Encrypted, incremental, compressed backups on storage you already have - Amazon S3, Backblaze B2, Google Drive, Azure, OneDrive, Dropbox, MEGA, Storj, WebDAV, SFTP, FTP, SMB, or a plain local disk - is what the MIT-licensed Duplicati has quietly done for years. Its security model is Trust No One: every block is encrypted with AES-256 (or a local GPG instance) before leaving the machine, and the passphrase never travels, so the storage provider holds only ciphertext. The block-based storage engine gives the best of both backup worlds: after one initial full backup, only changed data blocks upload - modify a tiny part of a huge file and only that part transfers - yet every backup version restores like a full backup in a single operation, with no incremental chains to replay. Deduplication and compression keep remote storage growth slow even across years of versions. A web interface manages everything: the built-in scheduler keeps backups current automatically, flexible filters select folders, file types, or custom patterns, retention policies prune old versions, and an integrated updater flags new releases. On compatible object-lock backends, immutable (WORM) storage protects backup data from ransomware that reaches the credentials. Runs on Windows, macOS, and Linux, free even for commercial use.

Replace fragile cron scripts and complex terminal commands with Zerobyte, a self-hosted web control center that schedules, monitors, and restores encrypted backups across any cloud or local storage infrastructure. System administrators can connect local drives, NFS shares, SMB exports, WebDAV mounts, and SFTP endpoints as backup sources with custom inclusion and exclusion rules. The visual interface lets you dispatch incremental, client-side encrypted snapshots to local directories, Amazon S3, Google Cloud Storage, Azure Blob, and forty cloud storage providers supported via rclone. You can schedule automated jobs using cron expressions, configure custom retention windows to automatically prune obsolete archives, and run repository health checks directly from the browser. Interactive file trees allow operators to inspect historical snapshot contents, download specific documents, or restore entire directory structures to their original locations in a single click. Configurable pre-backup and post-backup HTTP webhooks help pause databases before snapshots, execute dump commands, and alert teams through Discord, Slack, Telegram, or ntfy notifications. Multi-repository mirroring duplicates critical backups to secondary cloud providers for disaster recovery. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Engineers who have outgrown Duplicati or rsync scripts tend to appreciate Kopia's design: encrypted, compressed, content-deduplicated snapshots in Go, stored in a repository on any storage you control - S3, Google Cloud Storage, Azure Blob, Backblaze B2, SFTP, WebDAV, or a plain filesystem. Encryption is mandatory and end-to-end: every block is encrypted client-side with AES-256-GCM or ChaCha20-Poly1305 using keys derived from your repository password, and even file names never leave the machine in plaintext. Blocks are packed into 20-40 MB blobs with random names, so the storage provider learns nothing about content or structure. Deduplication is automatic and content-based - identical data across files, snapshots, and even multiple machines backing up to the same repository is stored once. Policies govern everything per-directory: compression choice, retention (hourly through annual), scheduling, and ignore rules. Incremental snapshots are point-in-time records you can mount and browse like a filesystem. This deployment runs the Kopia repository server with its web UI, centralizing backups from multiple client machines over an authenticated API - each client connects with the server URL and certificate fingerprint, and users only see their own snapshots. Error correction, high-latency-tolerant caching, and both CLI and GUI round it out.

Borg UI is a self-hosted web management interface for BorgBackup that eliminates complex command-line syntax by organizing deduplicated backups, automated pruning schedules, and interactive file restorations into an intuitive graphical control center. System administrators connect local drives, remote SSH hosts, and SFTP endpoints to establish resilient storage repositories guarded by client-side encryption and cryptographic authentication. The centralized dashboard visualizes storage capacity, compression ratios, deduplication savings, and the health status of active backup jobs in real time. Configurable backup plans schedule automated cron jobs with granular retention rules, executing pre-backup database dumps and filesystem snapshots before running incremental syncs and background integrity checks. Users browse multi-version archive filesystems directly from the web browser, searching file trees and extracting individual files or entire folders without manual command line extraction. The platform orchestrates remote fleet backups by deploying SSH keys across client machines, tracking connection health, and executing non-disruptive background operations. Comprehensive alert routing dispatches real-time job status notifications, failure warnings, and storage alerts across Discord, Telegram, Slack, and email using integrated multi-channel messaging services. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GNU AGPLv3 licensed.