Publishing infrastructure for higher-stakes work
A decision framework for independent reporting and lawful advocacy.
Content revised · English
- Framework
- Publishing infrastructure for higher-stakes work
- Ranking
- No paid or invented scores
- Available evidence
- Catalogue and workflow only
Keep these in view.
- Minimise account data
- Separate sensitive source material
- Encrypted independent backups
Separate publication from source intake
A public news site, private document workflow and reporter’s endpoint have different threat models. A VPS is not a complete SecureDrop installation or an automatic source-protection system. Evaluate the maintained project guidance and the operational skills needed.
Keep unnecessary identity paths out of the design
Review registration, payment source, domain custody, historic DNS and document metadata. A privacy-oriented domain service has different ownership and transfer boundaries from server hosting. Preserve credentials privately and use appropriate encryption for sensitive source material.
A two-region design needs two recovery plans
A primary site and second-region backup or standby can reduce one shared failure, but introduce extra credentials, replication and data-access paths. Add the two chosen plan totals and transfer/storage costs for the real term; no universal two-country price is asserted.
Candidates, with the evidence attached
This is a shortlist for investigation, not a ranked endorsement. Primary pages were reviewed on 10 October 2026 where retrievable; incomplete checks remain explicit. The provider’s current offer controls its price, policy and supported route.
| Provider | Evidence to start from | Question to resolve |
|---|---|---|
| 1984 Hosting | Official site: Iceland web/VPS focus; BTC and XMR listed. | Check exact VPS term, image and account requirements. |
| FlokiNET | Publishing-oriented regional candidate; primary page retrieval incomplete. | Confirm current region, plan and payment facts directly. |
| Njalla | Official site: domains, VPN and virtual servers; BTC/XMR among listed options. | Separate domain custody from server administration. |
| OrangeWebsite | Official site: Iceland hosting and VPS products; crypto options listed. | Verify the exact asset, product policy and full period. |
Read the complaint and disclosure process
No privacy host can promise that every court order is ignored. Ask what records exist, who can access them, how requests are validated and what can be reported. The proposed Ombra ordinary complaint path includes response and appeal windows, with urgent harm escalation.
Practise continuity under pressure
Test restoring the publication, changing DNS, reaching support and preserving the independent backup. Network mitigation may help a public site, while WAF/rate limits address other pressure. The catalogue and proposed SLA do not establish a proven live protection service.
| Criterion | What to record | What it does not prove |
|---|---|---|
| Publication and source risk separately | Minimise account data | Operational privacy or uptime |
| Continuity beyond one server | Separate sensitive source material | A blanket legal exemption |
| A proportionate disclosure boundary | Encrypted independent backups | A tested recovery outcome |
| Complete cost | Initial and renewal totals, same period | Value without workload fit |
A final practical check.
- Use one workload specification for every candidate.
- Mark unknown facts instead of filling gaps with a score.
- Preserve the current provider links and review date.
- Keep billing, policy and recovery requirements in the decision.
Questions, answered.
Which provider is the cheapest?
This guide makes no current cheapest claim. Compare the exact capacity, full billing period, renewal, setup and add-on cost on the live product pages. The Ombra catalogue provides its own prepared totals separately.
Can I order real service from this page?
The Ombra links configure an order and can lead to an authenticated fixed-address checkout. No blockchain monitor or production provisioning is connected, so no operational service entitlement is created. External provider references lead to their own public materials.