Cohesity, the leader in AI and data security, today announced that HashiCorp, an IBM Company, has validated the interoperability of Cohesity Data Cloud’s cloud rebuild capabilities with Terraform Self-Managed. Organizations can now quickly recover cloud applications – infrastructure, configuration, and, most importantly, data – after a destructive cyberattack. The Terraform product can recreate the compromised declared configuration; Cohesity Data Cloud then restores the latest usable application data from backup.

This is the first cloud recovery method IBM has validated for interoperability with Terraform Self-Managed, self-hosted platform for defining and managing cloud infrastructure as code. Cloud rebuild is part of Cohesity Data Cloud Enterprise Edition.

AI is increasing the frequency and severity of cyberattacks, and recovery plans haven't kept pace. Cohesity’s 2026 Global Cyber Resilience Report, a Vanson Bourne survey of 3,200 security and IT decision-makers, found that 83% of surveyed organizations said their recovery plans would need moderate or significant changes to handle attacks that use AI to find and exploit software weaknesses. Only 3% say their plans are ready today. Cloud recovery also lags. When an attack compromises a cloud application, IT teams often rebuild it by hand or rely on tools that piece the environment back together using bespoke methods.

Cohesity cloud rebuild takes a different approach. It uses an organization’s infrastructure-as-code files, which define its cloud networks, servers, and access permissions, as the blueprint for recovery. Terraform uses the organization's reviewed and approved code to recreate the declared configuration, and Cohesity Data Cloud restores the latest usable backed-up application data. Together, they return the application to a trusted state rather than to a copy that may already contain an attacker's changes.

Some recovery tools restore a copy of production as it looked just before an attack, which can include errors or changes made by the attacker. Cloud rebuild instead restores the environment described by the organization’s own reviewed and approved code, returning applications to their declared configuration and restoring protected data from the selected backup.

Cohesity cloud rebuild can read applications through Terraform's official interface and runs customers' code unchanged, maintaining record accuracy. Terraform code recreates the declared configuration, while Cohesity restores application data from backup. What’s more, administrators can integrate cloud rebuild into existing incident response and recovery workflows.

Also Read: How to Safeguard Businesses Against Cybersecurity Threats in 2026

“Attackers using AI move faster than any team can rebuild by hand. Organizations have already codified exactly what their cloud environments should look like in Terraform. Cohesity uses that code to recreate the declared configuration, then restores the latest usable application data from backup. Teams need both to bring the application back. If you build as code, you can now recover as code,” said Vasu Murthy, chief product officer, Cohesity.

“Our customers have asked how they can recover from an attack leveraging Terraform and it's state, and not just build a new environment,” said Tyler Lynch, Outbound CTO, Automation, IBM Software. “We worked with Cohesity to validate how our technologies work together when they use Terraform state to recover cloud applications, the infrastructure they run on, and the data as part of the recovery process.”