Commvault decoder/Cyber recovery
What is Commvault Threatwise?
Cyber deception: decoys that look like real servers, devices and backup systems, so attackers who touch them give themselves away before they encrypt or steal data.
- Formerly
- Metallic ThreatWise, TrapX
- Came from
- Commvault acquired TrapX Security in early 2022
- Delivered as
- Cloud-managed decoys deployed in your network
- Licensing
- Not published
What it does
Attackers explore a network before they strike. Threatwise places decoys that imitate IT, OT, network and backup assets. Nobody legitimate has a reason to touch them, so any contact is a strong signal of an attacker doing reconnaissance or moving between systems.
That warning comes before data is encrypted or taken, which gives you time to isolate systems and protect backups.
Key facts
- Decoys can imitate backup infrastructure, a common early target.
- Gives recommendations on where to place decoys.
- Sends alerts to your security tools.
Related
- Threat ScanScans backup data for malware, encrypted files and unusual changes, so you can find the last clean copy before you restore.
- Commvault AirGapCommvault's managed cloud storage for isolated, immutable backup copies that ransomware in your network can't reach. It was called Air Gap Protect, and before that Metallic Recovery Reserve.
Sources
Checked against Commvault's own pages in November 2026. Commvault renames and updates products often, so its documentation has the final word.
Want Commvault run for you?
KELYN is a Commvault Elite MSP Partner. U.S.-based engineers design, run and test your Commvault environment with you.