Rubrik (RBRK)
Secures enterprise data and governs agentic actions across cloud and SaaS environments.
Something off on this page? Send us feedback.
Rubrik sells software that keeps a spare, tamper-proof copy of a company's data and puts it back fast after a ransomware attack. Nearly all its money comes from that backup work, sold by subscription through a handful of distributors. The company still loses money on paper while generating cash, and it is spending that on a newer pitch: guarding the accounts staff log in with, and the AI agents now acting for them.
Item facts: FY2026 + Q2 FY2027 filings · FYE Jan 31, from filings, earnings calls and company pages.
Judgment weights, not filed revenue
The band summarizes business focus and direction. ~ marks estimates.
8 in detail · 16 more below
Enterprise Data Protection
The original business: locked copies of the servers, databases and programs in a company's own data center, plus fast restore after an attack. Roughly half of the $1.66B yearly subscription base — in a market where Veeam is still the volume incumbent.
Competes with Veeam Backup & Replication (Veeam) · DataProtect and NetBackup (Cohesity) · PowerProtect Data Manager (Dell) · Commvault Cloud (Commvault)
In plain English
Picture a copier that runs all night over everything a company's computers hold, then seals each copy in a box that cannot be opened and rewritten — not even by someone who has stolen the administrator's password. When an attack locks the originals, Rubrik's job is handing back yesterday in hours rather than weeks.
Customers pay a yearly fee sized to how much they protect, and they pay more as their data grows and more of their systems get pointed at it. Nothing is sold direct — a distributor and a reseller sit between Rubrik and the buyer on every deal.
Unstructured Data Protection
The mountain of loose files, images and documents that lives outside neat databases, protected on the same platform. Roughly a tenth of subscription money and a common first door into a new account; the Annapurna project is the effort to index that pile.
Competes with DataProtect (Cohesity) · PowerProtect (Dell) · Data Security Cloud (Druva)
In plain English
Not every piece of company data sits in a tidy table. Far more of it is loose stuff — think scanned contracts, design files, video, years of shared drives — parked on file servers nobody has fully catalogued.
Rubrik backs that pile up as well, from the same subscription, priced by how much is under protection. So a customer who starts with databases and later points Rubrik at the shared drives simply buys a bigger plan. Sheer volume, rather than any clever feature, is what makes this line grow, and it is one of the doors new customers walk in through.
SaaS Data Protection (Microsoft 365, Salesforce, Entra ID)
Backup for the software companies rent instead of run — Microsoft 365 first, plus Salesforce and Microsoft's directory of staff accounts. Around a tenth of subscription money, and often how a new account opens; Microsoft is both the doorway and a rival here.
Competes with Veeam Data Cloud for Microsoft 365 (Veeam) · Cloud Backup (AvePoint) · Commvault Cloud (Commvault)
In plain English
Most companies no longer run their own email or sales records. They rent Microsoft 365 or Salesforce and trust the provider to keep the service up. The provider does keep it up — but if a staffer deletes a folder or an intruder empties a mailbox, getting it back cleanly is still the customer's problem.
Rubrik sells a second copy held outside the rented service, charged by how much is protected. Microsoft is the awkward part of this business: it carries Rubrik through its own marketplace and stage shows, and sells protection tooling of its own.
Cloud Data Protection
Protection for systems built on rented computing from Amazon, Microsoft and Google, with copies that can stay inside the customer's own rented space. Roughly a tenth of subscription money; the newest piece covers the huge tables companies keep for analysis.
Competes with Data Security Cloud (Druva) · Clumio (Commvault) · AWS Backup (Amazon)
In plain English
When a company builds something new these days, it rents the computers from Amazon, Microsoft or Google instead of buying its own. Those rented setups need backing up as much as any machine in a basement, and Rubrik's copies can be parked in the customer's own rented space rather than in Rubrik's.
The fee works like the rest of the line-up: a subscription sized to what is covered. The fresh extension, announced in September, handles the enormous tables companies keep for analysis — it saves the data plus the index that tells query tools where each piece sits, so the tables come back usable.
Rubrik Security Cloud Private
The edition customers install on their own machines, sold to federal agencies, other government bodies and regulated industries. About a tenth of subscription money — a slice by how the software is delivered, so it overlaps the lines above rather than adding to them. After years of shrinking, it is expected to grow.
Competes with Commvault Cloud (Commvault) · NetBackup (Cohesity) · Veeam Backup & Replication (Veeam)
In plain English
Some buyers cannot let their data leave the building: a federal agency, a firm bound by rules about where records may sit. For them Rubrik ships the same protection software as a package the customer installs on hardware it owns and keeps behind its own locks.
They still sign a subscription, but part of each contract counts as sales the moment the deal closes rather than drip-fed month by month — which is why a strong quarter here lands all at once, and part of why the July quarter came in above plan. The long-held assumption was that this side would fade as everyone moved to renting; it has stopped fading.
Identity Resilience
Watches over and rebuilds the central list of staff accounts that unlocks everything else. It passed fifty million dollars of yearly subscription value in about five quarters and grew roughly two-fifths in a single quarter — small, quick, and a stated spending priority.
Competes with Directory Services Protector (Semperis) · Recovery Manager for AD (Quest) · Guardian Instant Forest Recovery (Cayosoft)
In plain English
Everyone at a big company reaches email, files and tools through one central list of who's who — Microsoft's Active Directory or Entra, or Okta, a company that sells the same kind of list. Break that list and nothing works. Quietly tamper with it and the intruder keeps a way back in long after the cleanup.
Rubrik watches the list for risky changes and, after an attack, can rebuild it clean: keeping the legitimate edits staff made, dropping the intruder's hidden ones. It rides on the same subscription, usually sold to the security chief rather than the storage team, and it is where management says the next money goes.
Data Security Posture Management (DSPM)
Works out where the sensitive data sits and who can reach it, so the recovery tools know what matters most. It was growing more than three hundred percent a year off a tiny base when Rubrik last put a number on it, and it now barely comes up as attention moves to identity and agents.
Competes with Cyera platform (Cyera) · Data Security Platform (Varonis) · Purview (Microsoft)
In plain English
Before you can protect the important files, someone has to work out which files are important. This product crawls a company's data — in rented services, in its own data center, in the software it rents — and flags what looks sensitive and who has permission to open it.
Rubrik bought the technology in 2023 with a small company called Laminar and folded it into the main subscription, so it usually rides along on a deal rather than winning one. One selling point: a company switching on Microsoft's AI assistant wants to know what that assistant can see before letting staff loose with it.
Rubrik Agent Cloud
Rules and an undo button for the AI helpers customers now turn loose on their own systems: what each one may touch, what it did, and how to reverse the damage. Barely any revenue yet — it dominates the talk, not the numbers.
Competes with Prisma AIRS (Palo Alto Networks) · Agent governance for Copilot (Zenity) · Agent identity offerings (Okta)
In plain English
Companies are starting to hand real work to software that acts on its own — writing code, filing tickets, moving records — and nobody is sure what to do when one of them goes wrong at three in the morning. Rubrik's answer is a leash and a rewind: rules about which systems and tools each helper may reach, a record of what it did, and a way to undo destructive actions.
It is sold as a new subscription beside the backup products, and it is early: a bit over fifteen customers in limited release. Predibase, an AI-tooling company Rubrik bought in 2025, supplies the machinery underneath.
Enterprise Data ProtectionThe original business: locked copies of the servers, databases and programs in a company's own data center, plus fast restore after an attack. Roughly half of the $1.66B yearly subscription base — in a market where Veeam is still the volume incumbent.The original business: locked copies of the servers, databases and programs in a company's own data center, plus fast restore after an attack. Roughly half of the $1.66B yearly subscription base — in a market where Veeam is still the volume incumbent.
In plain English
Picture a copier that runs all night over everything a company's computers hold, then seals each copy in a box that cannot be opened and rewritten — not even by someone who has stolen the administrator's password. When an attack locks the originals, Rubrik's job is handing back yesterday in hours rather than weeks.
Customers pay a yearly fee sized to how much they protect, and they pay more as their data grows and more of their systems get pointed at it. Nothing is sold direct — a distributor and a reseller sit between Rubrik and the buyer on every deal.
Competes with Veeam Backup & Replication (Veeam) · DataProtect and NetBackup (Cohesity) · PowerProtect Data Manager (Dell) · Commvault Cloud (Commvault)
Unstructured Data ProtectionThe mountain of loose files, images and documents that lives outside neat databases, protected on the same platform. Roughly a tenth of subscription money and a common first door into a new account; the Annapurna project is the effort to index that pile.The mountain of loose files, images and documents that lives outside neat databases, protected on the same platform. Roughly a tenth of subscription money and a common first door into a new account; the Annapurna project is the effort to index that pile.
In plain English
Not every piece of company data sits in a tidy table. Far more of it is loose stuff — think scanned contracts, design files, video, years of shared drives — parked on file servers nobody has fully catalogued.
Rubrik backs that pile up as well, from the same subscription, priced by how much is under protection. So a customer who starts with databases and later points Rubrik at the shared drives simply buys a bigger plan. Sheer volume, rather than any clever feature, is what makes this line grow, and it is one of the doors new customers walk in through.
Competes with DataProtect (Cohesity) · PowerProtect (Dell) · Data Security Cloud (Druva)
SaaS Data Protection (Microsoft 365, Salesforce, Entra ID)Backup for the software companies rent instead of run — Microsoft 365 first, plus Salesforce and Microsoft's directory of staff accounts. Around a tenth of subscription money, and often how a new account opens; Microsoft is both the doorway and a rival here.Backup for the software companies rent instead of run — Microsoft 365 first, plus Salesforce and Microsoft's directory of staff accounts. Around a tenth of subscription money, and often how a new account opens; Microsoft is both the doorway and a rival here.
In plain English
Most companies no longer run their own email or sales records. They rent Microsoft 365 or Salesforce and trust the provider to keep the service up. The provider does keep it up — but if a staffer deletes a folder or an intruder empties a mailbox, getting it back cleanly is still the customer's problem.
Rubrik sells a second copy held outside the rented service, charged by how much is protected. Microsoft is the awkward part of this business: it carries Rubrik through its own marketplace and stage shows, and sells protection tooling of its own.
Competes with Veeam Data Cloud for Microsoft 365 (Veeam) · Cloud Backup (AvePoint) · Commvault Cloud (Commvault)
Cloud Data ProtectionProtection for systems built on rented computing from Amazon, Microsoft and Google, with copies that can stay inside the customer's own rented space. Roughly a tenth of subscription money; the newest piece covers the huge tables companies keep for analysis.Protection for systems built on rented computing from Amazon, Microsoft and Google, with copies that can stay inside the customer's own rented space. Roughly a tenth of subscription money; the newest piece covers the huge tables companies keep for analysis.
In plain English
When a company builds something new these days, it rents the computers from Amazon, Microsoft or Google instead of buying its own. Those rented setups need backing up as much as any machine in a basement, and Rubrik's copies can be parked in the customer's own rented space rather than in Rubrik's.
The fee works like the rest of the line-up: a subscription sized to what is covered. The fresh extension, announced in September, handles the enormous tables companies keep for analysis — it saves the data plus the index that tells query tools where each piece sits, so the tables come back usable.
Competes with Data Security Cloud (Druva) · Clumio (Commvault) · AWS Backup (Amazon)
Rubrik Security Cloud PrivateThe edition customers install on their own machines, sold to federal agencies, other government bodies and regulated industries. About a tenth of subscription money — a slice by how the software is delivered, so it overlaps the lines above rather than adding to them. After years of shrinking, it is expected to grow.The edition customers install on their own machines, sold to federal agencies, other government bodies and regulated industries. About a tenth of subscription money — a slice by how the software is delivered, so it overlaps the lines above rather than adding to them. After years of shrinking, it is expected to grow.
In plain English
Some buyers cannot let their data leave the building: a federal agency, a firm bound by rules about where records may sit. For them Rubrik ships the same protection software as a package the customer installs on hardware it owns and keeps behind its own locks.
They still sign a subscription, but part of each contract counts as sales the moment the deal closes rather than drip-fed month by month — which is why a strong quarter here lands all at once, and part of why the July quarter came in above plan. The long-held assumption was that this side would fade as everyone moved to renting; it has stopped fading.
Competes with Commvault Cloud (Commvault) · NetBackup (Cohesity) · Veeam Backup & Replication (Veeam)
Identity ResilienceWatches over and rebuilds the central list of staff accounts that unlocks everything else. It passed fifty million dollars of yearly subscription value in about five quarters and grew roughly two-fifths in a single quarter — small, quick, and a stated spending priority.Watches over and rebuilds the central list of staff accounts that unlocks everything else. It passed fifty million dollars of yearly subscription value in about five quarters and grew roughly two-fifths in a single quarter — small, quick, and a stated spending priority.
In plain English
Everyone at a big company reaches email, files and tools through one central list of who's who — Microsoft's Active Directory or Entra, or Okta, a company that sells the same kind of list. Break that list and nothing works. Quietly tamper with it and the intruder keeps a way back in long after the cleanup.
Rubrik watches the list for risky changes and, after an attack, can rebuild it clean: keeping the legitimate edits staff made, dropping the intruder's hidden ones. It rides on the same subscription, usually sold to the security chief rather than the storage team, and it is where management says the next money goes.
Competes with Directory Services Protector (Semperis) · Recovery Manager for AD (Quest) · Guardian Instant Forest Recovery (Cayosoft)
Data Security Posture Management (DSPM)Works out where the sensitive data sits and who can reach it, so the recovery tools know what matters most. It was growing more than three hundred percent a year off a tiny base when Rubrik last put a number on it, and it now barely comes up as attention moves to identity and agents.Works out where the sensitive data sits and who can reach it, so the recovery tools know what matters most. It was growing more than three hundred percent a year off a tiny base when Rubrik last put a number on it, and it now barely comes up as attention moves to identity and agents.
In plain English
Before you can protect the important files, someone has to work out which files are important. This product crawls a company's data — in rented services, in its own data center, in the software it rents — and flags what looks sensitive and who has permission to open it.
Rubrik bought the technology in 2023 with a small company called Laminar and folded it into the main subscription, so it usually rides along on a deal rather than winning one. One selling point: a company switching on Microsoft's AI assistant wants to know what that assistant can see before letting staff loose with it.
Competes with Cyera platform (Cyera) · Data Security Platform (Varonis) · Purview (Microsoft)
Rubrik Agent CloudRules and an undo button for the AI helpers customers now turn loose on their own systems: what each one may touch, what it did, and how to reverse the damage. Barely any revenue yet — it dominates the talk, not the numbers.Rules and an undo button for the AI helpers customers now turn loose on their own systems: what each one may touch, what it did, and how to reverse the damage. Barely any revenue yet — it dominates the talk, not the numbers.
In plain English
Companies are starting to hand real work to software that acts on its own — writing code, filing tickets, moving records — and nobody is sure what to do when one of them goes wrong at three in the morning. Rubrik's answer is a leash and a rewind: rules about which systems and tools each helper may reach, a record of what it did, and a way to undo destructive actions.
It is sold as a new subscription beside the backup products, and it is early: a bit over fifteen customers in limited release. Predibase, an AI-tooling company Rubrik bought in 2025, supplies the machinery underneath.
Competes with Prisma AIRS (Palo Alto Networks) · Agent governance for Copilot (Zenity) · Agent identity offerings (Okta)
Named in filings, launches and programs
- Hardware and support servicesProduct lineRegional hardware plus services: $52.3M in FY2026, four percent of all sales, counted outside the subscription figures; $20.1M in the July 2026 quarter.
- Two-tier channel sellingEcosystemEverything moves through distributors and resellers: four partners the filing leaves unnamed were 26%, 28%, 10% and 10% of last quarter's revenue.
- Rubrik Security Cloud editionsProduct lineFoundation, Business, Enterprise and Enterprise Proactive tiers; the top two carry a $10M ransomware-recovery warranty on stated terms.
- Rubrik FlexCustomer programOne contract and a pre-agreed pool a customer draws down across data, identity and AI products; a handful of deals so far, including a US health system.
- Rubrik AIPlatformSince June 2026 the toolkit can be driven as a helper: the customer states the outcome it wants and Rubrik's software works out the steps.
- Rubrik AnnapurnaPlatform · AnnouncedAn effort to catalogue messy company files where they already sit and publish them into a shared store for analysis; limited availability, open to qualified partners.
- Rubrik Code GuardianProduct · AnnouncedPrivate preview since September 2026: attacks a customer's own code store inside a sealed-off environment to surface weaknesses, built on Anthropic's Claude.
- Rubrik MCP server supportProductLets a customer's own AI helpers query Rubrik's protection and recovery data directly; announced September 2026.
- RubyProductThe assistant built into the main product that walks operators through cyber-recovery steps.
- Data threat analyticsProduct lineAnomaly detection, threat monitoring and fast threat hunting, bundled inside the paid tiers rather than priced on their own.
- Cyber Recovery Simulation and Threat ContainmentProduct linePractice runs for a recovery, plus walling off an infected area; included in the tiers, and mentioned far less as the language shifted to agents.
- Rubrik GoCustomer programThree-year plans bundling the software, support and a hardware refresh into a single commitment.
- CrowdStrike allianceEcosystemCrowdStrike spots an attack on staff accounts, Rubrik rolls the damage back; tied up since 2024 and extended in September 2026.
- Kyndryl and NTT DATA alliancesEcosystemTwo large IT services firms build and run Rubrik-based incident recovery for their own clients — a route into accounts through someone else's delivery teams.
- PredibaseBrandBought June 2025 for a reported hundred million dollars plus; supplies the model-tuning and serving layer under the agent products.
- Strata IdentityBrandAcquired June 2026 on undisclosed terms to coordinate logins across systems; brought in no recurring revenue and is left out of guidance.
Hardware and support servicesProduct line
Regional hardware plus services: $52.3M in FY2026, four percent of all sales, counted outside the subscription figures; $20.1M in the July 2026 quarter.
Two-tier channel sellingEcosystem
Everything moves through distributors and resellers: four partners the filing leaves unnamed were 26%, 28%, 10% and 10% of last quarter's revenue.
Rubrik Security Cloud editionsProduct line
Foundation, Business, Enterprise and Enterprise Proactive tiers; the top two carry a $10M ransomware-recovery warranty on stated terms.
Rubrik FlexCustomer program
One contract and a pre-agreed pool a customer draws down across data, identity and AI products; a handful of deals so far, including a US health system.
Rubrik AIPlatform
Since June 2026 the toolkit can be driven as a helper: the customer states the outcome it wants and Rubrik's software works out the steps.
Rubrik AnnapurnaPlatform · Announced
An effort to catalogue messy company files where they already sit and publish them into a shared store for analysis; limited availability, open to qualified partners.
Rubrik Code GuardianProduct · Announced
Private preview since September 2026: attacks a customer's own code store inside a sealed-off environment to surface weaknesses, built on Anthropic's Claude.
Rubrik MCP server supportProduct
Lets a customer's own AI helpers query Rubrik's protection and recovery data directly; announced September 2026.
RubyProduct
The assistant built into the main product that walks operators through cyber-recovery steps.
Data threat analyticsProduct line
Anomaly detection, threat monitoring and fast threat hunting, bundled inside the paid tiers rather than priced on their own.
Cyber Recovery Simulation and Threat ContainmentProduct line
Practice runs for a recovery, plus walling off an infected area; included in the tiers, and mentioned far less as the language shifted to agents.
Rubrik GoCustomer program
Three-year plans bundling the software, support and a hardware refresh into a single commitment.
CrowdStrike allianceEcosystem
CrowdStrike spots an attack on staff accounts, Rubrik rolls the damage back; tied up since 2024 and extended in September 2026.
Kyndryl and NTT DATA alliancesEcosystem
Two large IT services firms build and run Rubrik-based incident recovery for their own clients — a route into accounts through someone else's delivery teams.
PredibaseBrand
Bought June 2025 for a reported hundred million dollars plus; supplies the model-tuning and serving layer under the agent products.
Strata IdentityBrand
Acquired June 2026 on undisclosed terms to coordinate logins across systems; brought in no recurring revenue and is left out of guidance.