Veeam launches Intelligent ResOps to unify security and recovery in agentic AI era

The announcement came at Veeam's recent VeeamON Global Launch virtual event. The company had signaled the direction at VeeamON 2026 in May, after its acquisition of Securiti AI, which SiliconANGLE described as positioning Veeam as the industry's first AI resiliency company.

Chief Executive Anand Eswaran opened with a case from Spain. A company told its regulator that an AI agent, acting largely on its own, breached it by finding a flaw in a live application and modifying personal data and billing records. Eswaran framed the 72-hour disclosure requirement as an engineering problem, asking which records changed, what they were changed to and what they were before.

Eswaran said the convergence is necessary because modification differs from encryption or exfiltration. Ransomware encrypts and exfiltration steals, but both are detectable events with established playbooks. 'You can disclose a theft. You cannot disclose your way out of a modification,' he said. 'You have to reverse it, and you can only reverse what you can identify precisely.'

He described three eras: backup and recovery, where the rule was to assume failure; cyber resilience, where the rule was to assume breach; and the agentic era, where the rule is to assume drift. All three now apply at once. Agents are often temporary, he said, but data is not temporary and it drifts, goes stale, gets reclassified and gets poisoned. A fully entitled agent can still cause damage by reasoning over the wrong data.

Most industry approaches to agent risk start with the agent through registries, runtime guardrails and scoped credentials. Eswaran pointed to their limits. 'You can govern the agents you choose. You cannot register the ones that you do not know about.' Veeam argues the data is the only vantage point that does not require knowing the actor in advance because every agent eventually touches it.

According to Veeam's Data Trust & Resilience Report 2026, 88% of organizations are using or piloting AI agents, only 7% qualify as truly AI-ready, and more than 82% have unknown agents in their environments. Eswaran said identity hygiene only restores who can act; it does not restore what has already changed. One function closes the door, and the other must clean up the room, so they cannot remain separate.

Eswaran also drew a distinction between a recovery point and a recovery map. 'A recovery point tells you what you can restore,' he said. 'A recovery map tells you what to restore first, what changed, and what not to bring back.' The map is the DataAI Command Graph brought from Securiti, which connects data, users, permissions, agents, activity and protection status across live and backup environments.

iResOps for Microsoft 365 is an add-on to Veeam Data Cloud for Microsoft 365 and requires no data migration. It discovers Copilot and other agents, shows what sensitive data each can access, flags redundant, obsolete and trivial data, or ROT, and lets teams undo an agent's changes file by file.

Rehan Jalil, president of products and technology and former CEO of Securiti, said the product is intended to end fragmented tooling. 'Customers don't want silos of tools with conflicting sources of truth. They want visibility, controls, and resilience in one place,' he said. 'You know what is sensitive, what is critical, and what an agent touched. You protect exactly what needs protection, and you restore exactly what broke.'

SiliconANGLE said the data sciences expression that good data leads to good insights also has an inverse: silos of data lead to fragmented insights, which causes inconsistent insight.