FOR PROXMOX, RESTIC AND BORG · SELF-HOSTED · RUNS OFFLINE · NOTHING LEAVES YOUR NETWORK

Know your backups restore — before you need them.

"Backup finished" doesn't mean you can get your files back. Vaultwitness regularly reads a real file back out of your Proxmox, restic and Borg backups, checks the repository, and tells you in plain words what broke and how to fix it.

One agent on your Proxmox Backup Server checks every VM, container and host it backs up — nothing to install inside the VMs. Each new backup is restore-tested soon after it lands, PBS verify results are read, and every machine shows by its own name. How it works with Proxmox →

Proxmox Backup Serverevery VM, container and host, by name
Vaultwitness dashboard: machines backed up to Proxmox Backup Server listed by name; db-01's newest VM backup can't be restored, marked in red with the reason, the older ones fully restorable
resticrepositories found by themselves
Vaultwitness dashboard: a server's restic repositories on S3, SFTP and a REST server, each snapshot restore-tested and fully restorable
Borgevery archive restore-tested
Vaultwitness dashboard: a server's Borg repositories, every archive restore-tested and fully restorable

A green checkmark is not a restore.

Most backup monitoring only checks that the job ran. The problems that lose data are quieter.

✗ What "backup OK" misses

  • A damaged file in the repository — you find out on restore day
  • The backup job stopped running three weeks ago
  • A database dump that is suddenly empty or half the size
  • A file you rely on quietly dropped out of the backup
  • Old backups deleted by a wrong cleanup rule — or by ransomware

✓ What Vaultwitness does

  • Reads a real file back out of each checked backup, in full
  • Runs restic check / borg check, and can re-read every byte
  • Learns how often backups happen and warns when one is late
  • Reads the backup job's log and says why it failed
  • Checks each new backup for the files you marked as must-have
  • Keeps a dated record you can hand to an auditor

Running in ten minutes

One server with the dashboard, one small agent on your Proxmox Backup Server and on each machine with restic or Borg backups.

01

Install the server

Unpack, run sudo sh install.sh. You get the dashboard address and a password. HTTPS is set up for you.

02

Add your servers

Press + in the dashboard and paste one command on each machine. No config files to write.

03

It finds the backups

The agent finds the backups by itself — every machine in Proxmox Backup Server, restic and Borg repositories in cron and systemd jobs, resticprofile, autorestic and borgmatic — and starts checking. Results show in minutes.

What it checks

Every problem is shown as one line — what broke — and one line — what to do.

✓
Restore testReads a real file back out of the backup, in full, on a schedule you choose.
✓
Repository integrityrestic check or borg check, plus a re-read of every byte within 7–60 nights.
✓
Late backupsLearns each repository's rhythm and warns when a backup is overdue.
✓
Failed backup jobsFinds the cron or systemd job, reads its log, explains the error.
✓
Database dumpsReads dumps back from the backup and flags ones that shrank or are empty.
✓
Files that must be thereList paths like /etc or your app config — get alerted if one goes missing.
✓
Mass deletionWarns when many old backups disappear at once.
✓
Disk spaceForecasts when the backup disk will be full.
✓
Silent serversIf an agent stops reporting, you hear about it.
✓
Alerts & reportsEmail, Telegram or webhook. A printable report of every check for audits.

Your data never leaves your network.

Vaultwitness runs on your own server. No cloud account, no telemetry. Restored test files stay on the machine they came from, and the agent never opens a port.

Works on servers with no internet at all: licenses can be activated with a file. Agents update themselves from your server, not from us.

# on the dashboard server
$ tar xzf vaultwitness-167-linux-amd64.tar.gz
$ sudo sh vaultwitness-167-linux-amd64/install.sh
Dashboard: https://backup-mon:47000
 
# on each machine with backups
$ curl -fsSLk … /install/agent.sh | sudo sh

Proof for auditors, not just a green dashboard.

A dated report of every backup and every restore test — for an ISO/IEC 27001 audit, a NIS2 review, your insurer or your client.

  • For each machine and backup: when the last backup was made, when it was last restored in a test, and whether it is fine.
  • Every problem in the period — when it started, when it was fixed and how long it took.
  • Any period: the last 30 days, a quarter, a year or exact dates. Print it or save it as PDF.
  • Sent by itself every day, week or month — by email or Telegram, as a file.

ISO/IEC 27001 (control 8.13) asks for backups to be tested regularly; NIS2 (Article 21) lists backup management among the required measures. Vaultwitness gives you the evidence — it doesn't certify you.

Backup verification report
Period: 2026-09-01 — 2026-09-30
⚠ 1 of 9 backups needs a lookNo new backup lately: pg-dumps
BackupLast backupLast restore testStatus
db-01 · Proxmox Backup Server
VM backup2026-09-302026-09-30 ✓✓
app-01
uploads2026-09-302026-09-30 ✓✓
pg-dumps2026-09-262026-09-26 ✓⚠ no new backup since Sep 26
Problems in this period
app-01 · pg-dumpsBackups stoppedSep 28 → still open
db-01 · VM backupRestore test failedSep 12 → Sep 12 · 3h

Completely free for up to 2 servers.

3 or more need a license. Try it on any number of servers free for 14 days — no sign-up, no card.

Download See pricing