Enterprise backup and ransomware protection

Enterprise backup is not copying files to an external disk. It is a data-protection discipline that ensures that, in the face of any failure — a server that dies, a corrupted database, an employee who deletes the wrong folder, or a ransomware attack that encrypts everything — the company can get back to operating within an acceptable time and with controlled data loss.

Two numbers govern this discipline. The RPO (Recovery Point Objective) defines how much data you can tolerate losing — if the backup runs hourly, the RPO is one hour. The RTO (Recovery Time Objective) defines how quickly the service must be back up. Defining these two targets, per system, is what separates a backup plan from a vague promise.

The market’s golden rule is 3-2-1: at least 3 copies of the data, on 2 different media, with 1 copy off-site. The modern version adds 3-2-1-1-0: one immutable (WORM) copy and zero validated errors on restore. Backup that has never been tested in a restore is not backup — it is hope.

NG Backup delivers this discipline end to end. It performs global deduplication — at the source (client) or in the storage — eliminating repeated blocks across all servers and versions, with up to 99% reduction in stored volume. It is multi-platform: it protects VMs, databases, containers, M365, Google Workspace, NAS and endpoints from a single console, with policies, retention, immutability and off-site replication for DR.

Global deduplication

NG Backup breaks data into blocks and stores each unique block only once — across all servers, all versions and all points in time. Identical operating systems, cloned VMs and repeated files no longer take up multiple copies of space, reaching up to 99% reduction and making it viable to keep far more retention on the same storage.

Immutability and WORM (anti-ransomware)

Protection copies are written in WORM (Write Once, Read Many) mode — on immutable disk, S3 Object Lock in the cloud or LTO tape with air-gap. Within the retention window, no one — not an administrator, not ransomware with stolen credentials — can alter or delete the backup. It is the technical guarantee that there will always be a clean copy to restore.

Replication and Disaster Recovery

NG Backup replicates recovery points to an off-site location or to the cloud automatically and deduplicated. In the event of a disaster at the primary site, operations resume from the replica within the agreed RTO — with DR runbooks tested and validated by OpenTechs.

BWeb console (auditing, self-restore, ACLs)

The entire operation lives in the BWeb console: scheduling, job monitoring, reports and alerts in a single web interface. It enables delegated self-restore (each team restores its own data), ACLs by role and tenant, and a complete audit trail — meeting compliance and separation-of-duties requirements.