Hot Storage vs
Cold Storage
Hot tiers are fast and expensive. Cold tiers are cheap and slow. Both stay on the network. Here is how they compare, and where a physical air gap belongs in the mix.
Two Different Access Tiers
Hot and cold storage exist to serve different access patterns. Start with clean definitions before comparing cost and risk.
Hot storage
Hot storage keeps data on media that is permanently online and optimised for fast read and write. Think production SSD, primary NAS or a standard cloud object tier. Access is measured in milliseconds and the storage is always addressable over the network.
Cold storage
Cold storage is designed for data that is retained but seldom read. Cloud tiers like AWS Glacier, Azure Archive and Google Coldline lower the price per terabyte in exchange for slower retrieval, minimum retention periods and per gigabyte egress fees. The media itself is still online.
Performance, Cost and Security Trade-offs
Three trade-offs decide where each tier belongs in your architecture, and where cloud cold storage quietly leaves risk on the table.
Performance trade-off
Hot tiers return objects in milliseconds and handle heavy concurrent workloads. Cold tiers deprioritise retrieval to save money, so first byte latency can stretch to minutes or hours and rehydration is billed. The right tier depends on how often the data is actually read.
Cost trade-off
Cold storage looks cheap on the storage line but adds early deletion charges, minimum commitment windows and per gigabyte egress when you need the data back. A restore under pressure can cost more than a year of hot storage. Model the full recovery bill, not just the monthly resting price.
Security trade-off
Hot and cold cloud tiers live behind the same identity plane. A compromised admin account, expired MFA or exposed access key can reach either. Object Lock and versioning help, but the storage itself never leaves the network, so remote ransomware and insider actions still have a path.
The High Security Alternative
Where cloud cold tiers stay online, Firevault keeps the media physically disconnected. It sits alongside hot and immutable storage as the offline gold copy of last resort.
Physical air gap by default
Firevault Offline Secure Storage keeps the media physically disconnected between scheduled, identity verified access windows. There is no network path for remote attackers to reach, so the class of ransomware that walks through cold cloud tiers has nothing to attack.
Predictable retrieval cost
Cold cloud tiers punish the day you actually need the data. Firevault retrieval happens on your own site through your own network on a fixed subscription. There are no per gigabyte egress charges, no rehydration windows and no billing surprises during an incident.
Fits alongside hot and cold
Firevault is not a replacement for hot production storage or immutable cloud backup. It sits alongside them as the offline copy the 3-2-1-1-0 rule requires, so operational recovery stays fast and the gold copy of last resort stays untouchable.
Read the related guides that put hot, cold and offline storage in context.
Hot vs Cold Storage, Common Questions
Add an offline gold copy alongside your hot and cold tiers
Talk to the Firevault team about layering a physical air gap under your existing cloud storage strategy.
Takes about 2 minutes. No account needed.