Built for teams who'd rather hold the keys.
Whether you run IT for one organization, backups for dozens of customers, or the security program that has to sign off on all of it — Secure Store keeps backups on your terms.
All your backups, on your network, in one place.
Stop juggling separate tools for Windows and Linux, or shipping data offsite just to get it backed up. Run rubixd next to the systems it protects.
Backups scattered across tools, firewall changes for every new host, and no easy way to prove restores work.
One self-hosted server, outbound agents for Windows (VSS) and Linux (file trees), and scheduled verify jobs with alerting.
Fit the deployment to the customer — not the other way around.
Run a dedicated rubixd for each customer when contracts call for separation, or a shared instance when they don't. Agents work behind customer NAT without any inbound changes.
Every customer network is different, firewall changes need approvals, and clients want to know where their data lives.
Per-customer or shared servers, outbound-only agents, and multi-deployment licensing through the Rubix Hub.
Treat the backup server as untrusted — and mean it.
With E2E mode, the server never sees plaintext or holds the keys. Your threat model gets simpler, and your review gets shorter because the scope is documented honestly.
A backup server is a copy of everything. If it's compromised, everything is exposed.
AES-256-GCM safes, optional E2E mode, outbound agents, and a clearly stated trust boundary.
Have specific compliance needs?
Secure Store doesn't claim industry certifications. If you work in a regulated industry, talk to us about your requirements and we'll walk through the security model with you honestly.
See Secure Store on your terms.
Join the waitlist to be first in line when packages ship — or book a walkthrough with our team and bring your toughest questions.