According to a recent LinkedIn post from Cohesity, the company is emphasizing new malware-scanning capabilities embedded in its Cohesity Data Cloud platform and powered by Sophos. The post suggests the feature is designed to detect zero-day, polymorphic, and fileless threats within backup data to help ensure cleaner recovery environments.
Claim 30% Off TipRanks
- Unlock hedge fund-level data and powerful investing tools for smarter, sharper decisions
- Discover top-performing stock ideas and upgrade to a portfolio of market leaders with Smart Investor Picks
The LinkedIn post highlights that scanning can occur during backup, before restore, and when indicators of compromise are detected, and that the functionality is included in the Enterprise Edition without requiring a separate Sophos license. The feature also appears to integrate with customers’ existing SIEM and SOAR tools, and Cohesity plans to showcase the technology at RSAC 2026 in San Francisco.
From an investor perspective, this move may strengthen Cohesity’s competitive positioning in cyber-resilient data management by addressing a critical ransomware and backup integrity risk. Bundling advanced threat detection into its Enterprise Edition could support higher-value subscriptions, deepen customer lock-in, and potentially improve Cohesity’s appeal to large enterprises with stringent security requirements.
Integration with established security operations workflows via SIEM and SOAR connectivity may also help Cohesity align more closely with cybersecurity budgets rather than just infrastructure or storage spending. If customer adoption is strong, this type of differentiated functionality could enhance the company’s long-term revenue growth profile and reinforce its role in the broader data security and resilience ecosystem.

