C1
€9.99/mo
1 vCPU
2 GB DDR5
25 GB NVMe
- Bandwidth 5 TB
- Port 10 Gbps
- Anti-DDoS included
Madrid · Cogent · AS215691
High-Performance VPS Anti-DDoS in Spain
AMD Ryzen 9950X vCPU, NVMe in RAID storage and hot scaling from the Cogent Madrid Datacenter with 10 Gbps ports. Hostealo Shield (in-house) Anti-DDoS up to +200 Gbps included.
- ISO 27001 and ENS certified
- 99% SLA
- Senior support 24/7 in Spanish & English
- Our own AS215691 (LIR)
Ping from youmeasuring…Monthly uptime…
Hostealo Shield
+200 Gbps
Port
10 Gbps
Your latency
…
VPS from
€9.99/mo
Available VPS plans
AMD Ryzen 9950X · NVMe · Anti-DDoS included · Hot scaling
6 plans available in this location· Updated 01:21 PM
C2
€14.99/mo
2 vCPU
4 GB DDR5
50 GB NVMe
- Bandwidth 10 TB
- Port 10 Gbps
- Anti-DDoS included
C4
€24.99/mo
4 vCPU
8 GB DDR5
100 GB NVMe
- Bandwidth 15 TB
- Port 10 Gbps
- Anti-DDoS included
C8
€39.99/mo
8 vCPU
16 GB DDR5
125 GB NVMe
- Bandwidth Unlimited
- Port 10 Gbps
- Anti-DDoS included
C12
€59.99/mo
12 vCPU
24 GB DDR5
150 GB NVMe
- Bandwidth Unlimited
- Port 10 Gbps
- Anti-DDoS included
C16
€74.99/mo
16 vCPU
32 GB DDR5
175 GB NVMe
- Bandwidth Unlimited
- Port 10 Gbps
- Anti-DDoS included
VAT not included · All plans include root access, dedicated IPv4 and support.
Need the whole machine?
If shared vCPU is not enough or you want physical cores with no neighbours, the next step is bare-metal in this same datacenter, with IPMI/iKVM.
DDoS Protection
Anti-DDoS Hostealo Shield in Madrid, included
A DDoS cloud is not a "best effort" sticker on top of the server. In Madrid every flow passes through Hostealo Shield, our in-house L3/L4 mitigation system, with capacity up to +200 Gbps and fine-grained control over the scrubbing before it ever reaches your server.
Scrubbing in
Madrid
MadridInternet
Traffic + attack
Hostealo Shield
+200 Gbps · Analysis <1s · L3/L4
Your server
Clean traffic
Signatures the scrubbing filtersAttackLegitimate trafficClean traffic
- SYN Flood
- UDP Flood
- ICMP Flood
- DNS Amplification
- NTP Amplification
- Memcached
- TCP Reflection
- ACK Flood
- SSDP
- Fragmentation
- Spoofed IP
- 0-day vectors
+200 Gbps
Madrid capacity
Hostealo Shield is our in-house Anti-DDoS mitigation system with advanced control.
< 1s
Automatic detection
Heuristics + signatures. Malicious traffic is dropped without manual intervention.
L3 / L4
Layers covered
Volumetric and protocol-level: SYN/UDP/ICMP flood, amplification, reflection, fragmentation.
24/7
Active monitoring
Our own NOC supervises and tunes rules in real time during a sustained attack.
Auto-discovery
Filters available in Madrid
The system detects and applies the right filter automatically based on your service's traffic: you don't have to configure anything. Madrid offers the broadest catalog thanks to Hostealo Shield.
Gaming
TCPAltVTCPFiveM Ultra StrictTCPMinecraft JavaTCPTibiaUDPAltVUDPArk: Survival AscendedUDPArk: Survival EvolvedUDPArma ReforgerUDPCounter-Strike: Global OffensiveUDPDayZUDPFactorioUDPFiveMUDPHurtworldUDPLeft 4 Dead 2UDPMulti Theft AutoUDPPalworldUDPPath of TitansUDPRakNetUDPSCP: Secret LaboratoryUDPSan Andreas MultiplayerUDPSource Engine / A2SUDPSource Engine 2 / A2SUDPSource Engine Strict / A2SUDPThe IsleUDPASE Query
Voice
UDPTeamSpeak 3TCPTS3 Query/Filetransfer
Web / TLS
TCPHTTPTCPHTTP StrictTCPTLSTCPSSL Strict
Infra
TCPFTPTCPSSHTCPRDPTCPRemote Desktop ProtocolUDPRDPUDPDNSUDPNTP
VPN
UDPOpenVPNUDPWireGuard
Advanced panel, Madrid only
Hostealo Shield exposes direct control over the scrubbing behavior per IP, with options not available in other DCs.
Per-IP rules
Drop by default, asymmetric or symmetric. Configure traffic behaviour for each IP in the block.
Custom filters
Create your own L4 rules over TCP/UDP when none of the presets covers your case.
ASN or country block/whitelist
Filter traffic by geographical origin or whole autonomous system. Useful to contain waves from specific regions.
IP lists
Whitelist or blacklist specific IPs or whole ranges, managed from the panel.
Madrid · Cogent
Why your VPS in Madrid
What changes when the server lives here: latency from Spain, the legal frame that applies, and the operator of the building itself.
Latency and audience
Madrid puts your server 5-15 ms from the average Spanish ISP and 25-40 ms from Paris, Milan or Lisbon. It is the natural DC when your audience is Spain, Portugal or Spanish-speaking LATAM: for that traffic, no central-European or US DC beats it on perceived latency. Typical fits: SEO ES, e-commerce and SaaS aimed at the Iberian market.
Jurisdiction
The server sits physically on Spanish soil: LOPDGDD and GDPR apply, the Spanish NIS2 transposition, and Spanish courts hold jurisdiction. Data is not exposed to the US CLOUD Act or Patriot Act. A good fit for ES financial sector, healthcare, public sector or any company with EU customers where data residency on European ground is non-negotiable.
DC operator
Cogent Datacenter inside a converted electrical substation in San Sebastián de los Reyes. Tier III+ ready design, dual UPS power with diesel generators, N+1 cooling. Cogent is a global Tier 1 operator, so the building's upstream matches your transit. Anti-DDoS uses Hostealo Shield in-house with +200 Gbps of L3/L4 mitigation.
Sectors that fit best
Natural fits: e-commerce aimed at the Iberian market (LSSI-CE compliance, Spanish VAT), fintech regulated by CNMV or the Bank of Spain, public-sector bodies under the National Security Scheme (ENS), healthcare under AEMPS, creative agencies serving ES clients, and Iberian B2B SaaS that needs the server close to Spanish-speaking end users.
AS215691
Network and connectivity in Madrid
AS215691 reaches the Internet through Cogent, the only upstream in Madrid, with Hostealo Shield in front of every IP.
Egress path
Your serverAS215691CogentInternet
Upstreams
Direct BGP session from AS215691
Cogent
Internet exchange points (IX)
No IX in Madrid: all traffic enters and leaves through Cogent.
Protection
Hostealo Shield
+200 Gbps
L3/L4 mitigation capacity
Public sector
Is your system within ENS scope?
We hold a conformity certification with the ENS, Spain's National Security Framework, at Medium category (RD 311/2022), issued by EQA. If you serve the Spanish public administration, the infrastructure you contract is part of the scope you have to account for.
Here is the certificate to attach to your file, hardware in the Cogent Madrid datacenter and data under Spanish jurisdiction, with no CLOUD Act exposure.
The certification accredits Hostealo as an infrastructure provider. It does not replace bringing your own system into ENS conformity: it covers the layer we operate.
Certificate details
PDF - Framework
- RD 311/2022
- Category
- Medium
- Certification body
- EQA
- Holder
- AP Interactive Solutions SL
- Infrastructure
- Cogent Madrid, Spanish jurisdiction
Use cases
Built for your project.
Every VPS node runs on AMD Ryzen 9950X with NVMe in RAID. These are the profiles that best take advantage of the hardware without needing to jump to a dedicated server.
Rust, FiveM, Minecraft without latency battles. A 32 GB RAM VPS comfortably hosts a large Rust server, an active FiveM instance or a Minecraft community. L3/L4 Anti-DDoS included against typical gaming floods.
Game servers
WordPress, Magento and PrestaShop that load fast. NVMe in RAID and a stable PHP stack. WordPress, Magento, PrestaShop or any CMS runs comfortably through mid-tier traffic peaks. If your shop grows, scale RAM and CPU hot without migrating or reinstalling.
WordPress / e-commerce
Bots, workers and cron jobs always online. VPS with full KVM and root to run Discord/Telegram bots, n8n workflows, 24/7 cron jobs, monitoring agents or any process that needs real uptime. Static IP, snapshots when you break something, low European latency. No depending on Replit, Heroku or free tiers that sleep.
Bots & automation
Your own WireGuard without sharing an IP with thousands. Spin up WireGuard or OpenVPN in under 10 minutes. Dedicated IPv4 without inherited reputation, honest bandwidth and country choice (Spain, Germany, Netherlands, New York). No logs or profiling from a commercial VPN provider.
Your own VPN
Nextcloud, Bitwarden, n8n, with no SaaS lock-in. Self-hosted apps like Nextcloud, Vaultwarden, n8n, Plausible, Uptime Kuma or Mealie run comfortably on a modest VPS. Zero vendor lock-in, your data in Spanish jurisdiction and backups under your control, manual or automatic as you prefer.
Self-hosted
Staging environments that don't crash when a dev pushes. Isolated VPS for staging, CI runners, build agents or test sandboxes. Root access, snapshots to revert when something blows up, hot scaling for intense sprints and downsize when the release lands.
Dev & staging
Comparison
Why pick us over Hostinger, OVH, Hetzner or Google Cloud
We're not the cheapest or the biggest. We're the provider with L3/L4 Anti-DDoS included at no cost, our own hardware in Madrid, our own network, and senior engineering support 24/7 in Spanish and English.
| Feature | HostealoYou're here |  OVH |  Hetzner |  Google Cloud |  Hostinger |
|---|---|---|---|---|---|
| L3/L4 Anti-DDoS includedHostealo applies XDP-friendly filters from the panel, auto-discovery and per-IP rules in one click. Hostinger offers basic managed DDoS in their plans. OVH has an anti-DDoS panel but it's hard to use. Hetzner only basic volumetric protection. Google Cloud Armor Standard covers L3/L4 on Load Balancer; bare-metal is out of scope. | |||||
| 24/7 human support in Spanish/EnglishHostinger and OVH offer Spanish support but their first tier is generalist with no NOC access. Hetzner is English-only. Google Cloud requires a paid plan (Enhanced/Premium) for Spanish support. | |||||
| Physical datacenter in SpainNeither Hostinger nor OVH (doesn't sell dedicated in ES) nor Hetzner (DE/FI) have a DC in Spain. Google Cloud has the europe-southwest1 (Madrid) region but only managed cloud, no dedicated bare-metal. | |||||
| Bandwidth with no per-traffic chargeHostealo: no per-GB charge, with each product's port (10 Gbps on VPS in Madrid, Mainhausen and Eygelshoven). Hostinger, OVH and Hetzner: unmetered with throttling/fair use after a certain volume. Google Cloud: charges per GB out (Network Egress), traffic cost can multiply the bill. | |||||
| Dedicated provisioning <24hHostealo: 2–24h depending on stock. Hostinger doesn't sell bare-metal dedicated. OVH: sometimes hours, sometimes days depending on model. Hetzner: minutes–hours. Google Bare Metal Solution requires a contract and onboarding, no instant delivery. | |||||
| Crypto payments | |||||
| Custom ISO + IPMI/KVMHostinger manages the VPS OS, no IPMI or custom ISO. OVH requires a ticket for some ISOs. Google Cloud only accepts images from their catalog, no direct ISO or IPMI/KVM access. | |||||
| GDPR compliance + data in the EUGoogle Cloud operates under the US CLOUD Act even in their European regions; data may be requested by US authorities. |
IncludedPartial or paidNot included
Data based on public information from Hostinger (hostinger.es), OVH (ovhcloud.com), Hetzner (hetzner.com) and Google Cloud (cloud.google.com) as of May 2026. Trademarks of their respective owners. Verifiable on their official sites.
Frequently asked questions
What a sysadmin actually asks before migrating a VPS: hypervisor, dedicated vCPU, NVMe IOPS, hot scaling, custom ISO and how fast it's online. Yours missing? Drop us a line.
KVM with full virtualization. You get your own kernel, loadable modules and access to hardware extensions (AMD-V). That means you can run Docker, Kubernetes (k3s, kubeadm), a custom firewall or even nest another hypervisor (KVM-in-KVM) if you need to. No shared OpenVZ-style containers.
Shared with other VPSs on the same node (that's how virtualization works). The upside: every host runs AMD Ryzen 9950X (16C/32T, high per-core clock), we provision with conservative ratios and monitor contention, so performance is stable in normal conditions. If you need physical cores with no neighbours and no virtualization in between, the right pick is a dedicated server.
Enterprise NVMe Gen4 (Samsung/Micron PM/PE) in RAID. Typical measured performance: around 350k-700k IOPS on 4k random read and 80k-150k IOPS on 4k random write depending on plan. Sequential throughput above 3 GB/s. If your workload is DB-intensive we recommend the plan with the highest IOPS and ECC RAM.
Yes, no restrictions. Since it's pure KVM, you have AMD-V active in the guest. Docker and Kubernetes run without any extra tweaking. Nested KVM (KVM inside the VPS) is enabled by default. Some customers run Proxmox or a mini k8s cluster inside a single VPS.
CPU and RAM scale hot from the panel without downtime. The disk needs a brief reboot (<30 seconds) to extend the partition. You can go from 2 to 16 vCPU or from 4 GB to 64 GB RAM without migrating or reinstalling the OS. Billing prorated to the second when you change.
Root access from minute one and VNC console always available from the panel. It's what saves you when you lock yourself out of SSH by mistake, need rescue mode or want to watch the boot to debug a kernel panic.
Official templates for Debian, Ubuntu, AlmaLinux, Rocky Linux, CentOS Stream, Fedora, FreeBSD and Windows Server (2019/2022) ready in 60-180 seconds from the panel. If you need something outside the catalog (a specific ISO, an unlisted OS), open a ticket and we mount the ISO manually so you can boot from it via VNC.
1 dedicated IPv4 included at no cost. Additional IPs available with a monthly per-IP fee, requested by ticket when you need them. Native IPv6 isn't available yet: we run pure IPv4, the IPv6 deployment is on the roadmap.
Depends on the plan. Plans with limited bandwidth apply throttling when you exceed the monthly quota. Plans labelled unlimited operate under Fair Usage: in normal conditions we don't shape or penalise, but it's not strictly Unmetered. If you saturate the port at 100% sustained for days we'll coordinate with you.
They are not enabled by default. From the panel you can create manual backups whenever you want and keep up to 3 snapshots, and restore them from the same tab. We also recommend keeping a copy of your data off the server.
Automatic detection and reassignment to another node as fast as possible (target under 30 min on a full hardware failure scenario). Your disk data persists because storage is networked, not local to the host. If the incident exceeds 12 consecutive hours, the SLA applies: 2 extra service days per 12h block, requested by ticket within 7 days.
Card via Redsys, PayPal, Bitcoin, Ethereum, USDT, USDC and bank transfer. Card, PayPal and crypto activate the VPS automatically. No commitment or cancellation penalty: cancel from the panel at any time. Upgrades between plans are hot; downgrades require a few seconds offline. Billing prorated to the second.
Yes. From a typical Spanish ISP Madrid usually sits at 5-15 ms; Frankfurt at 25-45 ms depending on ISP peering. For SaaS or e-commerce aimed at Spanish-speaking users, those 20-30 ms show up in TTI, INP and checkout completion rate. For distributed EU audiences, Frankfurt is still valid.
Our own stack, deployed inside our Cogent Madrid rack. XDP in the data plane, our own admin panel, sub-second detection. That's why it is only available in Madrid (in NL/DE we use PletX and W&D, specialised partners; in NY the operator's basic anti-DDoS). In Madrid you talk directly to the team that maintains the mitigation.
Spanish hosting for the people who build.
Pick a plan with live pricing, or tell us about your project and we will propose the infrastructure.