Ransomware can encrypt a computer. It can't take your files.
We've been snapshotting client files since 2008 and defending against ransomware since CryptoLocker arrived in 2013. The approach assumes something will eventually go wrong, and makes sure it doesn't cost you your data.
- Between file snapshots
- 15 min
- Encrypted off-site copies
- Several a day
- Oldest snapshot kept
- 2 years
- Audit records kept
- 8 years
Four layers, each built for when the one before it fails
Hard to get in
- Antivirus on every workstation, with an alert if any machine is ever missing it
- Encrypted DNS that blocks known malware and phishing sites
- Remote desktop only reachable from approved locations, and remote support with no open ports
- USB storage and outdated file-sharing protocols disabled
Noticed quickly
- Every file created, renamed, or deleted on your shared drives is logged
- Decoy services on every office server alert our team the moment anything probes them
- The file log can be replayed against thousands of known ransomware patterns to show exactly what was touched and by whom
- Around-the-clock monitoring of servers, backups, and snapshots, with alerts if any fall behind
Nothing lost
- Shared files are snapshotted every 15 minutes. Snapshots are read-only, so ransomware on a workstation can't encrypt them.
- Snapshots are kept for 3 days at 15-minute intervals, 7 days hourly, 45 days daily, and then weekly, monthly, and yearly
- Staff can restore their own files from Windows "Previous Versions"
- Write-once folders protect records that must never be changed or deleted
Recoverable from anything
- Our backup servers pull encrypted copies of your data several times a day. If malicious software were to infect your network, there is no way for it to reach our backup servers.
- Data stays encrypted in transit and at rest, so the backup site never holds readable patient data
- Virtual servers and data can be restored from off-site onto new hardware
- Workstations are rebuilt from a standard configuration with your practice software pre-staged
- Your phones can be forwarded to one or more backup numbers if your office ever goes offline
If an attack gets through
The worst case is that a workstation gets encrypted and some shared files with it. Because the snapshots underneath those files are read-only and the off-site copies are out of the office's reach, the damage stops there.
- Spot it. Audit logs, decoys, and monitoring alert our team to unusual file activity.
- Stop it. A technician disconnects the affected computer and locks the account involved.
- Roll it back. Damaged files are restored from the last clean snapshot, at most 15 minutes old.
- Rebuild. The computer is wiped and rebuilt from our standard configuration before it goes back on the network.
Ransomware is only one of the things this saves you from
We built this in 2008, five years before CryptoLocker existed, because files were already being lost the ordinary ways. Every one of these has the same answer: roll back to a few minutes ago, and check the log to see what happened.
Other malware
Anything that corrupts, encrypts, or deletes files leaves the snapshots underneath it untouched.
A departing employee
Files deleted on the way out the door come back, and the audit log shows exactly what was taken or removed, and when.
Honest mistakes
The folder someone dragged into the wrong place, the spreadsheet overwritten at 4:55, the records deleted by accident. All recoverable, often by your own staff.
Hardware failure
A failed disk or a dead server is a restore, not a catastrophe. Your data also lives off-site, encrypted, ready to come back on new equipment.
When the whole office is the problem
Fire, flood, and theft get the same answer as a bad disk. Your data and virtual servers exist off-site, encrypted, and can be restored onto new equipment.
- Backup freshness is checked every few minutes, and our team is alerted if anything falls behind
- Regular audits confirm every folder that should be backed up actually is
- Each office server has an offline recovery console, so we can talk staff through a restart even with the internet down
- Your emergency recovery kit, with the passwords and codes needed to rebuild, is available to you in the client portal
Find out what you'd pay.
We'll look at your current setup, tell you what we'd change, and give you a flat monthly price. No obligation.