What we're building.

Backup verification

Automatically restore each backup to a temporary DB and confirm it loads without errors.

Audit log

Full chronological record of who triggered what backup or restore, and when.

Custom storage destination

Bring your own S3, R2, or GCS bucket — full data sovereignty for regulated industries.

Open-source CLI

Publish the agent source for community auditing, contributions, and maximum trust.

Ansible Galaxy role

One-command agent install via ansible-galaxy — provision Capsule alongside your existing server tooling.

Docs recipes & tutorials

Step-by-step guides for common workflows — pre-deploy backups, staging restores, Docker Compose setups, and more.

Official Docker image

Run Capsule as a sidecar container alongside your database in Docker Compose — zero host dependencies, drop-in backup for any containerised stack.

Native OS packages (apt / rpm)

Install Capsule with apt or yum like any other system package — integrates with OS update workflows and feels native on Debian, Ubuntu, RHEL, and Amazon Linux.

Cloud-init support

Paste a YAML snippet when provisioning a VPS on DigitalOcean, Hetzner, Linode, or Vultr — Capsule installs and authenticates automatically on first boot.

GitHub Action

A trycapsule/backup-action for triggering backups as part of your deploy workflow — run a backup before or after every release.

Webhooks & REST API

Trigger backups and restores programmatically via API, and receive outbound webhooks on backup events — for custom integrations without waiting for native connectors.

Data masking on restore

When restoring to a non-production connection, automatically mask PII — emails, phone numbers, and sensitive fields get scrambled so prod data is safe to use in dev and staging.

Point-in-time recovery (PITR)

Continuously archive WAL logs for Postgres so you can restore to any exact moment — not just the last snapshot. The feature serious production databases rely on.

Backup anomaly detection

Alert when a backup is suspiciously small or large compared to baseline — catches silent data loss, accidental table drops, or broken migrations before they become obvious disasters.

Selective table restore

Restore a single table from a past backup without touching the rest of the database. Surgical recovery for accidental deletes or bad migrations.

Read replica backup

Run dumps against a read replica instead of the primary — zero load on production during backup. Essential for high-traffic databases where a full dump causes latency spikes.

Compliance reports

Auto-generate a PDF of your full backup history — every timestamp, success/failure, and retention period — formatted for SOC2, HIPAA, or ISO 27001 audits.

Secrets rotation awareness

When a DB password rotates via AWS Secrets Manager or HashiCorp Vault, Capsule automatically picks up the new credentials — no more silently broken backup schedules after rotation.

Multi-server atomic snapshot

Trigger a coordinated backup across multiple databases at the same timestamp. For microservices architectures where restoring one DB without the others leaves the system inconsistent.

Smart scheduling suggestions

Analyse how much your database actually changes between backups and recommend an optimal schedule — more frequent during busy hours, lighter overnight.

Capsule Teleport

Spin up a temporary cloud database pre-loaded with any of your backups in one click — for debugging, testing, or sharing a data snapshot with a teammate without touching production.

Capsule Migrate

A migration runner that automatically backs up your database before running migrations, then auto-restores if the migration fails. Never destroy production with a bad migration again.

DB Security Audit

capsule audit scans your database for misconfigurations — exposed ports, weak passwords, no SSL, unused superuser accounts — and generates a shareable report for compliance reviews.

capsule-verify (open source)

A standalone open-source tool to decrypt and test-restore any Capsule backup file, independent of a subscription. Proves you can always get your data out — even without Capsule.

DB Health Monitor

capsule health reports index bloat, table bloat, vacuum status, slow queries, and connection pool usage on a schedule — feeding results into the dashboard alongside backup status.

Capsule Guard

A CI/CD gate that blocks deployments if the last backup is older than a configured threshold or has failed. Drop capsule guard --max-age 4h into any pipeline.

Capsule Connect

An encrypted credential manager for database connection strings across environments — dev, staging, prod. Switch with capsule use prod. Keeps credentials out of .env files and git.