How BackupWitness works

Every few minutes BackupWitness lists the objects under one prefix of your bucket (S3 ListObjectsV2) and checks the newest one: is it fresh, is it a normal size, are there enough of them. When the answer changes, you get an alert. It never downloads or reads your backups.

This is proof that a backup landed, not proof that it restores.

Create a key for your provider

Give BackupWitness the narrowest key your provider allows. Pick your storage:

• AWS S3List-only key
• Cloudflare R2Read-only key (no list-only option)
• Backblaze B2List-only key
• WasabiList-only key
• Hetzner Object StorageProject-wide key, narrow with a policy