Commvault integrates cyber recovery actions into CrowdStrike Charlotte Agentic SOAR

Commvault said it integrated CrowdStrike with Charlotte Agentic SOAR so that Commvault cyber recovery actions can run as native steps inside security workflows. The company said the change is intended to support coordinated recovery during incidents for joint Commvault and CrowdStrike customers.

In the announcement, Commvault described the goal as reducing manual coordination between security and recovery teams while incorporating recovery actions into workflows orchestrated by Charlotte Agentic SOAR. It said the integration was designed to support security workflows that include response and forensic investigation activities.

Commvault said the connector adds capabilities intended to control recovery actions during active incidents. It said the integration restricts access in Commvault to help prevent unauthorized changes, suspends Commvault backup data aging policies to retain viable recovery points, and restores potentially compromised assets into Commvault Cleanroom to enable investigation without disrupting production systems.

Vidya Shankaran, Field CTO, Commvault, said, “Security and recovery teams need to move quickly and in coordination during an incident,” and added, “Our integration with CrowdStrike Charlotte Agentic SOAR makes Commvault cyber recovery actions available directly within security workflows, helping joint customers reduce manual handoffs and accelerate investigation and response. This strengthens cyber resilience and simplifies how security and recovery teams work together seamlessly.” Commvault said the integration is generally available for joint customers and is also available through the CrowdStrike Marketplace and its joint partner page.

Press release, provided by Cision on behalf of CommVault. Read the original.