RestoreGuard v1.7.3 · Built for Jamf Pro
Backup and restore built for Jamf-managed Macs. RestoreGuard protects each user’s data and settings in storage your organization owns — and puts them back without breaking enrollment.
★ Founding customers get 35% off any plan, price-locked for two years.
The menu bar app
Users see exactly what’s protected — and can back up before a trip or bring back a folder they deleted yesterday, without opening a ticket.
The problem
Time Machine, Migration Assistant, disk cloners and consumer backup agents were built for personal Macs. They copy the whole machine — including the parts that belong to the device, not the user.
A whole-Mac restore carries the previous install’s MDM enrollment records, device certificates, Platform SSO and Company Portal registration, keychains and Apple Account identity onto the new install. None of it matches the Mac it now runs on.
Profiles stop applying, the MDM channel and single sign-on break, the login keychain won’t unlock, AirDrop and Continuity go dark. The standard fix is the one nobody wants: erase the Mac, re-enroll it, and set it up again by hand.
It backs up documents, desktop, application data and settings — everything the user keeps at the top of their home folder — and knows what is bound to the device, so it never restores it. The Mac keeps its Jamf enrollment, and every restore comes from a backup verified within the last 24 hours.
Recovery, the managed way
The same flow works for a repaired Mac or a brand-new replacement — it comes back managed, compliant and familiar.
Wipe the Mac — or unbox its replacement.
Automated Device Enrollment brings it back into Jamf.
Your normal policy installs the RestoreGuard agent.
Pick a restore point in the console — or let the user do it from the menu bar.
Enrollment intact. No wipe, no rebuild by hand.
Features
Every feature is built around real Jamf workflows — silent deployment, PPPC profiles, webhooks, and zero user interaction required.
Drop the signed, notarized package in a Jamf policy and every enrolled Mac gets the agent, daemon and menu bar app — silently, at enrollment. No custom scripting required.
After every backup the agent checks in immediately. No 30-minute polling lag.
<2 s
Each Mac checks the backup it actually uses — proof for auditors that it’s readable, not just present.
Choose exactly what comes back. Merge mode adds files alongside existing ones — nothing is deleted. Existing Time Machine backups can be restored from too.
Back up to your own Amazon S3 bucket or any S3-compatible storage. Every file is encrypted on the Mac before upload, with per-device keys escrowed to your admin console.
Every admin action logged with timestamp and operator. One-click CSV export.
Names, users, models and enrollment status — and new Macs register themselves via the ComputerEnrolled webhook.
Before a software update, before a trip, or anytime something important changes — users back up on demand from the menu bar, and every run shows up in the console’s audit trail.
Inside the product
Admins run the fleet from the web console. Users see exactly what’s protected — and can help themselves — from the menu bar app on every Mac.
Everything an admin needs to prove the fleet is recoverable — live, not last-sync.
A native macOS app on every managed Mac — informative enough to build trust, safe enough to hand to users.
Security and privacy
Backups go straight from each Mac to storage you own. RestoreGuard’s servers hold metadata only — device health, backup history and snapshot indexes.
Cloud backups are encrypted client-side before a single byte leaves the device, with a unique key per device.
Per-device keys are escrowed to your admin console, encrypted at rest with AES-256-GCM, so a wiped Mac can always be recovered.
External drive backups use APFS encryption with a key controlled by the device owner.
Agent-to-server traffic uses HTTPS with TLS 1.2+. API keys are scoped per organization and can be rotated at any time.
TOTP two-factor sign-in, invite-based onboarding, and admin, technician and read-only roles.
Each admin action is logged with a timestamp and operator, with one-click CSV export for compliance reviews.
Backup destinations
RestoreGuard orchestrates — you own. Connect your cloud credentials once and every Mac backs up directly to your infrastructure.
Back up directly to a bucket in your own AWS account with scoped IAM credentials. Each Mac uploads straight to the bucket.
Bring Backblaze B2, Wasabi, MinIO or a custom endpoint. Same encrypted-mirror workflow, often at a fraction of the storage cost.
Encrypted APFS or HFS+ drives attached to each Mac, with Time Machine-style hard-link snapshots. No cloud account required.
Hybrid mode runs cloud and external drive backups side by side.
How it works
A standard Jamf workflow: two configuration profiles and one package, all downloaded from your admin console. No build scripts, no custom scripting, no re-enrollment.
Your admin console is ready the moment you sign up. Pick the schedule and the destination — an encrypted external drive, your own S3 bucket, or both.
A settings profile with your server address and enrollment token, a Full Disk Access (PPPC) profile, and the signed, notarized agent package.
Upload both profiles under Configuration Profiles, add the package to a policy that runs at enrollment, and scope it to a Smart Group. Profiles first, package second.
On first launch each Mac swaps the shared enrollment token for its own key and checks in. Inventory sync and the ComputerEnrolled webhook keep the device list current.
Backups run on schedule or on demand, every backup is verified within 24 hours, and a restore is a few clicks in the console or the menu bar.
# Downloads — ready the moment you sign in✓ RestoreGuard-Agent-Enrollment.mobileconfig✓ RestoreGuard-FullDiskAccess-PPPC.mobileconfig✓ RestoreGuard-1.7.3.pkg signed · notarized # Jamf Pro → Configuration Profiles → Upload (both profiles)# Jamf Pro → Policies → install at enrollment → scope: All Managed › MBP-0042 enrolled · checked in 2 s after install› Policy applied · first backup scheduled tonight 22:00
Jamf Pro 10.45+ · Smart Groups · Extension Attributes · Webhooks · PPPC profiles
Integrations
PKG deployment, webhooks, inventory sync and Smart Groups.
Failure alerts, compliance digests and restore notifications.
Backup alerts and reports with per-severity routing.
Your own SMTP server for reports, alerts and invites.
OIDC for Entra ID, Google Workspace, Okta and more.
Pricing
Start with monitoring and local backup, add cloud orchestration when you’re ready, and upgrade to enterprise continuity for compliance-critical fleets.
Tier 1
$3/device/mo · billed yearly
Founding: $1.95 /device/mo, locked for 2 years
Protect a Jamf-managed fleet with local external drive backup and full compliance visibility.
Tier 2
$5/device/mo · billed yearly
Founding: $3.25 /device/mo, locked for 2 years
Add your own cloud destination and run cloud and local backup side by side.
Everything in Tier 1, plus:
Tier 3
$8/device/mo · billed yearly
Founding: $5.20 /device/mo, locked for 2 years
For large enterprises and MSPs that need a dedicated instance and compliance reporting.
Everything in Tier 2, plus:
Founding customers get 35% off any plan, price-locked for two years — limited spots while the founding group is open. Full plan details at restoreguard.io
What’s new
v1.7.3 Latest
Backups now include everything at the top of each user’s home folder, with project folders backed up whole. Drive restores bring back Finder tags, custom icons, extended attributes, ACLs, permissions, hard links and folder dates.
v1.7.1
Every Mac verifies the backup it actually uses once a day. Cloud backups record a restore point on every run, and restores leave device-bound state alone — Apple Account and AirDrop identity, keychains, Platform SSO and Company Portal registration.
v1.7.0
Encrypted cloud backup to your own S3 or S3-compatible bucket, with per-device keys escrowed to the console. The native scan engine cut typical incremental backups from over 30 minutes to under 90 seconds.
v1.6.5
Two-factor authentication, invite-based onboarding, admin / technician / read-only roles, and Slack and Microsoft Teams alerting with per-severity routing.
FAQ
No. RestoreGuard backs up the user — documents, desktop, application data and settings, and everything else they keep at the top of their home folder — and deliberately leaves out everything bound to the device: MDM enrollment and profiles, device certificates, Platform SSO and Company Portal registration, keychains, Apple Account and AirDrop identity. After a restore the Mac stays enrolled and compliant; users sign back into apps that keep their credentials in the login keychain.
The workflow you already use: erase the Mac (or unbox the new one), let Automated Device Enrollment bring it into Jamf, and let your normal policy install the agent. Then pick the device and a restore point in the admin console — or let the user do it from the menu bar app. RestoreGuard closes open apps before it touches settings, and recommends a restart when it finishes.
Entirely in your infrastructure — encrypted APFS or HFS+ drives attached to each Mac, your own Amazon S3 bucket, or S3-compatible storage such as Backblaze B2, Wasabi or MinIO. Cloud backups are encrypted on the device before upload, and every destination uses your credentials and your account. The RestoreGuard server stores metadata only: device health, backup history and snapshot indexes.
RestoreGuard is designed around Jamf Pro but the core backup and restore works without it. Jamf unlocks inventory sync, Smart Group targeting, webhook-based enrollment and enrollment verification before restores, and backup health can be surfaced in Jamf inventory with the Extension Attribute script in the Jamf Integration guide.
The agent requires macOS Sequoia 15 or later on Apple silicon. Intel Macs and earlier macOS versions aren’t supported. The management server is cloud-hosted and maintained by CodeFuzion — there’s nothing to run on your end.
The management server is cloud-hosted and fully managed; self-hosted options are on the roadmap. This refers only to the management server — your backup data always lives in your own infrastructure and never passes through our servers.
Deploy in 30 minutes. Full-featured from day one.
Already a customer? Sign in to the customer portal