Druva, the resilience foundation for the AI enterprise, is launching new capabilities for Druva Identity Resilience alongside the launch of Ransomware Detection, a new feature fueled by a proprietary AI threat pipeline.
Powered by Dru Metagraph, the new offerings use behavioral intelligence and built-in validation to turn suspicious behavior into actionable evidence, definitively confirm impact, and accelerate precise containment and clean recovery, according to Druva.
AI is making it harder for security teams to distinguish real compromise from normal behaviors and activity. Attackers are using AI to test more paths, shift tactics faster, and hide malicious behavior inside legitimate activity, while stolen credentials and constantly evolving ransomware make traditional signals less conclusive, the company said.
Druva gives customers evidence-based cyber recovery by unlocking behavioral intelligence from backup data. The new identity resilience capabilities use Dru Metagraph to analyze suspicious identity behavior and visualize the blast radius, while the proprietary AI threat pipeline powering Ransomware Detection analyzes backup data to validate ransomware behavior. Together, they move teams from signals to evidence, accelerating investigation, confirming impact, and guiding precise containment and recovery back to clean, trustworthy states, said the vendor.
“Security teams know they can’t stop every attack. The challenge is knowing exactly what happens when a threat breaks through,” said Yogesh Badwe, chief security officer at Druva. “AI makes that uncertainty more dangerous. Before you recover, you need evidence of what changed, how far the compromise spread, and what can still be trusted. Druva has years of backup telemetry we use to validate threat signals and turn them into evidence, giving customers a trusted basis for recovery instead of an assumption.”
Building on the unified identity protection introduced earlier this year, new Druva Identity Resilience capabilities bring Dru MetaGraph’s connected intelligence directly to customers.
This capability provides an interactive view of human and non-human identities (NHIs) activities and relationships across Microsoft Entra ID, Active Directory, and Okta.
Dru MetaGraph contextualizes change across identities, permissions, applications, policies, and time to show how suspicious activity propagates through an environment and cut investigation time.
The announcement also marks the launch of Ransomware Detection, powered by a proprietary AI threat pipeline that detects known and unknown ransomware behavior, confirms impact through built-in validation, and pinpoints clean recovery points.
For more information about this news, visit www.druva.com.