Commvault (CVLT) Turns Cyberattacks Into Automated Recovery Through New CrowdStrike (CRWD) Deal

On August 31, Commvault (CVLT) revealed that its cyber recovery operations can now be integrated as native steps within CrowdStrike (CRWD) workflows. This allows security teams to trigger data recovery without leaving their incident response tools. The partnership builds upon Commvault's data protection business, which recently reported double-digit subscription growth.

By integrating with CrowdStrike, customers can now restrict access to Commvault, suspend backup data aging policies, and restore compromised assets into Commvault's Cleanroom for forensic investigation. This integration addresses a previous gap in breach response that slowed down the process by requiring security and recovery teams to work with separate tools and manually share information.

This move is part of a broader CrowdStrike partnership, with previous integrations including Falcon Insight XDR for threat intelligence and Falcon Next-Gen SIEM for visibility. The CrowdStrike integration is a significant development, as Commvault's recovery workflow is now housed within another company's platform. While the stock trades at a forward P/E of 24.51, it is still viewed positively due to the company's growth guidance and reputation.

However, GAAP operating margins are relatively low at 8.2%, and hedge fund ownership has decreased, potentially indicating a shift in investor sentiment.