Veeam partners with CrowdStrike to boost data resilience & security

Veeam Software has announced a partnership with CrowdStrike to integrate their data resilience and cybersecurity platforms in an effort to improve data security for mutual customers.

The collaboration introduces two new integrations: the Veeam App for CrowdStrike Falcon LogScale and the Veeam Data Connector for CrowdStrike Falcon Next-Gen SIEM. These integrations provide organisations with the ability to monitor Veeam Data Platform events directly within the CrowdStrike Falcon platform, enabling centralised visibility and more coordinated responses to security incidents.

Through this partnership, Veeam and CrowdStrike aim to support customers before, during and after cybersecurity events by combining Veeam's data protection capabilities with the threat detection and response tools of the CrowdStrike Falcon platform. The integration delivers end-to-end visibility of security threats and is designed to reduce the risk and business impact of cyber incidents.

John Jester, Chief Revenue Officer at Veeam, said: "We know that 89% of threat actors specifically target an organisation's backups, putting critical data recovery at risk. Delivering comprehensive protection against these attacks requires strategic partnerships. That's why we're building strong integrations with industry leaders like CrowdStrike to ensure customers take a connected approach to cybersecurity and data resilience. We continue to enhance Veeam Data Platform security capabilities and integrations to ensure that an organisation's backups are clean and secure to recover from a ransomware attack. By combining Veeam Data Platform's industry-leading malware detection, indicators of compromise (IoC) detection and proactive threat assessments with CrowdStrike's AI-powered capabilities, we help customers ensure their backups are secure and their data resilient."

Daniel Bernard, Chief Business Officer at CrowdStrike, stated: "The surge in cyber threats and ransomware attacks continues to put enterprise data at risk. Our partnership with Veeam brings together best-in-class cybersecurity with industry-leading data resilience, giving joint customers a unified defence to reduce risk and ensure rapid recovery. By bringing Veeam Data Platform events into Falcon Next-Gen SIEM, we're delivering centralised visibility that empowers security and IT teams to respond faster and more effectively across the entire attack surface."

The integrations are intended to streamline security operations by allowing IT and security teams to detect, prevent and respond to cyber incidents more effectively. The Veeam App for Falcon LogScale features pre-built dashboards, automated data parsing and proactive alerting, providing deeper insight into backup activities and potential threats. It also includes support for Veeam Backup for Microsoft Entra ID, expanding visibility into identity-based threats and data infrastructure activities.

Security teams can use predefined searches and scheduled alerts within the integrated solution to surface relevant security events quickly, aiding threat-hunting and incident response. These tools use artificial intelligence and machine learning to conduct real-time, low-impact scans during backups, detecting subtle anomalies and malware.

The enhanced alerting allows Security Operations Centre analysts to receive timely intelligence, improving their ability to respond to incidents and adapt to emerging threats. By bringing backup and cybersecurity data into a single platform, organisations can gain a more comprehensive view of their data security posture.

Veeam's Data Platform features a range of security and resilience tools, including the Recon Scanner for ransomware threat detection before backups are created, as well as inline entropy analysis, signature-based malware scanning, and IoC detection during the backup process. The Veeam Threat Hunter tool supports incident response by assessing the scope of an attack and identifying the last known clean restore point. For customers needing guidance on ransomware, Veeam Cyber Secure offers support from Coveware by Veeam for ransomware assessment, negotiation and recovery.

The integrations are now accessible to Advanced and Premium Veeam Data Platform users and are available for CrowdStrike customers through the CrowdStrike Marketplace. This collaboration seeks to provide data protection and resilience for cloud, virtual, physical, enterprise application, and unstructured data environments.