Audited encryption
End-to-end encryption whose cryptography was reviewed in an independent audit.
Learn moreAttackers go after backups first. Plakar keeps encrypted, tamper-evident snapshots they cannot read or silently alter, plus an off-site copy at another provider, so your disaster recovery plan holds when it matters.
Ransomware goes after your backups first.
If an attacker can read, encrypt, or delete your backups, you do not have a recovery plan. You have a negotiation.
Backups reachable with the same credentials as production fall with production. One compromised admin account is enough to wipe both.
Unencrypted backups hand attackers a full copy of your data to exfiltrate and leak, even after you have restored.
Backups that were never verified or restored fail in the middle of the incident, when it is too late to fix them.
Encrypt, verify, isolate, recover.
Four layers between the attacker and your last good snapshot.
Data is chunked, deduplicated and encrypted before it leaves your environment. Storage only ever holds ciphertext, and passphrases live in your Control Plane or your own secret manager.
Every snapshot is signed and every chunk carries a MAC, so any change is detected. A check task can run after each backup to prove the Kloset is intact.
Sync snapshots to an off-site Kloset on another provider, account or storage tier, or export a self-contained, encrypted .ptar archive to keep offline.
Browse any snapshot, download a single file, or restore a whole resource to its original location or an isolated one, so you can rehearse recovery without touching production.
Truly immutable? Plakar snapshots are never modified in place, and any change is detected. For immutability enforced by the storage itself, pair them with object lock, WORM, or an offline .ptar copy.
Built for the worst day, not the average one.
End-to-end encryption whose cryptography was reviewed in an independent audit.
Learn moreSigned snapshots and MACs, verified by check tasks after every backup.
Learn moreReplicate a Kloset to another store, provider, or tier on a schedule.
Learn moreOne encrypted, read-only file to store offline.
Learn moreFreeze a restore point so no one can delete or prune it through the Control Plane. Pair it with your storage's object lock.
Learn moreGranular roles, enforced two-factor authentication, and Edges that open no inbound ports.
Learn moreSystem State backups of your domain controllers, often the first thing to bring back.
Learn moreBrowse, download single files, or restore to a new target.
Learn moreGo deeper on ransomware resilience.
Cloud storage isn’t a backup strategy. 10 reasons you need an independent, offsite backup you control, from ransomware and rogue AI agents to climate, conflict, and storage cost.
Read more
Discover why the 3-2-1 backup rule remains the gold standard for protecting your data from deletion, disasters, and ransomware
Read more
VSS and SQL Server backups are now free for registered Plakar users: agentless over SSH, encrypted and deduplicated into an open, portable Kloset store. The connectors are closed source, built for Control Plane. Active Directory recovery is a Plakar Control Plane capability.
Read more
One Control Plane, many ways to stay resilient.
An independent, encrypted copy on infrastructure you choose, with keys you hold.
Learn moreDeclare backup posture with the tools that already run your platform.
Learn moreDiscover resources, apply SLA policies, and see what is covered.
Learn moreRecover on your terms, not theirs.
Start on the free plan, or walk through your recovery plan live with our team.
See how it fits together on the Control Plane page.