Back to the Infrastructure Center

Ransomware Recovery Calculator

How long would your business be offline after an attack? Work it out — depending on how you back up today. All values are calculated live, nothing is stored.

Your starting values

Data to restore50 TB
Production data that must be restored after the attack.
Number of systems / VMs20
Servers and VMs that must be checked and brought back up.
Where would you restore from?
Cloud = transfer back over your internet line · Disk = local backup system · Snapshot = immutable restore point on the storage.
Revenue per day (optional)
In euros — makes the downtime tangible as business loss.

Your recovery

Pure data restore
Estimated business loss
Total downtime · incl. analysis & ramp-up
Downtime by backup strategy
Biggest lever
Recommended architecture
Don't forget

Guide values: cloud restore ~4 TB/day (1 Gbit/s line, real-world utilization), local disk backup ~20 TB/day, snapshot rollback almost immediate; plus 1 day of analysis/cleanup and ramp-up depending on the number of systems. Real figures depend on your line, backup system and prioritization — we're happy to review them with you.

The number nobody knows — until it is too late

Whether a ransomware attack becomes a nuisance or an existential crisis is not decided by whether you have a backup — but by how fast you can work again from it. Very few companies know that number.

This calculator shows it to you — and the dramatic difference between backup strategies. As a vendor-independent IT company we help you turn days into hours: with immutable snapshots, a local restore copy and a practiced emergency plan.

Frequently asked questions

Why does restoring from the cloud take so long?

The bottleneck is your internet line: even a fully utilized 1 Gbit/s line realistically moves only a few terabytes per day. With large data sets that turns into weeks — which is why a fast local restore source belongs next to every cloud copy.

What is an immutable snapshot?

An unchangeable restore point directly on the storage system: within its retention period it can be neither encrypted nor deleted — not even by an attacker with admin rights. Rollback takes minutes instead of days.

What is part of recovery besides the data restore?

Analyzing and cleaning up the attack, checking systems before restart, prioritizing the most important applications — and communication. A practiced emergency plan often saves more time than faster hardware.