Skip to content
Qumulo Launches NeuralProtect™ to Deliver Real-Time AI

Qumulo Launches NeuralProtect™ to Deliver Real-Time AI

Morningstar May 28, 2026

Qumulo Launches NeuralProtect ™ to Deliver Real-Time AI-Driven Ransomware Detection and Prevention

Deep File Inspection at the point-of-write stops attacks before data is encrypted; integration with Cisco Hypershield and Splunk delivers coordinated, enterprise-wide threat containment.

Qumulo , the Accelerated Data company, today announced Qumulo NeuralProtect ™ , a powerful ransomware-resilience solution built to protect data at the storage layer, for detecting and stopping threats before data is encrypted, corrupted, or lost.

Integrated directly into the Qumulo Data Platform, NeuralProtect inspects every file at the precise point-of-write using a series of AI-driven analysis models to detect both known and zero-day threats, instantly isolating malicious activity and enabling rapid recovery. NeuralProtect shifts ransomware protection from reactive recovery to proactive prevention.

As a native capability of Qumulo Core, Azure Native Qumulo (ANQ), and Cloud Native Qumulo (CNQ) deployments, NeuralProtect protects data consistently across on-premises, hybrid, and cloud-native Qumulo environments. It is even more compelling when combined with Cisco Hypershield and Splunk. Together, Qumulo NeuralProtect and Cisco Hypershield enable an instant data-to-network response, quarantining malicious actors across the entire network. Operating with an industry-leading false-positive rate of less than 0.01%, this integrated system reduces detection-to-mitigation time to seconds. It isolates compromised systems and instantly notifies Splunk of the specific client, the malware variant, and the exact point of intrusion, preventing further infection and protecting crucial data for forensics and response resolution.

Ransomware doesn't target your backups first; it targets your live data. NeuralProtect is the first solution built to stop attacks at exactly that point, at the data layer, before a single file is compromised, avoiding costly and lengthy recoveries,” said Kiran Bhageshpur, Qumulo CTO. “Combined with Cisco Hypershield and Splunk, we've built what the industry has long needed: a coordinated cybersecurity architecture that spans storage, infrastructure, and security operations, so enterprises can respond to known and emerging threats without sacrificing business continuity."

Deep File Inspection: Zero-Day Prevention at User-Space Speed

Traditional protection strategies, such as backup platforms, endpoint security, and entropy-based storage detection, remain fundamentally reactive. They rely on indirect anomaly detection rather than guarding live enterprise data where the real risk exists.

NeuralProtect performs Deep File Inspection on every file as it is written, neutralizing threats instantly before data can be lost or encrypted, all without any performance impact. NeuralProtect’s detection engine combines multiple AI models to identify every category of threat including:

When a threat is detected, NeuralProtect can respond autonomously and immediately. The offending user session is terminated, the user or IP address is blocked, defensive snapshots are created, and infected data is quarantined thereby stopping the spread of attacks and accelerating recovery to a clean state.

Coordinated Storage and Network Defense with Cisco Hypershield

NeuralProtect is deeply integrated with Cisco Hypershield to extend protection beyond the storage layer into coordinated, enterprise-wide threat containment. When NeuralProtect detects an attack, the joint solution triggers automated network quarantine, distributed enforcement across workloads and clouds, and rapid incident isolation within seconds.

Telemetry from Qumulo and Cisco flows directly into Splunk via OpenTelemetry integration, giving security operations teams unified visibility and faster, more informed incident response across the entire infrastructure stack. Qumulo and Cisco unify storage intelligence and network enforcement to deliver a coordinated ransomware response that no single vendor can provide on its own.

Qumulo NeuralProtect is now available for enterprise customers running Qumulo on-premises and in hybrid cloud environments, including Azure Native Qumulo.

For more information, please meet with us at the Qumulo booth #4018 at Cisco Live 2026 in Las Vegas on May 31-June 4, and/or visit the Qumulo NeuralProtect webpage at

Qumulo is the only seven-time Leader in the Gartner Magic Quadrant for Distributed File and Object Storage and the foremost provider of cloud data platforms. With exabytes under management and more than 1,000 production customers, Qumulo is trusted by Fortune 500 companies and global enterprises to manage, store, curate, and protect their data, unlocking new possibilities and driving innovation across diverse industries. For more information, visit .

Press Information: Alexa Rey [email protected]

View source version on businesswire.com:

The articles, information, and content displayed on this webpage may include materials prepared and provided by third parties. Such third-party content is offered for informational purposes only and is not endorsed, reviewed, or verified by Morningstar.

Morningstar makes no representations or warranties regarding the accuracy, completeness, timeliness, or reliability of any third-party content displayed on this site. The views and opinions expressed in third-party content are those of the respective authors and do not necessarily reflect the views of Morningstar, its affiliates, or employees.

Morningstar is not responsible for any errors, omissions, or delays in this content, nor for any actions taken in reliance thereon. Users are advised to exercise their own judgment and seek independent financial advice before making any decisions based on such content. The third-party providers of this content are not affiliated with Morningstar, and their inclusion on this site does not imply any form of partnership, agency, or endorsement.