Atlantic.Net Fortress Hosting Plans: What They Are and How to Choose

Most hosting plans are sold the same way: so much CPU, so much RAM, a storage allocation, a bandwidth cap, and an uptime promise. Atlantic.Net Fortress plans work on a different premise. Fortress is the brand Atlantic.Net uses for its managed, security-hardened hosting tiers — it takes that same base and wraps it in a managed security layer. If you have ever bought hosting on CPU and RAM alone and wondered who handles the firewall, the backups, and the patching, Fortress is the packaged answer. It is available across four hosting lines: cloud, dedicated, HIPAA, and PCI. This guide walks through what Fortress includes, what it costs, and which line fits a given workload.

Pricing, specifications, and plan features in this guide were verified against Atlantic.Net’s live product pages on June 25, 2026. Hosting prices change frequently and are confirmed at quote — check the source pages linked at the end before deciding.

What managed security hosting means

Picture a standard server you rent. It gives you compute, memory, and disk, and then it is your job to install a firewall, configure backups, run vulnerability scans, and set up secure access. Managed security hosting moves that work to the provider. The security tooling is provisioned, configured, and operated as part of the plan.

That is the idea behind Fortress. A normal hosting plan is sold on CPU, RAM, storage, bandwidth, and uptime. Fortress takes that same base and turns it into a managed security environment. The base still exists; the security layer sits on top of it and is managed for you rather than handed over as a do-it-yourself kit.

For a buyer, the practical question is not whether Fortress has security features but whether you want to operate that security yourself. If you have the in-house expertise and prefer direct control, a base hosting plan may suit you — and may cost a fraction as much. If you would rather the firewall, the backups, and the scans be someone else’s operational responsibility, the managed model is what Fortress sells.

What security features are included

Whatever the base line, every Fortress plan layers the same managed security model on top. The shared stack is broadly consistent across the product family, which makes it easier to understand once and apply everywhere. The vendor names matter if you are evaluating: the firewall is FortiGate, the endpoint and threat protection is the Trend Micro suite, and the backup engine is Veeam.

What changes between tiers is how much of that stack is switched on by default. Entry tiers cover the essentials and let you add the rest as you need it. Mid tiers turn on multi-factor authentication, Trend Micro, and managed disaster recovery. Network Edge Protection (the WAF, CDN, and DDoS bundle) and Load Balancing appear on the dedicated, HIPAA, and PCI listings; their availability varies by line and tier, with the Custom tiers positioned for the broadest, maximum-security configurations.

So the security model is a single framework with a sliding scale of activation. The same components recur across every line; the line and tier you pick decide which are included and which are optional. Do not assume a specific feature sits at a specific tier without checking that line’s own plan page.

The four Fortress hosting lines

Fortress branding covers four lines — cloud, dedicated, HIPAA, and PCI — each starting from a different base and layering the same managed-security model on top. Bare metal sits alongside them as a separate, hardware-first line that is not part of Fortress. Here is how they differ.

A separate line, not Fortress:

What a Business Associate Agreement is, and why it matters

A Business Associate Agreement (BAA) is the contractual safeguard that sits alongside the technical and administrative ones in a HIPAA environment. HIPAA-sensitive workloads need all three kinds of safeguard, and the BAA is the contractual piece — a provider hosting ePHI must sign one. It is included in the Fortress HIPAA-compliant hosting plans and is the feature that most clearly separates the HIPAA line from the others. If a workload handles protected health information, the presence of that agreement is the first thing to confirm. No amount of security on a non-HIPAA plan substitutes for that contractual and audited footing, which is why the cloud-versus-HIPAA distinction matters so much.

Which Fortress line do I need for my workload?

Start with the constraint, not the feature list. If your data is regulated health information, the HIPAA line is the only one that carries a Business Associate Agreement. If you process card payments and want to reach PCI compliance, the PCI line is built for that. If neither regulation applies, the choice is about the base: cloud for elastic virtualised infrastructure, dedicated for single-tenant managed hardware — or bare metal (outside Fortress) if you want direct hardware access with full root and are comfortable adding security yourself.

The table below lays the lines side by side on the attributes that tend to drive the decision.

One pattern holds across the Fortress lines: where high-volume traffic handling or DDoS mitigation is a hard requirement, Network Edge Protection and Load Balancing tend to live at or near the Custom tier — explicitly so on PCI. If those are non-negotiable, you are likely evaluating Custom regardless of which base you choose, so confirm placement on the specific line you are pricing.

Fortress pricing

Verified monthly pricing for the four Fortress lines is below. All figures are published rates as of June 25, 2026, are based on a 12-month term, and exclude setup fees. Custom tiers are quote-only, and rates change — confirm current pricing directly with Atlantic.Net.

Fortress Cloud Hosting

Fortress Dedicated Servers (Linux pricing; Windows available at additional cost)

Fortress HIPAA Hosting (each tier: 6 vCPU, 16 GB RAM, 200 GB SSD, 10 TB transfer)

Fortress PCI Hosting (DR tier: 6 vCPU, 16 GB RAM, 200 GB SSD, 10 TB transfer)

For context, Atlantic.Net’s standard (non-Fortress) cloud servers price very differently. A G3.2GB instance — 2 GB RAM, 1 vCPU, 50 GB SSD, 3 TB transfer — runs about $10 a month on Linux. There is also a free tier: a G3.8GB cloud server (8 GB RAM, 4 vCPU, 160 GB SSD) free for one year, plus 50 GB of block storage and 50 GB of snapshots. The gap between $10 and $311 is the cost of the managed security layer, and that gap is the whole argument for and against Fortress.

When Fortress is the wrong choice. Trustworthy advice includes the negative case. If you are running a small project, a hobby workload, or anything where you are comfortable managing your own security, Fortress is expensive for what it gives you — the standard servers above will serve you better. You buy Fortress when you need the management handled for you, or when compliance leaves you no choice. You do not buy it to host a personal site.

How data center location affects Fortress hosting

Where your server physically sits affects two things. Latency, the delay before data starts moving, is governed largely by physical distance: the further your users are from the data center, the more delay they feel. For regulated data, location can also carry data-residency requirements, which means the geography matters for compliance as well as for speed. The map matters twice.

This is a useful reminder that a security tier and a location decision are separate choices. Fortress defines what protects the workload; the data center defines where it lives and how fast it responds.

Who provides Fortress hosting, and what backs it

Fortress is built by Atlantic.Net, a cloud and infrastructure provider founded in 1994 with a focus on security, compliance, and high-performance hosting. The company started in a University of Florida dorm room — co-founded by Manoj “Marty” Puranik, who remains the company’s founder and CEO today — and was originally named Internet Connect Company Computers (ICC Computers). Within a year it employed eight people and was serving 2,000 customers in the Gainesville area. From the late 1990s into the early 2000s it acquired 13 internet service companies in second-tier and rural markets, adding webmail, national dial-up, DSL, and private-network services along the way.

Today the focus is security and compliance, and that shows up in the audits the wider platform carries: HIPAA, HITECH, SOC 2 Type II, SOC 3 Type II, and PCI DSS. In June 2025 the company won the 2025 Fortress Cybersecurity Award in the Product or Service – Artificial Intelligence category, presented by the Business Intelligence Group. On receiving it, Puranik said security is at the core of everything the company does.

The security components themselves come from named vendors rather than in-house tools. The firewall is FortiGate; the endpoint and threat protection is the Trend Micro suite; the backup engine, running both onsite and off-site daily, is Veeam. For a buyer evaluating Fortress, those vendor names and platform audits are the verifiable signals worth checking against your own compliance and procurement requirements.

A note on the name: “Fortress” appears in two unrelated places in Atlantic.Net’s world — it is the brand for these managed-security hosting tiers, and it is the name of the independent Fortress Cybersecurity Awards the company won in 2025. The award and the product line are separate things that happen to share a word.

What to do next

Begin with your constraints before you compare features. Three questions narrow the choice quickly.

Answer those three, match them against the comparison and pricing tables above, and you will know which Fortress line and which tier to request. From there, verify the platform audits that apply to your obligations against your own compliance checklist.

Sources

All figures and features were verified against Atlantic.Net’s live product pages on June 25, 2026. Hosting prices change frequently and are confirmed at quote — check the source pages before deciding.

• Cloud Hosting — Fortress cloud plans & pricing
• Cloud Platform — standard plans & free tier
• Dedicated Servers — Fortress dedicated plans
• Bare Metal Servers (separate, non-Fortress line)
• HIPAA Compliant Hosting — Fortress HIPAA plans
• PCI Compliant Hosting — Fortress PCI plans
• Managed Firewall Service
• Network Edge Protection (WAF / CDN / DDoS)
• Trend Micro Deep Security Suite
• Veeam Backup Services
• Multi-Factor Authentication
• Load Balancing
• What Is a Business Associate Agreement (BAA)
• Certifications & Partnerships
• Atlantic.Net History
• 2025 Fortress Cybersecurity Award (press release)