Google announced that its AI-driven ransomware detection for Google Drive is now generally available to all paying subscribers, with the feature automatically activated.

Initially announced in September 2025, a test version was rolled out to Google Workspace clients globally in early October.

When a ransomware attack is identified, Google Drive will immediately halt file synchronization, alerting users and IT administrators to the security incident and significantly reducing the potential damage.

While the feature won’t prevent encryption on the infected computer, files backed up to Google Drive will be safeguarded and quickly recoverable after malware removal.

Following an attack, users will receive detailed guidance on restoring compromised files using the Drive’s restoration tool, which will undo the changes made by the ransomware.

“If files synced from a computer to Drive are suspected of being encrypted by ransomware, they will be scanned,” according to Google. The alert will pause desktop syncing, notify the user via email and in Drive, and generate alerts in the Google Admin console.”

“Since the beta release, our detection capabilities have improved, identifying more ransomware types faster. Our new AI model detects 14 times more infections, providing even better security,” the company stated.

Google confirms the feature is enabled by default for organizations utilizing business, enterprise, education, and frontline licenses. The file restoration function is available to all Google Workspace users, individual Workspace subscribers, and those with personal Google accounts.

Although the feature is on for everyone, administrators have the option to disable it for their organization in the Admin console under Apps > Google Workspace > Settings for Drive and Docs > Malware and Ransomware.

To receive alerts, administrators must ensure Google Drive for desktop (version 114 or later) is running on all devices, but syncing will still pause on older versions.

Microsoft also has similar ransomware detection and recovery tools for OneDrive available for Microsoft 365 subscribers.

Dropbox, another common cloud storage solution, provides a comparable feature for Business Plus, Advanced, or Enterprise plans, as well as for Standard or Business plans with the Security add-on.