Backup software is judged fairly on exactly one day: the day something is gone, encrypted or corrupted and someone has to bring it back. This ranking weighs restore speed over backup speed, whether a product can survive the ransomware event that goes after the backups themselves, and what a full recovery of a working server, a laptop or a Microsoft 365 tenant actually involves once you are the person doing it under pressure. Pricing in this market is almost universally opaque, quoted per workload, per terabyte or per organization after a sales call, so a buyer's real job is pinning down what a like-for-like configuration costs at several vendors before a demo turns into a discount negotiation. We also looked hard at ownership, because this category has consolidated sharply: Kaseya bought Datto, OpenText absorbed Carbonite, and Cohesity completed its acquisition of Veritas's data-protection business, including NetBackup, in December 2024, all of which changes what a buyer is actually signing up for.
Visibility in this ranking can be paid for. Payment moves a vendor's position within the
shortlist; it never adds a vendor, and it never changes a word of the review. The largest vendors in backup and disaster recovery software
cannot hold places 1 to 3. How it works: placement disclosure ·
editorial process.
How we ranked these
Setup: agents, workloads and defining a realistic recovery target
Deploying a backup agent to a server or a laptop is usually simple; the work that matters is upstream of that. A buyer has to inventory every workload that needs protecting, physical servers, virtual machines, endpoints, Microsoft 365 or Google Workspace tenants, and set a recovery point objective and recovery time objective for each one, since a database behind a payment system and a marketing team's shared drive do not deserve the same backup frequency. We scored setup on how clearly each vendor's console surfaces failed or skipped backup jobs, how easy it is to configure an immutable or air-gapped copy that ransomware inside the network cannot reach or delete, and whether SaaS workloads are covered by the same agent and policy engine as on-premises servers or require a separate product and a separate bill.
The real price: per-workload, per-terabyte and storage billed separately
Billing units vary more here than almost anywhere else in software: NAKIVO and Acronis charge per protected workload per year, Backblaze charges per computer or per terabyte stored, and most of the enterprise platforms, Veeam, Commvault, Rubrik and Cohesity among them, quote a bespoke annual contract with no published number at all. Storage is frequently billed separately from the software licence, and vendors that let you bring your own cloud storage, MSP360 among the clearest examples, can undercut vendors that bundle proprietary storage into the price. Build a specific configuration, workload count, retention period and expected storage volume, and request a written quote from at least three vendors before any call, since headline positioning in this category tells you almost nothing about what you will actually pay.
Getting your data out: proprietary formats and the restore you never tested
What a backup vendor stores is, by definition, the most important copy of your data outside production, which makes portability unusually consequential here. Most products write backups in a proprietary, deduplicated format that only that vendor's software can read, so switching vendors means running both systems in parallel until the new one has a full baseline, not a quick export. We checked whether each vendor publishes its restore process clearly, supports restoring individual files as well as full systems, and lets a customer verify backup integrity without a support ticket. The single biggest risk in this category is not data loss during operation; it is discovering during an actual emergency that a restore nobody tested does not work the way the brochure implied.
Independence from the vendor: a market being consolidated by private equity and MSP platforms
Ownership has moved fast here. Kaseya, an MSP tooling company backed by private equity, bought Datto in 2022 and sells it only through its MSP partner channel, not directly to businesses. OpenText absorbed Carbonite in 2019 and has since folded its business-tier backup into generic OpenText Cybersecurity branding, leaving Carbonite as largely a consumer product today. Most significantly, Cohesity completed its acquisition of Veritas's enterprise data-protection business, including NetBackup, from the Carlyle Group in December 2024, meaning two long-time rivals are now the same company. We favored vendors that are still clearly investing in a focused product and flagged, wherever relevant, when a brand's current ownership changes what a buyer should expect from its roadmap and support.
Who it's for: IT teams protecting tens to hundreds of workloads
This ranking assumes a buyer, an internal IT team or an outsourced provider, responsible for somewhere between ten and a few hundred workloads: a mix of physical and virtual servers, endpoints and at least one SaaS platform such as Microsoft 365. That covers most small and mid-sized businesses and the managed service providers that serve them. It does not cover a single freelancer backing up one laptop, who is better served by a consumer cloud backup product, and it does not cover a global bank or telecom running thousands of workloads across multiple data centers and regulatory regimes, which needs a formal enterprise procurement process and the kind of scale Commvault, Rubrik or Cohesity are built to sell into, not the lighter evaluation this ranking assumes.
The 12 tools, reviewed
#1 NAKIVO Backup & Replication
Veeam-class backup and replication at a fraction of the licence cost · United States · nakivo.com
Published pricing Free edition Runs on a NAS
NAKIVO covers most of what Veeam does, instant VM recovery, immutable backups, Microsoft 365 protection, at a noticeably lower published price, and it will run on a NAS rather than requiring a dedicated server, which lowers the barrier for a smaller IT team. A genuine free edition and a 15-day full-featured trial with no credit card mean an evaluation can start immediately rather than after a sales call, and published starting prices make it one of the few vendors in this category a buyer can actually compare on cost before picking up the phone.
Where it falls short
Its partner network and enterprise reference base are smaller than Veeam's or Commvault's, which matters for a buyer who wants proof it has been battle-tested at very large scale. Some of the more advanced enterprise editions and perpetual licences remain quote-only, and support responsiveness outside core business hours varies more than at the larger, better-resourced vendors.
Wrong for
A large enterprise with thousands of heterogeneous workloads and a need for extensive third-party integrations and a big-name reference list should look at Veeam or Commvault instead, where NAKIVO's smaller footprint becomes a real limitation.
Pricing: Published per-workload subscription pricing (virtual machine, physical server, cloud instance or Microsoft 365 user each counted as one workload), plus per-CPU-socket perpetual licences and per-TB NAS backup; Enterprise Plus and some perpetual editions are quoted. (free plan)
Visit NAKIVO Backup & Replication →
#2 Backblaze
Unlimited business backup and low-cost cloud object storage · United States · backblaze.com
Unlimited storage Published pricing Free B2 storage tier
Backblaze does one thing better than almost anyone: it makes unlimited backup of a business's computers genuinely simple and genuinely cheap, with a flat, published annual price and no storage caps to negotiate around. Its B2 Cloud Storage business, priced transparently per terabyte with a real free tier, has become a common low-cost alternative to the hyperscalers for MSPs and developers who need raw object storage rather than a full backup product. The combination of transparent pricing and a company that has published its hard-drive failure statistics for years says something about how it treats customers.
Where it falls short
It is not a full enterprise disaster recovery platform: there is no instant virtual machine recovery, no application-aware backup orchestration and no bare-metal recovery of the kind Veeam or NAKIVO offer. Restoring a large dataset over the internet is slow unless you pay for a shipped physical drive, and it is positioned around endpoint and object storage rather than complex virtualized infrastructure.
Wrong for
An IT team backing up virtual machines or complex application stacks that need instant recovery and orchestrated failover should look at NAKIVO, Veeam or Acronis instead; Backblaze is built for straightforward computer and object storage backup, not virtualized disaster recovery.
Pricing: Business Backup is published at a flat annual rate per computer for unlimited storage, with a quoted Enterprise Control tier adding compliance features; B2 Cloud Storage is published at a per-terabyte monthly rate with the first 10GB free. (free plan)
Visit Backblaze →
#3 Acronis Cyber Protect
Backup and cybersecurity protection in one agent · Switzerland · acronis.com
Swiss vendor Anti-ransomware built in Bare-metal restore
Acronis combines backup with active ransomware and malware protection in the same agent, which closes a real gap: several well-known incidents have involved attackers disabling or encrypting a backup client before going after production data, and a single agent doing both jobs is harder to disable in one step than two separate tools. Bundled cloud storage, bare-metal restore and SaaS backup cover the core job well, and the Swiss legal domicile appeals to buyers with data-sovereignty preferences outside the US.
Where it falls short
The product range is confusingly segmented across Standard, Advanced and Backup Advanced editions, and while an online calculator exists, a clear published price table is not readily visible without configuring a purchase. The agent is reported as heavier on system resources than a backup-only competitor, and there is no free tier, only a trial, for businesses wanting to start without a sales conversation.
Wrong for
A team that already has separate, trusted endpoint security in place and just wants the lightest, cheapest backup agent possible should compare Backblaze or NAKIVO; paying for Acronis's bundled security on top of an existing security stack is redundant.
Pricing: Subscription licensed per protected workload, sold in Standard, Advanced and Backup Advanced editions with an online purchase portal and price calculator; no free plan, only a free trial across business, service-provider and home tiers. (free trial)
Visit Acronis Cyber Protect →
#4 Barracuda Backup
Capacity-priced backup appliance and cloud replication from a security vendor · United States · barracuda.com
Ransomware protection Hybrid appliance and cloud Security-vendor backed
Barracuda Backup pairs a physical or virtual appliance with cloud replication and prices it on capacity rather than per workload, so a business protecting a modest number of large systems can pay for only what it needs to protect today rather than an unpredictable per-device count. Coming from a company built on network security gives it credibility on the ransomware-protection side specifically: immutable backups, multifactor authentication and role-based access are treated as core rather than bolted on, and centralized management suits an IT team already using other Barracuda products.
Where it falls short
Pricing is entirely quote-only with no published starting figure, so cost comparison requires going through the configurator or a sales call regardless of how small the deployment is. It is less specialized in virtual-machine-heavy environments than NAKIVO or Veeam, and organizations with no existing Barracuda relationship gain less from the cross-product management console.
Wrong for
A buyer wanting fully published, self-serve pricing with no configurator or sales conversation should compare NAKIVO or Backblaze instead; Barracuda Backup's capacity-based model needs a quote to size correctly.
Pricing: Quote-only via a "Build and Price" configurator; licensed on scalable, capacity-based terms rather than a flat per-workload fee, with free trials available. (free trial)
Visit Barracuda Backup →
#5 N-able Backup (Cove Data Protection)
MSP-focused backup with 15-minute incremental snapshots · United States · n-able.com
MSP channel 15-minute backups Bundled cloud storage
N-able Backup, sold under the Cove Data Protection name, targets the specific job managed service providers have: frequent, low-overhead incremental backups across many client environments from one multi-tenant console, with cloud storage already bundled into the price rather than billed as a separate line item. Fifteen-minute incremental snapshots and automated recovery testing address two of the most common real-world failure points, stale backups and untested restores, without extra configuration.
Where it falls short
Pricing is entirely hidden behind a quote process, and the product is built around N-able's broader MSP software stack, so a business wanting to evaluate it in isolation, outside an MSP relationship, will find less self-serve information than at NAKIVO or Backblaze. It is not really aimed at direct end-customer buyers at all.
Wrong for
A business without a managed service provider relationship, wanting to buy and run backup software directly in-house, should look at NAKIVO, Acronis or Barracuda instead; N-able's whole go-to-market assumes an MSP in the middle.
Pricing: Quote-only, described by the vendor as a flat rate per server or workstation and a flat per-user rate for Microsoft 365, with cloud storage bundled in; a free trial is available. (free trial)
Visit N-able Backup (Cove Data Protection) →
#6 Druva
100% SaaS-delivered backup with no on-premises infrastructure · United States · druva.com
Cloud-native No infrastructure to manage Air-gapped cloud storage
Druva removed the backup infrastructure question entirely: there is no server to size, patch or eventually replace, since the entire platform runs as a managed cloud service with air-gapped, immutable storage built in from the start. For an organization already comfortable trusting critical infrastructure to a SaaS vendor, and wanting one console across data center, cloud, endpoint and SaaS workloads, that removes a genuine category of operational risk that on-premises appliance-based competitors still carry.
Where it falls short
Pricing is fully opaque with no self-serve numbers published anywhere, which is unusual even by this category's low standard for transparency. Being entirely cloud-delivered is a limitation for organizations with regulatory or contractual requirements for on-premises or fully air-gapped-on-site control, which a SaaS-only architecture cannot satisfy by design.
Wrong for
An organization required by regulation or policy to keep a backup copy physically on its own premises, with no cloud dependency at all, should look at Acronis, NAKIVO or Barracuda's appliance option instead of a SaaS-only platform.
Pricing: Quote-only across per-workload plans (data center, public cloud, Microsoft 365, Google Workspace individually) and a per-user "SaaS Universal" licence with dynamic pooled storage; no published numbers, free trial available. (free trial)
Visit Druva →
#7 Datto BCDR
MSP-exclusive backup with ransomware detection and instant virtualization · United States · datto.com
MSP-only Ransomware detection Instant virtualization
Datto's ransomware and anomaly scanning, combined with near-instant local or cloud virtualization of a failed system, is a genuinely strong disaster recovery story, and its patented deletion-defense feature is specifically built to resist the kind of attack that targets backup infrastructure directly. Since Kaseya's 2022 acquisition, it has become the backbone of many MSPs' service offerings, and no-charge recovery testing addresses one of the most commonly skipped steps in this category.
Where it falls short
It is sold exclusively through managed service providers under Kaseya's ownership; a business cannot buy or evaluate it directly, which rules it out for any IT team wanting to run its own backup stack in-house. Pricing is entirely opaque even to an interested MSP without a partner relationship already in place, and evaluating it requires going through a third party rather than the vendor itself.
Wrong for
Any business without a managed service provider, or one that specifically wants to buy and administer its own backup software directly, cannot use Datto at all; NAKIVO, Acronis or Backblaze are the direct-purchase equivalents.
Pricing: Quote-only through the MSP channel; Datto and parent company Kaseya describe a flat-fee model but publish no numbers, and the product cannot be purchased directly by an end business without an MSP. (none)
Visit Datto BCDR →
#8 Carbonite
Long-standing cloud backup brand, now under OpenText · Canada · carbonite.com
Published consumer pricing OpenText-owned Legacy SMB brand
Carbonite built a genuine reputation as an easy, affordable way for a small office to stop worrying about backup, and its consumer and small-office plans, with unlimited storage and one-click restore, still deliver that today at a published, predictable price. Buyers should go in aware of the current structure: OpenText, which acquired Carbonite in 2019, now sells larger business-tier backup mostly under its own Cybersecurity brand rather than as Carbonite, so the Carbonite name in 2026 mainly represents the individual and small-office product line rather than a distinct mid-market platform.
Where it falls short
A business outgrowing the small-office tier finds itself routed into OpenText's broader, quote-only Cybersecurity portfolio rather than a clearly labeled Carbonite business product, which makes the buying path less transparent than a purpose-built SMB or mid-market vendor. There is no free trial, only a money-back guarantee on paid plans, and virtual-machine-level recovery is not a strength of the product line.
Wrong for
A growing business expecting a clear, dedicated mid-market Carbonite product should go in aware it will likely be sold OpenText's broader Cybersecurity backup instead; a team wanting a purpose-built SMB platform with a clear identity should compare NAKIVO or Acronis.
Pricing: Published annual plans for individual and small-office backup (Basic, Plus and Prime tiers); larger business backup is sold under OpenText's Cybersecurity umbrella on a quote basis rather than under the Carbonite name. (none)
Visit Carbonite →
#9 Veeam
The enterprise standard for virtual and hybrid infrastructure backup · United States · veeam.com
Category standard Instant VM recovery Broad platform support
Veeam is the product most serious IT departments quietly benchmark everything else against for virtualized infrastructure, and instant recovery of a failed virtual machine is as good as the marketing claims. Its Universal License portability across virtual, physical and cloud workloads, and a genuinely broad set of supported platforms including Kubernetes through its Kasten acquisition, cover almost any environment a mid-sized to large IT department is likely to run. It would rank higher on capability alone; the majors rule keeps it out of the top three for a buyer profile that does not need its full enterprise scale.
Where it falls short
Pricing is entirely opaque without going through a reseller or partner, and licensing across the core platform, Microsoft 365 and Kubernetes modules adds real complexity to a quote. For a small IT team, the breadth that makes Veeam the enterprise standard can be more machinery than the job requires, at a price that reflects enterprise positioning.
Wrong for
A small business with a handful of workloads and a limited budget is paying for enterprise breadth it will not use; NAKIVO or Acronis covers most of the same core job for considerably less.
Pricing: Quote-only Veeam Data Platform editions (Foundation, Advanced, Premium) sold through resellers and partners; a 30-day full-functionality free trial is confirmed, with no published price list. (free trial)
Visit Veeam →
#10 Commvault
Enterprise data protection across everything a large estate holds · United States · commvault.com
Very broad coverage Enterprise scale Partner-led delivery
Few products cover as much, physical, virtual, cloud, databases and SaaS, under one policy engine as Commvault, which is exactly what a large, heterogeneous estate needs from a single vendor rather than a patchwork of point tools. Its 2023 acquisition of Clumio strengthened cloud-native AWS backup specifically, extending coverage further into modern cloud-first environments without leaving the older enterprise estate behind.
Where it falls short
Pricing is completely opaque, with not even a calculator or ballpark figure available without engaging sales, which makes early-stage comparison shopping essentially impossible. The platform is normally implemented with a partner and can be genuinely complex to configure and administer, and a mid-sized company will typically pay for coverage across workload types it does not run.
Wrong for
A company with a straightforward, mostly virtualized environment and no complex database or Kubernetes estate is paying for coverage it never touches; NAKIVO or Veeam fits that shape at a more proportionate cost and complexity.
Pricing: Quote-only; no pricing information or calculator is published anywhere on the main site, with "request a demo" as the only path to a number. (none)
Visit Commvault →
#11 Rubrik
Zero Trust Data Protection for cyber resilience at scale · United States · rubrik.com
Zero Trust architecture Air-gapped proprietary file system Enterprise sales only
Rubrik was built from the ground up around cyber resilience rather than added ransomware features onto an older backup architecture, and its Zero Trust design, logical air gaps, encryption and strict access controls throughout, reflects that. Rapid file-level search and recovery across a mixed on-premises and multi-cloud environment is a genuine strength for a large organization that has been through, or is specifically planning against, a serious ransomware incident and wants recovery measured in hours rather than days.
Where it falls short
Pricing is entirely opaque even by this category's low bar for transparency, with no calculator, no published figures and, unlike several competitors, no self-serve free trial to test the product hands-on before a sales conversation. It is positioned firmly as an enterprise, sales-led product, which makes it a poor fit for a small IT team wanting to start quickly.
Wrong for
A small or mid-sized business wanting a quick, self-serve evaluation with a free trial should look at NAKIVO, Acronis or Cohesity instead; Rubrik's enterprise-sales-only model assumes a formal procurement process.
Pricing: Quote-only, enterprise sales-led with "Contact Sales" as the only path on product pages; no calculator, no published numbers and no self-serve trial found. (none)
Visit Rubrik →
#12 Cohesity
Unified hybrid and multi-cloud data protection, now including NetBackup · United States · cohesity.com
Includes former Veritas NetBackup Zero Trust and RBAC Unlimited scale
Cohesity's completed acquisition of Veritas's data-protection business, including the long-standing NetBackup platform, in December 2024 makes it the broadest single platform in this ranking, combining a modern, SaaS-capable architecture with NetBackup's decades of enterprise deployment history at banks, hospitals and other large regulated organizations. Unlimited scale, immutable snapshots and global search across a genuinely hybrid, multi-cloud estate are real strengths for an organization that has outgrown a single-vendor virtualization-focused tool and needs one platform across everything it runs.
Where it falls short
Pricing remains fully opaque despite the flexible delivery options, and existing NetBackup customers face real uncertainty about long-term product direction as the two platforms are integrated post-acquisition. The breadth and flexibility that suit a very large estate are more than most mid-sized companies need, and complexity scales with that breadth.
Wrong for
A mid-sized company with a mostly virtualized, single-cloud environment gains little from Cohesity's full breadth and pays enterprise pricing for capability it will not use; NAKIVO or Veeam fits that scale more proportionately.
Pricing: Quote-only for DataProtect, offered as SaaS, software subscription or managed/partner-delivered service; no published price list, with a 30-day free trial available for cloud backup, cyber vaulting and disaster recovery capabilities. (free trial)
Visit Cohesity →
What the data says about this market
The backup and disaster recovery market splits fairly cleanly into three tiers: efficient, value-priced challengers such as NAKIVO, Acronis and Backblaze that undercut the establishment on price while covering most of the same ground; MSP-channel platforms such as Datto and N-able that are sold exclusively through managed service providers rather than directly to end customers; and enterprise incumbents, Veeam, Commvault, Rubrik and Cohesity, that dominate mind-share in large IT departments and are quoted rather than priced. Of the twelve vendors ranked here, ten are headquartered in the United States, one in Switzerland and one in Canada. Only NAKIVO, Backblaze and Acronis publish meaningful pricing information directly on their websites without a sales call; the rest require a quote for anything beyond a self-serve trial.
Consolidation has been the defining structural story of the past few years. Kaseya's 2022 acquisition of Datto tied one of the category's strongest ransomware-detection products to an MSP-only distribution model that shuts out businesses wanting to buy direct. OpenText's earlier acquisition of Carbonite has, by 2026, left the Carbonite brand largely serving individual and small-office customers, with business-tier backup increasingly sold under generic OpenText Cybersecurity branding instead. The largest move came in December 2024, when Cohesity completed a roughly three-billion-dollar acquisition of Veritas's data-protection business, including the long-standing NetBackup platform, from the Carlyle Group, combining two of the category's most recognized enterprise names under one roof.
Ransomware remains the force reshaping product design more than any other single factor. Immutable backups that cannot be altered or deleted within their retention window, air-gapped or logically isolated copies, and automated anomaly detection that flags a backup job behaving like an encryption event in progress have moved from premium add-ons to baseline expectations across nearly every vendor in this list. The corresponding shift in buyer behavior is that a restore test is no longer optional due diligence; it is the only way to know, before an actual incident, whether a vendor's marketing claims about recovery speed hold up under a real deadline.
The 12 ranked vendors, counted
- Headquarters by region: North America 11, Europe 1
- By country: United States 10, Canada 1, Switzerland 1
- Pricing model: Capacity-based, quoted 1, Flat rate per device / user, quoted 1, Per computer / year, or per TB / month, published 1, Per workload / year 1, Per workload / year, published 1, Published annual tiers (consumer/small office); quoted (business) 1, Quote only 1, Quote only (SaaS, subscription or managed service) 1, Quote only (per workload or per user) 1, Quote only, MSP channel only 1, Quote only, sales-led 1, Quote only, sold via partners 1
- Free option: Free trial 6, None 4, Free plan 2
Counted from the 12 vendors on this page. More in our market data.
For the wider market behind backup and disaster recovery software, read our report The Global Shift to ICT Services,
or browse all industry reports.
Questions and answers
What is the best backup and disaster recovery software in 2026?
For most small and mid-sized IT teams protecting a mix of servers, virtual machines and endpoints, NAKIVO Backup & Replication is the best all-round choice: it covers most of what the enterprise platforms do at a fraction of the price, with published starting pricing and a genuinely free edition to start on. Backblaze is the simplest, cheapest option for businesses whose main need is straightforward, unlimited endpoint and server backup rather than instant virtual machine recovery. Acronis Cyber Protect suits a buyer who wants backup and anti-ransomware protection combined in one agent. Larger IT departments with heterogeneous, multi-cloud estates are better served by Veeam, Commvault, Rubrik or Cohesity, priced and supported for that scale.
What's the actual difference between backup and disaster recovery?
Backup is the copy: data, files, a virtual machine or a database saved to a second location on a schedule. Disaster recovery is the plan and the tooling for getting a business back to running after that copy is needed, which can mean instantly spinning up a failed virtual machine from its backup rather than waiting hours to restore it, or failing over to a secondary site entirely. Many products marketed as backup software now include basic disaster recovery features such as instant recovery; true enterprise disaster recovery, with automated failover and tested runbooks, is a deeper commitment most small businesses do not need.
Why do backups need to be immutable or air-gapped?
Modern ransomware frequently searches a network specifically for backup infrastructure and encrypts or deletes it before encrypting production systems, on the reasonable assumption that a victim with no clean backup is far more likely to pay a ransom. An immutable backup cannot be altered or deleted within its retention window, even by an administrator account that has been compromised, and an air-gapped or logically isolated copy sits outside the network the ransomware can reach at all. Any product still selling backup as a simple copy-on-schedule without either of these protections is selling a weaker product than the threat now requires.
Is per-workload, per-terabyte or fully quoted pricing better for a buyer?
None is inherently better; each suits a different shape of estate. Per-workload pricing, used by NAKIVO and Acronis, is predictable and easy to forecast as headcount and server count grow. Per-terabyte pricing, Backblaze's model, rewards a business with a small number of very large data sets and can be far cheaper for that shape. Fully quoted enterprise pricing, common at Veeam, Commvault, Rubrik and Cohesity, in principle lets a vendor tailor a large, complex deal but also makes comparison shopping much harder for a smaller buyer, who should request a written like-for-like quote rather than accepting a verbal range.
Can ransomware really encrypt backups too, and how common is that?
Yes, and it is now a standard part of a serious ransomware attack rather than an edge case; attackers who gain administrative access frequently target backup servers and cloud storage credentials specifically, precisely because a business that can restore cleanly has far less reason to pay. This is why immutable storage, air-gapped or logically isolated copies, and anomaly detection that flags a backup job behaving like mass encryption have moved from premium features to baseline expectations across nearly every serious vendor in this category, rather than remaining optional extras.
Do I need a separate tool for Microsoft 365 or Google Workspace backup?
It depends on the vendor. Microsoft and Google both retain deleted mail and files only for a limited window and do not guarantee recovery from user error, malicious deletion or a ransomware attack that reaches a synced drive, so most serious IT teams back up SaaS data separately from the platform's own retention policy. Several vendors here, Druva, N-able and Acronis among them, cover Microsoft 365 or Google Workspace under the same agent and console as servers and endpoints; others require a genuinely separate product and a separate bill, which is worth confirming before assuming your server backup vendor already has this covered.
What's the real difference between Veeam, Commvault and Cohesity at the enterprise end?
Veeam is most closely associated with fast, reliable backup and instant recovery of virtualized infrastructure, historically VMware and Hyper-V, and remains the default many mid-market and enterprise IT teams benchmark against. Commvault positions itself on breadth, covering physical, virtual, cloud, database and SaaS workloads under one policy engine for very heterogeneous estates. Cohesity, having absorbed Veritas's NetBackup business in December 2024, now combines a modern, software-defined data-protection platform with NetBackup's long enterprise track record, making it a credible choice for an organization wanting one vendor across a genuinely large and varied environment. All three are quote-only and normally sold through a formal sales process.
Are free or low-cost backup tools good enough for a real business?
For a genuinely small operation with modest, well-understood needs, NAKIVO's free edition or Backblaze's low, published per-computer pricing can be entirely adequate, particularly if restores are tested regularly. The risk grows with the size and complexity of the estate: a free or budget tool with a small support team behind it is a harder position to be in during an actual multi-system outage than a paid product with dedicated support and a tested runbook. Match the tool to the actual consequences of a failed restore, not just to the sticker price.
How often should a business test a restore, not just run a backup?
At minimum quarterly for critical systems, and after any significant change to infrastructure, such as a new server, a migrated database or a new SaaS platform being adopted. A backup job completing successfully every night proves nothing about whether the resulting data can actually be restored into a working system under time pressure; several of the vendors in this ranking, Datto and Cohesity among them, now include automated recovery testing specifically because manual testing is so often skipped once the initial rollout excitement fades.
How does consolidation, such as Kaseya owning Datto or Cohesity owning Veritas NetBackup, affect buyers?
It usually changes both distribution and roadmap priorities. Datto, now owned by Kaseya, is sold exclusively through managed service providers, so a business wanting to buy it directly cannot. Cohesity's absorption of Veritas's NetBackup business in December 2024 combines two major platforms under one company, which should mean more resources behind the combined roadmap but also real uncertainty for existing NetBackup customers about long-term product direction. OpenText's earlier acquisition of Carbonite has, by 2026, left that brand serving mainly individual and small-office customers, with business-tier backup increasingly folded into broader OpenText Cybersecurity branding instead of sold as Carbonite. Ask directly, during any sales conversation, whether the product you are buying still has a dedicated team and roadmap after an acquisition.
What recovery point and recovery time objectives should a small or mid-sized business target?
There is no universal number; it depends entirely on what a system does. A payment or order-processing database might justify a recovery point objective measured in minutes and a recovery time objective measured in an hour or two, while an internal file share used a few times a day can tolerate a recovery point objective of a full day. The exercise that matters is writing these numbers down deliberately for each workload before shopping for a vendor, rather than accepting whatever a product's default backup schedule happens to deliver.
