Skip to content
Uniqcli

HPE Zerto

Continuous data protection with seconds-level RPO, minutes-level RTO, and now agentic-AI governance built in

Overview

HPE Zerto Software is continuous data protection (CDP) and disaster recovery software: it replicates every write in real time instead of taking periodic backup snapshots, so a disaster, outage, or ransomware attack costs seconds of data loss and minutes of downtime rather than the hours-to-days gap that scheduled backup leaves behind. It is built for IT teams running always-on virtualized and cloud workloads, federal and DoD agencies, SLED institutions, healthcare systems, and enterprises, who cannot tolerate stale recovery points or multi-day recovery windows.

Under the hood, Zerto groups the VMs that make up an application into a Virtual Protection Group (VPG) and maintains a rolling journal of every change to that group, so you can rewind to any point in time, down to seconds before an encryption event started, without pre-staging snapshots. Zerto 10.9, released in 2026, added bidirectional cross-hypervisor CDP replication between VMware vCenter and HPE Morpheus VM Essentials with RPOs in seconds and RTOs in minutes, a dedicated Cyber Recovery VPG type for ransomware response, and Microsoft Defender for Endpoint integration for automated threat-based checkpoint tagging.

It is sold in two core editions, Enterprise Cloud Edition and Advanced Resilience Edition, licensed per protected VM as perpetual or subscription software, and it reaches beyond on-premises virtualization into Microsoft Azure, AWS, and Google Cloud VMware Engine. Pair it with the HPE Cyber Resilience Vault, built on HPE Alletra Storage MP, ProLiant, and Aruba Networking, for a physically air-gapped, zero-trust recovery environment when the threat is a destructive, backup-aware cyberattack rather than a routine outage.

Request a quote
HPE Zerto

Why HPE Zerto

Backup snapshots leave a gap measured in hours; Zerto's continuous data protection shrinks that gap to seconds and turns multi-day recovery into a minutes-long, orchestrated failover. For federal, SLED, and healthcare buyers running systems that cannot go dark, that difference is the entire risk calculus: it is the gap ransomware actors exploit, and the gap auditors ask about. Zerto closes it without locking you into one hypervisor or cloud, and its 2026 roadmap extends the same rewind logic to autonomous AI agents.

Recover in minutes, not days

Continuous data protection delivers RPOs in seconds and RTOs in minutes for disasters, ransomware, and migrations, versus hours-to-days gaps left by snapshot-based backup.

Beat ransomware with real-time detection

Inline encryption analysis flags an attack as it happens, and journal-based recovery rewinds workloads to a clean point seconds before the damage, without paying a ransom.

Cross-hypervisor replication to HPE Morpheus VM Essentials

Zerto 10.9 adds bidirectional CDP replication between VMware vCenter and HPE Morpheus VM Essentials, plus one-way migration, so hypervisor moves do not mean giving up DR coverage.

Move workloads without lock-in

Orchestrated, real-time replication migrates applications between on-premises platforms, Azure, AWS, and Google Cloud VMware Engine with no forced platform commitment.

Test without disruption

Run full non-disruptive recovery tests in an isolated network bubble anytime, generating the documented evidence auditors and compliance reviews require.

Air-gapped recovery with the Cyber Resilience Vault

Pair Zerto with the HPE Cyber Resilience Vault, built on HPE Alletra Storage MP, ProLiant, and Aruba Networking, for a physically isolated, zero-trust recovery environment with a 100% data availability guarantee on landing-zone storage.

Governance for agentic AI workloads

A capability announced at HPE Discover 2026 (targeted Q4 2026) extends CDP to monitor autonomous AI agent actions and rewind a workload if an agent goes rogue, ahead of most DR tools even considering the problem.

What it does

Continuous Data Protection (CDP)

Replicates every write in real time instead of periodic snapshots, delivering RPOs measured in seconds and RTOs in minutes so the freshest recovery point is never hours or days stale.

Virtual Protection Groups (VPGs)

Bundles the VMs that must recover together as one consistency-grouped unit, preserving application integrity for multi-VM workloads like SQL clusters, SAP, and Active Directory.

Journal-Based Recovery

Maintains a rolling journal of every change so you can rewind a workload to any point, down to seconds before a ransomware encryption event, without pre-staged snapshots.

Cyber Recovery VPGs and encryption detection

A dedicated VPG type built for ransomware response isolates recovery targets and pairs with an inline encryption analyzer that flags suspicious activity as it happens, pinpointing a clean restore point.

Cross-hypervisor replication to HPE Morpheus VM Essentials

Zerto 10.9 replicates bidirectionally between VMware vCenter and HPE Morpheus VM Essentials with RPOs in seconds and RTOs in minutes, plus one-way VMware to VM Essentials migration for hypervisor moves.

Multi-cloud reach: Azure, AWS, and Google Cloud VMware Engine

Extends the same continuous replication and orchestrated recovery to Microsoft Azure (including Azure VMware Solution), AWS, and Google Cloud VMware Engine for cloud DR, cyber recovery, and cross-platform mobility.

Non-disruptive DR testing and orchestration

Runs full failover tests in an isolated network bubble without touching production, generating the documented test evidence auditors and compliance frameworks require.

Agent-action monitoring for agentic AI environments

Announced at HPE Discover 2026, upcoming Zerto capability (targeted Q4 2026) uses continuous data protection to detect rogue autonomous-agent actions and rewind affected workloads to a clean, trusted state.

The HPE Zerto lineup

HPE Zerto Software (Enterprise Cloud Edition)

The standard continuous-data-protection, disaster-recovery, and workload-mobility edition for protecting and migrating virtualized estates across on-premises and hybrid/multi-cloud.

Per-VM licensing; perpetual or subscription; VMware, HPE Morpheus VM Essentials, Hyper-V, Azure, AWS, Google Cloud VMware Engine

HPE Zerto Software (Advanced Resilience Edition)

Everything in Enterprise Cloud Edition plus dedicated Cyber Recovery VPGs and the ability to run inside an HPE Storage Cyber Resilience Vault; upgrade SKUs exist from ECE.

Per-VM licensing; adds Cyber Recovery VPGs and offline vault operation

HPE Zerto Migration license

For one-time workload moves, cloud migrations, or data center refreshes where you need replication only for the migration window.

Six-month time-boxed license; upgradeable to ECE

HPE Zerto for Microsoft Azure

Extends continuous replication, recovery, and migration to Azure for hybrid and public-cloud workload protection.

CDP replication and DR to and from Azure and Azure VMware Solution

HPE Zerto for AWS

The same continuous replication and orchestrated recovery on AWS for cloud DR, cyber recovery, and cross-platform mobility.

CDP replication and orchestrated recovery on AWS

HPE Zerto on Google Cloud VMware Engine

Migrates and protects VMware workloads on Google Cloud VMware Engine using familiar VMware-native tools and Zerto's replication engine.

CDP replication and DR to Google Cloud VMware Engine

HPE Cyber Resilience Vault

A companion solution pairing Zerto's replication and journal with isolated, immutable HPE hardware for rapid recovery from destructive cyberattacks.

Built on HPE Alletra Storage MP, ProLiant, and Aruba Networking; zero-trust, air-gapped architecture

At a glance

Recovery Point Objective (RPO)
Seconds, via continuous data protection replication rather than periodic snapshots
Recovery Time Objective (RTO)
Minutes, via automated, orchestrated failover
Editions
Enterprise Cloud Edition (ECE) and Advanced Resilience Edition (ARE); ECE-to-ARE upgrade SKUs available
Licensing model
Per protected VM, in volume packs or individually; perpetual (Tech Care required) or subscription (Tech Care included)
Migration license
Six-month time-boxed license for one-time workload moves, upgradeable to ECE
Supported hypervisors
VMware vCenter and HPE Morpheus VM Essentials (HVM), with bidirectional cross-hypervisor CDP replication in Zerto 10.9
Supported public clouds
Microsoft Azure (including Azure VMware Solution), AWS, and Google Cloud VMware Engine
Ransomware defenses
Real-time encryption detection, Cyber Recovery VPGs, journal-based rewind, Microsoft Defender for Endpoint integration
Current version
Zerto 10.9 (released 2026)
Companion vault architecture
HPE Cyber Resilience Vault: HPE Alletra Storage MP, ProLiant, and Aruba Networking in a zero-trust, air-gapped design

100% data availability guarantee

on Cyber Resilience Vault landing-zone storage, from HPE Alletra Storage MP(vendor-published figure)

How to buy HPE Zerto

HPE Zerto Software is sold as software licenses tied to protected VM count, not hardware, so procurement is simpler than a storage refresh but still needs the right edition and contract vehicle for your buyer type.

Enterprise Cloud Edition (ECE)

The standard edition: continuous replication, disaster recovery, ransomware resilience, and multi-cloud mobility, licensed per protected VM in volume packs or individually, as perpetual (with Tech Care) or subscription (Tech Care included).

Advanced Resilience Edition (ARE)

Everything in ECE plus Cyber Recovery VPGs and offline operation inside an HPE Storage Cyber Resilience Vault; ECE-to-ARE upgrade SKUs let you step up without a rip-and-replace. Zerto 10.9 lets ARE, ECE, and Migration licenses coexist on one ZVM cluster.

Migration license

A time-boxed, six-month license for one-time workload moves, cloud migrations, or data center refreshes, with a straightforward upgrade path to ECE if you decide to keep replicating long-term.

Federal and public-sector contract paths

As a TAA-compliant HPE partner, we quote HPE Zerto for GPC, SAP, FAR-based orders, and GSA eBuy buyers, with GPC/purchase-card payment and multi-year term structuring available.

Request a configuration through Uniqcli

Tell us your VM count, RPO/RTO targets, DR target (second site vs. cloud vs. Cyber Resilience Vault), and we will scope the right edition, size the license pack, and return a formal quote.

Where it fits

Ransomware detection, journal-based rewind, and clean recovery without paying a ransom
Disaster recovery for always-on healthcare EHR, imaging, and clinical systems
Federal and DoD continuity-of-operations planning on GPC, SAP, FAR, and GSA eBuy contracts
Hybrid and multi-cloud workload migration across VMware, Azure, AWS, and Google Cloud VMware Engine
Non-disruptive DR and compliance testing for HIPAA, FISMA, NIST 800-53, and DORA audit evidence
Cross-hypervisor migration from VMware to HPE Morpheus VM Essentials without losing DR coverage
Air-gapped cyber recovery via the HPE Cyber Resilience Vault for destructive, backup-aware attacks

Frequently asked

How is HPE Zerto different from traditional backup?

Traditional backup relies on periodic snapshots, so the freshest recovery point can be hours or days old when an incident hits. HPE Zerto Software replicates every write in real time via continuous data protection (CDP), keeping RPOs in seconds and RTOs in minutes across VMware, HPE Morpheus VM Essentials, and public cloud.

What platforms does HPE Zerto Software support?

VMware vCenter, HPE Morpheus VM Essentials, Microsoft Hyper-V, Microsoft Azure (including Azure VMware Solution), AWS, and Google Cloud VMware Engine. Zerto 10.9 added bidirectional cross-hypervisor CDP replication between vCenter and VM Essentials with seconds-level RPO and minutes-level RTO.

What is the difference between Enterprise Cloud Edition and Advanced Resilience Edition?

Enterprise Cloud Edition (ECE) covers standard continuous replication, disaster recovery, ransomware resilience, and multi-cloud mobility. Advanced Resilience Edition (ARE) includes everything in ECE plus Cyber Recovery VPGs and the ability to run offline inside an HPE Storage Cyber Resilience Vault. Both are licensed per protected VM, and ECE-to-ARE upgrade SKUs exist so you can step up later.

Can Zerto actually stop a ransomware attack from causing data loss?

It cannot block the initial intrusion, but it drastically shrinks the damage: real-time encryption detection flags suspicious activity as it happens, Cyber Recovery VPGs isolate recovery targets, and journal-based recovery rewinds workloads to a clean point seconds before the attack, so you recover without paying a ransom. Pairing it with the HPE Cyber Resilience Vault (built on HPE Alletra Storage MP, ProLiant, and Aruba Networking) adds a physically air-gapped, zero-trust recovery environment with immutable copies.

How is HPE Zerto licensed and how do we size it?

Licensing is per protected VM, sold in volume-based packs or individually, as perpetual (with Tech Care required) or subscription (Tech Care included). Sizing depends on protected VM count, RPO/RTO targets, retention needs, and your DR target (second site, cloud, or Cyber Resilience Vault). As your authorized HPE partner we scope the configuration and quote it; a trial is available to validate fit first.

Where do we buy HPE Zerto on a federal or GPC contract?

We are an authorized HPE and HPE Aruba Networking partner and quote HPE Zerto Software for federal, SLED, healthcare, and enterprise buyers through GPC, SAP, FAR-based orders, and GSA eBuy paths, with GPC/purchase-card payment and multi-year terms available. Start a configuration through our quote page and we will return sizing and pricing.

What is the Zerto Cyber Resilience Vault and do we need it?

It is an offline, physically air-gapped recovery environment built on HPE Alletra Storage MP, HPE ProLiant, HPE Aruba Networking, and Zerto Software, using a zero-trust architecture across three pillars: replicate and detect, isolate and lock, and test and recover. HPE Alletra Storage MP brings a 100% data availability guarantee to the vault's landing-zone storage. It matters most for organizations facing destructive, backup-aware ransomware or that must meet audit standards like HIPAA, FISMA, NIST SP 800-53, or DORA.

How do we buy it through Uniqcli?

Tell us your protected VM count and recovery objectives and we will scope the right edition (ECE, ARE, or a Migration license) and return a quote. Start on our [quote page](/quote) or build a full configuration in the [BOM tool](/bom) alongside the HPE storage and compute it protects.

Build your HPE bill of materials.

Send us the requirement, the project, or an existing quote to beat. We come back with a validated, TAA-compliant HPE configuration and a real price, often below list.

connect [at] getuniqcli.com · Chicago, IL