BTCPay Lightning Hardening Kit
Harden the node you already run.
A pass/fail checklist and operator runbook for self-hosted BTCPay and Bitcoin Lightning merchants — after a security incident, or after you exposed LND yourself.
What you get
Checklist and runbook.
Pass/fail checks: current version, a documented upgrade path, deploy digest after update, proxy routes, wallet password, exposed APIs, what to rotate, and what to leave alone.
The checklist and operator runbook come as PDF and Markdown files, delivered by email.
Who it’s for
Self-hosted operators.
You run BTCPay Server and a Bitcoin Lightning node. You keep the keys. We do not take custody.
Built for operators checking a live setup after an incident, a probe, or a DIY LND exposure.
Purchase
USD 39, one time.
Email to confirm delivery availability before paying. The existing price is USD 39 by card. Delivery is by email — no remote access, no shared node, no custody.
Support
Questions before you buy.
Email business@loopxxi.com . Do not send seeds, macaroons, passwords, or SSH keys.
BTCPay Server 2.4.4 (8 Sep 2026) is a security-focused release from that project: unique LND wallet passwords, proxy blocks on unauthenticated unlock routes, and a warning that an update does not remove a route you built yourself. Loop XXI is not affiliated with BTCPay Server.
A reported Lightning node version is not always the running build. After an upgrade, confirm the deploy digest against that project’s published artifact. Bitcoin Optech #421 records this class of failure for Core Lightning Docker tags.
No custody. No fund-loss guarantee. You remain the operator.