Cohesity vs Commvault

About Commvault

Commvault sells Commvault Cloud, a platform that unifies data security, identity resilience and cyber recovery at enterprise scale. Commvault says Commvault Cloud transforms resilience from a passive backup plan into an active operating model that helps enable the AI-driven enterprise. Commvault describes ResOps as the new way to help secure, govern, and restore all your data, all the time. Commvault Cloud Unity is built on Metallic AI, which Commvault describes as an automation engine. Commvault names MCP Server and Commvault Data Activate as capabilities that extend resilience into an AI ecosystem.^[4][6]

Commvault Cloud finds and classifies sensitive data across data, apps and identities. Commvault Cloud applies consistent policies for access, encryption and retention. AI-powered detection in Commvault Cloud identifies unusual activity across data and identity systems. Commvault says Commvault Cloud protects every workload that keeps a business running, from SaaS apps to AI stacks. Commvault Cloud covers SaaS platforms such as Microsoft 365, Google Workspace and Salesforce.^[4][6]

On the backup side, Commvault Cloud unifies governed backup and cyber recovery with cleanroom testing, runbooks and audit-supporting evidence. Commvault says its unified control plane sets policy, access and visibility once across hybrid and multi-cloud. Commvault says immutable, air-gapped patterns help protect recovery points from tampering and credential abuse. Commvault describes runbooks as a way to coordinate multi-system sequencing under pressure and to recover critical services first. For hybrid estates, Commvault says a unified policy engine governs protection across cloud-native, multi-cloud, on-premises, and edge workloads. Commvault unifies protection policies across cloud-native, hybrid and multi-cloud workloads from the Command Center. Cloud Backup & Recovery for Databases is designed to protect enterprise and cloud native databases from ransomware and other threats. Commvault Cloud Compliance helps companies address their legal, regulatory, and compliance requirements, and it supports eDiscovery. Dedicated Instance combines full environment isolation with SaaS agility and is managed through a single unified control plane.^[4][7][8]

For cyber recovery, Commvault defines a Cleanpoint as a backup from a point-in-time that has been scanned for threats and none have been found. Commvault tests data integrity in an isolated Cleanroom and scans data for malware before recovering it into the customer environment. Synthetic Recovery creates a curated recovery point that combines the most recent clean version of files across all backups into a single recovery point. Synthetic Recovery is integrated with Cleanroom Recovery, so a clean recovery point can be restored into a Cleanroom for observability and validation. Commvault Cloud Threat Scan automatically scans backup files for malware, detects data anomalies and enables fast, clean recovery. Threat Scan automatically quarantines infected files from the backup content and skips them during recovery. Threat Scan uses more than 100 million threat intelligence indicators to identify new threats. Threat Scan can send alerts to Splunk, Palo Alto Networks XSOAR or Microsoft Sentinel.^[4][9][10]

For identity, Commvault offers recovery of Active Directory and Entra ID environments from ransomware, operational mistakes and insider threats. Commvault automates and accelerates recovery of the AD forest to a pre-attack state. Commvault provides granular recovery of missing, damaged or misconfigured objects and attributes, including users, groups, app registrations and roles. Commvault interactive comparisons identify all changes in the domain between two points in time and allow recovery of deleted objects or rollback of overwritten attributes from the report. Commvault restores compromised forests onto a new, trusted operating system to help prevent the reintroduction of malware.^[2][4]

Commvault AirGap is a fully managed cloud storage target. Commvault AirGap offers Frequent, Infrequent Access and Archive storage tiers. Commvault AirGap isolates data copies in an air-gapped, immutable security domain. Commvault Data Access Governance delivers real-time, policy-based controls across hybrid environments to reduce exposure without slowing innovation or breaking workflows. Satori helps enforce who can access data, what they can see and what they can do. Satori can mask or redact fields without changing the underlying data or breaking applications. Commvault Geo Shield is designed for real-world regulation, enabling configurable controls across data while adapting to evolving customer sovereign needs in modern hybrid cloud environments. Commvault partners with STACKIT Sovereign Cloud to deliver cyber resilience for organizations across Germany and Austria. Commvault integrates with CrowdStrike’s Falcon XDR platform to detect indicators of compromise quickly and identify clean data for recovery.^{[4][11][12][13][15]}

Commvault lists SOC 2 Type II Certified, ISO/IEC 27001 Certified and FedRAMP High Authorized status. Commvault delivered data protection for UNC Health with encryption, RBAC, immutable backups, and integrated auditing to meet HIPAA and internal governance requirements. Bilthoven Biologicals recovered from ransomware using Commvault and restored operations within days. Wealthsimple moved to a need-to-know access model for highly sensitive financial and PII data. Gong controls access to sensitive customer data across multiple platforms. Pragya Systems adopted Commvault Cloud Rewind to protect GCP environments. Commvault says customers can get started directly through the cloud provider’s marketplace.^{[4][7][8][13]}