How does ransomware reach storage?
Usually through a legitimate account: credentials are stolen, a session is hijacked, and connected drives, sync clients and backups are reached with those permissions.
How ransomware reaches storage — and what reduces the damage.
Modern attacks go after the drive and the backup together. A vault with no sharing surface and no whole files at rest changes what an intruder can actually take.
Why are backups often hit too?
Because they are connected to the same identity and network. Attackers delete or encrypt them first to remove your recovery option.
What does Citadel change?
There is no sync client on your endpoints, no sharing surface and no single location holding a whole readable file. Your protected copy is not sitting next to the compromised one.
Every Citadel subscription protects more than storage.
Citadel is priced for the people who use it and the work they do. The service connects identity, networking, transport, protected data, recovery and business continuity in one architecture.
Identity
Quantum-Secure® authentication designed to reduce dependence on traditional key-based access.
Network
Quantum-Secure® private networking extends protection beyond the storage environment.
Transport
ParticleMesh™ protects data as it moves between people, applications, clouds and infrastructure.
Data
Secured2 protection is applied to the data itself, beyond conventional encryption at rest.
Resilience
Multi-location redundancy, recovery and business continuity reduce dependence on any single system.
Risk
Eligible deployments can include contractual cyber-risk indemnification backed by a Lloyd's of London insurance policy.*
* Insurance, indemnification, coverage limits, exclusions, eligibility and availability are subject to the applicable policy and contractual terms.
Separation is the control that works.
The most valuable thing you can do is make sure the compromise of your working environment does not automatically reach your most important files.
Citadel is deliberately separate: a different identity boundary, no mapped drives, no automatic sync, and a distinct authentication step with a private code.
Exfiltration is the real threat now.
Modern ransomware groups steal before they encrypt, then threaten publication. Encryption-only defences do not help once the files are already out.
If the data taken from any single location carries no independent meaning, the leverage collapses.
Questions people ask
- Is any storage truly ransomware-proof?
- No responsible vendor should claim that. Citadel is designed to reduce reach and reduce the value of what is taken, and to keep a verified copy you can retrieve.
- Does Citadel sync to my desktop?
- No. Files move in and out through deliberate action, which removes an entire attack path.
- Can I still recover after an incident?
- Yes. Retrieval is byte-for-byte verified against what you originally stored.
Keep reading
Protect what matters most.
Citadel is accepted by a limited number of organisations each quarter. See the plans and start with the data you cannot afford to lose.