In a major step to strengthen cloud security, Google has made its advanced ransomware detection and file restoration features for Google Drive generally available to organizations worldwide.
These features were first introduced in beta in September 2025 and are designed to reduce the impact of malware attacks on both personal and enterprise systems. With the full rollout, Google has significantly upgraded its threat detection engine.
Powered by an improved AI model, the system can now detect 14 times more infections compared to the beta version. It can identify a wider range of ransomware encryption methods and respond faster to malicious activity.
During the testing phase, thousands of users successfully validated the file restoration process, proving its reliability and scalability in real-world scenarios.
The updated system includes key security features. When ransomware activity is detected on a device running Google Drive for desktop, file syncing is immediately paused to prevent infected files from overwriting clean cloud backups.
At the same time, users receive a desktop alert, while administrators are notified via email and through the Admin console security center. The platform also allows bulk file restoration, enabling users to roll back files to their original, unencrypted versions before the attack.
These protections are enabled by default across organisations, with administrators having the option to manage settings at the Organizational Unit level through the Google Workspace Admin console.
For full functionality, organisations must use Google Drive for desktop version 114 or later. Older versions can pause syncing but do not show warning notifications.
The bulk file restoration feature is available to all Google Workspace users, Workspace Individual subscribers, and personal Google account holders. However, automated ransomware detection is limited to specific plans, including Business Standard and Plus, Enterprise Starter, Standard and Plus, Education Standard and Plus, and Frontline Standard and Plus.
Also read: Viksit Workforce for a Viksit Bharat
Do Follow: The Mainstream LinkedIn | The Mainstream Facebook | The Mainstream Youtube | The Mainstream Twitter
About us:
The Mainstream is a premier platform delivering the latest updates and informed perspectives across the technology business and cyber landscape. Built on research-driven, thought leadership and original intellectual property, The Mainstream also curates summits & conferences that convene decision makers to explore how technology reshapes industries and leadership. With a growing presence in India and globally across the Middle East, Africa, ASEAN, the USA, the UK and Australia, The Mainstream carries a vision to bring the latest happenings and insights to 8.2 billion people and to place technology at the centre of conversation for leaders navigating the future.