IBM COS on-prem: Object Storage Ledger 2026 Scorecard

Part of the Object Storage Ledger (edition 2026-10-16). How the scores work: methodology.

Snapshot

Type: product
Owner: IBM (listed, USA); Cleversafe acquired by IBM in 2015 (background, grade C); no ownership change since 2023; IBM also sells IBM Storage Ceph for object storage since the Red Hat storage teams joined IBM (target 2023-01-01), and no IBM statement on the future of COS was found
Licence: Commercial; perpetual, subscription or consumption licences (Redpaper); IBM appliances or IBM-certified x86 servers from IBM, HPE, Seagate, Cisco, Dell, Lenovo and QCT; no on-premises price found (the IBM Cloud service price is a different product)
Latest release: ClevOS 3.20.0 (documentation published, release date not found; listed on IBM's lifecycle page by 2026-05-19); 3.19.0 and 3.19.1 named in a support alert last modified 2025-02-19
Support lifecycle: Continuous Delivery model since ClevOS 3.16.0 with a longer-term release option (lifecycle page abstract); end of support dates behind an IBM login
Next milestone: none published
Object lock: S3 Object Lock since ClevOS 3.17.2 (2023) in compliance mode only; the release notes state "Governance mode is not supported"; legal hold API calls documented; lock enabled at system level, then per container vault; behaviour in 3.20.0 not read. Veeam Ready Repository (Capacity Target) with immutability on ClevOS 3.17.2.11 and 3.17.5.57 (Veeam article 465, modified 2023-12-05), IAM and STS not supported. The Redpaper lists Spectrum Protect, Commvault, NetBackup, Rubrik, Veeam and Cohesity as validated applications without an Object Lock statement. IBM claims support for SEC 17a-4(f) (vendor); no Cohasset assessment found
Tier: Appliance or hardware-bound
Archetype: Slow follower
Evidence grade: B. The ClevOS 3.17.2 release notes PDF, the Redpaper REDP-5537-02, the 3.20.0 documentation index, the Veeam Ready listing (article 465) and the abstracts of IBM's support lifecycle page (modified 2026-05-19) and a support alert (modified 2025-02-19) were read directly. Release notes for 3.18 to 3.20 were not readable (one 3.18.4 copy on Scribd, undated), so everything after 2023 rests on titles and abstracts; history before 2019 is grade C.

Not ranked: Inclusion test 1 not confirmed: no dated release since 2025-10-15 found (checked 2026-10-16)

Scope of the scores: The on-premises IBM Cloud Object Storage System, sold as IBM appliances or as software on IBM-certified x86 servers. The IBM Cloud service with One-Rate pricing is a separate product and is not scored. The entry is not ranked until a dated ClevOS release since 2025-10-15 is found.

Scorecard

Dimension	Score	Direction
Capability today	64.6 / 100	higher is better
Momentum since end of 2022	+9.2 points (2015 to 2022: +5.3)	higher is better
Credibility	13.0 / 25	higher is better
Commercial risk	12.0 / 25	lower is better
Technical lock-in	14.0 / 25	lower is better
Integrator fit	12.5 / 20	higher is better
AI leverage	2.5 / 20	higher is better
Ledger Index	52.4 / 100	balanced weights; see the methodology

Capability by domain, 2015 to today

Scores 0 to 5 against fixed anchors; total is weighted to 100.

Domain (weight)	2015	2019	2022	Today
S3 API fidelity (15)	2.5	2.5	3	3
Immutability and compliance (12)	0	0	0	3
Durability and resilience (12)	4.5	4.5	4.5	4.5
Performance and scale (12)	3.5	3.5	3.5	3.5
Deployment freedom (10)	2.5	3	3	3
Security and multi-tenancy (10)	3	3	3	3.5
Operations (10)	3	3	3	3.5
Protocols beyond S3 (7)	2	3	3	3
Lifecycle and tiering (7)	1.5	1.5	2.5	2.5
Ecosystem and openness (5)	1.5	1.5	1.5	1.5
Total / 100	50.1	52.5	55.4	64.6

Year by year: 2015: 50.1 · 2016: 50.1 · 2017: 50.1 · 2018: 50.1 · 2019: 52.5 · 2020: 52.5 · 2021: 55.4 · 2022: 55.4 · 2023: 64.6 · 2024: 64.6 · 2025: 64.6 · 2026: 64.6

What moved the score

Year	Domain	Change	Points	Trigger
2019	Deployment freedom	2.5 → 3	+1.0	Redpaper (2019): Accessers as physical, VM, Docker or embedded; Manager as physical, VM or Docker; certified servers from several vendors; no Kubernetes operator, Arm or public cloud option found
2019	Protocols beyond S3	2 → 3	+1.4	OpenStack Swift API v1.1 on every Accesser (Redpaper; introducing release not found); SMB and NFS only through a separate virtual machine (vendor)
2021	Lifecycle and tiering	1.5 → 2.5	+1.4	Object expiration rules (Redpaper revision; release not found); no transition between classes or tiering to another target found for on-premises
2021	S3 API fidelity	2.5 → 3	+1.5	3.15.x: container mode with a storage account portal (3.15.4) and S3 versioning in container mode (3.15.7); object expiration; IAM and STS not supported (Veeam); bucket policies and presigned URLs not verified
2023	Immutability and compliance	0 → 3	+7.2	3.17.2: S3 Object Lock in compliance mode only with legal hold; Veeam Ready Capacity Target with immutability on 3.17.x; no governance mode, no independent assessment
2023	Operations	3 → 3.5	+1.0	3.17.0: Manager database backup to an S3 bucket; Continuous Delivery model since 3.16 with a longer-term option; 3.20.0 adds an OpenTelemetry traces pipeline (date not found); no Terraform found
2023	Security and multi-tenancy	3 → 3.5	+1.0	3.17.1: OIDC and MFA for the Manager; account and container model with per-account credentials; STS not supported; external KMS and FIPS not read

Direction, 2023 to 2026

Each release item carries one theme and one driver (V vision, C customer need, M market window, U upstream, P portfolio).

Date	Item	Theme	Driver
2023	ClevOS 3.17.0: Manager database backup to an S3 bucket	Operations	C
2023	ClevOS 3.17.1: OIDC and MFA for the Manager	Security	C
2023	ClevOS 3.17.2: S3 Object Lock in compliance mode with legal hold	Immutability	C
2023-01	Red Hat Ceph and ODF teams join IBM, so IBM sells two object platforms: COS and IBM Storage Ceph	Packaging	P
2023-12	Veeam Ready listing updated with Veeam 12 on ClevOS 3.17.5.57	Immutability	M
2025	ClevOS 3.18.4: support for migrating failing disks removed; SSH public key authentication for SFTP log transfer	Operations	C
2025-02	Support alert on client I/O failing with HTTP 400 after upgrading to 3.18.5.48 or newer, naming 3.19.0 and 3.19.1	Operations	C
2026	ClevOS 3.20.0 listed by 2026-05-19 (release date not found): OpenTelemetry traces pipeline	Operations	C

Centre of gravity: Operations (4), Immutability (2), Packaging (1)
Blind spots (no items): S3 API, Durability, Performance, Deployment, Protocols, Lifecycle, Ecosystem, Licensing, AI
Driver mix: Vision 0%, Customer need 75%, Market window 13%, Upstream 0%, Portfolio 13%
Idea-to-need index: 0.00 (0 = demand-pulled, 1 = thesis-pushed)

Credibility: 13.0 / 25

Criterion	Score	Basis
Cadence	3	Continuous Delivery model since 3.16 with frequent point releases; release dates are not published
Roadmap transparency	1.5	Older release notes PDFs are public; current notes, lifecycle dates and alerts sit behind an IBM login; no roadmap
Say-do	3	No forward announcements for the on-premises product were found to test
Velocity	2.5	Recent items are observability and removals; the last substantive capability found is Object Lock in 2023
Lifecycle stability	3	A defined Continuous Delivery model with a longer-term option; no forced migration seen

Commercial risk: 12.0 / 25 (lower is better)

Criterion	Score	Basis
Price and licence volatility	2	Perpetual, subscription and consumption options; no change found, and no public prices
Purchase constraints	2.5	Several licence models and a choice of certified hardware vendors; quote only
Channel and access	3	IBM direct and Business Partners; lifecycle dates, alerts and current notes need an IBM login
Owner stability	2	Large listed owner since 2015; IBM now also sells IBM Storage Ceph for object, and no statement on the future of COS was found
Cost of staying supported	2.5	End of support dates not readable; Continuous Delivery model asks for regular upgrades

Technical lock-in: 14.0 / 25 (lower is better)

Criterion	Score	Basis
Formats	4	Encrypted, dispersed slices that are readable only through the system
Export path	1.5	S3 reads and S3 proxy and migration features in vault mode
Stack coupling	3	Own Manager, Accesser and Slicestor stack
Hardware / cloud coupling	2.5	IBM appliances or certified x86 servers from several vendors; runs on-premises
Skills and tooling coupling	3	IBM-specific Manager, Accesser and Slicestor skills

Integrator fit: 12.5 / 20

Criterion	Score	Basis
Partner programme openness	3	IBM Business Partner programme; terms for COS not read
Multi-tenancy and self-service	4	Container mode scales to millions of containers and users, with a storage account portal, a Service API and usage reports in CSV, JSON or XML (Redpaper)
API and infrastructure-as-code	3	S3, Service API and Manager REST API; no Terraform or Ansible found
Skills and certification	2.5	No COS certification track verified

AI leverage: 2.5 / 20

How the product uses AI, scored per year like capability. Only GA counts.

Criterion	2019	2022	Today	Latest step
AI workload support	1	1	1	2015: Capacity tier for analytics and backup; nothing AI-specific
AI platform stack	0	0	0	2015: None; "data lake for AI" is product page wording only
AI-assisted operations	0	0	0	2015: None found
Agent openness	1.5	1.5	1.5	2015: S3, Service API and Manager REST API; no MCP server found

Year by year: 2015: 2.5 · 2016: 2.5 · 2017: 2.5 · 2018: 2.5 · 2019: 2.5 · 2020: 2.5 · 2021: 2.5 · 2022: 2.5 · 2023: 2.5 · 2024: 2.5 · 2025: 2.5 · 2026: 2.5

AI say-do, 2023 to 2026: 0 AI items announced; 0 GA, 0 still preview, 0 pending, 0 dropped. No AI item for the on-premises product was found for 2023 to 2026; IBM points AI buyers to IBM Storage Scale and Ceph.

IBM COS on-premises has no AI feature on record. Its AI role is a capacity tier behind the APIs, while IBM's AI storage story runs through other products.

Reading

IBM COS keeps the durability design Cleversafe built: objects are encrypted and dispersed as slices across nodes and sites, so no single node holds all the data, and that earns a 4.5. The rest of the record is thin for 2024 to 2026, because current release notes are not public and the newest items found are an observability feature and removals. Object Lock covers compliance mode only, and the only Veeam test is on ClevOS 3.17. A buyer should ask IBM for the 3.19 and 3.20 release dates, the Object Lock modes in 3.20, and whether new object deployments are being steered to IBM Storage Ceph.

Open questions and items to re-score

ClevOS 3.19.0 and 3.20.0 release dates, needed to rank the product (inclusion test 1).
Object Lock behaviour in 3.20.0: whether governance mode was added after 3.17.2.
End of support dates per version on the login-gated lifecycle page.
S3 feature matrix: bucket policies, presigned URLs, SSE-C, lifecycle transitions.
A Veeam listing for a newer ClevOS release and for Veeam 13.
External KMS and FIPS validation status.
Release that introduced the Swift API and object expiration (2019 and 2021 steps, grade C).
Price, and whether IBM steers new object buyers to IBM Storage Ceph.

	’19	’21	’23
S3 API fidelity		2
Immutability and compliance			1
Durability and resilience
Performance and scale
Deployment freedom	2
Security and multi-tenancy			2
Operations			3
Protocols beyond S3	1
Lifecycle and tiering		1
Ecosystem and openness