Backup and DR
A backup you have not restored is a rumour
Coldharbor takes immutable copies, keeps one of them air-gapped, and then restores them on a schedule — automatically, into a sandbox, with a report you can hand to an auditor.
The four things that actually matter
Immutability that is not a checkbox
Every copy lands in object-lock compliance mode. An attacker with your console credentials, your API keys and our support team's cooperation still cannot shorten a retention.
Restore drills, automatically
We boot your backups into an isolated sandbox on a schedule you set, check the services come up, and send you a report. Failures page you, not us.
Air-gapped third copy
3-2-1-1-0: three copies, two media, one off site, one air-gapped, zero errors after verification. The air-gapped copy is pulled, never pushed.
An RTO you can quote
Recovery time is measured from real drills, per workload, and shown in the console. Not a number from a sales deck.
Ransomware
What happens on the worst day
The recovery playbook is not a document, it is a button — and it has been pressed in anger 31 times by our customers in the last two years.
- Detect: entropy and change-rate anomalies flag encryption within one backup cycle
- Isolate: the affected agent is quarantined; existing copies become read-only immediately
- Choose: a clean recovery point is proposed from the last passing drill, not the last backup
- Restore: boot into an isolated network, verify, then cut over