Use case · ResilienceData protection and storage
Gold copy backups, off the network the attack runs on.
Ransomware operators delete every backup they can reach before they encrypt. A gold copy held behind a Layer 1 air gap is the one they have no network path to.
Offline Secure Storage®Use case · Resilience- Protects
- The records you could not recreate
- Hardware
- Dedicated, except LUV
- When closed
- No standing network path
- Access
- Authorised, out of band, time-bound
- Hosted in
- Firevault Bunkers: Europe live, US and Middle East next
The problem
Why the current setup leaves this data exposed.
Ransomware operators know that backups are the last line of defence, and backup infrastructure is a common early target. Cloud-connected backups are reachable, and therefore encryptable. Network-attached storage sits on the same network as the threat. Once backups are gone, the organisation is left negotiating.
See the difference
The same stolen login. Two places to keep your records.
Choose a state to see what an intruder can reach.
Contracts, accounts and recovery copies share one connected estate. One stolen login, one supplier or one mistake reaches all of it.
The records you could not recreate sit on dedicated hardware with no standing network path. Access begins outside the normal network, on an authorised out-of-band request, for a time-bound session.
How it plays out
The scenario, and what physical disconnection changes.
One realistic sequence of events, then the controls that break it. Switch between the two, or play it through.
- 01
- 02
The outcome
Recovery that does not depend on the encrypted estate.
With gold copies stored offline in Firevault OSS, the restore can start from a clean copy rather than a negotiation, and the board can show regulators that proper technical measures were in place.
- Hardware
The data sits on physical Firevault hardware, not a shared cloud tenancy.
- Disconnect
Offline by default. There is no standing network path in or out of the vault.
- Command
Access opens on your instruction, with identity verified and every session logged.
- Location
Held in a Firevault Bunker. Firevault provisions the location.
Your next step
Protect the records that matter most.
Start with the records you could not recreate. Keep everything else where it works best.