Cohesity FortKnox
FortKnox is a cyber vault — a secure, isolated, immutable off-site copy of your critical data that ransomware can’t reach, delivered as SaaS (a ‘virtual air gap’). So even if everything else is compromised, a clean copy always survives. The isolated last line of defence.
Buy through TechBag
Same software. Better outcome — at a lower cost.
How it’s rated
Full scoreboard ↓Quick answer
The Cohesity platform family
This page covers FortKnox — the cyber vault. The rest of the Cohesity portfolio:
Quick facts
30-second orientation- Product
- FortKnox — cyber vault (data isolation)
- Vendor
- Cohesity (founded 2013 · Mohit Aron)
- The category
- Cyber vaulting / data isolation / cyber recovery
- What it is
- An isolated, immutable, off-site copy attackers can't reach
- The idea
- A modern 'virtual air gap' — delivered as SaaS
- Protection
- Network + access isolation, WORM immutability, MFA, quorum
- The guarantee
- A clean, last-resort copy always survives
- Also
- Self-managed option; managed on Google Cloud (threat intel)
- Vs
- Rubrik Cyber Vault, Veeam Vault, Dell Cyber Recovery
- In India via
- TechBag — licensing, quotes, GST invoicing, support
Understand cyber vaulting before you buy it
Most product pages skip this. We start here — so you buy a capability, not a buzzword.
What is Cohesity FortKnox?
A cyber vault — a secure, isolated, immutable off-site copy of your critical data that ransomware can’t reach, delivered as SaaS (a ‘virtual air gap’). So a clean copy always survives.
Backups only vs an isolated cyber vault — the honest table
What consolidation actually replaces, dimension by dimension.
| Dimension | Unprotected / signature email | FortKnox (Cohesity) |
|---|---|---|
| Beyond immutable backups | Backups only (single layer) | + isolated vault (last resort) |
| Attacker reach | Can reach backups (if breached) | Can't reach the isolated vault |
| Air gap | Tape / build-it-yourself (complex) | Virtual air gap, as SaaS |
| Immutability | Sometimes | WORM — always, in the vault |
| Single point of compromise | One admin could destroy | Quorum — multi-person control |
| Insider threat | Exposed | Quorum + RBAC guard it |
| Recovery cleanliness | Uncertain | Verified-clean vault points |
| The guarantee | Hope | A clean copy always survives |
FortKnox is a cyber vault — an isolated, immutable copy attackers can’t reach, as SaaS (a virtual air gap), with quorum/MFA/RBAC lockdown. It's the layer BEYOND immutable backups (DataProtect). Closest rival? Rubrik. Established? Dell Cyber Recovery. TechBag advises honestly.
The five pieces of the platform
Vendors love diagrams; buyers need to know what they’re actually operating. Here’s the whole platform, demystified.
Isolated Vault
A copy of critical data sits in a vault isolated from your network and access, a virtual air gap, so attackers in your environment can’t reach it.
Immutable (WORM)
Vaulted data is immutable (write-once-read-many): not even an attacker with credentials or a malicious insider can encrypt, alter or delete it.
Strong Access Controls
MFA, quorum (multi-person approval for sensitive actions) and RBAC mean no single compromised or malicious individual can tamper with or delete the vault.
SaaS — Virtual Air Gap
Delivered as SaaS: a Cohesity-managed, cloud-isolated vault, so you get an air-gapped copy without running tape or a separate data centre yourself.
Clean Recovery From Vault
After an attack, you restore fast from the vault’s clean, trusted copy rather than from a possibly compromised backup.
A single plane recovers all workloads — the aim is a quick, clean restore, not a backup.
Twelve capabilities. Isolate, protect, recover.
FortKnox keeps an isolated, immutable copy attackers can’t reach — a virtual air gap, as SaaS — the guaranteed last line of defence in the Cohesity portfolio.
Network Isolation
The vault is separated from your network, so attackers who compromise your environment can’t reach the vaulted copy.
Access Isolation
Vault access is separate from your normal access paths, so credentials stolen in your environment don’t open the vault.
Virtual Air Gap (SaaS)
Air-gap-level isolation as a managed SaaS vault, without building tape systems or an isolated data centre yourself.
Immutable (WORM) Vault
Vaulted data is write-once-read-many: it can’t be encrypted, altered or deleted, even by an insider with credentials.
Multi-Factor Authentication
Vault access requires MFA, so a password an attacker might already hold is not enough on its own.
Quorum (Multi-Person Approval)
Sensitive vault actions need approval from several authorised people (quorum), so no lone admin or insider can delete it.
Role-Based Access Control
Granular role-based access control gives each person only the limited vault access their role needs.
Threat Scanning & Clean Points
Scans vaulted data for threats and identifies clean recovery points; the Google Cloud managed option adds Google threat intelligence.
Clean, Fast Recovery From Vault
Restores clean, trusted data from the vault quickly after an attack. A vault is only as useful as its recovery.
The Isolated Last Line of Defence
The isolated last layer beyond DataProtect’s immutable backups: an off-network copy that survives even if everything else is compromised.
SaaS, Self-Managed or on Google Cloud
Run it as Cohesity-managed SaaS, self-managed, or as a managed service on Google Cloud with Google threat intelligence.
Simple to Adopt (No Air-Gap Build)
As SaaS, a cyber vault needs no tape system or isolated data centre, so you get air-gap-level protection quickly.
Watch Cohesity FortKnox in action
The overview, getting started, and the core workflows.
Building a Cyber Vault Fortress with FortKnox
FortKnox cyber vaulting.
New self-managed deployment option for FortKnox
Self-managed FortKnox.
Watch a demo of Cohesity Gaia
AI over your protected data.
Want a live, India-context walkthrough for your environment?
Book a guided demo →Backups are easy. Fast, clean recovery is the hard part.
Here’s what genuinely sets Cohesity FortKnox apart.
An isolated copy attackers can't reach — the guaranteed last line of defence
Ransomware now targets backups as well as production data. Immutable backups resist that, but FortKnox adds a further guarantee: a copy of critical data in an isolated vault attackers can’t reach, so a clean copy survives even if your primary environment and backups are fully compromised.
A modern virtual air gap — as SaaS, without the complexity
A traditional air gap meant tape, which is slow and operationally heavy, or a separate isolated data centre, which is expensive. FortKnox delivers it as SaaS: critical data goes to a Cohesity-managed, cloud-isolated, immutable vault, with no tape handling and no extra site to run.
Locked down — immutable, MFA, quorum, RBAC (no single point of compromise)
The vault is the last line of defence, so it has to be the hardest thing to breach. FortKnox layers isolation, immutable data, MFA, RBAC and quorum, where sensitive actions such as deletion need several people to approve. No single stolen credential or malicious insider can destroy it.
Part of Cohesity's cyber resilience — defence in depth
Cyber resilience is layers: immutable backups, threat detection, clean recovery and fast mass recovery in DataProtect. FortKnox is the last layer, an isolated off-network copy for the most critical data. Immutable backups are enough for many; the vault is for when total compromise is unacceptable.
From the world's largest data-protection provider — and relevant to India
Cohesity is the world’s largest data-protection provider, with 12,000+ customers including 85+ of the Fortune 100. For Indian banks under RBI, government and critical infrastructure, an isolated clean copy supports ransomware resilience. FortKnox runs as SaaS, self-managed, or managed on Google Cloud.
The honest scope
FortKnox is a cyber vault: an isolated, immutable copy beyond your immutable backups, a complement not a replacement. Rubrik, Veeam, Dell and Commvault all offer vaulting too. FortKnox stands out for SaaS delivery and its quorum, MFA and RBAC lockdown; it is quote-priced.
The numbers behind the platform
What your Cohesity FortKnox journey looks like
Cyber-vault scoping
Map critical data, RBI and ransomware exposure, current backups and delivery choice. TechBag says if a vault is warranted.
Set up the vault
Copy critical data into the isolated, immutable FortKnox vault, locked down with MFA, quorum and RBAC.
Harden & verify clean
Set quorum and access controls, enable threat scanning (Google threat intel on GCP) and identify clean recovery points.
Test recovery & integrate
Test clean recovery from the vault and tie it into DataProtect. TechBag prices it in INR/GST and supports you locally.
The review scoreboard
Modelled on Gartner Peer Insights structure. *Counts and breakdowns are illustrative pending verified review collection.
Quick poll — what’s driving your evaluation?
Talk to an advisor“FortKnox is our last line: an isolated, immutable copy attackers can’t reach even if everything else falls.”
“As SaaS, it gave us a virtual air gap with no tape handling and no separate data centre. That made a vault achievable.”
“Quorum is the strong part: no single compromised admin or insider can destroy the vault without other people approving.”
“Our immutable backups stay the primary defence; FortKnox is the isolated last resort. TechBag called it a layer, not a replacement.”
“We compared Rubrik’s vault and Dell Cyber Recovery. FortKnox won on SaaS simplicity, lockdown and fit with our Cohesity platform.”
“On the Google Cloud managed option we scan vaulted data for threats and recover from verified-clean points.”
“We’re a regulated Indian institution under RBI resilience expectations; an isolated clean copy met them. TechBag priced it in INR/GST.”
“In a real event, fast clean recovery from the vault mattered as much as the vault. We restored trusted data quickly.”
Where everyone sits — the grids
Analyst firms bury this view behind paywalls, and review-site grids score satisfaction, not fit for your estate. So here’s TechBag’s synthesis of the cyber vaulting / cyber recovery market — tap any vendor to see why it sits where it does.
TechBag Backup & Resilience Grid
Execution strength vs product vision — the classic market map, minus the paywall.
SaaS cyber vault (virtual air gap). This page's product.
Recovery × Vault Lockdown
The grid nobody publishes — recovery speed & granularity vs vault depth & lockdown.
SaaS + thorough lockdown.
Positions are TechBag’s illustrative synthesis of public review-platform data and vendor documentation — not a reproduction of any analyst graphic. Verify before relying on it.
Cohesity FortKnox vs the cyber-vaulting field
Rubrik Cyber Vault, Dell Cyber Recovery and Veeam Vault — honest lanes; the edge is a SaaS virtual air gap + thorough lockdown (quorum/MFA/RBAC) + the Cohesity platform. Remember: it's the isolated layer BEYOND immutable backups (DataProtect). Closest rival? Rubrik. We say so.
| Dimension | Cohesity FortKnox | Cohesity DataProtect | Rubrik Cyber Vault | Dell Cyber Recovery | Veeam Vault | No cyber vault |
|---|---|---|---|---|---|---|
| Position | SaaS cyber vault (virtual air gap) | Immutable backups (the primary layer) | Modern cyber vault (closest rival) | Established isolated-vault solution | Veeam's vault / cyber-secure | Backups only — no isolated copy |
| Isolation (air gap) | Yes — network + access | Immutable (not isolated vault) | Yes | Yes (isolated) | Yes | No |
| Immutability (WORM) | Yes | Yes | Yes | Yes | Yes | No |
| SaaS / virtual air gap (no build-it) | Yes — SaaS (+ self-managed/GCP) | N/A (backup layer) | SaaS/cloud | Build/run isolated env | Cloud vault | N/A |
| Lockdown (quorum/MFA/RBAC) | Yes — quorum + MFA + RBAC | MFA/RBAC | Yes | Yes | MFA/RBAC | None |
| Threat scanning / clean points | Yes (+ Google threat intel on GCP) | Yes | Yes | Yes (CyberSense) | Some | None |
| Part of comprehensive platform | Cohesity (largest DP provider) | Cohesity platform | Rubrik platform | Dell platform | Veeam platform | N/A |
| Cost / simplicity | SaaS/quote (simple to adopt) | Enterprise, quote-only | Enterprise, quote-only | Enterprise (build cost) | Subscription | No cost (but no protection) |
| Best fit | Modern SaaS cyber vault as the isolated last line (esp. Cohesity) | The primary immutable-backup layer (pair with a vault) | Rubrik-ecosystem cyber vault | Dell-ecosystem isolated recovery | Veeam-ecosystem vault | Nobody — no last-resort copy is a big risk |
Which backup & cyber resilience approach fits you?
Honest fit signals — because the fastest way to lose your trust is to pretend one product wins every scenario.
Choose Cohesity FortKnox if…
- You want a guaranteed isolated clean copy — a cyber vault attackers can't reach — as the last line beyond immutable backups
- You want a modern virtual air gap as SaaS — air-gap security without building/running an isolated environment
- You want thorough lockdown — immutable + isolation + MFA + quorum (multi-person) + RBAC (no single point of compromise)
- You want it flexible (SaaS/self-managed/Google Cloud) and from the world's largest DP provider (esp. Cohesity customers)
Cohesity DataProtect (pair) if…
- Remember: immutable backups (DataProtect) are the primary layer — FortKnox is the isolated vault BEYOND them
Rubrik Cyber Vault if…
- You're in the Rubrik ecosystem and want its cyber vault (the closest modern rival)
Dell Cyber Recovery if…
- You want the established isolated-vault solution (with CyberSense), esp. Dell estates
No cyber vault if…
- Risky for critical data — without an isolated copy, a total compromise can leave nothing to recover
Cohesity FortKnox is one of 20 cyber recovery products TechBag carries. The Cyber Recovery guide narrows them to a shortlist and shows the reasoning. →
What could this save you?
Drag the sliders (count critical data TB; downtime/ransom exposure as loaded cost). Estimates contrast backups only (no isolated last resort — total-compromise risk) vs FortKnox (an isolated, immutable copy attackers can't reach) — the value is insurance against the catastrophic worst case (a clean copy always survives). Illustrative; FortKnox is SaaS/quote-priced.
Loaded cost = salary + overheads per productive hour. Illustrative only — your TechBag quote models your actual environment and modules.
Three ways to consume it
Cohesity FortKnox is SaaS/quote-priced — typically billed on the data vaulted (front-end TB), scoped to your most critical data (self-managed & Google Cloud options too). Best understood as critical insurance. TechBag scopes what to vault, advises when it's warranted, and quotes in INR/GST.
FortKnox (cyber vault — SaaS)
Best for the isolated last line of defence
- SaaS/quote-priced by vaulted data (front-end TB) — vault your critical data
- Isolated + immutable + MFA + quorum + RBAC
- Fast clean recovery from the vault
+ Platform add-ons
Best for a broader rollout
- Scoped to your estate
- Add-on modules as needed
- Phased, right-sized deployment
+ Cohesity resilience (DataProtect)
Best for defence in depth
- Pair with DataProtect immutable backups (primary layer)
- Self-managed or managed on Google Cloud (threat intel)
- TechBag scopes what to vault in INR/GST
Buy it for less — TechBag pricing beats list
Whatever the list prices above, TechBag negotiates a significantly better deal — with GST-compliant INR invoicing and local support. Ask us for your discounted quote.
Get an India-ready quote
Tell us your requirements and current tools — we’ll model it against what you spend today.
The 8 questions to ask every vendor
Take this into your next vendor call — including ours.
Does FortKnox give us an isolated copy that survives even a total compromise of our environment?
Are our immutable backups enough, or does our critical data need an isolated FortKnox vault as well?
Want air-gap security without building/running an isolated environment? FortKnox's SaaS virtual air gap makes a cyber vault practical.
Can a single compromised admin or insider breach the vault, or do quorum, MFA, RBAC and immutability block them?
Can we verify the vaulted copy is clean, and how fast can we recover from it?
SaaS, self-managed, or managed on Google Cloud (with Google threat intel)? FortKnox offers all three — pick your model.
How does FortKnox compare with Rubrik Cyber Vault, Dell Cyber Recovery and Veeam Vault on simplicity and lockdown?
SaaS/quote-priced (front-end TB) — TechBag scopes it and quotes in INR/GST.
Questions buyers ask
Ready to guarantee a clean copy always survives?
Scope Cohesity FortKnox (an isolated, immutable cyber vault attackers can't reach) — or let a TechBag advisor tell you honestly whether a cyber vault (beyond immutable backups) is warranted for your critical data, and quote it in INR/GST.
Stats, ratings, review counts and pricing are illustrative and sourced from public materials; verify before purchase.