Dell Cyber Detect for Storage is now available, starting with PowerStore¹. Powered by Index Engines CyberSense, the solution brings data integrity validation directly to PowerStore snapshots, helping customers determine whether recent production data can be trusted for recovery in the event of a ransomware attack.

CyberSense has been available in Dell PowerProtect Cyber Recovery vaults since 2019. Today, the technology serves more than 1,600 organizations across more than 50 industries and scans petabytes of data every day. Now Dell is extending that same proven technology to primary storage environments, starting with PowerStore.

With Dell Cyber Detect for Storage, Dell customers can validate the data integrity of their PowerStore snapshots with 99.99% accuracy. The underlying AI engine identifies ransomware-induced corruption and helps establish clean recovery points—even before a ransomware event occurs—giving teams the ability to make faster, more confident recovery decisions and restore critical business operations sooner.

Snapshots preserve recovery options, but they can also preserve corruption that entered the environment before the snapshot was created. Following a ransomware attack, your most recent snapshot may contain the most current data, but it can also carry data that’s been subtly corrupted by the attack. If this happens, IR and recovery teams will go snapshot-by-snapshot, spending precious time trying to identify and test clean recovery points.

Dell Cyber Detect for Storage evaluates the full content inside PowerStore snapshots so teams can identify ransomware-induced corruption and determine which recovery points they can trust. This allows teams to begin their recovery testing from a snapshot they already know to be clean, reducing their risk of a prolonged recovery process.

CyberSense analyzes snapshots to:

• Validate data integrity. CyberSense uses AI trained on 7,500+ detonated ransomware variants to evaluate more than 200 content-based statistics and identify ransomware-induced corruption with 99.99% accuracy. Teams can pair that AI-driven detection with configurable thresholds, malware signatures and YARA rules to tailor validation to their requirements and environment.
• Identify the most recent clean recovery point. Comparative integrity analysis shows how data changed across snapshots, helping teams determine when corruption occurred and which earlier recovery point remains clean.
• Investigate and recover with confidence. Automated alerts and forensic reporting show what changed, where corruption occurred, and when it began, so recovery and security teams can narrow the investigation and select snapshots for testing with confidence.

What makes Dell Cyber Detect different from other solutions?

Anomaly detection and security monitoring tools can provide early warning of suspicious activity around production data to trigger fast action and limit the damage. Cyber Detect complements those tools by performing a deeper, byte-level inspection of the recovery data (i.e., snapshots) itself. That content-level analysis determines which snapshots contains ransomware-induced corruption and which are clean—so teams can restore from the latest clean recovery point.

Bottom line: Other solutions answer the question “Is this data suspicious?”, Cyber Detect answers the question “Is this data clean and safe to restore?”

PowerStore snapshots sit close to active workloads and can be created more frequently based on an organization’s protection policies. When PowerStore remains viable after an attack, a validated snapshot can provide a recovery path close to production rather than requiring an immediate move to an older backup-based recovery point.

For files, databases, and virtual environments a recent validated snapshot can:

• Reduce potential data loss. A more recent clean snapshot can limit the transactions, records or application data that must be recreated.
• Preserve more recent data and shorten the search for a clean copy. Snapshot recency can reduce the gap between production and the recovery point, supporting a tighter RPO. Preexisting integrity results reduce the time spent locating a viable candidate, helping shorten RTO.
• Reduce recovery guesswork. Scheduled analysis establishes a timeline of clean and corrupted snapshots before an incident, helping teams begin recovery from a prioritized starting point.

Cyber Detect identifies a strong recovery candidate before teams begin the restore. Application validation and recovery testing remain part of the customer’s recovery process.

With the release of Dell Cyber Detect for Storage, customers now have the ability to apply CyberSense’s data integrity validation across both Dell primary storage and Dell PowerProtect Cyber Recovery environments.

Some organizations will choose to deploy Cyber Detect across both primary storage and PowerProtect environments to extend recovery confidence across the different data sources they may rely on during an incident. In these environments, Cyber Detect supports a layered resilience strategy by helping teams recover from more recent validated data when production conditions allow, while also maintaining confidence in isolated validated data when greater separation is required or for backup-centric workloads.

The result is greater flexibility in how recovery strategies are planned, guided by one consistent standard for trusted data integrity across both environments. Dell Cyber Detect provides a common model for more confident recoveries across both primary storage and backup environments.

If you are evaluating PowerStore or want to extend data integrity validation across primary storage and backup environments, contact an Index Engines expert to discuss your recovery requirements.

For additional details, read the Dell Cyber Detect solution brief.

¹ PowerMax Cyber Detect availability planned for 2H, FY2026