Security add-on for any Vlux network. Blocks the port for everyone except the gateway — your sensitive data stays behind a closed gate. Simple enough for any private user, robust enough for any business. Made in Germany.
Each layer works on its own. Together they form a defense in depth that holds even if a single layer fails.
Only allowed IPs reach the Bastion container at all. Everything else is blocked before the server.
Every connecting device identifies itself with its own certificate. Without a valid certificate — no connection.
Docker with AppArmor and Seccomp profiles. The Bastion process can’t reach anything outside its sandbox.
Inside the tunnel, another Vlux-specific token check. Two independent layers of auth instead of one.
Suspicious behavior — many failed logins, unusual load spikes — is throttled and reported automatically.
No single layer makes a system secure. But anyone facing five hurdles usually gives up before that — and that’s exactly what Bastion is built for.
Examples where Bastion is useful — a law firm, a tax advisor or a practice, too, can keep their data in-house. Private users and businesses just the same.
A law firm, too, can keep files and documents in-house instead of in a foreign cloud.
Vlux Bastion · VluxPC · VluxApp Learn moreLaw firms work with sensitive documents. With Vlux Bastion the data sits on the firm’s own server instead of running through foreign cloud providers. Remote access goes through a single, controlled entrance, everything end-to-end encrypted.
Whether that meets the specific professional requirements is for the firm itself to check and decide.
In beta With Vlux Drive: files sit only on the central Bastion server, the PCs show skeletons. If a laptop is lost, no data remains on the disk.
Receipts and documents stay between client and firm on your own devices — without a foreign cloud.
Vlux Bastion · VluxPC · VluxApp Learn moreReceipts, payroll, annual statements are sensitive data. With Vlux Bastion, clients send receipts by photo straight into the firm, end-to-end encrypted. The data lands on the firm’s own server — no foreign cloud in between.
Advisory recordings and documentation are managed in the same system, versioned and on your own hardware.
Patient data and recordings stay inside the practice, on your own devices instead of a foreign cloud.
Vlux Bastion · VluxPC · VluxApp Learn moreMedical practices work with especially sensitive data. With Vlux Bastion, patient records, finding photos and recordings stay physically inside the practice network instead of in cloud services under foreign law. Remote access runs through a controlled entrance with several layers of protection.
Image and progress documentation are managed in the same system as the records. Whether that meets the specific requirements is for the practice itself to decide.
What Bastion delivers in every use — and what professional rules of conduct require.
Your data sits on your own devices. You keep full control — no foreign server gets your content.
AES-256-GCM between sender and recipient. Nobody in the middle can read along.
Built in Schleswig-Holstein. Relay servers in Germany.
No cookies, no third-party tracking, no third-party services — on this site or in the product.
The beta phase is starting now — with a fixed group of testers.
The beta is running with a fixed group — we're not accepting further applications at this time. General availability is coming; then VluxNet will be open to everyone.
If you need a secure solution right now, reach out anyway — we'll find a way.
Send urgent request
