Cohesity says HashiCorp, an IBM company, has validated that its Cohesity Data Cloud rebuild capability works with Terraform Self-Managed. The aim is to help organizations rebuild cloud applications after a destructive cyberattack by combining infrastructure-as-code with data backups.

Terraform Self-Managed is IBM’s self-hosted platform for defining and managing cloud infrastructure as code. Cohesity describes this as the first cloud recovery method IBM has validated for interoperability with the product. Cloud rebuild is part of Cohesity Data Cloud Enterprise Edition and is available now.

How it works, according to Cohesity

The company says the approach differs from tools that restore a copy of production as it looked just before an attack, which could carry errors or an attacker’s changes. Instead, Terraform recreates the configuration declared in the organisation’s reviewed and approved code, and Cohesity restores the latest usable application data from backup.

Cohesity lists four steps:

1. Map the application. Cloud Rebuild reads the Terraform code and maps each cloud resource to protect and the order in which to restore it.
2. Save trusted versions. It backs up the Terraform code and the application data over time, so teams can pick a recovery point that pairs the two.
3. Rebuild step by step. It recreates the declared infrastructure from code, then restores data from the latest usable backup. For databases such as Amazon RDS, a guided multistep process helps administrators reconnect the restored database to the application.
4. Show the timing gap. Because code and data may be backed up on separate schedules, it pairs the closest data backup with the chosen code version and shows how far apart the two are.

Cohesity says the feature reads applications through Terraform’s official interface, runs customers’ code unchanged and can fit into existing incident response workflows.

The case for it

Cohesity cites its 2026 Global Cyber Resilience Report, a Vanson Bourne survey of 3,200 security and IT decision-makers. It says 83% of respondents think their recovery plans would need moderate or significant changes to handle attacks that use AI to find and exploit software weaknesses, and only 3% say their plans are ready today. The company says teams often rebuild compromised cloud applications by hand.

“If you build as code, you can now recover as code,” said Vasu Murthy, chief product officer at Cohesity.

Tyler Lynch, Outbound CTO, Automation at IBM Software, said: “Our customers have asked how they can recover from an attack leveraging Terraform and it’s state, and not just build a new environment.”

What to weigh

A validation of interoperability says the products work together. It is not an independent test of recovery speed or security. The release gives no pricing, no customer examples and no recovery-time figures. Rebuilding from code assumes the code itself is intact and was not altered by an attacker, and the release does not address that. Existing Cohesity Data Protect and NetBackup customers can upgrade to Enterprise Edition to get the feature.