Commvault has launched a new cyber resilience simulation platform aimed at helping organisations test their readiness against increasingly fast and sophisticated AI-driven cyberattacks, as the window between vulnerability discovery and exploitation continues to shrink.
The programme, branded Minutes to Recovery, introduces a scenario-based, hands-on exercise that allows participants to simulate “frontier AI” attacks and evaluate their ability to defend and recover under real-world conditions.
The launch comes amid rising concern over the speed of modern cyber threats, with Commvault citing research showing the average time from vulnerability discovery to exploitation fell to just 29 minutes in 2025—65% faster than the previous year.
Designed for security and IT teams, the simulation places participants in three sequential roles: attacker, defender and recovery specialist. In the first phase, users deploy commonly used AI tools to create and execute an attack, gaining insight into how adversaries leverage automation, personalised phishing and rapid lateral movement.
The exercise then shifts to detection and response, requiring teams to make real-time decisions with incomplete information. Finally, participants are tasked with restoring systems and data to a verified clean state without reintroducing threats.
The approach reflects a broader shift in cybersecurity strategy from static planning to operational readiness. Rather than relying solely on documented recovery procedures, organisations are increasingly expected to demonstrate their ability to respond effectively under pressure.
“The question organisations need to answer is no longer, ‘Do we have a recovery plan?’ but ‘Can we prove it will work under pressure?’” said Anna Griffin, chief market officer at Commvault. “As AI compresses the time between compromise and impact, resilience becomes a measurable business capability.”
The simulation is delivered as a two-hour session and is available globally in six languages, either onsite or through Commvault’s partner network. It introduces a new performance metric—Mean Time to Clean Recovery (MTCR)—which benchmarks how quickly organisations can fully restore operations following an attack, based on observed performance rather than theoretical assumptions.
Industry partners are also expected to play a key role in scaling adoption. Commvault said the platform will be offered through its global ecosystem, enabling partners to engage customers in interactive resilience assessments and strategic discussions.
“Most organisations believe they are prepared for a cyberattack until they are forced to respond in real time,” said Allen Downs, vice president of security and resiliency at Kyndryl. “As cyberattacks become faster and more unpredictable, recovery strategies must evolve to meet this new reality.”
The launch highlights growing enterprise demand for measurable resilience as AI reshapes the threat landscape. With attackers leveraging automation to accelerate breach timelines, the ability to validate recovery capabilities—rather than simply plan for them—is emerging as a critical differentiator for security leaders.
