What do Cohesity and Halcyon sell?

Cohesity sells Cohesity Data Cloud and Cohesity Gaia. Halcyon sells Ransomware Operations Center (ROC), Double Extortion Prevention (DXP) and Halcyon Support Services.

Are Cohesity and Halcyon in the same category?

They share Backup and cyber recovery. Cohesity's primary category is Backup and cyber recovery and Halcyon's is Endpoint protection platforms.

Where are Cohesity and Halcyon headquartered?

Cohesity is headquartered in San Jose, United States.

Who are Cohesity and Halcyon sold to?

From its own pages, Halcyon sells to large enterprises or intricate environments, with a support level tailored for them.

What have Cohesity and Halcyon announced recently?

July 28, 2026: Halcyon announced File Resilience, a capability that prevents ransomware encryption before files are modified.

Vendor comparison · 2 companies

Cohesity vs Halcyon

Cohesity sells Cohesity Data Cloud, a platform to protect, secure and gain insights into enterprise data. Halcyon sells an anti-ransomware platform that combines anti-ransomware technology, a 24/7 managed service and a ransomware warranty. CISO Tribune files both under Backup and cyber recovery. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

Cohesity
Halcyon

Add a company

Cohesity vs Halcyon: Products, Customers and Funding Compared
What it sells
	CohesityCohesity sells Cohesity Data Cloud, a platform to protect, secure and gain insights into enterprise data.cohesity.com	HalcyonHalcyon sells an anti-ransomware platform that combines anti-ransomware technology, a 24/7 managed service and a ransomware warranty.halcyon.ai
What it sells	Cohesity Data Cloud^{[4][6][8][9][11]}A single platform to protect 1,000+ workloads across cloud, on-prem and SaaS. Cohesity Gaia^[6][11]AI-powered conversational search.	Ransomware Operations Center (ROC)A team of ransomware experts monitors a customer's environment 24/7/365 as part of the included ROC service. Double Extortion Prevention (DXP)Blocks connections to known-bad infrastructure and flags unusually high outbound data volume. Halcyon Support Services^[5]A 100% in-house, non-outsourced team of Tier-1, Tier-2 and Tier-3 product experts.
Categories
Categories	Backup and cyber recovery (primary category)	Endpoint protection platforms (primary category) Backup and cyber recovery
Headquarters
Headquarters	San Jose, United States^[2]	Not stated on its pages
Founded
Founded	2013^[2]	Not stated on its pages
Ownership and funding
Ownership and funding	Privately held^{[4][5][6][11][12]}	Not stated on its pages
Named customers
Named customers	Not stated on its pages	Not stated on its pages
Recent news
Recent news	Not stated on its pages	July 28, 2026Halcyon announced File Resilience, a capability that prevents ransomware encryption before files are modified.^[14]
G2 and Gartner Peer Insights
G2 and Gartner Peer Insights	G2: listed, seen November 3, 2026^[5] Gartner Peer Insights: Not stated on its pages	G2: Not stated on its pages Gartner Peer Insights: Not stated on its pages
Who it fits
Who it fits	Not written yet	From its own pages, Halcyon sells to large enterprises or intricate environments, with a support level tailored for them. Halcyon describes small and midsize businesses as often operating with limited resources, security expertise and growing exposure to ransomware threats. Halcyon states that its offering is designed for IT generalists, who work with it out of the box without constant tuning or complex configuration. Halcyon states that its platform is built with MSSPs and MSPs in mind. Halcyon describes customers that manage security in-house and customers that use a third party as both receiving response guidance.
Last verified
Last verified	September 27, 2026	November 3, 2026

Where they overlap

Cohesity and Halcyon are both filed under Backup and cyber recovery.

Where they differ, field by field

Cohesity's primary category is Backup and cyber recovery; Halcyon's is Endpoint protection platforms.
Cohesity lists Cohesity Data Cloud and Cohesity Gaia. Halcyon lists Ransomware Operations Center (ROC), Double Extortion Prevention (DXP) and Halcyon Support Services.
Cohesity is headquartered in San Jose, United States.
Cohesity was founded in 2013.
Cohesity is privately held.

What it sells: Cohesity

What Cohesity Data Cloud does^{[4][6][8][9][11]}: Cohesity says Cohesity Data Cloud protects 1,000+ workloads across hybrid cloud and SaaS environments. Cohesity Data Cloud is available as Cohesity-managed, self-managed or partner-managed offerings. Cohesity says Cohesity Data Cloud runs in public clouds and on-premises on certified platforms.
What Cohesity Gaia does^[6][11]: Cohesity Gaia can run as SaaS or fully self-managed on-prem, including air-gapped environments. Gaia self-managed deployments are validated on reference architectures from NVIDIA, Cisco and HPE. Gaia connects to agentic tools such as Microsoft Copilot, Google Gemini and Glean, which is marked as coming soon.

What it sells: Halcyon

What Double Extortion Prevention (DXP) does: Halcyon DXP monitors outbound data flows within an organization, automatically detecting anomalous data movement and transfers associated with ransomware attacks. In the Halcyon console, prevention is set by policy, so a customer's team decides where blocking is enforced and where connections are flagged for review.
What Halcyon Support Services does^[5]: All customers have 24/7 access to the Halcyon Supportal for answers to common questions, how-to articles, troubleshooting and documentation. Halcyon offers phone support for its Enterprise Support customers.

Questions about Cohesity and Halcyon

What do Cohesity and Halcyon sell?: Cohesity sells Cohesity Data Cloud and Cohesity Gaia. Halcyon sells Ransomware Operations Center (ROC), Double Extortion Prevention (DXP) and Halcyon Support Services.
Are Cohesity and Halcyon in the same category?: They share Backup and cyber recovery. Cohesity's primary category is Backup and cyber recovery and Halcyon's is Endpoint protection platforms.
Where are Cohesity and Halcyon headquartered?: Cohesity is headquartered in San Jose, United States.
When were Cohesity and Halcyon founded?: Cohesity was founded in 2013.
Who owns Cohesity and Halcyon?: Cohesity is privately held.
Who are Cohesity and Halcyon sold to?: From its own pages, Halcyon sells to large enterprises or intricate environments, with a support level tailored for them.
What have Cohesity and Halcyon announced recently?: July 28, 2026: Halcyon announced File Resilience, a capability that prevents ransomware encryption before files are modified.

About Cohesity

Cohesity sells Cohesity Data Cloud, a platform to protect, secure and gain insights into enterprise data. Cohesity says Cohesity Data Cloud is a single platform to protect 1,000+ workloads across cloud, on-prem and SaaS. Cohesity says Cohesity Data Cloud has built-in zero-trust principles and AI-powered threat detection, and immutability. Cohesity says Cohesity Data Cloud can improve AI outcomes with secure, trustworthy, AI-ready enterprise data.^[1]

Cohesity says Cohesity Data Cloud protects 1,000+ workloads across hybrid cloud and SaaS environments. Cohesity says Cohesity Data Cloud can strengthen threat detection, automate cyber recovery and reduce compliance risk. FortKnox isolates backup data in an immutable, air-gapped cyber vault. FortKnox copies data into a vaulted environment that is isolated from production networks. FortKnox is available for both DataProtect or NetBackup as a fully managed cyber vault hosted on AWS, Azure and GCP. Cohesity says integrated anomaly detection and threat scanning in FortKnox confirm data cleanliness before restore.^[7]

Cohesity says Cohesity Data Cloud includes Google Threat Intelligence in its backup scanning workflows. Cohesity describes a Sophos-powered malware scanning engine for inspecting backups. Cohesity CERT steps in to help contain the damage and initiate recovery. Cohesity says cyber recovery orchestration helps teams orchestrate and rehearse cyber recovery workflows to respond and recover faster after a cyberattack. Cohesity Data Cloud includes blueprints that sequence recovery steps in a visual workflow. Cyber recovery orchestration integrates natively with Cohesity DataProtect and Cohesity NetBackup. Cohesity says its cyber clean room design isolates impacted systems in a controlled environment for detailed threat analysis.^[8][9][10]

Cohesity Gaia is used through the Cohesity Data Cloud and through agentic AI tools. Gaia makes protected enterprise data AI-ready in place, searchable, summarizable and agent-accessible, without moving a byte or rebuilding permissions. Gaia can run as SaaS or fully self-managed on-prem, including fully air-gapped environments. Gaia connects to agentic tools such as Microsoft Copilot, Google Gemini and Glean, which is marked as coming soon. Cohesity offers Cohesity Data Security Posture Management, powered by Cyera. Cohesity says it supports identity security, protection and recovery for organizations that rely on AD, Entra ID or a hybrid model.

For long-term retention, Cohesity names three archival solutions: CloudArchive, CloudArchive Direct and Cloud Tier. Cohesity says CloudArchive, CloudArchive Direct and Cloud Tier can archive data either to public clouds or S3 compatible targets. Cohesity says unified backup and automated disaster recovery solutions can deliver near-zero application downtime and no data loss. Cohesity offers data classification solutions to discover and classify sensitive and critical data with ML-based scanning. Cohesity describes protection for VMware vSphere, VMware vSAN, VMware Cloud Foundation and VMware Cloud Director. Cohesity says VMware users can globally search and then instantly recover dozens to thousands of virtual machines using instant mass restore. NetBackup supports backing up and recovering Kubernetes workloads and applications. NetBackup Powered Appliances give fast and flexible deployment with hardened, multi-layer security. Cohesity says teams using RecoveryAgent can build, test and validate recovery plans.^[10][13][14]

Cohesity says Cohesity Data Cloud is available as Cohesity-managed, self-managed or partner-managed offerings. Cohesity says Cohesity Data Cloud runs in public clouds and on-premises on certified platforms. A Cohesity-Powered service provider can manage Cohesity Data Cloud on a customer's behalf. Cohesity says customers can run Cohesity software in a data center, in the cloud or at the edge with certified solutions from Cohesity and its partners. Cohesity works with Cisco, HPE and more on certified hardware.^[15]

Cohesity says 12,000+ customers rely on it for their cyber resilience. Cohesity says its platform is for organizations of all sizes, across all industries. AutoNation is a Cohesity customer that says the software-defined platform for data management improved reliability and lowered TCO. Sky Lakes Medical Center says it used Cohesity to recover machines and file shares, verify they are clean and bring applications back online.^{[3][8][14][16]}

Cohesity on the record

About Halcyon

Halcyon sells an anti-ransomware platform that combines anti-ransomware technology, a 24/7 managed service and a ransomware warranty. Halcyon is built specifically to stop ransomware. Halcyon is a fully remote company operating in North America, with headquarters in San Diego, CA.^[3][4]

Halcyon uses behavioral engines trained on indicators of ransomware to detect suspicious activity early in the attack chain. If an attacker gains a foothold, Halcyon prevents execution and detects data exfiltration attempts. Halcyon detects when attackers use malicious executables, brute force attempts or command and control (C2) infrastructure to access an environment. Halcyon alerts on and interrupts an attacker's attempt to escalate user privileges using malicious executables or vulnerable kernel drivers. Halcyon detects and prevents attackers' attempts to move laterally across an environment. Halcyon includes EDR Last Gasp and Tamper Guard features that protect against attempts to bypass and disable security products in real-time. Halcyon shields the Volume Shadow Service from tampering.^[1][3][6]

Halcyon DXP monitors outbound data flows within an organization, automatically detecting anomalous data movement and transfers associated with ransomware attacks. In the Halcyon console, prevention is set by policy, so a customer's team decides where blocking is enforced and where connections are flagged for review.^[6]

Halcyon monitors real-time behaviors linked to ransomware encryption and captures encryption key material, such as seed values and copies of symmetric keys, generated during the attack. Halcyon captures a copy of the key as it is generated, giving an extra key to decrypt files without paying ransom. Halcyon connects organizations with incident response partners when ransomware strikes.^[7][8]

Halcyon's Ransomware Defense and Recovery (RDR) team monitors every alert and provides real-time response guidance. If an attack bypasses Halcyon's defenses, Halcyon provides incident response and recovery services at no extra charge. The Halcyon Warranty is included in the anti-ransomware platform and covers recovery services scoped to Halcyon-protected systems, valued at up to $50,000 USD. Halcyon states that initial response happens within 120 minutes, with recovery initiated within 12 hours.^{[3][9][10][13]}

Halcyon provides what is known as Halcyon Threat Response. Halcyon analysts escalate to a customer's SOC as arranged. Halcyon Support Services is a 100% in-house, non-outsourced team of Tier-1, Tier-2 and Tier-3 product experts trained in all aspects of the Halcyon Platform. All customers have 24/7 access to the Halcyon Supportal for answers to common questions, how-to articles, troubleshooting and documentation. Halcyon offers phone support for its Enterprise Support customers.

Halcyon's agent can be deployed using a customer's preferred deployment tools across Windows and Linux endpoints and servers. Once the Halcyon agent is deployed, Halcyon automatically monitors agent health and prevents tampering. Halcyon group policies let customers place assets in full protection mode, and Halcyon offers a detection mode for critical systems where visibility is key. Halcyon streams alerts into any SIEM, SOAR or XDR product through its universal API. Halcyon is not a replacement for existing endpoint protection. Halcyon's platform is built with MSSPs and MSPs in mind, and those providers can choose prevention or detection mode based on customer risk tolerance.^{[1][2][3][4][6][7][8][9][11][12][13]}

Halcyon on the record

Sources

Cohesity full record

[1]CompanyCohesity · cohesity.com · undated page, accessed September 27, 2026 · Tier A
[2]Cohesity announces significant expansion in pune with long term commitment to the indian marketCohesity · cohesity.com · undated page, accessed September 27, 2026 · Tier A
[3]Cohesity becomes worlds largest data protection provider after completing combination with veritas enterprise data protection businessCohesity · cohesity.com · published December 10, 2024 · Tier A
[4]AI-powered data security and management | CohesityCohesity · undated page, accessed October 23, 2026 · Tier A
[5]Cohesity Reviews 2026: Details, Pricing, & Features - G2G2 · undated page, accessed October 23, 2026 · Tier C
[6]Cloud Data Security and Management Platform | Cohesity Data CloudCohesity · undated page, accessed November 3, 2026 · Tier A
[7]FortKnox Cyber Vaulting: Immutable Air-Gapped Backup for Clean, Fast RecoveryCohesity · undated page, accessed November 3, 2026 · Tier A
[8]Ransomware Threat Protection Software | CohesityCohesity · undated page, accessed November 3, 2026 · Tier A
[9]Cyber Recovery Orchestration | Cohesity RecoveryAgentCohesity · undated page, accessed November 3, 2026 · Tier A
[10]Data Management Solutions | Comprehensive Data Management SoftwareCohesity · undated page, accessed November 3, 2026 · Tier A
[11]AI-Ready Data Platform: Activate On-Prem Enterprise Data for AI | Cohesity GaiaCohesity · undated page, accessed November 3, 2026 · Tier A
[12]Data Archiving & Retention Solution | CohesityCohesity · undated page, accessed November 3, 2026 · Tier A
[13]VMware Backup and Recovery Solution | CohesityCohesity · undated page, accessed November 3, 2026 · Tier A
[14]NetBackup: Enterprise backup solutions | CohesityCohesity · undated page, accessed November 3, 2026 · Tier A
[15]Certified Platforms | Solutions from Cohesity and PartnersCohesity · undated page, accessed November 3, 2026 · Tier A
[16]Instant and Rapid Recovery | Cohesity Instant Mass RestoreCohesity · undated page, accessed November 3, 2026 · Tier A

Halcyon full record

[1]halcyon.aiHalcyon · halcyon.ai · undated page, accessed November 3, 2026 · Tier A
[2]Halcyon named a top 5 security company in fast companys 2024 most innovative companies listHalcyon · halcyon.ai · published March 19, 2024 · Tier A
[3]Platform OverviewHalcyon · undated page, accessed November 10, 2026 · Tier A
[4]Halcyon Anti Ransomware and Cyber Resilience PlatformHalcyon · undated page, accessed November 10, 2026 · Tier A
[5]Halcyon - Customer SuccessHalcyon · undated page, accessed November 10, 2026 · Tier A
[6]Double Extortion PreventionHalcyon · undated page, accessed November 10, 2026 · Tier A
[7]Encryption Detection + Key CaptureHalcyon · undated page, accessed November 10, 2026 · Tier A
[8]Pro Services - RecoveryHalcyon · undated page, accessed November 10, 2026 · Tier A
[9]For MSSPsHalcyon · undated page, accessed November 10, 2026 · Tier A
[10]Platform WarrantyHalcyon · undated page, accessed November 10, 2026 · Tier A
[11]For EnterprisesHalcyon · undated page, accessed November 10, 2026 · Tier A
[12]Halcyon / Deployments + IntegrationsHalcyon · undated page, accessed November 10, 2026 · Tier A
[13]For SMBsHalcyon · undated page, accessed November 10, 2026 · Tier A
[14]Halcyon Launches File Resilience, Preventing Ransomware Encryption Before It StartsHalcyon · published July 28, 2026 · Tier A

Spot a factual error? Request a correction.