Ransomware Canary
Catch ransomware in the middle of an attack.
Hidden decoy files trip the moment ransomware touches them.
- Checked on every backup, and between backups
- Included in every plan you sell
Active alert
Canary file changed
- Backups frozen
- Last clean image kept safe
- Incident raised
Shown under your brand.
How it works
Detect. Contain. Recover.
Ransomware encrypts quietly, often over an hour or two. The Canary trips inside that window, before the next backup can copy encrypted files over good ones.
Detect
Decoy files sit in protected folders. Each backup checks them, and a watcher checks between backups too.
Contain
If a decoy changes, the backup chain freezes, so encrypted data never replaces the last clean image.
Recover
The last clean image is ready at the top of the restore options.
Why it sells
Simple to explain to any client.
No model to train
A decoy is either intact or it is not. Detection works on the first computer, on the first day.
No extra cost
The Canary comes with every plan, from DR-Only up. Lead with it on every quote.
Beside your antivirus
It works at the backup layer. It does not stop an attack; your antivirus or EDR does that.
Lead with ransomware detection.
It comes with every plan you sell, under your brand.