Rubrik Deep Dive

Table of Contents:

• Rubrik Product Suite
• Financials
• Competitive Landscape
• Valuation
• Risks
• Team Take

Access to 40+ earnings reviews from this season, my current portfolio/performance and so much more can be found here.

a. Rubrik Product Suite

General Niche:

Rubrik is a cloud-native data management and security firm. Its core mission is fielding, safeguarding and protecting a firm’s data. Data is everything in the age of AI. It’s how firms build differentiated models and apps, and it’s a primary target for adversaries. Enterprises must be confident that they can embrace this technology without dealing with endless data leakage, breaches and ballooning costs. That’s where Rubrik helps. 

Its overarching product suite is called the Rubrik Security Cloud (RSC). Like Zscaler in the world of network security, Rubrik deploys a zero trust approach to data security. This means an adversary can’t simply breach the most vulnerable piece of a firm’s value-rich information and gain free, perpetual access to everything else thereafter. There is constant vetting and verifying of traffic, with policies in place to ensure user friction is only created when required for sound security. Unsurprisingly, these policies are guided by years of scaled operations to master best practices, as well as AI.

Products:

Cyber Resilience – Backups:

One of the most important features RBRK offers is something called Immutable Backups. These are redundant, unimpacted data copies that cannot be altered by ransomware and other common attack forms. They’re fully separated from a client’s own operations, adding another layer of resilience.

The explosion of software our world has experienced necessitates this type of product – especially amid the current AI boom. AI agents furiously and ferociously collect data from all over the digital ether to conduct goal-oriented, multi-step tasks. This creates a tangled web of data connections and insatiable processing needs. AI participation requires that companies can prevent their data from being impermissibly accessed and/or jeopardized. BUT… this prevention never comes with a 100% success rate. Breaches happen and will continue to happen. Immutable Backups make that reality palatable, rather than devastating, for enterprises as they lean into AI. With Rubrik, customers enjoy a data insurance policy, as they can more rapidly, seamlessly and successfully return to a normal state of operations.

Cyber Resilience – Hygiene & Prevention:

While Rubrik is an expert at fixing the messes of others, its general “Data Resilience” niche includes several preventative tools as well. 

Its Data Security Posture Management (DSPM) provides a 30,000 ft. view of company data, observing misconfigurations and poor hygiene before those vulnerabilities lead to costly breaches. It makes security data discovery, categorization and risk management a lot more intuitive. Data Access Governance (DAG) is a close DSPM complement, as DAG provides a full picture of who is using sensitive data, while DSPM uncovers how they’re using it. That's how Rubrik customers have an easier and faster time with determining who has access beyond a minimum permission framework.

There's also a category of preventative tools it calls “Data Threat Analytics.” A core piece of this is next-gen anomaly detection that more rapidly uncovers abnormal usage patterns; it also guides where to investigate and counter potential attacks to up-level threat monitoring. Adversaries are constantly trying to break into RBRK data backups. While doing so is highly difficult, it's not impossible if an attacker can impermissibly obtain credentials. That happens all the time and anomaly detection quickly shows where this is occurring.

Finally, it has an active threat hunting product called “Turbo Threat Hunting.” As the name fittingly indicates, Turbo Threat Hunting enables rapid cyber recovery by scanning up to 75,000 data backups in under a minute. It achieves this speed by using randomized data file codes (industry lingo is pre-computed hash values). This method more instantly checks for any malware or other issues (industry lingo is known Indicators of Compromise). Metadata (context that describes and categorizes batches of data) is created, eliminating a need to tediously scan files one at a time.

Cyber Resilience – Recovery & Identity Recovery:

Its data recovery tools are real-time and lean heavily on aforementioned immutable backups to ensure it always has unaffected data copies to deploy. Its recovery products are grouped under the “Preemptive Recovery Engine” umbrella. This umbrella augments backups by constantly scanning them for any potential issues so that companies are 100% certain these backups are ready to go whenever needed. That's a lot of potential anxiety removed for its clients. From there, RBRK eliminates the risk of system reinfection by conducting remediation within data clean rooms and ensuring changes are implemented in risk-free, not runtime, environments. And importantly, Rubrik also provides a rapid 5-step program that greatly shrinks identity remediation time. Time is money.

Sticking with identity for a moment, the security company launched the Rubrik Identity Recovery Solution just a few quarters ago. The launch extended its data protection to popular identity sources like Microsoft’s Active Directory (on-prem) and Entra ID (cloud-based). This RBRK product is already up to 200 customers and is winning large deals.

For Rubrik, identity is inherently tied to its overall data security business, which leadership believes is an edge. Combining the context from its DSPM product and other data security tools with its identity offering is, per Rubrik, entirely unique in the market and is creating rapid traction. The categoric conjoining utilizes data security cues to help customers more holistically understand potential vulnerabilities upon identity access granting. That enhances RBRK’s ability to track identity misconfigurations and impermissible alterations. It shows companies where sensitive data access could be happening and where to focus in case of a breach.

Separately, RBRK groups Threat Containment products into this overall recovery category. The module helps by making sure the recovery process is confined to a comparatively smaller piece of a company’s data infrastructure. Thanks to RBRK’s zero trust foundation, this product ensures that compromised portions of a firm’s data estate don’t lead to an adversary breaching the remainder of that estate.

Cloud Cyber Resilience – Hyperscaler Relationships as it Prioritizes Cloud-Based Data Protection:

As it keeps fixating on cloud-based data protection growth, it recently added integrations and coverage with Oracle Cloud Infrastructure (OCI) and Google Cloud to extend its interoperable, cloud-agnostic value proposition. The cloud-based portion of data security will likely be its most promising and durable growth vector. Focusing and executing here is imperative.

The relationship with Microsoft is the closest of any of the hyperscalers, considering MSFT actually owns a minority stake in the company. The two have co-developed some important products and seem to be collaborating quite nicely together. That’s refreshing after following CrowdStrike and SentinelOne for a few years and seeing the competitive threat Microsoft can represent. The mega-cap doesn’t have the best tech… but they do have the best bundle. Fortunately, that bundle (at least for now) will include Rubrik, rather than supplanting it. Amazon and Alphabet do try to compete a little more with Rubrik, but the relationships are still quite friendly in those cases too:

• RBRK has integrations with AWS that include collaborative work within storage, cyber resilience, cloud mobility and recovery products. It also just added native security support for AWS's Cloud Databases. This includes its Relational Database Service (RDS) and Amazon DynamoDB. RDS is for structured query language (SQL); Amazon DynamoDB is for not only SQL (NoSQL).
• RBRK boasts integrations with Google Cloud that include collaborative work within compute and storage, data security and data cost management.
  • RBRK was named the Google Infrastructure Modernization Partner of the year for 2025. 
  • RBRK also has a tight integration with Alphabet’s Mandiant Managed Detection and Response (MDR) offering.
• RBRK was named the Azure Healthcare & Life Sciences Partner of the Year for 2025.

Importantly, RBRK manages the movement of data to and from various public clouds. In 2025, virtually all enterprises want multi-cloud access for flexibility and redundancy; with Rubrik, they can use any provider and still be assured that data transferral and processing is efficient, interoperable and safe.

Cloud Cyber Resilience – Data Efficiency:

Its multi-cloud offering includes metadata that tags and groups low-priority information. With that capability, Rubrik routinely cuts customer costs by archiving what is no longer needed, thus minimizing storage while maintaining compliance. The fully managed archive product is called the Rubrik Cloud Vault (RCV).

Its Smart Tiering system (part of RCV) amplifies customer and partner savings in a couple of ways. First, it intelligently routes backups throughout its broad list of partners, automatically parking data at the best option at any given time. It constantly evaluates stored data to more quickly understand when and how the cheaper aforementioned archive tier can be leveraged. If archiving is the correct decision, Rubrik will “de-duplicate” and compress that chunk of data before it’s moved, further minimizing data egress and storage fees. This can result in massive (90%+) cuts to daily server backups, where most of that data consists of entirely redundant and identical files.

• You’ll also hear Smart Tiering called Intelligent Data Tiering and Cost-Optimizing Storage.

Enterprise AI Acceleration:

“Rubrik Annapurna” (RA) retrofits its data platform in ways that are purpose-built for AI application data security. RA preps data for secure AI model usage via vector-based reformatting and without leading to data leakage issues. This product greatly helps secure data pipelines within Retrieval-Augmented Generation (RAG). RAG is the actual process of feeding large language models (LLMs) needed data to perform tasks. 

Rubrik deepened its AI commitment with the recent purchase of Predibase for a little over $100M (cash and equity mix). This acquisition makes it a better AI adoption partner. Predibase fosters “production ready-AI” via granting customers an intuitive, low-code platform to customize, tune and tweak models so they can better handle a firm’s 1st-party data. That data is what makes AI applications valuable and differentiated. Predibase + Rubrik will make value creation in this realm a lot easier. The combination will “deliver radical simplicity” for AI assets, which will mean lower hallucination rates, more granular use cases and better performance. To make sure these efficiency gains are as dramatic as they can be, Predibase also features training and inference optimization support.

With the acquisition closed, Rubrik has already used the new assets to launch Agent Rewind. Like its original data backups allow companies to reverse breaches and return to a steady state of operations, this does that for Agents. It allows these machine-based assets to seamlessly “undo their own mistakes” by monitoring traffic and flagging issues as soon as they surface. This happens without full system rollbacks.

RBRK views Predibase as a key total addressable market (TAM) expander for their business. They envision it accelerating  AI enterprise adoption and deepening the value harvesting that will coincide. I see why they’re excited. Being a best-in-class enterprise backstop for data breaches and agentic errors while also making a client's usage of this new technology more successful is a compelling combination. It will give Rubrik a great chance of evolving with their customers as they tap into Agentic AI.

If they execute, RBRK should benefit from direct product sales, while faster enterprise AI adoption would mean more overall data demand and another indirect tailwind. Good purchase.

b. Financial Data & Most Recent Quarter