HPE Zerto is designed to help U.S. federal agencies sustain uninterrupted operations even when facing cyberattacks, outages, or infrastructure failures.

Key capabilities that support continuity of operations include:

• Continuous Data Protection (CDP) – Captures every change in real time, enabling RPOs measured in seconds and RTOs measured in minutes. This helps you recover to a point just before an incident, even during fast-moving attacks like ransomware.
• Granular journaling – Lets you “rewind” to a precise point in time, often just seconds before disruption, supporting both clean recovery and forensic analysis.
• Real-time encryption detection – Alerts teams to suspicious encryption activity immediately so you can contain threats before they spread.
• Hybrid and multi-cloud recovery – Supports rapid recovery across on-premises and cloud environments, including AWS GovCloud, helping agencies align with FedRAMP, ITAR, and other federal standards.
• Application-centric protection – Protects and recovers entire applications (not just individual VMs), so mission-critical services like citizen portals or intelligence systems come back online as cohesive units.
• Policy-based protection tiers – Lets you prioritize essential services (for example, emergency response or secure communications) in line with COOP and COG frameworks.
• Non-disruptive testing and analytics – Allows regular DR and continuity testing without impacting production, with centralized visibility across multiple sites and data centers.

For high-risk scenarios, the HPE Cyber Resilience Vault adds an isolated, immutable, air-gapped recovery environment built on a zero-trust architecture. It combines HPE Zerto’s continuous data protection with HPE hardware to provide a last line of defense so you can recover even from severe cyber incidents.

Together, these capabilities help agencies detect issues in seconds, recover in minutes, and maintain mission continuity when failure is not an option.

HPE Zerto is built to help agencies rethink and simplify how they move and modernize applications and data across diverse environments.

Agencies often struggle with platform lock-in, rapid technology change, and evolving cloud options. HPE Zerto addresses these challenges by:

• Enabling risk-free migrations – Uses Continuous Data Protection with built-in orchestration and automation to move workloads with minimal downtime and reduced risk.
• Supporting any-to-any mobility – Migrates between different infrastructures, including cross-hypervisor, cross-cloud, and between on-premises and cloud environments.
• Allowing non-disruptive testing – Lets you test recovery and mobility scenarios at any time, with fewer resources and no impact on production, so you can validate plans before executing them.
• Streamlining data center consolidation – Reduces the resources and time needed to consolidate data centers by automating and orchestrating migrations.
• Supporting hybrid and multi-cloud strategies – Provides cross-platform protection for IaaS, PaaS, and SaaS, helping you unlock hybrid and multi-cloud architectures while maintaining control and visibility.

Multiple federal organizations, including the FAA, the U.S. Army, NASA, and the FDIC, use HPE Zerto to modernize operations. By simplifying migrations and ongoing protection, agencies can focus more on mission objectives and less on the mechanics of moving and safeguarding workloads.

HPE Zerto is designed with federal security and compliance needs in mind, helping agencies align with key standards while improving cyber resilience.

Compliance and attestations

• FIPS-validated encryption – As of version 10 update 7, HPE Zerto includes FIPS 140-2-validated encryption, supporting the Federal Information Processing Standard (FIPS) requirements for cryptography on federal systems.
• NIST framework alignment – Helps agencies address the 325 controls in the NIST framework, including contingency planning, incident response, and recovery objectives.
• CISA attestation – As of version 10 update 8, HPE Zerto has CISA attestation for alignment with the NIST Secure Software Development Framework (SSDF), covering secure coding, vulnerability management, security controls, and maintaining an SBOM.
• Supports adherence to widely recognized standards and regulations such as FISMA (Low–High), DFARS 800-171, NIST 800-53, CIS Level 1, ISO 27001, ISO 9001, HIPAA, PCI, and GDPR.
• Automated DR testing and reporting help agencies pass audits and document compliance.

Enterprise-grade security features

• Access controls – Includes SSO, MFA, RBAC, and a built-in identity provider via Keycloak to enforce least-privilege access.
• Audit and logging – Tracks all REST API calls and enforces RBAC, with Syslog forwarding (from version 10 update 8) to integrate with SIEM platforms for centralized monitoring.
• Network security – Uses a minimal exposure principle with only required, documented ports; supports network segmentation, secure communication, and firewall compatibility. Administrators can restrict traffic to trusted IP ranges or internal segments.
• Secure development and operations (SDLC) – Incorporates peer review, automated static code scanning, vulnerability management, secure defaults, and hardened appliances. Security patches are applied promptly, and customers are encouraged to stay current.
• Scanning and vulnerability management – Automated scanning across source code repositories, operating systems, and containers to identify and address vulnerabilities.
• Advanced detection with CrowdStrike Falcon – Through a strategic partnership, CrowdStrike Falcon monitors workloads for ransomware and advanced threats, while HPE Zerto can automatically restore applications and VMs to a clean point just seconds before an attack.

By combining these capabilities, HPE Zerto helps agencies demonstrate compliance, reduce cyber risk, and maintain trust while they modernize and reimagine their IT environments.