Passbolt Hosting in Germany
WZ-IT operates Passbolt as a central password manager with secured access, backups, updates and documented recovery.
About the technology
Manage shared credentials in a controlled way
Passbolt encrypts passwords at user level and helps teams share credentials selectively. Permissions and key material are therefore part of the operating concept.
We configure the platform, mail delivery, TLS, backups and monitoring and plan user migration, SSO or directory integration for the selected edition.
Passbolt for secure team access
Encrypt passwords
Store credentials with end-to-end encryption and decrypt them only for authorised users.Users and MFA
Configure accounts, multi-factor authentication and administrative roles in a controlled manner.Share access
Share passwords with selected users or groups and assign permissions transparently.Trace activity
Review changes and sharing actions with the available event and audit capabilities.Connect browsers and CLI
Provide browser extensions, mobile clients, CLI and API for the required workflows.Integrate directories
Connect SSO and user directories depending on edition and target architecture.Migration and takeover
Assess existing data and configuration, migrate them in a test run and move to managed operations through a controlled cutover.Identity and secure access
Secure SSO, roles, administrative paths and external access for the application and existing infrastructure.Backup and recovery
Back up all stateful components consistently and document the recovery path for the agreed scope.Updates, monitoring and operations
Monitor and update the application and its technical dependencies and operate them under the agreed service level.
Operations beyond installation
Operate Passbolt as a security-critical password platform
Application, database, mail, encryption keys, browser clients and recovery procedures must be managed as one security system.
Password platform
Operate Passbolt and supported dependencies on controlled versions.Identity and recovery
Define MFA, groups, recovery kits and offboarding procedures.Encrypted data
Protect database, server keys and configuration consistently.Security operations
Monitor updates, mail delivery, certificates, backups and restore tests.
Area
Responsibility for platform and credentials
WZ-IT operates the platform; users and customer administrators remain responsible for their secrets and recovery material.
| Area | Responsibility | Scope and boundaries |
|---|---|---|
| Passbolt platform | WZ-IT | Deployment, database, mail integration, monitoring and updates. |
| Server keys and backups | WZ-IT | Protected storage and documented recovery of platform components. |
| SSO, MFA and groups | Shared | We configure supported controls; the customer defines users and policies. |
| Recovery process | Shared | Technical steps and organisational custody are agreed together. |
| Passwords and user keys | Customer | Users and customer administrators own secret content and personal recovery items. |
| Custom integrations | Optional WZ-IT service | Provisioning, APIs and enterprise features are assessed separately. |
Hosting & operations
How much does Passbolt hosting cost?
We combine the right compute size with ongoing operations, backups, monitoring and a service level appropriate for the criticality of Passbolt. High availability and recovery targets are designed separately where needed.
Hosting for Passbolt in Germany: GDPR-compliant operations
- One managed standard application included
- .de domain included or your own domain or subdomain via CNAME
- German data centres with ISO 27001 and BSI C5, no US clouds
- 99.9 % standard availability per month
- Regular updates, CVE monitoring and prioritised patches for critical vulnerabilities
- Central logs with immutable retention
- Daily backup with 7-day retention
- 5 TB outbound traffic per workload and month
- 24/7 proactive monitoring
- Five service levels, 24/7 P1 response with Production or Critical
- Personal technical contact
Instance sizes and monthly prices
- XS · 2 vCPU, 2 GB RAM, 40 GB NVMe SSD
- €99.90 in total
- S · 2 vCPU, 4 GB RAM, 80 GB NVMe SSD
- €129.90 in total
- M · 4 vCPU, 8 GB RAM, 80 GB NVMe SSD
- €159.80 in total
- L · 8 vCPU, 16 GB RAM, 80 GB NVMe SSD
- €219.80 in total
- XL · 16 vCPU, 32 GB RAM, 80 GB NVMe SSD
- €329.80 in total
- Additional storage per 50 GB
- +€4.99
Straightforward provisioning within a few business days
- Bank transfer
All prices are net and exclude statutory VAT. The offers are addressed to businesses. All on-premises options
Other options
Try it free for 7 daysRequest a test instance
We set up a test instance for you, usually on the next business day. No payment details required. After seven days it is deleted unless you continue.
Request a test instance →Bring Your Own InfrastructureInstallation on Your Infrastructure
Installation on your own infrastructure · On-premise or in your cloud · Control over data location and access · Custom configuration · Complete documentation · Initial setup & configuration · Optional support and maintenance contract
Request a proposal →On-premises optionRun Passbolt on hardware at your organisation
As an alternative to managed hosting in the data centre, WZ-IT provides the hardware, configures Passbolt, and handles hardening, monitoring, updates, backup and technical support. Access can be limited to the internal network or enabled through VPN and existing identities.
View WZ-IT App Node →Sizing and deployment
Size Passbolt by users, activity and integrations
User count, shared resources, audit volume, mail and identity integration determine the operational profile.
| Usage scenario | Technical starting point | Key factors |
|---|---|---|
| Small team | S | Standard sharing, mail and regular use. |
| Several teams and groups | M | More users, permissions and audit events. |
| SSO or provisioning | Integration assessment | Edition, identity provider and lifecycle flows are tested. |
| Security-critical deployment | Recovery and governance design | MFA, custody, restore and emergency access are agreed. |
- Enterprise features, complex SSO and special recovery requirements are assessed separately.
Sizing and deployment
Passbolt deployment models
The platform can be hosted centrally or kept close to internal identity and network services.
WZ-IT managed hosting
Dedicated instance on European infrastructure.Your cloud
Operate in your account with existing controls.On-premises
Local deployment in your protected network.Hybrid access
Central platform connected to identity through controlled routes.
Target architecture
Protect identity, encrypted storage and recovery paths
Administrative access and recovery material are separated from normal user access.
Employees and administrators
Browser extension, web interface and approved clients.
TLS and restricted administration
Secure access, MFA and separate operational paths.
Users, groups and keys
Least-privilege sharing and controlled lifecycle.
Passbolt
Encrypted credential sharing, audit and team management.
Database
Encrypted resources, users, permissions and audit state.
Keys and backups
Protected server material and consistent recovery copies.
Mail and identity
Invitations, notifications and optional central authentication.
A server backup alone does not replace user recovery kits and documented offboarding procedures.
Role in the overall system
Related services for Passbolt
This page covers installation and the agreed platform operations for Passbolt. Custom code, the access layer and special confidentiality requirements remain clearly separated responsibilities that can be added when needed.
Support custom code and integrations
Keep custom extensions, interfaces and dependencies controlled, updated and supportable.
View service Secure accessConnect users, sites and systems
Add identity-based access and private network paths as a separate operational layer.
View service Operate confidentiallyAssess Section 203 requirements separately
For professional secrecy holders, define contractual, access and infrastructure requirements in a dedicated operating model.
View serviceThree relevant adjacent paths instead of a long list of further products.
View the overall systemFrequently asked questions about Passbolt managed hosting
Answers about encryption, recovery, SSO and operations.
- Passbolt Hosting with WZ-IT starts at €99.90 net per month. It includes a dedicated size XS instance (2 vCPU, 2 GB RAM, 40 GB NVMe SSD), updates, daily backups with 7 days of retention, 24/7 monitoring, 5 TB of outbound traffic and a first response to critical incidents by the end of the next business day. Larger instances and higher service levels cost extra; the configurator shows the total price.
- The entry level is a dedicated size XS instance with 2 vCPU, 2 GB RAM, 40 GB NVMe SSD for €99.90; it suits lightweight applications as well as test and development environments. Size S with 2 vCPU, 4 GB RAM, 80 GB NVMe SSD costs €129.90. We check which size Passbolt needs in production before provisioning. Size M (4 vCPU, 8 GB RAM, 80 GB NVMe SSD) costs an extra €29.90 excl. VAT, L (8 vCPU, 16 GB RAM, 80 GB NVMe SSD) an extra €89.90 excl. VAT and XL (16 vCPU, 32 GB RAM, 80 GB NVMe SSD) an extra €199.90 excl. VAT, each per month. Additional storage costs €4.99 excl. VAT per 50 GB and month.
- No. WZ-IT does not limit the number of users. How many users can work smoothly at the same time depends on usage and the chosen instance size XS to XL.
- Passbolt Hosting can be cancelled monthly, with no minimum term and 30 days' notice to the end of the month.
- Germany and Switzerland are available at the same prices, in both cases without US clouds. The data centres are ISO 27001 certified; in Germany we additionally operate with a German provider whose data centres are BSI C5 attested. The Section 203 Managed Cloud for professional-secrecy holders is available in Germany only.
- We typically provide a production instance within a few business days after signing. For a trial, we set up a test instance, usually on the next business day; it runs free of charge for 7 days and without payment details.
- Yes. One .de domain is included with every hosting plan. Alternatively, connect your own domain or subdomain with a CNAME record.
- Passbolt is designed around client-side encryption. Platform administrators operate the service but should not receive users' private keys or recovery phrases.
- Database, server keys, configuration and required files are protected together and restored through a documented procedure.
- Depending on edition and target setup, supported identity integration can be implemented after review.
- We can plan controlled import and onboarding, while users validate ownership and access.
- Yes. We can deploy and operate it inside your infrastructure.
Knowledge
More about Passbolt
Matching solutions for your project
- NetBirdModern open-source VPN solution with centralized management
- WazuhOpen-source security platform for threat detection, compliance monitoring, and incident response
- VaultwardenLightweight, self-hosted alternative to Bitwarden
- AuthentikOpen-source identity and access management system
- KeycloakOpen-source identity and access management
Reviews & projects
Client feedback and projects worldwide
WZ-IT moved our studio infrastructure from decentralised individual devices to a central platform: every site is securely connected via VPN, new devices are onboarded automatically and an entire site is provisioned from a template, without manual steps on location. What impressed me most is the breadth and depth of their knowledge: Timo and Robin are not a typical IT provider who sets up a server and leaves. The two of them think their way into highly complex infrastructure and software topics, work through every requirement we put in front of them, and build networking, provisioning and operations so that everything fits together in the end. WZ-IT is an excellent partner for complex software, network and architecture projects.
Steve KirchnerManaging Director, nextGYM GmbH
International
Built in Germany's Ruhr Valley. Running worldwide.
WZ-IT designs, develops and operates infrastructure and software for clients in Germany and internationally. We deliver projects remotely and continue supporting them in ongoing operations after go-live.
Selected projects
- LiveRemote access platform for distributed water treatment plantsABCO Water Systems · Australia · Secure Access & OT
- 81%AWS migration with substantially lower operating costsEVA Real Estate · UAE · Cloud exit & infrastructure
- 98%Provision new sites in minutes instead of hoursnextGYM GmbH · Germany · Automation & IoT
Read client reviews
- Secure your Proxmox & backup setup
- Modernize your infrastructure - sovereign
- Plan a sovereign open-source stack
- Integrate a local AI solution
- Modernize your legacy software
- Cut cloud cost - up to −81%
- Build a high-availability Proxmox cluster
- Virtualize with Managed Proxmox
- Design an open-source AI architecture
- Get collaboration fully managed
- Ship your prototype to production
- Connect sites and clusters securely
Hosting & operations
Enquire about hosting and operations for Passbolt
Briefly describe the current state and objective for Passbolt. We assess infrastructure, integration, and ongoing operations.
- Straight with Timo and Robin - no sales team, no pitch
- A professional assessment of your situation
- Concrete next steps for infrastructure, software or AI
The conversation is free and non-binding.
WZ-IT's advice on our Azure migration was technically sound and completely non-binding right from the intro call - we took away a great deal.
Jakob ÖschlbergerInno7 GmbH
WZ-IT's advice on our Azure migration was technically sound and completely non-binding right from the intro call - we took away a great deal.