Commvault, a pioneering provider of cyber resilience and data protection solutions for the hybrid cloud, announced that the Commvault Cloud Platform can be easily deployed from major cloud marketplaces utilising CIS-hardened images.
These CIS-hardened images are pre-configured with CIS-recommended settings and controls and are available on the following marketplaces: Amazon Web Services (AWS), Microsoft Azure, Google Cloud, and VMware.
Commvault’s CIS-hardened images
CIS-hardened images are software files that are pre-configured to align with the CIS Benchmarks
CIS-hardened images are software files that are pre-configured to align with the Centre for Internet Security (CIS) Benchmarks. Hardening helps reduce configuration vulnerabilities, such as overly-permissive network policies, that can create opportunities for malicious actors.
In fact, configuration errors are one of the most common causes of cloud vulnerabilities, contributing to 23% of cloud infrastructure attacks, according to industry research. Commvault’s CIS-hardened images are designed to reduce these risks by pre-configuring deployment to meet rigorous security benchmarks out-of-the-box, bringing confidence to IT and security teams.
Other security certifications
With the announcement, Commvault continues to deliver on its cybersecurity focus, with these deployment options joining other security certifications, such as FedRAMP® High Authorised, ISO27001:2013, SOC 2, Type II, and FIPS 140-2, among others. Customers can use the new CIS-hardened images to quickly and confidently configure and deploy Commvault Cloud and benefit from:
- Pre-built Compliance Checks: CIS-hardened images provide organisations with secure, hardened environments from the moment of deployment and give customers confidence their control plane has been installed and configured using industry-recognised best practices.
- Enhanced Cybersecurity: The CIS-hardened images minimise vulnerabilities by addressing common misconfiguration risks, offering peace of mind against attacker exploitation.
- Streamlined Compliance Mapping: CIS Benchmarks are mapped to key security frameworks such as NIST CSF, HIPAA, PCI-DSS, and ISO 27001, simplifying adherence to complex regulatory requirements.
- Broad Marketplace Availability: Organisations can deploy Commvault Cloud directly from AWS, Azure, Google Cloud, or VMware marketplaces, enabling fast and secure installations with minimal effort.
Public cloud services
Commvault has raised a host of cloud-first offerings designed to make clients more resilient in the cloud
The timing of this announcement also comes as more and more organisations are accelerating their move to the cloud. In fact, according to IDC, spending on public cloud services is expected to double to $1.6 trillion by 2028.
In the last year, Commvault has introduced a host of cloud-first offerings designed to make customers more resilient in the cloud, including Cleanroom Recovery, Cloud Rewind, and Clumio Backtrack. Now, the company is taking resilience in the cloud to the next level via CIS-hardened images for popular cloud marketplaces.
Cyber resilience strategies
“Organisations demand solutions that are not only secure and compliant but also straightforward to deploy,” said Chris Montgomery, CTO – Security, Americas at Commvault. “With our CIS-hardened images, we eliminate the guesswork, providing IT teams with a secure, pre-configured foundation to accelerate their cyber resilience strategies while meeting industry standards.”
“As a security-first organisation, having confidence in how our solutions are deployed is critical,” said Marek Duranik, Storage & Data Protection Associate Director at Merck. “Commvault’s CIS-hardened images give us the assurance that we’re starting from a strong security baseline, allowing our teams to focus on protecting and recovering critical data.”
Availability and pricing
Commvault’s CIS-hardened images will be available globally this quarter and at no additional cost to customers.
Built on a hardened Rocky Linux 8 operating system, the images are designed to protect both the software and infrastructure layers.
