What Are SafeMode Snapshots, and How Do They Work? SafeMode is essentially an immutable snapshot used to protect your data. The best part is, ransomware can’t delete, modify, or encrypt it! In order to understand “how” we mitigate the impact with SafeMode, we need to quickly discuss the typical sequence of events that occur during a ransomware attack. The intruder gains access to a server or storage device. The intruder starts encrypting your data. The application crashes and operations go offline until you pay the ransom. The ransom is paid, and you can restart the application with access to the unencrypted data (maybe). How Ransomware Attacks Are Different with SafeMode Snapshots How would this event be different if you were protected by SafeMode snapshots? The intruder can still gain access and encrypt your data. But when it comes to deleting SafeMode snapshots, they can’t because they’re locked and protected. Your operations are either not impacted or only minimally interrupted. And no ransom needs to be paid. In other words, you have control over your data, instead of the intruder. SafeMode is also easy to set up and maintain. We provide a cloud-based tool called Pure1® that can assess your environment's vulnerability. We show you where you have exposure points and give you the steps to take to remediate weaknesses, so you’re armed and ready. What makes this even better? SafeMode functionality is built into our products. No complicated setup, no professional services engagement, no compromises.