Skip to content
BasedFlare

BasedFlare

basedflare.com

Published February 20, 2025 · Last updated 1 month ago

Sovereign infrastructure without corporate cloud lock-in.

L3 Tiered Tool
5.0
overall / 10
Privacy50
Trust47

At a glance

Accepts Monero
Accepts Bitcoin
No signup
Non-custodial
No email required
No IP logging
Tor available
Open source

Pros

  • +Open-source backend, haproxy-protection and panel components are publicly auditable under (A)GPL, reducing trust requirements.
  • +No TLS termination, unlike Cloudflare and typical WAF/CDN providers, BasedFlare does not perform man-in-the-middle decryption.
  • +Censorship-resistant positioning, explicit marketing toward deplatformed sites and politically sensitive hosting use cases.
  • +Flexible DNS, GeoDNS, round-robin, health checks, failover records, and sub-second propagation with 60s TTL support.
  • +Layer 7 mitigation, proof-of-work and CAPTCHA challenge modes for DDoS protection with real-time attack reporting.
  • +Geographic controls, Geo Firewall and ASN/IP-level ACLs for precise traffic filtering.

Cons

  • US jurisdiction with compliance caveat, terms explicitly state compliance with all US government agencies, creating legal exposure.
  • Limited payment transparency, official site does not clearly advertise cryptocurrency checkout flow despite third-party directory claims.
  • No Tor or onion service, clearnet-only operation reduces options for users requiring maximum anonymity.
  • Minimal privacy policy detail, encryption standards, logging retention periods, and server locations are not specified.

Full review

What is BasedFlare

BasedFlare is a managed infrastructure service offering sovereign alternatives to mainstream cloud providers like Cloudflare. Operated by BASED ON WHAT LLC, a Wyoming-registered company founded in May 2023, it provides DNS management, global CDN caching, web application firewall (WAF), Layer 7 DDoS mitigation, and optional managed video livestreaming (RTMP ingest with LLHLS outputs). The service was built by founder Thomas Lynch, a software developer with a background in operating public forums and defending them against deplatforming and coordinated takedowns.

As of 2026-05-30, BasedFlare markets itself around themes of digital sovereignty, open-source transparency, and resistance to censorship. Its flagship open-source project, haproxy-protection, is publicly available under an (A)GPL license and bundles configurations, tooling, and a control panel for running reverse proxy clusters with Layer 7 filtering.

How no-KYC is it?

BasedFlare does not advertise identity verification as part of its signup process. The service collects standard account information-username, email, password, and IP address-according to its published privacy policy, but does not reference government ID, document upload, or enhanced due diligence procedures. This places it in the "Soft KYC" or minimal-KYC category: an email address is required, but not legal identity.

The provider's positioning toward privacy-conscious and censorship-resistant use cases suggests a deliberate choice to minimize friction for users seeking alternatives to deplatforming. However, the terms of service explicitly state compliance with "all US government agencies," which creates a conditional privacy guarantee that users in high-risk categories should weigh carefully.

Privacy & security

BasedFlare's privacy policy outlines collection of username, email, password, IP address, and platform interaction records. The company states it does not share or sell personal information to third parties, and mentions encryption and "secure storage practices" without specifying technical standards. Users may request data access, deletion, or correction.

The service emphasizes transparency through open-source licensing of backend components, allowing public audit of code for "hidden tricks, spying, or telemetry." This is a meaningful differentiator from proprietary competitors. The control panel supports HTTPS certificate generation, geo-targeted DNS with health checks, network ACLs (IP/ASN whitelisting and blacklisting), and a Geo Firewall for geographic access control.

Security features include Layer 7 DDoS mitigation with optional proof-of-work or CAPTCHA challenge modes, attack reporting with real-time and historical data, and bot filtering. The DNS infrastructure advertises sub-second global propagation and 60-second TTL support.

Payments, fees & limits

BasedFlare offers three service tiers. The Starter plan runs $20/month and covers 3 domains, 1 origin, and 10TB traffic with CDN caching, DDoS protection, and DNS management. The Pro plan is $199/month for 10 domains, 5 origins, and 50TB traffic, adding origin load balancing. Enterprise pricing is custom, with features including managed video livestreaming, exclusive points of presence, phone support, and "censorship resistant options."

A free trial is available upon direct contact. The company accepts cryptocurrency payments-Bitcoin and Monero are referenced in directory listings and third-party profiles, though the official site does not prominently detail payment methods on public-facing pages. The external source AlternativeTo lists pricing "from $10 per month," which conflicts with the official $20/month Starter rate; the official site pricing is treated as authoritative.

User experience & support

The service operates through a web-based control panel (cp.basedflare.com) where customers manage domains, DNS records, certificates, and protection settings. The dashboard is described as "streamlined" for configuring blacklists, whitelists, and bot filtering in a single location.

Support channels include email (contact@ceoofbased.com), a phone hotline (+1 307-461-4336), and a contact form. Enterprise customers receive phone support; lower tiers rely on email. A separate status page (basedstatus.online) tracks operational health. One scheduled maintenance window was noted: approximately 90 minutes of control panel downtime and 5 minutes of CDN hard restarts on October 8th (year unspecified in crawl) for backend routing upgrades.

The service lacks a .onion address or Tor gateway, operating exclusively on clearnet. No mobile application is mentioned.

Who it's for

BasedFlare suits website operators who prioritize infrastructure independence and are dissatisfied with mainstream cloud providers' content policies or man-in-the-middle TLS termination practices. The LowEndTalk community specifically highlights BasedFlare's promise of "no MiTM (aka TLS termination)," distinguishing it from Cloudflare and most competing WAF/CDN providers.

The pricing structure targets small websites and hobbyists at the low end, with mid-tier plans for small-to-medium businesses and custom enterprise engagements for high-traffic or politically sensitive properties. Users requiring genuine anonymity should note the email requirement, US jurisdiction, and compliance disclaimer in the terms of service.

KYC & privacy

L3 Tiered

KYC only above certain thresholds.

BasedFlare requires only username, email, and password for account creation, with IP logging disclosed. No KYC or identity verification is advertised, but the privacy policy reserves broad data collection rights and the terms of service acknowledge US government compliance. No logging incidents, breaches, or third-party audits were found in available evidence as of 2026-05-30.

No

Custodial

No

Requires email

No

Logs IP

Verdict

BasedFlare fills a niche for operators seeking Cloudflare alternatives without mandatory TLS interception or content gatekeeping, though its US jurisdiction and vague compliance language temper its privacy guarantees. Best suited to small and medium sites willing to trade some anonymity for sovereignty-focused infrastructure with auditable open-source components.

Frequently asked questions

Is BasedFlare no-KYC?
BasedFlare does not require government ID or identity verification for signup. Only a username, email, and password are needed, placing it in the minimal-KYC category.
Does BasedFlare require an email address?
Yes, an email address is mandatory for account registration according to the privacy policy, which lists it among collected user information.
What payment methods does BasedFlare accept?
The official site does not prominently detail payment options, but third-party directories and its privacy-conscious positioning indicate Bitcoin and Monero are accepted alongside conventional methods.
Is BasedFlare safe to use?
BasedFlare publishes open-source components for public audit and offers standard security features, but its terms state compliance with all US government agencies and its privacy policy lacks specifics on encryption standards or data retention.
Is BasedFlare still operating in 2026?
Yes, the official site was active as of 2026-05-30 with current pricing, a functioning status page, and copyright dated 2023-2026.
Does BasedFlare terminate TLS like Cloudflare?
BasedFlare markets itself as avoiding man-in-the-middle TLS termination, a key differentiator from Cloudflare and most competing WAF/CDN providers.

Update history

This review is monitored and refreshed regularly.

  1. May 30, 2026

    Full refresh: re-crawled the official site, audited the latest privacy claims and pricing.

  2. January 12, 2026

    Updated pricing: Starter now $20/mo, Pro $199/mo, Enterprise custom per official site.

  3. July 12, 2025

    Confirmed open-source licensing: haproxy-protection and panel under (A)GPL.

  4. May 2, 2025

    Added status page and scheduled maintenance note from basedstatus.online.

  5. February 20, 2025

    Initial review published.

Community reviews

4 user reviews

mo

moneromaxi

December 14, 2025

Good to see a CDN that doesn't MITM your TLS certs. Pricing is fair for small sites, wish they had a Tor gateway though.

an

anon_trader

June 14, 2025

Switched two domains over after Cloudflare drama. DNS propagation is actually instant like they claim, dashboard is clean.

pr

privacyfirst

May 17, 2025

Open source stack is nice but the US jurisdiction and 'comply with all agencies' line in the TOS makes me nervous for sensitive projects.

cy

cypher_punk

April 12, 2025

haproxy-protection repo is solid, I've self-hosted parts of it before. Managed service saves time but email requirement is annoying.

Related services