If you run websites, databases or n8n automations on Zeabur, you now have a deadline. Zeabur is shutting down its platform, with all services stopping by 31 December 2026, right when many Malaysian teams are clearing annual leave, gearing up for 12.12 sales and closing the books for the year.
For many SMEs, these workloads do quiet but important jobs: sending WhatsApp order alerts, syncing Shopee and Lazada orders, routing leads from web forms or preparing e-Invoice submissions to LHDN’s MyInvois. And the shutdown follows two security incidents in as many months, so speed alone isn’t enough. You need to move safely.
This guide sets out what Zeabur has announced, what to do first, and how to plan a calm, safe move to a new home for your workload.
What Zeabur announced
On 17 October 2026, Zeabur’s founder announced that the platform will gradually stop operating. New dedicated server and domain purchases have already stopped.
| Date | What happens |
| 17 October 2026 | Wind-down announced; new dedicated server and domain purchases stop |
| From 1 December 2026 | Dedicated servers stop renewing and close as each one expires. Shared-cluster services are paused, though you can restart them manually to back up data |
| 31 December 2026 | All remaining services stop |
| To be announced | Data deletion date, final data-export deadline and end of Zeabur Support |
Important: 31 December is the final date, not necessarily the date your service ends. Depending on your plan and renewal date, your services may stop earlier in December. Zeabur advises completing backups and migration before your own expiry date.
Domains bought through Zeabur can already be transferred out from the dashboard. Refunds of account balances and compensation claims are handled separately through Zeabur Support, and Zeabur has warned that replies may be slower than usual, so raise any requests early.
Secure your credentials before you move anything
According to Zeabur’s incident updates, as reported by Taiwanese tech media, the October breach exposed data including service environment variables (where API keys and database passwords usually live), API tokens and account information. Zeabur has advised users to rotate all secrets stored in environment variables and regenerate their Zeabur API tokens.
This matters for migration. If you copy your old environment variables straight onto a new server, any exposed credentials travel with them. Before you migrate:
- List every secret your services use: database passwords, third-party API keys (OpenAI, Stripe, Google, Slack and so on), webhook secrets, OAuth tokens and SMTP credentials.
- Rotate each one at its source, then store the new value somewhere safe.
- Check your n8n credentials. Each n8n workflow can hold its own connected-account credentials. Reconnect or reissue them rather than importing old ones.
- Review access logs at your API providers for activity you don’t recognise.
- Log in to Zeabur again and contact Zeabur Support if you suspect your service was affected.
Only use the new credentials on your new server.
Check Your PDPA Obligations
If your Zeabur services stored or processed customers’ personal data, such as names, phone numbers or order details collected through forms and chat automations, treat this as a possible personal data breach.
Under the Personal Data Protection (Amendment) Act 2024, data controllers in Malaysia must notify the Personal Data Protection Commissioner of a personal data breach, and the Commissioner’s guideline expects this within 72 hours of becoming aware of it. Affected individuals must also be told where the breach is likely to cause them significant harm.
If you’re unsure whether this applies to you, speak to your data protection officer or legal adviser now rather than after the move.
Plan your migration
Start now, not in December. A simple plan for most Zeabur workloads:
- Check your expiry dates. Note when each service renews, since that is when it will stop.
- Take an inventory. List every app, database, n8n instance, domain and scheduled job you run, and who in your team owns each one.
- Back up everything. Export databases, download files and volumes, and export your n8n workflows. Keep at least one copy off the server, for example with a server backup solution.
- Choose your new home and set up the server with your rotated credentials.
- Restore and test. Run your apps and workflows on the new server and confirm that webhooks, schedules and integrations work, including WhatsApp, marketplace and payment connections.
- Move your domain and DNS. Transfer domains bought through Zeabur and point DNS to the new server.
- Cut over and monitor. Switch traffic on a quieter weekday, avoid big campaign dates, watch for errors for a few days, then shut down the Zeabur services.
Moving from a managed platform to a server you control usually means a few more set-up steps. Allow time to test properly before your deadline. If you’re new to self-managed servers, our explainer on what a VPS is and how it works is a good place to start.
What to look for in your next hosting provider
This is your chance to choose a platform you won’t need to leave again. Ask any provider these questions:
- Isolation: Does your workload run on its own server, or share infrastructure with other customers?
- Security practices: How are servers patched and protected, and how are customers told about incidents?
- Track record: How long has the provider operated, and is it built to last?
- Backups: What backup options exist, and who controls them?
- Local support: Can you reach a real support team in your time zone and language?
- Data location: Where is your data stored, and does that suit your compliance needs?
- Predictable pricing: Are costs clear, with no surprises as you grow?
Where Exabytes fits
Exabytes isn’t just your Zeabur alternative. We’re your secure, trusted hosting partner for the long run. For more than 26 years, over 160,000 businesses across Southeast Asia have relied on us for their digital infrastructure.
Automation and AI agents are fast becoming everyday tools for Malaysian SMEs, and, as our founder has said, businesses need to rework their workflows to get real value from agentic AI. Those workflows deserve a stable, secure home. If you run automations or AI workloads on Zeabur, two ready-to-use options get you back up and running quickly, on a private server you control.
n8n VPS: Your Automations, On Your Own Server
n8n comes pre-configured on a high-speed NVMe VPS. Export your workflows from Zeabur, import them here and reconnect your newly rotated credentials.
- n8n pre-installed and tuned, with 500+ integrations
- No execution caps or per-task fees, so you can build as many workflows as you need
- Full root access and complete control over your data
OpenClaw VPS: AI agents that work around the clock
OpenClaw is an open-source AI agent platform that executes tasks, not just chats. Your VPS arrives with OpenClaw pre-installed and ready to use, with zero setup.
- Connect your agents to WhatsApp, Telegram, Discord and more
- Automate customer replies, lead qualification and routine tasks
- Agents keep running in the background 24/7, even when you’re offline
Running websites, apps or databases instead? Our standard NVMe VPS gives you the same foundation without a pre-installed application.
A security team that watches around the clock
Security isn’t a side project for us. Exabytes runs its own 24-hour Security Operations Centre (SOC) and holds ISO/IEC 27001:2022 certification for information security management.
The same in-house team delivers managed detection and response, vulnerability assessments, penetration testing and incident response services to enterprises across the region.
That expertise sits behind the infrastructure your VPS runs on.
Built on infrastructure you can rely on
| What you get | |
| Dedicated resources | KVM virtualisation gives your server its own CPU and memory, isolated from other customers |
| Performance | NVMe SSD storage and AMD EPYC processors |
| Uptime | 99.9% uptime guarantee, hosted in a Tier-3 data centre |
| Backups | Weekly automated off-server backups with two restore points, plus a snapshot before major changes |
| Monitoring | Server uptime monitoring and real-time performance graphs |
| Local presence | Malaysian data centre, local support team and MYR pricing |
| Support | 24/7 support by live chat, WhatsApp, phone and ticket |
Don’t wait for December
Whichever provider you choose, rotate your credentials, back up your data and move well before your Zeabur services expire.
If you’d like a secure, long-term home for your n8n workflows and apps, Exabytes is ready when you are.
Frequently Asked Questions
When will my Zeabur services stop working?
Zeabur will stop all dedicated servers and shared clusters by 31 December 2026. However, dedicated servers shut down on their own expiry dates between 1 and 31 December, and shared cluster services are paused from 1 December. Check your expiry date in the Zeabur dashboard and plan to finish migrating before then.
Is Zeabur safe to use until it shuts down?
Zeabur reported a security incident in late August 2026 and a broader one in October 2026, during which data such as environment variables and API tokens was exposed. If you are still running services there, rotate all secrets, review your access logs and move your workloads as early as you can rather than waiting for the final date.
Can I move my n8n workflows from Zeabur to a new server?
Yes. Export your workflows from your Zeabur-hosted n8n instance and import them into n8n on your new server, such as an Exabytes n8n VPS with n8n pre-installed. Don’t carry over old credentials; reconnect each account with freshly rotated keys, then test every webhook and schedule before switching off the old instance.
Do I need to report the Zeabur breach under Malaysia’s PDPA?
If your services stored personal data of Malaysian customers and that data may have been accessed, you may need to notify the Personal Data Protection Commissioner, generally within 72 hours of becoming aware of the breach, and inform affected individuals where significant harm is likely. Speak to your data protection officer or legal adviser to confirm your obligations.
How do I transfer a domain I bought through Zeabur?
Zeabur lets you transfer domains out from its dashboard, and its support team can assist. Unlock the domain, get the authorisation (EPP) code and start a transfer with your new registrar, such as through Exabytes Domain Transfer. Then update your DNS records to point to your new server.
Is a VPS harder to manage than Zeabur?
A VPS gives you more control than a managed platform, which means a few more set-up steps such as configuring security and backups. Pre-installed options like Exabytes’ n8n VPS and OpenClaw VPS reduce that work, and an optional VPS management plan is available if you’d prefer a team to handle server upkeep for you.
Disclaimer: This article is for general information only and does not constitute legal, compliance or professional cybersecurity advice. Details of Zeabur’s shutdown and security incidents are based on information published as at 19 October 2026 and may change; always check Zeabur’s official announcements for the latest dates.
