EveryHost: Magento Dedicated Hosting UK
    Bastion: off-site backup

    Bastion: your store, safely off the server

    Every night Bastion takes a complete, encrypted copy of your Magento store and places it in the EveryHost off-site vault: separate storage, in a separate location, outside your server and outside the control panel's own backups.

    In 2026, attackers exploiting a control panel flaw wiped local backups before locking the servers they had taken. A backup that lives on the server it protects is not a backup once someone else holds that server.

    Add Bastion to my planSee pricing

    What went wrong for other hosts this year

    The case for a Magento off-site backup was made in public during 2026, by a control panel flaw rather than by a sales pitch.

    Exploited before anyone knew

    A critical authentication flaw in cPanel and WHM, CVE-2026-41940, was disclosed on 28 April 2026 and rated 9.8 out of 10. It had been exploited in the wild since at least late February. For weeks, no patch existed to apply.

    Servers taken, then held to ransom

    The flaw let unauthenticated attackers take over hosting servers outright. Reported outcomes included thousands of servers encrypted and ransomed, each one carrying many sites.

    The backups went first

    Before encrypting anything, attackers deliberately located and deleted the control panel's local backups, so the usual route to recovery was gone by the time anyone noticed.

    A backup living on the same server as the site is not a backup once an attacker has the server.

    We covered the incident as it unfolded: CVE-2026-41940 and what it meant for Magento backups.

    How Bastion works

    Four steps, every night, watched by people. This is the diagram, not the runbook.

    1. Step 1

      Nightly copy of the whole account

      Files, media, databases, email accounts, DNS, cron jobs and settings. Not a folder of files, the account.

    2. Step 2

      Encrypted before it leaves your server

      AES-256, applied on your server, so the copy is unreadable from the moment it moves. The keys are never stored with the data.

    3. Step 3

      Placed in the EveryHost off-site vault

      Separate storage, in a separate location, outside the control panel and its backup system. Five daily copies are kept.

    4. Step 4

      Watched every run

      An alert if a run fails, and an alert if a run does not start. Engineers see both. Restores are tested rather than assumed.

    What a restore gives you back

    A complete working account on a fresh server, not a folder of files you then have to rebuild a site around. A full restore puts back everything the account contained the night the copy was taken.

    One honest line about afterwards: a freshly restored Magento store needs its caches warmed and its search index rebuilt, so the first page loads are slower than usual. We do that with you as part of the restore, and it settles within the hour for most stores.

    Included in a full restore

    • Website files and media
    • Every database, with its users and settings
    • Email accounts and their mail
    • DNS zones
    • SSL certificates
    • Cron jobs and scheduled tasks
    • Account configuration and settings

    Bastion pricing

    Priced by the gigabytes actually stored in the vault, so your cost only rises as your store grows.

    PlanStoragePer month
    Starter
    		Up to 50 GB£8
    StandardPopular
    		51 to 150 GB£15
    Growth
    		151 to 300 GB£22
    Business
    		301 to 500 GB£32
    Enterprise
    		501 GB to 1 TB£45
    Custom
    		1 TB+Contact us

    Included on every plan

    • Daily automated backups
    • 5-day retention included
    • AES-256 encrypted at rest
    • Encrypted in transit
    • Monitored every run
    • Restore support from our engineers
    Storage measured as actual GB stored after deduplication and compression. Tier reviewed monthly.Download the price card

    Because the five daily copies share everything that has not changed, and the data is compressed before it is stored, real usage is usually well below the raw size of the store. A 150 GB store often lands in a lower tier than expected.

    Where the boundaries are

    • Five days of history means a problem noticed within five days is recoverable. Longer retention is available on request.
    • Bastion holds the copy outside your server and outside the control panel's backup system. No host can promise that a backup survives every possible compromise, and we do not. Our terms say so plainly.
    • We recommend you also keep an independent copy of critical exports, such as your order and customer data, somewhere you control. Bastion makes that a belt-and-braces measure rather than your only defence.

    Bastion questions, answered

    Standard backups are part of every EveryHost plan. Bastion is the separate, encrypted off-site vault and is an optional add-on priced by the storage you actually use, starting at £8 a month. It sits alongside your plan's existing backups rather than replacing them, so you gain a copy that lives outside the server and outside the control panel's own backup system.

    By actual gigabytes stored in the vault after deduplication and compression, not by the raw size of your store. Tiers run from Starter (up to 50 GB, £8 a month) through Standard (51 to 150 GB, £15), Growth (151 to 300 GB, £22), Business (301 to 500 GB, £32) and Enterprise (501 GB to 1 TB, £45), with custom pricing above 1 TB. Because five daily copies share unchanged data, a 150 GB store often lands in a lower tier than expected. We review the tier monthly and tell you before it changes.

    In UK and EU based vault storage, geographically separate from your server. It is independent of the hosting server and independent of the control panel's backup system, which is the point: a problem on the server does not automatically reach the copy.

    Your backup is encrypted on your own server before it leaves, with AES-256, and it stays encrypted in transit and at rest. The keys are never stored with the data. Restores are carried out by EveryHost engineers at your request, and nobody outside EveryHost can read the contents of the vault.

    Open a support ticket or call us. An engineer confirms which of the five daily copies you want, whether you need the whole account or particular items, and the target server. A full restore rebuilds the complete account on a fresh server: files, media, databases, email accounts, DNS, SSL, cron jobs and settings. How long it takes depends on the size of the store, and we tell you the estimate before we start.

    No. The copy runs overnight in your quiet period, only sends what has changed since the previous night, and is throttled so it never competes with shoppers for resources. Most stores see no measurable difference.

    Yes. Five days is the standard retention and covers a problem noticed within the working week. Longer retention is available on request and is priced by the extra storage it uses.

    No. A control panel backup normally lives on or beside the server it protects and is managed by the panel itself. Bastion is separate storage in a separate location, managed by a separate system. That matters because the 2026 control panel attacks specifically deleted the panel's own backups before locking the server, and a copy held outside that system is not caught by the same action.

    Keep a copy of your store outside the server it runs on

    Bastion is switched on by our engineers, usually the same working day. Tell us the store and we will confirm the tier from what it actually uses.

    Add Bastion to my plan 0333 577 6191

    Pair it with Sentinel, which guards the running store while Bastion guards the copy you would restore from.