Back up every server from one screen, without opening a single port.
Unseen is a self-hosted backup system you control from a web dashboard. You install a small agent on each Windows, Linux or Docker machine. The agent connects out to your server, so you don't need a VPN, firewall changes or inbound ports on the clients.
The problem
Backing up a mix of machines usually means a different tool on each box, scripts nobody remembers writing, and a VPN or port-forward for every remote site. When something breaks, you find out at restore time.
Unseen puts all of it on one server, behind one port, in one dashboard.
How it works
Run the server.
Start it with one Docker Compose command, or install it as a single binary with systemd. Open the web interface and create your admin account.
Enroll your clients.
Click Enroll new client and download the installer for that platform. The server address, a one-time token and the certificate fingerprint are already built into the installer, so there's nothing to copy. Run it once and the machine is protected.
Set it and forget it.
Define jobs, schedules and retention in the dashboard. Backups run on time, and you can watch them progress live.
Features
Agents make outbound TLS connections to your server and keep a control channel open. The server can then start backups, restores and job changes on demand, even on machines behind NAT or at remote sites. Your server only needs to expose one port.
Incremental runs read only the files that changed and upload only data the server doesn't already have. Every snapshot is still complete on its own, so a restore never has to rebuild a chain of incrementals.
Data is stored by its SHA-256 hash and compressed with zstd. Identical data is stored once, even across different snapshots and different machines.
- Agents pin your server's certificate fingerprint, so a self-signed certificate is safe to use.
- Each client enrolls with a one-time token.
- Every block of data is hash-checked on upload and again on restore.
Edit a job in the web interface, or on the machine itself with backup-agent job add or agent.yaml. Changes sync both ways automatically.
Set a cron schedule for each job, click Back up now whenever you need to, and have missed runs catch up when an offline machine comes back online.
Keep the last N snapshots, or everything newer than N days. Old data is garbage-collected automatically.
The job editor shows a host's containers as tick-boxes, grouped by Compose stack. It fills in the volume paths for you, and for databases it recognises it also writes the dump hook, such as pg_dump.
Use the server's local disk, any S3-compatible provider (Backblaze B2, Wasabi, Cloudflare R2, MinIO, Storj), or your own OneDrive or Google Drive, which you connect from the dashboard.
Look through any snapshot, then restore files to the original machine or download them straight from your browser.
Browse a client's filesystem from the dashboard and send files to it or pull files from it. Transfers run quietly in the background, are checked end to end, and wait in a queue if the machine is offline.
Run PowerShell, cmd or sh commands on any client and watch the output stream back live. You can cancel a command at any time, and doing so stops every process it started.
Supported platforms
- Windows Server
(including legacy Windows 7-era systems)
- Ubuntu and Linux
- macOS
- Docker hosts
Your data stays yours
Unseen is self-hosted. Your backups go only to storage you choose, on hardware or accounts you control. There's no third-party service in the middle and no lock-in.
Protect every machine you manage in an afternoon.
Run one server, install one agent per machine, and handle every backup from one dashboard.
Deploy Unseen