[email protected]

Managed Hetzner servers: system administration and operations

We take over existing Hetzner Cloud and dedicated servers in your account. Patching, hardening, backup management, and incident response are clearly scoped; root access and the provider contract remain yours.

  • Cloud & dedicated
  • Your account remains yours
  • Service levels up to 24/7 P1
Reviews
Cloud Wolke HerausforderungServer NachhaltigkeitIT Beratung Service Consulting SoforthilfeTimo Wevelsiep Robin ZinsExperten für Innovation Migration AWSHetzner Hosting zuverlässig

Companies worldwide trust WZ-IT

  • Stadtwerke Brühl
  • DGHO e.V.
  • solarwerkstatt berlin
  • Krüger Dirndl
  • ABCO Water Systems
  • Golem.de
  • EVADXB
  • nextGYM
  • AInergy
  • ml&s
  • Odiseo Solutions
  • Annota
  • ARGE
  • SweetConnect GmbH
  • Aphy AG
  • CORGOS
  • Rekorder
  • SolidProof
  • Yonju
  • Keymate
  • Paritel
  • Mr. Clipart
  • Millenium
  • Negosh
  • Führerscheinmacher
  • BTI
  • Deutsche Gesellschaft für Datenschutz
Read client reviews

Operating model

Keep existing Hetzner servers in your account while outsourcing operations

With Hetzner Cloud and dedicated servers, the client is responsible for operating system, maintenance, and security. WZ-IT takes over this technical responsibility under a documented scope. This is deliberately different from Hetzner's own Managed Server product: your existing architecture remains flexible and your contracts continue unchanged.

  • Hetzner Cloud Servers

    Existing Linux VMs, private networks, firewalls, volumes, and backups within the agreed operational scope.

  • Dedicated Root Servers

    AX, EX, and other dedicated systems with operating-system operations, hardware signals, and coordinated escalation to Hetzner.

  • Server Auction and existing systems

    Takeover following a technical audit. Hardware health, operating system, backup capability, and replacement needs are assessed first.

  • Proxmox and multi-node setups

    Single nodes, clusters, routing, and backup are scoped separately rather than treated as one standard server.

Responsibility

Who is responsible for what at Hetzner?

Hetzner provides the data centre and booked infrastructure. Operation and security of Cloud and dedicated instances remain the client's responsibility.

Hetzner

Your responsibility at Hetzner

  • The Hetzner responsibility matrix assigns operating system, software, maintenance, and security of Cloud and dedicated servers to the client.
  • Monitoring of the virtual machine and the services running on it
  • Backup design, retention, and application-level recovery
  • Maintenance of custom containers, databases, reverse proxies, and access rules
  • Decisions on maintenance windows, RPO, RTO, and escalation contacts

WZ-IT

What we take over

  • Documented operational takeover for the agreed servers and services
  • Patching, hardening, and maintenance in coordinated windows
  • 24/7 monitoring; WZ-IT response according to the selected service level
  • Backup management and restore tests according to the agreed scope
  • Incident analysis and coordination of required provider tickets

Hetzner service areas

Which Hetzner products we include when taking over operations

We operate customer-owned Hetzner environments. Hetzner Cloud, dedicated servers, and storage products are scoped separately because their control planes, network features, recovery paths, and responsibility boundaries differ.

Hetzner Cloud

Operate Cloud Servers and related cloud resources

  • Size Cloud Servers, images, and Primary IPs for the workload
  • Classify Volumes, Backups, and Snapshots by data and recovery requirements
  • Configure Cloud Networks, Firewalls, Load Balancers, and Floating IPs
  • Use Placement Groups for suitable multi-server architectures
  • Automate provisioning through the Hetzner Cloud API, CLI, or Terraform
Scope boundary and notes

We design and operate Linux systems in Hetzner Cloud together with the resources required for networking, storage, and recovery.

Responsibility boundary: Hetzner operates the data center, hardware, and cloud platform. The guest operating system, firewall rules, data, applications, and recovery procedures remain customer responsibilities unless WZ-IT takes them over.

Outcome: A documented Hetzner Cloud environment whose compute, network, and storage resources fit the operating model.

Dedicated & Robot

Take over Dedicated Root Servers and Server Auction systems

  • AX, EX, RX, and other suitable Dedicated Root Servers following product assessment
  • Include Robot, Rescue System, KVM console, IPMI, and hardware escalation in the operating path
  • Monitor software RAID, SMART, file systems, and available hardware indicators
  • Route Additional IPs, Failover IPs, and Failover subnets correctly
  • Assess Server Auction systems for hardware state, lifecycle, and replacement needs
Scope boundary and notes

Dedicated servers are managed through Robot and require different access, network, and hardware processes from Cloud Servers. We take over Server Auction systems only after an assessment.

Responsibility boundary: Hetzner replaces defective hardware within its product terms. WZ-IT monitors available signals, isolates faults, and coordinates tickets; hardware response times remain a Hetzner service.

Outcome: A reliable operating path from a Linux incident through qualified hardware escalation.

Networking & hybrid

Connect Cloud Networks, vSwitch, and external sites

  • Structure private Cloud Networks for Cloud Servers and Load Balancers
  • Configure Robot vSwitch for Dedicated Servers and suitable cloud-to-vSwitch links
  • Select Failover IPs, Floating IPs, and Load Balancers by their actual failover behavior
  • Integrate site-to-site VPN, NetBird, WireGuard, or dedicated gateway systems
  • Include Hetzner DNS Console, reverse DNS, and certificate paths in operations
Scope boundary and notes

Hetzner Cloud Networks and Robot vSwitch are different products. We design routing, VLANs, MTU, firewalls, and transitions between cloud, dedicated, and external sites as one architecture.

Responsibility boundary: Individual Hetzner network features do not automatically create high availability. Routing, health checks, quorum, and application failover require separate design and testing.

Outcome: Explainable network and failover paths for cloud, bare-metal, and hybrid systems.

Storage & recovery

Use Volumes, Storage Box, and Object Storage correctly

  • Cloud Volumes for additional block storage and separated data paths
  • Cloud Backups and Snapshots for image-based recovery
  • Storage Box for encrypted offsite backups and defined retention
  • Hetzner Object Storage for suitable S3-compatible data and backup workloads
  • Document restore tests, RPO, RTO, and restart sequence
Scope boundary and notes

We map Hetzner storage products to access patterns, failure domains, and recovery objectives and add application-consistent protection where needed.

Responsibility boundary: Snapshots, Cloud Backups, Storage Box, and Object Storage serve different purposes. Application-consistent protection must be defined for each system.

Outcome: A recovery design that connects product capabilities, data consistency, and actual service restart.

Platforms & operations

Operate Proxmox, containers, and applications on Hetzner

  • Docker and Docker Compose, reverse proxies, databases, and standard services
  • Proxmox VE, Proxmox Backup Server, and cluster design as a separate architecture scope
  • Kubernetes on suitable cloud or bare-metal resources under a separate platform scope
  • 24/7 monitoring, maintenance windows, and incident response by service level
  • Migration from AWS, Azure, VMware, or existing servers with testing and rollback
Scope boundary and notes

On Cloud Servers and Dedicated Servers, we can also operate the platform above the operating system. Proxmox clusters are scoped separately because of networking, quorum, and backup requirements.

Responsibility boundary: WZ-IT is an independent service provider. This offering is not Hetzner's native Managed Server product; servers and contracts remain in the customer's account.

Outcome: One accountable contact for infrastructure, Linux, and the explicitly agreed application scope.

One operating model

One operating model for Hetzner and additional systems

The provider is only one operating location. WZ-IT connects servers, clouds, and on-premises systems into a documented environment with consistent monitoring, controlled access, and one coordinated service level.

View hybrid and multi-cloud operations

Location and control

Contracts, accounts, and administrative control remain with you. We take over the agreed technical operations without moving the infrastructure into a closed hosting product.

Private connectivity

NetBird, WireGuard, or existing site connections integrate further clouds, Proxmox systems, and on-premises networks through controlled paths.

Operations and response

Monitoring, updates, backups, documentation, and incident response are designed across all participating systems and operated according to the selected service level.

Monitoring · SLA · Operations

  • Hetzner
  • Private connectivity
  • Cloud · Proxmox · On-premises

Comparison

Root server, Hetzner Managed Server, or WZ-IT operations?

The term managed server describes different models. Root access, stack flexibility, and assigned operational responsibility are the key differences.

ModelRoot accessOperationsSuitable for
Hetzner Cloud / Root ServerYesBy your teamTeams with in-house Linux administration
Hetzner Managed ServerNo, regular Linux userStandardised by HetznerWeb, mail, and database services within the product scope
Hetzner server with WZ-ITYes, in your accountUnder the agreed WZ-IT scopeCustom Linux stacks, containers, platforms, and existing servers

Takeover

From an existing Hetzner server to controlled operations

An existing server is not taken over blindly. Risks, responsibilities, and required transition work are documented before operations begin.

  1. 01

    Assess the estate

    Record servers, access, services, updates, backups, and known risks

  2. 02

    Define scope

    Agree responsibilities, service level, maintenance windows, and transition plan

  3. 03

    Take over operations

    Secure access, connect monitoring, and verify backup status

  4. 04

    Run continuously

    Handle patches, alerts, incidents, and agreed changes with traceability

Service scope

Monitoring or full operations

With Monitoring Only, our team reviews alerts and notifies your team during service hours; incident resolution stays with you. Your servers remain in your provider account. The first managed Linux server starts at €149.90; progressive volume pricing applies from the second server.

Server operationsfrom €149.90Monitoring Only from €49.90

Covered by the standard scope

  • Dedicated operational scope for your instance, not shared hosting
  • Patching, hardening, monitoring, and backup management according to scope
  • Essential service level with initial technical response to P1 by the end of the next business day
  • Provider charges remain transparent and are billed directly by Hetzner

Progressive pricing per client environment

Server 1
€149.90
Servers 2 to 5
€119.90 each
Servers 6 to 10
€99.90 each
Servers 11 to 25
€89.90 each
from 26 servers
individual
Example: 8 servers
€929.20, €116.15 per server

Onboarding typically starts within 1 to 2 business days after signing

Payment
  • SEPA direct debit
  • Visa
  • Mastercard
  • American Express
  • Apple Pay
  • Google Pay
  • PayPal
  • Bank transfer

The tiers account for lower onboarding and coordination effort per system when several similar servers are operated together. Special stacks and clusters are priced after the audit. Major migrations, new architectures, development work, and fundamental stack changes are project services and are quoted before implementation.

Frequently asked questions about Hetzner server management

Scope, responsibilities, security, and onboarding

Scope and suitability

Operations, security, and incidents

Pricing and onboarding

Reviews & projects

Operations that visibly relieve customers

Customer feedback on monitoring, updates, maintenance, support and stable production systems.

Networking & Provisioning

WZ-IT moved our studio infrastructure from decentralised individual devices to a central platform: every site is securely connected via VPN, new devices are onboarded automatically and an entire site is provisioned from a template, without manual steps on location. What impressed me most is the breadth and depth of their knowledge: Timo and Robin are not a typical IT provider who sets up a server and leaves. The two of them think their way into highly complex infrastructure and software topics, work through every requirement we put in front of them, and build networking, provisioning and operations so that everything fits together in the end. WZ-IT is an excellent partner for complex software, network and architecture projects.
Steve KirchnerManaging Director, nextGYM GmbH
View project

International

Built in Germany's Ruhr Valley. Running worldwide.

WZ-IT designs, develops and operates infrastructure and software for clients in Germany and internationally. We deliver projects remotely and continue supporting them in ongoing operations after go-live.

Selected projects

Read client reviews

Enquiry

Which Hetzner systems should we take over?

Tell us the number of servers, platform, and key services. We will respond within one business day with the next sensible steps.

  • Straight with Timo and Robin - no sales team, no pitch
  • A professional assessment of your situation
  • Concrete next steps for infrastructure, software or AI

The conversation is free and non-binding.

WZ-IT's advice on our Azure migration was technically sound and completely non-binding right from the intro call - we took away a great deal.
Jakob ÖschlbergerInno7 GmbH
Timo and Robin, founders of WZ-IT

What should we take over at Hetzner?

Choose the appropriate starting point and briefly describe your Hetzner environment.

We usually respond within one business day. Please do not send access credentials yet.

WZ-IT's advice on our Azure migration was technically sound and completely non-binding right from the intro call - we took away a great deal.
Jakob ÖschlbergerInno7 GmbH