Features

Windows and Linux files and folders

Incremental backup of chosen folders with include and exclude patterns. On Windows the agent reads from a VSS snapshot, so open files and databases on disk are consistent.

• Every backup is a full, independent restore point — incremental speed, no backup chains to merge.
• Restore single files from the browser (download), into another folder or to the original location.

Disk images and bare-metal recovery

Images of one, several or all disks of Windows PCs and servers — changed blocks only — and full Linux system backups with the disk layout.

• Bare-metal restore from the Windows or Linux recovery ISO, also onto different hardware.
• A Linux system can become a new Proxmox VM (P2V).
• Single files can be restored from an image.

Proxmox VE

Agentless backup of Proxmox VE 7 and 8 VMs and containers through the agent on a Proxmox node, reading changed blocks only.

• Restore as a new guest or in place.
• Instant recovery: the VM runs from the backup in seconds.
• Replication and automatic boot tests that prove a VM really starts.

VMware ESXi and vCenter

Agentless backup of ESXi 6.7, 7 and 8 VMs — standalone hosts or vCenter Server 7 and 8 — through any Windows or Linux agent acting as proxy. Nothing is installed on ESXi or inside the VMs.

• Changed block tracking keeps incremental backups small.
• Works with the free ESXi license (over SSH); licensed hosts and vCenter use the vSphere API.
• Restore as a new VM or in place, choose host and datastore; instant recovery over NFS, finished with Storage vMotion without downtime.
• VMs moved with vMotion keep being backed up.

Hyper-V

Agentless backup of Hyper-V VMs on Windows Server 2016 and newer and on Windows 10/11, with resilient change tracking (RCT) — the agent runs on the host only.

• Restore as a new VM next to the original, in place, or on another Hyper-V host.
• Single files from inside a VM backup.

SQL Server, PostgreSQL, MySQL/MariaDB

Database backups with the native tools of each server, including transaction log backups.

• Restore a single database to any point in time.
• Under a new name next to the original, or in place.

NAS shares

SMB and NFS shares of any NAS or file server are read by an agent in the network — nothing is installed on the NAS.

• Restore into a folder or back onto the share.

Microsoft 365

Exchange Online mail (.eml), calendars (.ics) and contacts (.vcf), OneDrive and SharePoint through Microsoft Graph, with read-only application permissions.

• Browse and download items or restore them into a folder.

Ransomware detection

Every backup is compared with the recent history of its job. Far more changed files than usual, new data that no longer compresses, a sudden drop in the number of files or a jump in new data mark it as suspicious: BackupZit sends an alert and pauses retention, so the last clean backups are never deleted.

Immutable backups

S3 Object Lock in compliance mode or the hardened repository: nobody — not even an attacker with the storage keys — can delete or overwrite backups before the lock ends. Point-in-time reads show the storage as it was before an attack.

Automatic restore tests

Scheduled tests restore backups and check the result, and Proxmox boot tests start restored VMs — so you know a backup works before you need it.

Encryption and recovery key

AES-256-GCM for all data, with the master key sealed by a recovery key (Argon2id). With the recovery key, backups can be restored with the command line alone, even without the console.

Four-eyes approval

Optionally, deleting jobs or storage targets and shortening retention needs the approval of a second user — one stolen account is not enough.

Tamper-evident audit log

Every sign-in and change is recorded in a hash-chained audit log, so later edits to the log are detected.