Kasca gives your organization full control

Kasca is an on-premises identity backup solution built for organizations that need full ownership of their data. Deployed on your own infrastructure, it continuously protects your identity platform against accidental deletions, misconfigurations, and security incidents — ready to restore when you need it most.

On-Premises Deployment

Kasca runs entirely within your own infrastructure. No data leaves your environment — ever.

Re-hydration

Hard-deleted objects don't have to stay gone. Re-hydrate recreates them from backup with their original properties intact — some attributes, like passwords, will need to be reconfigured manually.

Restore Without License

If your license lapses, your existing backups remain fully accessible and restorable. Your data is never held hostage.

No Telemetry

No analytics, no phone home, no calls to external servers. The license is offline. The only connections made are to your own identity platforms.

FEATURES

Our primary focus is Microsoft Entra ID, where our coverage is deepest and continuously expanding. In parallel, we are actively building support for Google Workspace — bringing the same on-premises backup approach to organizations running on Google's identity platform.

Coverage is continuously expanding — new object types are added regularly based on customer needs and platform changes.

TOTAL TRANSPARENCY

30 days. That's how long Microsoft retains your audit logs — unless you configure and pay for a Log Analytics workspace. Google gives you six months. When they're gone, they're gone.

Log retention should be your decision, not your provider's. Audit and sign-in logs are collected in near real-time and stored in your own database — for as long as you need. Search, filter, and export to CSV directly. No gaps in your compliance trail.

Screenshot of Kasca.io dashboard showing audit logs with backup scheduling set to every 5 minutes, activities related to device password recovery, key reading, and user updates, all marked successful.

HOW IT WORKS

  1. 1. Deploy Install Kasca as a Docker container on your own infrastructure. No cloud dependencies, no complex setup.

    2. Connect Connect Kasca to your cloud identity platform. Kasca requests only the minimum permissions needed to do its job, it is up to you where you want to give access.

    3. Schedule Configure automated backup schedules to fit your needs. Kasca runs continuously in the background.

    4. Restore Browse, search, and restore backed-up objects at any time — granularly, without raising a support ticket.

DEPLOYMENT

Kasca is distributed as a set of Docker containers — including the application and a PostgreSQL database — deployed on your own infrastructure using Docker Compose. Support for Microsoft SQL Server and a native Windows deployment are currently in development.

Setup involves three straightforward steps: deploying the containers, configuring API permissions based on which identity objects you want Kasca to access, and setting up backup schedules. The required permissions are entirely in your hands — Kasca only reaches as far as you allow it to.

Full deployment documentation is available in our technical wiki.

Pricing

Price per user

0.70€

per month, billed annually

50% off during beta

What’s never counted

  • Service & technical accounts

  • Dedicated admin accounts

  • Guest accounts

What’s always included

  • Full product, no paywalls

  • All features & updates

  • Restore after license lapses

Full details available in our license terms. Volume discounts available on request.