RestoreGuard

Jamf manages your Macs. RestoreGuard protects what's on them.

Jamf Pro handles configuration, compliance and app delivery — but not the user's data. When a Mac fails, gets replaced, or has to be erased, recovery is usually improvised: copy what you can to a drive, rebuild the machine, and hope nothing important was missed. Restores from consumer backup tools can drag old system state back with them and break enrollment.

RestoreGuard closes that gap for Jamf-managed fleets.

How it works

RestoreGuard deploys like any other Jamf package: upload the provided PPPC configuration profile, scope the PKG in a policy, and enrolled Macs register themselves automatically. Each Mac then backs up the user's data and settings on the schedule you set, to storage your organization owns.

When a Mac needs to be recovered, an admin picks the device and a snapshot in the RestoreGuard console — or the user restores a folder themselves from the menu bar app. Everything goes back onto the device without touching device management, so there is no wipe-and-rebuild.

Built around Jamf Pro

• Silent deployment through a standard Jamf policy — PKG plus PPPC profile, no user interaction
• Devices self-register the moment they enroll, using the ComputerEnrolled webhook
• Backup health and last backup date sync back to Jamf as Extension Attributes, so you can build Smart Groups and report on backup compliance
• Works with Jamf Pro 10.45 and later

Your data stays yours

Backups go straight from the Mac to storage you own — encrypted external drives, or your own Amazon S3 or S3-compatible bucket (Backblaze B2, Wasabi, MinIO). RestoreGuard's servers hold metadata only: device health, backup history and snapshot indexes. Cloud backups are encrypted on the Mac before upload, with a unique key per device escrowed to your admin console so a wiped Mac can always be recovered.

Proof that the backups work

Backups are verified automatically every day by probe-reading files from the snapshot — evidence they are readable, not just present. Every admin action is logged with timestamp and operator, with one-click CSV export for compliance reviews.

What your users see

A menu bar app that stays out of the way: run a backup on demand before an OS update or a trip, browse history, and restore a folder they deleted yesterday without opening a ticket. Existing Time Machine backups are detected automatically and can be restored from as well.

Requirements

macOS Sequoia 15 or higher on Apple Silicon · Jamf Pro 10.45 or later · Your own S3 or S3-compatible bucket for cloud backup (optional — external drive backup works on its own)

Get started

See plans and start a free 30 day trial at restoreguard.io. Deploy to a pilot group through Jamf and run a real restore before you commit.