Air gap backup has split into two competing designs : physical isolation and logical software locks. While cloud providers sell immutable object storage as a modern air gap, ransomware groups increasingly hijack administrative identity planes to delete cloud repositories. A physical LTO tape sitting on a shelf or unmounted inside an automated library remains the only recovery copy that network credentials cannot reach or destroy.
What broke logical air gaps
For several years, storage teams replaced offline media with cloud-based immutable buckets and separate backup accounts. The theory seemed sound : configure object lock with compliance retention, lock the policy for thirty days, and treat the bucket as an air-gapped copy.
Modern threat actors bypass this safeguard without touching the storage protocol. Instead of breaking cryptographic locks, attackers target the identity plane. Through session token theft, compromised identity provider credentials, or elevated role abuse, intruders gain access to the root tenancy. From that vantage point, attackers do not need to modify locked objects. They can delete the entire cloud subscription, alter billing permissions to cause account termination, or destroy the encryption keys stored in key management services. When the management plane fails, logical isolation vanishes with it.
Why physical tape isolation cannot be reached over IP
A physical air gap relies on an absolute boundary : the absence of an electrical and network path. An LTO cartridge stores data on barium ferrite or metal particle tape inside a plastic housing. When the write process finishes and the drive unloads the cartridge, all electrical contact ends.
Inside an automated tape library, robotic arms place the media into passive storage slots. Even if an attacker gains root credentials on your backup server, controls your hypervisors, and compromises your switches, the unmounted tape cannot execute commands. It has no IP address, no operating system kernel, no remote management port, and no firmware listener. Modifying an offline cartridge requires physical human presence in the data room.
The economics of offline archive storage
Security is the initial reason teams reintroduce tape, but operating costs keep it in place. Our September 2026 US price tracker lists 18 TB LTO-9 cartridges at 92 $ to 112 $, which comes to 5,14 $ to 6,20 $ per native terabyte. An LTO-8 cartridge costs between 70 $ and 80 $ for 12 TB, or 5,83 $ to 6,67 $ per native terabyte.
Storing that same petabyte in hot or cold cloud storage requires perpetual monthly capacity charges. When an enterprise suffers a catastrophic incident and must restore hundreds of terabytes immediately, cloud egress fees and retrieval penalties create massive emergency expenses. A tape cartridge sitting on a shelf draws zero watts of electricity, produces zero heat, and incurs zero monthly cloud subscription bills.
How to build a practical air-gapped workflow
Adopting an air-gapped tape backup does not mean abandoning disk snapshots or cloud replication. Fast daily recoveries for individual lost files belong on local disk arrays. Tape provides the deep, immutable foundation underneath them.
A standard resilience pattern keeps daily and weekly recovery points on primary storage, writes monthly and quarterly full archives to LTO tape, and ejects those tapes to an offsite fireproof vault or separate facility. In an automated library, dedicated air-gap software partitions isolate vault cartridges from active drive pools. If ransomware encrypts every server on the network, the offline tape set guarantees a clean restoration baseline.
Questions fréquentes
What is the difference between a physical air gap and a logical air gap ?
A physical air gap disconnects the storage media entirely from electrical and network connections, as with an ejected LTO tape. A logical air gap keeps storage connected to the network but restricts access through software rules, access control lists, or immutable bucket policies. Logical gaps can be bypassed if administrative credentials are compromised.
Can ransomware infect an unmounted tape cartridge ?
No. An unmounted tape sits in a slot or storage shelf with no electrical connection, no processor, and no network interface. Remote software cannot write to, read from, or delete data on an unmounted cartridge.
Do tape drives support hardware-based encryption ?
Yes. All LTO tape drives from LTO-4 through LTO-10 support hardware-level 256-bit AES encryption directly on the drive ASIC. Data is encrypted before being written to media, with no performance penalty.
How does the total cost of tape compare to cloud archive tiers ?
For archives above 100 terabytes held longer than two years, LTO tape costs significantly less than cloud cold storage. Tape media requires a one-time purchase with no recurring monthly capacity charges and no egress fees during restores.
Compare current media options on our LTO price tracker, calculate your capacity with the backup calculator, or read our guide on LTO tape vs cloud storage.