Backups that ransomware cannot touch.
Most backups sit on the same network, behind the same credentials, as the systems they protect. Attackers encrypt those first. A.I.R. keeps your recovery copies in immutable storage, away from your production credentials, so you can always restore.
$ air snapshot --target proxy-cluster
Connecting to hypervisor ........ OK
Block level snapshot ........... OK
Upload to off site vault ....... OK
Apply Object Lock, compliance .. OK
Snapshot locked. It cannot be changed or deleted until the retention period ends.
Three layers between an attacker and your recovery
Immutable storage
Backups are written once to storage with S3 Object Lock in compliance mode. Until retention ends, nobody can alter or delete them, including an attacker with administrator access.
Separated credentials
Your production network and your recovery vault share no credentials. A compromised directory or admin account does not open your backup history.
Tested recovery
Restore a single file or roll back a full virtual machine, following recovery steps that are documented and rehearsed before you need them.
From unprotected to recoverable
Assess
We list what must be protected and agree how much data you can afford to lose and how fast you need it back.
Deploy
Backup agents and snapshot schedules for your servers, virtual machines and databases.
Lock
Copies land in immutable, off site storage under credentials your network never sees.
Rehearse
We test restores and hand you a recovery runbook your team can follow under pressure.
Pricing per protected node
A node is one server, virtual machine or database instance that we protect.
Tactical Reserve
Essential nightly protection for smaller workloads.
Billed monthly per node
- Nightly automated snapshots
- 100 GB storage pool per node
- File level restore
- 7 day retention
Enterprise Standard
Ransomware resistant protection for production systems.
Billed monthly per node
- Snapshots four times a day
- 500 GB storage pool per node
- S3 Object Lock immutability
- 30 day retention
Sovereign Retainer
Continuous protection and compliance archives.
Base retainer, final price quoted per environment
- Hourly continuous data protection
- Dedicated white label gateway
- One year archive retention for compliance
- Priority emergency support and recovery drills
Prices in USD. Immutability with S3 Object Lock is included from Enterprise Standard upward.
Backup and recovery, frequently asked
What does immutable mean?
Each backup is written to storage that refuses changes and deletions until its retention date passes. Ransomware cannot encrypt it, and a stolen admin password cannot erase it.
What systems can you protect?
Physical and virtual servers, cloud instances and databases. We confirm compatibility for each system during the assessment.
How quickly can we recover?
It depends on the size of the data and the kind of restore. Single files take minutes. Full system recovery times are measured during testing and written into your runbook, so you know them in advance.
Do you test the backups?
Yes. Every onboarding ends with a test restore. The Sovereign Retainer adds scheduled recovery drills, and drills can be added to any plan.
When did you last test a restore?
If the answer is "not sure", let us review your current backups and show you where the gaps are.