BCDROpen source · BSD-2-Clause

restic

Community project

A free, open-source command-line backup tool that makes encrypted, deduplicated, content-addressable backups to almost any backend — local disk, SFTP, S3-compatible object storage, Backblaze B2, Azure, or Google Cloud Storage. Immutability depends on configuring append-only or retention locks on the chosen backend, and there is no built-in anomaly detection or recovery orchestration; restore is file-level, from any snapshot.

Visit website Compare with…

Verified July 11, 2026Source: 1

Product type: Community project
Deployment: CLI
Organization size: IndividualSMB
Pricing tier: Free

Capability checklist

BCDR

How restic measures up against the full Backup & Cyber Recovery taxonomy.

Immutable backups — not supported: Stores backup copies that can't be altered, encrypted, or deleted for a set retention period, so a clean recovery point survives even if attackers reach the backup system itself.
Air-gapped vaulting — not supported: Keeps an isolated recovery copy in a separate, network-segmented or offline vault that ransomware spreading through the production network can't reach.
Ransomware anomaly detection — not supported: Scans backups for signs of mass encryption or unusual change rates, flagging a ransomware attack and helping pinpoint the last clean recovery point.
DR orchestration & recovery testing — not supported: Automates failover to standby infrastructure and regularly tests that a recovery actually works, instead of assuming the backups will restore when they're needed.
Broad workload coverage — not supported: Backs up many kinds of workloads — VMs, SaaS apps, Kubernetes, cloud services, and endpoints — from one platform rather than a separate tool per system.
Granular restore — supported: Recovers at the level actually needed — a single file, mailbox, VM, or database — and can bring workloads back quickly instead of only restoring everything at once.