Quarterly Product Pulse: July to September 2026 Product Updates

Rahul Deshmukh, VP of Product Marketing

October 09, 2026

Quarterly Product Pulse: July to September 2026 Product Updates

Content

    Big things happened at Druva this quarter—from protecting Microsoft 365 Copilot Chat with AI workload protection to advancing ransomware defense with ML-powered detection, while expanding disaster recovery automation, cloud storage protection, and console personalization.

    Here's everything that shipped from July through September.

    Key Takeaways

    • Microsoft 365 Copilot Chat Protection: Druva introduced backup, restore, and native eDiscovery (Legal Hold) support for AI-generated content across Microsoft 365 Copilot Chat.
    • Ransomware Detection: Rolled out new AI-powered detection for AWS EC2, EBS, VMware, and Azure VMs that scans for ransomware behaviors and confirms encryption impact within backups.
    • Automated Active Directory Forest Recovery: Upgraded AD recovery to a zero-touch, orchestrated workflow to eliminate manual PowerShell scripting and reduce outage downtime.
    • Agentless Azure Data Lake Protection: Added policy-driven backup and recovery for Azure Data Lake Storage (ADLS) Gen2 accounts to protect analytics workloads.
    • Automated Security Lifecycle with SCIM 2.0 Integration: Druva supports SCIM 2.0 integration for automated administrator provisioning and management. Currently in limited availability; contact your Account Manager or Support to enable it.
    • Dark Mode: Dark Mode is now available in the Druva Cloud Platform Console, providing a more comfortable viewing experience and a highly requested interface option.

    AI Workload & Microsoft 365 Protection

    • Data Governance: eDiscovery (Legal Hold) Support for Microsoft 365 Copilot Chat (July 18)
      Alongside Copilot Chat Protection, Druva delivered what it calls the market's first native eDiscovery (Legal Hold) functionality for AI workloads. Once a custodian is placed on legal hold, both historic and incoming Copilot Chat snapshots are automatically preserved — overriding standard pruning, tiering, or expiration policies — and can be exported via WebDAV or the eDiscovery Download Client for platforms like OpenText and Exterro. 🔗 Release Notes - Druva for Microsoft 365 | Legal Hold for Microsoft 365 Copilot Chat Data
    • Restore Power BI Workspaces to a New Workspace (August 8)
      Power BI Protection got more flexible: admins can now restore a backed-up workspace as a brand-new workspace directly from the Druva Cloud Platform console, rather than only restoring in place. 🔗 Release Notes - Microsoft Power Platform

    Cyber Resilience & Identity Protection

    • Strengthen Cyber Resilience with Ransomware Detection (September 17)
      One of the quarter's headline features:  Ransomware Detection for AWS EC2, EBS, VMware, and Azure VM. This new offering provides multi-stage behavioral detection and deep forensic validation to identify both known and zero-day ransomware strains in backup snapshots. By analyzing indicators—such as ransom notes and novel extension changes—and verifying file structures and entropy against clean baselines, Druva provides definitive proof of ransomware, encryption impact, and clean recovery points. l (Stage 1: Potential Activity → Stage 2: Forensic Validation/Encryption Confirmed) built to minimize alert fatigue and false positives. 🔗 Release Notes - Cyber Resiliency | Get Started with Ransomware Detection
    • Minimize Downtime with Fully Automated Active Directory Forest Recovery (August 1)
      Druva upgraded its guided, runbook-based AD forest recovery into a zero-touch, orchestrated workflow. Administrators can now execute end-to-end forest recovery — including isolating domain controllers, restoring system state, metadata cleanup, and FSMO role reassignment — without manually running dozens of PowerShell commands, significantly cutting return-to-operation time during a disaster. Requires the Microsoft Active Directory agent v2.0.0 or later. 🔗 Release Notes - Microsoft Active Directory | Automated Forest Recovery for Active Directory
    • New Entra ID App Enhancements — Reauthorization Required (September 5)
      Product changes to the Druva Entra ID app now require reauthorization. Customers who don't reinstall the app will see Entra ID backup jobs reported as "Successful with errors" — an important action item for Entra ID customers this quarter. 🔗 Release Notes - Microsoft Entra ID

    Enterprise Workload: Cloud-Native

    • Agentless Protection for Azure Data Lake Storage (August 17)
      Druva added agentless backup and recovery for Azure Data Lake Storage (ADLS) Gen2 accounts with hierarchical namespace enabled — covering formats like Delta Lake, Parquet, JSON, and CSV — with automated, policy-driven scheduling (daily, weekly, or custom) to protect analytics data lakes from data loss and ransomware. 🔗 Azure Workloads Release Notes
    • User Interface Enhancements to EC2 and EBS Resources (July 6)
      Druva overhauled the Amazon EC2/EBS console to align with the broader Druva Cloud Platform experience:
      • A new Backup Sets tab for quickly configuring EC2/EBS resources and initiating recovery
      • Integrated Policy Management unifying backup policies across EC2, EBS, RDS, DynamoDB, and Redshift (S3 and EFS retain independent policies)
      • Restore Management consolidated into the Restore Jobs page (the standalone Restore tab was retired)
      • Streamlined Jobs Monitoring views for Airgap Backup, Restore Jobs, and orchestrated snapshots 🔗 AWS Workloads Release Notes
    • Automated Azure VM Restore Readiness Prechecks
      Druva added automated pre-restore validation checks for Azure Virtual Machines to identify target environment mismatches and configuration gaps—such as VNet/Subnet availability, Resource Group locks, NSG consistency, and resource name collisions—before recovery begins, ensuring seamless execution and faster return to operations. 🔗 Restore Azure Virtual Machines | Azure VM Error Codes

    Enterprise Workload: Hybrid Workloads

    • File-Level Restore for Windows NTFS Deduplicated Volume (August)
      Support for FLR on VMware VMs running Windows NTFS volumes with Data Deduplication enabled, allowing direct restoration of individual files without full VM recovery. (New Features | August) 🔗 Enterprise Workloads Release Notes
    • Proxmox VE 9.2 and NFS Support (August)
      Expanded support for Proxmox VE 9.2 and NFS-based storage environments for virtual machine backups. 🔗 Enterprise Workloads Release Notes
    • Protect Nutanix AHV Virtual Machines Configured with vTPM (August)
      Added the ability to back up and restore Nutanix AHV virtual machines equipped with virtual Trusted Platform Module (vTPM), enhancing security and compliance. 🔗 Enterprise Workloads Release Notes
    • Alerts for Oracle RMAN Script Failures (August)
      Introduced a new alerting mechanism to notify administrators of RMAN script failures, reducing troubleshooting time for Oracle PBS. 🔗 Enterprise Workloads Release Notes

    Managed Services & Automation

    Automate Incident Ticketing with ServiceNow Integration (September 3)
    The Managed Service Center (MSC) can now connect directly to ServiceNow PSA to automatically create, update, and close incident tickets based on SIEM alert activity — cutting down manual ticket handling for MSPs managing multiple customer environments. 🔗 Release Notes - Managed Services Center

    Endpoints & Client Updates

    • Standardized Error Codes for Endpoint Backups (July 11)
      A new standardized error classification system surfaces precise error codes directly in the Jobs details view when a device backup fails or completes with errors — with hover-to-view context and prescriptive workarounds to speed up troubleshooting. Rolling out in phases. 🔗 Release Notes - Endpoints
    • inSync Client v8.1.3 for Cloud (July 1) and GovCloud (August 18)
      Updated clients shipped for both commercial cloud and GovCloud environments; the GovCloud release simplifies Windows installation with a dedicated package that removes the need to manually select "inSync GovCloud" during activation. 🔗 Release Notes - Endpoints | GovCloud Release Notes - Endpoints
    • inSync Client v8.1.4 for Windows and macOS (August 12, September 2)
      Infrastructure enhancements landed for Windows, plus a macOS fix addressing a backup failure on Apple M5 Pro/M5 Max devices. 🔗 Release Notes - Endpoints | Release Notes - inSync Client & inSync Web
    • Export Device Mappings to CSV (September 5)
      Admins can now export the full device mappings list from the Endpoints console as a CSV, simplifying auditing, compliance reporting, and centralized inventory tracking. 🔗 Release Notes - Endpoints

    Platform, Reporting & UX

    • Automated Security Lifecycle with SCIM 2.0 Integration
      You can now use SCIM 2.0 (System for Cross-domain Identity Management) protocol to integrate with your Identity Provider (IdP) to automate administrator provisioning and management. This integration ensures that administrator access and permissions automatically sync with your IdP directory changes.
      • This feature is in a limited availability phase. To request and enable this feature, contact your Account Manager or Support.  🔗 Release Notes - Cloud Platform
    • Applying the Principle of Least Privilege: View-Only Role

    Druva has introduced a new Druva Cloud Platform View-Only Administrator role. This role provides view-only access across the entire cloud platform, including key Cyber Resiliency features, enabling complete visibility without the risk of accidental modifications, deletions, or configuration changes. 🔗 Release Notes - Cloud Platform

    • Personalize Your Druva Console View with Dark Mode (September 10)
      The Druva Cloud Console now supports Dark, Light, and System Default themes, configurable under Login Details → Appearance — a small but popular quality-of-life update for admins working in low-light environments. 🔗 Release Notes - Cloud Platform
    • Centralized Reporting for FedRAMP-Certified GovCloud (August 17)
      Centralized reporting became the primary reporting experience for FedRAMP-certified GovCloud administrators, consolidating workload visibility into the unified Druva Cloud Platform Console with no changes required to existing backup/recovery workflows. 🔗 FedRAMP Release Notes for Enterprise Workloads
    • End of Life for Legacy Reports in Enterprise Workloads Management Console (September 12)
      Legacy reports were officially deprecated in the FedRAMP-certified GovCloud Enterprise Workloads Management Console, with all reporting moved to the centralized Druva Cloud Platform Console. Existing legacy report subscriptions are now inactive and must be manually recreated in the new interface; historical data (up to 18 months) and backup/restore operations are unaffected. 🔗 FedRAMP Release Notes for Enterprise Workloads | End of Life for Legacy Reports and Transition to Centralized Reporting

    Looking Ahead

    Several features — including Ransomware Detection and the Azure Data Lake Storage agentless protection — are rolling out in phases and will reach full global availability in the coming weeks. As always, if a feature listed here isn't visible in your console yet, check the Druva Cloud Upgrade Process for regional rollout timing. For full details on any of these releases, visit the relevant product's Release Notes page on the Druva Help Center. Keep an eye out for upcoming product updates!

    Experience our product without any commitment; take a product tour.

    Keep up with our latest learning materials by visiting our comprehensive resource hub, featuring blogs and glossary pages.

    Q
    Does Druva support backup and recovery for Microsoft 365 Copilot Chat?
    A

    Yes, Druva provides full backup, restore, and native eDiscovery (Legal Hold) support for AI-generated content across Microsoft 365 Copilot Chat.

    Q
    How does Ransomware Detection work?
    A

    Druva's multi-stage approach combines heuristic checks with in-platform forensics to flag potential risks, then definitively confirm the presence and impact of ransomware —reducing false positives by ~98%.

     

    Q
    Can Druva automate Active Directory forest recovery during an outage?
    A

    Yes, Druva replaces manual PowerShell scripting with zero-touch, orchestrated recovery workflows to minimize downtime during severe Active Directory outages.

    Q
    Does Druva offer agentless backup for Azure Data Lake Storage?
    A

    Yes, Druva provides agentless, policy-driven protection and automated backups for Azure Data Lake Storage (ADLS) Gen2 accounts.

    Q
    How does Druva integrate with ServiceNow for incident management?
    A

    Druva integrates directly with ServiceNow PSA, allowing Managed Service Providers (MSPs) to streamline ticket creation and incident resolution.

    Further Reading