Cohesity FortKnox improves cyber resilience by providing an immutable copy of data in a Cohesity-managed cloud “vault”
Cohesity, the leader in next-generation data management, today announced the global release of Cohesity FortKnox – a software as a service (SaaS) for data isolation and recovery, which is added to the portfolio of offers Microsoft Azure and Google Cloud of the company, also available on Amazon Web Services (AWS).
FortKnox is a modern data isolation solution, which can play a decisive role in helping organizations minimize the impact of cyber attacks, particularly ransomware. It is designed to provide an additional layer of off-site protection, dramatically simplifying operations and reducing costs compared to magnetic tapes and self-managed data vaults. The SaaS offering also helps businesses meet recovery service level agreements (SLAs) and comply with data protection regulations.
The announcement of the new release comes at a time when companies are looking for an innovative approach to data management and security. Traditionally, data has technically been “air gappedisolated, using tape as part of a 3-2-1 backup strategy – three copies of data, on two different media, one of which is stored in an off-site environment. While tape provides secure isolation for data, it does not enable rapid recovery at scale, preventing teams from quickly responding to cybersecurity incidents, such as a ransomware attack, where large volumes of data can be compromised.
FortKnox brings to life a modern “3-2-1” option, suited to the cloud era, that effectively balances security priorities and organizational agility. It is a cloud solution that allows customers to simply connect, store and retrieve data. The stored data is kept safe and out of reach of cyber criminals through a air gap, a virtual "air gap", which is achieved through the physical separation and isolation of the network and management. This data, which remains intact, can be recovered from vault, the “cloud vault” managed by Cohesity, directly at the source in its original location – or on other environments, including the public cloud – to ensure the pursuit of business continuity objectives.
“Cyber resilience is at the top of business priorities for organizations,” he stressed Brian Spanswick, Chief Information Security Officer di Cohesity. “The off-site data isolation provided by this Saas offering is another way we are helping customers combat increasingly sophisticated attacks and accelerate recovery, while also allowing SecOps and compliance teams to sleep better at night.”
“In the face of increasingly frequent and destructive cyberattacks, Cohesity FortKnox adds a new level of protection for our most critical data,” he said Olivier Pouvesle, CTO of BRGM.
“Organizations are prioritizing the need to maintain data security, but the spread of increasingly sophisticated and frequent cybersecurity threats is making data protection not only more important, but also more difficult,” he explained Adrian De Luca, Director of Solution Architecture, Global Partner Strategic Development di AWS. “With Cohesity FortKnox, customers are able to combine the scalability, security and accessibility of AWS with Cohesity's innovative data management, giving them a solution that helps protect data from ransomware and other cybersecurity threats.”
Cohesity FortKnox is designed to help customers:
- keep data safe, through:
- a secure connection via a configurable data transfer window, outside of which the data vault is locked;
- tamper resistance thanks to immutability, object lock to prevent changes to the policies that regulate the vault and a quorum that requires a minimum of two or more people to approve sensitive actions;
- operational isolation, achieved with separate keys managed by Cohesity (not accessible to a fake administrator) and separate workloads for read and write operations;
- rigorous access controls, including robust role-based controls, multi-factor authentication and encryption in-flight is at rest;
- AI-powered anomaly detection, through the Cohesity Helios platform, helps identify potential signs of an ongoing ransomware attack, so administrators can take the necessary actions to minimize proliferation and impact
- connect, archive and restore – no need to move tapes, build a DIY data vault, create additional storage infrastructure, or design custom recovery processes
- Quickly and confidently identify a clean copy of your data in the event of a ransomware attack and quickly and securely restore it to the desired location – on premises or in the cloud
- move from an intensive CapEx model to an OpEx 'as a service' model.
“Organizations' ability to minimize the impact of a cyber attack and quickly get their core business systems back up and running is top of mind for CIOs and CISOs around the world,” he said Dave Gruber, analista senior di Enterprise Strategy Group. "The completeness and speed of data recovery is what today distinguishes the most prepared companies from others. Recent ESG research confirms that off-site data isolation is the best strategy to achieve these objectives".
Cohesity FortKnox completa Cohesity's Threat Defense data security architecture. This multi-layered architecture is continually improved and updated to help customers stay one step ahead of cyber criminals. It brings together a suite of products, services and capabilities from Cohesity and its ecosystem partners to help customers identify threats through AI and ML, protect their data and quickly restore it in the event of a cyber attack.
Cohesity FortKnox is available globally as a subscription-based SaaS offering, through Cohesity itself and through its partner ecosystem.
Read more:
- To learn more about the features of Cohesity FortKnox, check this out technical data sheet
- Cohesity FortKnox is supported by the company's latest platform software release, Pegasus 6.8. To learn more about the offerings and features enabled through 6.8, read this blog
- To learn more about Cohesity's Threat Defense architecture, click who.






