Real-time protection
Stop the deletion before it happens.
Safety Guard blocks destructive operations on your critical data — live.
A backup saves you after a disaster. Safety Guard prevents the disaster: it intercepts destructive file operations on your protected paths at the kernel decision point, before a single byte is lost.
- Kernel-level enforcement
- Zero performance impact
- Nothing leaves your server
Safety Guard in action
A destructive command reaches your protected data — and stops at the kernel.
- unlink /var/lib/postgresql Blocked
- rename /etc/nginx/nginx.conf Observed
- rmdir /srv/app/uploads Blocked
- unlink /data/backups Blocked
How it works
- 1 Pick the paths that must never be deleted — databases, uploads, config, backups.
- 2 The agent enforces the rule at the kernel decision point, on every process.
- 3 Any destructive operation on a protected path is blocked before it runs.
- 4 You get the event in your dashboard, in real time, with full context.
One rule, applied everywhere on the server — no matter which process asks.
Two modes, your call
Block
The destructive operation is denied at the kernel and never executes. The process gets a permission error, your data stays intact.
Observe
The operation is allowed but recorded. Perfect to audit what would be blocked before you switch a path to full enforcement.
What it stops
- Accidental rm -rf on the wrong directory
- A migration or deploy script gone wrong
- Mass deletion from a rogue or compromised process
- A teammate wiping the wrong folder over SSH
Safety Guard completes your backups — it doesn't replace them.
Defense in depth: Safety Guard stops the deletion, encrypted backups restore anything that still slips through. You want both.
Requirements
- Available from the Pro plan.
- Compatible Linux servers — capability is detected automatically by the agent.
- No extra setup: it ships with the agent you already run.