Immutability & WORM

Immutable backups are your last line of defense: even a compromised admin or ransomware cannot alter or delete them before their retention expires.

What you get

• WORM (Write Once, Read Many) volumes — once written, data cannot be changed.
• Retention locks — volumes can’t be recycled or pruned until their Volume Retention elapses (see the Pool reference).
• Object-lock targets — when writing to S3/object storage, NGBackup honors bucket object-lock for cloud-side immutability.
• Fail-closed semantics — no silent data loss if a component is unavailable.

Combine immutability with Ransomware detection and Encryption for defense in depth.