Coveware by Veeam
Your allies for cyber negotiation and ransomware-encrypted data recovery. Fast action, expert guidance, and peace of mind from readiness and response to full recovery.
- 24/7/365 incident response from first alert to full recovery
- Expert extortion negotiation backed by a threat actor database
- Proprietary decryption and forensic-grade recovery
Overview
The most complete support for ransomware
Coveware by Veeam brings industry-leading cyber-extortion incident response and proactive enterprise preparedness to Veeam's ransomware protection and recovery capabilities. Since its founding in 2018, Coveware has helped thousands of cyber-extortion victims with rapid forensic triage, extortion negotiation and remediation, cryptocurrency settlement, and decryption services, with a singular goal: data recovery from ransomware attacks.
Beyond backup and recovery
Backups keep your data recoverable, but a ransomware event still demands fast, expert response. Coveware adds negotiation, settlement, and decryption expertise so you have command and clarity when an incident hits, and a plan in place before it ever does.
Experience that changes outcomes
cyber-extortion cases handled every year
incident response access when it matters most
helping cyber-extortion victims recover since founding
Services
End-to-end cyber-extortion support, from first alert to full recovery.
Assessment
Rapidly identify the ransomware strain, outline the risks, and review your recovery options so you can make informed decisions fast.
Extortion Negotiation
Coveware negotiates on your behalf using its threat actor database and works within your timeline and desired outcomes to determine the right recovery path.
Ransomware Settlement
If a settlement is required, Coveware facilitates it with cryptocurrency support and regulatory guidance, with transparency and no hidden fees.
Decrypt & Recover
The proprietary Unidecrypt platform recovers data, in some cases without a key, and ensures safe, controlled decryption backed by forensic documentation.
How It Works
A proven, four-phase response guided by thousands of past incidents.
1. Assess
Assess the ransomware strain and review your recovery options.
2. Negotiate
Negotiate terms on your behalf using historic case data and threat intelligence.
3. Settle
Execute any settlement transparently, with no hidden fees.
4. Recover
Recover your data with full forensic documentation.
Readiness & Retainer
Prepare before an attack. Retainer clients gain proactive support and immediate access when an incident hits.
1:1 Dedicated Support
Dedicated expert support tailored to your organization.
Learning & Development
Training programs that build your team's readiness.
Custom IR Exercises
Bespoke incident response exercises to test your plan.
Active IR Team Access
Immediate 24/7/365 access to the response team.
Frequently Asked Questions
Coveware by Veeam is a cyber-extortion incident response service that brings industry-leading ransomware negotiation, settlement, decryption, and recovery to Veeam's data protection portfolio. Founded in 2018 and acquired by Veeam in 2024, Coveware has helped thousands of cyber-extortion victims with rapid forensic triage, extortion negotiation and remediation, cryptocurrency settlement, and decryption, all focused on recovering data from ransomware attacks.
Coveware provides end-to-end cyber-extortion readiness and response. This includes assessment to identify the ransomware strain and outline recovery options, extortion negotiation on your behalf, ransomware settlement with cryptocurrency and regulatory guidance, and decryption and recovery using proprietary tools with compliance documentation. Retainer clients also get dedicated 1:1 support, training, and custom incident response exercises.
Coveware follows four phases: assess, negotiate, settle, and recover. First it assesses the ransomware strain and reviews your recovery options. Second, it negotiates terms on your behalf using its threat actor database and historic case data. Third, it executes any settlement transparently, with cryptocurrency support and regulatory guidance and no hidden fees. Fourth, it recovers your data using proprietary decryption tools with full forensic documentation.
Yes. A readiness retainer gives you immediate 24/7/365 access to Coveware's incident response team when an attack hits. It also adds proactive preparation such as dedicated 1:1 support, learning and development programs, and custom incident response exercises. Preparing in advance shortens response time and improves outcomes when every minute counts.
Coveware uses its proprietary Unidecrypt platform to recover data. In some cases it can recover data without a key, and when a key is required, Unidecrypt ensures safe, controlled, and complete decryption, even when threat actor tools are unreliable. All recovery is backed by forensic documentation for compliance.
Coveware extends Veeam's ransomware capabilities beyond protection and recovery to include incident response. Together they deliver end-to-end support for ransomware, from immutable, air-gapped backups that keep your data recoverable, to expert negotiation, settlement, and decryption when an attack occurs, so you can respond and recover with confidence.