Cohesity.

The last line of defense just became the first.

Somewhere right now, a ransomware note is loading on a screen inside a Fortune 500 company. The files are locked. The clock is running. The board wants answers in an hour. And the team that gets called is not the firewall vendor or the endpoint people - it is whoever holds clean, untouched copies of the data. Increasingly, that is Cohesity.

Cohesity is a data security and management company headquartered in Santa Clara, California. It backs up, protects, secures, and - this is the new part - helps recover and interrogate the data of roughly 13,000 organizations around the world. After combining with Veritas' enterprise data protection business in December 2024, it became the largest data protection software provider on the planet, valued at about $7 billion and carrying around $1.5 billion in annual recurring revenue.

Most of your data is in the dark.

Here is the unglamorous truth of enterprise IT. The data you actively use - the live databases, the running apps - is a thin slice. The rest is what the industry calls secondary data: backups, archives, file shares, test copies, old mailboxes. It is the overwhelming majority of everything a company stores. And for years it lived in a junk drawer of incompatible silos, each with its own appliance, its own console, its own bill.

The result was expensive, fragmented, and - conveniently for attackers - poorly guarded. You cannot protect what you cannot see. Cohesity's founding observation was that this "dark data" was not waste. It was leverage. If you could consolidate it onto one platform, you could cut cost, find insight, and, crucially, recover from disaster fast.

The irony: companies spent fortunes securing the 20% of data they used daily, while the other 80% sat in the metaphorical garage with the door open.

A man who had done this before.

Cohesity was founded in 2013 by Mohit Aron, who is not a name most people outside infrastructure know, and is a legend to most people inside it. Aron earned a PhD in computer science at Rice University, then went to Google as a lead engineer on the Google File System - the software that quietly manages data across Google's enormous clusters. He later co-founded Nutanix, which pioneered hyperconverged infrastructure and went public. Some people call him the father of hyperconvergence. He just calls it the warm-up.

The bet behind Cohesity was that the same web-scale, distributed-systems thinking that organized Google's primary data could be turned loose on everyone else's secondary data. The company spent two years in stealth before launching publicly in 2015 with two products - a platform to consolidate the chaos, and protection software to guard it.

One platform, several jobs.

Cohesity's portfolio reads like a set of answers to the question "what happens when something goes wrong?" - plus a newer one: "what can this data tell us?" The pieces fit together on a single hyperscale platform rather than the old pile of disconnected appliances.

Named with intent: FortKnox borrows the U.S. gold depository's reputation, and Gaia borrows a name for the earth itself - because apparently "search tool for backups" did not test well.

The numbers do the arguing.

Skepticism is healthy in enterprise software, where every vendor claims to be the leader of a category it invented last Tuesday. So look at the scale instead of the adjectives. The combined company guards a remarkable share of the world's biggest organizations, and its revenue is overwhelmingly recurring - the kind customers do not pay unless the thing keeps working.

The customer roster spans financial services, healthcare, government, media, and retail - the sectors with the most to lose and the strictest rules about losing it. The partnerships tell a similar story: Nvidia as investor and AI ally, Microsoft on AI-powered security and a Gaia tie-in with Microsoft 365 Copilot, Cyera powering data classification, Lenovo packaging the software onto hardware. None of these companies hand their logo to a vendor casually.

The funding history reinforces the point. Across rounds from 2014 to 2021, Cohesity raised roughly $837 million from a list that reads like a who's-who of patient capital: Sequoia Capital, Wing Venture Capital, SoftBank's Vision Fund, IBM, Nvidia, Premji Invest, and Morgan Stanley among them. The December 2024 Series H, tied to the Veritas combination, brought in Haveli Investments, Coatue, Sapphire Ventures, and Madrona. Investors do not usually stay on a cap table for a decade unless the underlying business keeps compounding.

Resilience, not just backup.

Under CEO Sanjay Poonen, who joined in 2022 after a long run at VMware, the framing shifted. Backup is a verb from a calmer era. The company now talks about cyber resilience - the assumption that an attack will happen, and the question is only how fast and how cleanly you recover. That reframing is why a backup company keeps showing up in conversations about security.

The newest chapter is AI. Not as a sticker, but as two real problems. First, using AI to read backup data and spot threats and anomalies before they spread. Second, protecting the data that feeds enterprise AI in the first place - because a model is only as trustworthy as the data behind it, and an AI agent with broad access to corporate systems is a new kind of risk that few companies have thought through. In early 2026 Cohesity began building guardrails specifically for that scenario: limiting what autonomous agents can reach inside an organization's data.

That dual focus is what separates the current Cohesity from the backup vendor it started as. Recovery is the floor, not the ceiling. The platform is being positioned as the place where data is both safest and most useful - guarded against the worst day, and queryable on every ordinary one.

Back to that locked screen.

Return to the ransomware note from the opening - the locked files, the running clock, the board demanding answers. A decade ago, that scene often ended badly: backups that were also encrypted, restores that took weeks, data that never fully came back. The spare tire turned out to be flat.

The bet Cohesity made is that this scene should end differently. That the forgotten 80% of data should be consolidated, immutable, instantly recoverable, and smart enough to answer questions. Whether the rumored 2026 IPO arrives at a Rubrik-sized valuation is a story for the markets. The quieter result is already here: the backup closet is now a war room, and somewhere a recovery is finishing in minutes instead of weeks.