No Reverse Access, No Risk
SquirrelBak uses a pull-based backup model: your backup PC (the Client) connects to your production server (the Server) to securely collect files.
Crucially, the connection is one-way: the Server never initiates contact with the Client.
This means:
- An attacker on the Server cannot reach your backup PC
- Malware cannot jump from Server to Client
- Ransomware cannot encrypt or delete your backup
One-Way Flow, Total Protection
Data flows only in one direction: from Server → Client.
The backup PC acts as a write-only vault — it receives files, but never sends commands back to the Server.
Even if your production system is fully compromised, your backup remains untouched and recoverable.
Backup on Your Terms
Your backup PC runs where you control it — in your office, at home, behind your firewall.
You decide when it connects, pulls data, and disconnects. No cloud. No external access. No backdoor.
The Server only needs to expose a read-only endpoint — minimal attack surface, maximum safety.
Use Any Idle Machine
Turn an old laptop or desktop into your SquirrelBak Client.
Keep it offline when not backing up — for maximum protection at zero cost.
Designed for Growing Data
SquirrelBak excels at continuously pulling new and changed files from busy systems — databases, logs, media servers, or NAS devices.
It doesn’t sync; it archives. Old versions stay safe, even if deleted on the Server.
Squirrel