真实成本
一次勒索软件攻击会花费你多少钱？
拖动滑块以匹配你的基础设施。数字累加得很快。
工作原理
一条命令，全面保护。
1
备份
运行 rdc repo push production --immutable。您的数据被即时捕获并封存。
2
Lock
不可变性在文件系统层生效。不允许任何更改。勒索软件不行，root 用户也不行。
3
恢复
当灾难来临时，您的干净备份已在等待。完整环境在 5 分钟内恢复。
生产环境 运行中
gitlab :443
postgres :5432
mailcow :25
redis :6379
封存
不可变备份 已封存
gitlab read-only
postgres read-only
mailcow read-only
redis read-only
底层技术
为什么勒索软件无法加密这些备份
Rediacc 使用 btrfs 只读快照在文件系统层面运行。一旦快照被封存，内核本身就会阻止修改——不是恶意软件可以绕过的软件锁，而是文件系统级别的不可变性。即使拥有 root 权限，勒索软件也无法加密、修改或删除封存的 btrfs 快照。
为什么勒索软件无法加密这些备份
| 传统备份工具 | Rediacc（btrfs 不可变） |
|---|---|
| 软件级"不可变性"——可通过管理员/root 权限绕过 | 内核强制的只读快照——即使拥有 root 权限也无法修改 |
| 备份文件作为普通文件存储在磁盘上——可见且可被加密 | 快照存在于文件系统层——用户空间恶意软件不可见 |
| 验证 = 仅"备份完成"状态消息 | 自动化每日克隆 + 启动 + 健康检查——实际恢复并验证 |
| 每次备份完整复制：380 GB × 30 天 = 11.4 TB 存储 | CoW 快照：30 个每日备份共享块（总增量约 40 GB） |
差距对比
唯一具备文件系统级不可变性的备份
传统备份工具通过软件锁承诺不可变性。Rediacc 在内核层面强制执行——勒索软件无法触及的地方。
来源(22)
- Sophos, “The Impact of Compromised Backups on Ransomware Outcomes,” March 2024. “94% of organizations hit by ransomware in the past year said that the cybercriminals attempted to compromise their backups during the attack.”
- IBM Security, “Cost of a Data Breach Report 2024,” July 2024. “The global average cost of a data breach reached $4.88 million in 2024, as breaches grow more disruptive and further expand demands on cyber teams.”
- Coveware, “Quarterly Ransomware Report Q2 2022,” July 2022. “In Q2, the average days of downtime was measured at 24 days, a decrease of 8% from Q1 2022.”
- Splunk & Oxford Economics, “The Hidden Costs of Downtime,” June 2024. “Each minute of downtime costs $9,000 or $540,000 per hour.”
- Rubrik Atlas filesystem stores all backup data in proprietary append-only immutable format that cannot be modified or deleted.
- Commvault supports WORM storage lock and compliance lock on disk libraries for immutable backups.
- Druva's SaaS architecture stores backups in an air-gapped, immutable cloud decoupled from the customer's environment.
- Veeam SureBackup automatically verifies backup recoverability by booting VMs in an isolated Virtual Lab environment.
- Veeam Instant VM Recovery mounts backups directly on ESXi/Hyper-V hosts for near-instant VM recovery and testing.
- Rubrik Live Mount instantly mounts backup snapshots as live VMs or file shares for testing and recovery.
- Commvault Live Recovery boots VMs directly from backup via NFS export for instant testing and recovery.
- Druva Instant Restore boots VMware VMs directly from backup cloud in under 5 minutes with live migration.
- Zerto continuous replication with journal-based recovery delivers near-zero RPO and minutes-level RTO for instant recovery.
- Veeam Instant VM Recovery enables sub-5-minute RTO by booting VMs directly from backup files.
- Rubrik Instant Recovery enables sub-5-minute recovery by mounting VMs directly from immutable snapshots.
- Commvault Live Recovery enables sub-5-minute RTO by mounting VMs from backup with background Storage vMotion.
- Druva Instant Restore minimizes downtime with sub-5-minute VM recovery directly from backup cloud storage.
- Zerto's always-on replication with sub-10-second RPOs and minute-level RTOs enables near-instant full-environment recovery.
- Veeam Backup & Replication is deployed on-premises on Windows Server with full customer control over infrastructure.
- Rubrik is deployed as on-premises appliances (r6000 series) with integrated compute, storage, and software.
- Commvault supports fully self-hosted on-premises deployments with CommServe, MediaAgent, and Access Node components.
- Zerto is deployed on-premises with a Zerto Virtual Manager and per-host Virtual Replication Appliances.
探索其他解决方案
不再担心勒索软件
从免费的社区版开始。免费保护最多 10 个工作负载。无需信用卡。
免费开始使用社区版 最多 10 个工作负载永久免费 $ rdc repo push production --to backup-vault