Linux rubixd
Self-hosted server on infrastructure you control. Safes, schedules, GC, verify, Hub online updates.
Secure Store — backups you keep.
Put system backups in one place you control. Secure Store runs on your Linux host, with agents on Windows and Linux that dial out. Data lands in encrypted safes — optional end-to-end mode so the server never holds the keys.
- One place for the servers and workstations you already run
- Encrypted safes (AES-256-GCM); optional E2E
- You choose the disk or cloud storage behind rubixd — Rubix does not host your backup data as SaaS
Capabilities
What you get
Self-hosted rubixd, outbound agents, encrypted safes, and the retention tools that ship with them.
Outbound agents
Windows and Linux agents dial out to rubixd. NAT-friendly — no inbound ports on protected hosts.
Block-efficient chunks
Changed-block style chunk backup with deduplicated storage in encrypted safes.
AES-256-GCM safes
Encrypted at rest. Optional E2E mode so the server never holds plaintext or decryption keys.
Windows VSS · Linux trees
Windows volumes via VSS. Linux file-tree backup. Scoped honestly — not a full suite claim.
Retention and verify
GFS retention, garbage collection, backup verify, schedules, and alerting. Agent as a service.
How it works
Outbound agents → safes → restore
Four steps from empty host to verified restore. No vendor cloud in the data path.
- 01
Install rubixd
Deploy the Linux server on a host you control. Create safes and set retention.
- 02
Enroll outbound agents
Install Windows or Linux agents. They dial out to rubixd — works behind NAT.
- 03
Backup into encrypted safes
Chunk backup lands in AES-256-GCM safes. Deduplicated at rest. Optional E2E mode.
- 04
Restore and verify
Restore from safes. Run verify jobs. GFS retention and GC keep storage honest.
Security
Keys you hold. Ciphertext on the server.
Built for teams that want self-hosted backup with a clear confidentiality boundary. We do not claim HIPAA or SOC 2 certification on this page.
Encrypted at rest
Safes use AES-256-GCM. Deduplicated ciphertext lives on storage you control.
E2E mode
In end-to-end mode the server does not hold plaintext or decryption keys. Compromise of rubixd yields ciphertext.
What the server sees
Metadata, schedules, job status. In E2E mode it does not see readable backup contents.
You host it
Not a Rubix-hosted SaaS backup service. You run rubixd on your infrastructure.
Deploy
Packages when ready
Secure Store downloads are not open yet. Join the interest list and we will notify you when server and agent packages ship.
Self-hosted server
Linux rubixd for safes, schedules, and retention — on hosts you control.
Windows agents
Outbound Windows agents with VSS volumes. Dial out to your server.
Linux agents
Outbound Linux agents for file-tree backup and service install.
Who it is for
IT, MSP, and security buyers
B2B scope. Technical, calm, specific — not consumer backup fluff.
IT and internal ops
Protect Windows and Linux servers you already run. Keep backup storage on your network.
MSP and multi-tenant ops
Self-hosted control plane per customer or shared rubixd with clear safe boundaries. Keys stay with you.
Security-minded teams
E2E mode for backups where the backup server must not be able to read contents.
Pricing
Plans on the Rubix Hub
Licensing is managed through the Rubix Hub. Until Hub publishes list plans for Backup, this page stays soft — no invented tiers or amounts.
Free
Secure Store — self-hosted server and agents.
Free
Secure Store — self-hosted server and agents.
- Self-hosted backup server
- Windows and Linux agents
Prefer the Hub storefront when plans are live. Hub pricing for Backup · Contact sales · Join waitlist.
Put backups where you control them.
Request access or contact us if you want to talk through setup.