BackupMunk Enterprise
Self-hosted, centrally managed backup for Docker Compose applications and Linux, Windows and macOS servers. Encrypted on the host, stored in your own S3-compatible storage, recoverable offline.
From CAD 10.00 per month
Features
- Docker Compose stacks as applications — Back up the compose file, its environment files, named volumes and optionally images as one unit that restores and starts again.
- Files and folders on any OS — Linux, Windows and macOS paths with exclusion patterns, plus automatic discovery of Compose stacks inside the folders you pick.
- Guided backup setup — Browse each host's real file system from the console and build a backup step by step, with a written summary before you save.
- Schedules in plain language — Daily, every few hours, weekly or monthly presets with a time zone and a preview of the next runs; cron is there when you need it.
- Encrypted before it leaves the host — Mandatory client-side encryption with per-destination keys; storage providers and the network only ever hold ciphertext.
- Your own S3-compatible storage — AWS S3, MinIO and other S3-compatible endpoints, and Backblaze B2, with separate write, restore and management credentials.
- Copies in several destinations — Every backup written to more than one destination, with automatic repair of missing copies and restore fallback.
- Hot standby server — A second server keeps a live, read-only copy of the primary and takes over with one click if the primary's site is lost.
- Offline recovery tool — bmrecover decrypts and restores any archive from a file and a recovery passphrase, with no server or license.
- Restore to any host — Restore in place, under another folder, or onto a different machine, and bring Compose stacks back up automatically.
- No inbound access to hosts — Agents connect out over HTTPS and update themselves, so hosts behind NAT or in other networks need no open ports.
- Dashboard, alerts and audit — Run history and success rates at a glance, email and Pushover alerts, single sign-on with OIDC, roles and a full audit log.
BackupMunk Enterprise is centrally managed backup for the servers you run yourself: Docker Compose applications and Linux, Windows and macOS file systems. A self-hosted server holds the schedules, credentials, encryption keys and restore console; a small agent on each host does the work and streams encrypted archives to the S3-compatible storage you already use. How it works Run the server — one Docker Compose stack (server, SurrealDB, Valkey) in your own environment. Install the agent — one command per host from the Install agent page, or a reusable registration key for fleets and golden images. Agents dial out over HTTPS, so hosts need no inbound ports, SSH or WinRM. Set up a backup — a guided flow: pick the client, browse its real file system or pick a Compose stack, choose a schedule in plain language, pick where to store it, review. Store it anywhere S3-compatible — AWS S3, MinIO and other S3-compatible services, and Backblaze B2. Archives are encrypted on the host before they leave it. Built so you can always get your data back Encryption you can't switch off. Every archive is encrypted on the protected host (ChaCha20-Poly1305), so the bucket and the network only ever see ciphertext. Offline recovery. Set a recovery passphrase on a destination and any archive can be decrypted and restored with the free bmrecover command-line tool — no server, no database, no license required. Copies in more than one place. Write each backup to several destinations at once. A slow or failed destination no longer holds the others up, missing copies are re-created automatically, and restores fall back to another copy. A hot standby for the server itself. Pair a second server in another site; it keeps a read-only copy of the primary. If the primary's site is lost, promote the standby and agents follow it on their own. Applications, not just folders A Compose backup captures the whole stack as one recoverable unit: the compose file, its .env and env_file entries, the named volumes and optionally the container images, so a restored stack actually starts — even on an air-gapped host. Containers are stopped briefly for a consistent copy, or backed up live when the data allows it. Deployment Server: Docker Compose on Linux. All settings — SSO, email, security, licensing, high availability — are made in the web console and take effect without a restart. Agents: a single static binary for Linux (amd64, arm64), macOS (Intel, Apple silicon) and Windows (amd64), plus .deb and .rpm packages. Agents update themselves, with brakes so a bad build can't take the fleet down. Licensing Activate a license from this store under Settings → License. Without a license BackupMunk still takes encrypted, scheduled backups through the server to one destination, and bmrecover always works. A license adds direct client-to-storage uploads, several destinations per backup, restores from the web console and audit shipping to your SIEM.
All products