[{"data":1,"prerenderedAt":428},["ShallowReactive",2],{"security-/":3},{"page":4,"home":258},{"id":5,"title":6,"body":7,"brand":249,"description":250,"extension":251,"faq":249,"footer":249,"hero":249,"locale":249,"meta":252,"navigation":253,"path":254,"pricing":249,"seo":255,"services":249,"servicesDetail":249,"stem":256,"useCases":249,"__hash__":257},"content/security.md","Security",{"type":8,"value":9,"toc":234},"minimark",[10,17,20,25,28,32,91,95,135,139,144,147,165,169,201,204,208,211,215,218,222,231],[11,12,13],"p",{},[14,15,16],"em",{},"Last updated October 27, 2026",[11,18,19],{},"Mintforge rents dedicated physical Macs. This page explains how we keep customer hardware separate, what we're responsible for and what you are, and exactly how we erase a Mac when your service ends. It describes our current practices, and we update it when they change.",[21,22,24],"h2",{"id":23},"dedicated-hardware","Dedicated hardware",[11,26,27],{},"Each Mac is a physical machine assigned to one customer at a time. There's no virtualization layer, and its CPU, memory and storage aren't shared with other customers. A Mac is only reassigned after it has been erased using the process below.",[21,29,31],{"id":30},"who-is-responsible-for-what","Who is responsible for what",[33,34,35,48],"table",{},[36,37,38],"thead",{},[39,40,41,45],"tr",{},[42,43,44],"th",{},"Mintforge",[42,46,47],{},"You",[49,50,51,60,68,76,84],"tbody",{},[39,52,53,57],{},[54,55,56],"td",{},"Physical hardware, power and cooling",[54,58,59],{},"macOS user accounts and passwords",[39,61,62,65],{},[54,63,64],{},"Network connectivity to your Mac's IPv4 address",[54,66,67],{},"macOS updates and the software you install",[39,69,70,73],{},[54,71,72],{},"Repairing or replacing failed hardware",[54,74,75],{},"Firewall settings and the services you expose",[39,77,78,81],{},[54,79,80],{},"Erasing the Mac when your service ends",[54,82,83],{},"Backups of your data",[39,85,86,88],{},[54,87],{},[54,89,90],{},"Tailscale, VPN, MDM and other agents you install",[21,92,94],{"id":93},"securing-your-mac","Securing your Mac",[96,97,98,106,112,123,129],"ul",{},[99,100,101,105],"li",{},[102,103,104],"strong",{},"Change setup credentials."," Replace any credentials you received during setup, and create named accounts for the people who need access.",[99,107,108,111],{},[102,109,110],{},"Limit what's exposed."," Your Mac is reachable over its IPv4 address. Turn on the macOS firewall and expose only the services you need. Many teams reach the Mac only through Tailscale or their own VPN.",[99,113,114,117,118,122],{},[102,115,116],{},"FileVault and restarts."," If you turn on FileVault, the Mac waits for a password at startup after every restart. Use ",[119,120,121],"code",{},"fdesetup authrestart"," for planned restarts, or the KVM add-on to unlock it at the console.",[99,124,125,128],{},[102,126,127],{},"Treat KVM access like physical access."," Anyone with access to the KVM add-on can see the screen and type at the console, including in macOS Recovery.",[99,130,131,134],{},[102,132,133],{},"Keep your own backups."," Mintforge doesn't take backups or disk images of customer Macs. The Mac's internal storage is the only copy of your data that we hold, and it's erased when your service ends.",[21,136,138],{"id":137},"when-your-service-ends","When your service ends",[140,141,143],"h3",{"id":142},"before-your-end-date","Before your end date",[11,145,146],{},"These steps protect your accounts and let the Mac be reused promptly. The erase happens either way.",[148,149,150,153,156,159,162],"ol",{},[99,151,152],{},"Copy off any data you want to keep.",[99,154,155],{},"Sign out of your Apple Account on the Mac (System Settings, then your name, then Sign Out). This turns off Find My and Activation Lock.",[99,157,158],{},"Remove the Mac from your MDM, and release it from Apple Business Manager if it was assigned there.",[99,160,161],{},"Deregister CI runners, and revoke any tokens, keys or signing certificates stored on the Mac.",[99,163,164],{},"Remove the Mac from your Tailscale tailnet or VPN.",[140,166,168],{"id":167},"how-we-erase-the-mac","How we erase the Mac",[148,170,171,177,183,189,195],{},[99,172,173,176],{},[102,174,175],{},"End access."," At the end of your service term, we disable network access to the Mac and any KVM access.",[99,178,179,182],{},[102,180,181],{},"Erase and restore."," A member of our team connects the Mac to a Mintforge-controlled Mac and restores it in DFU mode using Apple Configurator. This erases the internal storage and reinstalls the Mac's firmware and macOS.",[99,184,185,188],{},[102,186,187],{},"Verify."," We start the Mac and confirm it opens to Setup Assistant with no user accounts, and that Activation Lock is off.",[99,190,191,194],{},[102,192,193],{},"Record."," We log the Mac's serial number, the date, the method used and who performed the erase.",[99,196,197,200],{},[102,198,199],{},"Reassign."," Only after these steps can the Mac be assigned to another customer.",[11,202,203],{},"On request, we'll send you written confirmation of the erase, including the serial number and date.",[140,205,207],{"id":206},"why-this-is-effective","Why this is effective",[11,209,210],{},"Macs with Apple silicon always encrypt their internal storage, using keys protected by the Secure Enclave. Erasing the Mac permanently discards those keys, so data written before the erase can't be read back, even by someone with direct access to the storage chips.",[140,212,214],{"id":213},"if-a-mac-fails","If a Mac fails",[11,216,217],{},"If a Mac fails in a way that prevents the erase, it stays in Mintforge's custody until it has been repaired and erased, or until its storage has been physically destroyed. It isn't reassigned or resold before then.",[21,219,221],{"id":220},"reporting-a-security-issue","Reporting a security issue",[11,223,224,225,230],{},"If you believe you've found a security issue affecting Mintforge or a customer Mac, email ",[226,227,229],"a",{"href":228},"mailto:hello@mintforge.cloud","hello@mintforge.cloud"," with \"Security\" in the subject line. Please include enough detail for us to reproduce it.",[11,232,233],{},"Working through a vendor security review? Send your questionnaire to the same address.",{"title":235,"searchDepth":236,"depth":236,"links":237},"",2,[238,239,240,241,248],{"id":23,"depth":236,"text":24},{"id":30,"depth":236,"text":31},{"id":93,"depth":236,"text":94},{"id":137,"depth":236,"text":138,"children":242},[243,245,246,247],{"id":142,"depth":244,"text":143},3,{"id":167,"depth":244,"text":168},{"id":206,"depth":244,"text":207},{"id":213,"depth":244,"text":214},{"id":220,"depth":236,"text":221},null,"How Mintforge keeps customer hardware separate, who is responsible for what, and how we erase a Mac before it's assigned to another customer.","md",{},true,"/security",{"title":6,"description":250},"security","Bz7cTefk2ECzkwowbOqMzA9sI_mb0uahFRPt4oENmoE",{"id":259,"title":235,"body":260,"brand":44,"description":235,"extension":251,"faq":264,"footer":302,"hero":304,"locale":339,"meta":340,"navigation":253,"path":341,"pricing":342,"seo":362,"services":363,"servicesDetail":383,"stem":409,"useCases":410,"__hash__":427},"content/index.md",{"type":8,"value":261,"toc":262},[],{"title":235,"searchDepth":236,"depth":236,"links":263},[],{"eyebrow":265,"title":266,"subtitle":267,"items":268},"FAQ","Questions we get","Don't see yours? Email hello@mintforge.cloud.",[269,272,275,278,281,284,287,290,293,296,299],{"question":270,"answer":271},"Is each Mac a dedicated physical machine?","Yes. Each Mac mini is a physical machine allocated to a single customer. It isn't a virtual machine, and its CPU, memory and storage aren't shared with anyone else.",{"question":273,"answer":274},"How quickly can a Mac be provisioned?","It depends on current inventory and how many machines you need. Send a request with your quantity and preferred start date, and we'll confirm availability and a provisioning date before you commit.",{"question":276,"answer":277},"Is there a minimum commitment?","The Mac mini M4 Pro is $299 per month. Reserving for one to three years lowers the monthly rate. Your quote states the exact term before you sign up.",{"question":279,"answer":280},"Is the hardware KVM included?","No, it's an optional add-on with an extra monthly charge. The KVM is attached to the Mac's display output and keyboard and mouse input and reached over Tailscale, so you can see and control the console from power-on. Use it to watch the boot process, start up in macOS Recovery, reinstall macOS, or fix a network setting that locked you out of SSH.",{"question":282,"answer":283},"Can we install our own software?","Yes. You have full administrator access, so you can install Xcode, runner agents, test frameworks, model runtimes and any other macOS software you need.",{"question":285,"answer":286},"Can we use our own VPN, Tailscale or MDM?","Yes. Each Mac is reachable over direct IPv4, and you can install Tailscale, a VPN client or other agents yourself and manage them like any other Mac in your fleet. You can enroll the Mac in your MDM using user-approved enrollment; if you need Automated Device Enrollment through Apple Business Manager, ask us first. Mintforge doesn't provide a managed VPN or MDM service.",{"question":288,"answer":289},"What networking is included?","Each Mac is reachable over direct IPv4. If your workload needs a specific port speed, transfer volume, IPv6 or additional addresses, include that in your request and we'll confirm what we can provide.",{"question":291,"answer":292},"What happens to our data when the service ends?","Every Mac is erased before it's assigned to another customer. We restore it in DFU mode with Apple Configurator, which erases the internal storage and reinstalls macOS, then verify the result and log the serial number and date. We can send written confirmation on request. Mintforge doesn't keep backups, so copy off anything you need first. The full process is on our Security page.",{"question":294,"answer":295},"Can this replace a hosted testing cloud?","If your tests run on Safari, WebKit or the iOS Simulator, often yes. You run your own tools on dedicated macOS, and parallel capacity depends on how many Macs you rent rather than a plan's session limit. Mintforge provides the hardware, not a managed testing platform, and doesn't offer physical iOS devices.",{"question":297,"answer":298},"How does this compare with AWS EC2 Mac?","EC2 Mac instances run on Dedicated Hosts that are allocated for a minimum of 24 hours, then billed per second, with prices that vary by hardware generation and region. Mintforge rents a dedicated Mac by the month at a published price, with full administrator access, direct IPv4 and an optional hardware KVM. We don't offer hourly rentals, so for short, occasional jobs an hourly provider may suit you better. For machines that run all month, a flat rate is simpler to budget.",{"question":300,"answer":301},"When will Mac Studio and GPU compute be available?","Both are in early access. Tell us your workload and the hardware you have in mind, and we'll follow up about configurations and timing.",{"copyright":303,"email":229},"Copyright 2026 Mintforge",{"eyebrow":305,"title":306,"subtitle":307,"ctaPrimary":308,"ctaSecondary":309,"earlyAccess":310,"earlyAccessLink":311,"spec":312},"Dedicated Mac hosting","Dedicated Macs. Full control. Predictable pricing.","Rent a physical Mac mini allocated to you alone, for CI pipelines, automated testing and remote development. Full administrator access over direct IPv4, an optional hardware KVM, one monthly price, and technical support around the clock.","Check availability","View pricing","Mac Studio and dedicated GPU compute are in early access.","See hardware",{"title":313,"status":314,"price":315,"priceUnit":316,"rows":317},"Mac mini M4 Pro","Available now","$299","per month",[318,321,324,327,330,333,336],{"label":319,"value":320},"Chip","Apple M4 Pro",{"label":322,"value":323},"Memory","48 GB unified",{"label":325,"value":326},"Storage","512 GB SSD",{"label":328,"value":329},"Network","Direct IPv4",{"label":331,"value":332},"Access","Full administrator",{"label":334,"value":335},"Support","24×7 technical support",{"label":337,"value":338},"Hardware KVM","Optional add-on","en",{},"/",{"eyebrow":343,"title":344,"intro":345,"cta":308,"lead":346,"rows":347},"Pricing","One monthly price per machine","Published pricing for the hardware available today. Your quote confirms the term, quantity and any add-ons before you commit.",{"label":313,"price":315,"unit":316},[348,351,354,357,359],{"label":349,"value":350},"Billing","Monthly, flat rate per machine",{"label":352,"value":353},"Longer terms","1- to 3-year reservations at a reduced monthly rate, quoted on request",{"label":355,"value":356},"Included","Direct IPv4 connectivity, full administrator access, 24×7 technical support",{"label":337,"value":358},"Optional add-on, extra monthly charge",{"label":360,"value":361},"Mac Studio and GPU compute","Early access, quoted per configuration",{"description":235},{"eyebrow":364,"title":365,"subtitle":366,"featured":367,"items":377},"Why Mintforge","Dedicated hardware you control, with help when you need it","Every Mac is a physical machine allocated to one customer. Mintforge runs the hardware and the network; what runs on the Mac is up to you.",{"title":368,"body":369,"points":370,"note":376},"Console access, even when macOS won't boot","The optional hardware KVM is attached to your Mac's display output and keyboard and mouse input, and reached over Tailscale. You see and control the physical console from power-on, which covers the problems SSH and Screen Sharing can't reach.",[371,372,373,374,375],"Watch the boot process","Start up in macOS Recovery","Reinstall macOS","Recover from a failed or stuck update","Undo a network change that locked you out","Physical hardware faults still need hands-on work in the data center.",[378,381],{"title":379,"body":380},"A dedicated Mac, managed your way","Full administrator access over direct IPv4. Manage the Mac with the tools you already use, such as SSH, Screen Sharing, Tailscale or your own VPN, and your MDM. Mintforge provides the hardware and connectivity; the software on it is yours to run.",{"title":335,"body":382},"Our technical support team is available around the clock. You reach people who operate the hardware and network your Mac runs on.",{"eyebrow":384,"title":385,"intro":386,"items":387},"Hardware","Available now and in early access","The Mac mini M4 Pro is available today. Mac Studio and GPU compute nodes are in early access; tell us about your workload and we'll discuss configurations with you.",[388,397,404],{"title":313,"status":314,"price":389,"description":390,"featuresLabel":355,"features":391,"addOnsLabel":338,"addOns":395,"cta":308,"inquiry":313,"primary":253},"$299/month","For CI runners, automated testing and remote development.",[392,326,393,394,335],"Apple M4 Pro with 48 GB unified memory","Direct IPv4 connectivity","Full administrator access",[396],"Hardware KVM, extra monthly charge",{"title":398,"status":399,"price":400,"description":401,"cta":402,"inquiry":403},"Mac Studio","Early access","Pricing on request","High-memory Apple silicon for large builds, media workloads and local inference with open-weight models.","Ask about Mac Studio","Mac Studio (early access)",{"title":405,"status":399,"price":400,"description":406,"cta":407,"inquiry":408},"GPU compute nodes","Dedicated GPU servers for open-weight model inference and fine-tuning.","Ask about GPU compute","GPU compute (early access)","index",{"eyebrow":411,"title":412,"subtitle":413,"items":414},"Use Cases","What teams run on it","Dedicated macOS capacity for the work that doesn't fit on a laptop or a shared virtual machine.",[415,418,421,424],{"title":416,"body":417},"CI runners for Apple platforms","Install your own runner agent for GitHub Actions, GitLab CI, Buildkite, Jenkins or CircleCI and register the Mac with your existing pipelines. Xcode builds and tests run on capacity you don't share with other Mintforge customers, with the toolchain versions you choose. Mintforge bills a flat monthly rate, not per minute; any charges from your CI platform are separate.",{"title":419,"body":420},"Automated testing","Run your own test tooling on dedicated macOS. Test Safari and WebKit with Playwright, Selenium or WebdriverIO, and iOS and macOS apps with XCTest or Appium on the iOS Simulator. Parallel capacity scales with the number of Macs you rent. Tests run on Simulators, not physical iOS devices.",{"title":422,"body":423},"Remote developer environments","Give remote engineers and contractors access to Apple hardware without shipping machines. Mintforge provides the dedicated Mac; you set up the remote access, VPN, identity and management tools your team already uses.",{"title":425,"body":426},"Open-weight AI models","Run open-weight models locally on Apple silicon unified memory, on dedicated hardware without sharing compute resources with other customers. For larger models, Mac Studio and GPU compute nodes are in early access.","U7RdeHOMTu-gcak27V8lNnTQL26Tvda3H622pWUxKKc",1793110301907]