Backups that run themselves
Set schedule, retention and scope once, then point the policy at VMs, folders, tags, clusters or endpoints. It runs on time without anyone watching.
daily 22:00 · 14D / 4W / 6M / 1Y
Protect Windows, Linux and macOS machines, physical servers and VMware, KVM, Proxmox and OpenStack workloads from one console. Every recovery point is encrypted, cannot be deleted from the machine it protects, and is checked on a schedule, so the day you need it is not the day you find out.
100 GB trial · 2 VMs · 5 endpoints
Protected
5,225
Jobs
1,449
Verified
312
Backup activity
Recent jobs
3 of 1,449
Protects the platforms you already run
Built for the day it goes wrong
Ransomware goes after backups first. Webyne Backup keeps them out of reach, proves they read back cleanly, and gets any one of them onto new hardware when the original is gone.
Set schedule, retention and scope once, then point the policy at VMs, folders, tags, clusters or endpoints. It runs on time without anyone watching.
daily 22:00 · 14D / 4W / 6M / 1Y
No API call deletes a recovery point. Removing a retention-locked one takes an operator, a second factor and a written reason, all recorded.
lock 30d · MFA to override
Scheduled verification reads samples of your recovery points back out of storage, decrypts them and checks each chunk against its own hash.
sha256 per chunk · nightly
Bring back one file, a single disk, a whole VM on another host, or a dead server onto new hardware from bootable recovery media.
file · disk · VM · bare metal
How it works
Connect what you run, set the rules once, and every run after that leaves a recovery point you can rely on.
Install the agent on Windows, Linux or macOS, or add a vCenter or ESXi host. Machines on a hypervisor are discovered for you.
agent · vCenter · ESXi
Pick a schedule, retention and retention lock once, then point the policy at the machines it should cover.
daily 22:00 · 14D / 4W / 6M / 1Y
Every run leaves an encrypted recovery point that is checked on a schedule and can be restored from the console.
locked · verified · restorable
Platform coverage
Capability is negotiated per platform, version and storage backend — so the console shows what your environment can actually do, rather than assuming every hypervisor supports the same snapshot or incremental method.
vCenter and ESXi API discovery, snapshot with guest quiescing, changed-block tracking where the version supports it.
libvirt discovery, QEMU guest-agent freeze/thaw, dirty-bitmap incrementals where the storage backend allows.
Proxmox API and QEMU stack, snapshot mode where supported, restore to the original or an alternate node.
Cinder, Glance and Nova-aware workflows for volume, image and instance recovery.
Desktops and servers: files and folders, Outlook/PST, external drives and full system images.
Desktop and server agents with file, volume and full-system protection.
Endpoint agent for files, folders and full-system recovery points.
Bare-metal Windows and Linux servers with bootable recovery media.
Architecture
Every stage is explicit. A backup is not reported successful until its manifest is committed and verified, and a hypervisor snapshot is always released — on success, on failure and on cancellation.
Endpoints, physical servers and virtual infrastructure
Discover, quiesce and stream changed data
Policy, schedule, job state and snapshot lifetime
High-throughput data movers with resumable transfer
Dedupe, compress, then encrypt
Durable primary copy
Recovery points a second factor is needed to remove
Chunks re-read and checked against their own hashes
Chunk deduplication is confined to a tenant boundary, so no customer can infer another customer's content from chunk hits.
Data is compressed while it still compresses, then sealed with per-tenant keys wrapped by a KMS-managed hierarchy.
Orphaned hypervisor snapshots degrade production storage, so a watchdog reclaims them independently of the job process.
Ransomware wins by destroying what you would recover from. Nothing running on a protected machine can do that here: no route in this product deletes a recovery point, and removing a locked one takes an operator, a second factor and a reason that is recorded.
Webyne Backup does not itself watch your machines for ransomware behaviour, and does not claim to replace the endpoint protection that does. When a threat is reported to it, it scores the signals, pins the last known-good recovery point for 90 days, refuses every request to delete it, and flags everything taken after the event as suspect until you say otherwise.
A compromised agent or hypervisor credential cannot shorten a retention lock: no API route deletes a recovery point, so nothing on a protected machine can reach one. Removing one takes an operator with the retention-override permission, a live second factor and a reason that is recorded — and a recovery point pinned by an open threat event cannot be removed at all.
View the Protection CenterNo API route deletes a recovery point, so no credential on a protected machine can.
A locked point needs an operator, a second factor and a recorded reason to remove.
Scheduled verification re-reads chunks and checks each against its own hash.
Every run keeps its own point; one bad night does not overwrite a good one.
Recovery points are marked either side of a reported event boundary.
The last known-good point is pinned for 90 days and cannot be deleted at all.
Recovery
Every restore is authorised separately from being requested. Scheduled verification reads samples of your recovery points back out of the store, decrypts them and checks each chunk against its own hash — so a point that has quietly become unreadable is found on an ordinary Tuesday rather than on the day you need it.
Mount and browse a recovery point, restore individual files and folders.
Restore a virtual disk or recover a volume in its native format.
Rebuild the VM configuration and disks on the original or an alternate host.
Full-system recovery to replacement hardware from bootable media.
Map compute, storage and network to a different host, cluster or node.
VMware to KVM and back as an explicit, auditable conversion workflow.
For MSPs & resellers
A super-admin, reseller and customer hierarchy with tenant-scoped repositories, quotas and policies. Tenant authorization is enforced on every resource server-side — one customer cannot enumerate, read or restore another's data, even by guessing an identifier.
Tenant hierarchy
Pricing
Try it on your own machines first. Then pick a plan and pay online for 1, 3 or 12 months. Prices are per month, plus 18% GST.
Free trial
100 GB of backup storage, 2 virtual machines and 5 servers & PCs to evaluate the whole console. No card needed.
For a small office: a few PCs and a server or two.
₹999 / month + GST
For a growing company with its own servers and VMs.
₹2,999 / month + GST
For larger estates with many VMs and departments.
₹6,999 / month + GST
For data centres and MSPs protecting many customers.
₹14,999 / month + GST
Need more than these, or running backup for your own customers as an MSP? Talk to us for a plan sized to your estate.
Request a demo
Send us the shape of your estate — endpoints, servers, hypervisors — and what you are trying to solve. We will come back to you with a straight answer about what we can protect today and how.
Prefer the main site?
Webyne's other services live at www.webyne.com.
Back up today. Recover tomorrow. Bring your endpoints, servers and virtual infrastructure under one control plane, with retention-locked recovery points you can prove are readable.