Hetzner vs Webswing

Confronta Hetzner e Webswing su capacità, giurisdizione, garanzie e idoneità per acquirenti europei.

Entrambi elencati come alternative a: Amazon Web Services (AWS), Microsoft Azure

Logo: Hetzner

Hetzner

Germany· Cloud Computing

Needs review

Shortlist for German-owned IaaS/bare metal in DE/FI parks, API cloud VMs, inclusive-traffic EU economics, ISO 27001 + BSI C5 Type 2. Skip for hyperscaler PaaS depth, SOC 2-first audits, or zero US-group footprint (optional US Ashburn/Hillsboro + Singapore via subsidiaries/colocation). Prefer OVHcloud/Scaleway for broader EU portfolios; STACKIT for DE public-sector framing.

EU-operated (DE HQ)Owned DE/FI parksISO 27001:2022BSI C5 Type 2Bare metal + auctionOptional US/SG cloud
Vedi schedaVisita il sito web
Logo: Webswing

Webswing

Ireland· Cloud Computing

Needs review

Shortlist when you must browser-enable an existing Java Swing/JavaFX/SWT/NetBeans or Oracle Forms estate without a rewrite and can run a self-hosted session tier. Skip when you are building a greenfield web UI only, or when the app depends on video, 3D acceleration, or ultra-low-latency graphics. Consider Citrix/VDI or a hyperscaler cloud desktop when you need generic desktop remoting beyond Java UI toolkits.

EU-operatedSelf-hostedISO 27001 (claimed)No-rewrite Java UIOracle Forms capable
Vedi schedaVisita il sito web

Le righe evidenziate differiscono tra i due prodotti.

Hetzner vs Webswing: Sintesi
CaratteristicaLogo: HetznerHetznerLogo: WebswingWebswing
Paese di origineGermanyIreland
CategoriaCloud ComputingCloud Computing
Open sourceNoNo
Self-hostedNoSì
SedeGermanyIreland
Soggetto giuridicoHetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen (HRB 6089 Ansbach)WEBSWING LIMITED (Webswing Ltd.), 93 Upper George's Street, Dun Laoghaire, A96 V1K8 Dublin, Ireland
Legge applicabileNon indicatoIreland
Capogruppo / controllo USANessuna capogruppo USA notaNessuna capogruppo USA nota
Esposizione CLOUD Act (indicativa)MedioBasso
Stato di hosting UENon indicatoSconosciuto
Hosting / residenzaOwned parks: Nuremberg, Falkenstein (DE), Helsinki (FI). Non-cloud EU-only. Cloud optional US (Ashburn, Hillsboro) and Singapore on 3rd-party colocation. AV subprocessors: Hetzner Finland Oy; US: Hetzner US LLC, NTT Americas, QTS Hillsboro; SG: Hetzner Singapore, NTT SG1. Master data stays EU.Product runtime is customer-operated (on-prem, customer cloud, Docker, or Kubernetes). Vendor Client Portal and marketing site use listed processors including Google Ireland, Meta Ireland, LinkedIn Ireland, and The Rocket Science Group LLC (US) for email marketing; those apply to vendor website/portal data, not to self-hosted application sessions.
Riassunto

German data center operator (Gunzenhausen): dedicated servers, Hetzner Cloud VPS, storage, and owned parks in Germany and Finland, with optional US and Singapore cloud locations.

Self-hosted platform that runs Java Swing, JavaFX, SWT, NetBeans, and Oracle Forms apps in the browser without rewriting them.

Tag
cloudvpsdedicated-servershostinggdprgermanydata-centerbare-metalself-hostingiso-27001c5hetzner-cloud
self-hostedjavadesktop-to-weboracle-formsapplication-modernizationon-premisehtml5ireland
A colpo d'occhio: Hetzner vs Webswing
A colpo d'occhioLogo: HetznerHetznerLogo: WebswingWebswing
HQGunzenhausen, GermanyDublin, Ireland
Legal entityHetzner Online GmbH (HRB 6089 Ansbach)WEBSWING LIMITED (CRO 564226)
EU parksNuremberg, Falkenstein (DE); Helsinki (FI)Non indicato
Optional cloud regionsAshburn and Hillsboro (US); SingaporeNon indicato
ModelIaaS / dedicated / hosting (unmanaged cloud and root)Non indicato
Open sourceNo (commercial infrastructure)Non indicato
FoundedNon indicato2015 (Dublin); product lineage from ~2012
License modelNon indicatoCommercial + SLA (evaluation available); AGPL only ≤20.2
DeploymentNon indicatoSelf-hosted (ZIP, Docker, Kubernetes, cluster)
UI frameworksNon indicatoSwing, JavaFX, SWT, NetBeans, Applets, Oracle Forms
Key capabilities: Hetzner vs Webswing
Key capabilitiesLogo: HetznerHetznerLogo: WebswingWebswing
EU-operated (DE HQ)SìSì
Owned DE/FI parksSìNon indicato
ISO 27001:2022SìSì
BSI C5 Type 2SìNon indicato
Bare metal + auctionSìNon indicato
Optional US/SG cloudSìNon indicato
Self-hostedNon indicatoSì
No-rewrite Java UINon indicatoSì
Oracle Forms capableNon indicatoSì

Hetzner

  • Dedicated root servers and Server Auction

    Bare-metal root servers with full hardware isolation for predictable I/O and custom OS installs. The Server Auction lists surplus or end-of-primary-use machines at declining prices for labs, secondary environments, and cost-sensitive dedicated capacity.

  • Hetzner Cloud with API, networks, and apps

    VMs with shared or dedicated vCPU classes, managed via Console, REST API, and CLI. Private networks, stateful firewalls, load balancers, Linux images, Terraform/Ansible/Kubernetes integrations, and one-click apps (Docker, Nextcloud, GitLab CE, WireGuard, and more) for self-hosted stacks.

  • Owned EU data center parks plus optional US/Singapore cloud

    Company-operated parks in Nuremberg, Falkenstein (Germany), and Helsinki (Finland). Cloud also in Ashburn, Hillsboro (USA), and Singapore on third-party colocation. Non-cloud products and EU-selected cloud locations keep server data in the EU per Hetzner docs; master data stays in the EU.

  • ISO 27001, BSI C5 Type 2, and console DPA

    Public ISO/IEC 27001:2022 certificate for DE/FI park scope; BSI C5 Type 2 for cloud; Art. 28 DPA accept-in-console with published TOMs and annual external TOM review available to DPA customers. Not a SOC 2-first vendor.

  • Inclusive traffic-oriented European cloud pricing model

    Pay-as-you-go cloud (hourly or monthly) and list-based dedicated servers, with marketing emphasis on high inclusive traffic on European plans versus hyperscaler egress bills. Confirm current allowances and rates only on the official calculator—figures change by region and over time.

Webswing

  • Browser delivery without rewriting Java UI

    Runs Swing, JavaFX, SWT, NetBeans Platform, Applets, and Oracle Forms in HTML5 browsers over WebSockets with no required source changes. End users need a browser only, not a local JRE or plugin.

  • Customer-controlled self-hosted runtime

    Install from a distribution ZIP or containers on your own servers, VMs, Docker, or Kubernetes. Standalone and Cluster Engine modes cover single-node pilots through multi-node scale-out with admin monitoring.

  • Incremental modernisation beside legacy screens

    Modernisation Framework and JsLink let React, Angular, Vue, Vaadin, or APEX components coexist with Java UI so teams can rewrite modules over time instead of a big-bang cutover.

  • Enterprise auth and session operations

    Pluggable security modules include SAML2, OpenID Connect, Keycloak, LDAP, and custom providers. Admin Console adds session mirror view, recording/playback, logs, and multi-tenant path isolation.

  • Built-in printing, files, and clipboard bridges

    Browser-side printing with preview, isolated upload/download folders, and clipboard integration cover common desktop workflows that break in naive remote-app setups.

Assurance & compliance: Hetzner vs Webswing
Assurance & complianceLogo: HetznerHetznerLogo: WebswingWebswing
Independent security / no-logs audit
Not applicable

Hosting/IaaS, not a no-logs VPN. Public ISO 27001, BSI C5 Type 2, and annual TOM review (TUV Rheinland) instead.

On request / NDA

Footer states regular security testing is available upon request; no public independent audit PDF found.

ISO 27001
Verified

ISO/IEC 27001:2022; public SOCOTEC certificate. Scope: infrastructure, operation, support of Nuremberg, Falkenstein, Helsinki parks.

Vendor claimed

Site footer: Webswing Limited maintains an ISO/IEC 27001-certified ISMS. Independent cert registry entry not verified in this pass.

SOC 2 / SOC 3
Not found

Hetzner states focus on ISO 27001 rather than SOC 2 for international market.

Not found

No SOC 2/3 claim found on public site pages reviewed.

GDPR / EU data protection
Vendor claimed

German entity; public privacy policy, Art. 28 DPA, TOMs, subprocessor list. Customer remains controller for data on rented systems.

Vendor claimed

Privacy policy names WEBSWING LIMITED as Irish controller under GDPR; FAQ states GDPR alignment for company contact data.

US CLOUD Act exposure (indicative)
Partial

EU entity / no known US parent, but optional US cloud uses Hetzner US LLC and US colocation (NTT, QTS); Singapore similarly. EU placements keep server data in EU per docs. Not legal advice.

Partial

EU entity with no known US parent; self-hosted runtime keeps sessions on customer infra. Vendor website/portal lists US-group processor The Rocket Science Group LLC (email) plus Google/Meta/LinkedIn Ireland entities for analytics/ads. Not legal advice.

Data processing agreement (B2B)
Vendor claimed

Standard DPA accept-in-console; sample PDF published; no custom wet-ink DPAs per vendor docs.

Not found

Privacy policy references Art. 28 DPAs with Webswing's own processors; no public customer-facing DPA download found. Request during procurement.

EU AI Act
Not applicable

Infrastructure hosting, not an AI system product.

Not applicable

Core product is application delivery/runtime, not an AI system. Prague research affiliate explores AI; not the catalogued product.

BSI C5 (cloud)
Verified

Vendor publishes BSI C5 Type 2 attestation PDF for cloud services (German BSI catalogue).

Non indicato
KRITIS / section 8a BSIG
Vendor claimed

Hetzner states BSI classification as operator of critical services and certification under section 8a BSIG.

Non indicato
Considerations & known limitations: Hetzner vs Webswing
Considerations & known limitationsLogo: HetznerHetznerLogo: WebswingWebswing
Optional US and Singapore cloud regions
Medium

Ashburn, Hillsboro, and Singapore use third-party colocation and local subsidiaries; server content placed there leaves the EU. Zero-US-footprint policies may still reject the vendor even for EU-only workloads.

Non indicato
Unmanaged cloud and dedicated servers
Medium

You own OS patching, app security, and backups. Platform firewalls help but do not replace customer ops. Poor fit if you need managed DBaaS and full-stack ops.

Non indicato
Narrower managed-service catalog vs hyperscalers
Low

Strong IaaS and bare metal; weak match if procurement assumes AWS-parity managed services. Plan hybrid architecture early.

Non indicato
ISO scope is DE/FI parks
Low

Published ISO 27001 scope centers on German and Finnish parks. Do not assume identical coverage for every US/Singapore deployment without reading current certificates.

Non indicato
Higher per-session server resourcesNon indicato
Medium

Docs state each browser session needs more server CPU/memory than a native web app. Capacity planning and Cluster Engine matter for large concurrent user counts.

Video, 3D, and low-latency limitsNon indicato
Medium

Official overview: video not supported, limited sound, no 3D hardware acceleration, poor fit for real-time action games due to rendering latency.

Proprietary licensing since 21.1Non indicato
Low

Current releases require commercial license + SLA. AGPL/public source stopped after 20.2. Source access for licensed customers is via Client Portal rather than a public repo.

Vendor portal/marketing US-group processorsNon indicato
Low

Privacy policy lists The Rocket Science Group LLC and major ad/analytics vendors for website/portal data. Irrelevant to on-prem session pixels, but relevant if you put sensitive personal data only into vendor portals.

ISO 27001 not independently verified hereNon indicato
Low

Vendor claims ISO/IEC 27001-certified ISMS on the site footer. Ask for the current certificate and scope before treating it as verified.

Idoneità

Hetzner

Best fit when

  • Teams that want German-jurisdiction hosting with owned parks in Germany and Finland
  • Workloads that need bare-metal root servers or cost-effective dedicated via Server Auction
  • Ops-heavy orgs comfortable with unmanaged IaaS (Console/API/CLI, Terraform, apps)
  • Buyers optimizing for EU residency plus inclusive traffic economics versus hyperscaler egress
  • German/EU checklists asking for ISO 27001, BSI C5, and an Art. 28 DPA in-console

Poor fit when

  • Orgs that need a full AWS/Azure-style managed services catalog (PaaS, serverless, AI)
  • Policies that forbid any US subsidiary, US colocation, or optional US region at group level
  • Buyers requiring SOC 2 as the primary assurance artifact (Hetzner focuses on ISO/C5)
  • Teams expecting fully managed OS patching, databases, and DR without operating the stack

Consider instead when

  • When: You need a broader European cloud portfolio or more managed service surface

    Consider: OVHcloud or Scaleway

    Still European operators; compare regions, bare-metal depth, and support models.

  • When: German public-sector sovereign cloud framing is the primary procurement driver

    Consider: STACKIT

    Different product and governance story; verify current certifications and residency.

  • When: You need hyperscaler managed depth more than EU-owned IaaS

    Consider: AWS, Azure, or Google Cloud (accept US-group CLOUD Act posture)

    Trade EU operator control for catalog breadth.

  • When: You want a smaller EU regional cloud with a different feature/region mix

    Consider: Exoscale or UpCloud

    Compare locations, SLAs, and managed options against Hetzner's park scale.

Webswing

Best fit when

  • Enterprises and ISVs with production Swing, JavaFX, SWT, NetBeans, or Oracle Forms applications that must become browser-accessible without a rewrite
  • Teams that can operate a self-hosted Webswing tier (on-prem, VM, Docker, or Kubernetes) and size CPU/memory per concurrent session
  • Organisations planning incremental UI modernisation (React/Angular/Vue/APEX) while keeping proven Java screens online
  • Buyers who want Irish/EU contracting (WEBSWING LIMITED) and customer-controlled residency for application sessions
  • Public-sector or regulated estates retiring endpoint Java installs or reducing Citrix/VDI dependency for Forms/Swing only

Poor fit when

  • Greenfield products with no existing Java desktop or Forms UI to preserve
  • Multimedia, video, 3D-accelerated, or real-time action-game style interfaces (documented limitations)
  • Teams unwilling to run and scale a server-side session farm for interactive users
  • Buyers who require OSI-approved open source for the current release line (proprietary since 21.1)

Consider instead when

  • When: You need generic Windows/Linux desktop remoting rather than Java UI toolkit remoting

    Consider: Citrix / enterprise VDI, or Microsoft Azure Virtual Desktop

    Webswing FAQ positions itself as a narrower alternative to Citrix for Forms/Java estates.

  • When: You are rewriting the UI entirely and have no need to keep Swing/Forms screens running

    Consider: Native web frameworks (React, Angular, Vue) or Oracle APEX without a Webswing bridge

    Webswing's Modernisation Framework is for coexistence during migration, not a mandatory layer for new UIs.

  • When: You want a hyperscaler-managed browser app streaming control plane

    Consider: AWS AppStream / WorkSpaces-class services or Azure cloud desktop offerings

    Trade self-hosted EU software control for managed cloud operations.

Open questions for due diligence

Hetzner

  • Does your policy allow a German provider that also offers US/Singapore regions if you only deploy in DE/FI?
  • Is BSI C5 Type 2 + ISO 27001 sufficient, or is SOC 2 mandatory for your auditors?
  • Which SKUs (cloud vs dedicated vs managed web hosting) match your backup and support needs?
  • Will you need regions or managed services Hetzner does not offer natively (CDN, managed DB, AI APIs)?

Webswing

  • Will Webswing provide the current ISO 27001 certificate PDF and statement of applicability scope?
  • Is a customer DPA available for Client Portal / support data processing, and which subprocessors apply to licensed customers?
  • Where is portal.webswing.org physically hosted, and are any non-EU regions used for backups?
  • For your Forms/Swing edge cases (WebUtil, local devices, printers), which patterns are supported without code changes?