Magic Quadrant for Backup and Data Protection Platforms

Market Overview

Platform

• Prioritizes the centralized management and orchestration of data protection platforms.
• Increased scope of requirements delivered via backup as a service (BaaS)
• Autonomous backup operations.
• Expands platform use cases to assist data protection, compliance, copy data management, and testing and development requirements.
• Expands backup data insights and access capabilities such as data categorization and classification, sensitive data scanning, search, investigations, business intelligence, retrieval-augmented generation (RAG) and other API retrieval methods.

Data Protection

• Constant expansion of hybrid, multicloud and SaaS environments that must be protected.
• Emphasizes the requirement for cyberrecovery readiness and robust anomaly detection capabilities.
• Emerging capabilities to perform and expedite malware scanning of backup data and alerts to incidents of compromise (IoCs).
• Application-focused discovery, backup, recovery and disaster recovery.
• Expanded common features, such as zero-trust principles and expanded recovery orchestration.

Cyberrecovery and Detection Capabilities

• Ransomware detection and recovery: Most vendors have built capabilities to detect ransomware attacks by monitoring behavioral anomalies of protected data. They aim to simplify the ransomware recovery process by expediting identification of the best and cleanest recovery point, creating curated recovery points that combine multiple recovery points, and creating an isolated test-and-recovery environment.
• Malware detection: Vendors are adding malware detection in backup copies by partnering with security vendors or developing these capabilities in-house. They are differentiating in their ability to identify known ransomware variants and zero-day attacks. Recent innovations include malware detection using YARA rule scanning and integrated security vendor feeds and advanced threat hunting using hash-based tracking to flag IoCs.
• Vendor-hosted storage: Multiple vendors now have vendor-hosted cloud storage offerings. These are often referred to as immutable data vaults (IDVs) or cloud vaults. Leading vendors are expanding as-a-service offerings by introducing orchestration services to facilitate routine testing, cleaning and validation, and performing recovery.

Administration and Deployment Options

• SaaS-based control planes: Vendors are offering centralized management platforms that are increasingly backup-vendor-hosted, replacing customer-managed deployments in their own public cloud or data center infrastructure.
• BaaS offerings: Leading backup vendors are expanding BaaS capabilities to include on-premises, IaaS, PaaS and SaaS environments. Gartner clients are investing in BaaS offerings to complement on-premises backup deployments, which simplifies the protection of environments, including selected on-premises workloads, as well as edge and public cloud.
• Multicloud storage options: Vendors are expanding their hosted data plane architecture, allowing customers to choose from multiple cloud storage target options.

Cloud Environment Protection

• Cloud-native application and data protection: Vendors in this market are expanding their coverage of additional cloud services to increase their clients’ abilities to protect cloud-native applications. The scope of requirements requires vendors to keep pace with the expanding scope of more IaaS and PaaS infrastructures, and multiple cloud data locations.
• Multicloud protection: As organizations deploy applications and workloads to multiple cloud environments, the requirement of solutions to integrate with and protect multicloud environments is now more critical.
• Cloud application and infrastructure recovery: Leading vendors are adding application infrastructure and cloud services discovery, and integration with its own, third-party or public cloud services, to backup and protect the application, test and perform failover, and recover the entire application and data environment.

SaaS Application Protection

• Support for SaaS application protection: Most vendors evaluated in this research support Microsoft 365 and Salesforce backup via partners or have developed these capabilities in-house. Vendors are innovating to protect other SaaS applications and accelerate the integration with new applications. Additional SaaS application protection is available in the market for applications, such as Microsoft Dynamics 365, Microsoft Power Apps, Atlassian Jira and ServiceNow.
• Identity access management (IAM) backup and recovery: Vendors have introduced backup and recovery capabilities for critical identity access management data. They simplify protection and granular recovery of IAM offerings such as Microsoft Active Directory, Microsoft Entra ID and Okta. Recent advancements include orchestrated forest-level recovery of Microsoft Active Directory, following Microsoft best practices.

Implementation of AI/ML and GenAI

• Use of artificial intelligence/machine learning (ML): Vendors have introduced AI/ML-based algorithms in ransomware anomaly detection capabilities and to enhance customer support practices.
• Expanding GenAI capabilities: Leading vendors in this market have rapidly introduced GenAI-based capabilities. The primary focus of these solutions is intended to assist with backup administrative tasks and troubleshooting. Implementations include the use of chatbots, natural-language conversational chats and AI-based responses. The use of GenAI is expected to lead to expanded levels of automation to accelerate recovery and further simplify administration and accelerate recovery.
• Emergence of agentic AI: Vendor capabilities to automate tasks through the use of backup agents is emerging. Current capabilities operate in a guidance-based mode of operations.