Immutable storage uses write-once object locking so that backups and critical data cannot be encrypted, altered or deleted, even by an attacker with admin credentials.
My pickWasabiWasabi offers low-cost, S3-compatible storage with object lock and no egress fees.
Options range from object lock on cloud storage to dedicated, hardened backup appliances. Compare the lock modes available, such as governance versus compliance mode, the cost per terabyte, and the egress fees for restores.
Why it works
Attackers target backups first. Immutable copies guarantee that you have something to restore.
What to look for
It should offer a compliance-mode object lock that even admins can't bypass.
Egress and restore costs should be predictable.
It should integrate natively with your backup software.