- BFSIBanking, Financial Services & Insurance
- HealthcareComing soon
- ManufacturingComing soon
- Retail & E-CommerceComing soon
FortKnox
Secure the front door. Email is where most attacks arrive — FortKnox is a cyber vault — a secure, isolated, immutable off-site copy of your critical data that ransomware can’t reach, delivered as SaaS (a ‘virtual air gap’). So even if everything else is compromised, a clean copy always survives. The isolated last line of defence.
Buy through TechBag
Same software. Better outcome — at no extra cost.
Free, vendor-neutral, 30 minutes
How it’s rated
Full scoreboard ↓Quick answer
The Cohesity platform family
This page covers FortKnox — the cyber vault. The rest of the Cohesity portfolio:
Quick facts
30-second orientation- Product
- FortKnox — cyber vault (data isolation)
- Vendor
- Cohesity (founded 2013 · Mohit Aron)
- The category
- Cyber vaulting / data isolation / cyber recovery
- What it is
- An isolated, immutable, off-site copy attackers can't reach
- The idea
- A modern 'virtual air gap' — delivered as SaaS
- Protection
- Network + access isolation, WORM immutability, MFA, quorum
- The guarantee
- A clean, last-resort copy always survives
- Also
- Self-managed option; managed on Google Cloud (threat intel)
- Vs
- Rubrik Cyber Vault, Veeam Vault, Dell Cyber Recovery
- In India via
- TechBag — licensing, quotes, GST invoicing, support
Understand cyber vaulting before you buy it
Most product pages skip this. We start here — so you buy a capability, not a buzzword.
What is Cohesity FortKnox?
A cyber vault — a secure, isolated, immutable off-site copy of your critical data that ransomware can’t reach, delivered as SaaS (a ‘virtual air gap’). So a clean copy always survives.
Backups only vs an isolated cyber vault — the honest table
What consolidation actually replaces, dimension by dimension.
| Dimension | Unprotected / signature email | FortKnox (Cohesity) |
|---|---|---|
| Beyond immutable backups | Backups only (single layer) | + isolated vault (last resort) |
| Attacker reach | Can reach backups (if breached) | Can't reach the isolated vault |
| Air gap | Tape / build-it-yourself (complex) | Virtual air gap, as SaaS |
| Immutability | Sometimes | WORM — always, in the vault |
| Single point of compromise | One admin could destroy | Quorum — multi-person control |
| Insider threat | Exposed | Quorum + RBAC guard it |
| Recovery cleanliness | Uncertain | Verified-clean vault points |
| The guarantee | Hope | A clean copy always survives |
FortKnox is a cyber vault — an isolated, immutable copy attackers can’t reach, as SaaS (a virtual air gap), with quorum/MFA/RBAC lockdown. It's the layer BEYOND immutable backups (DataProtect). Closest rival? Rubrik. Established? Dell Cyber Recovery. TechBag advises honestly.
The five pieces of the platform
Vendors love diagrams; buyers need to know what they’re actually operating. Here’s the whole platform, demystified.
Isolated Vault
Keep a copy of your critical data in a vault that's isolated from your network and access — a 'virtual air gap' — so ransomware and attackers simply can't reach it from your compromised environment. Isolation is the core of a cyber vault: attackers can't destroy what they can't reach. The unreachable copy.
Immutable (WORM)
Data in the vault is immutable (write-once-read-many) — it cannot be encrypted, altered or deleted, even by an attacker with credentials, or a malicious insider. So the vaulted copy stays intact and trustworthy. Immutability plus isolation means the copy truly survives. Tamper-proof, in the vault.
Strong Access Controls
Protect vault access with strong controls — MFA, quorum (multi-person approval for sensitive actions), and RBAC — so no single compromised or malicious individual can tamper with or delete the vault. Multi-layered access control guards the last line of defence. No single point of compromise.
SaaS — Virtual Air Gap
Delivered as SaaS — a Cohesity-managed, cloud-isolated vault — so you get an air-gapped, isolated vault WITHOUT building and running an isolated environment yourself (tape, separate data centre). The modern virtual air gap, as a service. Air-gap security, minus the complexity.
Clean Recovery From Vault
When you need it, recover clean, trusted data FROM the vault — fast — so after an attack you restore from the guaranteed-clean copy, not a possibly-compromised one. A vault is only useful if you can recover from it well; FortKnox enables clean recovery. The clean copy, ready to restore.
One agent on every machine, one console over all of them — modules attach without a second operational world.
Twelve capabilities. Isolate, protect, recover.
FortKnox keeps an isolated, immutable copy attackers can’t reach — a virtual air gap, as SaaS — the guaranteed last line of defence in portfolio, and paired with the human firewall.
Network Isolation
The vault is isolated from your network — separated so attackers who compromise your environment can't reach it. Network isolation is the 'air gap' that keeps the vaulted copy out of attackers' reach. Unreachable from a compromised network. The gap that protects.
Access Isolation
Vault access is isolated and tightly controlled — separate from your normal access paths — so compromised credentials in your environment don't grant vault access. Isolating access (not just the network) closes another attack path. Separate, controlled access to the vault.
Virtual Air Gap (SaaS)
Achieve air-gap-level isolation as SaaS — a managed, cloud-isolated vault — giving you the security of a physically separate copy without building/running tape or an isolated data centre yourself. The modern air gap, delivered as a service. Air-gap security, no build required.
Immutable (WORM) Vault
Data in the vault is immutable (write-once-read-many) — it can't be encrypted, altered or deleted, even with credentials. So the vaulted copy stays intact even against sophisticated attackers or malicious insiders. Immutability makes the isolated copy truly trustworthy. Un-deletable, un-encryptable.
Multi-Factor Authentication
Vault access requires MFA — so access needs verified, multi-factor identity, not just a password an attacker might have. MFA is a basic but essential guard on the last line of defence. Verified access to the vault.
Quorum (Multi-Person Approval)
Sensitive vault actions require quorum — multiple authorised people must approve — so no single compromised or malicious individual can tamper with or delete the vault. Multi-person control protects against insider threat and single-account compromise. No lone actor can breach the vault.
Role-Based Access Control
Granular role-based access control governs who can do what with the vault — least-privilege access to the last line of defence. RBAC ensures only the right people have the right (limited) vault access. Least-privilege vault governance.
Threat Scanning & Clean Points
Scan vaulted data for threats and identify clean recovery points — so you recover from a known-clean copy, not one that's secretly compromised. (The Google Cloud managed option adds Google threat intelligence.) Knowing the vaulted copy is clean is essential. Recover from a verified-clean copy.
Clean, Fast Recovery From Vault
Recover clean, trusted data from the vault — fast — so after an attack you restore from the guaranteed-clean vaulted copy quickly. A vault is only useful if you can recover from it well; FortKnox enables fast, clean recovery. The clean copy, restored fast.
The Isolated Last Line of Defence
FortKnox is the isolated, last-resort layer of Cohesity's cyber resilience — beyond immutable backups (DataProtect), an isolated off-network copy — so even if everything else is compromised, a clean copy survives. Defence in depth: the vault is the final guarantee. The copy that always survives.
SaaS, Self-Managed or on Google Cloud
Available as SaaS (Cohesity-managed), self-managed (run it yourself), or as a managed service on Google Cloud (with Google threat intelligence and scanning) — so you pick the vaulting model that fits. Flexible cyber-vaulting delivery. Your vault, your way.
Simple to Adopt (No Air-Gap Build)
Because it's SaaS, adopting a cyber vault is simple — no building and running a tape system or isolated data centre — so you get air-gap-level protection quickly and manageably. Removing the complexity barrier means more organisations can actually have a cyber vault. Vaulting made practical.
Watch Cohesity FortKnox in action
The overview, getting started, and protecting M365 email.
Building a Cyber Vault Fortress with FortKnox
FortKnox cyber vaulting.
New self-managed deployment option for FortKnox
Self-managed FortKnox.
Watch a demo of Cohesity Gaia
AI over your protected data.
Want a live, India-context walkthrough on your own fleet?
Book a guided demo →The endpoint catches what arrives. Email stops it arriving.
Here’s what genuinely sets Cohesity FortKnox apart.
An isolated copy attackers can't reach — the guaranteed last line of defence
The core reason Cohesity FortKnox exists is to guarantee a clean, protected copy of your critical data always survives — by keeping it in an isolated vault attackers simply can't reach — so that even if ransomware compromises everything else (including your primary backups), you can still recover. Why immutable backups aren't always enough: modern ransomware attackers go after everything — they try to encrypt/delete your production data AND your backups (which is why immutable backups are essential — they resist this). Immutable backups are a strong defence, and for many organisations, sufficient. But the most sophisticated attacks, and the most cautious, defence-in-depth security strategies, want a further guarantee: what if an attacker finds a way to compromise even the backup system (e.g. via compromised admin credentials, a misconfiguration, or a novel technique)? For the most critical data, you want a copy that's not just immutable but physically/logically ISOLATED — kept somewhere attackers can't reach from your (potentially fully compromised) environment at all. That's an air gap: a separated copy that survives no matter what happens to your primary environment. What FortKnox provides — the isolated vault: FortKnox is that isolated, guaranteed copy: Isolated — the vault is separated from your network and access (a 'virtual air gap'), so attackers who compromise your environment can't reach it. They can't destroy what they can't reach. Immutable — the vaulted data is WORM (can't be altered or deleted), so even if somehow accessed, it can't be tampered with. Strongly controlled — MFA, quorum (multi-person approval) and RBAC mean no single compromised or malicious individual can breach it. So there is always a clean, protected, last-resort copy of your critical data — isolated, immutable, and multi-person-controlled — that survives even a worst-case, total compromise of your primary environment. It's the final guarantee. Why this matters: for your most critical data, the stakes of a total ransomware compromise (with no recoverable copy) are catastrophic — potentially existential. A cyber vault provides certainty: no matter what happens to everything else, a clean copy survives that you can recover from. This is defence in depth — immutable backups (DataProtect) as the strong primary defence, and an isolated vault (FortKnox) as the guaranteed last line. For organisations where the worst case is unacceptable (critical infrastructure, financial services, healthcare, anyone with truly critical data), that guarantee is genuinely valuable. The value: Cohesity FortKnox guarantees a clean, protected copy always survives — by keeping it in an isolated vault attackers can't reach — so even a total compromise of your primary environment can't leave you with nothing to recover from. For a guaranteed last line of defence, this matters. TechBag helps organisations guarantee a surviving clean copy with Cohesity FortKnox. TechBag helps you keep a copy attackers can never reach.
A modern virtual air gap — as SaaS, without the complexity
A defining strength of Cohesity FortKnox is that it delivers air-gap-level isolation as SaaS — a modern 'virtual air gap' — so you get the security of an isolated, off-site copy WITHOUT the cost and complexity of building and running an air-gapped environment yourself. The traditional air-gap problem: an 'air gap' (a copy of data kept physically/logically separate and disconnected, so it can't be reached from your network) has long been the gold standard for a last-resort protected copy. But traditionally, achieving it was hard: Tape — the classic air gap: back up to tape and physically remove it. But tape is operationally heavy (handling, transport, storage), slow to recover from, and error-prone. A separate isolated data centre/environment — building and running a physically separate, isolated vault environment is expensive and complex (infrastructure, isolation, management). So a true air gap was costly, complex and operationally burdensome — which meant many organisations didn't have one, despite wanting the protection. The complexity was a barrier to a valuable protection. FortKnox's modern approach — SaaS virtual air gap: FortKnox modernises this by delivering the air gap as SaaS: Your critical data is copied to a Cohesity-managed, cloud-isolated vault — separated from your network and access (a 'virtual air gap'), immutable, and strongly controlled. Cohesity manages the vault — so you don't build or run an isolated environment (no tape handling, no separate data centre to stand up and manage). You get the security — air-gap-level isolation, immutability, strong controls — without the complexity. Simple to adopt — because it's SaaS, you can have a cyber vault quickly and manageably, not after a big infrastructure project. So you get the gold-standard protection (an isolated, immutable, off-site copy) in a modern, simple, as-a-service form — removing the cost and complexity barrier that stopped many organisations from having a cyber vault. Why it matters: this makes a valuable protection (the air gap / cyber vault) actually practical and accessible: More organisations can have one — the SaaS model removes the build-it-yourself barrier, so a cyber vault is achievable, not just theoretical. Lower cost/complexity — no isolated infrastructure to build and run. Better than tape — faster, more reliable recovery than physical tape, with modern security. Managed — Cohesity runs it, reducing your operational burden. For organisations that want the security of an air-gapped copy but were deterred by the traditional complexity, FortKnox's SaaS virtual air gap is genuinely valuable. The value: Cohesity FortKnox delivers a modern virtual air gap as SaaS — air-gap-level isolation and immutability WITHOUT building/running an isolated environment — making the gold-standard protected copy practical, simple and accessible. For a practical cyber vault, this matters. TechBag helps organisations get a modern cyber vault the simple way with FortKnox. TechBag helps you get air-gap security without the air-gap complexity.
Locked down — immutable, MFA, quorum, RBAC (no single point of compromise)
A crucial strength of Cohesity FortKnox is how thoroughly the vault is locked down — immutable data, MFA, quorum (multi-person approval) and RBAC — so that no single compromised credential, malicious insider, or attacker can breach or destroy it, which matters because the last line of defence must be the hardest thing to compromise. Why the vault must be maximally protected: a cyber vault is your last-resort copy — the guarantee you can recover no matter what. So it must be the MOST protected thing you have: if an attacker (or malicious insider) could breach or delete the vault, it wouldn't be a guarantee. In particular, you must protect against: an attacker with stolen admin credentials, a malicious insider (someone with legitimate access acting maliciously), and a single point of compromise (any one account or action that could destroy the vault). The vault's protection must assume the worst. FortKnox's layered lockdown: FortKnox protects the vault with multiple, layered controls, so no single failure breaches it: Immutable (WORM) — the data can't be encrypted, altered or deleted, even by someone with access. So even a breach can't destroy the data. Isolated — separated from network and access, so reaching it is hard in the first place. MFA — access requires multi-factor identity, not just a (possibly stolen) password. Quorum (multi-person approval) — crucially, sensitive actions (like deleting data or changing retention) require MULTIPLE authorised people to approve. So no single individual — even a compromised admin or malicious insider — can unilaterally tamper with or destroy the vault. This defeats single-account compromise and insider threat. RBAC — granular, least-privilege access, so people have only the minimal vault access they need. Together, these mean the vault has no single point of compromise: an attacker would need to defeat isolation AND immutability AND MFA AND multiple people's approval (quorum) — an extraordinarily high bar. The quorum control especially is powerful: it means destroying the vault requires collusion or compromise of multiple people, not one. Why it matters: for the last line of defence, this thorough, layered, no-single-point-of-compromise lockdown is exactly what's needed — it makes the vault genuinely trustworthy as a guarantee, resistant even to sophisticated attackers, stolen credentials and malicious insiders. A cyber vault is only as good as how hard it is to breach, and FortKnox makes it very hard. The value: Cohesity FortKnox locks the vault down thoroughly — immutable, isolated, MFA, quorum (multi-person approval) and RBAC — so no single compromised credential, insider or attacker can breach it, making the last line of defence genuinely trustworthy. For a vault you can rely on, this matters. TechBag helps organisations lock down their cyber vault with FortKnox. TechBag helps you make the last line of defence unbreachable.
Part of Cohesity's cyber resilience — defence in depth
A key strength of Cohesity FortKnox is that it's part of Cohesity's broader cyber-resilience story — providing the isolated last-resort layer alongside DataProtect's immutable backups and clean/mass recovery — which matters because real cyber resilience is defence in depth, not a single control. Cyber resilience is layered: protecting against ransomware and recovering from it isn't one thing — it's layers of defence, so that if one layer is breached, others hold: Immutable backups — your primary backups (DataProtect) are immutable, so attackers can't destroy them. This is the strong primary defence. Threat detection — anomaly/threat detection spots an attack in your data early. Clean recovery — identify clean recovery points and recover to a trusted state (not reinfecting). Fast, mass recovery — recover quickly and at scale after an attack. Isolated vault — and, as the last resort, an isolated off-network copy (FortKnox) that survives even a total compromise. Each layer adds protection; together they provide real resilience. Where FortKnox fits: FortKnox is the isolated, last-resort layer — the guarantee beyond the primary (immutable) backups. Immutable backups are the strong first line (and sufficient for many); FortKnox adds the isolated last line for the most critical data and the most cautious strategies. Together, Cohesity's portfolio provides defence in depth: DataProtect — cyber-resilient backups (immutable, threat-aware) and fast/clean/mass recovery. FortKnox — the isolated cyber vault (the guaranteed surviving copy). Plus broader data security (threat detection, DSPM, clean-room/RecoveryAgent cyber-recovery orchestration). So you get comprehensive, layered cyber resilience from one platform — not a single control, but defence in depth — with FortKnox as the crucial isolated last resort. Why it matters: real-world ransomware defence requires layers, because attackers are sophisticated and any single control might be defeated. Having immutable backups AND an isolated vault (and threat detection, clean recovery, etc.) provides genuine, layered resilience — the assurance that comes from multiple defences, not one. FortKnox completes the picture with the isolated last line. And it's all from one integrated platform (Cohesity), so the layers work together. The value: Cohesity FortKnox is the isolated last-resort layer of Cohesity's defence-in-depth cyber resilience — alongside DataProtect's immutable backups and clean/mass recovery — providing genuine, layered protection, not a single control. For real cyber resilience, this matters. TechBag helps organisations build layered cyber resilience with Cohesity (DataProtect + FortKnox). TechBag helps you defend in depth, with the vault as your last line.
From the world's largest data-protection provider — and relevant to India
Cohesity FortKnox comes from Cohesity — the world's largest data-protection provider — and is highly relevant to India's regulated, ransomware-targeted organisations, which matters because a cyber vault is a critical trust decision, and a proven vendor plus local relevance add real value. A proven, market-leading vendor: Cohesity (following its combination with Veritas's enterprise data-protection business) is the world's largest data-protection provider, protecting 12,000+ customers including 85+ of the Fortune 100. For a cyber vault — the guaranteed last line of defence for your most critical data — having it from the market-leading, well-resourced data-protection vendor provides confidence: this is the guarantee you're betting recovery on, so vendor strength, longevity and expertise matter. Founded by Mohit Aron (Google File System, Nutanix co-founder), Cohesity has deep data expertise, now at market-leading scale, and cyber resilience is central to its strategy. Part of a comprehensive platform: FortKnox isn't standalone — it's part of Cohesity's comprehensive data-protection-and-security platform (with DataProtect, NetBackup, Gaia AI, data security), so the vault integrates with your broader protection and resilience. And it's flexible: SaaS (managed), self-managed, or a managed service on Google Cloud (with Google threat intelligence). India relevance: this is especially relevant for India — Indian organisations (especially BFSI under RBI, government, healthcare, critical infrastructure) face significant ransomware risk and increasingly stringent requirements for data protection, resilience and recoverability (RBI resilience expectations, data residency). A cyber vault — a guaranteed isolated clean copy — directly supports ransomware resilience and regulatory expectations. And Cohesity has strong India presence (Bangalore/Pune engineering, and major Indian bank/telco customers). Via TechBag (Bengaluru-based), Indian organisations get FortKnox with local scoping, mapping to Indian resilience/compliance needs, licensing and INR/GST support. Why it matters: adopting FortKnox means getting your critical cyber vault — the guaranteed last line of defence — from the world's largest, most-invested data-protection provider, integrated with a comprehensive platform, and locally relevant and supported in India. For a decision this critical, that combination is compelling. The value: Cohesity FortKnox — from the world's largest data-protection provider, part of a comprehensive platform, and highly relevant to India's ransomware-targeted, regulated organisations — is a well-backed choice for your critical cyber vault. TechBag supplies it with local support. TechBag provides a cyber vault from the market leader, relevant to India.
The honest scope
Cohesity FortKnox is a cyber vault — a secure, isolated, immutable off-site copy of your critical data that ransomware can't reach, so a clean, guaranteed copy always survives even if everything else (including primary backups) is compromised. It's delivered as SaaS (a managed 'virtual air gap'), with network/access isolation, WORM immutability, and strong controls (MFA, quorum, RBAC), plus fast clean recovery from the vault. It's also available self-managed, and as a managed service on Google Cloud (with Google threat intelligence). It's the isolated last-resort layer of Cohesity's defence-in-depth cyber resilience. The honest framing — where it fits: FortKnox is a cyber vault — a further, isolated layer BEYOND immutable backups. Immutable backups (which Cohesity DataProtect and others provide) are a strong primary defence, and for many organisations may be sufficient. A cyber vault (FortKnox) adds the isolated, air-gapped last resort — most valuable for your MOST critical data, and for the most cautious, defence-in-depth strategies (critical infrastructure, financial services, healthcare, regulated/high-risk organisations, and anyone for whom a total compromise is unacceptable). So it's complementary to (not a replacement for) primary backups: you have immutable backups (primary), plus a cyber vault (isolated last resort) for critical data. The competitive landscape: cyber vaulting / cyber recovery is an established category with strong options — Rubrik (Cyber Vault / cyber-resilience, the closest modern rival), Veeam (Vault / Cyber Secure), Dell (PowerProtect Cyber Recovery, an established isolated-vault solution), and Commvault (Cleanroom/cyber recovery). Most major data-protection vendors now offer cyber vaulting. FortKnox's distinctive strengths are the SaaS delivery (a modern virtual air gap without building it yourself), the thorough lockdown (immutability + quorum + MFA + RBAC), the flexible options (SaaS/self-managed/Google Cloud), and being part of Cohesity's comprehensive, market-leading platform. Its honest positioning: it's most compelling for organisations wanting a modern, managed (or flexible) cyber vault as the isolated last line — especially Cohesity customers and those valuing the SaaS simplicity; for those already committed to a rival's ecosystem (Rubrik, Dell Cyber Recovery), that vendor's vault may fit. It's an enterprise product (quote/SaaS-priced). TechBag scopes FortKnox honestly — clarifying when a cyber vault (beyond immutable backups) is warranted, and comparing vs Rubrik/Dell/Veeam — and licenses it in INR/GST with local support.
The numbers behind the platform
What your Cohesity FortKnox journey looks like
Cyber-vault scoping
Your most critical data, ransomware/compliance exposure (RBI, resilience needs), existing backups (immutable?), and delivery preference (SaaS/self-managed/GCP). TechBag scopes it and clarifies when a vault (beyond immutable backups) is warranted.
Set up the vault
Copy your critical data to the isolated, immutable FortKnox vault — with network/access isolation, WORM, and lockdown (MFA, quorum, RBAC). Establish the guaranteed surviving clean copy.
Harden & verify clean
Configure quorum and access controls, enable threat scanning (Google threat intel on GCP), and identify clean recovery points — so the vault is locked down and its copy is verified clean. A trustworthy last line.
Test recovery & integrate
Test clean recovery FROM the vault, integrate with your Cohesity resilience (DataProtect), and refine. TechBag models it in INR/GST and supports you locally.
Trusted across regulated industries in 100+ countries
The review scoreboard
Modelled on Gartner Peer Insights structure. *Counts and breakdowns are illustrative pending verified review collection.
Quick poll — what’s driving your evaluation?
Talk to an advisor“FortKnox is our guaranteed last line — an isolated, immutable copy attackers simply can't reach, even if they compromised everything else. For our most critical data, that certainty is priceless. Defence in depth, completed.”
“As SaaS, we got a modern virtual air gap without building and running an isolated environment — no tape handling, no separate data centre. Air-gap security, minus the complexity. That made a cyber vault actually achievable for us.”
“The quorum control is powerful — no single compromised admin or malicious insider can destroy the vault; it takes multiple people's approval. Combined with immutability and isolation, there's no single point of compromise.”
“It complements our immutable backups — those are the strong primary defence, FortKnox is the isolated last resort for critical data. TechBag was clear it's a further layer, not a replacement. Layered resilience.”
“We compared Rubrik's cyber vault and Dell Cyber Recovery, but FortKnox's SaaS simplicity, thorough lockdown, and being part of our Cohesity platform won. TechBag gave an honest comparison.”
“The Google Cloud managed option (with Google threat intelligence) let us scan vaulted data for threats and recover from verified-clean points. Knowing the vaulted copy is clean matters.”
“As a regulated Indian institution facing ransomware risk and RBI resilience expectations, a guaranteed isolated clean copy directly supported our requirements. TechBag mapped it to our compliance needs in INR/GST.”
“Fast clean recovery FROM the vault matters as much as the vault itself — in a real event we could restore trusted data quickly. A vault you can't recover from well is useless; this one recovers.”
Where everyone sits — the grids
Analyst firms bury this view behind paywalls, and G2 retired its Grid. So here’s TechBag’s synthesis of the cyber vaulting / cyber recovery market — tap any vendor to see why it sits where it does.
TechBag Email-Security Grid
Execution strength vs product vision — the classic market map, minus the paywall.
SaaS cyber vault (virtual air gap). This page's product.
Detection × Portfolio Integration
The grid nobody publishes — how strong the email detection is vs how integrated with the wider security portfolio.
SaaS + thorough lockdown.
Positions are TechBag’s illustrative synthesis of public review-platform data and vendor documentation — not a reproduction of any analyst graphic. Verify before relying on it.
Cohesity FortKnox vs the cyber-vaulting field
Rubrik Cyber Vault, Dell Cyber Recovery and Veeam Vault — honest lanes; the edge is a SaaS virtual air gap + thorough lockdown (quorum/MFA/RBAC) + the Cohesity platform. Remember: it's the isolated layer BEYOND immutable backups (DataProtect). Closest rival? Rubrik. We say so.
| Dimension | Cohesity FortKnox | Cohesity DataProtect | Rubrik Cyber Vault | Dell Cyber Recovery | Veeam Vault | No cyber vault |
|---|---|---|---|---|---|---|
| Position | SaaS cyber vault (virtual air gap) | Immutable backups (the primary layer) | Modern cyber vault (closest rival) | Established isolated-vault solution | Veeam's vault / cyber-secure | Backups only — no isolated copy |
| Isolation (air gap) | Yes — network + access | Immutable (not isolated vault) | Yes | Yes (isolated) | Yes | No |
| Immutability (WORM) | Yes | Yes | Yes | Yes | Yes | No |
| SaaS / virtual air gap (no build-it) | Yes — SaaS (+ self-managed/GCP) | N/A (backup layer) | SaaS/cloud | Build/run isolated env | Cloud vault | N/A |
| Lockdown (quorum/MFA/RBAC) | Yes — quorum + MFA + RBAC | MFA/RBAC | Yes | Yes | MFA/RBAC | None |
| Threat scanning / clean points | Yes (+ Google threat intel on GCP) | Yes | Yes | Yes (CyberSense) | Some | None |
| Part of comprehensive platform | Cohesity (largest DP provider) | Cohesity platform | Rubrik platform | Dell platform | Veeam platform | N/A |
| Cost / simplicity | SaaS/quote (simple to adopt) | Enterprise, quote-only | Enterprise, quote-only | Enterprise (build cost) | Subscription | No cost (but no protection) |
| Best fit | Modern SaaS cyber vault as the isolated last line (esp. Cohesity) | The primary immutable-backup layer (pair with a vault) | Rubrik-ecosystem cyber vault | Dell-ecosystem isolated recovery | Veeam-ecosystem vault | Nobody — no last-resort copy is a big risk |
Which email-security approach fits you?
Honest fit signals — because the fastest way to lose your trust is to pretend one product wins every scenario.
Choose Cohesity FortKnox if…
- ✓You want a guaranteed isolated clean copy — a cyber vault attackers can't reach — as the last line beyond immutable backups
- ✓You want a modern virtual air gap as SaaS — air-gap security without building/running an isolated environment
- ✓You want thorough lockdown — immutable + isolation + MFA + quorum (multi-person) + RBAC (no single point of compromise)
- ✓You want it flexible (SaaS/self-managed/Google Cloud) and from the world's largest DP provider (esp. Cohesity customers)
Cohesity DataProtect (pair) if…
- ✓Remember: immutable backups (DataProtect) are the primary layer — FortKnox is the isolated vault BEYOND them
Rubrik Cyber Vault if…
- ✓You're in the Rubrik ecosystem and want its cyber vault (the closest modern rival)
Dell Cyber Recovery if…
- ✓You want the established isolated-vault solution (with CyberSense), esp. Dell estates
No cyber vault if…
- ✓Risky for critical data — without an isolated copy, a total compromise can leave nothing to recover
What do email threats cost you?
Drag the sliders (count critical data TB; downtime/ransom exposure as loaded cost). Estimates contrast backups only (no isolated last resort — total-compromise risk) vs FortKnox (an isolated, immutable copy attackers can't reach) — the value is insurance against the catastrophic worst case (a clean copy always survives). Illustrative; FortKnox is SaaS/quote-priced.
Loaded cost = salary + overheads per productive hour. Illustrative only — your TechBag quote models actual device counts and modules.
Three ways to consume it
Cohesity FortKnox is SaaS/quote-priced — typically billed on the data vaulted (front-end TB), scoped to your most critical data (self-managed & Google Cloud options too). Best understood as critical insurance. TechBag scopes what to vault, advises when it's warranted, and quotes in INR/GST.
FortKnox (cyber vault — SaaS)
Best for the isolated last line of defence
- SaaS/quote-priced by vaulted data (front-end TB) — vault your critical data
- Isolated + immutable + MFA + quorum + RBAC
- Fast clean recovery from the vault
+ Platform add-ons
Best for a broader rollout
- Scoped to your estate
- Add-on modules as needed
- Phased, right-sized deployment
+ Cohesity resilience (DataProtect)
Best for defence in depth
- Pair with DataProtect immutable backups (primary layer)
- Self-managed or managed on Google Cloud (threat intel)
- TechBag scopes what to vault in INR/GST
Buy it for less — TechBag pricing beats list
Whatever the list prices above, TechBag negotiates a significantly better deal — with GST-compliant INR invoicing and local support. Ask us for your discounted quote.
Get an India-ready quote
Tell us your device counts and current tools — we’ll model it against what you spend today.
The 8 questions to ask every vendor
Take this into your next vendor call — including ours.
Do you have a guaranteed isolated copy that survives even a total compromise? FortKnox is the cyber vault attackers can't reach — the last resort.
Are immutable backups enough, or do you need an isolated vault for critical data? FortKnox is the further, air-gapped layer. TechBag advises when it's warranted.
Want air-gap security without building/running an isolated environment? FortKnox's SaaS virtual air gap makes a cyber vault practical.
Is your vault protected against a single compromised admin or insider? FortKnox uses quorum (multi-person approval) + MFA + RBAC + immutability — no single point of compromise.
Can you verify the vaulted copy is clean and recover from it fast? FortKnox enables threat scanning, clean points and fast clean recovery from the vault.
SaaS, self-managed, or managed on Google Cloud (with Google threat intel)? FortKnox offers all three — pick your model.
Weigh Rubrik Cyber Vault (closest rival), Dell Cyber Recovery (established), Veeam Vault. FortKnox's edge is SaaS simplicity + lockdown + the Cohesity platform. TechBag compares.
SaaS/quote-priced (front-end TB) — TechBag scopes it and quotes in INR/GST.
Questions buyers ask
Ready to guarantee a clean copy always survives?
Scope Cohesity FortKnox (an isolated, immutable cyber vault attackers can't reach) — or let a TechBag advisor tell you honestly whether a cyber vault (beyond immutable backups) is warranted for your critical data, and quote it in INR/GST.
Stats, ratings, review counts and pricing are illustrative and sourced from public materials; verify before purchase.