Technical Review by
Laura Iannini
Datto BCDR delivers near-zero recovery times through 1-click cloud virtualization while immutable storage and Cloud Deletion Defense protect backups from ransomware with screenshot verification confirming every backup is bootable.
Acronis Cyber Protect rolls backup, endpoint protection, and cybersecurity into single agent and console with AI-powered threat detection paired with automated backup scanning while straightforward deployment works for less technical teams.
Barracuda Cloud-to-Cloud Backup provides fully cloud-native M365 protection with automatic discovery backing up new mailboxes and SharePoint sites without manual setup using immutable backups with point-in-time recovery.
Public cloud backup seems simple in theory: send your data to AWS or Azure and recover when disaster strikes. In practice, you’re juggling hybrid infrastructure, managing multiple cloud vendors, dealing with egress costs that surprise you, and hoping backup data actually recovers when you need it.
You need a platform that covers your entire environment without requiring separate tools for VMs, endpoints, databases, and SaaS. The challenge is that cloud backup solutions vary dramatically. Some platforms prioritize recovery speed but lock you into single vendors. Others support multiple clouds but require extensive configuration. A few claim immutable storage but leave ransomware attack vectors open. Getting it wrong means either discovering too late that your backups won’t restore, or realizing your backup vendor is charging premium rates for egress that wipes out your savings.
We evaluated 8 public cloud backup solutions across platform range, recovery speed, ransomware protection, pricing transparency, and ease of deployment. We evaluated each for how well they integrate with AWS and Azure, handle multi-cloud environments, support complex workloads from Kubernetes to SaaS applications, and manage costs at scale. We also reviewed customer feedback to understand where vendor promises diverge from field experience.
This guide gives you the testing insights and decision framework to select a cloud backup solution that protects your hybrid infrastructure without creating operational headaches or unexpected costs.
We evaluated these solutions across architecture, recovery speed, and feature consolidation. Each balances different operational complexity and infrastructure preferences.
Datto BCDR is a software-based business continuity and disaster recovery platform built for MSPs and internal IT teams managing Windows and Linux workloads. We think the 1-Click Disaster Recovery and AI-powered backup verification are the features that set it apart in this category. If keeping client systems running through outages and ransomware events is your priority, Datto sits squarely in that space.
1-Click Disaster Recovery virtualizes failed systems directly in the Datto Cloud with near-zero recovery time objectives. You can clone a VM from the most recent cloud restore point or select from the last five. AI-powered screenshot verification delivers over 99% accuracy in confirming backups are bootable, which removes manual validation from your workflow. Immutable WORM storage and Cloud Deletion Defense protect the backup chain from ransomware, and the Recovery Launchpad lets you create VMs, VLANs, and entire DR plans in the Datto Cloud. A 2025 Secure Edge integration establishes an IPsec tunnel between the Datto Cloud and the Secure Edge virtual gateway with a single click, eliminating recovery networking delays.
Customers consistently describe backup reliability as strong, with systems running quietly in the background. Alerting integration with Autotask keeps MSP teams informed without constant manual checks, and recovery speed holds up under pressure. Something to be aware of is that customers flag the interface as cluttered when managing many devices and advanced settings. Reporting tools lack customization and require too many clicks to reach detail.
We think Datto BCDR deserves serious consideration if you run an MSP or manage backup across multiple client environments. The multi-tenant Partner Portal and flexible retention options are designed for that exact workflow. Pricing runs higher than some alternatives, so smaller single-site teams should weigh that carefully against the DR capabilities.
Acronis Cyber Protect rolls backup, endpoint protection, and cybersecurity into a single agent and console. We think the consolidation play is the real selling point here. If your MSP strategy depends on reducing tool sprawl and selling bundled protection packages, Acronis fits that model well.
The single-agent architecture handles backup, vulnerability assessments, patch management, and antimalware through one lightweight agent, which cuts operational overhead compared to managing separate point solutions. AI-powered threat detection pairs with automated backup scanning for layered defense. Integrated disaster recovery removes the need for a separate failover solution. A 2025 release added Acronis Cyber Protect Local for on-premises, sovereign private cloud, and air-gapped environments, along with Email Archiving for Microsoft 365, Nutanix agentless backup, and EDR for Linux.
Customers consistently praise the unified platform for simplifying day-to-day management. Setup is straightforward, and the interface works well for teams without deep technical backgrounds. Support response times get positive marks across the board. Something to be aware of is that advanced modules like XDR and extended security packs add licensing complexity, and the dashboard can feel overwhelming when managing multiple tenants initially.
We think Acronis is well worth considering if you want backup and endpoint security under one roof without managing separate tools. Channel resellers highlight the straightforward commercial structure and strong vendor enablement. Extended detection capabilities trail dedicated XDR-focused tools, so factor that in if advanced threat hunting is a priority.
Barracuda Cloud-to-Cloud Backup is a fully cloud-native backup solution built specifically for Microsoft 365, covering Exchange, SharePoint, OneDrive, Teams, and OneNote. We think the hands-off deployment and automatic discovery are the strongest selling points here. If you need low-maintenance M365 backup that stays out of your way, this is designed for exactly that.
You connect your M365 tenant and backups start running. New SharePoint sites and mailboxes get picked up automatically without manual reconfiguration. Data is encrypted in transit and at rest, with immutable backup copies and point-in-time recovery for ransomware scenarios. The platform supports MFA, RBAC, and multi-tenant management, so MSPs can run multiple client environments from one console. Entra ID backup is included with the M365 license at no extra cost. OneNote data can be backed up and exported, though restoration to M365 is no longer supported as of March 2025 due to Microsoft API changes.
Customers give the hands-off daily operation consistently high marks. Alerting and reporting provide enough visibility to satisfy audit and compliance checks without constant monitoring, and the ability to produce backup proof for governance reviews gets called out as a practical win. With that said, the restore experience is where friction shows up. Customers say finding individual files or emails requires drilling through multiple date ranges and unclear folder structures, and restore jobs sometimes fail silently with no error messages.
We think Barracuda Cloud-to-Cloud Backup is a strong fit if your primary need is reliable, low-touch M365 data protection. It removes the complexity of Microsoft’s native retention options and keeps your compliance posture clean. If granular restore speed matters to your team, factor in the navigation friction customers report.
Cohesity DataProtect unifies backup and recovery across hybrid environments, covering virtual and physical servers, SaaS workloads, and databases. Cohesity completed its merger with Veritas in December 2024, making it the world’s largest data protection software provider serving over 12,000 customers. We think the Helios management console and near-instant recovery times are the strongest selling points for enterprise teams managing complex, multi-source environments.
The Helios console gives you single-pane visibility across all clusters, appliances, and Backup as a Service instances from anywhere. Protection policies, restore operations, and licensing all live in one place. Near-instant RTOs and the ability to mass restore VMs, unstructured data, and large databases address real enterprise SLA requirements. Data compression and deduplication keep secondary storage costs in check. Deployment runs on-premises as physical appliances or as BaaS hosted in AWS and Azure. Built-in zero-trust controls include immutability, WORM, encryption, and MFA.
Customers report fast implementation times, with some teams backing up within hours of deployment. The Helios interface earns praise for making complex environments manageable without deep training. Something to be aware of is that initial setup requires careful planning in larger environments. Customers also note that the platform does not automatically detect disabled user accounts, so stale protection groups need manual cleanup. Cost runs higher than alternatives, though the consolidation value offsets that for larger deployments.
We think Cohesity fits best when you need unified protection across a sprawling hybrid environment. If your infrastructure spans on-premises VMs, cloud workloads, and SaaS applications, the single-platform approach removes real operational complexity. The Veritas merger strengthens the product roadmap, with AI now embedded in DataProtect for anomaly detection, threat identification, and policy optimization.
Druva Data Security Cloud is a fully cloud-native backup platform built on AWS that centralizes protection across endpoints, cloud apps, SaaS workloads, and virtual infrastructure with no on-premises hardware to manage. We think the zero-infrastructure model and built-in compliance tooling are the features that justify evaluation for organizations ready to go fully cloud-native with data protection.
The cloud-native architecture eliminates appliances, storage provisioning, and software patching entirely. Global source-side deduplication keeps bandwidth usage efficient across distributed endpoints and SaaS applications. Built-in encryption, ransomware detection, and compliance features including legal hold and federated search come standard without bolt-on licensing. A 2025 release added agentless, cloud-native backup for Amazon S3 with granular object-level recovery, alongside enhanced cyber resilience for Amazon EC2 with Data Anomaly Detection. Backups are stored outside your AWS organization with zero-trust access controls and immutability.
Customers praise the deployment experience, with connector configuration and data flow starting without complex infrastructure planning. The single-pane management approach removes the need to juggle multiple portals. Something to be aware of is that initial backups and large dataset restores run slower than local or appliance-based alternatives, since everything travels over the network to AWS. Customers also note that ransomware detection can generate false alerts that require manual tuning.
We think Druva fits best for organizations that want to eliminate on-premises backup infrastructure entirely. The simplified scaling and zero-infrastructure model make it particularly strong for distributed workforces and multi-cloud environments. Druva reports a TCO up to 40% lower than traditional on-premises alternatives through built-in global deduplication and storage tiering.
NAKIVO Backup and Replication is a multi-platform data protection solution covering virtual, physical, cloud, and SaaS workloads from a single interface. We think the cost-to-capability ratio is the clearest reason to shortlist NAKIVO. If you need reliable multi-platform backup without enterprise-tier pricing, this delivers strong value for SMBs and MSPs.
Incremental backups, deduplication, and compression work together to keep jobs fast and storage consumption low. Nine recovery options cover everything from single files to full VMs and bare metal restores. S3-compatible storage integration with AWS, Backblaze B2, Wasabi, and Azure Blob takes minimal steps to configure, which opens up hybrid and cloud-based backup strategies without added complexity. Real-time replication supports RPOs as low as 1 second for vSphere 8.0 environments. The lightweight footprint means you can deploy on Windows, Linux, VMware, Nutanix, or as an AWS AMI.
Customers give the interface high marks for initial setup and day-to-day management. Documentation is extensive, and most teams get backup jobs running quickly. Support is responsive and technically competent. With that said, advanced features require a steeper learning curve and are often locked behind higher-tier editions. Customers also note that real-time replication does not restart automatically after a target system failure, which adds manual overhead for teams relying on tight RPOs.
We think NAKIVO is a strong pick for SMBs and MSPs that need multi-platform backup coverage at a competitive price point. The nine recovery options and flexible deployment give you range without forcing you into enterprise-tier licensing. If you need advanced features out of the box, verify which edition includes them before committing.
Rubrik Security Cloud unifies backup, recovery, archival, and ransomware protection across data centers and cloud environments. We think the immutable architecture and SLA-based policy automation are the features that set Rubrik apart. If ransomware resilience and hands-off protection are your top priorities, the security-first design addresses those requirements directly.
SLA domains replace traditional backup schedules. You define policies, assign them to workloads, and Rubrik handles the rest automatically, which removes manual backup management and reduces configuration drift across large environments. The immutable file system is air-gapped by design; backup data cannot be modified or deleted, even by compromised admin credentials. In April 2026, Rubrik added cyber resilience for Google Cloud SQL, enabling protection for managed PostgreSQL databases with immutable, automated backups alongside existing support for Google Workspace, Compute Engine, and Kubernetes Engine.
Customers praise the setup and deployment experience, with the interface earning positive marks for core backup and restore tasks. Support quality is consistently rated as responsive and knowledgeable. Something to be aware of is that cost is a real consideration; Rubrik is positioned at the enterprise tier. Customers also note that M365 granular recovery trails some competitors in capability, and teams without prior backup management experience face a steeper learning curve.
We think Rubrik is a strong fit for security-conscious enterprises where ransomware defense and policy-driven automation are non-negotiable. The immutable architecture and zero-trust design solve real operational pain. Budget accordingly; this is enterprise-grade protection at enterprise-grade pricing.
Veeam delivers a hybrid cloud data protection platform covering on-premises virtual servers, public cloud workloads, Kubernetes environments, and SaaS applications including Microsoft 365 and Salesforce. We think the platform coverage and market maturity make Veeam the default shortlist candidate for any hybrid cloud backup evaluation. If you need a single backup platform that spans your entire hybrid footprint, Veeam is the established market leader for good reason.
Backup and restore operations run consistently across virtual Windows servers, cloud-native workloads, and Kubernetes clusters. Policy-based workflows automate protection with immutability built in. Veeam Kasten v8, released in 2025, handles Kubernetes-native backup with application-aware snapshots, multi-cluster support, file-level recovery for KubeVirt VMs, and new Veeam Vault integration for fully managed offsite backup. For M365, Veeam Data Cloud removes the infrastructure overhead of running your own backup environment. Support for AWS, Azure, and Google Cloud with unified policy management covers multi-cloud requirements.
Customers describe consistent performance and minimal daily intervention once the platform is running. Restorations work well, and the tool integrates cleanly into existing infrastructure. The sales team gets credit for presenting capabilities honestly, which sets realistic expectations before deployment. With that said, initial setup is where friction lives. Customers flag object selection as confusing and unintuitive, and reporting lacks the granularity needed for detailed compliance needs.
We think Veeam is the safe bet for hybrid environments spanning on-premises VMs to Kubernetes. The combination of platform coverage, vendor transparency, and market maturity makes it a low-risk choice. Kasten v8 strengthens the Kubernetes story with unified VM and container protection from a single platform.
When evaluating public cloud backup solutions, we’ve identified seven essential criteria. Here’s the checklist of questions you should be asking:
Weight these criteria based on your environment. MSPs managing multiple clients should prioritize deployment simplicity and multi-tenant management. Enterprise teams need workload range and strong ransomware protection. Organizations with data residency requirements should prioritize geographic options and air-gapped capabilities.
Expert Insights is an independent editorial team that researches, tests, and reviews cybersecurity and IT solutions. No vendor can pay to influence our review of their products. Our Editor’s Scores are based solely on product quality. Before testing, we map the full vendor market for each category, identifying all active vendors from market leaders to emerging challengers.
We evaluated 8 public cloud backup solutions across workload range, recovery speed, ransomware protection, multi-cloud support, and ease of deployment. Each platform was tested for how well it handles VMs, endpoints, databases, SaaS applications, and Kubernetes clusters. We assessed disaster recovery capabilities, cost at scale including egress charges, alongside integration with AWS and Azure and total cost of ownership across multi-year deployments.
Beyond hands on testing, we conducted in depth market research and reviewed customer feedback to validate vendor claims against operational reality. We spoke with product teams and deployment partners to understand known limitations and pricing nuances. Our editorial and commercial teams operate independently. No vendor can pay to influence our review of their products.
This guide is updated quarterly. For full details on our evaluation process, visit our How We Test & Review Products.
No single cloud backup solution works for every organization.
If you’re an MSP needing 1-Click disaster recovery and immutable backup, Datto BCDR delivers cloud virtualization with near-zero RTOs. Screenshot verification proves backups are bootable.
If consolidating backup, endpoint security, and patch management matters, Acronis Cyber Protect bundles all three in one agent. Straightforward deployment appeals to less technical teams.
If you only need M365 protection, Barracuda Cloud-to-Cloud Backup simplifies deployment with automatic discovery. Accept tedious restore workflows for straightforward setup.
If you need unified protection across on-prem, cloud, and SaaS from one console, Cohesity DataProtect unifies them all. Plan for careful initial setup. Cost runs higher than alternatives.
If you want to eliminate on-premises backup infrastructure entirely, Druva Data Resiliency Cloud runs everything as SaaS. Setup is fast and the centralized dashboard simplifies management.
If you need multi-platform backup at competitive costs, NAKIVO Backup & Replication delivers strong value for SMBs and MSPs. Advanced features are locked behind higher tiers.
If ransomware defense and policy-driven automation are your top priorities, Rubrik puts immutability at the center.
For established hybrid infrastructure spanning on-prem VMs to Kubernetes, Veeam Hybrid Cloud Backup is the established market leader.
Read the individual reviews above to dig into workload coverage, recovery speed, ransomware protection, pricing, and the trade-offs that matter for your hybrid infrastructure.
Public cloud backup solutions are cloud-based data backup services operated by cloud service providers in a public cloud infrastructure. These solutions allow organizations and individuals to securely store copies of their data, applications, and systems in remote cloud data centers.
Typically delivered on a SaaS model basis (with monthly or annual per user billing), public cloud backup solutions provide a secure and reliable way to protect data from various threats, including hardware failures, data corruption, accidental deletion, and cyberattacks.
Popular public cloud backup services are offered by companies like Amazon Web Services (AWS), Microsoft Azure, Google Cloud Platform (GCP), and numerous third-party providers that specialize in backup and disaster recovery services.
Using a public cloud backup is typically more scalable and cost effective than using a private backup solution or a solution hosted on premises. Some of the key advantages of public cloud backup include:
When implementing a public cloud backup solution, it’s important to carefully plan your backup strategy, choose the appropriate storage class, and consider data retention policies to ensure that your data is adequately protected and recoverable when needed. Key features to consider when choosing a solution include:
Joel is the Director of Content and a co-founder at Expert Insights; a rapidly growing media company focussed on covering cybersecurity solutions.
He’s an experienced journalist and editor with 8 years’ experience covering the cybersecurity space. He’s reviewed hundreds of cybersecurity solutions, interviewed hundreds of industry experts and produced dozens of industry reports read by thousands of CISOs and security professionals in topics like IAM, MFA, zero trust, email security, DevSecOps and more.
He also hosts the Expert Insights Podcast and co-writes the weekly newsletter, Decrypted. Joel is driven to share his team’s expertise with cybersecurity leaders to help them create more secure business foundations.
Laura Iannini is a Cybersecurity Analyst at Expert Insights. With deep cybersecurity knowledge and strong research skills, she leads Expert Insights’ product testing team, conducting thorough tests of product features and in-depth industry analysis to ensure that Expert Insights’ product reviews are definitive and insightful.
Laura also carries out wider analysis of vendor landscapes and industry trends to inform Expert Insights’ enterprise cybersecurity buyers’ guides, covering topics such as security awareness training, cloud backup and recovery, email security, and network monitoring. Prior to working at Expert Insights, Laura worked as a Senior Information Security Engineer at Constant Edge, where she tested cybersecurity solutions, carried out product demos, and provided high-quality ongoing technical support.
Laura holds a Bachelor’s degree in Cybersecurity from the University of West Florida.