NetApp and Elastio Announce Partnership to Deliver Defense-in-Depth Ransomware Resilience

Key Terms

ransomware technical

Ransomware is malicious software that locks or encrypts a company’s computer files and systems, then demands payment for their release — like a thief changing the locks on a business and asking for a ransom. It matters to investors because attacks can halt operations, trigger large cleanup costs, damage customer trust, lead to regulatory fines or legal claims, and reduce future revenue, all of which can hurt a company’s financial value.

snapshots technical

Snapshots are concise summaries that capture the most important facts, figures or status points about a company, financial position, clinical program or market at a specific moment—think of them as a photo of key metrics. They matter to investors because they allow quick comparison, spotting trends or red flags and making faster, more informed decisions without wading through full reports, much like a dashboard giving you the essential gauges at a glance.

backups technical

Backups are copies of critical data, systems, or contingency plans that a company keeps so it can restore operations quickly if the primary version fails, is lost, or becomes unavailable. For investors, backups reduce the risk of business interruption, regulatory penalties, and unexpected recovery costs by enabling faster restart and continuity — like a spare tire that gets a car moving again — and signal management’s attention to operational resilience.

deep file inspection technical

Deep file inspection is a thorough examination of digital files to detect hidden content, malware, or data leaks by looking inside the file structure and metadata rather than only checking surface labels. For investors, it matters because this level of scrutiny reduces the risk of security breaches, regulatory fines, and operational downtime—similar to a customs officer opening parcels to confirm nothing harmful is inside—so it affects a company's legal exposure, reputation, and potential costs.

autonomous ransomware protection technical

Autonomous ransomware protection is software that automatically detects, stops and recovers from ransomware attacks without requiring human intervention, using preset rules and machine-driven decisions. For investors, it matters because it reduces the chance of costly downtime, data loss and regulatory fines—much like a smart smoke detector that not only sounds an alarm but also seals off rooms and calls the fire department to limit damage.

zero-day ransomware technical

Zero-day ransomware is malicious software that locks or steals a company’s data by taking advantage of a previously unknown software weakness that has no available fix yet. Like a burglar finding a hidden, unprotected back door, it can spread quickly and overwhelm systems before defenders can respond. For investors, it matters because such attacks can halt operations, trigger expensive recovery costs, regulatory penalties and loss of customer trust, any of which can hurt revenue and the stock price.

malware technical

Malware is malicious software that infiltrates computers, networks or devices to damage systems, steal or corrupt data, or disrupt normal operations — like a digital burglar or pest that sneaks in and tampers with a business’s tools and records. For investors, malware matters because attacks can cause service outages, lost sales, costly cleanup and legal penalties, erode customer trust, and create sudden, material risks to revenue and stock price.

immutable snapshots technical

Immutable snapshots are exact, read-only copies of digital records or system states that cannot be altered or deleted once created. For investors, they matter because they provide a tamper-proof record for audits, regulatory compliance and forensic review—like a sealed photograph of a company's books or systems at a moment in time—reducing the risk that important financial or operational data can be changed after the fact.

Robust cyber resilience requires both perimeter defenses and built-in security at the storage layer

SAN JOSE, Calif. & SAN FRANCISCO--(BUSINESS WIRE)-- NetApp^® (NASDAQ: NTAP), the Intelligent Data Infrastructure company, and Elastio are helping enterprises enhance their cyber resilience with a layered defense that extends from production storage into recovery data. Security teams must be ready to address threats at every layer of their technology stack, including ransomware that moved quietly through production before it was caught that now lives inside snapshots and backups. Advanced ransomware is engineered to evade prevention tools, moving quietly through production, staying below detection thresholds, reaching backup data before any alert is triggered.

"As we migrated our infrastructure, ensuring we had the right level of backup security and assurance was non-negotiable,” Marc Crudgington, VP IT Infrastructure and CISO, Crane WW Logistics. “Elastio provided continuous inspection of our backups from day one - giving us confidence in our ability to recover. That’s the standard we hold ourselves to."

The companies are embedding Elastio’s Provable Recovery Control into the NetApp Ransomware Resilience Service as “Powered by Elastio,” adding Deep File Inspection of snapshots. Together, the service delivers end-to-end resilience from ransomware detection through recovery – using recovery points that are continuously verified as clean.

"Storage needs to be part of the conversation when defining a holistic cyber security strategy,” Gagan Gulati, Senior Vice President and General Manager of Data Services. NetApp. “By protecting data where it lives, we make storage a priority to combat cyber threats like ransomware. But the stakes for business resilience and operational continuity are too high to rely on a single layer of defense. By collaborating with Elastio, we’re giving enterprises another tool to protect their most critical asset: data.”

A New Layer of Defense Inside the NetApp Ransomware Resilience Service

• NetApp Ransomware Resilience Service: Detects and contains ransomware at the data layer in real time, takes immutable snapshots, guides recovery, and continuously assesses ransomware posture across ONTAP^® environments. Includes behavioral detection via Autonomous Ransomware Protection (ARP).
• Elastio Provable Recovery Control: Deep File Inspection of ONTAP snapshots, detecting zero-day ransomware, staged malware, and stealth corruption that evaded perimeter controls. No agents and continuously identify the last known clean recovery points.

Through this collaboration, both companies are enhancing cyber resilience for customers by embedding Elastio Provable Recovery Control directly into the NetApp Ransomware Resilience Service with no separate procurement and no architecture changes.

"Most organizations discover their recovery data is compromised at the worst possible moment: during an active incident,” Naj Husain, CEO, Elastio. “By then the question of whether backups are clean is no longer theoretical. The joint solution answers that question continuously, before the incident forces it."

Availability

The NetApp Ransomware Resilience Service powered by Elastio is planned for availability in the near future. Enterprise organizations interested in early access should contact their NetApp or Elastio representative to assess their current recovery posture.

About NetApp

For more than three decades, NetApp has helped the world’s leading organizations navigate change – from the rise of enterprise storage to the intelligent era defined by data and AI. Today, NetApp is the Intelligent Data Infrastructure company, helping customers turn data into a catalyst for innovation, resilience, and growth.

At the heart of that infrastructure is the NetApp data platform – the unified, enterprise-grade, intelligent foundation that connects, protects, and activates data across every cloud, workload, and environment. Built on the proven power of NetApp ONTAP, our leading data management software and OS, and enhanced by automation through the AI Data Engine and AFX, it delivers observability, resilience, and intelligence at scale.

Disaggregated by design, the NetApp data platform separates storage, services, and control so enterprises can modernize faster, scale efficiently, and innovate without lock-in. As the only enterprise storage platform natively embedded in the world’s largest clouds, it gives organizations the freedom to run any workload anywhere with consistent performance, governance, and protection.

With NetApp, data is always ready – ready to defend against threats, ready to power AI, and ready to drive the next breakthrough. That’s why the world’s most forward-thinking enterprises trust NetApp to turn intelligence into advantage.

Learn more at www.netapp.com or follow us on X, LinkedIn, Facebook, and Instagram.

NETAPP, the NETAPP logo, and the marks listed at www.netapp.com/TM are trademarks of NetApp, Inc. Other company and product names may be trademarks of their respective owners.

About Elastio

Elastio delivers Active Cyber Resilience, a security philosophy built on one principle: recovery must be continuously proven and not periodically tested or assumed. The Elastio Hunt Engine performs Deep File Inspection across live data, replicated data, and backups to detect ransomware and malware that has evaded prevention and detection tools. Recovery you can prove.

View source version on businesswire.com: https://www.businesswire.com/news/home/20260324248957/en/

Media Contacts:

Kenya Hayes

NetApp

kenya.hayes@netapp.com



Cecily Polonsky

Elastio

cpolonsky@elastio.com



Investor Contact:

Kris Newton

NetApp

kris.newton@netapp.com

Source: NetApp