# Avoid Paying Ransoms with Automated Ransomware Alerts and Remediation Protect your SaaS data with ransomware alerts, automated remediation, and safe snapshot recovery – Available for Google Workspace and Microsoft 365. ### Why do you need ransomware detection and recovery? - Undetected ransomware attacks Failure to detect ransomware can result in extensive data loss and can have an adverse financial impact. - Operational disruptions Ransomware attacks can disrupt business operations and negatively impact productivity. - Time-consuming recovery Manual recovery processes delay threat resolution and cause financial and reputational damage. #### Ransomware detection with automated recovery workflows Available for Google Workspace and Microsoft 365. Detect ransomware fast Get real-time notifications when SysCloud identifies batch programs, executables, macro-enabled ransomware files, and ransomware-encrypted files in your backup archives. Contain risk with Action Flows Trigger automated remediation to transfer ownership or grant access, remove sharing (all, external, or link), optionally notify the admin or content owner, and delete malicious files. ## Granular recovery options for ransomware encrypted or deleted files Identify ransomware encrypted files Detect ransomware-encrypted files, allow admins to delete these files from both backup archives and SaaS applications, and assist them in identifying files deleted due to ransomware encryption. Recover clean data Easily identify files deleted by ransomware and select a safe snapshot to restore clean versions quickly. ### View all ransomware threats in our unified dashboard Get immediate alerts on the presence of ransomware files & ransomware-encrypted files. Easily drill down from our intuitive dashboard to recover your data. ### Frequently asked questions If you’re hesitating, do not worry, we are here to explain everything you might want to know. Let us help! ### Which applications are supported by SysCloud's Ransomware Protection? SysCloud's ransomware protection is available for Google Workspace and Microsoft 365. ### What actions can I take for ransomware files detected by SysCloud? Use Action Flows to automate remediation or apply fixes manually. Action Flows can transfer ownership or grant access, remove sharing (all sharing, external collaborators, or link sharing), and optionally notify the admin and content owner. You can also mark as true positive, dismiss, or delete the flagged files. ### What actions can I take for ransomware-encrypted files? Recover using a safe snapshot, then remediate access and exposure. You can restore from a safe snapshot and use Action Flows to transfer ownership or grant access, remove sharing (all sharing, external collaborators, or link sharing), and optionally notify the admin and content owner. You can also mark as true positive, dismiss, or delete the affected files. ### Does SysCloud scan for encrypted files shared by external users? Yes, SysCloud scans for ransomware-encrypted files in the backup archives, including those shared by external users. ### How to purchase this add-on? Contact sales to purchase the ransomware detection and recovery add-on. ### Explore more Add-Ons! Security & Compliance eDiscovery search Data change insights #### We take security and compliance seriously