Commvault adds threat scanning and sensitive-data mapping to Microsoft 365 backups

On October 15, 2026, Commvault announced two new capabilities for its Backup & Recovery product for Microsoft 365: Threat Scan and Data Posture 360. The tools are designed to address a specific recovery risk — restoring a backup that already contains malware, which would reintroduce the threat directly into a production environment.

Threat Scan searches backed-up Exchange, OneDrive, SharePoint, and Teams data for malware, ransomware, encryption activity, data anomalies, and other indicators of compromise. Critically, it can also apply current threat intelligence to historical backup copies held in immutable storage, allowing teams to surface threats that were unknown or undetected at the time the backup was originally made. Threat signals are then used to isolate compromised content and identify clean, trusted recovery points. Data Posture 360, formerly called Risk Analysis, maps where sensitive information — including personally identifiable information and intellectual property — sits across a Microsoft 365 environment and highlights exposure risks to help teams prioritize their response.

Both tools are planned for early-access preview in the coming weeks, with general availability targeted for early 2027. They will be sold as independently purchasable paid add-ons to Commvault Backup & Recovery for Microsoft 365. Organizations that rely on Microsoft 365 as a primary collaboration platform may want to evaluate whether their current backup approach includes the ability to verify the integrity of a recovery point before restoring it — a step that matters most when recovery is happening under pressure after a ransomware incident.