connection — so the machine running your app is never addressed directly from the internet.
How much bandwidth do I get? Is egress metered?
Bandwidth is unmetered: Krova Cloud does not bill per gigabyte and does not set a monthly transfer allowance, so a traffic spike cannot produce a surprise invoice the way per-GB egress does at the hyperscalers. Provider-grade DDoS mitigation is included, and there is no bandwidth penalty if you are attacked. The honest caveat, which is in our Acceptable Use Policy rather than buried: the network is shared, so we reserve the right to rate-limit an individual Cube where sustained traffic would threaten host stability or other customers, and workloads whose whole purpose is consuming bandwidth — public file mirrors, torrent seedboxes, large-scale media relays — need prior written approval. Normal, well-behaved use of a web app, API, database or game server is simply not something we meter.
Can I run Docker inside a Cube?
Yes, and you can have it preinstalled. Cubes are full virtual machines with their own kernel, so Docker, Podman, or anything else you would run on a regular Linux server works normally. Two of the four images — Ubuntu 24.04 + Docker and Debian 13 + Docker — ship with Docker Engine and the Compose plugin already installed from Docker's official repository and enabled at boot, with your login user in the docker group so you do not need sudo. Pick a plain image instead if you would rather install it yourself.
What happens when I power off a Cube?
Cube shuts down gracefully and its disk is kept exactly as you left it — nothing on it is lost. Compute charges (vCPU + RAM) stop immediately; only the disk component of the Cube's hourly rate continues, since the rootfs still occupies host disk. Starting it again works just like powering on any server.
Is there a subscription or monthly plan?
No. Krova Cloud is prepaid pay-as-you-go — there's nothing to subscribe to. You load credit whenever you like and it's drawn down by the minute while your Cubes run, and stopped Cubes and backups pay only for the disk they keep. Add a card to enable one-click top-ups and optional auto-recharge (we top you back up when your balance gets low). Tiers (which set how many Cubes you can run at once, how many backups you keep, and how often snapshots are taken) unlock automatically as you spend — they're limits, not bills, and cost nothing. Cube size is never gated: every tier can run up to 16 vCPU, 32 GB RAM and 100 GB disk. Need more headroom? Email support and we'll review your use case and lift your limits where it makes sense.
Stop exposing servers. Start building.
Create your free account and SSH into your first Cube in under a minute. Claim $5 in free credit — one-time, per account, and nothing is charged for it.
