Recent Breaches
Breaches
View All →
Why OSS

Firevault vs
AWS Glacier

Cold cloud is still cloud. Compare what an actual offline copy looks like next to AWS Glacier on the four dimensions that matter in a real incident.

vs
Head To Head

Cold Cloud or Truly Offline

The fundamental architectural difference. Everything else flows from this.

01
Cold cloud, always reachable

AWS Glacier

Glacier is cheap cold storage inside the AWS control plane. The data is reachable through IAM, the API and your AWS account at any time. Retrieval takes minutes to hours and per gigabyte egress applies on the way out.

Always on the networkIAM and account dependentPer GB egress and retrieval fees
02
Layer 1 disconnected, no IP

Firevault Offline Secure Storage

Firevault stores the data on dedicated hardware in Firevault Bunkers, physically disconnected from the network. There is no IP address to attack, no IAM policy to misconfigure, and no per gigabyte egress charge to budget around.

No NIC and no IP when offlineIdentity verified scheduled accessFlat VAT inclusive UK pricing
Four Dimensions

Where the Choice Actually Bites

Network exposure, jurisdiction, pricing model and retrieval behaviour. The places customers regret picking the wrong tier.

01
Reachable vs unreachable

Network Exposure

Glacier is reachable through the AWS API at all times. Firevault has no network interface when disconnected. The single biggest difference, and the reason ransomware crews can target Glacier accounts but cannot target a disconnected Firevault.

Glacier: always reachableFirevault: physically offlineNo exploitable IP surface
02
Multi region vs Firevault Bunker

Jurisdiction

Glacier data location depends on the region you choose and the AWS account that holds it. Firevault data is held in named UK colocation bunkers with documented physical security and clear chain of custody.

Named UK locationsDocumented chain of custodyNo silent region failover
03
Per GB plus egress vs flat subscription

Pricing Model

Glacier looks inexpensive at rest but recovery and egress can dominate the bill in a real incident. Firevault uses a flat monthly subscription with VAT inclusive UK pricing and predictable retrieval cost.

Predictable monthly costNo surprise egress in incidentsVAT inclusive
04
Tiered minutes to hours vs scheduled physical

Retrieval Behaviour

Glacier retrieval is tiered from a few minutes to many hours depending on what you pay. Firevault retrieval uses scheduled identity verified connection windows. Slightly different operational shape, similar real world recovery time.

Scheduled access windowsIdentity verifiedAudited every time

Want to see how this compares against tape, NAS and other cloud options too.

Compare five storage architectures

Firevault vs Glacier, Common Questions

Mark Fermor
David Bailey
Kenny Phipps
Online Now
Concierge

Get the right offline copy, not just a cold one

Talk to Firevault about replacing or complementing AWS Glacier with a Layer 1 offline copy.

Takes about 2 minutes. No account needed.

Free2 minsNo sign-up

    Firevault

    Firevault is Offline Secure Storage. Hardware you own, physically disconnected by default, with KYC-verified access. Ransomware-proof by design, not by patch.

    © 2026 Firevault Limited. Disconnect to Protect®