diff --git a/docs/concepts/capabilities/_index.md b/docs/concepts/capabilities/_index.md
new file mode 100644
index 0000000..b3bed78
--- /dev/null
+++ b/docs/concepts/capabilities/_index.md
@@ -0,0 +1,21 @@
+---
+title: Capabilities
+description: KubeStash enterprise capabilities for backup, recovery, business continuity, and disaster recovery.
+menu:
+  docs_{{ .version }}:
+    identifier: capabilities
+    name: Capabilities
+    parent: concepts
+    weight: 95
+product_name: kubestash
+menu_name: docs_{{ .version }}
+section_menu_id: concepts
+---
+
+# Capabilities
+
+This section describes the enterprise data protection capabilities of KubeStash:
+online, offline, and end-of-day backup; non-disruptive restoration; business
+continuity and disaster recovery readiness; active-active replication between
+primary and DR sites; seamless source/target switchover; complete transaction
+history with point-in-time recovery; and comprehensive documented procedures.
diff --git a/docs/concepts/capabilities/online-offline-end-of-day-backup/index.md b/docs/concepts/capabilities/online-offline-end-of-day-backup/index.md
new file mode 100644
index 0000000..1fea225
--- /dev/null
+++ b/docs/concepts/capabilities/online-offline-end-of-day-backup/index.md
@@ -0,0 +1,25 @@
+---
+title: Online, Offline, and End-of-Day Backup
+description: Online, offline, and end-of-day backup from one declarative API.
+menu:
+  docs_{{ .version }}:
+    identifier: capabilities-online-offline-end-of-day-backup
+    name: Online, Offline, and End-of-Day Backup
+    parent: capabilities
+    weight: 10
+product_name: kubestash
+menu_name: docs_{{ .version }}
+section_menu_id: concepts
+---
+
+# Online, Offline, and End-of-Day Backup
+
+KubeStash provides comprehensive online, offline, and end-of-day backup capabilities for Kubernetes workloads, databases, and persistent volumes. A single `BackupConfiguration` can run hot online captures throughout the business day for low-RPO recovery, plus an end-of-day backup at a fixed cron expression for daily checkpoints. Snapshots are written to one or more `BackupStorage` targets, including immutable / WORM-compliant tiers such as S3 Object Lock, Azure Blob immutability, GCS bucket lock, and MinIO WORM, which makes the backup effectively offline and tamper-proof even though the storage itself remains online for fast recovery.
+
+## Related concepts
+
+- [BackupConfiguration](../../crds/backupconfiguration/)
+- [BackupBlueprint](../../crds/backupblueprint/)
+- [RestoreSession](../../crds/restoresession/)
+- [RetentionPolicy](../../crds/retentionpolicy/)
+- [BackupVerifier](../../crds/backupverifier/)
diff --git a/docs/concepts/what-is-kubestash/overview/index.md b/docs/concepts/what-is-kubestash/overview/index.md
index 745dac1..b0fadf6 100644
--- a/docs/concepts/what-is-kubestash/overview/index.md
+++ b/docs/concepts/what-is-kubestash/overview/index.md
@@ -37,3 +37,4 @@ section_menu_id: concepts
 | Auto Backup                                                                             | Share backup configuration across workloads using templates. Enable backup for a target application via annotation.                    | 
 | Point-In-Time Recovery (PITR)                                                           | Restore a set of files from a time in the past.                                                                                        |
 | Role Based Access Control (RBAC)                                                        |                                                                                                                                        |
+| Online, Offline, and End-of-Day Backup                                                  | Online (hot) backup, end-of-day (cron) backup, and offline / air-gapped / immutable backup via S3 Object Lock, Azure Blob immutability, GCS bucket lock, MinIO WORM mode, and any S3-compatible immutable tier. |