In summary
- Commvault has integrated its cyber recovery capabilities into CrowdStrike's Charlotte Agentic SOAR platform, letting joint customers trigger recovery actions from within security workflows.
- The connector can restrict Commvault access during an incident, suspend backup data ageing policies, and restore compromised assets into Commvault Cleanroom for forensic analysis.
- Commvault previously connected with CrowdStrike's Falcon Insight XDR to bring threat intelligence into Commvault Cloud, and with Falcon Next-Gen SIEM to extend visibility.
Commvault has integrated its cyber recovery capabilities into CrowdStrike's Charlotte Agentic SOAR platform, allowing joint customers to trigger Commvault recovery actions directly from within automated security workflows.
The purpose-built connector lets security teams incorporate Commvault recovery steps into Charlotte Agentic SOAR orchestration without switching between tools or relying on manual handoffs between security and recovery teams.
Key capabilities include the ability to restrict access in Commvault during an active incident to prevent unauthorised changes, automatically suspend backup data ageing policies to preserve viable recovery points, and restore potentially compromised assets into Commvault Cleanroom for forensic analysis without disrupting production systems.
"Security and recovery teams need to move quickly and in coordination during an incident," said Vidya Shankaran, field CTO at Commvault.
"Our integration with CrowdStrike Charlotte Agentic SOAR makes Commvault cyber recovery actions available directly within security workflows, helping joint customers reduce manual handoffs and accelerate investigation and response."
The announcement follows a series of prior integrations between the two vendors. Commvault previously connected with CrowdStrike's Falcon Insight XDR to bring threat intelligence into Commvault Cloud, and with Falcon Next-Gen SIEM to extend visibility. The Charlotte Agentic SOAR integration adds recovery orchestration as the next layer.
The integration is generally available now for joint Commvault and CrowdStrike customers and is also listed in the CrowdStrike Marketplace.
