Commvault targets November for AI agent recovery on Microsoft Foundry

Commvault announced on November 10 that it plans to extend AgentRecover, its enterprise AI recovery product, to Microsoft Foundry and Amazon Bedrock AgentCore. It is targeting November for early access on Foundry and December for early access on AgentCore. These are the first agent platforms Commvault plans to support in this expansion.

The product is designed to give IT and security teams a way to investigate an agent’s actions and decide what to restore after an unwanted change. If an agent updates a record in a business application, for example, a recovery team can investigate the app and its data alongside the agent’s own settings. Commvault outlined the idea in April under the name AI Protect.

Finding affected systems in the activity record

Commvault says AgentRecover can identify agents on supported platforms and map the data, tools and applications they depend on. It can also show infrastructure, configurations and identities associated with their work. If two agents use the same application, that map gives investigators a way to see what the agent involved in an incident could access.

The activity audit puts individual actions next to resources associated with them. A dependency map can narrow the list of systems to investigate, while an activity record helps show which ones may have been affected by a particular action. An application call may still need investigation to establish which records changed. Commvault says the same information can be reviewed by data security, infrastructure and recovery teams when they decide how to respond.

Teams can also review protection status for the resources an agent uses. If two connected applications have different backup coverage, the inventory can show where a team needs to address a gap. The inventory can inform a backup policy review. The recovery points available for a restore depend on the backups in place for each resource.

Restoring a configuration or a broader set of systems

Prompts, connected tools, guardrails and settings are among the types of resources Commvault says it is designing AgentRecover to protect. The company says the recoverable items vary by platform and release. Recovery of an application or database an agent uses draws on separate protection capabilities for that system. Commvault lists data warehouses, vector databases and business applications among the supported workload types.

An incident confined to an agent’s configuration can call for a smaller restore. If an application and its data were also affected, a team can consider returning several components to an earlier state together. The choice depends on the incident and the recovery options available for those components. Commvault describes restoring supported resources to a trusted point in time. It gives no assurance that the tool can undo only the changes made by an agent.

Commvault sells its Cloud Application Recovery product separately and says it may be used where applicable. It also says teams can use AgentRecover alongside its identity recovery and change auditing tools when they need to investigate the identities an agent acted through.

What the two early-access windows cover

Microsoft Foundry Agent Service runs agents configured with instructions and tools. It can also host custom agent code packaged in a container. AWS’s AgentCore includes a runtime, memory that can preserve context across sessions, and a gateway that connects external services as tools. The announcement gave no list of resources that Commvault will be able to recover on each platform when early access starts.

Commvault plans to discuss activity auditing and resource recovery at its SHIFT Virtual event on November 18. The company gave no specific start dates for early access, general release dates or prices for the new capabilities in the announcement.