diff --git a/web/app.py b/web/app.py
index fdd4304..aa3ab88 100644
--- a/web/app.py
+++ b/web/app.py
@@ -785,6 +785,44 @@ def valid_vm_name(name: str) -> bool:
     return bool(re.fullmatch(r"[a-zA-Z0-9][a-zA-Z0-9_.-]{1,62}", name or ""))
 
 
+def valid_snapshot_name(name: str) -> bool:
+    return bool(re.fullmatch(r"[a-zA-Z0-9][a-zA-Z0-9_.-]{0,62}", name or ""))
+
+
+def list_vm_snapshots(name: str) -> list[dict[str, str]]:
+    result = run_cmd(["virsh", "snapshot-list", name], timeout=20)
+    snapshots = []
+    if not result["ok"]:
+        return snapshots
+    for line in result["stdout"].splitlines()[2:]:
+        parts = line.strip().split(None, 1)
+        if len(parts) != 2:
+            continue
+        rest = parts[1].strip()
+        state = rest.split()[-1] if rest else ""
+        created = rest[: -len(state)].strip() if state else rest
+        snapshots.append({"name": parts[0], "created": created, "state": state, "state_css": "ok" if state == "running" else "warn"})
+    return snapshots
+
+
+def snapshot_action(vm_name: str, action: str, snapshot_name: str, description: str = "") -> tuple[bool, str]:
+    if not valid_snapshot_name(snapshot_name):
+        return False, "Имя снапшота: латиница, цифры, точка, дефис, подчёркивание, до 63 символов."
+    if action == "create":
+        cmd = ["virsh", "snapshot-create-as", vm_name, snapshot_name]
+        if description:
+            cmd += ["--description", description[:200]]
+        result = run_cmd(cmd, timeout=600)
+        return (True, f"Снапшот {snapshot_name} создан") if result["ok"] else (False, result["stderr"][:300] or "virsh snapshot-create-as завершился с ошибкой")
+    if action == "revert":
+        result = run_cmd(["virsh", "snapshot-revert", vm_name, snapshot_name], timeout=600)
+        return (True, f"VM откачена к снапшоту {snapshot_name}") if result["ok"] else (False, result["stderr"][:300] or "virsh snapshot-revert завершился с ошибкой")
+    if action == "delete":
+        result = run_cmd(["virsh", "snapshot-delete", vm_name, snapshot_name], timeout=300)
+        return (True, f"Снапшот {snapshot_name} удалён") if result["ok"] else (False, result["stderr"][:300] or "virsh snapshot-delete завершился с ошибкой")
+    return False, "Неизвестное действие со снапшотом."
+
+
 VM_TEMPLATES_FILE = Path("/var/lib/virtuality/config/vm_templates.json")
 VM_TEMPLATES_LOCK = threading.Lock()
 
@@ -1983,7 +2021,7 @@ def vm_detail_page(request: Request, name: str):
         return auth_redirect
     if not valid_vm_name(name) or not vm_exists(name):
         return RedirectResponse(url="/", status_code=303)
-    return templates.TemplateResponse("vm_detail.html", {"request": request, "app_name": APP_NAME, "user": AUTH_USER, "vm": vm_details(name), "host_ip": system_summary()["ip"], "boot_options": vm_boot_order_options(), "current_boot_order": current_vm_boot_order(name), "boot_message": request.query_params.get("boot_message", ""), "boot_error": request.query_params.get("boot_error", ""), "resource_settings": vm_resource_settings(name), "resource_message": request.query_params.get("resource_message", ""), "resource_error": request.query_params.get("resource_error", ""), "isos": list_iso_files(), "current_iso": current_vm_iso(name), "iso_message": request.query_params.get("iso_message", ""), "iso_error": request.query_params.get("iso_error", ""), "is_template": is_vm_template(name), "clone_message": request.query_params.get("clone_message", ""), "clone_error": request.query_params.get("clone_error", "")})
+    return templates.TemplateResponse("vm_detail.html", {"request": request, "app_name": APP_NAME, "user": AUTH_USER, "vm": vm_details(name), "host_ip": system_summary()["ip"], "boot_options": vm_boot_order_options(), "current_boot_order": current_vm_boot_order(name), "boot_message": request.query_params.get("boot_message", ""), "boot_error": request.query_params.get("boot_error", ""), "resource_settings": vm_resource_settings(name), "resource_message": request.query_params.get("resource_message", ""), "resource_error": request.query_params.get("resource_error", ""), "isos": list_iso_files(), "current_iso": current_vm_iso(name), "iso_message": request.query_params.get("iso_message", ""), "iso_error": request.query_params.get("iso_error", ""), "is_template": is_vm_template(name), "clone_message": request.query_params.get("clone_message", ""), "clone_error": request.query_params.get("clone_error", ""), "snapshots": list_vm_snapshots(name), "snap_message": request.query_params.get("snap_message", ""), "snap_error": request.query_params.get("snap_error", "")})
 
 
 @app.post("/vm/{name}/resources")
@@ -2030,6 +2068,20 @@ def vm_iso_unmount_apply(request: Request, name: str):
     return RedirectResponse(url=f"/vm/{name}?iso_error={message}", status_code=303)
 
 
+@app.post("/vm/{name}/snapshot/{snap_action}")
+def vm_snapshot_apply(request: Request, name: str, snap_action: str, snapshot_name: str = Form(...), description: str = Form("")):
+    auth_redirect = require_auth(request)
+    if auth_redirect:
+        return auth_redirect
+    if not valid_vm_name(name) or not vm_exists(name):
+        return RedirectResponse(url="/", status_code=303)
+    if snap_action not in ("create", "revert", "delete"):
+        return JSONResponse({"ok": False, "error": "Unsupported snapshot action"}, status_code=400)
+    ok, message = snapshot_action(name, snap_action, snapshot_name.strip(), description.strip())
+    param = "snap_message" if ok else "snap_error"
+    return RedirectResponse(url=f"/vm/{name}?{param}={message}", status_code=303)
+
+
 @app.post("/vm/{name}/clone")
 def vm_clone(request: Request, name: str, new_name: str = Form(...)):
     auth_redirect = require_auth(request)
diff --git a/web/templates/vm_detail.html b/web/templates/vm_detail.html
index dc77d4f..df99654 100644
--- a/web/templates/vm_detail.html
+++ b/web/templates/vm_detail.html
@@ -77,6 +77,8 @@
       {% if boot_error %}<div class="alert danger">{{ boot_error }}</div>{% endif %}
       {% if clone_message %}<div class="alert success">{{ clone_message }}</div>{% endif %}
       {% if clone_error %}<div class="alert danger">{{ clone_error }}</div>{% endif %}
+      {% if snap_message %}<div class="alert success">{{ snap_message }}</div>{% endif %}
+      {% if snap_error %}<div class="alert danger">{{ snap_error }}</div>{% endif %}
       {% if is_template %}<div class="alert warn">Эта VM помечена как шаблон: запуск заблокирован. Клонируй её для создания новых машин.</div>{% endif %}
 
       <section class="grid vm-four-grid">
@@ -247,6 +249,53 @@
         </article>
       </section>
 
+      <section class="card">
+        <div class="card-head">
+          <h2>Снапшоты</h2>
+          <span class="pill">{{ snapshots|length }} шт.</span>
+        </div>
+        <form method="post" action="/vm/{{ vm.name }}/snapshot/create" class="form-grid">
+          <div class="form-row">
+            <label>
+              <span>Имя снапшота</span>
+              <input type="text" name="snapshot_name" placeholder="before-update" required>
+            </label>
+            <label>
+              <span>Комментарий (необязательно)</span>
+              <input type="text" name="description" placeholder="перед обновлением nginx">
+            </label>
+          </div>
+          <button class="primary">Создать снапшот</button>
+        </form>
+        <table>
+          <thead>
+            <tr><th>Имя</th><th>Создан</th><th>Состояние VM</th><th>Действия</th></tr>
+          </thead>
+          <tbody>
+          {% for snap in snapshots %}
+            <tr>
+              <td class="strong">{{ snap.name }}</td>
+              <td>{{ snap.created }}</td>
+              <td><span class="status {{ snap.state_css }}">{{ snap.state }}</span></td>
+              <td class="actions">
+                <form method="post" action="/vm/{{ vm.name }}/snapshot/revert" onsubmit="return confirm('Откатить VM {{ vm.name }} к снапшоту {{ snap.name }}? Текущее состояние диска будет потеряно.');">
+                  <input type="hidden" name="snapshot_name" value="{{ snap.name }}">
+                  <button class="ghost">Откатиться</button>
+                </form>
+                <form method="post" action="/vm/{{ vm.name }}/snapshot/delete" onsubmit="return confirm('Удалить снапшот {{ snap.name }}?');">
+                  <input type="hidden" name="snapshot_name" value="{{ snap.name }}">
+                  <button class="danger">Удалить</button>
+                </form>
+              </td>
+            </tr>
+          {% else %}
+            <tr><td colspan="4" class="muted">Снапшотов пока нет. Создай снапшот перед рискованными изменениями — к нему можно будет откатиться одной кнопкой.</td></tr>
+          {% endfor %}
+          </tbody>
+        </table>
+        <p class="muted small-note">Снапшот работающей VM сохраняет и память — VM продолжит работу с того же места после отката. Снапшот выключенной VM сохраняет только диск.</p>
+      </section>
+
       <section class="grid two">
         <article class="card">
           <div class="card-head">