Answers to what you're dealing with

It's like comparing a vault room with a carry-on bag. OneDrive, Google Drive and Dropbox are built for syncing and sharing files (File Sync & Share). Our solution is enterprise backup and disaster recovery (Backup & Disaster Recovery).

The difference shows the moment something goes wrong: a ransomware attack, a server failure or the need to restore terabytes of data at once.

On top of that, we've developed our own deduplication technology. When a few records change in a 10 GB database, we don't send the whole 10 GB file, only the changed block of around 1 MB. Only data that has actually changed is sent - if you have, say, a copy of a file with identical content, we store just a reference to the blocks already saved instead of the whole file. Backups are therefore fast, don't flood the network and take up only a fraction of the space.

These services rely on two-way sync. When ransomware encrypts files on a computer, OneDrive immediately uploads the encrypted files to the cloud and overwrites the original versions. Version history exists, but restoring thousands of files one by one is a nightmare.

We store backups in immutable WORM storage - once written, data cannot be overwritten or deleted. Ransomware Guard also actively detects the attack through decoy files, locks backups instantly and preserves a clean recovery point.

No. Cloud drives back up only user files - documents, pictures, the desktop. They don't back up the operating system, server configuration, databases (such as accounting software or SQL), Docker containers or virtual machines.

Our backup covers the whole server or NAS, including databases, system settings and applications. If the server burns down, you restore a working environment, not just the My Documents folder.

Restoring from a cloud drive depends on your internet speed - downloading 5 TB over a typical connection takes days. Our solution also writes backups locally (SMB/NFS), so you restore terabytes over your local network in minutes. The cloud copy serves as an off-site safety net.

With OneDrive or Dropbox, data sits on US providers' platforms, which is often a problem for companies under NIS2 or strict audits. With us, data is encrypted with your own key on your own machine and stored in an EU data center or only locally on your second storage. Without the key, nobody can read it.

Quite the opposite. Cloud drives get very expensive once you exceed the standard 1-2 TB per user, and at 10-50 TB the monthly fees become unbearable. Thanks to deduplication and compression, you pay only for truly unique stored data on low-cost S3 storage, saving 60 to 80% of the cost.

It depends on how. Direct access from the internet - open router ports (port forwarding) or Synology DSM or Dell iDRAC on a public IP address - is not recommended in a business environment. Bots start trying thousands of passwords within seconds, software bugs can bypass even a strong password with 2FA, and ransomware groups (such as DeadBolt or QLocker) specifically hunt for NAS devices visible from the internet.

There are two very different types of connection. Inbound connections - open ports and access to the NAS from outside - are a risk, and backup doesn't need them at all.

Outbound connections are safe. The NAS behaves like an ordinary office computer opening a website: it initiates an encrypted HTTPS connection (port 443) to cloud storage on its own. The router blocks every connection attempt from outside, so nobody on the internet can even see the device exists.

No. Traditional solutions keep the agent listening on a port that the control server sends commands to. That means opening ports, setting up port forwarding and increasing the attack surface.

Our agent works the other way around: on startup it opens an outbound encrypted connection to the control server (HTTPS or WebSocket over port 443) and receives instructions through it. When you click “Run backup” in the dashboard, the command arrives over the connection the agent opened. It works behind any router or NAT without touching the firewall, and nothing runs on the backed-up machine that an attacker could scan from outside.

Closing inbound ports removes the most common attack path from the internet - the server becomes invisible from outside. But there is no absolute security. The most common scenario in mid-sized companies is an attack from inside the network: an employee opens a phishing e-mail, the attacker takes over their computer and attacks the server from there through shared folders or stolen passwords. Other risks include a compromised software supplier or physical access to the server.

That's why our solution assumes the internal network may be compromised. The cloud backup copy is under S3 Object Lock (WORM) and can't be deleted even by an attacker with a stolen administrator password. Ransomware Guard catches encryption through decoy files, disconnects shares and locks backups. Closed ports lock the front door, while immutable backups and active detection protect the back door too.

We have a solution for air-gapped networks too. Backups can go purely locally to a second server or NAS on the network, without a single byte crossing the internet.

Alternatively, the server sends its backup to a dedicated gateway on the network (DMZ), and only that gateway is allowed an outbound connection to the cloud, where it forwards already encrypted data. The server itself stays completely disconnected from the internet.

If you need an off-site copy of your backups, the data server needs just one port, through which the agent communicates with the server. The connection is encrypted, and the server accepts only authenticated agents with a valid certificate.

All other ports are closed, so an attacker scanning it finds no login page, remote desktop or any other service to get in through. Without a valid agent certificate, the server won't respond on that port.

Backup and recovery are among the key NIS2 requirements. Immutable backups, encryption, an audit log and regular recovery tests with reports help you meet and demonstrate this part. We are not legal advisors, though - NIS2 also covers other organizational and technical measures.

First we review your servers, data and current backups. We design a tailored solution, deploy it, set up the rules and run the first recovery test. After that we monitor your backups and keep you informed.

The price depends on the number of servers, the data volume and the package you choose. Since we build on your existing hardware without expensive licenses, it costs a fraction of typical enterprise solutions. Get in touch and we'll prepare a quote for your business.

We monitor backups and storage around the clock. If there's an error or suspicious activity, we contact you immediately, and during an attack we follow a prepared runbook - from isolation and finding a clean recovery point to restoring the data.