Self-hosted IT operations
Run your infrastructure.
Own your data.
Holdfast is a single platform for the work IT teams do every day — starting with backup. You host it on your own hardware or cloud, and every byte stays under your control. No third-party custody, no per-seat surprises.
Backup available now · more modules in development
Who it's for
As simple, or as granular, as you need
One system that meets you where you are — from a small business with no IT staff to an MSP running dozens of clients. You turn on exactly as much control as you want, and no more.
Small business, no IT
No IT team? Holdfast protects every machine with sensible defaults out of the box. Staff restore their own files without filing a ticket — nothing to babysit.
In-house IT department
Your team gets the granular controls it expects: per-machine policy, schedules, retention, alerting, and syslog straight into the tools you already run.
Managed service providers
Run many clients from one deployment — isolated tenants, per-client branding, and per-person storage, device, and bandwidth limits, all under a single login.
Same platform. The dials go from "just keep me safe" to "control every detail" — and back.
One platform, many jobs
Everything you host, under one roof
Most IT tools want to run in someone else's cloud and hold your data hostage. Holdfast flips that: one deployment, one login, one design language — and it lives where you decide. Modules share the same agents, the same tenants, and the same security model, so adding the next capability isn't a new vendor, it's a new tab.
The module family
Grows with what you need
Backup is shipping today. The rest of the family is on the way — built on the same core, so they'll feel familiar from day one.
Backup
Self-hosted backup for your whole fleet — agents, dedup storage, and self-service restore.
Learn more →Remote Control
Secure remote terminal, file transfer, and screen control to any enrolled device.
On the roadmapRemote Management
Software inventory and endpoint actions across the fleet — patch and act at scale.
On the roadmapHelpdesk
Support your users from first request to resolution, on the same platform.
On the roadmapTicketing
Track work from request to done, linked to the devices and people it touches.
On the roadmapISMS
Compliance posture, evidence, and audit-ready reporting built into operations.
On the roadmapHoldfast Backup
Lightweight agents on every Windows and Linux machine, enrolled with mutual-TLS from your own internal certificate authority. Deduplicated storage keeps the footprint small. Your users restore their own files within the limits you set — and the whole fleet updates itself.
- Windows service + Linux agents, mTLS-enrolled
- Content-addressed, deduplicated storage — local disk or S3-compatible
- Schedules, flexible retention, and on-demand backups
- Self-service restore, bounded by tenant and per-device policy
- Self-updating agents rolled out from the console
Why self-hosted
Your data never leaves your control
No third-party custody
Backups and operational data live on infrastructure you own. Nothing is held for ransom by a vendor's pricing page.
Secure by construction
An internal CA, mutual-TLS between every agent and the server, and per-tenant enrollment controls — not bolted on, built in.
Predictable cost
You provide the hardware or cloud. No per-seat metering deciding what you can afford to protect.
Start with Backup. Grow into the platform.
Stand up Holdfast on your own terms and bring your fleet under protection you actually control.