Hostinger is an ISO/IEC 27001:2022 certified hosting provider. Key security features include advanced DDoS protection, Web Application Firewalls (WAF), automated backups, and many more.
Use this Trust Center to learn about our security posture and request access to our security documentation.
Featured Documents
- Is Hostinger PCI-DSS compliant?
- Do you have a process for escalating incoming requests from the Data Protection Authority and/or other authorities? If yes, what is the process?
- Has Hostinger experienced a ransomware incident or a reportable data breach within the last 36 months?
- Is a SIEM utilized? If so, who is the software provider?
- Do you align with CIS Benchmarks, OWASP Top 10, or NIST controls?
Subprocessors
Trust Center Updates
Security Incident Report: Phoenix Shared Hosting Server — November 2026
On November 9, 2026, we identified unauthorized access to a shared hosting server in Phoenix, US, involving a previously unknown vulnerability in LiteSpeed Web Server.
We contained the incident, migrated affected accounts, restored websites from backups, and notified impacted customers. Our investigation and work on a permanent fix are ongoing.
For details on the incident, its impact, and our response, read our public incident report.
New subprocessor for Hostinger Reach product
Vonage B.V. has been added to a list of subprocessors.
It applies only to the Hostinger Reach product: WhatsApp integration in Hostinger Reach is provided through services operated by Vonage.