Secure, encrypted backups over the SFTP protocol

Back up and restore directories to and from remote servers over SFTP. Plakar ensures encrypted, deduplicated, and verifiable snapshots across Linux, BSD, and NAS environments.

SFTP is universal and security-focused

SFTP (SSH File Transfer Protocol) is a widely supported standard for securely transferring files across servers, NAS devices, and cloud environments using the SSH protocol. While SFTP provides secure transport, it does not provide immutability, deduplication, or integrated snapshot management on its own. Plakar fills that gap by turning any SFTP-accessible server into a secure backup source, a resilient storage backend, or a flexible destination for encrypted, verifiable snapshots.

🧠 Why protecting SFTP matters

SFTP is the backbone of secure file transfers across Linux servers 🐧, BSD hosts 🏴, and NAS devices 💾 like Synology and QNAP. But secure transfer is not backup:

  • Files can be overwritten or deleted immediately after upload
  • No versioning or immutable snapshots exist for recovery
  • Manual transfers or scripts are error‑prone and hard to audit

When compliance, uptime, or disaster recovery is critical, simply storing files on SFTP is not enough. You need verifiable, immutable backups that can survive mistakes, misconfigurations, or attacks.

🔓 What happens when SFTP credentials get compromised?

SFTP relies on SSH keys or passwords to control access. If a key is leaked, misused, or an account is compromised:

  • Attackers can delete or overwrite files instantly
  • 🦠 Ransomware or rogue scripts can encrypt or destroy live data
  • Automated sync or replication can spread corruption across servers

Without independent, immutable snapshots, recovery can be impossible.

Plakar closes this gap by:

  • 🔒 Immutable, deduplicated snapshots outside normal SFTP access
  • 🔐 End‑to‑end encryption, even if the SFTP server is compromised
  • 📦 Portable backups that support offline or air‑gapped storage

Your snapshots stay safe, verifiable, and recoverable even if the server isn’t.

🛡️ How Plakar secures your SFTP workflows

Plakar turns any SFTP‑accessible server into a flexible backup system:

  • Source Connector: Snapshot files from the SFTP server into a secure Kloset store
  • Storage Connector: Store encrypted, deduplicated backups on an SFTP server
  • Destination Connector: Restore snapshots to SFTP, anywhere in your environment

With Push and Pull backup models, you can:

  • Push snapshots from each source server independently
  • Pull data centrally from multiple servers into a single Kloset
  • Scale to multi‑server environments without complicated scripts

Snapshots remain immutable, portable, and browsable via CLI or UI, without rehydration.

🧰 Everything in one tool: backup, verify, restore, browse

With Plakar, SFTP becomes a complete backup workflow instead of just a file drop:

  • ✅ Immutable, versioned snapshots
  • 🔐 End‑to‑end encryption with SSH transport
  • 🧠 Global deduplication to save space across multiple servers
  • 🔎 Browse and verify backups directly without restoring
  • 📦 Optional offline or air‑gapped retention for compliance

From snapshot creation to inspection to recovery, Plakar protects your SFTP‑based infrastructure — all in one tool.

Ready to protect your MinIO data?

SFTP docs

Security by design

Reduce your attack surface by keeping encryption keys out of storage. With true end-to-end encryption, your data is protected before it leaves the source and remains unreadable even to your storage provider.

  • End-to-end encryption with modern crypto (no compromise on "at-rest/in-transit")
  • Immutable snapshots with verifiable integrity
  • Tamper-proof metadata and audit logs
  • Zero-trust-friendly architecture
"You don’t have to trust your storage provider."
Placeholder

Regroup all your data protection workflows in one platform

From edge devices to SaaS platforms and hybrid clouds, Plakar keeps your data safe, synced, and instantly restorable: all from one unified tool.

For SaaS, endpoints & edge

Whether you're backing up remote laptops, on-premise servers or third-party SaaS data, Plakar gives you full control. Immutable backups, minimal storage, full flexibility. Even in disconnected environments.

In your data center

Legacy systems or critical data. All backed up with the same simplicity. Plakar integrates directly into your infrastructure with powerful CLI, orchestration support, and instant recovery.

Across clouds

Cloud-native or multi-cloud? No problem. Plakar works seamlessly with object storage, S3-compatible services, and hybrid environments, without locking you in or slowing you down.

Discover Plakar book a demo or join a community calls

Plakar is not another complex “backup project”. Gain peace of mind with little investment while protecting what matters.

Book a demo

A Plakar team member will contact you shortly to organize the demo.

By submitting this form you agree to our Privacy Policy.