Skip to content

Leadership1 publisher3 min readPublished

Cohesity wants the 200 exabytes it backs up to feed enterprise AI agents

Cohesity CEO Sanjay Poonen wants the 200 exabytes of backups it guards for about 12,000 customers put to work feeding AI. Taking up the offer means opening the copy a company keeps for recovery to AI tools that someone has to supervise.

The Board Room · Leadership desk

Drafted by a language model from the sources cited here and checked against its claim ledger before publication. How we use AISend a correction

Illustration accompanying Cohesity wants the 200 exabytes it backs up to feed enterprise AI agents
Generated illustration

What happened

  • Poonen spent just over an hour at the 70th IT Press Tour in Silicon Valley on frontier models, cyber agents and Cohesity's own AI bill.
  • Poonen splits Cohesity's business into three acts, data protection, data security and AI insights from the data, under the label AI-powered data security.
  • Poonen claims Cohesity has the industry's largest set of workload connectors since its Veritas deal closed about 18 months ago.
  • Product chief Vasu Murthy had Claude operate Cohesity's platform in a live demo and argued that agents cannot run a business on their own.

Compiled by The Board RoomSomething wrong?How this is made

Why it matters

  • decision Cohesity customers now have to decide whether the immutable copy they keep for recovery should also be read by AI tools, and who signs off on that access.
  • exposure Each agent granted read access to the backup lake is one more account that can reach the isolated copy a firm plans to rebuild from after an attack.
  • constraint If agents cannot run a business alone, any plan built on this pitch has to budget for the people who supervise the agents as well as the software.

Cohesity's pitch asks one store of data to do two jobs. Its five-step resilience framework includes cyber vaulting, keeping a clean copy isolated [9]. The third act of Poonen's pitch asks customers to draw insight from that same data [3]. "It's like soil with a time series stamp on it," Poonen said. "If you knew that you had gold underneath your house, why would you just want to keep it secure? You want to use it, and that's in essence what we're doing." [6]

The store is large. About 200 exabytes across about 12,000 customers [4] comes to roughly 17 petabytes each on average [14]. The biggest customers are banks, public sector bodies, healthcare groups, telcos and technology firms, where years of history settle into immutable backups [5]. Poonen defines a workload as anything that sits underneath an application, from SAP down to an agent [12]. Under the plan iTWire's headline describes, an agent is both something Cohesity backs up and something that reads the backups [12][8].

Poonen described the core engineering as "a pipe and lake problem": pipes to every workload, a secure immutable lake, and recovery as quick as possible [13]. He also described what happens when a pipe is missing. "Not covering a workload is like having a bank where one of the doors and windows are open," he said. "The bad guys get onto that application or workload, extract the data, exfiltrate the data, and then from there get to your entire network." [11]

A skeptical finance chief would say a backup vendor is relabelling storage as AI to defend its renewal price. The record supports a narrower claim. The session was a vendor making its case at a press event [1][7]. No customer in the account is described moving backup or security budget into AI, and the account does not include results from the Mythos test on Cohesity's own code named in iTWire's headline [8]. I would treat the budget question as open this quarter. The supervision question is one Cohesity's own product chief has already answered [7].

Banks raised the sequencing question first. "Many of our largest banks came and said to us, 'If the entire bank goes down, how do we set up a minimum viable bank?'" Poonen said [10]. He said the step of working out what a business needs to survive could easily become the first of the framework's five [9]. I think the same order applies to agents. A firm that defines its minimum viable business this quarter knows which backups are too important to expose, and next quarter's choices about which agents may read what can start from that list. According to Poonen, BNY Mellon and JPMorgan Chase have spoken about the concept at Cohesity's Catalyst events [10].

What to watch

  • Whether Cohesity publishes what the Mythos run against its own code found, and how people reviewed the fixes.
  • Whether Cohesity prices its AI insight features separately from protection, which would show whose budget pays for them.
  • Whether BNY Mellon, JPMorgan Chase or other banks describe letting agents query their backup copies.
Loading claim ledger
Loading source directory links
Loading share composer
Loading topic controls
Loading related stories