Customer-Operated Docker & PostgreSQL Recovery Rehearsals

Don’t Just Back Up.
Prove You Can Recover.

A green checkmark in S3 only proves an archive was uploaded. RestoreProof runs scheduled, isolated recovery rehearsals—verifying databases, file archives, and business logins into ephemeral clones with verified teardown.

Run Interactive Drill View Architecture
✓ PostgreSQL Custom Dumps
✓ Docker Compose Isolation
✓ Zero Outbound Email Leakage
✓ Audit-Ready Evidence

Interactive Rehearsal Runner

Execute a synthetic recovery rehearsal in real-time to inspect state transitions & evidence generation.

restoreproof-runner / execution-log
IDLE
// Ready. Click "Trigger Rehearsal Drill" to simulate customer runner execution.
// Runner: Dedicated isolated runner (Mac/Linux container host)
// Scope: 1 active drill per runner, coordinated database & file snapshots

Resource Ledger & Teardown 0 items

No resources allocated yet.

Evidence Certificate

Status: Awaiting Drill
Duration: --
SHA-256 Seal: Unsigned

End-to-End Safety Workflow

How RestoreProof Guarantees Safe Recovery

Executing a recovery drill without isolated guardrails risks accidental client notification or orphan compute charges.

01. PREFLIGHT

Manifest & Tar Checks

Enforces snapshot boundary check. Scans tar headers to block path traversals (../) before extraction.

02. ISOLATION

Egress Guardrails

Injects anti-egress flags (SMTP=127.0.0.1, WEBHOOKS=false). Clones cannot send production client emails.

03. ASSERTIONS

3-Tier Verification

Asserts database record counts, verifies sample file attachment checksums, and executes synthetic HTTP login workflow.

04. TEARDOWN

Verified Absence

LIFO reclamation of all volumes, containers, and networks. Confirms zero leftover entities before issuing signed certificate.

Transparent Hypothesis Pricing

Tested Economics for Small SaaS & Agencies

Customer-operated runners minimize hosting costs. You only pay for recipe coordination and verified audit evidence bundles.

Diagnostic Pilot
$399 one-time

Single application setup + 3 guided rehearsal runs with founder support.

  • ✓ 1 Application recipe setup
  • ✓ PostgreSQL dump adapter
  • ✓ Anti-egress test harness
  • ✓ Initial SOC 2 compliance bundle
Start Pilot
Most Popular
Growth SaaS
$149 / month

Scheduled weekly rehearsals for up to 3 production services.

  • ✓ 3 Active applications
  • ✓ Automated weekly drills
  • ✓ Slack & webhook alerts
  • ✓ Verified absence cleanup ledger
  • ✓ Tamper-evident HTML certificates
Get Started
Agency Portfolio
$299 / month

For agencies managing client retainers and SLA compliance.

  • ✓ Up to 10 client applications
  • ✓ White-label client PDF reports
  • ✓ Scheduled monthly rehearsals
  • ✓ Multi-org access management
Contact Agency Team

Frequently Asked Questions

How does RestoreProof prevent sending emails or webhook charges during a drill?

The Application Launcher strictly rejects default Compose egress and forcefully overrides environment variables, setting SMTP_HOST=127.0.0.1, DISABLE_OUTBOUND_EMAIL=true, and WEBHOOKS_ENABLED=false. Synthetic runs operate inside an isolated Docker bridge network.

Do you copy our production database to your hosted servers?

Never. Rehearsals run on your own customer-operated runner (a dedicated VM or local Docker runner). Raw database dumps, file attachments, and secrets never leave your infrastructure boundary. Only redacted execution hashes and status digests are returned to the control plane.

What happens if a runner crashes halfway through a rehearsal?

RestoreProof writes every allocated container, volume, and network to a durable, append-only resource ledger before creation. Upon restart, the Cleanup Reconciler detects orphan resources and safely reclaims them, verifying their absence.