Commvault Embeds Cyber Recovery Into CrowdStrike Workflows

Integration Closes Manual Gap in Incident Response

Commvault announced on August 31 that its cyber recovery capabilities now run as native steps inside CrowdStrike Holdings' Charlotte Agentic SOAR workflows, allowing security teams to trigger data protection actions without switching tools during active cyberattacks.

The connector enables joint customers to lock down Commvault access to prevent unauthorized modifications while an incident unfolds, automatically pause backup data aging policies so recovery points remain available throughout the crisis, and restore potentially compromised systems into Commvault Cleanroom for forensic analysis isolated from production environments.

The integration addresses a longstanding friction point in breach response: security and data recovery teams historically operated separate platforms and exchanged information manually, slowing containment and restoration. This marks the third phase of an expanding CrowdStrike partnership, following earlier integrations with Falcon Insight XDR for threat intelligence and Falcon Next-Gen SIEM for visibility.

Why It Matters

Automating the handoff between threat detection and data recovery removes critical minutes from incident response timelines. When ransomware or intrusion is detected, security teams can now trigger backup lockdowns and forensic restores from the same console they use to investigate and contain threats, reducing the window attackers have to encrypt or exfiltrate data. For enterprises running both platforms, the integration converts what was a multi-team coordination problem into a single workflow.

Subscription Growth Outpaces Overall Business

The product announcement follows fiscal first quarter 2027 results reported July 28. Subscription revenue reached $267 million, up 16% year-over-year, while SaaS revenue crossed $100 million for the first time with 39% growth, indicating customers are migrating to Commvault's cloud offering faster than the broader business is expanding.

Subscription annualized recurring revenue climbed to $1.054 billion, up 22% year-over-year, and free cash flow jumped 71% to $51 million. Commvault also secured a multi-year agreement to deliver its platform as a native service on Microsoft Azure and earned recognition as a Gartner Magic Quadrant Leader for backup and data protection for the 15th consecutive year.

Profitability Picture Remains Mixed

The growth metrics contrast with a GAAP operating margin of just 8.2% for the quarter, well below the non-GAAP figure of 22.8%. That gap indicates a substantial portion of reported profitability relies on adjustments rather than cash hitting the income statement.

Commvault's second-quarter guidance projects a non-GAAP EBIT margin of approximately 20%, down from the 22.8% just delivered, even as subscription revenue is expected to rise modestly to $264 million to $268 million. Full-year targets call for subscription revenue between $1.119 billion and $1.129 billion, with ARR reaching $1.2 billion to $1.21 billion.

These details were first reported by Automation Watch.