Protect your backups against internal threats with Cloud-PBS

The idea for this article came after a conversation with a prospect who had a very specific need: to protect their backups from malicious actions by their own administrators.

This prospect was looking for a solution where not only would the administrators be unable to delete backups, but also a trusted third party could manage access to critical credentials, preventing the administrator from using them for malicious purposes.

Secure permission management

In a Proxmox infrastructure, administrators have high-level privileges, but this carries risks, especially if rogue admins have access to sensitive data.

By utilizing the specific permissions offered by Proxmox Backup Server, you can restrict an account’s permissions to only list and/or create backups, without allowing them to delete those backups.

This ensures that no internal user can destroy critical data.

A trusted third party to safeguard your credentials

At Cloud-PBS, we go a step further to ensure maximum security. We offer a service where we can safely hold your administrator credentials, upon request.

This way, even the administrator in charge of day-to-day server management cannot use these credentials to carry out malicious actions, such as deleting backups or worse, formating your backup server.

This approach significantly strengthens protection against rogue admins and safeguards your infrastructure from internal threats.

In addition to this enhanced protection, Proxmox Backup implement automated pruning jobs—scheduled tasks that handle backup retention. This allows you (or us) to define clear rules for deleting old backups, ensuring that only obsolete files are removed according to your criteria, without requiring manual intervention. These processes ensure efficient data management without the risk of accidental or malicious deletions.

It this solution right for you ?

Protecting your critical data from internal risks while optimizing backup management is crucial for ensuring business continuity.

As a trusted third party, we provide an extra layer of security by holding sensitive credentials. You can delegate the management of your backups with confidence, knowing that even a malicious administrator will not be able to compromise the integrity of your data.

This approach addresses the needs of businesses seeking to guard against internal threats while ensuring simplified and automated backup management with Proxmox.

Cloud-PBS positions itself as a trusted partner to secure your infrastructure, contact us for more informations !