Skip to main content

Fully Managed XbackBone
as a Service

Deploy XbackBone as a fully managed service starting at €9/mo. Get automated backups, SSL, updates, support and monitoring included.

XbackBone is an open-source self-hosted file manager and instant-sharing backend — combining the convenience of Imgur and Gyazo with the privacy and control of self-hosted infrastructure. Teams use it for screenshot sharing, video clip hosting, and shareable file URLs on their own domain.

Free 7-day trial  99.9% Uptime SLA  No credit card  Cancel anytime

Free 7-day trial  99.9% Uptime SLA
No credit card  Cancel anytime

XbackBone

XbackBone

STARTING AT

€9/month
Automated Backups
Monitoring
Automated Updates
Auto SSL

USAGE

Unlimited
Human Support
Custom Domains
Terminal Access
File Manager Access
Deploy in your region 21 locations worldwide
GermanyFinlandNetherlandsUKSwedenUnited StatesCanadaSingaporeJapanAustraliaBrazilSouth Africa+9 more →
XbackBone Preview Image

ABOUT THE SOFTWARE

What is XbackBone

XbackBone is an open-source file manager built around instant uploads from desktop screenshot tools. ShareX talks to it natively, Flameshot and Ksnip through a custom-uploader profile, and the upload returns a shareable URL on your own domain instead of a third party's.

The project is licensed AGPL-3.0 and maintained by Sergio Brighenti — handle @SergiX44 on GitHub. The runtime is PHP on the Slim 4 framework, with a SQLite database by default and MySQL recommended at multi-user scale. Storage is pluggable across seven backends: local filesystem, S3-compatible (with configurable endpoints for Minio, Wasabi, Backblaze B2, IDrive E2, and Scaleway), Google Cloud Storage, Azure Blob, Dropbox API, and FTP/FTPS.

The Docker image footprint is around 43 MB and the minimum memory profile is 256 MB. The repository carries 1,082 stars, 92 forks, and an active Weblate translation community across roughly two dozen languages. XbackBone is deployed by indie operators, design agencies, MSPs, journalists, and open-source maintainers — anyone who wants shareable URLs on their own domain rather than under a third-party vendor's control. The 990-commit history shows steady, single-maintainer development with releases roughly twice per year.

FEATURES

What XbackBone does

The application surface is built around three actions: capture from a desktop tool, upload over a token-authenticated endpoint, and share a clean URL. Everything else — user accounts, storage backends, branding, embeds — exists to make those three actions production-grade.

ShareX, Flameshot, and Ksnip integration

Profile generates a .sxcu client config that ShareX imports natively on Windows. Flameshot and Ksnip take the same upload endpoint via a custom-uploader template, so Linux and macOS users join the same pool.

Seven storage backends

Local filesystem, S3-compatible (with endpoint override for Minio, Wasabi, Backblaze B2, IDrive E2, Scaleway), Google Cloud Storage, Azure Blob, Dropbox API, and FTP or FTPS. Swap the backend without rewriting share URLs.

Public and private upload visibility

Each upload carries a visibility flag. Public uploads return crawlable URLs with Open Graph previews; private uploads stay behind the user's session. Toggle from the dashboard or via the upload API.

Rich media previews

Images, video clips, audio, plain text, and most code formats render directly in the browser at the share URL. No download required for the recipient — the link opens to a clean preview with copy controls.

Custom branded share URLs

Every upload returns a URL on the subdomain you bring — share.yourcompany.com rather than a third-party image-host. Open Graph metadata is generated server-side so social and chat embeds render correctly.

LDAP and LDAPS authentication

Bind against an existing directory — Active Directory, Authentik, Keycloak — with StartTLS support. Local accounts work alongside LDAP for contractors and external collaborators who aren't in the directory.

Filename code prefix

Release 3.8.0 added a code parameter on the upload endpoint that prefixes the generated filename. MSPs embed PSA ticket IDs, engineering teams embed Linear or Jira keys, journalists embed assignment slugs.

Discord, Slack, and Telegram embeds

Open Graph and Twitter Card metadata is generated for every public upload, so pasting a share URL into Discord, Slack, or Telegram unfurls a preview rather than a bare link. Cloudflare bot-mode tuned to allow unfurl crawlers.

WHAT'S ALWAYS INCLUDED

Every app. Fully managed.
Nothing extra to pay for.

Every app you deploy includes the full managed service — security, backups, updates, and support from day one.

Automatic updates and patches

Apps run the latest stable version. Security patches applied silently, with rollback if needed.

Daily off-site backups

Multiple daily backups in redundant off-site locations. One-click restore if anything goes wrong.

24/7 uptime monitoring

Continuous monitoring with instant alerting. We respond before you notice.

SSL, firewall, DDoS protection

Auto-renewing SSL, hardened firewall rules, DDoS mitigation on every deployment.

Performance and scaling

We monitor resource usage continuously. When your app needs more headroom, we flag it and upgrade with your explicit approval.

Dedicated engineering support

Real engineers on chat. DNS, SMTP & migration help. All included in €9.

WHY MANAGED

Why teams pick managed XbackBone

Imgur wiped anonymous and not-safe-for-work uploads in May 2023. Dropbox capped its "as much storage as needed" Advanced plan in August 2023. Lightshot's July 2024 release broke screen capture on Windows 11 with no fix shipped since. Teams running ShareX or Flameshot through any of these three are looking for a permanent backend they actually control.

The operational work behind running XbackBone in production goes well beyond running the install script. The web server's client_max_body_size must match PHP's upload_max_filesize and post_max_size, and Cloudflare adds a third upload-size limit at the proxy edge. Raise only one and the next layer drops the request with a silent 413 error on any clip over the cap — the most-filed issue in the project's tracker.

Tokens don't rotate automatically when a laptop is lost, so reissuing one breaks every .sxcu config on the team's desktops. The default SQLite database is fine for a single user but contends on concurrent uploads; moving to MySQL is a separate migration with its own footguns. Certificates need renewing on the custom subdomain or every inlined share URL breaks the next morning. Storage fills fast — a four-minute 1080p screen recording is 80 to 300 MB — and there is no built-in eviction policy.

REVIEWS

Hear from customers ​like you​​​​​​​

Successful businesses and professionals around the world rely on DANIAN every day

USE CASES

Three teams who run XbackBone on DANIAN

These are representative team types we set up most often. Each starts with the same flat €9 plan.

8-PERSON DESIGN AGENCY

Replacing per-seat cloud storage for client mockup delivery

Deployed in the Germany region. Eight designers and back-end devs share one instance with LDAP bound to the team's existing Authentik directory. ShareX on Windows, Flameshot on Linux, Ksnip on macOS — all upload to share.agency.com with a managed certificate. S3-compatible storage in the same region for the heavy mockup PDFs. Replaces $1,151 per year of per-seat cloud-storage spend across eight users with one flat €9 instance.

4-PERSON B2B SAAS

Permanent bug-report archive after the Imgur purge

Deployed in the Spain region. Four founders and engineers use Flameshot to capture bugs and reproducers, with the 3.8.0 code prefix embedding the Linear ticket ID into every share URL. Default SQLite is fine at this scale; current storage volume is under 5 GB. Integrated with FreeScout for customer-screenshot replies. Replaced a founder's anonymous Imgur album that was wiped in the May 2023 not-safe-for-work and anonymous-content purge.

SOLO-MSP PLUS COMMUNITY ADMIN

PSA ticket evidence with embedded ticket IDs

Deployed in the US region. One admin running tickets for 18 SMB clients, plus a side community Discord with clip hosting. S3-compatible storage backend on a low-cost external bucket via the endpoint override. Flameshot captures before-and-after evidence with the PSA ticket ID prefixed via the 3.8.0 code parameter; the share URL is the audit reference in the ticket resolution note. Roughly 24,000 evidence images per year on one €9 instance.

COMPARISON

Four ways to run XbackBone

Four honest paths, with the math shown. The proprietary alternative scales linearly per seat. The do-it-yourself paths scale in operational time rather than dollars. DANIAN's flat €9 holds at one user, five users, or fifty users on the same instance.

 PATHCOST PER MONTHSETUPONGOING OPSNOTES
Dropbox Plus or Business Standard
Proprietary SaaS
$11.99 / $59.95 / $119.90 at 1, 5, and 10 users on Plus.

$54 / $90 / $180 at 3, 5, and 10 users on Business Standard (3-user minimum).
Account signupNoneVendor-locked storage. No XbackBone-style ShareX uploader. Linear scaling per seat. Storage cap revisited by Dropbox in 2023.
Self-host on a VPS
DIY
$24/mo production-class VPS + $5/mo object-storage backup + $15/mo monitoring = $44/mo infrastructure, plus €60–240/mo in ongoing operator time.5–10 hours initial1–2 hours/monthYou own the three-layer upload-size tune. Database migration to MySQL beyond ~25 users. Cert renewals on you. Effective total: €100–280/mo.
Home server
Synology DS923+ or HP ProLiant ML30 Gen10
€18–55/mo hardware amortized over 36 months + €17–32/mo electricity + €40–80/mo business internet with static IP + €10–20/mo off-site backup + €120–480/mo operator time.1–2 days plus hardware lead time2–4 hours/monthOne-time hardware investment, ongoing power and bandwidth bills, no on-call when something breaks at 2am. Effective total: €210–667/mo.
DANIAN Managed XbackBone€9/month flat at 1, 5, 10, or 50 users on the same instance.Trial activated from the dashboard0 hoursPatching, monitoring, daily off-site backups, SSL renewal, custom domain, chat support, and the 256 MB three-layer upload tune all included.

BY INDUSTRY

XbackBone for specific industries

Five industries place specific demands on a screenshot host: client NDAs in agencies, evidence chains in MSPs, internal data-handling rules in software companies, source-protection ethics in journalism, contribution-guide expectations in open-source projects. Each block below describes the workflow, the configuration, and the volume.

Client NDAs typically forbid posting unreleased mockups, brand assets, or work-in-progress to third-party image hosts. Agencies use managed XbackBone as the brand-controlled delivery layer for everything that gets shared with clients during a project.

The DANIAN configuration ships a custom subdomain with auto-renewing SSL, so share.agency.com works from the first upload.

The workflow: PrintScreen via ShareX or region-select via Ksnip, instant upload to the agency instance, paste the URL into Basecamp, Notion, or a client Slack thread.

A 25-client agency running roughly twelve mockup rounds per project at four screenshots each produces around 1,200 brand-controlled URLs per year on one €9 instance, with no per-seat math as the team grows from 5 to 15 designers.
MSPs and managed-service desks use XbackBone for ticket-evidence chains tied to PSA platforms like HaloPSA, ConnectWise PSA, or Autotask. The 3.8.0 filename code prefix lets a technician embed the PSA ticket ID into every uploaded screenshot, so the share URL itself carries the evidence reference.

The DANIAN configuration enables LDAP bind to the MSP's directory and configures the S3 backend if the evidence volume warrants external storage.

The workflow: open the ticket, remediate, capture before-and-after with Flameshot prefixed by the ticket number, paste both URLs into the resolution note.

A two-engineer MSP closing 800 to 1,200 tickets per month at two screenshots per ticket generates roughly 24,000 evidence images per year on a single managed instance.
Engineering and customer-success teams use XbackBone as the internal screenshot host for Linear, Jira, FreeScout, and Slack — where an internal data-handling AUP typically forbids re-uploading customer screens to third-party image hosts like Imgur or Gyazo.

The DANIAN configuration binds LDAP to Authentik or Keycloak so engineering accounts roll over automatically with the rest of the SSO stack.

The workflow: a support engineer captures the customer's reproducer with Flameshot, uploads via the custom-uploader profile, drops the resulting URL into the Linear ticket with the ticket ID embedded via the 3.8.0 code prefix.

A 30-engineer team generates roughly 7,800 internal screenshots per year on one €9 instance, with no per-seat cost.
Reporters and independent publishers use managed XbackBone as a permanent evidence archive for source material that disappears from the original platform. SPJ source-protection ethics rule out hosting source material on third-party image hosts.

The DANIAN configuration runs the instance in a chosen region with daily off-site backups, so deleted tweets, removed Discord posts, and pulled corporate pages remain referenceable years later.

The workflow: a reporter screenshots the source via Ksnip, the upload returns a permalink on the publication's own domain, the URL goes into a Hypothesis annotation, a fact-check footnote, or a story footnote.

A five-reporter newsroom typically generates 50 to 150 evidence captures per week, all retained under the publication's own retention rather than an upstream vendor's content policy.
Open-source projects use managed XbackBone as the screenshot host for contributor bug reports and pull-request reviews, where reproducible-bug-report contribution guides — Mozilla, GNOME, KDE, large self-hosted projects — typically point contributors at a project-controlled image host rather than Imgur or Lightshot.

The DANIAN configuration enables public uploads with per-upload private toggles for contributor screenshots that contain personal data.

The workflow: a contributor captures the bug with Flameshot, uploads via the project's shared XbackBone, embeds the URL in the GitHub or GitLab issue.

A 2,000-contributor project typically receives 30 to 80 visual bug reports per month, all on one shared €9 instance with backups intact across the project's release cycle.

FAQ

Frequently asked questions

Everything teams ask before signing up — answered straight, without sales speak.

Three groups: technical setup, migration, and how DANIAN works as a service.

01

Technical and configuration

Open XbackBone, go to Profile, then Client Configuration, then ShareX. Download the generated .sxcu file and double-click it on Windows — ShareX imports the destination automatically and PrintScreen now uploads to your managed instance. We push a pre-built .sxcu template into your dashboard so the first upload is one click after the trial activates.
Because three limits stack. PHP's post_max_size and upload_max_filesize, the web server's client_max_body_size, and — if you proxy through Cloudflare — the Network "Maximum Upload Size" control at the edge. Raise only one and the next layer drops the request with a silent 413. We tune all three to 256 MB by default on the managed instance, which covers screen recordings up to roughly four minutes at 1080p.
Not natively. The project supports local accounts and LDAP or LDAPS, including StartTLS. For OIDC against Google, Authentik, Keycloak, or Microsoft Entra, the supported pattern is an oauth2-proxy sidecar or an Authentik outpost in front of the upload route. We run the LDAP path in production and can stand up the OIDC sidecar for teams that need it; the project has an open feature request for native OIDC.
Yes, when the base URL is served over HTTPS and bot crawlers reach the Open Graph endpoint. Cloudflare's default bot-fight mode blocks the unfurl crawler, which is the most common reason previews break. We disable bot-fight on the share routes and confirm the OG image, title, and description render in the three clients before handing off the dashboard.
Release 3.8.0 added a code parameter to the upload endpoint that prefixes the generated filename. ShareX and Flameshot custom-uploader templates can pass a ticket ID, project key, or session ID into the code field, and the resulting share URL carries that identifier. MSPs use it for PSA ticket evidence; engineering teams use it to tag Linear and Jira reproducers without renaming the upload by hand.
Not natively. XbackBone has an orphaned-file cleanup in the admin UI but no built-in TTL or quota eviction. The supported pattern is a cron job that deletes records older than a chosen window. We can configure this for the managed instance against a rule the team picks, typically 12 or 24 months for ticket evidence and 6 months for ephemeral screen captures.

02

Migration and onboarding

We can activate your app on your own custom domain/subdomain. Examples: mydomain.com, anyword.mydomain.com.
Or, on our randomized free subdomain. Example: 963.apps.danian.cloud
If you wish to use a custom domain/subdomain, select that option when ordering your app (or notify us later). We will send you the required DNS records and if needed, our tech team will modify them for you.
21 datacenter locations across six continents. You choose the region at provisioning. Application data sits in the region you choose; pick whichever is closest to your users or matches your data-residency preference.
Yes. Request a region migration from the dashboard and we run the move in the background. The system emails you when the migration completes; total transfer time depends on data volume but typical instances finish in a few hours. There is no extra charge for a region change.
Yes. Full data export is available at any time, in a portable format you can bring to any infrastructure.
XbackBone does not have a one-click Imgur import. For accounts that still have the originals locally, the supported migration is to bulk-upload via the web UI or a scripted upload against the API. Imgur URLs cannot be preserved one-to-one because the original short codes are vendor-owned. We scope the migration on chat once the export size and the URL-rewrite needs are clear.
You don't, in the strict sense — Dropbox shared links resolve only against Dropbox's domain. The migration pattern is to re-share from the new XbackBone instance and update references in the systems that still link to the old URLs.
Yes. XbackBone supports LDAP, LDAPS, and StartTLS, and binds against the same directory you already use for the rest of the team. The configuration takes a bind DN, a user search base, and an attribute mapping for username and email.

03

Billing, support, and platform

€9 covers everything we do for that app: hardware in the region you choose, daily off-site backups with one-click restore, automatic security patches and version upgrades, 24/7 monitoring, SSL and firewall, and engineering support on Email/LiveChat. There are no setup fees or hidden line items. For more info see our Pricing page.
If you decide to continue, we charge €9/app/month from day 8. If you don't, the trial ends and you can export your data. No card is required for the trial, and we never auto-charge you without explicit consent.
No. The €9/month is flat regardless of how many users log into your app. Add 5 users or 50; the price doesn't change.
24/7 Live chat and email support, both staffed by engineers who run the systems. We handle DNS configuration, SMTP setup, app integrations, performance tuning, troubleshooting, and migration help. Response time is typically under an hour. There is no tier system — every customer gets the same support.
Yes. Cancel from the dashboard. We don't charge a cancellation fee, we don't lock data, and we will export your data to you on request before deletion. data to you on request before deletion.
Every customer instance is backed up daily to a separate region from the primary. We test restores. You can request a restore at any backup point within the retention window — usually 7 days for daily backups.
Your application data sits in the region you choose at provisioning — 21 datacenter locations across six continents. Account-level data (billing, account email, support ticket history) is processed centrally. Application data region is picked by you, per app.
99.9% uptime SLA on every app, every tenant. Service credits are documented at danian.co/service-level-agreement. The status page is located at status.danian.co.
When your tenant approaches the resource ceiling — the base tier holds 1 vCPU/RAM, 30 GB storage — we notify you. Resource upgrades happen with your explicit consent; we will not upgrade your tenant or charge you without it.
We wait. We don't suspend the app or delete your data on the first failed charge. We email you, you fix the card on file, and we continue.
Invoices can be downloaded from the billing dashboard in PDF the day each charge succeeds. EU VAT is added where applicable and the VAT-reverse-charge regime applies for VAT-registered businesses with a valid number.
150+ open-source apps across automation, team chat, file sync, analytics, AI, password management, email marketing, dev tools, project management, smart home, CMS, and federated social. See the full catalog →
Yes. Every instance comes with a web-based terminal and a file manager in your DANIAN management dashboard. Useful for managing your data and customizations.
Resources scale with your usage. If your app needs more vCPU, RAM, or storage, we add it — and we ask first before any change to your plan. €9 is the floor; resource-heavy workloads may price higher, but you'll always know in advance.
Yes. We have both a Partner program and an Affiliate program available. Anybody can sign up.
No contract. No minimum commitment. Cancel anytime from the dashboard with one click. The 7-day free trial requires no credit card. After the trial converts to paid, you can still cancel at any month without notice or penalty.

DEPLOY IN YOUR REGION

21 datacenter locations on six continents

Pick the region closest to your users.

United States, Germany, Finland, Singapore, Australia, Brazil, Canada, Netherlands, UK, Spain, Italy, France, Sweden, Malaysia, India, Japan, Mexico, Poland, South Korea, Chile, South Africa and more coming soon

Global Reach Map

Try managed XbackBone for 7 days

No card. Cancel from the dashboard.