A pre-provisioned, IOC-validated Microsoft 365 recovery environment — activated automatically the moment ARRAC contains a threat. No consultants. No waiting. Recovery starts when containment ends.
Most organisations restore backups into the same Microsoft 365 tenant that was attacked — the same compromised admin accounts, the same OAuth applications with persistent access, the same Entra ID that the attacker already owns. The result is reinfection within hours.
Recovery Assurance runs continuously in the background of your ARRAC subscription. When a ransomware incident occurs, it activates without a manual trigger — so your team can focus on the response, not the logistics.
A clean Microsoft 365 recovery tenant is provisioned for your organisation when you subscribe. Tested monthly. Validated against your current configuration. Ready and waiting.
The moment ARRAC detects and contains a ransomware threat, Recovery Assurance activates automatically. The clean environment is brought online while containment is still in progress.
Backups are restored into the clean tenant and scanned against ARRAC's live threat intelligence — ThreatFox, MalwareBazaar, OTX — before any data is declared clean and made available.
Identity is rebuilt with enforced MFA reset. Compromised credentials, OAuth apps, and admin accounts cannot follow you into the clean environment. You cut over when you're ready.
Every capability required to restore operations safely is included in the subscription — no professional services retainer, no emergency call-out fee.
A dedicated Microsoft 365 tenant provisioned exclusively for your organisation. Ready before any incident occurs.
The recovery environment is activated and validated every month. Proof it works — before you need it to.
Every backup restored into the clean environment is scanned against live threat intelligence before cutover. No reinfection.
Admin accounts, OAuth applications, and Entra ID are rebuilt from scratch. Compromised credentials cannot persist into the clean environment.
Recovery Assurance is activated within four hours of containment. The clean environment is online before your team has finished briefing stakeholders.
Every step of the recovery process is logged with timestamps and actor context. Regulatory-ready documentation, generated automatically.
IR consultancy firms charge £2,000–£5,000 per hour during a ransomware incident. Recovery Assurance costs less than a single hour — and it's already active before the call is made.
You already have Veeam B365 or equivalent. ARRAC provides everything needed to recover safely into a clean tenant.
Get started →Fully managed. Nothing to run. ARRAC handles backup, testing, and recovery end-to-end.
Get started →
Average SMB ransomware recovery cost: £150,000–£500,000.
Both tiers include monthly testing, IOC-validated restores, and identity rebuild — with no activation fee, ever.
The maths is straightforward.
Cross-tenant recovery tested and verified. Not theoretical.
Numbers, scope, and constraints — stated plainly so there are no surprises during an incident.
Tenant readiness: <1 hour. Identity recovery and first-user access: <4 hours. Full workload restoration: 4–24 hours, depending on data volume.
Exchange mailboxes, OneDrive, SharePoint sites, and Teams — full restore or granular item-level recovery. Workloads outside this set are out of scope.
Hash-based checks against ThreatFox, OTX, and MalwareBazaar before any restore is declared clean. Behavioural analysis is out of scope and stated as such.
Executive summary plus technical appendix. Every report includes immutable timestamped evidence — admissible for insurance, compliance, and board review.
2 activations per year. 500 GB per activation. Overage is charged at cost — no penalty, no contract cliff. Additional activations available on request.
Recovery Assurance is not a standalone product. It is an add-on to the ARRAC platform, and its value comes from that tight integration: ARRAC detects the threat, contains it, and activates Recovery Assurance — all without a human trigger.
Recovery Assurance requires an active ARRAC platform subscription. If you don't have one yet, the fastest way to get started is a 14-day free trial — all 10 platform modules included, no credit card required. Recovery Assurance can be added at any point.
Start with the platform →