PostgreSQL 9.2 to 18
Back up one database, several, or all of them, plus server-wide roles and settings (globals).
- Custom, plain SQL, directory and tar formats
- Parallel jobs for directory format
- Bundled PostgreSQL tools, nothing extra to install
PostgreSQL backup for Windows v1.1.0
Backups you can prove.
Zigguard schedules, verifies and audits your PostgreSQL backups on your own Windows servers. A backup only counts once it has been checked and checksummed, and nothing ever leaves your network.
Lifetime licence · US$150 per server · 2 years of updates
- Runs fully on-premise
- Every backup verified
- SHA-256 checksums
- Tamper-evident audit trail
- Offline licensing
- PostgreSQL 9.2 – 18
Features
Everything a PostgreSQL backup needs. Nothing it doesn’t.
Built only for PostgreSQL on Windows, so every detail fits: from the formats you choose to the moment a backup is allowed to count as good.
Schedules that behave
Presets or cron, per time zone, and safe across daylight-saving changes.
- Catches up missed runs after downtime (grace window)
- No overlapping runs, with a concurrency limit
- Run now and Cancel at any time
Local and USB destinations
Write to local disks or USB drives. Zigguard follows the drive even when Windows changes its letter.
- Optional second copy on another disk
- Second copy re-checked with SHA-256
Verified, or it didn’t happen
Each backup is written as .partial and renamed only when complete. Then it is verified and checksummed.
- pg_restore check, or plain-SQL markers
- SHA-256 checksum for every file
- A run succeeds only after verification
Retention that can’t surprise you
Keep the last N backups, N days, or both. The safety rules are built in.
- Never deletes the newest verified backup
- Never touches files Zigguard didn’t create
- Clock-safety guard against a wrong system date
Audit trail and logs
A tamper-evident hash chain over every run record, plus a full log for every run.
- “Verify audit trail” finds the first broken record
- Service log and Windows Event Log entries
- History with filters and CSV export
The Manager app
A Windows desktop app in light and dark themes, with a first-run setup wizard.
- Dashboard: last results, next runs, disk space, licence
- Live progress: table X of Y, bytes written
- Silent MSI install for IT teams
Offline licensing
No internet needed on the server. Send a Request Code, receive a signed licence file.
- ECDSA-signed and bound to the machine
- No phone-home, ever
- 30-day grace after a hardware change
By the numbers
Small footprint. Serious guarantees.
- 9.2–18 PostgreSQL versions supported
- 4 Backup formats: custom, plain, directory, tar
- 8 Failure scenarios tested automatically
- ~0.3 s Agent start time (0.3–0.6 s)
- 22 MB Memory when idle (about)
- 0 B Data sent outside your network
How it works
From install to verified backups in minutes
Two parts: a lightweight Windows service (the agent) that does the work, and the Manager app you use to set it up and watch it.
-
Install
Run the MSI on Windows 10/11 or Windows Server 2016+. The .NET runtime and PostgreSQL tools are bundled. Silent install is supported.
-
Activate offline
Copy the Request Code to ByteTIQ and import the licence file you get back. The server never needs internet.
-
Add jobs
The setup wizard connects to PostgreSQL, picks databases, format, schedule, destination and retention.
-
Sleep well
Backups run on schedule, are verified and checksummed, and every run is written to the audit trail.
Inside every run
Seven steps between “started” and “succeeded”
A run is marked as succeeded only after every step passes. If anything fails (disk full, connection cut, drive removed), it fails loudly and leaves no half-written backup behind.
- Check tools Bundled PostgreSQL tools are checked against a SHA-256 manifest
- Dump pg_dump streams straight to disk, with no buffering in memory
- Write .partial The file stays .partial until it is complete
- Verify pg_restore check, or plain-SQL markers
- Checksum A SHA-256 checksum is recorded
- Commit Renamed to its final name; optional second copy, re-checked
- Audit The run record is appended to the hash chain
Security & governance
Designed for banks and regulated environments
Zigguard was built around the questions auditors ask: where does the data go, who can touch it, and can you prove what happened?
Read the full security overviewOn-premise only
Backups, logs and licences stay inside your network. Nothing is sent to any cloud.
Encrypted secrets
Database passwords are encrypted with Windows DPAPI. They are never on a command line and never in logs.
Restricted access
Configuration and the Manager’s named pipe are limited to Administrators and SYSTEM, and the agent’s identity is checked.
Tool integrity
Bundled PostgreSQL tools are checked against a SHA-256 manifest before every run, blocking tampered or planted DLLs.
A tamper-evident audit trail
Every run record carries the hash of the record before it. Change or delete one record and the chain breaks, and “Verify audit trail” tells you exactly where.
Illustration
Performance & reliability
Light on the server. Hard to break.
The agent is compiled with Native AOT, so it starts fast and stays small. And it is tested automatically against the failures that happen in real server rooms.
0.3–0.6 s Agent start time
~22 MB Memory when idle
Streaming Backups go straight to disk, not into memory
Automatically tested against
- Disk full Tested
- Backup disk removed mid-run Tested
- Database connection cut mid-run Tested
- pg_dump killed Tested
- Tampered tool files Tested
- Tampered audit records Tested
- Clock jumps forward and back Tested
- Service restart during a backup Tested
After a service restart mid-backup, leftovers are cleaned up automatically on the next start.
Retention with guard rails
Keep the last N backups and/or N days. Zigguard never deletes the newest verified backup, never touches files it didn’t create, and its clock-safety guard stops a wrong system date from wiping old backups at once.
Why Zigguard
Where Zigguard wins
Most teams protect PostgreSQL on Windows with home-made scripts or with a general-purpose backup tool. Here is how they compare on the things auditors care about.
| Zigguard | Scripts + Task Scheduler | General backup tools | |
|---|---|---|---|
| Every backup verified before it counts | Yes | No | Varies |
| SHA-256 checksum for every backup | Yes | No | Varies |
| Never leaves a half-written backup (.partial) | Yes | No | Varies |
| Tamper-evident audit trail | Yes | No | No |
| PostgreSQL tools checked for tampering before every run | Yes | No | No |
| Retention that never deletes the newest good backup, with a clock guard | Yes | No | Varies |
| Built only for PostgreSQL (9.2–18, globals, all formats) | Yes | Varies | Varies |
| Fully offline: no cloud, no phone-home licence | Yes | Yes | Varies |
| Desktop app with dashboard and live progress | Yes | No | Yes |
| Typical price | US$150 once per server | Free, plus staff time and risk | About US$90–500 per server, often with yearly fees |
Comparison based on typical setups and public list prices of popular Windows database-backup tools (October 2026); individual products vary. Today Zigguard writes to local and USB disks. Network-share and cloud destinations and email alerts are on the roadmap.
Pricing
Pay once. Keep it forever.
One simple licence per Windows server. Two years of updates included. Your backups never stop because a subscription lapsed.
Zigguard Server
Everything in v1.1.0, for one Windows server.
$150 one-time · per server
- Unlimited databases and backup jobs
- All formats, schedules and retention rules
- Second copy with SHA-256 re-check
- Tamper-evident audit trail and CSV export
- 2 years of updates included
- Keeps working forever, even after updates end
- Email support from ByteTIQ
Volume packs
The same licence for several servers, at a lower price per server.
- 3 servers $399 Save 11%
- 10 servers $1,200 Save 20%
25+ servers: ask for a quote
Update renewal
$39 per server · per year
After the first 2 years, extend updates by one year at a time. Skip it and Zigguard keeps working on the version you have.
Enterprise & banks
For organisations with many servers and formal procurement.
Custom
- Volume or site licensing
- Named contact and priority support with agreed response times
- Remote installation and silent-install guidance
- Answers to your security questionnaire
- Purchase by quote, PO and invoice
Roadmap
What’s coming next
These features are planned and not yet available. We list them so you can plan ahead, without promising dates.
- Coming soon Free with active updates
Notifications
Email, Microsoft Teams and Slack alerts on success and failure.
- Coming soon Free with active updates
Network shares
Write backups to SMB network shares.
- Coming soon Free with active updates
Restore wizard
Guided restore from the Manager.
- Coming soon Free with active updates
Encryption at rest
Encrypt backup files on disk.
- Coming soon Free with active updates
Arabic Manager
A full Arabic, right-to-left interface.
- Coming soon Free with active updates
Code-signed installers
Signed MSI and binaries.
- Coming soon Paid add-on
Cloud destinations
Amazon S3 and Azure Blob storage.
- Coming soon Paid add-on
Central management
Manage many servers from one place.
- Coming soon Paid add-on
SSO / LDAP
Sign in to the Manager with your directory.
- Coming soon Paid add-on
Compliance reports
Ready-made evidence reports for audits.
- Coming soon Paid add-on
More databases
SQL Server and MySQL/MariaDB.
FAQ
Questions, answered
What is Zigguard?
Zigguard is on-premise Windows software for scheduled, verified and audited PostgreSQL backups. It has an agent (a Windows service that runs backups) and the Manager (a desktop app to configure and monitor them).
Does any data leave our network?
No. Backups, logs, the audit trail and licensing all stay on your servers. Licence activation works offline, and Zigguard never phones home.
Which PostgreSQL and Windows versions are supported?
PostgreSQL 9.2 to 18, on 64-bit Windows 10/11 or Windows Server 2016 and later. The .NET runtime and PostgreSQL backup tools are bundled, so there is nothing else to install.
Is Zigguard certified (ISO 27001, SOC 2, PCI DSS)?
No. Zigguard is not certified, and we don’t claim compliance with any standard or regulator. It is designed for regulated environments and gives your auditors evidence: verified backups, checksums, full run logs and a tamper-evident audit trail.
How do we restore a backup?
Backups are standard PostgreSQL formats (custom, plain SQL, directory, tar), so you restore them with the standard pg_restore or psql tools. A guided restore wizard in the Manager is on the roadmap.
Can we back up to the cloud or a network share?
Not yet. Today Zigguard writes to local and USB disks, with an optional second copy to another disk. Network-share and S3/Azure destinations are planned.
Can IT deploy it silently?
Yes. The MSI installer supports silent installation for IT deployment tools.
Ready to prove your backups?
Get a lifetime licence for US$150 per server, or ask ByteTIQ for a quote for your organisation.