Security is a top priority at Right Servers Inc. RightClaw is built with multiple layers of protection to keep your data, API keys, and agent workflows safe. This article covers the security measures in place and best practices you should follow.
RightClaw Security Architecture
Isolated Virtual Machines
Every RightClaw instance runs on a VMware-isolated virtual machine — not a shared container. Your VM has its own dedicated kernel, file system, and network stack. There is no resource sharing or data leakage between tenants — your environment is completely separated at the hypervisor level.
Managed Security Patches
Right Servers applies OS and platform security patches promptly as they are released. You do not need to worry about keeping the base system updated — that is handled for you on every plan.
Hardened Configuration
Your RightClaw VM is provisioned with firewall rules restricting access to necessary ports, SSH key-based authentication by default, non-essential services disabled, and regular security auditing of the base image.
What You Should Do
Enable Two-Factor Authentication
Protect your account with two-factor authentication (2FA). Enable it from the RightClaw dashboard under Settings → Profile. 2FA adds a second verification step at login, preventing unauthorized access even if your password is compromised.
Use SSH Keys — Not Passwords
SSH key authentication is far more secure than password login. Manage your keys from Settings → Keys in the dashboard. Use ED25519 or RSA 4096-bit keys, set a passphrase on your private key, never share it, and remove keys when no longer needed.
Secure Your API Keys
RightClaw uses a bring-your-own-key model for AI providers (Anthropic, OpenAI, DeepSeek, Gemini, and others). Treat your API keys as sensitive credentials:
- Never share API keys in plain text messages, screenshots, or support tickets
- Rotate keys periodically — generate a new key and update RightClaw, then revoke the old one
- Use provider-specific key restrictions where available (IP allowlists, usage limits)
- Monitor your API usage for unexpected spikes that could indicate a compromised key
Control Terminal Access
SSH terminal access is available on all plans. Set an idle timeout in Settings → Preferences, avoid SSH from untrusted networks, and close sessions when finished rather than leaving them open.
What Right Servers Handles
- Daily automated backups of your entire VM
- OS-level security patching and network firewall configuration
- VMware hypervisor isolation and 99.9% uptime SLA monitoring
If you suspect a security issue or have questions about securing your RightClaw instance, contact support@rightservers.com immediately.
