Platform / Backup security
Backup security
Your backups are the last line of defence against ransomware. ZWatch watches them like everything else.
Every job, every machine.
Each job run with its result, duration and data transferred, and each machine with its backups and restore points, in status-coloured cards and clickable charts.
- Golden image for every machine
- Ransomware and tampering alerts
- Servers without any backup flagged
- CriticalAttempt to delete restore points on a backup repository
- HighFour-eyes authorization was switched off on the backup server
- MediumDatabase server restored outside working hours by a backup operator
Best practice, measured.
Fifteen checks score your backup setup and tell you what to improve, from the 3-2-1-1-0 rule to recovery testing.
- Score with clear recommendations
- Compliance report in PDF
- On demand or monthly by email
| Check | Result |
|---|---|
| 3-2-1-1-0 rule | Met |
| Recovery testing | Last test 94 days ago |
| Malware scan of backups | On |
| Access control and four-eyes | On |
| Encryption | All jobs |
| Configuration backup | Missing |
| Supported version | Current |
| RPO and success rate | 97.2% |
Everything about your backups in one view.
Agentless integration
Backup servers send their events by syslog to ZWatch's own receiver. No agent and no access to the backup server. One leading backup platform is supported today, with more to follow.
Every job, every machine
Each job run with result, duration and data transferred, and each machine's backups and restore points.
Golden images
For every machine, the newest restore point you can trust: succeeded, not corrupted, clean and made before any incident, cross-checked with endpoint security.
Ransomware and tampering alerts
Attempts to delete backups, deleted repositories or restore points, four-eyes authorization switched off, malware in a backup and unapproved updates.
Restore monitoring
Who restored what and when, with alerts for restores outside working hours or of sensitive systems.
Coverage
Servers known to ZWatch that are not in any backup, flagged automatically.
Change control
Permanent version history, update requests with manager approval and email notifications, and alerts for updates made without approval.
Best-practice assessment
15 checks covering 3-2-1-1-0, recovery testing, malware detection, access control, encryption, configuration backup, supported versions, RPO and success rates.
Compliance report
A PDF for management and auditors, on demand or scheduled monthly by email.
Syslog health monitoring
Know immediately when a backup server stops reporting.
Flexible history
Filter from 24 hours to one year, or any date range. Data is kept for one year by default.
Add-on licence
Licensed as an add-on, and shown or hidden like any ZWatch module.
Protect the backups that protect you.
Ask for a trial with the Backup Security add-on.