Opens in a new tab
vmblog logo 2024 wht (updated)

Commvault Brings Discover-to-Recover Resilience to Microsoft 365

Share: 

David Marshall | Published: October 16, 2026

Commvault announced new data security and threat hunting capabilities for Microsoft 365.  

With more than 450 million paid commercial seats worldwide, Microsoft 365 is a popular cloud productivity and collaboration platform. Bad actors often target emails, attachments, and shared files associated with the SaaS application. Commvault is helping Microsoft 365 customers advance resilience in the following ways:  

  • Discover sensitive data: Map where sensitive data, including personally identifiable information (PII) and intellectual property, resides across Microsoft 365 with Commvault Data Posture 360 (previously Risk Analysis) and surface exposure risks to help prioritize response. 
  • Hunt for hidden threats: Uncover malware, ransomware, encryption activity, data anomalies, and other indicators of compromise across protected Exchange, OneDrive, SharePoint, and Teams data with Commvault Threat Scan. 
  • Know what’s safe to restore: Use threat signals to isolate compromised content and identify clean, trusted recovery points. This helps recover only known-good data, reduce reinfection risk, and accelerate recovery of Microsoft 365 data. 
  • Broaden threat discovery: Apply current threat intelligence tohistorical backup copies in immutable storage to detect threats that may have been unknown or undetected when the data was originally protected.  

“Commvault is bringing three key elements to the resilience equation with Microsoft 365: detection, visibility, and clean recoveries,” said Pranay Ahlawat, Chief Technology and AI Officer at Commvault. “Resilience and compliance depend on identifying threats fast, understanding if sensitive data is exposed, and what’s safe to restore.” 

“During a cyber incident, knowing what data can be safely restored is just as important as having a backup,” said Matt Pancheri, IT Manager and Systems Administrator, Spokane Industries. “Commvault gives our team a way to investigate our protected Microsoft 365 data and make more informed recovery decisions, helping limit disruption to the business.”  

“Alerting decision-makers to compromised data within Microsoft 365 backup offers both data security and data protection teams the information they need for improved resilience and continuity,” said Jennifer Glenn, Research Director for Information and Data Security, IDC. “This is essential for enterprises to prove operational data is both recoverable and trustworthy.” 

Global Availability 

Threat Scan and Data Posture 360 for Microsoft 365 are both planned for early access preview in the coming weeks, with general availability targeted for early 2027. Both capabilities will be offered as paid add-ons to Commvault Backup & Recovery for Microsoft 365. Customers can purchase either capability independently.