HPE Zerto
Continuous data protection with seconds-level RPO, minutes-level RTO, and now agentic-AI governance built in
Overview
HPE Zerto Software is continuous data protection (CDP) and disaster recovery software: it replicates every write in real time instead of taking periodic backup snapshots, so a disaster, outage, or ransomware attack costs seconds of data loss and minutes of downtime rather than the hours-to-days gap that scheduled backup leaves behind. It is built for IT teams running always-on virtualized and cloud workloads, federal and DoD agencies, SLED institutions, healthcare systems, and enterprises, who cannot tolerate stale recovery points or multi-day recovery windows.
Under the hood, Zerto groups the VMs that make up an application into a Virtual Protection Group (VPG) and maintains a rolling journal of every change to that group, so you can rewind to any point in time, down to seconds before an encryption event started, without pre-staging snapshots. Zerto 10.9, released in 2026, added bidirectional cross-hypervisor CDP replication between VMware vCenter and HPE Morpheus VM Essentials with RPOs in seconds and RTOs in minutes, a dedicated Cyber Recovery VPG type for ransomware response, and Microsoft Defender for Endpoint integration for automated threat-based checkpoint tagging.
It is sold in two core editions, Enterprise Cloud Edition and Advanced Resilience Edition, licensed per protected VM as perpetual or subscription software, and it reaches beyond on-premises virtualization into Microsoft Azure, AWS, and Google Cloud VMware Engine. Pair it with the HPE Cyber Resilience Vault, built on HPE Alletra Storage MP, ProLiant, and Aruba Networking, for a physically air-gapped, zero-trust recovery environment when the threat is a destructive, backup-aware cyberattack rather than a routine outage.

Why HPE Zerto
Backup snapshots leave a gap measured in hours; Zerto's continuous data protection shrinks that gap to seconds and turns multi-day recovery into a minutes-long, orchestrated failover. For federal, SLED, and healthcare buyers running systems that cannot go dark, that difference is the entire risk calculus: it is the gap ransomware actors exploit, and the gap auditors ask about. Zerto closes it without locking you into one hypervisor or cloud, and its 2026 roadmap extends the same rewind logic to autonomous AI agents.
Recover in minutes, not days
Continuous data protection delivers RPOs in seconds and RTOs in minutes for disasters, ransomware, and migrations, versus hours-to-days gaps left by snapshot-based backup.
Beat ransomware with real-time detection
Inline encryption analysis flags an attack as it happens, and journal-based recovery rewinds workloads to a clean point seconds before the damage, without paying a ransom.
Cross-hypervisor replication to HPE Morpheus VM Essentials
Zerto 10.9 adds bidirectional CDP replication between VMware vCenter and HPE Morpheus VM Essentials, plus one-way migration, so hypervisor moves do not mean giving up DR coverage.
Move workloads without lock-in
Orchestrated, real-time replication migrates applications between on-premises platforms, Azure, AWS, and Google Cloud VMware Engine with no forced platform commitment.
Test without disruption
Run full non-disruptive recovery tests in an isolated network bubble anytime, generating the documented evidence auditors and compliance reviews require.
Air-gapped recovery with the Cyber Resilience Vault
Pair Zerto with the HPE Cyber Resilience Vault, built on HPE Alletra Storage MP, ProLiant, and Aruba Networking, for a physically isolated, zero-trust recovery environment with a 100% data availability guarantee on landing-zone storage.
Governance for agentic AI workloads
A capability announced at HPE Discover 2026 (targeted Q4 2026) extends CDP to monitor autonomous AI agent actions and rewind a workload if an agent goes rogue, ahead of most DR tools even considering the problem.
What it does
Continuous Data Protection (CDP)
Replicates every write in real time instead of periodic snapshots, delivering RPOs measured in seconds and RTOs in minutes so the freshest recovery point is never hours or days stale.
Virtual Protection Groups (VPGs)
Bundles the VMs that must recover together as one consistency-grouped unit, preserving application integrity for multi-VM workloads like SQL clusters, SAP, and Active Directory.
Journal-Based Recovery
Maintains a rolling journal of every change so you can rewind a workload to any point, down to seconds before a ransomware encryption event, without pre-staged snapshots.
Cyber Recovery VPGs and encryption detection
A dedicated VPG type built for ransomware response isolates recovery targets and pairs with an inline encryption analyzer that flags suspicious activity as it happens, pinpointing a clean restore point.
Cross-hypervisor replication to HPE Morpheus VM Essentials
Zerto 10.9 replicates bidirectionally between VMware vCenter and HPE Morpheus VM Essentials with RPOs in seconds and RTOs in minutes, plus one-way VMware to VM Essentials migration for hypervisor moves.
Multi-cloud reach: Azure, AWS, and Google Cloud VMware Engine
Extends the same continuous replication and orchestrated recovery to Microsoft Azure (including Azure VMware Solution), AWS, and Google Cloud VMware Engine for cloud DR, cyber recovery, and cross-platform mobility.
Non-disruptive DR testing and orchestration
Runs full failover tests in an isolated network bubble without touching production, generating the documented test evidence auditors and compliance frameworks require.
Agent-action monitoring for agentic AI environments
Announced at HPE Discover 2026, upcoming Zerto capability (targeted Q4 2026) uses continuous data protection to detect rogue autonomous-agent actions and rewind affected workloads to a clean, trusted state.
The HPE Zerto lineup
HPE Zerto Software (Enterprise Cloud Edition)
The standard continuous-data-protection, disaster-recovery, and workload-mobility edition for protecting and migrating virtualized estates across on-premises and hybrid/multi-cloud.
Per-VM licensing; perpetual or subscription; VMware, HPE Morpheus VM Essentials, Hyper-V, Azure, AWS, Google Cloud VMware Engine
HPE Zerto Software (Advanced Resilience Edition)
Everything in Enterprise Cloud Edition plus dedicated Cyber Recovery VPGs and the ability to run inside an HPE Storage Cyber Resilience Vault; upgrade SKUs exist from ECE.
Per-VM licensing; adds Cyber Recovery VPGs and offline vault operation
HPE Zerto Migration license
For one-time workload moves, cloud migrations, or data center refreshes where you need replication only for the migration window.
Six-month time-boxed license; upgradeable to ECE
HPE Zerto for Microsoft Azure
Extends continuous replication, recovery, and migration to Azure for hybrid and public-cloud workload protection.
CDP replication and DR to and from Azure and Azure VMware Solution
HPE Zerto for AWS
The same continuous replication and orchestrated recovery on AWS for cloud DR, cyber recovery, and cross-platform mobility.
CDP replication and orchestrated recovery on AWS
HPE Zerto on Google Cloud VMware Engine
Migrates and protects VMware workloads on Google Cloud VMware Engine using familiar VMware-native tools and Zerto's replication engine.
CDP replication and DR to Google Cloud VMware Engine
HPE Cyber Resilience Vault
A companion solution pairing Zerto's replication and journal with isolated, immutable HPE hardware for rapid recovery from destructive cyberattacks.
Built on HPE Alletra Storage MP, ProLiant, and Aruba Networking; zero-trust, air-gapped architecture
At a glance
- Recovery Point Objective (RPO)
- Seconds, via continuous data protection replication rather than periodic snapshots
- Recovery Time Objective (RTO)
- Minutes, via automated, orchestrated failover
- Editions
- Enterprise Cloud Edition (ECE) and Advanced Resilience Edition (ARE); ECE-to-ARE upgrade SKUs available
- Licensing model
- Per protected VM, in volume packs or individually; perpetual (Tech Care required) or subscription (Tech Care included)
- Migration license
- Six-month time-boxed license for one-time workload moves, upgradeable to ECE
- Supported hypervisors
- VMware vCenter and HPE Morpheus VM Essentials (HVM), with bidirectional cross-hypervisor CDP replication in Zerto 10.9
- Supported public clouds
- Microsoft Azure (including Azure VMware Solution), AWS, and Google Cloud VMware Engine
- Ransomware defenses
- Real-time encryption detection, Cyber Recovery VPGs, journal-based rewind, Microsoft Defender for Endpoint integration
- Current version
- Zerto 10.9 (released 2026)
- Companion vault architecture
- HPE Cyber Resilience Vault: HPE Alletra Storage MP, ProLiant, and Aruba Networking in a zero-trust, air-gapped design
100% data availability guarantee
on Cyber Resilience Vault landing-zone storage, from HPE Alletra Storage MP(vendor-published figure)
How to buy HPE Zerto
HPE Zerto Software is sold as software licenses tied to protected VM count, not hardware, so procurement is simpler than a storage refresh but still needs the right edition and contract vehicle for your buyer type.
Enterprise Cloud Edition (ECE)
The standard edition: continuous replication, disaster recovery, ransomware resilience, and multi-cloud mobility, licensed per protected VM in volume packs or individually, as perpetual (with Tech Care) or subscription (Tech Care included).
Advanced Resilience Edition (ARE)
Everything in ECE plus Cyber Recovery VPGs and offline operation inside an HPE Storage Cyber Resilience Vault; ECE-to-ARE upgrade SKUs let you step up without a rip-and-replace. Zerto 10.9 lets ARE, ECE, and Migration licenses coexist on one ZVM cluster.
Migration license
A time-boxed, six-month license for one-time workload moves, cloud migrations, or data center refreshes, with a straightforward upgrade path to ECE if you decide to keep replicating long-term.
Federal and public-sector contract paths
As a TAA-compliant HPE partner, we quote HPE Zerto for GPC, SAP, FAR-based orders, and GSA eBuy buyers, with GPC/purchase-card payment and multi-year term structuring available.
Request a configuration through Uniqcli
Tell us your VM count, RPO/RTO targets, DR target (second site vs. cloud vs. Cyber Resilience Vault), and we will scope the right edition, size the license pack, and return a formal quote.
Where it fits
Frequently asked
How is HPE Zerto different from traditional backup?
Traditional backup relies on periodic snapshots, so the freshest recovery point can be hours or days old when an incident hits. HPE Zerto Software replicates every write in real time via continuous data protection (CDP), keeping RPOs in seconds and RTOs in minutes across VMware, HPE Morpheus VM Essentials, and public cloud.
What platforms does HPE Zerto Software support?
VMware vCenter, HPE Morpheus VM Essentials, Microsoft Hyper-V, Microsoft Azure (including Azure VMware Solution), AWS, and Google Cloud VMware Engine. Zerto 10.9 added bidirectional cross-hypervisor CDP replication between vCenter and VM Essentials with seconds-level RPO and minutes-level RTO.
What is the difference between Enterprise Cloud Edition and Advanced Resilience Edition?
Enterprise Cloud Edition (ECE) covers standard continuous replication, disaster recovery, ransomware resilience, and multi-cloud mobility. Advanced Resilience Edition (ARE) includes everything in ECE plus Cyber Recovery VPGs and the ability to run offline inside an HPE Storage Cyber Resilience Vault. Both are licensed per protected VM, and ECE-to-ARE upgrade SKUs exist so you can step up later.
Can Zerto actually stop a ransomware attack from causing data loss?
It cannot block the initial intrusion, but it drastically shrinks the damage: real-time encryption detection flags suspicious activity as it happens, Cyber Recovery VPGs isolate recovery targets, and journal-based recovery rewinds workloads to a clean point seconds before the attack, so you recover without paying a ransom. Pairing it with the HPE Cyber Resilience Vault (built on HPE Alletra Storage MP, ProLiant, and Aruba Networking) adds a physically air-gapped, zero-trust recovery environment with immutable copies.
How is HPE Zerto licensed and how do we size it?
Licensing is per protected VM, sold in volume-based packs or individually, as perpetual (with Tech Care required) or subscription (Tech Care included). Sizing depends on protected VM count, RPO/RTO targets, retention needs, and your DR target (second site, cloud, or Cyber Resilience Vault). As your authorized HPE partner we scope the configuration and quote it; a trial is available to validate fit first.
Where do we buy HPE Zerto on a federal or GPC contract?
We are an authorized HPE and HPE Aruba Networking partner and quote HPE Zerto Software for federal, SLED, healthcare, and enterprise buyers through GPC, SAP, FAR-based orders, and GSA eBuy paths, with GPC/purchase-card payment and multi-year terms available. Start a configuration through our quote page and we will return sizing and pricing.
What is the Zerto Cyber Resilience Vault and do we need it?
It is an offline, physically air-gapped recovery environment built on HPE Alletra Storage MP, HPE ProLiant, HPE Aruba Networking, and Zerto Software, using a zero-trust architecture across three pillars: replicate and detect, isolate and lock, and test and recover. HPE Alletra Storage MP brings a 100% data availability guarantee to the vault's landing-zone storage. It matters most for organizations facing destructive, backup-aware ransomware or that must meet audit standards like HIPAA, FISMA, NIST SP 800-53, or DORA.
How do we buy it through Uniqcli?
Tell us your protected VM count and recovery objectives and we will scope the right edition (ECE, ARE, or a Migration license) and return a quote. Start on our [quote page](/quote) or build a full configuration in the [BOM tool](/bom) alongside the HPE storage and compute it protects.
Works with
HPE Zerto Software is the resilience layer in HPE's software-defined data center stack, sitting alongside orchestration, observability, and the storage and compute it protects.
Related in Storage

HPE Alletra dHCI
Disaggregated HCI: ProLiant compute and Alletra storage scale independently, six-nines availability guaranteed

HPE Alletra Storage
One HPE storage portfolio from entry SAN to NVIDIA-Certified AI object storage, with contractual SLAs instead of marketing promises

HPE Alletra Storage MP
Disaggregated block, file, and object storage now with 6-node scaling and compensation-backed cyber, energy, and RTO/RPO SLAs
Shop HPE Zerto in the catalog
See all results
Zerto Virtual Enterprise Cloud Edition
R7K82AAE
Zerto Virtual Enterprise Cloud Edition

HPE Zerto Virtual Enterprise Cloud Edition
R6J72AAE
HPE Zerto Virtual Enterprise Cloud Edition

Zerto Virtual Enterprise Cloud Edition
H36NPA1
Zerto Virtual Enterprise Cloud Edition

Zerto Enterprise Replication
S4X72AAE
Zerto Enterprise Replication

Zerto Virtual Replication
S6J46AAE
Zerto Virtual Replication

Zerto Virtual Enterprise Cloud Edition
H36NNA1
Zerto Virtual Enterprise Cloud Edition

Zerto Migration - License
S4X73AAE
Zerto Migration - License
Build your HPE bill of materials.
Send us the requirement, the project, or an existing quote to beat. We come back with a validated, TAA-compliant HPE configuration and a real price, often below list.
connect [at] getuniqcli.com · Chicago, IL