Veeam Data Platform v13.1: What's New Since VeeamON NYC

Veeam Software first previewed Veeam Data Platform v13.1 at VeeamON New York City on May 12, 2026, promising more than 70 new features and enhancements across hypervisor support, threat detection, and identity recovery. The company followed through on that timeline: v13.1 became generally available on July 29, 2026, announced at VeeamON Sydney and shipped through Veeam's partner, reseller, and distributor network. The version customers can install today looks close to what Veeam described in New York, with a few additions that only surfaced at GA.

Here's a breakdown of what actually shipped, based on Veeam's general availability announcement and its technical rundown of the release.

Wider Hypervisor Coverage, One Backup Tool

The most tangible change for IT teams is hypervisor breadth. Veeam Data Platform v13.1 ships with out-of-the-box support for six new hypervisors: Red Hat OpenShift Virtualization, Sangfor aSV, XCP-ng, Citrix XenServer, VergeIO, and Platform9 — two more than Veeam had named at the May preview. Combined with existing coverage for VMware vSphere, Microsoft Hyper-V, Nutanix AHV, Proxmox VE, and HPE VM Essentials, that brings Veeam to 14 supported hypervisors in total, with more expected through the company's Universal Hypervisor API.

That API is the mechanism behind the expansion, and it matters as much as the list itself. It's an open integration framework that lets hypervisor vendors build and maintain their own integrations, with Veeam validating and supporting the result. For organizations running mixed virtualization estates, or moving off a single vendor in the wake of the VMware/Broadcom licensing changes of the past two years, that framework means a single backup tool can follow the workload rather than forcing a swap partway through a migration. One caveat worth flagging for planning purposes: the Red Hat OpenShift Virtualization plug-in wasn't included at the July 29 GA date and is expected later in Q3.

Deeper Protection for Enterprise Applications

A piece of the release that wasn't part of the May preview messaging is expanded, purpose-built protection for specific enterprise applications: EPIC EHR, Db2 for Windows, and Oracle with incremental merge, alongside a new Application Backup Repository aimed at custom applications that don't fit a standard template. For healthcare and financial services organizations in particular, this closes a gap that previously required a separate point tool for application-consistent backups of these systems, consolidating that coverage under the same platform, security controls, and recovery orchestration as everything else Veeam already protects.

Security Built Into Three Stages of the Recovery Lifecycle

Veeam continues to frame its security work in v13.1 around three stages: the infrastructure itself, the data in flight, and the recovery process after an incident — and the shipped release backs that framing with specifics.

Data. Veeam already inspects data during backup for indicators of compromise and runs AI-driven entropy analysis inline to catch ransomware encryption in progress. In v13.1, that malware scanning now extends to NAS, and cloud threat detection has been expanded for Azure workloads. The release also ships with post-quantum cryptography support aligned to NIST standards, alongside hybrid FIPS support — letting organizations begin adopting PQC without redeploying infrastructure or giving up existing FIPS compliance.

Recovery. The most consequential addition here remains Active Directory Forest Recovery, now shipped rather than previewed. Active Directory compromise is the most common end-state in a ransomware attack, because taking down AD blocks recovery of everything downstream of it. Microsoft's own guidance for rebuilding a forest runs to hundreds of pages and roughly 40 manual steps — seizing FSMO roles, resetting the krbtgt password twice, rejoining domain controllers, validating replication, cleaning up orphaned metadata. Veeam's answer is a wizard-driven workflow: pick a point in time for the forest, define domain controllers per domain, point to source backups, and run it, with detection built in ahead of restore so teams validate recovery points before they trust them.

Veeam is explicit about why this sequencing matters: in the company's own Data Trust and Resilience Report 2026, 90% of organizations said they were confident they could recover from a cyber incident, yet fewer than one in three ransomware victims actually recovered all of their data. Closing that gap between confidence and outcome is the stated purpose behind pairing threat detection with recovery, rather than treating them as separate tools.

Smarter Economics for Long-Term Retention

Also new at GA: NAS enhancements that tier long-term retention data directly to archive storage — AWS S3 Glacier, Azure Archive, and similar targets — cutting the storage footprint organizations carry for compliance-driven retention without giving up recovery confidence when that older data is actually needed.

What Veeam's Leadership and Partners Are Saying

Rehan Jalil, Veeam's President of Products and Technology, tied the release to the wider risk environment the company has been citing all year: cyber risk is escalating alongside the rise of frontier AI models and autonomous agents, and resilience is what keeps operations running through both cyber and AI-driven incidents. Partner commentary echoed the modernization angle in particular. HPE and Nutanix both highlighted deeper integration work — HPE around migrations to its Morpheus VM Essentials platform and Alletra Storage MP hardware, Nutanix around recovery to AHV — while CITIC Telecom CPC pointed to the new Sangfor aSV support as a way to help customers move off other hypervisors without introducing new resilience gaps mid-transition.

Why the Timing and Framing Matter

Two things distinguish this release from a routine version bump. First, Veeam held to the feature scope and rough timeline it set out in May — the GA release matches the shape of what was previewed at VeeamON NYC, with the hypervisor list and enterprise application coverage growing rather than shrinking between preview and ship. Second, the release lands with a data point attached that gives IT leaders a concrete reason to care beyond feature-by-feature comparison: a 90%-confidence, one-in-three-actual-recovery gap is the kind of number that reframes "we have backups" as a claim worth testing rather than assuming.

For IT leaders currently running Veeam Backup & Replication, the practical near-term list is now available rather than upcoming: broader hypervisor support without a tooling change, purpose-built protection for EPIC EHR, Db2, and Oracle, malware detection extended to NAS and Azure, post-quantum cryptography aligned to NIST, and Active Directory recovery built around validating a clean restore point before trusting it. Each addresses a specific, well-documented failure mode in ransomware recovery rather than a speculative future threat — which is likely why Veeam led both its May preview and its July GA announcement with them.