Commvault decoder/Cyber recovery
What is Commvault AirGap?
Commvault's managed cloud storage for isolated, immutable backup copies that ransomware in your network can't reach. It was called Air Gap Protect, and before that Metallic Recovery Reserve.
- Formerly
- Air Gap Protect, Metallic Recovery Reserve
- Delivered as
- SaaS storage hosted by Commvault on Azure, AWS, Oracle Cloud or Google Cloud
- Licensing
- Subscription by capacity; Commvault doesn't publish prices
What it does
Commvault AirGap is a storage target for your backup copies that Commvault runs in its own cloud accounts. Because the storage sits outside your environment and your admin accounts, an attacker who takes over your network can't delete or encrypt those copies. Commvault's marketing now says AirGap; its documentation still says Air Gap Protect.
It's the usual way to add the offsite, immutable copy in the 3-2-1-1-0 rule to a Commvault environment without running your own cloud storage. It also feeds Commvault Cleanroom, which restores from those copies into an isolated environment.
Key facts
- Three storage tiers: Frequent Access, Infrequent Access and Archive.
- Immutability comes from Commvault-managed subscriptions plus Commvault's retention lock.
- Threat Scan works on Frequent and Infrequent Access copies, not Archive.
- At 100% of licensed capacity, new backups stop but restores and pruning keep running; warnings start at 80%.
How KELYN helps
See where an isolated copy fits, and check your backups against all five parts.
Related
- Commvault CleanroomAn isolated recovery environment, created on demand, where you test cyber recovery, investigate an attack and restore clean systems without touching production. Formerly Cleanroom Recovery.
- Threat ScanScans backup data for malware, encrypted files and unusual changes, so you can find the last clean copy before you restore.
- Commvault Cloud for GovernmentThe SaaS version of Commvault Cloud for U.S. federal, state, local and education customers, with FedRAMP High and GovRAMP High authorization. Often called Commvault GovCloud.
Sources
Checked against Commvault's own pages in November 2026. Commvault renames and updates products often, so its documentation has the final word.
Want Commvault run for you?
KELYN is a Commvault Elite MSP Partner. U.S.-based engineers design, run and test your Commvault environment with you.