Couple of Questions:
Encryption and Security?
All communication between the Master and the nodes is done over SSH using 2048 bit RSA keys. User passwords are bcrypt hashed. We do not store any VM root passwords in the database.
In the interest of complete disclosure, we do have to note that there are some sensitive things stored in plaintext, due to restrictions in the underlying protocols.
First, due to a restriction in QEMU and libvirt, we do store KVM VNC console passwords in plaintext. Basically, the restriction is that the VNC password must be sent to libvirt in plaintext, and libvirt stores it in plaintext in the VM config file, since the underlying hypervisor requires it to be in plaintext.
In the database backup settings and offsite snapshot storage settings, since we support password-based FTP and SFTP as protocols for transfering backups / snapshots to another server, those passwords are stored in plaintext. We do support key-based authentication for SFTP, and provide instructions on setting that up, and we make it clear that password based authentication should NOT be used - it's only provided as a legacy option for those who have no other choice.
How long will the Release Special pricing be valid?
The Release Special pricing is limited to the first 20 customers. The special $5 per node price applies to the first 100 nodes, and it's a lifetime price.