Doradus Continuum

A backup that has never been restored is a hypothesis.

Most teams find out whether their backups work on the worst possible day. The job said success, the copy exists, and then the restore fails on a corrupt chunk, a key nobody can find, or a catalog that lived only on the appliance that just died.

Continuum treats that as the actual product problem. Backups are written as immutable, content-addressed pack files with a crash-safe commit protocol, so an interrupted backup never leaves a half-written restore point behind. Per-chunk hashing and automatic sample verification prove each restore point is intact, not merely written. And if the appliance itself is gone, you can rebuild the catalog and read every backup directly from the repository using your offline recovery bundle.

Policy-driven protection, without a backup specialist.

The restore is the product. It is built like it.

• A guided restore wizard that walks through every decision a clean recovery needs: placement, datastore, disk format, and network, resolved live from your infrastructure rather than from stale metadata.
• Full-VM restore to a new, safe identity, so a recovery never collides with the machine it came from. Restored network adapters are left disconnected by default.
• Individual disk restore. Attach a recovered virtual disk to an existing VM, or write it out as a standalone VMDK for inspection.
• Live datastore capacity shown in the picker, so you place a restore where it will actually fit.
• Rebuild from storage. Lost the appliance? Reconstruct the catalog and read every backup directly from the repository and your recovery bundle.

Evidence for the people who have to ask.

• Immutable audit trail of who changed protection settings and who performed restores.
• Legal holds and immutability locks that protect restore points from deletion or expiry through a compliance window.
• Integrity verification with per-chunk authentication and automatic sample checks on every backup.
• RPO monitoring that flags at-risk and out-of-window machines before they become a problem.
• Actionable alerts by email, signed webhook, or SIEM and syslog when a backup, snapshot cleanup, repository, or verification operation needs attention.

Safe by default, not by checklist.

Encryption, least-privilege roles, multi-factor authentication, full audit logging, and disconnected NICs on restored VMs are on out of the box. They are not options you have to remember.

• Encryption everywhere. AES-256-GCM for stored data, TLS for the console, and a repository key hierarchy protected by an offline recovery passphrase.
• Customer-held keys. Key material lives on the appliance and in your recovery bundle. Never with a vendor.
• Isolated third-party code. The VMware data path runs in a sandboxed bridge process over a local, credential-checked socket, so third-party disk libraries never share memory with the control plane.
• Least privilege throughout, with deny-by-default authorization, scoped API tokens, and step-up re-verification required before destructive actions.
• No secrets in logs or diagnostics, by design and by test. Support bundles carry correlated job logs, environment facts, and deterministic error codes, with secrets and guest data omitted.

Five roles, one console, and an API for the rest.

From OVA to protected, in five steps.

• 1. Deploy. Import a single OVA and complete the first-run wizard: administrator account, network, and time.
• 2. Connect. Point Continuum at a vCenter or standalone ESXi host. It pins the host certificate on first trust and reads your inventory.
• 3. Attach a repository. Point it at an NFS export on your Synology or standards-compatible NAS or SAN. It is initialized with encryption keys that stay under your control, and you receive an offline recovery bundle.
• 4. Create backups. Pick a VM, a repository, a schedule, and how long to keep restore points. Continuum handles snapshots, transport, deduplication, encryption, verification, and cleanup.
• 5. Recover. Restore any point through the guided wizard, a whole VM to a safe new identity or a single disk, with confidence that it has been verified end to end.

What it needs from you.

Three people, three different asks.

Continuum protects any VMware estate, which is why it sits a little apart from the rest of this catalog. On a gaming property it is the same infrastructure our services practice already runs: casino management servers, surveillance recording infrastructure, domain controllers, and the back-of-house virtual machines a floor depends on. The product itself makes no assumptions about the industry it protects.