×
The 36 Best Movies on HBO Max Right Now

The 36 Best Movies on HBO Max Right Now

As the birthplace of prestige TV shows like The Sopranos and The Wire, HBO—and, by extension, HBO Max—is best known for its impressive lineup of original series. The network has also been upping the ante with feature-length content that is the stuff of Oscar dreams.

Below is a list of some of our favorite films streaming on HBO Max—from Oscar-winning epics to dystopian sci-fi classics. If you decide you’re in more of a TV mood, head over to our picks for the best shows on HBO Max. If you’re looking for even more recommendations, check out our lists of the best movies on Netflix, the best movies on Amazon Prime, and the best movies on Disney+.

If you buy something using links in our stories, we may earn a commission. This helps support our journalism. Learn more.

Prime Minister

Very little about Jacinda Ardern’s tenure as prime minister of New Zealand could be described as quotidian. She became the country’s opposition party leader just weeks before election day. After she won she discovered she was pregnant and gave birth while still in office, one of very few heads of state in history to do so. During her tenure she navigated the Covid-19 lockdowns and the Christchurch mosque shooting. This documentary, directed by Michelle Walshe and Lindsay Utz, chronicles her meteoric rise, resignation, and life after her time in office.

Bring Her Back

A24’s partnership with HBO continues to ensure that a never-ending stream of fascinating new(ish) indies from around the globe find their way into the Max library. The latest is a totally deranged Australian horror film starring two-time Oscar nominee Sally Hawkins in what might be her most unhinged performance yet. Following the death of their father, teen step-siblings Andy (Billy Barratt) and Piper (Sora Wong) are sent to live in a foster home with Laura (Hawkins), an odd but seemingly well-meaning older woman who is also currently tending to a young mute boy named Oliver (Jonah Wren Phillips). But Andy comes to learn that Laura is harboring some serious trauma of her own—and that he and his fellow foster kids are part of a wild plan to restore normalcy to Laura’s life. The movie takes viewers to dark, unexpected, and often gruesome places as it dissects the power that trauma can have over our lives.

Hereditary

Ari Aster made a splash—and one unfortunately memorable splat—with his 2018 directorial debut, which took psychological horror to new heights. Annie Graham (Toni Collette) is an artist living a seemingly contented life with her psychiatrist husband (Gabriel Byrne) and their two teenaged kids, Peter (Alex Wolff) and Charlie (Milly Shapiro). But any sense of normalcy disappears almost immediately following the death of Annie’s mom, with whom she had an often strained relationship. Is Annie crazy? Is her husband a terrible shrink? Is Peter a terrible person? Why does Charlie make that clicking noise? What’s that in the back seat of the car? These are all valid questions that are answered by Aster, whose deft directorial style has made him an instant Hollywood icon. Aster’s follow-up films, 2019’s equally disturbing Midsommar and 2023’s surrealist Beau Is Afraid, are also both available to stream.

The Witch

Anya Taylor-Joy was a 19-year-old Hollywood newcomer when she delivered her breakthrough performance as Thomasin, the young daughter of a family that is banished from its Puritan community in 1630s New England and forced to live in solitude in the wilderness. Soon they begin experiencing a series of eerie encounters that they believe to be supernatural in origin—and they very well may be right. The film, which burns slowly but brilliantly toward a conclusion that rewards viewers’ patience, marked the feature directorial debut of writer/director Robert Eggers, who has gone on to wide acclaim for similarly moody flicks like The Lighthouse (2019), The Northman (2022), and Nosferatu (2024).

Shame

Two years before nabbing the first of two (and counting) Oscar nominations for his work on Steve McQueen’s 12 Years a Slave, Michael Fassbender and McQueen collaborated on the criminally underseen Shame. To be fair: the film’s NC-17 rating certainly didn’t help its chances at becoming a box office behemoth, but the controversial rating was necessary in order for McQueen to deliver such a raw and honest portrayal of addiction. Brandon Sullivan (Fassbender) is a handsome and powerful executive living the good life in New York City, all while attempting to hide a debilitating sex addiction that has quickly taken over every part of his life. But when Brandon’s sister Sissy (Carey Mulligan) shows up at his apartment unexpectedly, she forces him to confront the ties—and trauma—that bind them.

Friendship

Paul Rudd and Tim Robinson both do what they do best—be impossibly likable and incredibly unhinged, respectively—in this dark comedy bromance. Craig Waterman (I Think You Should Leave’s Robinson) is an awkward marketing executive who is surprised when his new neighbor Austin Carmichael, a local TV meteorologist, invites him over for a beer one night. The two strike up an unexpected friendship that has the typically homebound Craig seeing the world in a whole new way—one filled with guys’ nights and male bonding. But when Austin decides to call off their brewing brotherhood, Craig cannot handle the rejection. And will go to wild lengths to mend their relationship.

Se7en

What’s in the box? If you don’t know, you’re about to find out. If you do know, it’s still worth rewatching. Gwyneth Paltrow was simply known as Brad Pitt’s girlfriend when this clever thriller was released in 1995, and Kevin Spacey was a hot commodity fresh off his Oscar win for The Usual Suspects. How times have changed! But this David Fincher classic, about a serial killer whose North Star is the seven deadly sins, remains a gritty masterpiece that has lost none of its potency in the 30 years since its release. Warning: It’s scheduled to leave the service on October 31, so get to (re)watching.

Final Destination Bloodlines

Twenty-five years after Final Destination arrived in theaters, and more than a decade after the last installment, the newest entry in the so-bad-it’s-good horror franchise just delivered what is undoubtedly its best chapter. While the story follows the same plot that fans have come to know and love—a group of people manage to cheat death, so Death comes back to finish the job—this one gives some history to that familiar rubric. While that gives this entry a more emotional level, it’s also quite clever in the new ways it chooses to off those whose fate was predetermined. And while it’s gory as hell, there’s something subtly comedic about the whole affair.

Sinners

Hot on the heels of some of the best, and most successful Marvel movies ever (that would be the Black Panther films), writer-director Ryan Coogler found a whole new way to blow cinephiles’ minds with this gorgeous vampire tale. Set in 1930s Mississippi, the film stars Michael B. Jordan in a dual role as twin brothers Smoke and Stack, two World War I veterans who return home from Chicago with mob money with a plan to run a juke joint. Opening night of their new establishment, however, goes terribly wrong when a group of blood-sucking white musicians shows up at their door. Lush and full of beautifully shot action scenes, Sinners is already headed to the top of most Best of 2025 lists. In addition to the original theatrical release, HBO Max is streaming the film in Black American Sign Language (BASL).

Get Out

In 2017, Jordan Peele went from one half of Key & Peele to an Oscar-winning screenwriter (not to mention the first Black writer to win the Academy Award for Best Original Screenplay and the first Black filmmaker to be nominated as a producer, writer, and director in one year). Eight years later, the impact of Peele’s Get Out is still just as impressive. Chris (Daniel Kaluuya) has been invited by his girlfriend, Rose (Allison Williams), to spend the weekend at her parents’ home in upstate New York. While Chris worries that her seemingly upper-class parents won’t be accepting of an interracial relationship, Rose assures him it won’t be a problem—and she’s right, but for all the wrong reasons. With Get Out, Peele cracked the code on making a film that was a horror movie, psychological drama, and telling commentary on race all at once.

Parasite

Even if you don’t care about awards, the fact that Parasite is the first—and still only—non-English-language movie to win a Best Picture Oscar should tell you something about the universality of its themes. The Kims, a family struggling to make ends meet, set their scheming sights on the Parks, a well-to-do family with plenty of problems of their own, but also plenty of money to muffle their dysfunction. At least for a time. Just when you think you know how class warfare is playing out in this black comedy, it changes course to reach an unexpected conclusion. As always, director Bong Joon-ho knows just how to lead his audience down one path, only to open a trapdoor into another.

Mountainhead

Succession creator Jesse Armstrong just might be today’s foremost chronicler of the world’s 1 percent. He stays in that lane with Mountainhead, his feature directorial debut, which follows an unexpectedly eventful weekend gathering of four of the tech world’s most powerful men at the new mountain retreat of Hugo “Souper” Van Yalk (Jason Schwartzman), the only non-billionaire of the bunch. While it’s meant to be a friendly get-together between old pals, everyone has an ulterior motive for blocking the weekend on their calendar. But all plans go out the window when the social media platform owned by Ven Parish (Cory Michael Smith), the world’s richest man, sends the world into upheaval as the result of a fast-tracked AI feature that’s spreading disinformation at an alarming rate. Which everyone but Ven sees as an opportunity to increase both their power and net worth.

Babygirl

Romy Mathis (Nicole Kidman) is a high-powered CEO with a husband (Antonio Banderas) who does not excite her and two teenage daughters she adores. But her life is turned upside down when one morning, while walking to her office, she is nearly attacked by a dog. A handsome young stranger (Harris Dickinson) steps in and manages to avert the attack, which leaves Romy shaken—and curious. Later, that same young man is introduced to her as Samuel, one of her newest interns, who seems to keep finding ways to push the boundaries of appropriate workplace behavior. Eventually, Romy gives in to Samuel’s advances, and his taste for BDSM-ish kink. Despite Romy’s concerns about the unfair power dynamic, Samuel insists that he’s the one who holds the power in their relationship, as she is the one with everything to lose. He might be right about that.

The Brutalist

Adrien Brody earned his second Best Actor Oscar for this historical epic from director Brady Corbet about László Tóth (Brody), a Bauhaus-trained architect who emigrates to America after surviving the Buchenwald concentration camp. Tóth settles in the Philadelphia area and must rebuild his life by working menial jobs for little pay. But Tóth’s talents don’t go hidden for long. A wealthy industrialist, Harrison Lee Van Buren (Guy Pearce), learns about Tóth’s past and commissions him to design a huge project. He also helps to speed up the immigration of Tóth’s wife, Erzsébet (Felicity Jones), whom he has not seen since his incarceration. But Tóth soon learns that the American Dream comes at a price. While, at its heart, The Brutalist is a frank depiction of the immigrant experience, it’s also a heartbreaking statement on the pain that comes with processing trauma. The film won three of its 10 Oscar nominations, and is completely deserving of each.

House

Prepare to have your mind blown by this trippy 1977 horror-comedy from Japan. Gorgeous (Kimiko Ikegami) is the daughter of a famed film composer who returns from a trip to Italy with a surprise: a new wife. In an effort to avoid the awkwardness of the situation, she asks her aunt if she can stay at her creepy old mansion for the summer, then brings along six of her closest friends. It doesn’t take long for weird things to start happening. Disembodied head attacks, homicidal pianos, and possessed cat portraits? This thrillingly bonkers cult classic has it all!

Gimme Shelter

Legendary documentarians Albert and David Maysles reinvented the rockumentary with this riveting first-hand recounting of the final days of the Rolling Stones’ 1969 US tour, which led to their infamous Altamont Free Concert. The concert, which attracted an estimated 300,000 people to California’s Altamont Speedway on December 6, 1969, was a disaster from the get-go—especially given the band’s decision to bring in the Hells Angels as the show’s security (one member famously said they were reportedly paid in beer). The Stones weren’t the only artists, but by the time they took the stage the crowd was out of control. At one point, one of the Angels stabbed a man, Meredith Hunter, right in front of the stage—a moment that the filmmakers later realized they had captured on film. Seeing the band’s reaction to watching the footage themselves makes for a truly compelling perspective on rock stardom.

Sing Sing

Colman Domingo proves yet again why he is one of today’s most acclaimed actors with this Oscar-nominated performance. Divine G (Domingo) is an inmate at New York’s infamous Sing Sing prison, serving time for a crime he did not commit. During his imprisonment, he finds purpose and joy in the prison’s theater group, part of its (very real) Rehabilitation Through the Arts program. By tapping into his inner thespian, Divine G is able to connect with his emotions, and he becomes determined to prove his innocence. But his undeniable acting talent, which inspires some of his fellow inmates, ends up posing a problem when it comes time for a parole hearing. Ultimately, Divine comes to respect the transformative power of the arts in helping him and some of his fellow inmates to overcome their past traumas. Making the film even more powerful is the fact that many of the actors are formerly incarcerated men who took part in the program.

Heretic

Hugh Grant earned some much-deserved awards consideration for playing so far against type in this religion-themed psychological thriller. Sister Barnes (Sophie Thatcher) and Sister Paxton (Chloe East) are two young Mormon missionaries who are desperate to find someone—anyone—who will let them speak about their religion in an attempt to convert new members to the church. When Mr. Reed (Grant), a seemingly kind older man, invites them into his home in order to deliver their spiel to him and his wife, it quickly becomes apparent, at least to Sister Barnes, that something is amiss. And that Reed doesn’t so much want to hear about religion as he does talk about it—and force his own beliefs on the young women in increasingly bizarre, and deadly, ways.

We Live in Time

Andrew Garfield and Florence Pugh ignite the screen with their chemistry in this romantic tearjerker that follows the couple over the course of a decade, from their meet-not-so-cute (she hits him with her car) to their journey into parenthood and, eventually, facing the ultimate curveball that threatens their happily-ever-after. Garfield and Pugh are two of the most acclaimed actors of their generation, and We Live in Time proves why.

Juror #2

Up until now, most of what you’ve heard about Juror #2 is how it’s one of Clint Eastwood’s most accomplished directorial efforts—and yet somehow it got shafted when it came to its theatrical release. Now’s your chance to see what all the fuss is about. Justin Kemp (Nicholas Hoult) is a journalist and recovering alcoholic who is making every effort to maintain his sobriety. That becomes a bit of a challenge when he’s put on the jury of a high-profile murder trial … only to realize that he may have inadvertently played a part in what happened. Hoult is fantastic in this edge-of-your-seat legal (and ethical) drama.

Beetlejuice Beetlejuice

It has been nearly 40 years since Tim Burton’s Beetlejuice stormed the late ’80s box office. In the decades since, we’ve often heard rumblings that a sequel was in the works. Or might be in the works. Or most definitely was in the works. Or might not be in the cards at all. Well, in 2024 it finally happened, and it was as if Michael Keaton had never stepped away from the role at all (eternal life has a way of doing that to you). This time, however, Lydia (Winona Ryder) is still doing her best to forget her rendezvous with the bio-exorcism pro. But when she returns to her childhood home, it’s her own badass daughter (Jenna Ortega) who finds a way to bring him back into all their lives.

Super/Man: The Christopher Reeve Story

In addition to the all-new Superman movie, audiences have James Gunn and his DC Studios co-CEO Peter Safran (partly) to thank for bringing this long-overdue documentary about the ultimate superhero actor to worldwide audiences. Directors Ian Bonhôte and Peter Ettedgui deliver a heartfelt, moving tribute to Reeve—as an actor, yes, but even more so as a person who never gave up. Alexandra Reeve Givens, Matthew Reeve, and Will Reeve—Reeve’s children—share their own stories about their dad, giving the project yet another layer of intimacy. No, you’re crying.

Watchmen: Chapter I

Brandon Vietti (Batman: Under the Red Hood) directs this innovative animated adaption of Alan Moore’s Hugo Award-winning graphic novel about an investigation into the murder of Edward Blake—better known as a superhero named the Comedian. When the police come up empty in terms of suspects, the costumed vigilante Rorschach (Titus Welliver) decides to take the case into his own hands, and eventually comes to believe that someone is attempting to knock off superheroes. So he enlists the help of a group of them in order to put a stop to the killing spree.

MaXXXine

MaXXXine is the third film in writer-director Ti West’s X trilogy, which began with X and Pearl. It’s set immediately after the events of Pearl: Mia Goth’s Maxine Minx is desperate to escape her upbringing as a preacher’s daughter and make the move from porn to more mainstream movies. She gets her chance when she lands the lead in a horror movie, The Puritan II. Then her friends start getting murdered. Ultimately, Maxine is forced to confront the sins of her past and find a way to achieve the fame she so desperately dreams of.

Civil War

In the not-too-distant future, the United States has transformed into an all-out battlefield between an authoritarian government, headed by a third-term president (Nick Offerman), and a stream of secessionist movements that threaten to destroy the country as we know it. But a group of journalists (led by Kirsten Dunst) is determined to document the downfall of America at any cost, so they set about heading to the White House in order to interview the embattled president. Which is much easier said than done. Oscar nominee Alex Garland (Ex-Machina) writes and directs this dystopian drama that often hits uncomfortably close to home.

Furiosa: A Mad Max Saga

Furiosa may have been dubbed last summer’s first box office “bomb,” but don’t let those dollar-focused headlines deter you from this one. Anya Taylor-Joy, who is undoubtedly one of the most versatile actors working today, shines in the role of Imperator Furiosa, a badass emancipator who dares to challenge gender conventions in a dangerous, postapocalyptic world where (no surprise at all) men make the rules. Taylor-Joy does an admirable job embracing the role that Charlize Theron memorably originated in Mad Max: Fury Road.

Love Lies Bleeding

English writer-director Rose Glass follows up her BAFTA-nominated Saint Maud with this twisty, hyper-violent love story. It’s 1989 in a rural New Mexico town where gym manager Lou (Kristen Stewart) is doing her best to stay under the radar and keep an eye on her sister Beth (Jena Malone), who is in an abusive relationship with her husband JJ (Dave Franco). But Lou’s life is turned upside down when Jackie (Katy O’Brian), a gorgeous young bodybuilder, begins coming to Lou’s gym to train for an upcoming competition in Las Vegas. The two fall in love—and then Lou’s hidden family secrets come tumbling out of the closet and threaten her life, and the lives of those she cares about.

Faye

“I’m Faye Dunaway. That’s who I am.” That’s the way the Oscar winner introduces herself in the trailer for Laurent Bouzereau’s feature-length documentary. But what the film reveals is that there’s a lot more to Faye Dunaway than the glamorous image associated with the legendary star of Network. Dunaway opens up in a way that has rarely been seen before, discussing her childhood and family, her struggles with bipolar disorder, and how the characters she has played continue to impact her. It’s a fascinating portrait of a true Hollywood icon.

Quad Gods

Jess Jacklin’s feature documentary follows the fascinating journey of Blake, Prentice, and Richard—three individuals with quadriplegia who meet in a neuro-rehabilitation lab at Mount Sinai Hospital and launch a plan to create the world’s first all-quadriplegic esports team. It’s a noble pursuit, but one fraught with challenges as they break down the doors of ableism. At its heart, Quad Gods is a story of friendship, perseverance, and survival.

Am I OK?

Lucy (Dakota Johnson) is a thirtysomething living in Los Angeles, constantly failing at relationships and wondering why she doesn’t have everything figured out yet. After drunkenly sharing the story of the time she kissed a female friend as a teen, she begins to realize that the problem in her love life might not be the men she’s choosing, but that she’s choosing men at all. Former Saturday Night Live writer Lauren Pomerantz penned the script for the film based on her own experience of coming out in her thirties. Tig Notaro and her wife Stephanie Allynne do an admirable job as codirectors, treating Lucy’s journey of self-discovery with the respect it deserves—and plenty of humor.

MoviePass, MovieCrash

For better or worse, millions of film fans will remember 2012 as the year of MoviePass. For $25 per month, you could basically live in a movie theater—which was great for audiences, not so great for movie theaters (which were already struggling), and eventually disastrous for the company itself. For anyone who still has their MoviePass, this revealing documentary tells the real story of all that went wrong behind the scenes, and shares the story of the unsung heroes who really did just want to create a product that movie lovers could embrace. By the way: If you do indeed still have your original MoviePass, this doc has made it a worthwhile piece of memorabilia—with some selling for north of $1,000.

Dune and Dune: Part Two

Since breaking through with the Oscar-nominated Incendies (2010), Denis Villeneuve has continued to prove that he’s one of the most talented filmmakers working today. As if making a Blade Runner sequel that didn’t suck wasn’t enough, Villeneuve then went on to crack the cinematic code on Frank Herbert’s Dune series—something that true visionaries like David Lynch and Alejandro Jodorowsky had attempted before him, albeit largely unsuccessfully. Both the 2021 original film and its sequel are streaming on HBO Max—as is Lynch’s 1984 adaptation (which has become a bit of a cult classic over the years). The film follows the fate of the planet Arrakis—and its supply of melange, a unique spice and the most valuable substance in the universe—which rests in the hands of Paul Atreides (Timothée Chalamet), the untested son of a powerful duke. Looking for more Dune action? The prequel series Dune: Prophecy, starring Emily Watson, Olivia Williams, and Mark Strong is streaming in full.

The Zone of Interest

In 1943, Rudolf Höss (Christian Friedel) was the commandant of Auschwitz who spent his days playing god with the lives of the concentration camp’s innocent prisoners. But what happened when Höss went home? That’s the reality Jonathan Glazer’s Oscar-winning film examines, and the answer is: Not much. Höss lives right next door to the camp, in the so-called Zone of Interest, with his wife Hedwig (Sandra Hüller) and their five children. Within those four walls, they strive to build a dream life for their family—while the sound of gunshots, incoming trains, and furnaces being lit are just a part of daily life. Yes, it’s every bit as brutal—and necessary—as it sounds.

Barbie

Greta Gerwig is a master of breathing new life into old properties (see: Little Women). With Barbie, she has ignited a revolution. Barbie (Margot Robbie) is living her best life in Barbieland—until one day, when her perfectly plastic world, and heels, suddenly begin to collapse. To get her fabulous life back, Barbie must travel to the real world—well, Los Angeles—to determine who or what is causing her existential crisis. The film grossed nearly $1.5 billion worldwide, meaning you’ve already seen it. But even if you did, it’s absolutely worth a second watch—if only to lament its many Oscar snubs.

Reality

In 2017, an intelligence report about Russian interference in the 2016 US presidential election was leaked anonymously. One year later, former NSA translator Reality Winner (yes, that’s her real name) was sentenced to more than five years in prison for the crime—the longest sentence ever received by a government whistleblower. HBO’s reigning muse, Sydney Sweeney (EuphoriaThe White Lotus), shines in this gripping true story, which plays out mostly in real time as the FBI knocks on the 25-year-old’s door and spends more than an hour questioning her.

All the Beauty and the Bloodshed

Finding success in one’s lifetime might seem like the dream of every artist, but Nan Goldin has bigger ambitions. Though she’s a photographer by trade, she’s an activist by calling and has long used her camera to capture painfully intimate moments of America in crisis, including extensive work focused on the HIV/AIDS and opioid epidemics. But All the Beauty and the Bloodshed reveals the artist in conflict: Should she allow her work to be showcased in one of the prominent museums or galleries that have received endowments from the Sackler family—the Big Pharma family that many blame for America’s opioid crisis? It’s a moving portrait of an artist willing to risk it all for her beliefs.

Source link
#Movies #HBO #Max

What every U.K. AI startup wants to know these days is, how can I get office space in King’s Cross?  

The area is so hot that a VC firm allegedly recently won a deal by promising a founder office space in the neighborhood. “We stop at nothing to win deals [for] and to support” founders, “including helping them source office space when needed,” the firm told me when asked about the rumor, declining to confirm or deny any details. 

The neighborhood’s popularity began back in 2016 when DeepMind — then newly acquired by Google — moved in. Soon after, a flood of AI startups followed, wanting to be around the Google DeepMind magic. Today, they hope to take advantage of the cluster of AI talent there. 

This has transformed King’s Cross into one of the world’s top AI hubs, rivaled only by San Francisco and Beijing. Around London, it’s known by the sobriquet “Knowledge Quarter,” as it’s home to names like OpenAI, Meta, Isomorphic Labs, Cusp AI, Wayne, Recursive, and, a little farther down the road, Synthesia and Anthropic. The European Technology Network (ETN) just moved into a glossy new office nearby, while University College London sits around the corner.  

Mixed in with the new developments are trendy food spots like Hoppers and BAO. Hop a train from King’s Cross, and founders can be in Cambridge in 45 minutes to source talent or can be in Paris in two hours to strike a deal.  

Who would have guessed that a little more than 20 years ago, this was one of the seediest areas in London?  

“In the ’80s, crack and heroin made the area a major narcotics market,” Hussein Kanji, an investor at Hoxton Ventures, said, recalling syringes in tree trunks and gangs patrolling the streets. “In 1982, the local church was occupied by the English Collective of Prostitutes for 12 straight days.” Then, in the early 2000s, a real estate developer had a dream and, well, “now it is the AI hotbed of the United Kingdom,” Kanji said. “What a change.” 
 
Around 18 months ago, his portfolio company BioCorteX moved from the neighborhood Holborn to the Jellicoe building in King’s Cross, hoping to be near the action. “Lots going on in London right now,” Nik Sharma, co-founder of BioCorteX, told me. “Lots of hyperscalers moving in.” That includes, reportedly, Jeff Bezos’ AI company Prometheus, which is also said to be in talks to move into the Jellicoe.  

There are around 3,600 AI startups in London, which, together, have raised around $12.1 billion out of the $14.8 billion raised in the city since late July, according to Dealroom. Since the start of June, AI-related startups have leased more than 1 million square feet of office space in London, according to the real estate firm Knight Frank. With that, prime rents in King’s Cross have risen 18% over the past three years, Chris Dunn, a commercial insight associate at the firm, told me. 
 
That percentage represents only the largest leases encompassing at least 10,000 square feet, like the ones OpenAI and Prometheus are signing. The shorter deals go for even more, he said, and now the vacancy rate for conventional office space is just 0.9%. “Demand has outstripped supply,” he continued.  

Today, one of the big topics of the area is sovereignty. It was a wake-up call for many when Anthropic shut off access to Mythos and Fable this summer, leaving some in the ecosystem to conclude: “We’d better look after ourselves,” Saul Klein, co-founder of the VC firm Phoenix Court, told me.  

Phoenix Court is located in the King’s Cross area and has three portfolio companies in the vicinity, including Olix (which just announced a $3.3 billion valuation), Early Health and CoMind. Robin Klein, co-founder of the firm, said the shutdown of Fable and Mythos access was a “small but sharp reminder that Europe can’t simply rent its AI capabilities and capacity; it needs to build and hold some of its own.” King’s Cross, he said, is where much of this building is actually happening.  

“The bigger question,” he continued, “is whether the U.K. builds the infrastructure, compute, energy, capital, to make this self-reliance durable, rather than just hosting outposts of U.S. labs.” 

This former notorious red-light district is now one of the world’s top AI hubs | TechCrunch
What every U.K. AI startup wants to know these days is, how can I get office space in King’s Cross?  

The area is so hot that a VC firm allegedly recently won a deal by promising a founder office space in the neighborhood. “We stop at nothing to win deals [for] and to support” founders, “including helping them source office space when needed,” the firm told me when asked about the rumor, declining to confirm or deny any details. 







The neighborhood’s popularity began back in 2016 when DeepMind — then newly acquired by Google — moved in. Soon after, a flood of AI startups followed, wanting to be around the Google DeepMind magic. Today, they hope to take advantage of the cluster of AI talent there. 

This has transformed King’s Cross into one of the world’s top AI hubs, rivaled only by San Francisco and Beijing. Around London, it’s known by the sobriquet “Knowledge Quarter,” as it’s home to names like OpenAI, Meta, Isomorphic Labs, Cusp AI, Wayne, Recursive, and, a little farther down the road, Synthesia and Anthropic. The European Technology Network (ETN) just moved into a glossy new office nearby, while University College London sits around the corner.  

Mixed in with the new developments are trendy food spots like Hoppers and BAO. Hop a train from King’s Cross, and founders can be in Cambridge in 45 minutes to source talent or can be in Paris in two hours to strike a deal.  

Who would have guessed that a little more than 20 years ago, this was one of the seediest areas in London?  

“In the ’80s, crack and heroin made the area a major narcotics market,” Hussein Kanji, an investor at Hoxton Ventures, said, recalling syringes in tree trunks and gangs patrolling the streets. “In 1982, the local church was occupied by the English Collective of Prostitutes for 12 straight days.” Then, in the early 2000s, a real estate developer had a dream and, well, “now it is the AI hotbed of the United Kingdom,” Kanji said. “What a change.”  Around 18 months ago, his portfolio company BioCorteX moved from the neighborhood Holborn to the Jellicoe building in King’s Cross, hoping to be near the action. “Lots going on in London right now,” Nik Sharma, co-founder of BioCorteX, told me. “Lots of hyperscalers moving in.” That includes, reportedly, Jeff Bezos’ AI company Prometheus, which is also said to be in talks to move into the Jellicoe.  


There are around 3,600 AI startups in London, which, together, have raised around .1 billion out of the .8 billion raised in the city since late July, according to Dealroom. Since the start of June, AI-related startups have leased more than 1 million square feet of office space in London, according to the real estate firm Knight Frank. With that, prime rents in King’s Cross have risen 18% over the past three years, Chris Dunn, a commercial insight associate at the firm, told me.  That percentage represents only the largest leases encompassing at least 10,000 square feet, like the ones OpenAI and Prometheus are signing. The shorter deals go for even more, he said, and now the vacancy rate for conventional office space is just 0.9%. “Demand has outstripped supply,” he continued.  

Today, one of the big topics of the area is sovereignty. It was a wake-up call for many when Anthropic shut off access to Mythos and Fable this summer, leaving some in the ecosystem to conclude: “We’d better look after ourselves,” Saul Klein, co-founder of the VC firm Phoenix Court, told me.  

Phoenix Court is located in the King’s Cross area and has three portfolio companies in the vicinity, including Olix (which just announced a .3 billion valuation), Early Health and CoMind. Robin Klein, co-founder of the firm, said the shutdown of Fable and Mythos access was a “small but sharp reminder that Europe can’t simply rent its AI capabilities and capacity; it needs to build and hold some of its own.” King’s Cross, he said, is where much of this building is actually happening.  







“The bigger question,” he continued, “is whether the U.K. builds the infrastructure, compute, energy, capital, to make this self-reliance durable, rather than just hosting outposts of U.S. labs.” 

Image Credits:Phoenix Court

Top founders want to stay 

Simon Kohl, founder of Latent Labs, has offices in King’s Cross and San Francisco. The London office, at the moment, is growing faster, and he’s more bullish than ever on the ecosystem, he said. “The mood right now feels less like London trying to catch up and more like London becoming one of the default places to start a serious AI company,” he said.  Look around and you are likely to see Wayve testing its autonomous cars. Founded in 2017 by co-founder Alex Kendall, the unicorn is one of London’s biggest success stories.  

“Ten years ago, building a frontier AI company from London felt like an unusual choice,” Kendall told me. “Now it feels like an obvious one.” Wayve moved into King’s Cross in 2018 looking for a space that could double as a garage — “a rare combination in Central London,” Kendall said. He has watched the ecosystem mature around him — and it’s now evident that a startup can stay in London, raise serious capital, hire world-class AI talent, and remain globally competitive, he said.  Down the street from Anthropic’s new 158,000-square-foot office is the AI agent builder Sierra and the AI video platform Synthesia. 

Laura Gonzalez Florez, Synthesia’s chief of staff and head of people, says the company moved into its glossy new office building a year ago to accommodate its growing team. They were drawn to the area for the same reason as everyone else: “It’s very close to the airport … very close to where a lot of investors are,” she said. 

Image Credits:Synthesia

Around two-thirds of Synthesia’s engineers are remote, Gonzalez Florez said, letting the company tap into an affordable, international, and diverse talent pool and helping it scale faster. “From London, we can hire and work, without any problem, people from anywhere, from Slovenia to Portugal,” she said.  

Unsurprisingly, London’s AI boom is also causing a talent war.U.K. AI job postings have skyrocketed in the past few years, per data from PwC. When Anthropic announced it moved into town earlier this year, it listed, for example, a salary range of £260,000 to £630,000 for a machine learning research engineer when the average salary in London for the same role is around £102,000. Some founders in the U.K., like those in Silicon Valley, are being forced to raise more and bigger rounds to keep up. 

“The real test is whether more globally significant AI companies are founded, funded, and scaled from the U.K., while continuing to attract the world’s best talent to build them here,” Zain Ali, founder of the King’s Cross-based AI legal firm Centuro, told me. “If that continues to happen, King’s Cross won’t just be an AI hub. It’ll become one of the U.K.’s most important strategic assets.”
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.#Thisformernotorious #redlight #districtis #nowone #worlds #top #hubs #TechCrunchUK
Image Credits:Phoenix Court

Top founders want to stay

Simon Kohl, founder of Latent Labs, has offices in King’s Cross and San Francisco. The London office, at the moment, is growing faster, and he’s more bullish than ever on the ecosystem, he said. “The mood right now feels less like London trying to catch up and more like London becoming one of the default places to start a serious AI company,” he said. 
 
Look around and you are likely to see Wayve testing its autonomous cars. Founded in 2017 by co-founder Alex Kendall, the unicorn is one of London’s biggest success stories.  

“Ten years ago, building a frontier AI company from London felt like an unusual choice,” Kendall told me. “Now it feels like an obvious one.” Wayve moved into King’s Cross in 2018 looking for a space that could double as a garage — “a rare combination in Central London,” Kendall said. He has watched the ecosystem mature around him — and it’s now evident that a startup can stay in London, raise serious capital, hire world-class AI talent, and remain globally competitive, he said. 
 
Down the street from Anthropic’s new 158,000-square-foot office is the AI agent builder Sierra and the AI video platform Synthesia. 

Laura Gonzalez Florez, Synthesia’s chief of staff and head of people, says the company moved into its glossy new office building a year ago to accommodate its growing team. They were drawn to the area for the same reason as everyone else: “It’s very close to the airport … very close to where a lot of investors are,” she said. 

Image Credits:Synthesia

Around two-thirds of Synthesia’s engineers are remote, Gonzalez Florez said, letting the company tap into an affordable, international, and diverse talent pool and helping it scale faster. “From London, we can hire and work, without any problem, people from anywhere, from Slovenia to Portugal,” she said.  

Unsurprisingly, London’s AI boom is also causing a talent war.

U.K. AI job postings have skyrocketed in the past few years, per data from PwC. When Anthropic announced it moved into town earlier this year, it listed, for example, a salary range of £260,000 to £630,000 for a machine learning research engineer when the average salary in London for the same role is around £102,000. Some founders in the U.K., like those in Silicon Valley, are being forced to raise more and bigger rounds to keep up. 

“The real test is whether more globally significant AI companies are founded, funded, and scaled from the U.K., while continuing to attract the world’s best talent to build them here,” Zain Ali, founder of the King’s Cross-based AI legal firm Centuro, told me. “If that continues to happen, King’s Cross won’t just be an AI hub. It’ll become one of the U.K.’s most important strategic assets.”

When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.

#Thisformernotorious #redlight #districtis #nowone #worlds #top #hubs #TechCrunchUK">This former notorious red-light district is now one of the world’s top AI hubs | TechCrunch
What every U.K. AI startup wants to know these days is, how can I get office space in King’s Cross?  

The area is so hot that a VC firm allegedly recently won a deal by promising a founder office space in the neighborhood. “We stop at nothing to win deals [for] and to support” founders, “including helping them source office space when needed,” the firm told me when asked about the rumor, declining to confirm or deny any details. 







The neighborhood’s popularity began back in 2016 when DeepMind — then newly acquired by Google — moved in. Soon after, a flood of AI startups followed, wanting to be around the Google DeepMind magic. Today, they hope to take advantage of the cluster of AI talent there. 

This has transformed King’s Cross into one of the world’s top AI hubs, rivaled only by San Francisco and Beijing. Around London, it’s known by the sobriquet “Knowledge Quarter,” as it’s home to names like OpenAI, Meta, Isomorphic Labs, Cusp AI, Wayne, Recursive, and, a little farther down the road, Synthesia and Anthropic. The European Technology Network (ETN) just moved into a glossy new office nearby, while University College London sits around the corner.  

Mixed in with the new developments are trendy food spots like Hoppers and BAO. Hop a train from King’s Cross, and founders can be in Cambridge in 45 minutes to source talent or can be in Paris in two hours to strike a deal.  

Who would have guessed that a little more than 20 years ago, this was one of the seediest areas in London?  

“In the ’80s, crack and heroin made the area a major narcotics market,” Hussein Kanji, an investor at Hoxton Ventures, said, recalling syringes in tree trunks and gangs patrolling the streets. “In 1982, the local church was occupied by the English Collective of Prostitutes for 12 straight days.” Then, in the early 2000s, a real estate developer had a dream and, well, “now it is the AI hotbed of the United Kingdom,” Kanji said. “What a change.”  Around 18 months ago, his portfolio company BioCorteX moved from the neighborhood Holborn to the Jellicoe building in King’s Cross, hoping to be near the action. “Lots going on in London right now,” Nik Sharma, co-founder of BioCorteX, told me. “Lots of hyperscalers moving in.” That includes, reportedly, Jeff Bezos’ AI company Prometheus, which is also said to be in talks to move into the Jellicoe.  


There are around 3,600 AI startups in London, which, together, have raised around .1 billion out of the .8 billion raised in the city since late July, according to Dealroom. Since the start of June, AI-related startups have leased more than 1 million square feet of office space in London, according to the real estate firm Knight Frank. With that, prime rents in King’s Cross have risen 18% over the past three years, Chris Dunn, a commercial insight associate at the firm, told me.  That percentage represents only the largest leases encompassing at least 10,000 square feet, like the ones OpenAI and Prometheus are signing. The shorter deals go for even more, he said, and now the vacancy rate for conventional office space is just 0.9%. “Demand has outstripped supply,” he continued.  

Today, one of the big topics of the area is sovereignty. It was a wake-up call for many when Anthropic shut off access to Mythos and Fable this summer, leaving some in the ecosystem to conclude: “We’d better look after ourselves,” Saul Klein, co-founder of the VC firm Phoenix Court, told me.  

Phoenix Court is located in the King’s Cross area and has three portfolio companies in the vicinity, including Olix (which just announced a .3 billion valuation), Early Health and CoMind. Robin Klein, co-founder of the firm, said the shutdown of Fable and Mythos access was a “small but sharp reminder that Europe can’t simply rent its AI capabilities and capacity; it needs to build and hold some of its own.” King’s Cross, he said, is where much of this building is actually happening.  







“The bigger question,” he continued, “is whether the U.K. builds the infrastructure, compute, energy, capital, to make this self-reliance durable, rather than just hosting outposts of U.S. labs.” 

Image Credits:Phoenix Court

Top founders want to stay 

Simon Kohl, founder of Latent Labs, has offices in King’s Cross and San Francisco. The London office, at the moment, is growing faster, and he’s more bullish than ever on the ecosystem, he said. “The mood right now feels less like London trying to catch up and more like London becoming one of the default places to start a serious AI company,” he said.  Look around and you are likely to see Wayve testing its autonomous cars. Founded in 2017 by co-founder Alex Kendall, the unicorn is one of London’s biggest success stories.  

“Ten years ago, building a frontier AI company from London felt like an unusual choice,” Kendall told me. “Now it feels like an obvious one.” Wayve moved into King’s Cross in 2018 looking for a space that could double as a garage — “a rare combination in Central London,” Kendall said. He has watched the ecosystem mature around him — and it’s now evident that a startup can stay in London, raise serious capital, hire world-class AI talent, and remain globally competitive, he said.  Down the street from Anthropic’s new 158,000-square-foot office is the AI agent builder Sierra and the AI video platform Synthesia. 

Laura Gonzalez Florez, Synthesia’s chief of staff and head of people, says the company moved into its glossy new office building a year ago to accommodate its growing team. They were drawn to the area for the same reason as everyone else: “It’s very close to the airport … very close to where a lot of investors are,” she said. 

Image Credits:Synthesia

Around two-thirds of Synthesia’s engineers are remote, Gonzalez Florez said, letting the company tap into an affordable, international, and diverse talent pool and helping it scale faster. “From London, we can hire and work, without any problem, people from anywhere, from Slovenia to Portugal,” she said.  

Unsurprisingly, London’s AI boom is also causing a talent war.U.K. AI job postings have skyrocketed in the past few years, per data from PwC. When Anthropic announced it moved into town earlier this year, it listed, for example, a salary range of £260,000 to £630,000 for a machine learning research engineer when the average salary in London for the same role is around £102,000. Some founders in the U.K., like those in Silicon Valley, are being forced to raise more and bigger rounds to keep up. 

“The real test is whether more globally significant AI companies are founded, funded, and scaled from the U.K., while continuing to attract the world’s best talent to build them here,” Zain Ali, founder of the King’s Cross-based AI legal firm Centuro, told me. “If that continues to happen, King’s Cross won’t just be an AI hub. It’ll become one of the U.K.’s most important strategic assets.”
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.#Thisformernotorious #redlight #districtis #nowone #worlds #top #hubs #TechCrunchUK

European Technology Network (ETN) just moved into a glossy new office nearby, while University College London sits around the corner.  

Mixed in with the new developments are trendy food spots like Hoppers and BAO. Hop a train from King’s Cross, and founders can be in Cambridge in 45 minutes to source talent or can be in Paris in two hours to strike a deal.  

Who would have guessed that a little more than 20 years ago, this was one of the seediest areas in London?  

“In the ’80s, crack and heroin made the area a major narcotics market,” Hussein Kanji, an investor at Hoxton Ventures, said, recalling syringes in tree trunks and gangs patrolling the streets. “In 1982, the local church was occupied by the English Collective of Prostitutes for 12 straight days.” Then, in the early 2000s, a real estate developer had a dream and, well, “now it is the AI hotbed of the United Kingdom,” Kanji said. “What a change.” 
 
Around 18 months ago, his portfolio company BioCorteX moved from the neighborhood Holborn to the Jellicoe building in King’s Cross, hoping to be near the action. “Lots going on in London right now,” Nik Sharma, co-founder of BioCorteX, told me. “Lots of hyperscalers moving in.” That includes, reportedly, Jeff Bezos’ AI company Prometheus, which is also said to be in talks to move into the Jellicoe.  

There are around 3,600 AI startups in London, which, together, have raised around $12.1 billion out of the $14.8 billion raised in the city since late July, according to Dealroom. Since the start of June, AI-related startups have leased more than 1 million square feet of office space in London, according to the real estate firm Knight Frank. With that, prime rents in King’s Cross have risen 18% over the past three years, Chris Dunn, a commercial insight associate at the firm, told me. 
 
That percentage represents only the largest leases encompassing at least 10,000 square feet, like the ones OpenAI and Prometheus are signing. The shorter deals go for even more, he said, and now the vacancy rate for conventional office space is just 0.9%. “Demand has outstripped supply,” he continued.  

Today, one of the big topics of the area is sovereignty. It was a wake-up call for many when Anthropic shut off access to Mythos and Fable this summer, leaving some in the ecosystem to conclude: “We’d better look after ourselves,” Saul Klein, co-founder of the VC firm Phoenix Court, told me.  

Phoenix Court is located in the King’s Cross area and has three portfolio companies in the vicinity, including Olix (which just announced a $3.3 billion valuation), Early Health and CoMind. Robin Klein, co-founder of the firm, said the shutdown of Fable and Mythos access was a “small but sharp reminder that Europe can’t simply rent its AI capabilities and capacity; it needs to build and hold some of its own.” King’s Cross, he said, is where much of this building is actually happening.  

“The bigger question,” he continued, “is whether the U.K. builds the infrastructure, compute, energy, capital, to make this self-reliance durable, rather than just hosting outposts of U.S. labs.” 

This former notorious red-light district is now one of the world’s top AI hubs | TechCrunch
What every U.K. AI startup wants to know these days is, how can I get office space in King’s Cross?  

The area is so hot that a VC firm allegedly recently won a deal by promising a founder office space in the neighborhood. “We stop at nothing to win deals [for] and to support” founders, “including helping them source office space when needed,” the firm told me when asked about the rumor, declining to confirm or deny any details. 







The neighborhood’s popularity began back in 2016 when DeepMind — then newly acquired by Google — moved in. Soon after, a flood of AI startups followed, wanting to be around the Google DeepMind magic. Today, they hope to take advantage of the cluster of AI talent there. 

This has transformed King’s Cross into one of the world’s top AI hubs, rivaled only by San Francisco and Beijing. Around London, it’s known by the sobriquet “Knowledge Quarter,” as it’s home to names like OpenAI, Meta, Isomorphic Labs, Cusp AI, Wayne, Recursive, and, a little farther down the road, Synthesia and Anthropic. The European Technology Network (ETN) just moved into a glossy new office nearby, while University College London sits around the corner.  

Mixed in with the new developments are trendy food spots like Hoppers and BAO. Hop a train from King’s Cross, and founders can be in Cambridge in 45 minutes to source talent or can be in Paris in two hours to strike a deal.  

Who would have guessed that a little more than 20 years ago, this was one of the seediest areas in London?  

“In the ’80s, crack and heroin made the area a major narcotics market,” Hussein Kanji, an investor at Hoxton Ventures, said, recalling syringes in tree trunks and gangs patrolling the streets. “In 1982, the local church was occupied by the English Collective of Prostitutes for 12 straight days.” Then, in the early 2000s, a real estate developer had a dream and, well, “now it is the AI hotbed of the United Kingdom,” Kanji said. “What a change.”  Around 18 months ago, his portfolio company BioCorteX moved from the neighborhood Holborn to the Jellicoe building in King’s Cross, hoping to be near the action. “Lots going on in London right now,” Nik Sharma, co-founder of BioCorteX, told me. “Lots of hyperscalers moving in.” That includes, reportedly, Jeff Bezos’ AI company Prometheus, which is also said to be in talks to move into the Jellicoe.  


There are around 3,600 AI startups in London, which, together, have raised around .1 billion out of the .8 billion raised in the city since late July, according to Dealroom. Since the start of June, AI-related startups have leased more than 1 million square feet of office space in London, according to the real estate firm Knight Frank. With that, prime rents in King’s Cross have risen 18% over the past three years, Chris Dunn, a commercial insight associate at the firm, told me.  That percentage represents only the largest leases encompassing at least 10,000 square feet, like the ones OpenAI and Prometheus are signing. The shorter deals go for even more, he said, and now the vacancy rate for conventional office space is just 0.9%. “Demand has outstripped supply,” he continued.  

Today, one of the big topics of the area is sovereignty. It was a wake-up call for many when Anthropic shut off access to Mythos and Fable this summer, leaving some in the ecosystem to conclude: “We’d better look after ourselves,” Saul Klein, co-founder of the VC firm Phoenix Court, told me.  

Phoenix Court is located in the King’s Cross area and has three portfolio companies in the vicinity, including Olix (which just announced a .3 billion valuation), Early Health and CoMind. Robin Klein, co-founder of the firm, said the shutdown of Fable and Mythos access was a “small but sharp reminder that Europe can’t simply rent its AI capabilities and capacity; it needs to build and hold some of its own.” King’s Cross, he said, is where much of this building is actually happening.  







“The bigger question,” he continued, “is whether the U.K. builds the infrastructure, compute, energy, capital, to make this self-reliance durable, rather than just hosting outposts of U.S. labs.” 

Image Credits:Phoenix Court

Top founders want to stay 

Simon Kohl, founder of Latent Labs, has offices in King’s Cross and San Francisco. The London office, at the moment, is growing faster, and he’s more bullish than ever on the ecosystem, he said. “The mood right now feels less like London trying to catch up and more like London becoming one of the default places to start a serious AI company,” he said.  Look around and you are likely to see Wayve testing its autonomous cars. Founded in 2017 by co-founder Alex Kendall, the unicorn is one of London’s biggest success stories.  

“Ten years ago, building a frontier AI company from London felt like an unusual choice,” Kendall told me. “Now it feels like an obvious one.” Wayve moved into King’s Cross in 2018 looking for a space that could double as a garage — “a rare combination in Central London,” Kendall said. He has watched the ecosystem mature around him — and it’s now evident that a startup can stay in London, raise serious capital, hire world-class AI talent, and remain globally competitive, he said.  Down the street from Anthropic’s new 158,000-square-foot office is the AI agent builder Sierra and the AI video platform Synthesia. 

Laura Gonzalez Florez, Synthesia’s chief of staff and head of people, says the company moved into its glossy new office building a year ago to accommodate its growing team. They were drawn to the area for the same reason as everyone else: “It’s very close to the airport … very close to where a lot of investors are,” she said. 

Image Credits:Synthesia

Around two-thirds of Synthesia’s engineers are remote, Gonzalez Florez said, letting the company tap into an affordable, international, and diverse talent pool and helping it scale faster. “From London, we can hire and work, without any problem, people from anywhere, from Slovenia to Portugal,” she said.  

Unsurprisingly, London’s AI boom is also causing a talent war.U.K. AI job postings have skyrocketed in the past few years, per data from PwC. When Anthropic announced it moved into town earlier this year, it listed, for example, a salary range of £260,000 to £630,000 for a machine learning research engineer when the average salary in London for the same role is around £102,000. Some founders in the U.K., like those in Silicon Valley, are being forced to raise more and bigger rounds to keep up. 

“The real test is whether more globally significant AI companies are founded, funded, and scaled from the U.K., while continuing to attract the world’s best talent to build them here,” Zain Ali, founder of the King’s Cross-based AI legal firm Centuro, told me. “If that continues to happen, King’s Cross won’t just be an AI hub. It’ll become one of the U.K.’s most important strategic assets.”
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.#Thisformernotorious #redlight #districtis #nowone #worlds #top #hubs #TechCrunchUK
Image Credits:Phoenix Court

Top founders want to stay

Simon Kohl, founder of Latent Labs, has offices in King’s Cross and San Francisco. The London office, at the moment, is growing faster, and he’s more bullish than ever on the ecosystem, he said. “The mood right now feels less like London trying to catch up and more like London becoming one of the default places to start a serious AI company,” he said. 
 
Look around and you are likely to see Wayve testing its autonomous cars. Founded in 2017 by co-founder Alex Kendall, the unicorn is one of London’s biggest success stories.  

“Ten years ago, building a frontier AI company from London felt like an unusual choice,” Kendall told me. “Now it feels like an obvious one.” Wayve moved into King’s Cross in 2018 looking for a space that could double as a garage — “a rare combination in Central London,” Kendall said. He has watched the ecosystem mature around him — and it’s now evident that a startup can stay in London, raise serious capital, hire world-class AI talent, and remain globally competitive, he said. 
 
Down the street from Anthropic’s new 158,000-square-foot office is the AI agent builder Sierra and the AI video platform Synthesia. 

Laura Gonzalez Florez, Synthesia’s chief of staff and head of people, says the company moved into its glossy new office building a year ago to accommodate its growing team. They were drawn to the area for the same reason as everyone else: “It’s very close to the airport … very close to where a lot of investors are,” she said. 

Image Credits:Synthesia

Around two-thirds of Synthesia’s engineers are remote, Gonzalez Florez said, letting the company tap into an affordable, international, and diverse talent pool and helping it scale faster. “From London, we can hire and work, without any problem, people from anywhere, from Slovenia to Portugal,” she said.  

Unsurprisingly, London’s AI boom is also causing a talent war.

U.K. AI job postings have skyrocketed in the past few years, per data from PwC. When Anthropic announced it moved into town earlier this year, it listed, for example, a salary range of £260,000 to £630,000 for a machine learning research engineer when the average salary in London for the same role is around £102,000. Some founders in the U.K., like those in Silicon Valley, are being forced to raise more and bigger rounds to keep up. 

“The real test is whether more globally significant AI companies are founded, funded, and scaled from the U.K., while continuing to attract the world’s best talent to build them here,” Zain Ali, founder of the King’s Cross-based AI legal firm Centuro, told me. “If that continues to happen, King’s Cross won’t just be an AI hub. It’ll become one of the U.K.’s most important strategic assets.”

When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.

#Thisformernotorious #redlight #districtis #nowone #worlds #top #hubs #TechCrunchUK">This former notorious red-light district is now one of the world’s top AI hubs | TechCrunch

What every U.K. AI startup wants to know these days is, how can I get office space in King’s Cross?  

The area is so hot that a VC firm allegedly recently won a deal by promising a founder office space in the neighborhood. “We stop at nothing to win deals [for] and to support” founders, “including helping them source office space when needed,” the firm told me when asked about the rumor, declining to confirm or deny any details. 

The neighborhood’s popularity began back in 2016 when DeepMind — then newly acquired by Google — moved in. Soon after, a flood of AI startups followed, wanting to be around the Google DeepMind magic. Today, they hope to take advantage of the cluster of AI talent there. 

This has transformed King’s Cross into one of the world’s top AI hubs, rivaled only by San Francisco and Beijing. Around London, it’s known by the sobriquet “Knowledge Quarter,” as it’s home to names like OpenAI, Meta, Isomorphic Labs, Cusp AI, Wayne, Recursive, and, a little farther down the road, Synthesia and Anthropic. The European Technology Network (ETN) just moved into a glossy new office nearby, while University College London sits around the corner.  

Mixed in with the new developments are trendy food spots like Hoppers and BAO. Hop a train from King’s Cross, and founders can be in Cambridge in 45 minutes to source talent or can be in Paris in two hours to strike a deal.  

Who would have guessed that a little more than 20 years ago, this was one of the seediest areas in London?  

“In the ’80s, crack and heroin made the area a major narcotics market,” Hussein Kanji, an investor at Hoxton Ventures, said, recalling syringes in tree trunks and gangs patrolling the streets. “In 1982, the local church was occupied by the English Collective of Prostitutes for 12 straight days.” Then, in the early 2000s, a real estate developer had a dream and, well, “now it is the AI hotbed of the United Kingdom,” Kanji said. “What a change.” 
 
Around 18 months ago, his portfolio company BioCorteX moved from the neighborhood Holborn to the Jellicoe building in King’s Cross, hoping to be near the action. “Lots going on in London right now,” Nik Sharma, co-founder of BioCorteX, told me. “Lots of hyperscalers moving in.” That includes, reportedly, Jeff Bezos’ AI company Prometheus, which is also said to be in talks to move into the Jellicoe.  

There are around 3,600 AI startups in London, which, together, have raised around $12.1 billion out of the $14.8 billion raised in the city since late July, according to Dealroom. Since the start of June, AI-related startups have leased more than 1 million square feet of office space in London, according to the real estate firm Knight Frank. With that, prime rents in King’s Cross have risen 18% over the past three years, Chris Dunn, a commercial insight associate at the firm, told me. 
 
That percentage represents only the largest leases encompassing at least 10,000 square feet, like the ones OpenAI and Prometheus are signing. The shorter deals go for even more, he said, and now the vacancy rate for conventional office space is just 0.9%. “Demand has outstripped supply,” he continued.  

Today, one of the big topics of the area is sovereignty. It was a wake-up call for many when Anthropic shut off access to Mythos and Fable this summer, leaving some in the ecosystem to conclude: “We’d better look after ourselves,” Saul Klein, co-founder of the VC firm Phoenix Court, told me.  

Phoenix Court is located in the King’s Cross area and has three portfolio companies in the vicinity, including Olix (which just announced a $3.3 billion valuation), Early Health and CoMind. Robin Klein, co-founder of the firm, said the shutdown of Fable and Mythos access was a “small but sharp reminder that Europe can’t simply rent its AI capabilities and capacity; it needs to build and hold some of its own.” King’s Cross, he said, is where much of this building is actually happening.  

“The bigger question,” he continued, “is whether the U.K. builds the infrastructure, compute, energy, capital, to make this self-reliance durable, rather than just hosting outposts of U.S. labs.” 

This former notorious red-light district is now one of the world’s top AI hubs | TechCrunch
What every U.K. AI startup wants to know these days is, how can I get office space in King’s Cross?  

The area is so hot that a VC firm allegedly recently won a deal by promising a founder office space in the neighborhood. “We stop at nothing to win deals [for] and to support” founders, “including helping them source office space when needed,” the firm told me when asked about the rumor, declining to confirm or deny any details. 







The neighborhood’s popularity began back in 2016 when DeepMind — then newly acquired by Google — moved in. Soon after, a flood of AI startups followed, wanting to be around the Google DeepMind magic. Today, they hope to take advantage of the cluster of AI talent there. 

This has transformed King’s Cross into one of the world’s top AI hubs, rivaled only by San Francisco and Beijing. Around London, it’s known by the sobriquet “Knowledge Quarter,” as it’s home to names like OpenAI, Meta, Isomorphic Labs, Cusp AI, Wayne, Recursive, and, a little farther down the road, Synthesia and Anthropic. The European Technology Network (ETN) just moved into a glossy new office nearby, while University College London sits around the corner.  

Mixed in with the new developments are trendy food spots like Hoppers and BAO. Hop a train from King’s Cross, and founders can be in Cambridge in 45 minutes to source talent or can be in Paris in two hours to strike a deal.  

Who would have guessed that a little more than 20 years ago, this was one of the seediest areas in London?  

“In the ’80s, crack and heroin made the area a major narcotics market,” Hussein Kanji, an investor at Hoxton Ventures, said, recalling syringes in tree trunks and gangs patrolling the streets. “In 1982, the local church was occupied by the English Collective of Prostitutes for 12 straight days.” Then, in the early 2000s, a real estate developer had a dream and, well, “now it is the AI hotbed of the United Kingdom,” Kanji said. “What a change.”  Around 18 months ago, his portfolio company BioCorteX moved from the neighborhood Holborn to the Jellicoe building in King’s Cross, hoping to be near the action. “Lots going on in London right now,” Nik Sharma, co-founder of BioCorteX, told me. “Lots of hyperscalers moving in.” That includes, reportedly, Jeff Bezos’ AI company Prometheus, which is also said to be in talks to move into the Jellicoe.  


There are around 3,600 AI startups in London, which, together, have raised around .1 billion out of the .8 billion raised in the city since late July, according to Dealroom. Since the start of June, AI-related startups have leased more than 1 million square feet of office space in London, according to the real estate firm Knight Frank. With that, prime rents in King’s Cross have risen 18% over the past three years, Chris Dunn, a commercial insight associate at the firm, told me.  That percentage represents only the largest leases encompassing at least 10,000 square feet, like the ones OpenAI and Prometheus are signing. The shorter deals go for even more, he said, and now the vacancy rate for conventional office space is just 0.9%. “Demand has outstripped supply,” he continued.  

Today, one of the big topics of the area is sovereignty. It was a wake-up call for many when Anthropic shut off access to Mythos and Fable this summer, leaving some in the ecosystem to conclude: “We’d better look after ourselves,” Saul Klein, co-founder of the VC firm Phoenix Court, told me.  

Phoenix Court is located in the King’s Cross area and has three portfolio companies in the vicinity, including Olix (which just announced a .3 billion valuation), Early Health and CoMind. Robin Klein, co-founder of the firm, said the shutdown of Fable and Mythos access was a “small but sharp reminder that Europe can’t simply rent its AI capabilities and capacity; it needs to build and hold some of its own.” King’s Cross, he said, is where much of this building is actually happening.  







“The bigger question,” he continued, “is whether the U.K. builds the infrastructure, compute, energy, capital, to make this self-reliance durable, rather than just hosting outposts of U.S. labs.” 

Image Credits:Phoenix Court

Top founders want to stay 

Simon Kohl, founder of Latent Labs, has offices in King’s Cross and San Francisco. The London office, at the moment, is growing faster, and he’s more bullish than ever on the ecosystem, he said. “The mood right now feels less like London trying to catch up and more like London becoming one of the default places to start a serious AI company,” he said.  Look around and you are likely to see Wayve testing its autonomous cars. Founded in 2017 by co-founder Alex Kendall, the unicorn is one of London’s biggest success stories.  

“Ten years ago, building a frontier AI company from London felt like an unusual choice,” Kendall told me. “Now it feels like an obvious one.” Wayve moved into King’s Cross in 2018 looking for a space that could double as a garage — “a rare combination in Central London,” Kendall said. He has watched the ecosystem mature around him — and it’s now evident that a startup can stay in London, raise serious capital, hire world-class AI talent, and remain globally competitive, he said.  Down the street from Anthropic’s new 158,000-square-foot office is the AI agent builder Sierra and the AI video platform Synthesia. 

Laura Gonzalez Florez, Synthesia’s chief of staff and head of people, says the company moved into its glossy new office building a year ago to accommodate its growing team. They were drawn to the area for the same reason as everyone else: “It’s very close to the airport … very close to where a lot of investors are,” she said. 

Image Credits:Synthesia

Around two-thirds of Synthesia’s engineers are remote, Gonzalez Florez said, letting the company tap into an affordable, international, and diverse talent pool and helping it scale faster. “From London, we can hire and work, without any problem, people from anywhere, from Slovenia to Portugal,” she said.  

Unsurprisingly, London’s AI boom is also causing a talent war.U.K. AI job postings have skyrocketed in the past few years, per data from PwC. When Anthropic announced it moved into town earlier this year, it listed, for example, a salary range of £260,000 to £630,000 for a machine learning research engineer when the average salary in London for the same role is around £102,000. Some founders in the U.K., like those in Silicon Valley, are being forced to raise more and bigger rounds to keep up. 

“The real test is whether more globally significant AI companies are founded, funded, and scaled from the U.K., while continuing to attract the world’s best talent to build them here,” Zain Ali, founder of the King’s Cross-based AI legal firm Centuro, told me. “If that continues to happen, King’s Cross won’t just be an AI hub. It’ll become one of the U.K.’s most important strategic assets.”
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.#Thisformernotorious #redlight #districtis #nowone #worlds #top #hubs #TechCrunchUK
Image Credits:Phoenix Court

Top founders want to stay

Simon Kohl, founder of Latent Labs, has offices in King’s Cross and San Francisco. The London office, at the moment, is growing faster, and he’s more bullish than ever on the ecosystem, he said. “The mood right now feels less like London trying to catch up and more like London becoming one of the default places to start a serious AI company,” he said. 
 
Look around and you are likely to see Wayve testing its autonomous cars. Founded in 2017 by co-founder Alex Kendall, the unicorn is one of London’s biggest success stories.  

“Ten years ago, building a frontier AI company from London felt like an unusual choice,” Kendall told me. “Now it feels like an obvious one.” Wayve moved into King’s Cross in 2018 looking for a space that could double as a garage — “a rare combination in Central London,” Kendall said. He has watched the ecosystem mature around him — and it’s now evident that a startup can stay in London, raise serious capital, hire world-class AI talent, and remain globally competitive, he said. 
 
Down the street from Anthropic’s new 158,000-square-foot office is the AI agent builder Sierra and the AI video platform Synthesia. 

Laura Gonzalez Florez, Synthesia’s chief of staff and head of people, says the company moved into its glossy new office building a year ago to accommodate its growing team. They were drawn to the area for the same reason as everyone else: “It’s very close to the airport … very close to where a lot of investors are,” she said. 

Image Credits:Synthesia

Around two-thirds of Synthesia’s engineers are remote, Gonzalez Florez said, letting the company tap into an affordable, international, and diverse talent pool and helping it scale faster. “From London, we can hire and work, without any problem, people from anywhere, from Slovenia to Portugal,” she said.  

Unsurprisingly, London’s AI boom is also causing a talent war.

U.K. AI job postings have skyrocketed in the past few years, per data from PwC. When Anthropic announced it moved into town earlier this year, it listed, for example, a salary range of £260,000 to £630,000 for a machine learning research engineer when the average salary in London for the same role is around £102,000. Some founders in the U.K., like those in Silicon Valley, are being forced to raise more and bigger rounds to keep up. 

“The real test is whether more globally significant AI companies are founded, funded, and scaled from the U.K., while continuing to attract the world’s best talent to build them here,” Zain Ali, founder of the King’s Cross-based AI legal firm Centuro, told me. “If that continues to happen, King’s Cross won’t just be an AI hub. It’ll become one of the U.K.’s most important strategic assets.”

When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.

#Thisformernotorious #redlight #districtis #nowone #worlds #top #hubs #TechCrunchUK
Why Remote Server Access Is a Common Attack Vector

Every cloud server exposes at least one remote access point – usually SSH on port 22 – and that port is scanned constantly by bots looking for weak credentials. Password-based login is the most common way a system can be attacked by brute force, and it is quite common with a standard setup that the system is left in a state where an admin/user of that system – “root user” – can log in directly by guessing the user ID and the password combination. Add in shared team credentials, forgotten firewall rules from old projects, and staging servers left publicly reachable, and it’s clear why misconfigured remote access – not zero-day exploits – is behind most cloud server compromises. The fix is simple, though you’ll need to do some setup yourself instead of trusting the default setting.

How to lock down SSH access in the right way

The best way to secure remote access is through a series of small improvements rather than one major overhaul. The following is a real working method:

  1. Switch to SSH key authentication, then turn off password login completely in the same location: sshd_config. Keys are far harder to brute-force than passwords.
  2. Disable root login over SSH and require a non-root user with sudo privileges instead; this is a security advantage that even without any change, one key compromising would limit the impact.
  3. Change the default SSH port away from 22 to cut down on automated scanning noise (not a security measure on its own, but it reduces log clutter).
  4. Restrict access by IP using your firewall or security group, allowing SSH only from known office or VPN IP ranges rather than the entire internet.
  5. Add a VPN as a connection layer for anyone accessing servers from outside a trusted network – a VPN like Planet VPN’s free VPN service can encrypt the connection between a remote worker’s laptop and the server before SSH traffic ever leaves their device, which matters especially on public wi-fi or shared networks.

Every step you take closes the doors that the attacker may open slightly, and when you combine everything, you would have a door to a series of locked gates.

Why Do I Need a Bastion Host?

When it comes to teams working with many servers, deploying a bastion host (jump box) may be a clean and effective way to solve the long-term problem. With this method, you only expose SSH to the bastion, and the other servers accept it only when it’s from the bastion’s internal IP. This centralizes logging and makes auditing access far simpler.

Using a virtual private network (VPN) and a bastion host together is perfectly fine – and many solutions use both: a safe way to access the private network via a VPN, followed by use of a bastion host to restrict which servers can be accessed. Some teams may decide to forgo the bastion because they don’t have the manpower to manage one, and so use a combination of a VPN and a set of firewall rules that still quite a bit lowers the exposure, but without the extra effort.

Mistakes Leading to Leaving Cloud Servers Open

The Mistakes That Cause Leaving Cloud Servers Open: Even the safest development teams may have slip-ups from time to time. One of the most frequent is leaving staged, or test servers with relaxed firewall rules equivalent to those of the production environment – hackers don’t concern themselves with which environment they first land on. Another frequent error is reusing the same SSH key on several servers and clients, causing one hacked laptop to compromise all servers that key has access to.

Another common human error is not removing or changing access when someone leaves the team, so stale credentials remain valid and accessible. At last, putting trust in the strategy of “security through obscurity” – meaning one thinks that setting up the unusual port or hiding the hostname from the public is actually sufficient security – creates a wrong impression of security. This is mostly true; in reality, modern-day attackers scan all ports anyway, and there is no way to hide from them.

System Administrators Guide to Secure Remote Access 

Prohibit SSH password logins totally and depend exclusively on key-based authentication

  • Surely no one wants to type in the password every time; because of this, use only key-based authentication 
  • Deter the user from logging in as root by default and instead use the sudo command to do root tasks
  • A firewall or security group rule can provide great help with IP address-based restrictions on SSH logins 
  • For access that comes from untrusted sources or external networks, use a secure tunnel like a vpn or bastion host
  • Periodically change SSH keys and inspect access lists
  • Maintain records of login attempts and detect brute-force attacks as quickly as possible

Frequently Asked Questions

What is the principal means by which cloud servers suffer break-ins through remote access?

By far the biggest reason why this can happen is unauthorized password-based SSH logins that have been cracked by brute force. The scenario is most likely to develop where the administrator allows root login via password and leaves the default port open.

Sufficient security measures for the server via SSH keys: Do you think it is safe to rely only on key authentication? 

It is true that SSH keys drastically decrease the danger of a successful brute-force attack. However, if there is only key authentication on the server, there are still risks – the server administrator can always enable root login or disable the IP-based login restrictions. So it is recommended to always have these three in the server configuration: disabled root login, restricted access to known IPs, and rotating the keys regularly as the main components of meaningful protection. 

Is it really necessary to set up a separate VPN network while I am able to connect via SSH keys? 

A VPN gives extra security by first encrypting your computer traffic before it reaches your network, where the SSH connection will be used. This is mostly important when working on untrusted networks – like public wi-fi – where there is a threat of a potential hacker in your local network looking at your data.

Bastion host vs VPN as methods of accessing the server? 

The bastion host works by funneling SSH sessions from many users through a single, carefully monitored server point while the rest of the network (and mostly the servers) remains protected from the internet. At the same time, a vpn will fully encrypt the communication between the user and the corporate network or servers. The combination is very common among larger security teams as a part of the defense-in-depth principle. 

How often should SSH keys be rotated? 

The ideal period to change your SSH keys depends on the security practices of your organization, but generally a good practice is to change SSH keys between 90 and 180 days, or in the case that the user who had access with the key leaves or is no longer able to be contacted, such as when a team member leaves.

Why is only changing the port number for SSH enough to secure that port?

Changing the port reduces automated scanning noise in your logs but isn’t a real security control on its own — port scanners check all ports, so it should never replace key-based auth and firewall rules.

#Secure #Remote #Access #Cloud #ServerCloud,remote access">How to Secure Remote Access to Your Cloud Server in 2026
	
Protection against unauthorized remote logins to your cloud server is a matter of SSH key-based authentication, a strict security policy on the firewall, two-factor authentication, and a secure communication channel – no individual component will give adequate protection by itself. The major risk point in breaches is not the server but the open door to remote login. To patch that vulnerability, you need a series of countermeasures, not a magical setting.





Why Remote Server Access Is a Common Attack Vector



Every cloud server exposes at least one remote access point – usually SSH on port 22 – and that port is scanned constantly by bots looking for weak credentials. Password-based login is the most common way a system can be attacked by brute force, and it is quite common with a standard setup that the system is left in a state where an admin/user of that system – “root user” – can log in directly by guessing the user ID and the password combination. Add in shared team credentials, forgotten firewall rules from old projects, and staging servers left publicly reachable, and it’s clear why misconfigured remote access – not zero-day exploits – is behind most cloud server compromises. The fix is simple, though you’ll need to do some setup yourself instead of trusting the default setting.



How to lock down SSH access in the right way



The best way to secure remote access is through a series of small improvements rather than one major overhaul. The following is a real working method:




Switch to SSH key authentication, then turn off password login completely in the same location: sshd_config. Keys are far harder to brute-force than passwords.



Disable root login over SSH and require a non-root user with sudo privileges instead; this is a security advantage that even without any change, one key compromising would limit the impact.



Change the default SSH port away from 22 to cut down on automated scanning noise (not a security measure on its own, but it reduces log clutter).



Restrict access by IP using your firewall or security group, allowing SSH only from known office or VPN IP ranges rather than the entire internet.



Add a VPN as a connection layer for anyone accessing servers from outside a trusted network – a VPN like Planet VPN’s free VPN service can encrypt the connection between a remote worker’s laptop and the server before SSH traffic ever leaves their device, which matters especially on public wi-fi or shared networks.




Every step you take closes the doors that the attacker may open slightly, and when you combine everything, you would have a door to a series of locked gates.



Why Do I Need a Bastion Host?



When it comes to teams working with many servers, deploying a bastion host (jump box) may be a clean and effective way to solve the long-term problem. With this method, you only expose SSH to the bastion, and the other servers accept it only when it’s from the bastion’s internal IP. This centralizes logging and makes auditing access far simpler.



Using a virtual private network (VPN) and a bastion host together is perfectly fine – and many solutions use both: a safe way to access the private network via a VPN, followed by use of a bastion host to restrict which servers can be accessed. Some teams may decide to forgo the bastion because they don’t have the manpower to manage one, and so use a combination of a VPN and a set of firewall rules that still quite a bit lowers the exposure, but without the extra effort.



Mistakes Leading to Leaving Cloud Servers Open



The Mistakes That Cause Leaving Cloud Servers Open: Even the safest development teams may have slip-ups from time to time. One of the most frequent is leaving staged, or test servers with relaxed firewall rules equivalent to those of the production environment – hackers don’t concern themselves with which environment they first land on. Another frequent error is reusing the same SSH key on several servers and clients, causing one hacked laptop to compromise all servers that key has access to.



Another common human error is not removing or changing access when someone leaves the team, so stale credentials remain valid and accessible. At last, putting trust in the strategy of “security through obscurity” – meaning one thinks that setting up the unusual port or hiding the hostname from the public is actually sufficient security – creates a wrong impression of security. This is mostly true; in reality, modern-day attackers scan all ports anyway, and there is no way to hide from them.



System Administrators Guide to Secure Remote Access 



Prohibit SSH password logins totally and depend exclusively on key-based authentication




Surely no one wants to type in the password every time; because of this, use only key-based authentication 



Deter the user from logging in as root by default and instead use the sudo command to do root tasks



A firewall or security group rule can provide great help with IP address-based restrictions on SSH logins 



For access that comes from untrusted sources or external networks, use a secure tunnel like a vpn or bastion host



Periodically change SSH keys and inspect access lists



Maintain records of login attempts and detect brute-force attacks as quickly as possible




Frequently Asked Questions



What is the principal means by which cloud servers suffer break-ins through remote access? By far the biggest reason why this can happen is unauthorized password-based SSH logins that have been cracked by brute force. The scenario is most likely to develop where the administrator allows root login via password and leaves the default port open.  Sufficient security measures for the server via SSH keys: Do you think it is safe to rely only on key authentication?  It is true that SSH keys drastically decrease the danger of a successful brute-force attack. However, if there is only key authentication on the server, there are still risks – the server administrator can always enable root login or disable the IP-based login restrictions. So it is recommended to always have these three in the server configuration: disabled root login, restricted access to known IPs, and rotating the keys regularly as the main components of meaningful protection.   Is it really necessary to set up a separate VPN network while I am able to connect via SSH keys?  A VPN gives extra security by first encrypting your computer traffic before it reaches your network, where the SSH connection will be used. This is mostly important when working on untrusted networks – like public wi-fi – where there is a threat of a potential hacker in your local network looking at your data.  Bastion host vs VPN as methods of accessing the server?  The bastion host works by funneling SSH sessions from many users through a single, carefully monitored server point while the rest of the network (and mostly the servers) remains protected from the internet. At the same time, a vpn will fully encrypt the communication between the user and the corporate network or servers. The combination is very common among larger security teams as a part of the defense-in-depth principle.   How often should SSH keys be rotated?  The ideal period to change your SSH keys depends on the security practices of your organization, but generally a good practice is to change SSH keys between 90 and 180 days, or in the case that the user who had access with the key leaves or is no longer able to be contacted, such as when a team member leaves.  Why is only changing the port number for SSH enough to secure that port? Changing the port reduces automated scanning noise in your logs but isn’t a real security control on its own — port scanners check all ports, so it should never replace key-based auth and firewall rules.  





#Secure #Remote #Access #Cloud #ServerCloud,remote access

  1. free VPN service can encrypt the connection between a remote worker’s laptop and the server before SSH traffic ever leaves their device, which matters especially on public wi-fi or shared networks.

Every step you take closes the doors that the attacker may open slightly, and when you combine everything, you would have a door to a series of locked gates.

Why Do I Need a Bastion Host?

When it comes to teams working with many servers, deploying a bastion host (jump box) may be a clean and effective way to solve the long-term problem. With this method, you only expose SSH to the bastion, and the other servers accept it only when it’s from the bastion’s internal IP. This centralizes logging and makes auditing access far simpler.

Using a virtual private network (VPN) and a bastion host together is perfectly fine – and many solutions use both: a safe way to access the private network via a VPN, followed by use of a bastion host to restrict which servers can be accessed. Some teams may decide to forgo the bastion because they don’t have the manpower to manage one, and so use a combination of a VPN and a set of firewall rules that still quite a bit lowers the exposure, but without the extra effort.

Mistakes Leading to Leaving Cloud Servers Open

The Mistakes That Cause Leaving Cloud Servers Open: Even the safest development teams may have slip-ups from time to time. One of the most frequent is leaving staged, or test servers with relaxed firewall rules equivalent to those of the production environment – hackers don’t concern themselves with which environment they first land on. Another frequent error is reusing the same SSH key on several servers and clients, causing one hacked laptop to compromise all servers that key has access to.

Another common human error is not removing or changing access when someone leaves the team, so stale credentials remain valid and accessible. At last, putting trust in the strategy of “security through obscurity” – meaning one thinks that setting up the unusual port or hiding the hostname from the public is actually sufficient security – creates a wrong impression of security. This is mostly true; in reality, modern-day attackers scan all ports anyway, and there is no way to hide from them.

System Administrators Guide to Secure Remote Access 

Prohibit SSH password logins totally and depend exclusively on key-based authentication

  • Surely no one wants to type in the password every time; because of this, use only key-based authentication 
  • Deter the user from logging in as root by default and instead use the sudo command to do root tasks
  • A firewall or security group rule can provide great help with IP address-based restrictions on SSH logins 
  • For access that comes from untrusted sources or external networks, use a secure tunnel like a vpn or bastion host
  • Periodically change SSH keys and inspect access lists
  • Maintain records of login attempts and detect brute-force attacks as quickly as possible

Frequently Asked Questions

What is the principal means by which cloud servers suffer break-ins through remote access?

By far the biggest reason why this can happen is unauthorized password-based SSH logins that have been cracked by brute force. The scenario is most likely to develop where the administrator allows root login via password and leaves the default port open.

Sufficient security measures for the server via SSH keys: Do you think it is safe to rely only on key authentication? 

It is true that SSH keys drastically decrease the danger of a successful brute-force attack. However, if there is only key authentication on the server, there are still risks – the server administrator can always enable root login or disable the IP-based login restrictions. So it is recommended to always have these three in the server configuration: disabled root login, restricted access to known IPs, and rotating the keys regularly as the main components of meaningful protection. 

Is it really necessary to set up a separate VPN network while I am able to connect via SSH keys? 

A VPN gives extra security by first encrypting your computer traffic before it reaches your network, where the SSH connection will be used. This is mostly important when working on untrusted networks – like public wi-fi – where there is a threat of a potential hacker in your local network looking at your data.

Bastion host vs VPN as methods of accessing the server? 

The bastion host works by funneling SSH sessions from many users through a single, carefully monitored server point while the rest of the network (and mostly the servers) remains protected from the internet. At the same time, a vpn will fully encrypt the communication between the user and the corporate network or servers. The combination is very common among larger security teams as a part of the defense-in-depth principle. 

How often should SSH keys be rotated? 

The ideal period to change your SSH keys depends on the security practices of your organization, but generally a good practice is to change SSH keys between 90 and 180 days, or in the case that the user who had access with the key leaves or is no longer able to be contacted, such as when a team member leaves.

Why is only changing the port number for SSH enough to secure that port?

Changing the port reduces automated scanning noise in your logs but isn’t a real security control on its own — port scanners check all ports, so it should never replace key-based auth and firewall rules.

#Secure #Remote #Access #Cloud #ServerCloud,remote access">How to Secure Remote Access to Your Cloud Server in 2026

Protection against unauthorized remote logins to your cloud server is a matter of SSH key-based authentication, a strict security policy on the firewall, two-factor authentication, and a secure communication channel – no individual component will give adequate protection by itself. The major risk point in breaches is not the server but the open door to remote login. To patch that vulnerability, you need a series of countermeasures, not a magical setting.

Why Remote Server Access Is a Common Attack Vector

Every cloud server exposes at least one remote access point – usually SSH on port 22 – and that port is scanned constantly by bots looking for weak credentials. Password-based login is the most common way a system can be attacked by brute force, and it is quite common with a standard setup that the system is left in a state where an admin/user of that system – “root user” – can log in directly by guessing the user ID and the password combination. Add in shared team credentials, forgotten firewall rules from old projects, and staging servers left publicly reachable, and it’s clear why misconfigured remote access – not zero-day exploits – is behind most cloud server compromises. The fix is simple, though you’ll need to do some setup yourself instead of trusting the default setting.

How to lock down SSH access in the right way

The best way to secure remote access is through a series of small improvements rather than one major overhaul. The following is a real working method:

  1. Switch to SSH key authentication, then turn off password login completely in the same location: sshd_config. Keys are far harder to brute-force than passwords.
  2. Disable root login over SSH and require a non-root user with sudo privileges instead; this is a security advantage that even without any change, one key compromising would limit the impact.
  3. Change the default SSH port away from 22 to cut down on automated scanning noise (not a security measure on its own, but it reduces log clutter).
  4. Restrict access by IP using your firewall or security group, allowing SSH only from known office or VPN IP ranges rather than the entire internet.
  5. Add a VPN as a connection layer for anyone accessing servers from outside a trusted network – a VPN like Planet VPN’s free VPN service can encrypt the connection between a remote worker’s laptop and the server before SSH traffic ever leaves their device, which matters especially on public wi-fi or shared networks.

Every step you take closes the doors that the attacker may open slightly, and when you combine everything, you would have a door to a series of locked gates.

Why Do I Need a Bastion Host?

When it comes to teams working with many servers, deploying a bastion host (jump box) may be a clean and effective way to solve the long-term problem. With this method, you only expose SSH to the bastion, and the other servers accept it only when it’s from the bastion’s internal IP. This centralizes logging and makes auditing access far simpler.

Using a virtual private network (VPN) and a bastion host together is perfectly fine – and many solutions use both: a safe way to access the private network via a VPN, followed by use of a bastion host to restrict which servers can be accessed. Some teams may decide to forgo the bastion because they don’t have the manpower to manage one, and so use a combination of a VPN and a set of firewall rules that still quite a bit lowers the exposure, but without the extra effort.

Mistakes Leading to Leaving Cloud Servers Open

The Mistakes That Cause Leaving Cloud Servers Open: Even the safest development teams may have slip-ups from time to time. One of the most frequent is leaving staged, or test servers with relaxed firewall rules equivalent to those of the production environment – hackers don’t concern themselves with which environment they first land on. Another frequent error is reusing the same SSH key on several servers and clients, causing one hacked laptop to compromise all servers that key has access to.

Another common human error is not removing or changing access when someone leaves the team, so stale credentials remain valid and accessible. At last, putting trust in the strategy of “security through obscurity” – meaning one thinks that setting up the unusual port or hiding the hostname from the public is actually sufficient security – creates a wrong impression of security. This is mostly true; in reality, modern-day attackers scan all ports anyway, and there is no way to hide from them.

System Administrators Guide to Secure Remote Access 

Prohibit SSH password logins totally and depend exclusively on key-based authentication

  • Surely no one wants to type in the password every time; because of this, use only key-based authentication 
  • Deter the user from logging in as root by default and instead use the sudo command to do root tasks
  • A firewall or security group rule can provide great help with IP address-based restrictions on SSH logins 
  • For access that comes from untrusted sources or external networks, use a secure tunnel like a vpn or bastion host
  • Periodically change SSH keys and inspect access lists
  • Maintain records of login attempts and detect brute-force attacks as quickly as possible

Frequently Asked Questions

What is the principal means by which cloud servers suffer break-ins through remote access?

By far the biggest reason why this can happen is unauthorized password-based SSH logins that have been cracked by brute force. The scenario is most likely to develop where the administrator allows root login via password and leaves the default port open.

Sufficient security measures for the server via SSH keys: Do you think it is safe to rely only on key authentication? 

It is true that SSH keys drastically decrease the danger of a successful brute-force attack. However, if there is only key authentication on the server, there are still risks – the server administrator can always enable root login or disable the IP-based login restrictions. So it is recommended to always have these three in the server configuration: disabled root login, restricted access to known IPs, and rotating the keys regularly as the main components of meaningful protection. 

Is it really necessary to set up a separate VPN network while I am able to connect via SSH keys? 

A VPN gives extra security by first encrypting your computer traffic before it reaches your network, where the SSH connection will be used. This is mostly important when working on untrusted networks – like public wi-fi – where there is a threat of a potential hacker in your local network looking at your data.

Bastion host vs VPN as methods of accessing the server? 

The bastion host works by funneling SSH sessions from many users through a single, carefully monitored server point while the rest of the network (and mostly the servers) remains protected from the internet. At the same time, a vpn will fully encrypt the communication between the user and the corporate network or servers. The combination is very common among larger security teams as a part of the defense-in-depth principle. 

How often should SSH keys be rotated? 

The ideal period to change your SSH keys depends on the security practices of your organization, but generally a good practice is to change SSH keys between 90 and 180 days, or in the case that the user who had access with the key leaves or is no longer able to be contacted, such as when a team member leaves.

Why is only changing the port number for SSH enough to secure that port?

Changing the port reduces automated scanning noise in your logs but isn’t a real security control on its own — port scanners check all ports, so it should never replace key-based auth and firewall rules.

#Secure #Remote #Access #Cloud #ServerCloud,remote access

Post Comment