Object First, founded by Ratmir Timashev and Andrei Baronov (also founders of Veeam), has developed a proposal that redefines backup protection with an approach based on absolute immutability and Zero Trust data resilience.
Object First in Spain: Growth and Ecosystem.
Since opening its Barcelona office in February 2024, Object First has consolidated its presence with 37 employees and a solid network of strategic partners. Currently, Abast, ContecNow, and Seidor have achieved Gold status in the channel program, reflecting the company's commitment to the Iberian region.
Its clients span sectors such as healthcare, insurance, education, public administration, manufacturing, and technology, all sharing a common concern: securing their data against ransomware.
Ransomware and the Urgency of Immutability
Recent attacks on Spanish organizations—such as Telefónica, the Hospital Clínic of Barcelona, and the Calvià City Council—illustrate a clear trend: cybercriminals are no longer just seeking to encrypt operational data, but also to delete backups to prevent recovery.
Therefore, the immutability of the primary backup is critical. This property guarantees that the data cannot be modified or deleted, even if an attacker compromises administrative credentials or the storage system itself.
Zero Trust Data Resilience: The Object First Approach.
Object First extends Zero Trust principles to the backup world through its Zero Trust Data Resilience (ZTDR) architecture. This model is based on four pillars:
Explicit verification: every access attempt is evaluated using identity, context, and multi-factor authentication (MFA).
Least privilege: risk reduction through segmented access.
Minimizing the attack radius: separation of backup software and storage.
Compromise assumption: the system is designed to withstand even compromised privileged access.
The goal: to ensure data recoverability regardless of the nature of the attack.
Ootbi: Absolute Immutability “Out-of-the-Box”
The Ootbi (Out-of-the-Box Immutability) solution offers an immutable, secure storage platform that is easy to deploy in 15 minutes.
Key features:
Out-of-the-box immutability: no complex configuration or external intervention required.
Zero Access: not even administrators with the highest privileges can delete data.
Extreme performance: up to 8 GB/s speed, enabling instant recovery.
Full compatibility with Veeam, the de facto standard in enterprise data protection.
An independent assessment by the NCC Group (July 2024) certified that “even if an attacker knows all of a customer’s credentials and secrets, they will not be able to modify the data stored on an Ootbi device.”
Recent Innovations: Mini, Honeypot, and Fleet Manager.
In October 2025, Object First announced three key innovations:
Ootbi Mini: a compact version of the appliance, ideal for branch offices and small and medium-sized businesses, with capacities of 8, 16, and 24 TB.
Honeypot: a decoy environment integrated into Ootbi that detects early attack attempts on Veeam Backup & Replication (VBR) servers, strengthening collaboration between backup and security administrators.
Fleet Manager: a SaaS application for managing multiple clusters and data centers from a single dashboard, currently in open beta for customers.
These innovations reinforce the company's vision: to make immutability accessible and manageable for everyone.
Flexibility and Consumption Models
Object First offers multiple formats and acquisition models (CapEx or consumption) with general availability in EMEA starting in September 2025.
Each Ootbi cluster can scale up to 1.7 PB, reaching a total of 7 PB in Veeam Scale-Out Backup Repository (SOBR) configurations.
Conclusion:
In a landscape where ransomware is a certainty, not a possibility, absolute immutability stands as the last bastion of cyber resilience.
Object First proposes not only a technical solution but a paradigm shift: protecting backups as if they were the company's most valuable asset.
With Ootbi, Zero Trust resilience ceases to be a theoretical concept and becomes a tangible reality, ready to be deployed in any organization that cannot afford to lose its data.
