Locked directly in storage
Every snapshot is cryptographically locked on the 2U appliance and mirrored to the Identiqa Cloud, technically undeletable during retention.
Home / Services / Ransomware Protection
Attackers hunt your backups first. That is where they fail.
Locked immutably in storage, beyond even your own admin rights.
In 94 per cent of ransomware attacks, adversaries target backups, succeeding 57 per cent of the time (Sophos 2024). Identiqa locks every snapshot cryptographically in storage on the 2U appliance and in the cloud. No compromised account can delete it.
Software-only locks fail once an admin account falls. The Identiqa lock sits deeper: in the appliance storage controller, verified before every restoration.
Defence outside and inside
AuraLink with ProtectionGrid beside your firewall, AuraCore hunting persistence across servers, VMs, Kubernetes, Docker.
Recovery with evidence
Verified restoration from clean backups with a forensic chain for insurers and investigators.
Why software locks fail and hardware holds
Software locks live inside the same privilege system as the attacker. Stolen admin rights can bypass or erase them.
The Identiqa lock lives in the storage controller: even domain admin rights end technically before the locked copy.
AuraCore continuously hunts host persistence so no sleeper restarts during recovery.
Common questions
Why do conventional backups get encrypted or deleted during ransomware attacks?
In 94 per cent of ransomware attacks, adversaries specifically target backups and succeed 57 per cent of the time (Sophos 2024) because software retention locks share the same privilege system as compromised admin accounts. Victims with lost backups pay almost twice as often.
What is the difference between storage-locked immutable backups and software immutability?
Software locks sit inside administration software where stolen admin credentials can bypass them. Identiqa locks snapshots cryptographically inside the storage controller on the 2U AuraLink appliance and in the Identiqa Cloud, so hijacked admin accounts hit a hard technical wall.
What is the fastest way to contain and recover when ransomware hits at 3 a.m.?
Call Identiqa 24/7 incident response immediately at +44 20 4634 2000 (press #). We isolate affected segments, preserve forensic evidence, hunt host persistence with AuraCore, and restore operations from locked backups.
In your rack. On the cloud contract you already have.
We size Identiqa to your infrastructure and sites. Buy directly through Identiqa or on your existing agreement with Amazon Web Services, Google Cloud, or Microsoft Azure.
Architecture briefing & advisory