Loading

Cyber vaulting made easy with Cohesity FortKnox

Cohesity FortKnox delivers a secure, tamper-proof vault that protects a copy of your critical data and stores it in an immutable, encrypted, and isolated environment. 

Fortknox Hero
Overview UI image
OVERVIEW

Cohesity FortKnox: The immutable copy for when everything else fails

Attackers go for your backups first. Cohesity REDLab has tested 53 ransomware families and observed attempts to disable recovery operations, tamper with backup configurations, and interrupt backup communications. 

FortKnox places an immutable copy of your crown jewels in a logically air-gapped cyber vault, outside your backup environment. 

Immutability, retention controls, and dedicated access controls, help preserve the copy you may need when everything else fails. 

How it works

How FortKnox keeps your data safe and ready to recover 

How it works panel
Vault

A copy of your data moves into a purpose-built vault outside your backup environment. The vault runs under its own administrative control, separate from the controls you use every day. 

Recover

When recovery is needed, MFA, role-based access, and quorum approval govern critical recovery actions. Recover selected data to an original or alternate location, or stage it in an isolated clean room. 

Scan

Integrated anomaly detection and threat scanning confirm data cleanliness before restore. 

Validate

Recover vaulted snapshots and Digital Jump Bag™ assets into an isolated clean room. Investigate and validate before you touch production. 

Case study: Blaine County School District

“After the cyberattack, we recovered critical systems from Cohesity FortKnox in 48 hours and resumed normal operations just six days later–before students returned from holiday break. We had no data loss and paid no ransom."

Why organizations choose FortKnox  

When a cyberattack compromises your backup environment, FortKnox is the copy still standing. It protects an immutable recovery copy outside your backup environment with separate access controls, helping keep it out of reach of attackers and available when you need to recover.

Security and resilience

An immutable, air-gapped copy keeps data safe from ransomware, insiders, and human error even when your backup environment is compromised. 

Clean room recovery

Recover vaulted snapshots and Digital Jump Bag (TM) assets into an isolated environment before restoring to production.

Compliance and confidence

Immutable logs and retention locks simplify compliance with frameworks like NIST, ISO 27040, and DORA.

Flexible deployment for every environment 

Choose the FortKnox model that fits your organization’s security and sovereignty needs wherever your data resides. 

banner
Enterprise scale. Cloud simplicity. 

FortKnox SaaS is a fully managed cyber vault in a Cohesity-managed cloud on AWS, Azure, and GCP. It protects DataProtect and NetBackup data, and provides a single pane of glass view. 

Purpose built for complete control  

FortKnox self-managed puts the vault in your hands, running on your own infrastructure. You maintain greater control over your data and environment. 

Your data, your choice 

Each option gives you the same foundation: immutable protection, maintained off-site mandatory MFA and quorum approved restores wherever your data resides. 

5 steps

The Cohesity 5 steps of cyber resilience©

Modernize your approach and partner with Cohesity to strengthen your cyber response and recovery.

Related products and solutions

RecoveryAgent

Orchestrate and rehearse cyber recovery workflows to help your team respond and recover faster after a cyberattack. 

Clean room

Establish a Minimum Viable Recovery Environment (MVRE) to investigate cyberattacks, accelerating recovery. 

Threat protection

Detect and investigate threats to reduce your risk from destructive cyberattacks. Industry-leading scanning powered by Google Threat Intelligence and Sophos.  

Simulator
Cyber Incident Response Simulator

See how you’d respond under pressure

Think you’re ready for a ransomware attack? Step into our hands-on, gamified simulator and put your incident response skills to the test.

Commonly asked questions about cyber vaulting

A cyber vault is an immutable, air-gapped copy of data, kept apart from your primary and backup environments with its own credentials, encryption keys, and storage.  

It has many security features to prevent access to and tampering with vault data to preserve a higher-trust copy from destructive cyber incidents. 

Backup supports routine recovery from deletion, corruption, and operational incidents. A cyber vault protects an additional copy for the scenario the backup environment itself cannot be trusted. 

Start with your Digital Jump Bag™: the response tools your team needs in the first hours of an incident. Add the systems that make up your Minimum Viable Company, so you can restart the business within days. 

Then add the records you must keep for years. A vault is your last line of defense. It doesn’t replace your backups.

Cyber vaulting helps provide a clean “gold” copy of data for recovery in case of data loss or a security breach, such as ransomware, that compromises the primary data. It may also help secure cybersecurity insurance and fulfill governance and compliance requirements. 

Resources

Solution Brief
Solution Brief
Cohesity FortKnox: Modern cyber vaulting for confident recovery
White Paper
White Paper
Improve cyber resilience with a digital jump bag™
White Paper
White Paper
FortKnox for NetBackup
Loading