Veeam adds six hypervisors and an archive tier as backup repositories become the ransomware target of choice
Veeam Software announced the general availability of Veeam Data Platform v13.1 and Veeam Data Cloud Vault Archive on Friday, taking supported hypervisors to 14 platforms, extending malware scanning to NAS and Azure workloads, and introducing an archival-class cloud tier for backup data that organisations must retain for years without paying performance storage rates to keep it.
The two announcements are designed to work together. Veeam Data Platform v13.1 adds out-of-the-box support for Red Hat OpenShift Virtualisation, Sangfor aSV, XCP-ng, Citrix XenServer, VergeIO and Platform9, alongside purpose-built protection for EPIC EHR, Db2 on Windows and Oracle with incremental merge. Veeam Vault Archive sits beneath the company's performance-optimised Data Cloud Vault, taking aged backups and large unstructured data sets by policy into immutable, encrypted, logically air-gapped storage.
The releases respond to a recovery gap that the industry has been slow to close. Veeam's own Data Trust and Resilience Report 2026 found that while 90% of organisations are confident they can recover from a cyber incident, fewer than one in three ransomware victims recovered all of their data. Separate Veeam research indicates backup repositories are targeted in 96% of ransomware attacks, which reduces the value of any recovery point that has not been verified as clean before it is used.
Confidence in recovery has outrun the evidence for it, and detection is moving upstream to compensate
Veeam Data Platform v13.1 concentrates much of its new security work on the stage before restoration rather than after it. The release extends malware scanning coverage to NAS, widens cloud threat detection for Azure, and adds Active Directory Forest Recovery to shorten identity restoration after an incident. It also adds post-quantum cryptography alignment with NIST standards and hybrid FIPS support.
The reasoning is that a validated restore point is worth considerably more than a fast one when attackers have been inside the environment for weeks. “Cyber risk is dramatically escalating with rapid advancement in frontier models and self-driving AI agents,” said Rehan Jalil, President of Products and Technology at Veeam. “Resilience will act as a backbone of continued operations and recovering from increasing cyber and AI incidents. With Veeam Data Platform v13.1, customers get stronger enterprise application coverage, and expanded security and recovery readiness.”
Veeam is describing the release as a step in its evolution toward what it calls Data and AI Trust, an argument that resilience, security posture and data governance are converging into a single discipline as organisations feed more of their estate into AI systems.
Hypervisor diversification became a data protection problem before it became an infrastructure one
The six new platforms take Veeam to 14 supported hypervisors, with further coverage promised through its Universal Hypervisor API. The company is candid that VMware pricing pressure is driving the demand, and the practical consequence for enterprises evaluating alternatives is that protection coverage now determines how quickly a migration can proceed.
That dependency has pulled infrastructure vendors into the announcement. “Organisations are looking to modernise their virtualisation environments without compromising resilience, recovery, or choice,” said Stephen Bacon, VP of Cyber Resilience and Data Protection Solutions at HPE. He added that combining HPE's platform and infrastructure portfolio with Veeam Data Platform v13.1 allows organisations to modernise virtualisation, improve cyber and operational resilience, and build a stronger foundation for future growth.
Nutanix, whose AHV hypervisor has absorbed a significant share of VMware defections, points to migration tooling as the deciding factor. “Veeam Data Platform v13.1 strengthens our shared commitment to delivering simple, resilient data protection for modern hybrid environments,” said Ketan Shah, VP Product Management at Nutanix. “With deeper integrations and joint innovations, such as easy-button migrations to AHV, fast, seamless recovery to AHV has never been easier.”
Service providers are making a similar calculation on behalf of customers who cannot afford a resilience gap mid-transition. Danny Tang, Senior Manager of Cloud Services, Product and Digital Intelligence Development at CITIC Telecom CPC, said support for Sangfor aSV allows the operator's SmartCLOUD services to protect critical workloads and maintain recovery readiness throughout an infrastructure transition, giving customers freedom to choose infrastructure without becoming locked into a single platform.
Retention economics now decide how long compliance obligations remain affordable
Veeam Vault Archive addresses the portion of the backup estate that organisations are required to keep and rarely touch. Redundant, obsolete and trivial data, aged backups and large unstructured data sets can be tiered by policy from Veeam Data Cloud Vault into archive-class storage, with NAS backups written directly to the archive tier through the NAS Direct to Archive capability in v13.1. Data placement controls address residency requirements, a consideration that 58% of organisations in Veeam's research rank as the single most important factor in deciding where data is stored.
The company is aiming the tier squarely at tape, which remains the default answer for low-cost retention despite the handling, transport, offsite logistics and delayed recovery that physical media entails. Jalil said data must be protected, isolated, recoverable and stored in the right location even when it is no longer actively used, and that long-term retention has become a cyber resilience, compliance and cost challenge simultaneously. He added that the archive tier gives customers a secure, immutable and cost-effective way to tier ageing backups and cold data off premium storage while keeping a trusted copy on storage better suited to long-term retention.
Consolidation claims are settled in the enterprise application layer
The application work in v13.1 targets the workloads that most often sit outside a consolidated data protection platform. Support for EPIC EHR speaks directly to healthcare providers running electronic health records under regulatory retention obligations, while Db2 on Windows and Oracle with incremental merge address the transactional systems that finance and public sector organisations typically protect using vendor-specific tooling. An Application Backup Repository extends coverage to custom applications.
The commercial argument is the reduction of point-tool sprawl and the unified security controls, reporting and recovery orchestration that follow from it. Phil Hassey, CEO and founder of CapioIT, said the release reflects the evolution of the data protection market from conventional backup and recovery to a strategic focus on data resilience and trust, responding to organisational requirements around diversified infrastructure, preparedness for cyber incidents and reliable restoration of clean data.
Veeam protects more than 550,000 customers worldwide, including 82% of the Fortune 500. Both products are generally available now through the company's global network of authorised partners, resellers, distributors and cloud marketplaces, with the Red Hat OpenShift Virtualisation plug-in expected later in Q3.
