Commvault Integrates Cyber Recovery Actions into CrowdStrike Charlotte Agentic SOAR Workflows

August 31, 2026
PDF Version

New integration automates Commvault cyber recovery actions within Charlotte Agentic SOAR workflows, helping accelerate forensic investigations and incident response

TINTON FALLS, N.J., Aug. 31, 2026 /PRNewswire/ -- Commvault (NASDAQ: CVLT), a leader in unified resilience at enterprise scale, today announced a new integration with CrowdStrike that makes Commvault cyber recovery actions available as native steps within Charlotte Agentic SOAR workflows. The integration enables joint customers to automate Commvault recovery actions as part of security workflows, helping accelerate response and forensic investigations while reducing manual coordination between security and recovery teams.

Commvault is a leading provider of cyber resilience and data protection solutions for hybrid cloud organizations.

AI-driven automation is helping organizations detect, investigate, and respond to threats at machine speed, yet fragmented tools and workflows can slow security teams at critical moments. The new purpose-built connector enables security teams to incorporate Commvault cyber recovery actions directly into workflows orchestrated by Charlotte Agentic SOAR and rapidly accelerate investigation, response, and recovery. Key capabilities include:

  • Restrict access in Commvault to help prevent unauthorized changes during an active incident.
  • Preserve clean recovery options by automatically suspending Commvault backup data aging policies to retain viable recovery points during active incidents.
  • Accelerate forensic investigations by restoring potentially compromised assets into Commvault Cleanroom, enabling investigators to begin analysis without disrupting production systems.

"Security and recovery teams need to move quickly and in coordination during an incident," said Vidya Shankaran, Field CTO, Commvault. "Our integration with CrowdStrike Charlotte Agentic SOAR makes Commvault cyber recovery actions available directly within security workflows, helping joint customers reduce manual handoffs and accelerate investigation and response. This strengthens cyber resilience and simplifies how security and recovery teams work together seamlessly."

Today's news is the latest in a series of integrations with CrowdStrike: Falcon Insight XDR brought CrowdStrike threat intelligence into Commvault Cloud; Falcon Next-Gen SIEM extended visibility; and the new Charlotte Agentic SOAR integration enables Commvault cyber recovery actions to be incorporated directly into automated security workflows.

Availability
The integration between Commvault and Charlotte Agentic SOAR is generally available for joint Commvault and CrowdStrike customers. The integration is also available through the CrowdStrike Marketplace. For more information, visit the Commvault and CrowdStrike joint partner page.

About Commvault
Commvault (NASDAQ: CVLT) is a leader in unified resilience at enterprise scale. In a constantly evolving threat landscape, Commvault keeps customers ready by unifying data security, identity resilience, and cyber recovery, on one cloud-native, AI-enabled platform. Customers trust Commvault to conduct the fastest, most complete recoveries – not just their data, but their entire business. Purpose-built for the agentic enterprise, Commvault also enables organizations to safely embrace AI while protecting against AI-driven threats.

Cision View original content to download multimedia:https://www.prnewswire.com/news-releases/commvault-integrates-cyber-recovery-actions-into-crowdstrike-charlotte-agentic-soar-workflows-302862876.html

SOURCE COMMVAULT

Kevin Komiega, Commvault, 978-834-6898, kkomiega@commvault.com; Michael J. Melnyk, CFA, Commvault, 646-522-6160, mmelnyk@commvault.com