Encrypted backups
Encrypted WordPress and Joomla backups, straight from your client’s server
A backup anyone can read is a risk. A backup an attacker can delete is useless. Ours are neither.
The problem
Backups are a favourite target.
They hold your client’s entire database: users, orders, emails. Often they sit unencrypted in a folder on the site or in shared storage.
And when an attack succeeds, the backups are the first thing the attacker tries to destroy.
How it works
Encrypted as they’re made.
- 1
On the site
The agent reads the database and files in short steps, compressing and encrypting them as it writes, with AES-256 and a different key for every backup.
- 2
Direct upload
Each part is uploaded straight to storage and deleted from the site: nothing readable stays on your client’s server.
- 3
Lock
In storage, backups are protected with Object Lock: they can’t be deleted before they expire, not even with stolen credentials.
In detail
Safe even on shared hosting.
- AES-256-GCM through OpenSSL, available on every host, even with PHP 7.1
- A different key for every backup, never stored on the site
- S3-compatible European storage
- Choose the content: everything, database only, without logs and sessions, without media, or table by table
- Downloads already decrypted: database as .sql.gz, files as .tar.gz
- Every part’s fingerprint verified before it’s restored
FAQ
Frequently asked questions
Who can read the backups?
They are encrypted on the site and stay encrypted in storage. The keys are kept encrypted by the platform and used only for the downloads and restores you request. If you prefer, a site’s backups can be locked with the client’s key: we keep only the public half.
Do they work on shared hosting?
Yes: the backup runs in steps of a few seconds, sized for shared hosting time limits.
Can I leave out logs and sessions?
Yes, with a preset or by choosing tables one by one. Excluded tables keep their structure, so a restored site still works.
Related features
Goes well with
Try it on your clients’ sites.
During the beta we welcome agencies in small groups and set up the first sites together.