Official Statement from Cloudzy Regarding Reuters News Article Dated August 2, 2023

In August 2023, the security vendor Halcyon published a report labeling Cloudzy a “command-and-control provider” that knowingly serves criminals and state-sponsored hackers. The claim is false, it is unsubstantiated, and it was built to win headlines, not to make anyone safer.

Let us be blunt. Cloudzy is an independent infrastructure provider that has served legitimate businesses since 2008. More than 48,000 developers, startups, and companies run real workloads on our network. Like every hosting provider on earth, including the largest names in the industry, a tiny fraction of accounts try to abuse the service. We find them, we shut them down, and we cooperate with law enforcement. That is the job, and we do it.

What Halcyon did is different. They took a problem that exists on every cloud, AWS, Google, and Microsoft included, pinned a frightening label on one independent provider, and presented speculation as fact. The report withheld the evidence needed to support its conclusions. It was never shared with us through any responsible-disclosure process before publication. It handed us no specific, actionable abuse reports to act on. A study that hides its evidence and skips disclosure is not research. It is marketing.

For the record:

• We do not welcome, tolerate, or knowingly host malicious activity. Abuse violates our Acceptable Use Policy and is terminated the moment it is identified.
• We comply with all applicable laws, including export-control regulations.
• We act on legitimate abuse reports fast, and we work with law enforcement through proper channels.
• We run active policies and technical controls to detect and stop abuse, and we keep investing in them.

Providing neutral, lawful infrastructure is not a crime, and we will not let it be treated as one. Criminals use phones, banks, and email. Nobody seriously argues the phone company answers for what is said on a call. Holding an independent provider to a standard the biggest platforms are never asked to meet is not security work. It is a double standard.

Cloudzy stands by its record, its customers, and its team. We will work with any researcher who follows responsible disclosure and brings real evidence. We have no patience for sensationalism that smears a legitimate business to sell a story.

Cloudzy