Overview
XOR operates as a privacy-oriented hosting service at xor.sc, positioning itself within the no-KYC infrastructure niche for users who need servers without identity verification. The provider advertises 10 Gbps unmetered connections and maintains presence across multiple jurisdictions including Europe, Russia, and Switzerland. With over thirteen years in operation according to community references, XOR targets privacy-conscious operators, cryptocurrency projects, and others seeking hosting that deliberately minimizes data collection. The service emphasizes pseudonymous access and supports multiple anonymous payment rails, distinguishing it from mainstream cloud providers that require extensive personal documentation.
Unlike conventional hosting directories, XOR does not appear to operate through typical corporate structures or venture-backed scaling. Its positioning as an independent, specialized provider aligns with the broader ecosystem of privacy infrastructure that serves users who prioritize operational security over consumer-grade convenience.
Privacy & KYC
XOR sits at KYC Tier L1, Anonymous, the most permissive classification in our framework. This means users obtain pseudonymous access without submitting personal identification, proof of address, or undergoing verification workflows. The signup process reportedly requires no email address, eliminating a common correlation point that ties accounts to real-world identities.
- No email required: Account creation proceeds without mandatory email verification, reducing metadata exposure.
- IP logging status unclear: While the provider markets privacy-first positioning, our assessment assigns a privacy score of 1/100 and trust score of 0/100, indicating substantial unresolved questions about operational transparency, logging practices, or infrastructure control that privacy-conscious users should weigh carefully.
- Tor gateway available: XOR offers Tor access for users who wish to obscure their network origin during signup and management, adding a layer of network-level anonymity.
The stark gap between marketed privacy promises and scored evaluation suggests either limited public documentation, absence of third-party auditing, or operational characteristics that our methodology flags as high-risk despite the superficially anonymous onboarding flow.
Supported assets & payments
XOR accepts a deliberately privacy-friendly payment stack. Users can fund services using Monero (XMR), the leading privacy-centric cryptocurrency with ring signatures and stealth addresses that obscure transaction graphs. Bitcoin and Lightning Network payments are also supported, with Lightning offering reduced on-chain footprint for users who layer additional privacy practices. For those avoiding crypto entirely, fiat currency and cash options exist, though the mechanics of cash settlement for recurring hosting services typically introduce friction that digital-native users may find impractical.
This multi-asset approach reflects XOR's understanding of its audience: Monero users particularly value through the service's no-KYC positioning, while Bitcoin and Lightning accommodate users with different risk models or liquidity preferences. The inclusion of cash payments, even if rarely used, signals ideological alignment with cypherpunk principles rather than mere commercial convenience.
Security & custody
XOR operates as a non-custodial infrastructure provider in the sense that users retain full control over deployed systems and data. The provider supplies raw compute, bandwidth, and IP addresses without managing customer workloads or keys. This model places security responsibility squarely on the tenant rather than creating shared-control scenarios common with managed platforms.
The service is open source, which theoretically permits audit of deployment tooling and management interfaces. However, our zero trust score indicates that independent verification of these claims remains limited or unverified in practice. Users should assume standard threat models for offshore hosting: potential jurisdictional pressure, upstream network monitoring, and the possibility that infrastructure ownership or operational control differs from public representations.
Server hardening, encryption at rest, and communication security remain customer responsibilities. XOR provides the pipe and the metal; operational security is yours to implement.
Who it's for, verdict
XOR occupies a specific niche in the no-KYC hosting landscape: users who need high-bandwidth, unmetered infrastructure without identity verification, and who possess the technical capability to harden their own environments. The 10 Gbps unmetered offering suits bandwidth-intensive applications, media distribution, cryptocurrency nodes, privacy tools, or resilient infrastructure, that would trigger usage alarms at conventional hosts.
However, the extreme divergence between marketed privacy positioning and our scored evaluation demands caution. The anonymous onboarding and Monero acceptance are genuine positives, yet the bottom-line privacy and trust scores suggest operational opacity, possible logging, or control uncertainties that the provider has not adequately addressed. Users with high-stakes anonymity requirements should treat XOR as a transit layer rather than a trust anchor, layering additional encryption and operational compartmentalization.
For privacy-conscious crypto operators, developers needing censorship-resistant infrastructure, or projects serving sensitive user bases, XOR offers usable tooling at competitive bandwidth economics, provided you verify assumptions rather than trusting branding.
