- BFSIBanking, Financial Services & Insurance
- HealthcareComing soon
- ManufacturingComing soon
- Retail & E-CommerceComing soon
NetApp
Disaster recovery, backup and ransomware protection for ONTAP data— the three NetApp Console services, with what each costs per GB and what is already inside ONTAP One. This hub covers NetApp’s resilience services only.
Buy through TechBag
Same software. Better outcome — at a lower cost.
The company, at a glance
Quick answer
Three intel pages. Disaster recovery, backup and ransomware resilience.
NetApp’s resilience services, one by one — every linked card is a full intel page, from SnapMirror-based disaster recovery to backup and ransomware resilience for ONTAP.
NetApp Disaster Recovery
Orchestrated failover for VMware and Kubernetes.
Fails VMware and Kubernetes workloads over between ONTAP sites, or into AWS and Google Cloud VMware services, on SnapMirror.
NetApp Backup and Recovery
3-2-1 backups of ONTAP volumes, VMs and databases.
Snapshots, SnapMirror copies and object-store backups for ONTAP volumes, SQL Server, Oracle, VMware, Hyper-V, KVM and Kubernetes.
NetApp Ransomware Resilience
Spots attacks in ONTAP and guides a clean restore.
Joins ONTAP’s Autonomous Ransomware Protection with user-behaviour alerts, SIEM feeds, readiness drills and guided clean restores.
SnapMirror and ONTAP One
Platform & engineNot sold on their own: SnapMirror (asynchronous, synchronous and active sync), SnapCenter, SnapLock and Autonomous Ransomware Protection come in ONTAP One, the licence bundle shipped with every AFF and FAS since May 2023; older systems upgrade to ONTAP One for a fee. The three Console services are priced on top
Cloud Volumes ONTAP and Keystone
Platform & engineStorage rather than resilience services: Cloud Volumes ONTAP runs ONTAP in a public cloud on a per-TiB licence, and its Professional package includes Backup and Recovery volume backups; Keystone is NetApp’s storage subscription, offered in India since December 2021
Hyperscaler NetApp services
Platform & engineAmazon FSx for NetApp ONTAP, Azure NetApp Files and Google Cloud NetApp Volumes are sold and billed by AWS, Microsoft and Google; they serve as targets and sources for Disaster Recovery and Ransomware Resilience, not as products bought from NetApp
Instaclustr
Platform & engineStill a NetApp business, running managed open-source data platforms, and outside resilience, so not reviewed here; Spot and CloudCheckr, by contrast, were sold to Flexera in a deal announced in January 2025
NetApp sells across 3 of the products TechBag carries in backup & cyber resilience. The Backup & Cyber Resilience guide shows how the category splits and which part is yours. →
Why “what ONTAP One already includes” is the whole story
Much of NetApp’s protection — SnapMirror, SnapCenter, SnapLock and autonomous ransomware protection — is already licensed in ONTAP One. The Console services add the orchestration on top, priced per GB. Check what you own before you buy.
SnapMirror
Asynchronous SnapMirror sends new snapshots on a schedule; synchronous mode holds RPO at zero, and active sync fails over automatically between sites.
Autonomous Ransomware Protection
ARP/AI, from ONTAP 9.16.1, is a pre-trained model with no learning period; SE Labs rated it AAA in June 2024, with 99% recall.
SnapLock and snapshot locking
WORM retention in Compliance or Enterprise mode, plus tamperproof snapshots; patch CVE-2026-22050, which let a privileged attacker remove a lock’s expiry.
NetApp Console modes
Standard mode is SaaS; restricted and private modes run in your own cloud or air-gapped, where only Backup and Recovery works — for ONTAP volumes only.
Start with the job — failover, backup or ransomware recovery — then check what your ONTAP licence already covers.
Peer & market recognition
Every claim on this hub traces to one of these public signals.
Leader, Enterprise Storage Platforms
in the 2025 and 2026 Magic Quadrants; this rates NetApp as a storage vendor, not as backup or DR software
Absent from Gartner’s backup quadrant
NetApp was not evaluated in Backup and Data Protection Platforms, and TechBag found no DR or cyber recovery placement
AAA rating for ARP/AI
a June 2024 test of ONTAP’s AI ransomware detection found 99% recall and no false positives; a lab test, not an analyst ranking
Bengaluru R&D opens
NetApp has worked in India since 2000; its owned 15-acre Bengaluru campus followed in 2017
ONTAP One bundles protection
every new AFF and FAS ships with SnapMirror, SnapCenter, SnapLock and Autonomous Ransomware Protection included
BlueXP becomes NetApp Console
the rename on 6 October 2025 gave all three resilience services their current names on the same day
Kubernetes DR generally available
Disaster Recovery 4.3.7, on 16 September 2026, added Kubernetes and OpenShift Virtualization alongside VMware
No NetApp entry on CISA KEV
but SnapCenter’s CVE-2025-26512 scored 9.9, and CVE-2026-22050 targeted snapshot locking itself; patch both
The company in six figures
See the platform, hear the pitch
Cyber resiliency and data protection for SAN workloads
A NetApp INSIGHT 2025 session on detection, backup and DR for SAN workloads together.
Reimagining cyber resilience with NetApp AI-powered data protection
An INSIGHT 2025 session, with demos, on AI-based ransomware protection in ONTAP.
Architecting resilience
A short October 2024 explainer from NetApp, recorded before BlueXP became Console.
Where NetApp sits — the grids
Two company-level views you won’t find on any vendor site — tap any dot for the rationale. The category-level grid lives on the product page.
NetApp Across Its Solution Areas
Each dot is a NetApp solution area: competitive position vs category momentum.
SnapMirror asynchronous, synchronous and active sync, orchestrated by Disaster Recovery for VMware and, since September 2026, Kubernetes.
Resilience Jobs Covered × Price Transparency
How many resilience jobs each vendor covers — backup, DR, cyber recovery — vs how much of its pricing it publishes.
Replication DR, backup, in-storage ransomware detection and locked snapshots, all tied to ONTAP storage, with no SaaS backup. Per-GB prices are published.
Positions are TechBag’s illustrative synthesis of public review-platform standings and vendor documentation — not a reproduction of any analyst graphic. Verify before relying on it.
New to this? Learn it properly.
Zero-jargon starting points, in reading order. Each links into the deep education on the product page.
Where should you start with NetApp?
Answer three questions; we’ll point you at the right starting product. No email required — this isn’t that kind of quiz.
1. What would hurt most if it failed today?
2. How far back might you need to go?
3. Where must the management console run?
Three services, three jobs
Disaster Recovery fails workloads over, Backup and Recovery keeps dated copies in object storage, and Ransomware Resilience spots and reverses attacks.
Read →What ONTAP One already includes
SnapMirror, SnapCenter, SnapLock and ARP come with new arrays. The three Console services are what you pay extra for, per GB.
Read →BlueXP is now NetApp Console
The October 2025 rename changed every service name, so older videos, quotes and documents still say BlueXP for the same products.
Read →Reading a per-GB price
Prices count used capacity on the source volume and bill per TiB-hour; the list rate is an estimate, and term discounts lower it.
Read →Snapshots an admin cannot delete
SnapLock and tamperproof snapshots hold copies for a set period. Patch ONTAP first, since CVE-2026-22050 went after that very lock.
Read →Where NetApp fits in backup and resilience
The Backup & Cyber Resilience guides separate backup, DR and cyber recovery and place NetApp’s three services within them.
Read →The acronym decoder
Every term on these pages, in one place- ONTAP
- NetApp’s storage operating system, running on AFF, FAS and ASA arrays and as Cloud Volumes ONTAP in public clouds.
- ONTAP One
- The licence bundle shipped with new AFF and FAS systems since May 2023, including SnapMirror, SnapCenter, SnapLock and ARP.
- ONTAP Base
- The stripped-down bundle without data protection features; it cannot add licences, so it must be upgraded to ONTAP One.
- NetApp Console
- NetApp’s management console, called BlueXP until 6 October 2025, where the three resilience services run.
- Console agent
- The software NetApp Console places in your network or cloud to reach ONTAP systems and vCenter.
- SnapMirror
- ONTAP’s replication engine, copying snapshots asynchronously on a schedule or synchronously with zero RPO.
- SnapMirror active sync
- Formerly SnapMirror Business Continuity: replication with automatic transparent failover between two sites.
- SnapCenter
- NetApp’s application-consistent backup tool for databases and VMs, included in ONTAP One.
- ARP/AI
- Autonomous Ransomware Protection with a pre-trained AI model, from ONTAP 9.16.1, that needs no learning period.
- SnapLock
- ONTAP’s WORM feature, in Compliance or Enterprise mode, which also covers tamperproof snapshot locking.
- Front-end capacity
- Used capacity on the source volume, before efficiencies; the unit NetApp meters its three services on.
- RPO and RTO
- RPO measures how old the most recent recoverable copy is; RTO measures how long it takes to get the service back up.
Buy it like you’ve done this before
The procurement playbook TechBag runs with IT buyers — steps, licensing cheat-sheet, and the pitfalls that cost quarters.
Check your ONTAP licence
Arrays on ONTAP One already have SnapMirror, SnapLock and ARP; ONTAP Base must be upgraded before any of them can be used.
Pick the Console mode
Disaster Recovery and Ransomware Resilience need SaaS standard mode; air-gapped or restricted sites can run only Backup and Recovery, for ONTAP volumes.
Measure used source capacity
All three services meter used capacity on the source volume, before efficiencies; measure it per service, since each bills separately.
Choose the term
Pay as you go suits a trial year; 12- and 36-month terms cut each per-GB rate, and BYOL licences come from NetApp sales.
Patch and rehearse
Fix CVE-2026-22050 before trusting locked snapshots and CVE-2025-26512 on SnapCenter, then run a failover test and a clean-restore drill.
Get it priced in rupees
NetApp lists prices only in USD. TechBag sizes capacity across the three services, compares terms and quotes the total in INR with GST.
The licensing cheat-sheet
| Product | Licensing model | How you enter | Best for |
|---|---|---|---|
| Disaster Recovery | Per GB of used source capacity a month, billed per TiB-hour · Marketplace pay as you go, annual or BYOL · SaaS mode only | $0.04/GB/mo · $0.034 on 36 months | VMware and Kubernetes DR |
| Backup and Recovery | Per GB of used source capacity a month · BYOL on 1- to 3-year terms, floating across the Console organisation | $0.05/GB/mo · $0.0425 on 36 months | Backup of ONTAP workloads |
| Ransomware Resilience | Per GB of used source capacity a month · Marketplace or BYOL · SaaS mode only | $0.07/GB/mo · $0.0595 on 36 months | Ransomware detection and recovery |
| ONTAP One | Bundled with new AFF and FAS · includes SnapMirror, SnapCenter, SnapLock and ARP · excludes the Console services | No separate price | Replication and locks on arrays |
| Cloud Volumes ONTAP | Per-TiB capacity licence · Professional package includes Backup and Recovery volume backups | Freemium up to 500 GiB per system | ONTAP in a public cloud |
| Ransomware Recovery Guarantee | A programme, not a product · new FAS, AFF or ASA HA pairs with ONTAP One and validated SnapLock snapshots | Subject to NetApp’s terms | Contractual recovery backing |
NetApp publishes per-GB monthly prices for all three services; ONTAP systems themselves are quoted. TechBag gets the quote itemised in INR with GST.
Five pitfalls that cost buyers quarters
Planning DR for an air-gapped site
Disaster Recovery and Ransomware Resilience run only in SaaS mode; a sovereign or air-gapped bank can use Backup and Recovery alone.
Budgeting SnapMirror as a product
It comes in ONTAP One with new arrays. On older systems the only route is an upgrade to ONTAP One, at an extra fee.
Reading the per-GB rate as the invoice
NetApp calls its prices estimates: billing runs per TiB-hour on used source capacity, and term and volume breaks change the total.
Expecting Microsoft 365 backup
Backup and Recovery protects ONTAP workloads, not Microsoft 365, and NetApp’s old SaaS backup for it is a legacy product.
Trusting locks on unpatched ONTAP
CVE-2026-22050 let a privileged attacker clear a locked snapshot’s expiry on 9.16.1 before P9 and 9.17.1 before P2. Patch first.
The evaluation kit
Each intel page carries an 8-question vendor checklist and a value calculator:
Skip the homework entirely
Bring your requirements and current tool bills — a TechBag advisor models the whole decision for you.
Book a discovery call →The forces shaping this market
Four trends with momentum scores (TechBag’s read of analyst and market signals) — and what each means for your next decision.
Category momentum — estimated market growth
Illustrative CAGR synthesis**TechBag’s illustrative estimate, not a quoted analyst figure. The takeaway: storage that detects ransomware itself is becoming expected — which is why NetApp builds it into ONTAP.
Detection moving into storage
ONTAP’s ARP/AI, a pre-trained model with no learning period, covers NAS from 9.16.1, SAN from 9.17.1 and FlexGroup from 9.18.1.
What it means for you
The array can raise the alarm before the backup does.
DR for containers as well as VMs
NetApp Disaster Recovery made Kubernetes and OpenShift Virtualization generally available on 16 September 2026.
What it means for you
Plan one runbook for VMs and containers together.
Storage alerts feeding the SOC
Ransomware Resilience added Microsoft Sentinel, Google SecOps and webhook SIEM feeds during 2026, plus automatic user blocking.
What it means for you
Let the security team see storage alerts as they happen.
Partner scanning, not yet shipped
NetApp announced Elastio scanning of snapshots in March 2026 as planned for the near future; TechBag found no release yet.
What it means for you
Buy on what ships today, not on announcements.
Questions buyers ask about NetApp
Ready to shortlist NetApp?
Open any of the three intel pages for the deep dive, or let a TechBag advisor build the case with you — the capacity to protect, the ONTAP licence, quotes, trials, GST invoicing and lifecycle support included.
Stats, positions and figures are illustrative syntheses of public materials; verify before purchase.