The ransomware guard · Pro
Ransomware stops at the backup.
When files change the way ransomware changes them, nothing is saved. Your last good backup is kept.
Every save, checked first.
Every point is compared with this job’s usual day. Two signs, or one strong one, hold it.
Far more changes
Ten times this job’s usual peak in ten minutes, and 200 files or more.
Renamed in bulk
Fifty files or more taking one new extension.
A known extension
Ten files or more under one of about sixty.
Ransom notes
The same note in five folders or more.
Unreadable documents
A PDF that no longer starts as a PDF.
Strong on their own: a known extension, an extension added to fifty files or more, fifty unreadable documents, or a note that says decrypt.
Not fooled by a busy day.
Real work changes a lot of files too. The guard tells the two apart.
A photo import
Five hundred new photos are photos.
A zip extracted
Hundreds of new files, every one readable.
A git checkout
Four hundred source files changed at once.
Your usual day
It learns how busy this job usually is.
Put it back as it was.
Put back… opens the last good backup at your folder. Confirm, and it goes back as it was.
- The originals come back, deleted ones included
- The encrypted copies and the notes move into a folder beside it
- Nothing is deleted, nothing is written over
- One folder at a time. The hold ends with it
And you can see it happen.
The report says what came back and what moved out.
Tested on a simulated attack on 2,000 documents: held before anything was saved, every document put back exactly.
Or tell it it was you.
Encrypted a folder yourself? It was me lets that change through, after asking once more.
The next save keeps the files as they are, and the guard goes on watching. Still converting? Let the changes through for the next hour.
On by default. And it says so.
On for every new continuous job. Home and the job’s page show it watching.
Told at once. Where you are.
One card and one message, then a reminder each day until you answer.
In the app
A card on Home and on the job, with both answers.
Where you are
A Windows notification, and email and webhook if you use them, with what to do first.
In Activity
The save it held stays listed, in amber.
What it doesn’t do.
Plain words about a serious thing.
It guards the backups
It does not remove ransomware. Keep your antivirus on.
Not every attack
A slow attack on a few files is not seen.
Out of reach
For a copy no PC can delete: S3 Object Lock, compliance mode.
Continuous jobs
Pro and Server, and their 15-day trials.
Lock backups in your S3 bucketA second copy elsewhere
Not on Pro? Unplug a USB backup drive between backups, keep older versions, and in Home keep a second copy on another drive or NAS.
Try it on the 15-day trial.
Every Pro feature, the guard included. No account, no card.