Commvault Launches CIS-Hardened Images

Commvault Systems, Inc. announced that the Commvault Cloud Platform can be deployed from major cloud marketplaces utilizing CIS-hardened images.

These CIS-hardened images are pre-configured with CIS-recommended settings and controls and will be available on the following marketplaces: AWS, Microsoft Azure, Google Cloud, and VMware.

CIS-hardened images are software files that are pre-configured to align with the Center for Internet Security (CIS) Benchmarks. Hardening helps reduce configuration vulnerabilities, such as overly-permissive network policies that can create opportunities for malicious actors. In fact, configuration errors are one of the most common causes of cloud vulnerabilities, contributing to 23% of cloud infrastructure attacks, according to industry research.⁽¹⁾ Commvault’s CIS-hardened images are designed to reduce these risks by pre-configuring deployment to meet rigorous security benchmarks out-of-the-box, bringing confidence to IT and security teams.

Commvault continues to deliver on its cybersecurity focus, with these deployment options joining other security certifications, such as FedRAMP High Authorized, ISO27001:2013, SOC 2, Type II, and FIPS 140-2, among others.

Customers will be able to use the new CIS-hardened images to configure and deploy Commvault Cloud and benefit from:

• Pre-built Compliance Checks: CIS-hardened images provide organizations with secure, hardened environments from the moment of deployment and give customers confidence their control plane has been installed and configured using industry-recognized best practices.
• Enhanced Cybersecurity: The CIS-hardened images minimize vulnerabilities by addressing common misconfiguration risks, offering peace of mind attacker exploitation.
• Streamlined Compliance Mapping: CIS Benchmarks are mapped to key security frameworks such as NIST CSF, HIPAA, PCI-DSS, and ISO 27001, simplifying adherence to complex regulatory requirements.
• Broad Marketplace Availability: Organizations will be able to deploy Commvault Cloud directly from AWS, Azure, Google Cloud, or VMware marketplaces, enabling fast and secure installations with minimal effort.

The timing of this announcement also comes as more and more organizations are accelerating their move to the cloud. In fact, according to IDC, spending on public cloud services is expected to double to $1.6 trillion by 2028 ^(2). In the last year, Commvault has introduced a host of cloud-first offerings designed to make customers more resilient in the cloud, including Cleanroom Recovery, Cloud Rewind, and Clumio Backtrack. Now, the company is taking resilience in the cloud to the next level via CIS-hardened images for popular cloud marketplaces.

“Organizations demand solutions that are not only secure and compliant but also straightforward to deploy,” said Chris Montgomery, CTO security, Americas, Commvault. “With CIS-hardened images, we can eliminate the guesswork, providing IT teams with a secure, pre-configured foundation to accelerate their cyber resilience strategies while meeting industry standards.“

“As a security-first organization, having confidence in how our solutions are deployed is critical,” said Marek Duranik, storage and data protection associate director, Merck. “Commvault’s CIS-hardened images give us the assurance that we’re starting from a strong security baseline, allowing our teams to focus on protecting and recovering critical data.“

Availability and Pricing
Commvault’s CIS-hardened images will be available globally this quarter and at no additional cost to customers. Built on a hardened Rocky Linux 8 OS, the images are designed to protect both the software and infrastructure layers.

⁽¹⁾ SentinelOne. (2024, November 19). 50+ Cloud Security Statistics in 2024.
⁽²⁾ IDC. (2024, June 10). Worldwide Public Cloud Services Revenues Grew 19.9% Year Over Year in 2023, According to IDC Tracker.