---
title: Features
description: Acronis Cyber Platform offers a variety of cybersecurity, data protection, and endpoint protection management features. Explore our product for your complete cyber protection solution.
canonical_url: https://www.acronis.com/en/platform/features/
locale: en
last_updated: 2026-10-13
---

# Features

## Acronis Cyber Platform

The best backup and recovery enhanced with essential endpoint protection capabilities and security management toolkit for centralized administration and monitoring.

[Learn more](https://www.acronis.com/en/products/cloud/cyber-protect/)

UNIQUE

Acronis Active Protection technology

Protect your clients from modern cyberthreats. Our award-winning anti-ransomware technology with built-in automatic recovery from ransomware is now enhanced with AI-based static and behavior anti-malware analysis focused on zero-day threats.

![Image 2: Acronis](https://staticfiles.acronis.com/images/content/0eb1550abe0730cc9bf61c5ea513a834.png)

Workflow Automation

Automate IT operations with a no-code engine that lets MSPs build and run cross-service workflows through a simple drag-and-drop builder. The system reacts instantly to events across services in Acronis Cyber Platform, executing reliable, repeatable processes that raise productivity and ensure consistent, high-quality service. With a growing library of triggers and actions, it helps service providers standardize procedures, eliminate manual work and scale their operations across all customer environments.

![Image 3: Acronis](https://staticfiles.acronis.com/images/content/d84ea6836377aee92a91a53576d063db.png)

Vulnerability assessments

Identify and close the security gaps in your clients systems. You can scan client machines for vulnerabilities to ensure that all applications and operating systems are up-to-date and can’t be exploited by cybercriminals.

![Image 4: Acronis](https://staticfiles.acronis.com/images/content/a57ce473eed5ec4945f695f716c4035b.png)

### Native, agentless backup of Azure VMs

Protect Azure workloads without the need for agents, simplifying management and reducing maintenance. Ensure faster recovery times and cost efficiency with incremental snapshots and reliability with multidisk consistency.

### Agentless backup for Proxmox VE and LXC containers

Acronis Cyber Platform now secures Proxmox VE virtual machines and LXC containers directly at the host layer, eliminating the need for guest agents and the overhead they create. An agent on each node discovers every workload, captures image backups, and stores them on Acronis Cloud, local network shares, or any S3-compatible object storage. You can migrate workloads into or out of Proxmox VE through Universal Restore, and keep maintenance simple because only the host component requires updates.

### Agentless Backup for Nutanix AHV

Simplify protection for Nutanix AHV VMs with our agentless backup solution. Back up to Acronis Cloud, Nutanix storage, or public clouds with ease. Enjoy universal cross-platform migration of workloads to and from Nutanix AHV as well as full-image or file-level recovery.

### Multiple backup types

Back up disks/volumes (with all information required for the operating system to boot), individual files or folders, system states (for Microsoft Windows systems), or ESXi configurations.

### Flexible backup storage options

Comply with the requirements of different clients with flexible storage options. Back up to Acronis-hosted cloud storage, public clouds such as Google Cloud Storage or Microsoft Azure, your own cloud storage, or local networked storage.

### Device and port control

Strengthen data security and prevent leakage of sensitive information via local channels with granular, context-aware controls over user access to locally connected devices and ports, and data operations related to them – even for virtulized sessions.

### Clipboard control

Prevent data leakage in its earliest stage by controlling data transfers between application and documents. Allow or block user access to objects of different data types copied to the clipboard, even for redirected BYOD devices in virtualized sessions.

### Device control: support of encrypted removable media and screenshot capture access

Eliminate the risk of data leaks with encrypted removable media and screenshot capture control. This enables users to keep sensitive information within their organization – should a removable device get in the wrong hands or prevent screenshots from being copied to the clipboard. Keeping your clients’ sensitive data safe and secure.

### Acronis Instant Restore

Cut RTOs to as little as 15 seconds with a built-in capability to restore a system by booting it as a virtual machine directly from the backup, without moving any data.

### Acronis Universal Restore

Reduce the time spent on recovery tasks. Acronis Universal Restore makes recovery to dissimilar hardware faster by detecting the machine type and auto-installing appropriate drivers for the hardware.

### Google Workspace data protection

Safeguard client data stored in Gmail, Drive (including Team Drives), Contacts, and Calendar by backing it up to ensure fast, reliable recovery.

### Complete Microsoft 365 protection

Protect data in Microsoft Exchange Online, OneDrive for Business, Microsoft Teams and SharePoint Online with comprehensive cloud-to-cloud backup and restore.

### Backup encryption

Maintain regulatory compliance and strengthen data protection by securing your backups with AES-256 data encryption for data in transit and at rest, so only you can access the data.

### Deduplication

Minimize storage requirements by detecting data repetition in backups and not storing identical data more than once. Deduplication also reduces network load as duplicate data is not even transferred over the network to the backup storage.

### Report scheduling

Increase visibility into information security and simplify IT security auditing with capabilities for sending scheduled reports to listed recipients in a desired format and language.

### Multi-tenant enablement of services, offering items

Save time and money when you need to add new services, billing modes or offering items across multiple clients.

### #CyberFit Score

Increase your clients’ security posture by addressing the gaps in their IT environment. Acronis #CyberFit Score assesses and scores a set of security metrics to identify gaps and then provides recommendations for how you can improve their overall security.

Monitoring and reporting

Simplified, at-a-glance reporting helps streamline operations while giving your technicians the insight they need to support your clients. Customize your dashboard’s widgets to view a wide range of reports – enabling you to quickly identify and remediate problems.

![Image 5: Acronis](https://staticfiles.acronis.com/images/content/dc625613ef46f698b41ff027a23ef0cb.png)

Centralized protection plans and group management

Ease administrative efforts with the ability to group manage multiple workloads and centralized protection plans that include all security configurations that can be applied to multiple endpoints across your client’s organization.

![Image 6: Acronis](https://staticfiles.acronis.com/images/content/218125f959ffa445dad82f6ad42cbf0f.png)

### Auto discovery and remote installation

Simplify the onboarding process by installing multiple agents at once – in the cloud and on-premises. With network-based and Active Directory-based discovery, your technicians can easily install and apply protection plans remotely – helping to keep your clients safe.

### Predefined protection plans

Protect your clients’ remote and office workers quickly and easily by choosing one of three preconfigured protection plans. These options save you time while ensuring you that your clients’ workloads and environments are protected.

### Remote desktop assistance

Enable secure, off-site access to machines to ease remote work for users or provide technical assistance to clients with built-in remote desktop capabilities.

### Hardware inventory collection

Save time and effort with an up-to-date hardware inventory. Discover all hardware assets with automatic and on-demand scans. Create hardware inventory reports, browse and filter records by multiple criteria and auto-delete them once a machine or tenant is removed.

Secure file sync and share

Ensure client productivity by offering convenient, secure file sync and share capabilities. Users can securely create, edit, and share content using their own devices with pay-as-you-go pricing.

![Image 7: Acronis](https://staticfiles.acronis.com/images/content/611d5d96f30e895df2111156ba95eab0.png)

Multi-tier and multi-tenant management

Count on optimal administrative efficiency: create client or partner accounts in seconds, customize unique offerings, and manage quotas, features and administrative privileges using vertical grouping.

![Image 8: Acronis](https://staticfiles.acronis.com/images/content/c7e264286735c6a6f19ab46be2044409.png)

### Electronic signing

Strengthen process compliance by allowing clients and their third parties to e-sign documents with publicly verifiable proof of the timestamp and authenticity of the signature. Based on pay-as-you-go pricing.

### Test failover in isolated network environments

Verify the integrity and efficiency of disaster recovery plans by executing them via the web console in an isolated network environment, without disrupting other processes.

### Point-to-site VPN connection

Enable clients to quickly and easily access files from the local site or the cloud. With the Business VPN feature, clients on DR-enabled tenants can establish a secure connection to the corporate network with their personal devices so they can access the data they need.

### Firewall policies management

Easily manage firewall policies on your clients’ behalf for their disaster recovery servers through the Acronis Cyber Platform console. This enables you to simplify the support process and manage outbound and inbound firewall policies.

### Straightforward pay-as-you-go pricing

Meet the dynamic needs of your clients with a 100% pay-per-use licensing model and free functionalities.

### Integration with PSA and RMM systems

Deliver services instantly using native integrations with ConnectWise (Automate, Manage, Control), Atera, Autotask, Kaseya, cPanel, HostBill, CloudBlue, Plesk, and WHMCS.

### Integration with custom systems

Assimilate systems by leveraging a powerful RESTful management API or enable integration via the Acronis Cyber Backup Cloud Application Packaging Standard (APS).

### Ransomware-proof backups

Ensure backups cannot be encrypted or deleted by a ransomware attack or malicious users through immutable storage, enabling you to recover quickly to the most recent clean state.

### Acronis Cyber Platform for VMware Cloud Director

Designed for public, private, and hybrid clouds built on VMware Cloud Director. Installed and configured by a provider, protects tenants enabling them to perform backups and recoveries within their Cloud Director user interface.

UNIQUE

Data protection map and compliance reporting

Ensure that critical data is protected for compliance reporting with the data protection map. Use the automatic data classification to track the protection status of important files and alert admins if sensitive client data is not backed-up.

![Image 9: Acronis](https://staticfiles.acronis.com/images/content/b6de2de5ba77ac81a12e8aea32926cb0.png)

Unique

Continuous data protection

Ensure users don’t lose the work that is in-progress by defining a list of critical apps that they frequently use. The Acronis agent monitors every change made in the listed applications and continuously backs them up between scheduled backups so no data is lost.

![Image 10: Acronis](https://staticfiles.acronis.com/images/content/5c35c58ae6541d3a5926be6770506b4f.png)

### Full or granular recovery of MariaDB and MySQL databases

During the backup of the entire workload, Acronis collects metadata for each database running on it. You can browse databases and/or fully or granularly recover data and tables without recovering the entire workload.

### Application cluster backup and restore

Ease IT administrative burden with built-in capabilities for easy back up and recovery of Microsoft Exhange, Microsoft SQL Server, and Oracle DBMS Real Apllication clusters.

### SAP HANA backup

Strengthen your SAP HANA database protection with consistent, script-based, disk-level backups that simplify management and do not require any SAP HANA expertise.

### Group management for Microsoft 365 and Google Workspace

Create static or dynamic groups based on your Azure AD data and simplify protection management for multiple Microsoft 365 and Google Workspace seats by eliminating the need to configure protection for each individual seat.

### Adjustable backup frequency for Microsoft 365 and Google Workspace

Reduce RPO and improve business continuity by backing up your seats data up to 6 times per day. Minimize the potential data loss and quickly recover from incidents, minimizing downtime.

### Off-host data processing for backup operations

Reduce the load on your clients’ workloads by moving backups replication, validation, retention and conversion into VM operations to another machine. These operations can be scheduled independently.

### XDR

## Extended Detection and Response (XDR)

Eliminate the cost and complexity of multiple point products and enable your team with one complete cyber protection solution that is simple to manage and deploy.

[Learn more](https://www.acronis.com/en/products/cloud/cyber-protect/extended-detection-and-response/)

Acronis Copilot: Your GenAI security assistant

Enable MSP technicians with limited security skills to respond to incidents effectively and swiftly, while also streamlining operations for high-expertise technicians. Conduct richer investigations, respond faster and mitigate risks at scale in just minutes, using only natural language - via a conversational user experience with a GenAI assistant. Users can:

*   Engage with Acronis Copilot to ask specific questions about an incident.
*   Receive advice on actions to mitigate threats.
*   Get a list of incidents with similar detections for deeper analysis.

![Image 11: Acronis](https://staticfiles.acronis.com/images/content/78b6b8fdd10fde2d20e416d24d666c02.png)

Automated response playbooks

Automate the response to XDR and EDR incidents to scale your security operations and improve response times, while also reducing operational burden on managing security incidents. Grow your practice worry-free – knowing you can protect more businesses and workloads without adding on resource needs.

![Image 12: Acronis](https://staticfiles.acronis.com/images/content/3a3ccf904f387d992827645c5e9c1055.png)

Unique

Comprehensive response to attacks for unmatched business continuity

Prevail where point solutions fail — leverage the full power of integration among cybersecurity, data protection and endpoint security configuration management via a single-click response to incidents:

*   **Remediate** by isolating endpoints and quarantining threats
*   **Investigate further** using remote connections and forensic backups
*   **Prevent future attacks** closing open vulnerabilities
*   **Ensure business continuity** with integrated backup and recovery

![Image 13: Acronis](https://staticfiles.acronis.com/images/content/3b377ade5c59167f8ccf9ec4e723c807.png)

### GenAI Protection: Usage monitoring

Monitor and report on the usage of Generative AI tools across browsers at a glance with easy-to-interpret widgets. Additionally, control the access to GenAI tools via URL blocklists.

### Attack-specific rollbacks

Quickly and easily rollback attack damage, including affected files, data and configurations —streamlining remediation without depending on the vulnerable Microsoft Volume Shadow Copy Service that most solutions leverage.

Unique

### Automated interpretation of incidents mapped to MITRE ATT&CK®

Streamline response and increase reactiveness to threats by leveraging AI-based interpretations of attacks mapped to MITRE ATT&CK® to understand in minutes: how the attacker got in; how they hid their tracks; what harm they caused; how did the attack spread? 

### AI-generated incident summaries

Streamline incident analysis and response times even further by benefiting from AI-generated summaries that provide a brief overview of each incident. 

### Prioritization of incidents

Focus on what matters and increase your responsiveness to attacks by leveraging automatic incident alerts that are prioritized based on criticality so your team can focus on remediating instead of hunting. 

### Integration with Email Security (Perception Point)

Get increased telemetry by integrating rich forensic data from Acronis’ best-of-breed Email Security solution — understand whether the attack originated from an email and respond by removing malicious attachments and URLs, searching more mailboxes for the threat, or blocking sender’s email address. 

### Integration with Entra ID (identity)

Leverage enhanced visibility and response capabilities for attacks that take advantage of compromised credentials, pinpointing comprised user accounts, terminating their sessions, forcing password reset, or suspending the account altogether. 

### Integration with Collaboration Security (for Microsoft 365 apps)

Cloud applications such as Microsoft 365 Teams, SharePoint and OneDrive are increasingly targeted in attacks. Make sure you stay on top of such threats with natively integrated telemetry and response actions for Microsoft 365 applications. 

### Threat containment and quarantine

Remediate attacks by stopping malicious processes and quarantining analyzed threats blocking them from execution as part of the unified, single-click response capabilities. 

### Endpoint isolation

Stop attacks from spreading and affecting more endpoints — you can isolate affected points from the network to prevent lateral movement. 

### Recovery, including full reimaging

Ensure clients business always remains up and running, quickly recover data and operability after attacks. With best-of-breed backup and recovery capabilities integrated in our single-click response you can recover specific files, or reimage the whole endpoint. 

### Disaster recovery failover (with Disaster Recovery)

Ensure unmatched level of business continuity with integrated disaster recovery. Automatically switch to a backup, off-site environment in case of attacks that disrupt customers business continuity. 

### Remote endpoint connection (with Acronis RMM)

Investigate incidents further with secure remote connection to affected endpoints for troubleshooting and additional analysis purposes. 

Unique

### Forensics backup

Collect evidence for further investigation, reporting, compliance and legal purposes by gathering forensic information – like memory dumps and process information – and storing it in temper-protected backups. 

### Patch management (with Acronis RMM)

As part of the single-click response to attacks you can close security gaps to prevent future incident reoccurrence with our integrated patch management for 250+ applications. 

### Event monitoring and automated correlations

The solution monitors events on an endpoint level and automatically correlates them in attack chain graph per incident. 

Unique

### Intelligent search for IoCs with focus on emerging threats

Focus on what matters like indicators-of-compromise (IoCs) related emerging threats from our real-time threat intelligence feeds and automatically search IoCs across all endpoints — instead of scanning hundreds of lines of logs. 

Unique

### Anti-malware protection for backups

Prevent restoring infected files from backups with built-in malware scanning, including for encrypted backups. By scanning full disk backups in a centralized location, Acronis Cyber Platform helps find malware — ensuring users are restoring a backup that is clean and malware free. 

Unique

### Safe recovery

Prevent dangerous infections from reoccurring with Acronis’ unique safe recovery technology. During the recovery process, the integrated solution scans the backup for malware, installs the latest security patches and updates its antivirus databases. 

### Remote device wipe

Prevent business-critical data from getting into the wrong hands by remotely wiping compromised or missing Windows devices. You can protect data from being deleted by disgruntled employees or accessed from lost or stolen devices. 

### Real-time threat intelligence feed

Acronis Cyber Protection Operation Centers (CPOC) continuously monitor the cybersecurity landscape and release alerts on potential threats of any kind. Receive real-time alerts on malware, vulnerabilities, natural disasters and other global events that may affect data protection, so you can prevent them. 

### Exploit prevention

Prevent advanced attack techniques, including zero-day and fileless attacks, with behavior-based detection heuristics focused on vulnerability exploitation. Acronis’ exploit prevention technology specifically detects attempts to take advantage of software vulnerabilities. 

### Anti-ransomware detection with automatic rollback

Detect and stop ransomware, including advanced sophisticated forms, and automatically roll back any changes caused by the threat or any data that was affected. 

### Behavior-based detection

Protect clients, their data and operations against modern threats with award-winning protection to detect typical patterns of malicious behavior and prevent threats from executing. 

### URL filtering

Help your clients achieve compliance and increase productivity by preventing attacks from malicious websites. Acronis URL filtering lets you control website access through an HTTP / HTTPS interceptor, manage exceptions for URLs, and perform payload analysis. 

### Unprotected endpoint discovery

Ensure no gaps in client defenses by streamlining the discovery of unprotected endpoints and enabling remote agent installation and service provisioning. 

### Vulnerability assessments

Monitor endpoints for open vulnerabilities and provide a prioritized view based on vulnerability criticality enabling you to streamline security configuration management on top of attack detection and response. 

### #CyberFit Score to evaluate the security posture of endpoints

Quickly and easily asses the security posture of endpoints and leverage our guided recommendations to secure customer endpoints. Unlock a unified view of all endpoints along with their #CyberFit Score to streamline security configuration management. 

### Data classification (with DLP)

Increase your visibility over affected data when investigating attacks by classifying outgoing data from customer endpoints to detect sensitive data exfiltration and stop it with greater efficiency. 

### File- and system-level backup

Ensure not only endpoints are protected, but also the data residing on them. Leverage best-of-breed pre-integrated backup capabilities, enabling unmatched levels of data protection and business continuity. 

### Device and port control

Strengthen data security and prevent leakage of sensitive information via locally connected devices and ports with controls over user access to such local channels — and data operations related to them — even for virtualized sessions. 

### Automated, tunable allowlisting based on profiling

You can enable monitoring and profiling of clients’ applications to create automatic allowlists of the most used applications, including custom apps, to save time and avoid resource-draining false positives. You can also manually add or remove apps from the allowlists. 

### Augmenting Microsoft Defender AV

Acronis EDR enhances Microsoft Defender with advanced, AI-guided analysis, detection, and response, and recovery. MSPs gain centralized visibility, advanced protection, and built-in resilience without replacing Defender— to scale profitably.

### Potentially unwanted applications (PUA) protection

Protect against potentially unwanted applications (PUAs) that can degrade system performance, display intrusive ads or track user activity for commercial purposes. When detected, PUAs are quarantined or blocked based on policy settings and relevant details are integrated into EDR incidents for further analysis.

| Features | Acronis Cyber Platform | EDR | XDR |
| --- | --- | --- | --- |
| Behavior-based detection | ✅ | ✅ | ✅ |
| Anti-ransomware protection with automatic rollback | ✅ | ✅ | ✅ |
| Vulnerability assessments | ✅ | ✅ | ✅ |
| Device control | ✅ | ✅ | ✅ |
| File- and system-level backup | ✅ | ✅ | ✅ |
| Inventory collection (with Acronis RMM) | ✅ | ✅ | ✅ |
| Patch management (with Acronis RMM) | ✅ | ✅ | ✅ |
| #CyberFit Score (security posture evaluation) | ✅ | ✅ | ✅ |
| Remote connection (with Acronis RMM) | ✅ | ✅ | ✅ |
| Remediation including full reimaging | ✅ | ✅ | ✅ |
| Business continuity (with Disaster Recovery) | ✅ | ✅ | ✅ |
| GenAI Protection: Usage monitoring | ❌ | ✅ | ✅ |
| Augmenting Microsoft Defender AV | ❌ | ✅ | ✅ |
| URL filtering | ❌ | ✅ | ✅ |
| Exploit prevention | ❌ | ✅ | ✅ |
| Real-time threat intelligence feed | ❌ | ✅ | ✅ |
| Threat hunting – Early access | ❌ | ✅ | ✅ |
| Automated, tunable allowlisting based on profiling | ❌ | ✅ | ✅ |
| Forensic data collection | ❌ | ✅ | ✅ |
| Event monitoring | ❌ | ✅ | ✅ |
| Automated event correlation | ❌ | ✅ | ✅ |
| GenAI assistant (Acronis Copilot – Early Access) | ❌ | ✅ | ✅ |
| Prioritization of suspicious activities | ❌ | ✅ | ✅ |
| AI-generated incident summaries | ❌ | ✅ | ✅ |
| Automated MITRE ATT&CK® attack chain visualization and interpretation | ❌ | ✅ | ✅ |
| Single-click response to incidents | ❌ | ✅ | ❌ |
| Full threat containment including endpoint quarantine and isolation | ❌ | ✅ | ✅ |
| Automated response playbooks | ❌ | ✅ | ✅ |
| Intelligent search for IoCs including emerging threats | ❌ | ✅ | ✅ |
| Attack-specific rollback | ❌ | ✅ | ✅ |
| Integration with Email Security (email telemetry) | ❌ | ❌ | ✅ |
| Integration with Entra ID (identity telemetry) | ❌ | ❌ | ✅ |
| Integration with Collaboration Security (Microsoft 365 apps telemetry) | ❌ | ❌ | ✅ |
| Delete malicious email attachment or URLs | ❌ | ❌ | ✅ |
| Search for malicious attachments across mailboxes | ❌ | ❌ | ✅ |
| Block malicious email address | ❌ | ❌ | ✅ |
| Terminate all user sessions | ❌ | ❌ | ✅ |
| Force user account password reset on next login | ❌ | ❌ | ✅ |
| Suspend user account | ❌ | ❌ | ✅ |
| MDR service | ❌ | ✅ | ✅ |
| Public API for EDR | ❌ | ✅ | ✅ |

### EDR

## Endpoint Detection and Response (EDR)

In the face of increasing attack sophistication, volume and pace — driven by AI — organizations require a complete security framework to identify, protect, detect, respond and recover.

[Learn more](https://www.acronis.com/en/products/cloud/cyber-protect/security-edr/)

Unique

Single-click response to attacks for unmatched business continuity

Prevail where point solutions fail — leverage the full power of integration among cybersecurity, data protection and endpoint security configuration management via a single-click response to incidents:

*   **Remediate** by isolating endpoints and quarantining threats
*   **Investigate further** using remote connections and forensic backups
*   **Prevent future attacks** closing open vulnerabilities
*   **Ensure business continuity** with integrated backup and recovery

![Image 14: Acronis](https://staticfiles.acronis.com/images/content/3b377ade5c59167f8ccf9ec4e723c807.png)

Attack-specific rollbacks

Quickly and easily roll back attack damage, including affected files, data and configurations — streamlining remediation without depending on the vulnerable Microsoft Volume Shadow Copy Service that most solutions leverage.

![Image 15: Acronis](https://staticfiles.acronis.com/images/content/3a3ccf904f387d992827645c5e9c1055.png)

Unique

Automated interpretation of incidents mapped to MITRE ATT&CK®

Streamline response and increase reactiveness to threats, leveraging AI-based interpretations of attacks mapped to MITRE ATT&CK® to understand in minutes:

*   How the attacker got in
*   How they hid their tracks
*   What harm the attack caused and how it caused it
*   How the attack spread

![Image 16: Acronis](https://staticfiles.acronis.com/images/content/61a2deced87f38619f905a85becadaf6.png)

### AI-generated incident summaries

Streamline incident analysis and response times even further by benefiting from AI-generated summaries that provide a brief overview of each incident.

### GenAI Protection: Usage monitoring

Monitor and report on the usage of Generative AI tools across browsers at a glance with easy-to-interpret widgets. Additionally, control the access to GenAI tools via URL blocklists.

### Prioritization of incidents

Focus on what matters and increase your responsiveness to attacks by leveraging automatic incident alerts that are prioritized based on criticality, so your team can focus on remediating instead of hunting.

### Threat containment and quarantining

Remediate attacks by stopping malicious processes and quarantining analyzed threats — blocking them from execution as part of unified, single-click response capabilities.

### Endpoint isolation

Stop attacks from spreading and affecting more endpoints – you can isolate affected points from the network to prevent lateral movement.

### Recovery, including full reimaging

Ensure clients’ businesses always remains up and running and that they can quickly recover data and operability after attacks. With best-of-breed backup and recovery capabilities integrated in our single-click response, you can recover specifc files or reimage the whole endpoint.

### Disaster recovery failover (with Disaster Recovery)

Ensure an unmatched level of business continuity with integrated disaster recovery. Automatically switch to a backup, off-site environment in case of attacks that disrupt customers’ business continuity.

### Remote endpoint connection (with Management)

Investigate incidents further with a secure remote connection to affected endpoints for troubleshooting and additional analysis purposes.

Unique

### Forensics backup

Collect evidence for further investigation, reporting, compliance and legal purposes by gathering forensic information — like memory dumps and process information — and storing it in temper-protected backups.

### Patch management (with Management)

As part of the single-click response to attacks, you can close security gaps to prevent future incident reoccurrence with our integrated patch management for 250+ applications.

### Event monitoring and automated correlations

The solution monitors events on an endpoint level and automatically correlates them in attack chain graphs per incident.

Unique

### Intelligent search for IoCs with focus on emerging threats

Focus on what matters, like indicators-of-compromise (IoC)-related emerging threats from our real-time threat intelligence feeds and automatically search IoCs across all endpoints — instead of scanning hundreds of lines of logs.

Unique

### Anti-malware protection for backups

Prevent restoring infected files from backups with built-in malware scanning, including for encrypted backups. By scanning full disk backups in a centralized location, Acronis Cyber Platform helps find malware – ensuring users are restoring a backup that is clean and malware-free.

Unique

### Safe recovery

Prevent dangerous infections from reoccurring with Acronis’ unique safe recovery technology. During the recovery process, the integrated solution scans the backup for malware, installs the latest security patches, and updates its antivirus databases.

### Remote device wipe

Prevent business-critical data from getting into the wrong hands by remotely wiping compromised or missing Windows devices. You can protect data from being deleted by disgruntled employees or accessed from lost or stolen devices.

### Public API for EDR

MSSPs and MSPs specializing in security can now more easily integrate Acronis EDR into their MDR practice: within technologies such as SOARs and SIEMs – specifically for incident enrichment, management (including response actions), workflow automation, and reporting. 

### Augmenting Microsoft Defender AV

Acronis EDR enhances Microsoft Defender with advanced, AI-guided analysis, detection, and response, and recovery. MSPs gain centralized visibility, advanced protection, and built-in resilience without replacing Defender— to scale profitably.

### Potentially unwanted applications (PUA) protection

Protect against potentially unwanted applications (PUAs) that can degrade system performance, display intrusive ads or track user activity for commercial purposes. When detected, PUAs are quarantined or blocked based on policy settings and relevant details are integrated into EDR incidents for further analysis.

| Features | Acronis Cyber Platform | EDR | XDR |
| --- | --- | --- | --- |
| Behavior-based detection | ✅ | ✅ | ✅ |
| Anti-ransomware protection with automatic rollback | ✅ | ✅ | ✅ |
| Vulnerability assessments | ✅ | ✅ | ✅ |
| Device control | ✅ | ✅ | ✅ |
| File- and system-level backup | ✅ | ✅ | ✅ |
| Inventory collection (with Acronis RMM) | ✅ | ✅ | ✅ |
| Patch management (with Acronis RMM) | ✅ | ✅ | ✅ |
| #CyberFit Score (security posture evaluation) | ✅ | ✅ | ✅ |
| Remote connection (with Acronis RMM) | ✅ | ✅ | ✅ |
| Remediation including full reimaging | ✅ | ✅ | ✅ |
| Business continuity (with Disaster Recovery) | ✅ | ✅ | ✅ |
| GenAI Protection: Usage monitoring | ❌ | ✅ | ✅ |
| Augmenting Microsoft Defender AV | ❌ | ✅ | ✅ |
| URL filtering | ❌ | ✅ | ✅ |
| Exploit prevention | ❌ | ✅ | ✅ |
| Real-time threat intelligence feed | ❌ | ✅ | ✅ |
| Threat hunting – Early access | ❌ | ✅ | ✅ |
| Automated, tunable allowlisting based on profiling | ❌ | ✅ | ✅ |
| Forensic data collection | ❌ | ✅ | ✅ |
| Event monitoring | ❌ | ✅ | ✅ |
| Automated event correlation | ❌ | ✅ | ✅ |
| GenAI assistant (Acronis Copilot – Early Access) | ❌ | ✅ | ✅ |
| Prioritization of suspicious activities | ❌ | ✅ | ✅ |
| AI-generated incident summaries | ❌ | ✅ | ✅ |
| Automated MITRE ATT&CK® attack chain visualization and interpretation | ❌ | ✅ | ✅ |
| Single-click response to incidents | ❌ | ✅ | ❌ |
| Full threat containment including endpoint quarantine and isolation | ❌ | ✅ | ✅ |
| Automated response playbooks | ❌ | ✅ | ✅ |
| Intelligent search for IoCs including emerging threats | ❌ | ✅ | ✅ |
| Attack-specific rollback | ❌ | ✅ | ✅ |
| Integration with Email Security (email telemetry) | ❌ | ❌ | ✅ |
| Integration with Entra ID (identity telemetry) | ❌ | ❌ | ✅ |
| Integration with Collaboration Security (Microsoft 365 apps telemetry) | ❌ | ❌ | ✅ |
| Delete malicious email attachment or URLs | ❌ | ❌ | ✅ |
| Search for malicious attachments across mailboxes | ❌ | ❌ | ✅ |
| Block malicious email address | ❌ | ❌ | ✅ |
| Terminate all user sessions | ❌ | ❌ | ✅ |
| Force user account password reset on next login | ❌ | ❌ | ✅ |
| Suspend user account | ❌ | ❌ | ✅ |
| MDR service | ❌ | ✅ | ✅ |
| Public API for EDR | ❌ | ✅ | ✅ |

### MDR

## Managed Detection & Response (MDR)

Optimize resource allocation from a highly extensible platform designed to scale, add compelling services, and grow revenues from new and existing customer opportunities.

[Learn more](https://www.acronis.com/en/products/cloud/cyber-protect/managed-detection-and-response/)

Event triage, enrichment and prioritization, with real-time threat alerting

The MDR team correlates and prioritizes security alerts with common threats, enriching detections with threat intelligence, analytics and security orchestration, to help determine event impact. Detected threats are escalated to MSPs as alerts in the platform.

![Image 17: Acronis](https://staticfiles.acronis.com/images/content/ce7b33ef86ff4d65097f4b91d0c73d87.png)

### MDR onboarding

Dedicated training via Acronis Academy and assistance in case of need on MDR onboarding and deployment by Acronis reps, marketing and sales support.

### Rapid threat isolation by SOC team

Rapidly determine root cause and extent of a compromise to contain detected threats with expedited isolation of endpoints to limit spread.

### 24/7/365 monitoring to identify threats

The Acronis MDR team monitors security alerts and notifications from managed endpoints to ensure risks are detected and remediated 24/7/365.

### Guidance on how to mitigate, stop and prevent security incidents

Further limit your attack surface and reduce risks, receiving guidance by the MDR team on how to mitigate, stop or prevent security incidents based on data, intelligence and advisories.

### Outsourced recovery from backups

Based on the initial agreement with each MSP partner, Acronis MDR can enable you to deliver unmatched business continuity by fully outsourcing recovery and attack-rollback as part of incident response.

### 24/7 threat remediation by MDR team

Once initial analysis and isolation of the incident is done, the MDR team will perform pre-approved workflows (as part of response playbooks) to quarantine and fully remediate the threat. The MDR team maintains a line of communication with the customer until the threat has been remediated, providing timely updates as new information arises.

### Detailed multichannel security escalations

Get increased visibility on potential risks with 24/7 rapid incident escalations through various channels including creating a security incident in the platform, email notifications and phone calls all via the contact details provided by the MSP.

### Recommendations for additional actions (e.g., incident response service)

Where response actions are outside the scope of the Acronis MDR tooling or agreement, our MDR experts will provide recommendations on areas to focus. This may include recommendations for additional services such as incident response.

### Endpoint risk profile assessments

Acronis MDR team monitors various risks and periodically analyzes affected endpoints (workloads) to determine the risk profile of each one including attack frequency, patterns and security gaps and suggests ways to improve overall security posture.

### RMM

## Acronis RMM

Achieve peak MSP performance with a natively integrated, secure, AI-powered remote monitoring and management solution. Enhance client satisfaction by delivering superior IT administration and monitoring services while improving security posture for both endpoints and Microsoft 365. Boost technician performance with seamless automation of IT management.

[Learn more](https://www.acronis.com/en/products/cloud/cyber-protect/rmm-solution/)

Automated patch management

Boost technician productivity and client security via vulnerability assessments and patch installation covering Microsoft and 300+ third-party applications. Automated patch testing, approvals and customizable patching settings enable you to prioritize high-risk vulnerabilities, reduce risk exposure and ensure compliance and protection of sensitive client information.

![Image 18: Acronis](https://staticfiles.acronis.com/images/content/a4932967b767374d384b7b9b89c73995.png)

### Fail-safe patching

A faulty system patch can render a system unusable. To enhance reliability and reduce downtime, an image backup is automatically created before the latest patches are implemented, enabling an easy restore and rollback to a working state if issues arise.

### Vulnerability assessments for third-party Windows applications

In addition to vulnerability assessments for Microsoft, Apple and Linux products, you can scan client machines for vulnerabilities in over 300 third-party Windows applications.

### AI-based patch stability scoring

Reduce patching risks and protect uptime with AI-generated risk scores based on real-world incident data. Assess patch stability before deployment, flag unstable updates for delay or testing and detect emerging issues through open-source intelligence.

System and hardware monitoring

Monitor 24 system and hardware performance metrics for Windows and macOS, including anti-malware monitoring and firewall status, as well as custom metrics.

![Image 19: Acronis](https://staticfiles.acronis.com/images/content/8ab3bc5b837f4f3207433b9c0d72fa1e.png)

### ML-based anomaly detection

Enable preemptive IT management with anomaly-based system and hardware monitoring that predicts issues before they occur and cause damage.

### Auto-response actions

Accelerate problem resolution with automatic responses upon alerts: run scripts, restart services and execute response actions.

### Smart alerting

Reduce alert load on technicians with more accurate issue detection, using ML-based threshold fine-tuning and precise alerting rules.

AI-assisted scripting

Automate routine IT tasks across Windows and macOS platforms including a comprehensive toolkit with prebuilt scripts, extensive customization options, AI-powered script generation and scalable script execution plans. MSPs can efficiently manage and execute scripts for a wide range of clients and endpoints. Its self-defense mechanism, powered by the Acronis anti-malware engine, protects script execution components from malware code injection or interception.

![Image 20: Acronis](https://staticfiles.acronis.com/images/content/a7ca406148e9f5616c95c3c1260d8fdd.png)

DeployPilot™ for AI-enhanced software deployment

DeployPilot centralizes and automates software deployment across all client environments, enabling MSPs and IT admins to manage rollouts remotely and at scale. It includes Copilot for AI-assisted setup, generating install commands, return codes and metadata in one click — reducing setup errors by up to 90%. To address security risks, DeployPilot also performs automatic anti-malware scans and digital signature checks on all packages.

![Image 21: Acronis](https://staticfiles.acronis.com/images/content/ce93715cedbba5763aa72713d2066473.png)

Microsoft 365 Security Posture Management 

Acronis Security Posture Management for Microsoft 365 enables MSPs of any cybersecurity expertise level to offer robust protection to multiple clients at the Microsoft 365 tenant level from a single console. It allows enables uncovering more security risks and enhances MSP technician efficiency by making complex tasks manageable for nonsenior technicians. 

![Image 22: Acronis](https://staticfiles.acronis.com/images/content/1aa9374fd075bb60b352b6c74ef12070.png)

AI-powered remote desktop and assistance

Enhance remote support with advanced features, including Acronis’ secure NEAR protocol, Quick Assist for agentless connections, session recordings, file transfer capabilities and Acronis AI for in-session recommendations and session summaries. This helps technicians resolve issues faster, automatically document the work performed and maintain centralized session visibility for compliance and oversight.

![Image 23: Acronis](https://staticfiles.acronis.com/images/content/2ab9a8e92cca927b0a3ca35476ae9c5f.png)

### Remote command line

Run commands securely in the background on Windows and macOS endpoints. Use Acronis AI to generate remediation commands from supported alerts or natural-language requests.

### Chats between technicians and remote users

Enhance remote support and issue resolution by communicating with client users via chat directly through the Cyber Protect console. Conversations can be initiated from both sides, enabling users to reach out for assistance while technicians can respond in a unified queue or transfer chats to other technicians for expertise-driven resolutions. Available for Windows and macOS devices.

### Quick remote actions

Perform remote actions like restarting the system, putting the device to sleep or emptying the recycle bin directly from the Cyber Protect console.

### Software inventory

Keep a comprehensive view of your software landscape with a comprehensive inventory tool, with both automatic or on-demand scans, that lets you discover, browse, filter and report on installed software efficiently, ensuring full visibility and control over software assets.

### Geolocation tracking for devices

Track IT assets like laptops to improve control over distributed and remote teams. Ensure devices remain within authorized locations to meet internal and regulatory requirements. In case of theft, geolocation tracking helps locate stolen devices, minimizing business downtime. Optimize resource allocation by assigning tasks based on field technicians' real-time location. Supports Windows, macOS and Linux devices.

### Drive health monitor

Avoid unpredicted data loss and proactively improve uptime by monitoring disk drive health. Using machine learning technology, the system can predict disk issues and alert you to take the precautionary measures.

### PSA

## Acronis PSA

Simplify success with an easy-to-deploy, adopt and use PSA tailored for modern recurring revenue and cloud MSP business models.

[Learn more](https://www.acronis.com/en/products/cloud/cyber-protect/psa-solution/)

Billing and invoicing

Automate usage-based billing for Acronis and tier 1 Microsoft CSP services in just a few clicks. Consolidate all service charges, including software usage, staff hours and hardware sales, into a single invoice. Enable online payments through PayPal and Stripe and send invoices directly from the Acronis console or through accounting tools like FreshBooks, QuickBooks, Sage, Xero and SnelStart.

![Image 24: Billing and invoicing](https://staticfiles.acronis.com/images/content/d0b1ad88546def80b36224c3065c475e.png)

Service desk

Manage tickets from creation to resolution and aggregate tickets from multiple sources, including emails, the public ticket portal and alerts. Schedule recurring tickets at set intervals to ensure timely completion of repetitive tasks. Automatically log time spent on tickets to ensure accurate billing and track technician performance. Monitor SLA compliance to meet client expectations and improve service quality by sending surveys and collecting customer feedback.

![Image 25: Service desk](https://staticfiles.acronis.com/images/content/bbff7a7150115b9a4fcb4b5d687afb05.png)

### Time tracking

Track work time effectively and ensure time registrations align with SLAs. Increase revenues with precise time tracking and billing while improving transparency with detailed time statistics for each client and technician. Analyze technician performance to identify areas for improvement and optimize resource allocation. Use a mobile app to register work time conveniently.

### Project management

Plan and execute projects by defining and scheduling clear phases and steps. Track time spent on each phase to manage resource capacity and ensure accurate billing. Visualize progress with Gantt charts and tables for better oversight. Enable flexible billing options, including upfront payments, per-step billing or milestone-based invoicing, and gain financial insights by tracking project expenses and profits.

### Quote management

Create, send and manage sales quotes efficiently. Process accepted or rejected quotes and automatically convert them into contract items to streamline workflows and reduce manual effort.

### Contract management

Create and manage contracts for all clients. Automate invoice generation based on billing terms and agreements specified in contracts, simplifying financial operations and ensuring accuracy.

### Stock inventory

Add and manage stock inventory records with details such as quantity, prices, serial numbers and warranty information. Sell in-stock inventory through quoting and automate invoicing. Analyze sales and stock availability and ensure timely stock replenishment.

### RMM integration

Integrate seamlessly with Acronis RMM as a built-in solution or use prebuilt integrations with third-party RMMs, including Datto RMM, Kaseya VSA, N-able N-central, N-able RMM and NinjaOne.

### Financial KPI reporting

Access reports with financial KPIs to analyze costs, revenues and profit margins. Make data-driven decisions on pricing, service offerings and cost management. Identify the most and least profitable clients to optimize business strategies.

### Service desk KPI reporting

Evaluate service desk performance with metrics like SLA compliance, Net Promoter Score® (NPS) and technician utilization rates. Use forecast data to predict trends, allocate resources effectively and support business growth.

### Cyber Frame

## Acronis Cyber Frame

A hyperconverged infrastructure and IaaS solution for service providers. It enables provisioning of virtual machines, networking and storage through Acronis Cyber Platform, with integrated cyber protection, management, automation, multitenancy and service-provider operations.

[Learn more](https://www.acronis.com/en/products/cloud/cyber-protect/cyber-frame/)

Infrastructure provisioning

Provision and manage virtual machines, virtual networks, block storage, floating IPs and site-to-site VPN connectivity from a centralized console. Configure compute, memory and storage resources for Windows and Linux workloads, and allocate infrastructure capacity across customer tenants.

![Image 26: Cyber Frame](https://staticfiles.acronis.com/images/content/fd85d263e9987865cb4c3247c9c5ea7e.png)

### Deployment models

Choose between Acronis-hosted Cyber Frame Cloud and service-provider-hosted Cyber Frame Local. Cyber Frame Cloud enables partners to offer IaaS without owning or operating hardware, while Cyber Frame Local runs on service provider-owned x86 infrastructure for direct control over hardware, data location and capacity planning.

### Multitenancy and self-service

Run multiple customers on shared infrastructure with logical tenant isolation, role-based access control, resource quotas and usage visibility. Customers can provision approved infrastructure resources through self-service workflows while the service provider retains governance and administrative control.

### Open platform foundation

Cyber Frame is built on an optimized OpenStack control plane, KVM hypervisor, software-defined storage and software-defined networking. Service providers can use OpenStack-compatible APIs and automation tools such as Terraform to integrate Cyber Frame with external provisioning, DevOps or operations workflows.

### Integrated cyber protection

Every Cyber Frame VM is provisioned with the Acronis agent preinstalled. To enable services such as backup, disaster recovery, anti-malware, anti-ransomware, EDR / XDR and RMM, partners only need to apply the relevant protection plan in Acronis Cyber Platform.

### Service provider operations

Connect infrastructure delivery with billing, reporting, PSA and operational workflows. Cyber Frame supports usage-based service packaging, white-label delivery and integration with Acronis and third-party service provider tools.

### AI assistant for operational guidance

Use the Acronis AI assistant for contextual guidance during setup, configuration and daily operations. The assistant helps administrators find relevant information and complete common infrastructure management tasks directly within the Acronis environment.

## Disaster Recovery

Get clients back to business in minutes by instantly spinning up systems in the Acronis Cloud and restoring them anywhere, ensuring immediate data availability. Make disaster recovery painless and increase efficiency with orchestration, runbooks, and automatic failover.

[Learn more](https://www.acronis.com/en/products/cloud/cyber-protect/disaster-recovery/)

Cold and Warm Disaster Recovery to Microsoft Azure

Deliver cost-efficient or near-zero downtime disaster recovery using Microsoft Azure as a DR site. Control everything from the Acronis Cyber Protect Console with no need for extra tools or training.

*   **Cold DR**: Store backups in Azure and pay for compute only during a disaster.
*   **Warm DR**_(Coming soon)_: Use Azure warm storage for fast failover with minimal RTO.

![Image 27: Acronis](https://staticfiles.acronis.com/images/content/5374c1e8e4c3e598db7b40802ab7af25.png)

Disaster recovery orchestration

Simplify disaster recovery and increase operational efficiency by automating failovers and orchestrating disaster recovery procedures using runbooks – a set of instructions defining how to spin up the client’s production environment in the cloud.

![Image 28: Acronis](https://staticfiles.acronis.com/images/content/dbb53b28e3b9e0187080a0a07509cc83.png)

### Disaster recovery for physical and virtual workloads

Minimize downtime by enabling easy, scalable and efficient disaster recovery of all popular workloads including Windows and Linux physical servers and VMs, major hypervisors, and Microsoft apps.

### Production failover

Minimize downtime by enabling quick and easy automated failover of the client’s production environment to an off-site server running in Acronis Disaster Recovery Storage or to hot storage in the Acronis Cloud.

### Site-to-site VPN connection

Enable a secure VPN connection between the client’s local site and the cloud to facilitate partial failover of tightly dependent servers on the local site. When one of the servers is recreated, it continues to communicate, ensuring minimal downtime.

### Near-instant RPOs and RTOs

Achieve both RPOs and RTOs of less than 15 minutes. The Acronis RunVM engine enables best-in-class production and test failover speed, while flexible backup frequency policies lead to tighter RPOs.

### Execution monitoring

Gain visibility into disaster recovery orchestration with a detailed runbook-execution, real-time view, and execution history.

### Point-in-time recovery

Prevent data loss and avoid data corruption with granular control over backup and recovery capabilities. Restore systems and data to any recoverable point in the past, instead of to the latest one.

### IPsec multisite VPN support

Strengthen security with IPSec multisite VPN support that integrates secure protocols and algorithms. You can easily support clients with multiple sites that are hosting critical workloads with higher requirements for security, compliance, and bandwidth.

### Custom DNS configuration

Create custom DNS configurations for disaster recovery cloud services in the Acronis Cloud. This enables you to easily adjust DNS settings for your clients, making it even easier for you to support them.

## Email Security

Block any email-borne threat, including spam, phishing, business email compromise (BEC), malware, advanced persistent threats (APTs), and zero-days before it reaches end-users.

[Learn more](https://www.acronis.com/en/products/cloud/cyber-protect/email-security/)

UNIQUE

Next-generation dynamic detection

Stop zero-days and APTs with Perception Point’s unique technology - CPU-level analysis that detects and blocks advanced attacks such as APTs and zero-days at the exploit stage by identifying deviations from normal execution flow during runtime.

![Image 29: Acronis](https://staticfiles.acronis.com/images/content/e1ea51b29edb89ebb1082b709ee72d7b.png)

UNIQUE

X-ray insights

Leverage a holistic view of the threat landscape across organizations with forensics data for each client and email, proactive insights on threats a targeting clients and most risky attack patterns, and analysis of any file or URL on which the service delivery team needs forensics.

![Image 30: Acronis](https://staticfiles.acronis.com/images/content/6f790a99ecf658d06d5bef539fc1e8a7.png)

### Spam filter

Block malicious communication with anti-spam and reputation-based filters, leveraging the combined data of several market-leading technologies.

UNIQUE

### Anti-evasion

Detect malicious hidden content by recursively unpacking the content into smaller units (files and URLs) which are then dynamically checked by multiple engines in under 30 seconds, compared to 20+ minutes for legacy, sandboxing solutions.

### Threat intelligence

Stay ahead of emerging threats with the combined threat intelligence of six market-leading sources and Perception Point’s unique engine that scans URLs and files in the wild.

### Static signature-based analysis

Identify known threats with best-of-breed signature-based antivirus engines enhanced with a unique tool by Perception Point to identify highly complex signatures.

UNIQUE

### Anti-phishing engines

Detect malicious URLs based on four leading URL reputation engines in combination with Perception Point’s advanced image recognition technology to validate the legitimacy of URLs.

### Anti-spoofing

Prevent payload-less attacks such as spoofing, look-alike domain, and display name deception with unmatched precision through machine-learning algorithms with IP reputation, SPF, DKIM, and DMARC record checks.

### Incident response service

Gain direct access to cyber analysts that act as an extension of your service delivery team, monitor all customer traffic, and analyze malicious intent with ongoing reporting and support, including handling false positives, remediating, and releasing when required.

### Account Takeover (ATO)

Intercept account takeover attempts — Be prepared to prevent, detect and rapidly respond. Your clients are protected against ATO more than ever before by preventing attackers from phishing credentials; monitoring email accounts for anomalies and suggesting a compromise; and ensuring fast remediation and account containment by the incident response team, in the event of account takeover.

### Logging and auditing

Enhance clients’ compliance and enable auditing and investigations with visibility into all actions performed by admin users and the incident response team, with a comprehensive audit log.

### 24/7 chat support with the email security team

Receive a swifter response on email security issues — rapidly reach the Email Security incident response team, and chat with support directly in the management console.

### Reporting

Demonstrate your value to customers with easily accessible and manageable datasets along with weekly, monthly, and ad-hoc reports from the Incident Response team.

### Ad-hoc email analysis for end-users

Enable end-users to directly consult with Perception Point’s email security experts for suspicious emails before taking reckless action.

### End-user contextual help

Flag emails with customizable banners based on policies and rules to provide end-users with additional contextual information to increase their security awareness.

### Automatic email routing for Microsoft 365

Simplify the initial configuration process and speed up service provisioning by running a ready-to-use script to automatically set up routing between Microsoft 365 and Acronis.

## Email Archiving for Microsoft 365

Designed specifically for MSPs, Acronis Email Archiving for Microsoft 365 facilitates client regulatory compliance, deploys effortlessly in seconds and unlocks a new revenue stream.

[Learn more](https://www.acronis.com/en/solutions/email-archiving/)

7-in-1 protection for Microsoft 365

Email Archiving for Microsoft 365 is part of Acronis Protected 365, which provides the most complete protection for Microsoft 365 — including natively integrated data protection, cybersecurity, posture management and more — all from a single platform. 

[Learn more](https://www.acronis.com/en/products/cloud/cyber-protect/ultimate-365/)

![Image 31](https://staticfiles.acronis.com/images/content/99fca22207088f7758999d398aa168d9.png)

0:42

[Video (0:42)](https://www.youtube.com/watch?v=R0F0BrtsExE)

### Real-time, continuous archiving

Automatically archives every inbound and outbound email in real time across all Microsoft 365 mailboxes. New mailboxes are auto-detected and protected based on predefined policies — ensuring that nothing is missed.

### Mailbox import for historical coverage

Import and archive existing emails from Microsoft 365 mailboxes to ensure complete historical coverage. This enables businesses to preserve legacy data and maintain a continuous, compliant email record.

### Customizable retention policies

Set flexible retention rules by user, group or organization to retain or delete emails based on time frames, policy requirements or legal mandates. Automatically apply policies to existing and new data.

### Immutable storage

Archived emails are stored immutably to protect against tampering, accidental deletion or malicious activity. Emails marked for deletion remain securely stored until the configured retention period expires.

### Legal hold

Override standard retention policies to preserve selected emails indefinitely in response to legal or regulatory events. Ensures data is not altered or deleted until the hold is lifted.

### Audit logging

Detailed audit trails track all user activity in the archive, including access, searches, restores, and deletions. Logs are exportable (e.g., in JSON format) for compliance reviews and forensic investigations.

### Advanced search and e-discovery

Full-text and metadata-based search across all archived mailboxes enables fast, accurate discovery of email content. Create and save complex queries and filters to meet legal and audit requests with ease.

### Email categorization and preview

Archived messages are organized by mailbox and categories (Inbox / Sent). Preview emails directly within the archive before choosing to restore or export, reducing unnecessary recoveries.

### Fast and flexible recovery

Recover emails to the original mailbox, a different mailbox, or even across Microsoft 365 tenants. Download individual attachments or send emails directly from the archive without full recovery.

### Web-based, multitenant console

Manage all clients’ archiving policies, access controls, and retention settings from a centralized, multitenant portal — streamlining operations for MSPs and IT administrators.

### Highly secure

Ensure the security of email data thanks to AES-256 encryption with a password specified during setup. Items can only be deleted via retention policy.

### Global data center network

Data is stored in any of 50+ Acronis-hosted, Microsoft Azure, or Google Cloud data centers — helping you meet data sovereignty and residency requirements across geographies.

### Seamless integration with Acronis Cyber Platform

Email archiving is fully integrated into the Acronis Cyber Platform platform, which unites backup and next-generation, AI-based anti-malware, antivirus and endpoint protection management in one solution.

### Purpose built for MSPs

Acronis Email Archiving was developed with service providers in mind. It creates new revenue streams without requiring upfront investment or added infrastructure. Its low-touch, scalable design reduces management overhead and integrates fully with existing services, empowering you to consolidate vendors, reduce costs and deliver high-value protection your clients can trust.

## Direct Backup to Public Cloud

No additional gateway or complex setup is required, just connect your storage endpoint, apply your protection plan, and start backuping up.

[Learn more](https://www.acronis.com/en/products/cloud/cyber-protect/direct-cloud-backup/)

Back up to Amazon S3 or any S3-compatible storage

Acronis supports direct backup to Amazon S3 and any private or public S3-compatible storage. MSPs can use the storage platform that fits each customer’s needs from hyperscalers to partner-hosted S3 tenants. No gateway is required, and all modern storage controls are supported.

![Image 32: Acronis](https://staticfiles.acronis.com/images/content/0cc710ac32178b267e41f86bbad78506.png)

1:35

[Acronis (1:35)](https://www.youtube.com/watch?v=j8gk17f4yxg)

### Native S3 compatibility

Send backups directly to any S3 endpoint with Amazon S3 API support.

### Object Lock immutability

Protect data from ransomware, insider threats and accidental deletion.

### Encrypted backup streams

AES-256 encryption in transit and at rest

### Full backup feature coverage

Incremental and differential backups, retention policies and granular recovery.

### Meets sovereignty and regulatory needs

Choose local or regional S3 storage to comply with data-residency rules and reduce latency. 

Direct backup to Microsoft Azure Storage

Acronis also provides direct backup to Microsoft Azure Storage, enabling MSPs to protect all workloads and restore them anywhere, including back into Azure, without extra components. Authentication and permission models use Azure-native OAuth flows for a clean, secure setup.

![Image 33: Acronis](https://staticfiles.acronis.com/images/content/5b595af289781fda938625d7dc410136.png)

### No gateway appliances

Backups go directly to Azure Storage accounts.

### Fast recovery

Recover to any location, including bare metal, Azure VMs or on-premises systems. 

### Lower operational effort

Native Azure integration simplifies deployment for MSPs managing many tenants.

### Consistent backup experience

The same policies, encryption and retention settings apply across Azure and S3 storage.

### Ideal for hybrid and multicloud

Azure becomes another fully supported destination inside Acronis’ unified protection platform. 

### DLP

## Data Loss Prevention (DLP)

The only DLP solution designed for MSPs to prevent leakage of sensitive data via peripheral devices and network channels with automatic, client-specific DLP policy creation.

[Learn more](https://www.acronis.com/en/products/cloud/cyber-protect/data-loss-prevention/)

Content- and context-aware DLP controls

Prevent leakage of sensitive data from clients’ organizations. Acronis DLP detects the sender, recipient, channel used and sensitive content for each data transfer to apply policy-based preventive DLP controls.

![Image 34: Acronis](https://staticfiles.acronis.com/images/content/3d5eb5d4baeadea8800f619de351d648.png)

Automatic DLP policy creation (Observation mode)

Simplify service provisioning and initial DLP policy configuration. The solution observes end user behavior to automatically map clients’ business specifics to DLP rules to create client-specific DLP policies.

![Image 35: Acronis](https://staticfiles.acronis.com/images/content/b8bf6af5fd91afd050701c28fcc0d549.png)

Adaptive DLP policy enforcement (Enforcement mode)

Enable automatic enrichment of enforced DLP policies by learning from end users. The adaptive enforcement option unlocks automated, user-assisted extensions of enforced policies with new data flows.

![Image 36: Acronis](https://staticfiles.acronis.com/images/content/70fdf52faa64f5b43999195667779ae5.png)

### Content-aware control over data flows to peripheral devices

Control data transfers to peripheral devices such as printers, removable storage and mapped drives across clients’ organizations and ensure no sensitive data in use can leak through such local channels.

### Network communications control

Control data transfers via network channels such as emails, cloud file sharing services, web browsers and social media. Prevent leakage of sensitive data in motion across clients’ organizations.

### Pre-built data classifiers

Protect clients’ sensitive data out of the box with pre-built data classifiers for personally identifiable information (PII), protected health information (PHI), payment card data (PCI DSS), documents marked as “Confidential.”

### Strict DLP policy enforcement (enforcement mode)

For clients that require more strict controls, you can enforce the DLP policies as they’re defined, also blocking any new data flows not observed during the observation mode period.

### Clipboard control for remote connections

Prevent data leaks at their earliest stage — when data is transferred between the corporate computer and BYOD devices or remote terminals via a redirected clipboard.

### Optical character recognition (OCR)

Prevent leakage of textual data in graphical format, even for offline and remote endpoints. Leverage an agent-resident optical character recognition for 30+ languages without sending images to OCR servers.

### Content inspection and filtering

Protect clients’ sensitive data from leaking by analyzing and filtering the textual and binary content of data transferred via local and network channels, including inspection of nested archives. Benefit from text parsing for 100+ file, 40+ archive, and five-print formats.

### Real-time alerting

Empower policy-based, real-time alerting for relevant DLP events to increase DLP administrators’ visibility and allow them to react to critical security events in a timely manner.

### Policy-based logging

Enable easy auditing and IT investigations by automatically and selectively collecting audit logs for security events for each DLP policy rule. Leverage a cloud-native, secure, always available central log and secure delivery along with configurable log retention settings.

### DLP event viewer

Increase the efficiency of your service technicians with a single-pane-of-glass view across all DLP events with fast search and filtering capabilities.

### Reporting

Demonstrate your service value to clients and ease compliance reporting with information-rich widgets that provide a clear view of actionable data loss prevention statistics that can easily be sent to clients as reports.

### On-screen notification to end users

Increase end users’ data loss prevention awareness and reduce time spent by IT administrators on investigating with interactive on-screen warnings that explain why certain data transfer attempts have been blocked by DLP rules.

### Block override support

Ensure clients’ business continuity by allowing end users to override a data transfer block in case of extraordinary situations by providing a one-time business-related exception.

### Encrypted removable storage support

Better protect clients data by neutralizing the risks of sensitive data leaving your clients workloads via unencrypted removable storage devices (e.g. USBs). Acronis DLP can detect encrypted removable storage devices and allow data transfers only to them.

### Customize DLP rules by file type

Gain more granular control of DLP rules and reduce the risk of sensitive data leakage on client endpoints by customizing the DLP policy with rules that prevent unauthorized transfers of specific sensitive file types.

## Cyber Employee

Cyber Employee is designed to handle inbound interactions across channels 24/7/365, while being provisioned and managed by MSPs through the Acronis platform.

[Learn more](https://www.acronis.com/en/products/cloud/cyber-protect/ai-employee/)

Omnichannel continuity and memory

Keep context for the same person across voice, SMS, email, web chat, and social and support group conversations too.

![Image 37: Acronis](https://staticfiles.acronis.com/images/content/0624526144525ffb8b35cb4be3ffa12e.png)

### Role-level workflow handling

Manage full receptionist-style duties like scheduling changes, message relay, follow-ups, and more.

### Industry-ready workflows

Common patterns for restaurants, HVAC/plumbing, medical, real estate, and professional services.

### 3-tier configuration model

Quick setup, no-code builder, and low-code development for advanced needs.

### 24/7/365 coverage

Digital employees handle customer communications across channels at all hours.

Acronis Cyber Platform

## Modernize your clients' security and backup with integrated cyber protection

[Try now](https://www.acronis.com/en/products/cloud/trial/)

No credit card required

[Get 1:1 demo](https://www.acronis.com/en/products/cloud/demo/)

[+41 52 569 10 98](tel:+41 52 569 10 98)