Disclosed herein are various embodiments, for a fast boot system. An example embodiment operates by determining that one or more programs have been loaded into memory on a boot-up of a device. A snapshot of the memory including the loaded one or more programs is captured. Operations of the device are monitored after the snapshot has been captured. It is determined that a first program of the one or more programs was updated during the monitoring. A restart of the device is detected, wherein the snapshot is loaded into the memory in lieu of loading the one or more programs, and wherein the first program is updated during the restart of the device.