ProLion CryptoSpike

What ProLion CryptoSpike is

ProLion CryptoSpike analyzes storage access to detect ransomware activity and unusual user behavior. It identifies anomalies in real time and checks file extensions against a ProLion-provided blocklist. When activity looks suspicious, it can block the user automatically and email administrators. File-level traceability helps locate affected files for targeted restoration from snapshots. CryptoSpike collects behavior information through native APIs from supported storage systems: NetApp FAS/AFF and virtual ONTAP, Lenovo DM-Series, Dell PowerScale, Dell Unity, and Dell PowerStore starting with CryptoSpike 3.3. Deployment can be on premises or in the cloud; ProLion says it takes three to five hours. The product integrates with SIEM platforms and can send alerts to monitoring solutions through an API. User-specific data and activity can be restricted under a two-person four-eyes principle. For distributed environments, it supports scaling through agents, with ProLion recommending LandscapeManager for a shared management interface. It is self-hosted and supports Windows Server 2019, 2022, and 2025, with CryptoSpike deployed as a VM and its Security Driver installed on Windows servers. Pricing is provided on request.