Hetzner Cloud Firewalls

HetznerSecurityFree tier available

Stateful network firewalls applied to cloud servers via labels, with reusable rule sets across server fleets

Jurisdictional exposure

Provider HQ
EUGunzenhausen, Germany

Subject to GDPR, Data Act, DGA

Region locations
APACEUUS6 regions across 3 jurisdictions
Sovereign option
No sovereign-flagged regions in the catalogue for this service.

Sub-services (1)

Rule Sets

Reusable rule sets attached to one or more servers via labels

Compliance & Certifications

This service is attested for the following frameworks. Always verify with the provider before relying on a specific compliance posture.

Where this runs

6 regions
4 countries
Commercial regions (6)

Europe (3)

  • Helsinki
  • Falkenstein
  • Nuremberg

North America (2)

  • Ashburn, VA
  • Hillsboro, OR

Asia (1)

  • Singapore

Tags

Equivalent services on other platforms

AWS Network FirewallAWS

Managed stateful firewall, IDS/IPS, and TLS inspection service deployed as VPC endpoints with Suricata-compatible rule syntax, AWS Managed Threat Signatures rule groups, and centralised deployment via AWS Firewall Manager across Organizations

Azure FirewallAzure

Cloud-native, stateful firewall-as-a-service with built-in high availability, unrestricted scale, threat intelligence-based filtering, and centralised policy

Cloudflare Network FirewallCloudflare

Cloud firewall-as-a-service that filters and inspects network-layer traffic across Cloudflare's network for sites connected via Magic Transit or Cloudflare WAN. Formerly Magic Firewall; Enterprise only.

Cloud Temple Managed FirewallCloud Temple

Fully managed next-generation firewall in an active/passive HA cluster, in a Stormshield edition (ANSSI-qualified) or Fortinet edition, operated 24/7 by Cloud Temple with changes via change management; billed monthly per HA cluster

Google Cloud Next Generation FirewallGCP

Managed next-generation firewall for VPC networks with L7 inspection, IDPS threat signatures (Palo Alto-powered), TLS interception, hostname-based egress rules, and unified policy management across networks and organisations

IONOS Network Security GroupsIONOS

Centrally managed firewall rule sets for a virtual data centre, applied to VMs and NICs that are members of the group to filter ingress and egress traffic

OCI Network FirewallOracle

Managed next-generation firewall service powered by Palo Alto Networks VM-Series, with application awareness, TLS inspection, URL filtering, intrusion prevention (IPS), DNS security, and deployment flexibility across VCN or Transit Hub topologies

Pricing

Pricing model:free