Ransomware Response & Data Recovery Tool

In addition to ransomware detection and mitigation, Ransomware Protection Plus is designed to back up data and restore it in the event of a breach to maintain business continuity. Our solution not only recovers your backup but also allows you to respond to emerging threats with real-time alerts and automated remediation.

Quickly respond to ransomware attacks:

Flexibility Between Audit and Kill Mode

Choose your preferred response to ransomware with audit and kill modes. Audit mode flags suspicious behavior and sends alerts, allowing for further analysis/decision-making. Kill mode takes immediate action, terminating processes with suspicious intent to prevent further damage. This dual approach ensures you can balance caution with decisive intervention to protect your systems effectively.

Audit and Kill Mode

Review incidents and flag them accordingly

Not every alert is a real threat, and that’s where smart ransomware response comes into play. Ransomware Protection Plus provides a simple, clear way to review incidents picked up by its detection engine. It lets users review flagged incidents and check if they’re legit threats or just false alarms. Whether it’s a real ransomware attempt or just a harmless file flagged mistakenly, you’re in control of what gets blocked and what doesn’t.

Marking an incident as false positive

Marking an incident as true positive

Repeat Offender Defense

With the rise of RaaS (Ransomwar-as-a-service), ransomware attacks often involve repeated attempts by the same malware strain. Ransomware Protection Plus has the intelligence to remember from previously encountered ransomware and its malicious behaviour. This ensures a fool-proof mechanism to prevent any future damage.

Key Recovery features of Ransomware Protection Plus

One-click recovery

In the event of an attack, encrypted/infected files are reverted to their latest back up version, utilizing Microsoft’s VSS service to create copies of device files every three hours. This returns the device to the pre-attack state minimizing downtime and disruption.

Tamperproof Backups

Backups are crucial in ransomware recovery and securing them is critical. Our solution’s anti-tampering protocols ensure that backups remain unaltered by attackers. Backup-targeting ransomware (like LockerGoga) attempts to disable or delete backup and shadow copies, making recovery a painstaking effort. Ransomware Protection Plus ensures that your backups continue to provide you with a reliable safety net.

How does our ransomware data recovery work?

Ransomware Protection Plus restores your files to their most recent safe state using Microsoft’s VSS (Volume Shadow Copy Service) taken every few hours to roll back any ransomware-encrypted files, allowing you to return to business as usual, with minimal downtime.

Why Ransomware Protection Plus is the Right Choice

Benefits beyond ransomware response and recovery

• 

  ~1%

  system bandwidth used by our agent, minimizing resource footprint.

• 

  2.5 Million

  endpoints currently under continuous 24/7 protection

• 

  >99%

  ransomware detection accuracy with patented behaviour analytics engine

Defeat ransomware before it shuts down your business

GET STARTED NOW