Druva Inc. today introduced an updated version of its data protection platform aimed at making it easier for customers to fend off cyberattacks.

The first addition, a capability called Threat Hunting, is designed to help administrators investigate breach attempts. Druva is also expanding the availability of a managed breach response service that is included at no charge in purchases of its platform. 

Santa Clara, California-based Druva is backed by more than $400 million from Sequoia Capital and other investors. It closed its most recent funding round, a $147 million investment announced in 2021, at a valuation exceeding $2 billion. The company’s flagship product is a cloud-based platform that enterprises use to protect their business data from technical issues and hackers.

Druva can back up the contents of an organization’s cloud environments, on-premises hardware, software-as-a-service deployments and employee devices. The platform also provides the ability to quickly restore those backups if the original data becomes unavailable. Druva says that some data recovery tasks can be completed with one click.

A second set of features in the platform is designed to block ransomware attacks. According to Druva, its platform can detect when malware attempts to encrypt a company’s backups and notify administrators. The new cybersecurity enhancements introduced today will complement those breach prevention features.

The first enhancement, a capability called Threat Hunting, allows companies to search their Druva-managed file backups for indicators of compromise. Those are pieces of data associated with hacker activity. An indicator of compromise can, for example, take the form of a record with an unusual file type or an unusual document download.

Such data points can help companies gain a better understanding of breach attempts. If an indicator of compromise is found in a software-as-a-service application, administrators can draw the conclusion that the application was breached. Similarly, the creation date of the indicators of compromise associated with a breach can reveal when the hackers first gained network access.

“With today’s more advanced and persistent threats, we need to go beyond perimeter-based security,” said co-founder and Chief Executive Officer Jaspreet Singh. “Cybersecurity needs to be complemented with the power of data to handle these risks.”

In conjunction with the introduction of Threat Hunting, Druva disclosed that it’s making a service called Managed Data Detection and Response accessible to more international customers. The service is available at no charge. It allows enterprises to relegate some of the work involved in mitigating breaches to Druva.

Through Managed Data Detection and Response, the company monitors cybersecurity data from customers’ deployments of its platform. Druva staffers analyze this data to find signs of malicious activity. The company can, for example, detect when a user attempts to delete a large number of backups at once.

When it spots a potential breach, Druva can automatically lock down the targeted backup files to prevent modifications. In other cases, it might roll back a compromised backup to an earlier version that doesn’t contain malware. The company detailed in early June that it prevents one or two cyberattacks every week.

Druva previously disclosed that its platform has more than 6,000 customers, up from about 5,000 last August. That installed base growth boosted the company’s annual recurring revenue past $200 million in 2023. 

Image: Druva