Commvault adds threat scanning to Microsoft 365 backups

Restoring a backup that already contains malware puts the threat straight back into the environment. Commvault has announced two Microsoft 365 capabilities aimed at that risk: Threat Scan and Data Posture 360.

Threat Scan looks for malware, ransomware, encryption activity, data anomalies and other indicators of compromise across protected Exchange, OneDrive, SharePoint and Teams data. It can apply current threat intelligence to historical backup copies held in immutable storage, to catch threats that were unknown when the data was first protected. Threat signals are then used to isolate compromised content and identify clean, trusted recovery points.

Data Posture 360, previously called Risk Analysis, maps where sensitive data such as personally identifiable information and intellectual property sits across Microsoft 365 and surfaces exposure risks so teams can prioritise their response.

Pranay Ahlawat, Chief Technology and AI Officer at Commvault, said: “Resilience and compliance depend on identifying threats fast, understanding if sensitive data is exposed, and what’s safe to restore.” Matt Pancheri, IT Manager and Systems Administrator at Spokane Industries, a customer quoted in the announcement, said: “During a cyber incident, knowing what data can be safely restored is just as important as having a backup.”

Commvault points to more than 450 million paid commercial Microsoft 365 seats worldwide as the reason attackers target emails, attachments and shared files in the service. Both capabilities are planned for early access preview in the coming weeks, with general availability targeted for early 2027. They will be paid add-ons to Commvault Backup & Recovery for Microsoft 365 and can be bought independently.

To stay across the latest in cloud, AI and enterprise tech analysis from Compare the Cloud, subscribe to our weekly newsletter at https://www.comparethecloud.net/newsletter

More News