Veeam closed the loop in January. After Object First posted 183% bookings growth in 2025 — and another 118% year-over-year in Q1 2026 — Veeam confirmed it was acquiring the appliance company its own co-founders built. The immutable backup target appliance is no longer a third-party accessory; it is first-party Veeam strategy now. That changes the buying calculus for anyone shopping for the immutable “+1” copy in a 3-2-1-1-0 design.
This brief compares the three realistic paths as of mid-2026: Object First’s Ootbi appliances, Scality’s ARTESCA+ Veeam HA integrated appliance, and cloud object lock through Wasabi or Veeam Vault. Who each fits, what each costs you in operational overhead, and where the restore-speed economics break.
The verdict
If your estate is Veeam-only and you want the fastest path to a hardened on-prem target, buy Ootbi. If you want backup software and immutable storage collapsed into one highly available appliance — and a vendor willing to write a check if immutability fails — Scality’s ARTESCA+ Veeam HA is the more ambitious engineering. If your recovery-time tolerance is measured in days rather than hours, cloud object lock is the cheapest ticket in the room. Most mid-size enterprises should land on one on-prem immutable tier plus one cloud copy. The argument is over which appliance, not whether.
| Ootbi (Object First / Veeam) | ARTESCA+ Veeam HA (Scality) | Cloud object lock (Wasabi / Veeam Vault) | |
|---|---|---|---|
| Model | Purpose-built immutable target appliance, Veeam-only | Integrated appliance: Veeam Data Platform v13 plus ARTESCA object storage | S3-compatible cloud buckets with Object Lock |
| Capacity shape | Roughly 20 TB to 432 TB per node, plus the edge-focused Ootbi Mini; clusters into the low-petabyte range | 50 TB to 10 PB | Effectively unlimited |
| Immutability | S3 Object Lock on by default, hardened OS, no root access | Object Lock in compliance mode; $100K cyber guarantee | Object Lock per bucket; you configure retention |
| Ops overhead | Lowest — racked and ingesting in under a day | Low-to-moderate — one appliance replaces two stacks | Near zero to run, but restore logistics are yours |
| Restore speed | LAN-fast | LAN-fast, with node-failure tolerance | WAN-bound — plan in days for large jobs |
| Best fit | Veeam-only shops, ROBO to upper mid-market | Mid-size enterprises wanting HA and one throat to choke | The offsite copy, archives, long retention |
What changed
Two dates moved this market in 2026. On January 14, Veeam confirmed it was acquiring Object First, the company Ratmir Timashev and Andrei Baronov — Veeam’s original co-founders — started in 2022 to build a Veeam-only immutable target. The deal resolved an awkward overlap: Veeam had begun shipping its own software appliance while its founders’ side venture sold the hardware target everyone actually wanted. Ootbi is now the first-party answer when a Veeam customer asks “what do I point my backups at?”
Scality answered on April 29 with ARTESCA+ Veeam HA — the first complete high-availability build around Veeam Data Platform v13’s appliance capabilities. It runs the backup software and the immutable object store on one platform with failover across three layers, scales from 50 TB to 10 PB, and carries a $100,000 cyber guarantee paid to any customer whose immutably stored data is compromised by an external attack — no premium support contract required. That guarantee is a first, and it reframes immutability from a checkbox into a warranted claim.
Object First Ootbi: the default for Veeam-only shops
Ootbi — “out-of-the-box immutability” — is deliberately narrow. It presents S3 with Object Lock enabled by default, runs a hardened Linux with no root access, and talks to exactly one backup product: Veeam. That narrowness is the feature. There is no storage tuning, no security hardening project, no separate object-storage skillset to hire for. Appliances span roughly 20 TB to 432 TB per node, cluster into the low-petabyte range with multi-GB/s ingest on larger configurations, and the Ootbi Mini extends the same model to edge and ROBO sites where nobody on staff owns storage.
The growth numbers explain the acquisition: 183% bookings growth in 2025 followed by 118% year-over-year in Q1 2026. Customers voted for simplicity. The open question is what first-party ownership does to pricing leverage — when the appliance and the backup software come from the same vendor, the discount conversation gets harder. Negotiate them together, and get roadmap commitments in writing.
Scality ARTESCA+ Veeam HA: one appliance, two jobs, a guarantee
Scality comes at the problem from the opposite direction. ARTESCA is a general-purpose S3 object store that happens to be excellent as a backup target; the April 2026 appliance collapses Veeam Data Platform v13 and ARTESCA into a single box with automated failover at the application, data, and node layers. If a node dies mid-backup-window, the system keeps running — a claim Ootbi’s standalone appliances do not make. Object Lock runs in compliance mode, meaning no administrator, vendor, or attacker can shorten retention once data is written.
The 50 TB to 10 PB range covers everything from a regional hospital to a multi-datacenter enterprise, and because ARTESCA is a real S3 platform, it can serve other workloads — analytics archives, a second backup product, general object storage — which matters if your estate is not Veeam-monogamous. If you are weighing that broader play, our on-prem S3 object storage guide covers the field. The trade: it is a bigger system with more moving parts than Ootbi, and the HA appliance is still a Veeam-centric product at its core.
Cloud object lock: Wasabi and Veeam Vault
The cloud path is the cheapest per terabyte and the slowest per restore. Wasabi remains the value leader for lock-enabled buckets: flat list pricing that has hovered around $7 per TB per month as of mid-2026, with no egress or API request fees — though watch the minimum storage-duration policies, which can make short-retention tiers cost more than the sticker suggests. Veeam Vault is Veeam’s own managed alternative: pre-configured, immutable, and priced flat per terabyte with egress bundled in, which removes the two classic cloud-bill surprises. Our cost-per-TB benchmark runs the current numbers across both.
The economics break on restore speed, not storage price. Pulling 100 TB across a 10 Gbps link takes roughly a day at theoretical line rate; in practice, plan for two to four. The rule of thumb: if your largest credible single restore exceeds 20–30 TB and your RTO is under 24 hours, cloud object lock cannot be your primary restore tier. It is the offsite copy and the deep archive. It is not the thing you restore production from on a Tuesday morning.
The honest downsides — all three of them
- Ootbi: Veeam-only by design, so a future backup-vendor change strands the hardware. Per-cluster capacity tops out in the low petabytes, and post-acquisition pricing power now sits entirely with Veeam.
- ARTESCA+ Veeam HA: more capable, more complex. You are operating an object-storage platform, not just racking a target, and the integrated appliance is new as of April 2026 — early-adopter risk applies until reference deployments accumulate.
- Cloud object lock: restore bandwidth is the hard ceiling, retention minimums and lock misconfiguration are the quiet costs, and a bucket you configured wrong is not immutable at all. Governance mode, in particular, is theater against an attacker holding admin credentials.
What to do about it
Decision rules a VP can repeat. Veeam-only estate under about 1.5 PB of backup data: Ootbi, negotiated alongside your Veeam renewal. Mid-size enterprise that wants backup software, immutable storage, and high availability in one procurement — or that values a written $100K guarantee when the board asks about ransomware: ARTESCA+ Veeam HA. Heterogeneous estate running more than one backup product: a general-purpose on-prem S3 store beats a captive appliance. Everyone, regardless: one cloud object-lock copy offsite, sized against your realistic restore bandwidth, per the 3-2-1-1-0 rule.
And test the zero. Immutability guarantees your data survives; only a timed, full-scale restore drill proves you can get it back inside your RTO. Run one this quarter, with the WAN numbers, before you sign anything.
Frequently asked questions
What is immutable backup storage?
Storage where backup data cannot be modified or deleted for a defined retention period — by anyone, including administrators. In practice that means S3 Object Lock in compliance mode, a hardened appliance like Ootbi, or both. It is the control that keeps ransomware operators from encrypting your backups before they encrypt production.
Did Veeam buy Object First?
Yes. Veeam confirmed the acquisition in January 2026, bringing the Ootbi appliance line in-house. Object First was founded in 2022 by Veeam co-founders Ratmir Timashev and Andrei Baronov, so the deal formalized a relationship that was always close.
Is S3 Object Lock really immutable?
Only in compliance mode. Governance mode allows privileged users to override retention, which means an attacker with stolen admin credentials can too. If a vendor says “immutable,” ask which mode, who holds the keys, and whether retention can be shortened after write. Compliance mode with a locked-down time source is the bar.
Is Wasabi good enough for enterprise backup?
As the offsite immutable copy, yes — the flat pricing with no egress fees makes restore economics predictable, which most hyperscaler tiers cannot claim. As the primary restore tier for large estates, no; WAN bandwidth caps how fast you can pull data back, and days-long restores fail most enterprise RTOs.
Enterprise Techie publishes vendor-honest analysis like this daily — get the brief by email, free.