Fast Ransomware Detection, Rapid Return to Production

Ransomware detection and recovery built into your backup software. GuardMode provides early detection of ransomware or data-related anomalies before you back up your data. It complements endpoint and edge protection by monitoring file shares and system behavior instead of relying on a specific binary fingerprint.

Request Demo Watch Video

How GuardMode Protects Your Data

GuardMode maintains and regularly updates thousands of known ransomware threat patterns and assesses affected files for anomalies. While most ransomware detection solutions are built for security teams, GuardMode is designed with the backup administrator and backup workflows in mind, with an easy-to-configure detection mechanism and the ability to guide administrators in recovering affected data.

GuardMode ransomware protection workflow

Why GuardMode

Designed for Scalability and Extensibility

We designed GuardMode to be a complementary ransomware and data anomaly detection solution that enhances the security posture of your backup and storage teams, and therefore your company.

Distributed Architecture

Data-related events are stored on the client and synchronized with the server. Analysis and anomaly detection happen independently from the server.

Smart Processing

GuardMode only processes active data and analyzes file heuristics rather than block heuristics (significantly fewer events).

Integration Flexibility

Modular architecture for plugin-like extensibility for data sources and targets, making integration with SIEMs via REST API or Syslog as simple as possible.

“It is the responsibility of every company to do all they can to harden their cybersecurity stance. This includes ensuring that the data they are backing up has not been compromised by ransomware, and that they can recover their systems and data from their backups. With the GuardMode agent in the new DPX 4.9 release, Campus and our clients' IT backup teams have a valuable tool to help ensure that their data is being proactively monitored and protected, and that they can identify and recover any data that may have been compromised.”

Timo Fischer

System Architect, Campus Computer Systems

Benefits to Backup Admins and IT Ops

Early Detection to Block Ransomware

Know which files were affected and when so you can act early.

Roll Back Only the Affected Data

Restore only the affected data without reverting entirely to a point-in-time snapshot.

Customizable Alerting

GuardMode allows for customizable alerts, so an admin can be notified immediately in case of an attack.

Minimize Disruption

Integrate with snapshots and maximize customer investments in primary storage.

User-Friendly

Easy to set up and use, and can be integrated with existing security solutions, making it an effective addition to an overall security strategy.

Proactive Detection

Continuously monitors for ransomware-like behaviors and takes action to block it, providing proactive detection for known and unknown threats.

Frequently Asked Questions

What is GuardMode?

GuardMode is a pre-backup solution that provides an additional layer of protection to a backup and recovery solution, specifically for ransomware and ransomware-like threat detection. It is distributed as an agent installable on Windows and Linux hosts. It exposes a REST API and has built-in plugin architecture that can be used for integration with existing security or data protection infrastructure.

What operating systems are supported?

GuardMode supports Windows and Linux hosts. The agent is installed on the systems you want to monitor and integrates with Catalogic DPX for backup-aware ransomware detection.

How can I try GuardMode on my infrastructure?

You can request a demo or trial by contacting our team. We'll help you evaluate GuardMode in your environment and show you how it integrates with your existing backup workflows. Request a demo.

How do I benefit from getting GuardMode?

GuardMode adds a critical layer of ransomware detection to your backup strategy. It proactively monitors file systems for suspicious activity, alerts administrators early, identifies affected files, and guides recovery to minimize data loss and downtime from ransomware incidents.

Request a Demo

Secure Data Protection

Get awesome support from our highly rated support team. Contact us to discuss how our secure data protection solutions address your enterprise and cloud data protection needs, including filling any gaps you have.

Request Demo