Rubrik Deep Dive

Access to 40+ earnings reviews from this season, my current portfolio/performance and so much more can be found here.

a. Rubrik Product Suite

General Niche:

Rubrik is a cloud-native data management and security firm. Its core mission is fielding, safeguarding and protecting a firm’s data. Data is everything in the age of AI. It’s how firms build differentiated models and apps, and it’s a primary target for adversaries. Enterprises must be confident that they can embrace this technology without dealing with endless data leakage, breaches and ballooning costs. That’s where Rubrik helps. 

Its overarching product suite is called the Rubrik Security Cloud (RSC). Like Zscaler in the world of network security, Rubrik deploys a zero trust approach to data security. This means an adversary can’t simply breach the most vulnerable piece of a firm’s value-rich information and gain free, perpetual access to everything else thereafter. There is constant vetting and verifying of traffic, with policies in place to ensure user friction is only created when required for sound security. Unsurprisingly, these policies are guided by years of scaled operations to master best practices, as well as AI.

Products:

Cyber Resilience – Backups:

One of the most important features RBRK offers is something called Immutable Backups. These are redundant, unimpacted data copies that cannot be altered by ransomware and other common attack forms. They’re fully separated from a client’s own operations, adding another layer of resilience.

The explosion of software our world has experienced necessitates this type of product – especially amid the current AI boom. AI agents furiously and ferociously collect data from all over the digital ether to conduct goal-oriented, multi-step tasks. This creates a tangled web of data connections and insatiable processing needs. AI participation requires that companies can prevent their data from being impermissibly accessed and/or jeopardized. BUT… this prevention never comes with a 100% success rate. Breaches happen and will continue to happen. Immutable Backups make that reality palatable, rather than devastating, for enterprises as they lean into AI. With Rubrik, customers enjoy a data insurance policy, as they can more rapidly, seamlessly and successfully return to a normal state of operations.

Cyber Resilience – Hygiene & Prevention:

While Rubrik is an expert at fixing the messes of others, its general “Data Resilience” niche includes several preventative tools as well. 

Its Data Security Posture Management (DSPM) provides a 30,000 ft. view of company data, observing misconfigurations and poor hygiene before those vulnerabilities lead to costly breaches. It makes security data discovery, categorization and risk management a lot more intuitive. Data Access Governance (DAG) is a close DSPM complement, as DAG provides a full picture of who is using sensitive data, while DSPM uncovers how they’re using it. That's how Rubrik customers have an easier and faster time with determining who has access beyond a minimum permission framework.

There's also a category of preventative tools it calls “Data Threat Analytics.” A core piece of this is next-gen anomaly detection that more rapidly uncovers abnormal usage patterns; it also guides where to investigate and counter potential attacks to up-level threat monitoring. Adversaries are constantly trying to break into RBRK data backups. While doing so is highly difficult, it's not impossible if an attacker can impermissibly obtain credentials. That happens all the time and anomaly detection quickly shows where this is occurring.

Finally, it has an active threat hunting product called “Turbo Threat Hunting.” As the name fittingly indicates, Turbo Threat Hunting enables rapid cyber recovery by scanning up to 75,000 data backups in under a minute. It achieves this speed by using randomized data file codes (industry lingo is pre-computed hash values). This method more instantly checks for any malware or other issues (industry lingo is known Indicators of Compromise). Metadata (context that describes and categorizes batches of data) is created, eliminating a need to tediously scan files one at a time.

Cyber Resilience – Recovery & Identity Recovery:

Its data recovery tools are real-time and lean heavily on aforementioned immutable backups to ensure it always has unaffected data copies to deploy. Its recovery products are grouped under the “Preemptive Recovery Engine” umbrella. This umbrella augments backups by constantly scanning them for any potential issues so that companies are 100% certain these backups are ready to go whenever needed. That's a lot of potential anxiety removed for its clients. From there, RBRK eliminates the risk of system reinfection by conducting remediation within data clean rooms and ensuring changes are implemented in risk-free, not runtime, environments. And importantly, Rubrik also provides a rapid 5-step program that greatly shrinks identity remediation time. Time is money.

Sticking with identity for a moment, the security company launched the Rubrik Identity Recovery Solution just a few quarters ago. The launch extended its data protection to popular identity sources like Microsoft’s Active Directory (on-prem) and Entra ID (cloud-based). This RBRK product is already up to 200 customers and is winning large deals.

For Rubrik, identity is inherently tied to its overall data security business, which leadership believes is an edge. Combining the context from its DSPM product and other data security tools with its identity offering is, per Rubrik, entirely unique in the market and is creating rapid traction. The categoric conjoining utilizes data security cues to help customers more holistically understand potential vulnerabilities upon identity access granting. That enhances RBRK’s ability to track identity misconfigurations and impermissible alterations. It shows companies where sensitive data access could be happening and where to focus in case of a breach.

Separately, RBRK groups Threat Containment products into this overall recovery category. The module helps by making sure the recovery process is confined to a comparatively smaller piece of a company’s data infrastructure. Thanks to RBRK’s zero trust foundation, this product ensures that compromised portions of a firm’s data estate don’t lead to an adversary breaching the remainder of that estate.

Cloud Cyber Resilience – Hyperscaler Relationships as it Prioritizes Cloud-Based Data Protection:

As it keeps fixating on cloud-based data protection growth, it recently added integrations and coverage with Oracle Cloud Infrastructure (OCI) and Google Cloud to extend its interoperable, cloud-agnostic value proposition. The cloud-based portion of data security will likely be its most promising and durable growth vector. Focusing and executing here is imperative.

The relationship with Microsoft is the closest of any of the hyperscalers, considering MSFT actually owns a minority stake in the company. The two have co-developed some important products and seem to be collaborating quite nicely together. That’s refreshing after following CrowdStrike and SentinelOne for a few years and seeing the competitive threat Microsoft can represent. The mega-cap doesn’t have the best tech… but they do have the best bundle. Fortunately, that bundle (at least for now) will include Rubrik, rather than supplanting it. Amazon and Alphabet do try to compete a little more with Rubrik, but the relationships are still quite friendly in those cases too:

• RBRK has integrations with AWS that include collaborative work within storage, cyber resilience, cloud mobility and recovery products. It also just added native security support for AWS's Cloud Databases. This includes its Relational Database Service (RDS) and Amazon DynamoDB. RDS is for structured query language (SQL); Amazon DynamoDB is for not only SQL (NoSQL).
• RBRK boasts integrations with Google Cloud that include collaborative work within compute and storage, data security and data cost management.
  • RBRK was named the Google Infrastructure Modernization Partner of the year for 2025. 
  • RBRK also has a tight integration with Alphabet’s Mandiant Managed Detection and Response (MDR) offering.
• RBRK was named the Azure Healthcare & Life Sciences Partner of the Year for 2025.

Importantly, RBRK manages the movement of data to and from various public clouds. In 2025, virtually all enterprises want multi-cloud access for flexibility and redundancy; with Rubrik, they can use any provider and still be assured that data transferral and processing is efficient, interoperable and safe.

Cloud Cyber Resilience – Data Efficiency:

Its multi-cloud offering includes metadata that tags and groups low-priority information. With that capability, Rubrik routinely cuts customer costs by archiving what is no longer needed, thus minimizing storage while maintaining compliance. The fully managed archive product is called the Rubrik Cloud Vault (RCV).

Its Smart Tiering system (part of RCV) amplifies customer and partner savings in a couple of ways. First, it intelligently routes backups throughout its broad list of partners, automatically parking data at the best option at any given time. It constantly evaluates stored data to more quickly understand when and how the cheaper aforementioned archive tier can be leveraged. If archiving is the correct decision, Rubrik will “de-duplicate” and compress that chunk of data before it’s moved, further minimizing data egress and storage fees. This can result in massive (90%+) cuts to daily server backups, where most of that data consists of entirely redundant and identical files.

• You’ll also hear Smart Tiering called Intelligent Data Tiering and Cost-Optimizing Storage.

Enterprise AI Acceleration:

“Rubrik Annapurna” (RA) retrofits its data platform in ways that are purpose-built for AI application data security. RA preps data for secure AI model usage via vector-based reformatting and without leading to data leakage issues. This product greatly helps secure data pipelines within Retrieval-Augmented Generation (RAG). RAG is the actual process of feeding large language models (LLMs) needed data to perform tasks. 

Rubrik deepened its AI commitment with the recent purchase of Predibase for a little over $100M (cash and equity mix). This acquisition makes it a better AI adoption partner. Predibase fosters “production ready-AI” via granting customers an intuitive, low-code platform to customize, tune and tweak models so they can better handle a firm’s 1st-party data. That data is what makes AI applications valuable and differentiated. Predibase + Rubrik will make value creation in this realm a lot easier. The combination will “deliver radical simplicity” for AI assets, which will mean lower hallucination rates, more granular use cases and better performance. To make sure these efficiency gains are as dramatic as they can be, Predibase also features training and inference optimization support.

With the acquisition closed, Rubrik has already used the new assets to launch Agent Rewind. Like its original data backups allow companies to reverse breaches and return to a steady state of operations, this does that for Agents. It allows these machine-based assets to seamlessly “undo their own mistakes” by monitoring traffic and flagging issues as soon as they surface. This happens without full system rollbacks.

RBRK views Predibase as a key total addressable market (TAM) expander for their business. They envision it accelerating  AI enterprise adoption and deepening the value harvesting that will coincide. I see why they’re excited. Being a best-in-class enterprise backstop for data breaches and agentic errors while also making a client's usage of this new technology more successful is a compelling combination. It will give Rubrik a great chance of evolving with their customers as they tap into Agentic AI.

If they execute, RBRK should benefit from direct product sales, while faster enterprise AI adoption would mean more overall data demand and another indirect tailwind. Good purchase.

Latest release (section added end of October 2025)

Rubrik launched their Agent Cloud offering this week. It’s built on Rubrik Security Cloud (RSC) and (I think) has a great chance to resonate with clients. The purpose of the debut is clear. Agents are exploding in size and creating a massive new autonomous machine asset class. These machines race around the digital ether to collect information for task completion and openly reason on how best to complete those tasks. That’s very exciting. It can vastly accelerate productivity while cutting costs and eliminating tedious work from day-to-day schedules. But? It also creates a large new security risk. These autonomous assets aren’t perfect. They make mistakes and reason incorrectly just like people do. And furthermore, adversaries are openly targeting them, knowing a successful hack can lead to a much larger, more persuasive and more damaging breach. These agents move very quickly and touch many parts of the online world. That’s immensely valuable for productivity, but also means corporations must concede a bigger security risk.

Agent Cloud is meant to eliminate that security concession. It’s a way for companies to confidently embrace this disruptive asset class, while enjoying its profound positives and minimizing the negatives.

Specifically, Agent Cloud includes three products. First, Agent Monitor flags and organizes infrastructure-based and platform-based agents across public cloud environments. This observability product provides a bird’s-eye view of all agentic assets in circulation, fostering a more complete idea of agentic operations. Knowledge is power… but knowledge with actionable work stemming from it is even more powerful. That’s where the other two products help.

Secondly, Agent Govern is what actually tracks agent performance. It uncovers which parts of prompts are potentially leading to suboptimal work, with real-time tools to tweak those prompts and broader policies. This is the agentic performance optimizer, which tightly integrates with popular identity directories. That’s so important, as it means companies can implement the same human-based access guardrails they have for machine-based assets. They can use that experience rather than having to learn brand new ways to set ID policies. All of this again minimizes the tradeoff between agentic adoption and security headache.

The third product in this release is perhaps the most exciting. It’s called Agent Remediate. Many companies have great observability and configuration tools for cloud and agent-based assets. It’s far more rare for them to have modules that can actively undo agent-based blunders. Rubrik leverages the “Agent Rewind” capability that it debuted in August (thanks to its Predibase purchase) to make this possible. With it, RBRK can rapidly determine which pieces of a company are vulnerable to an agentic error (called a “blast radius”). It can then use its immutable data backups to revert to the most recent, pre-error environment. I love seeing them applying their bread-and-butter product to new categories. Agent Remediate expedites time to normalization and diminishes the amount of a digital estate that’s affected. Both of these things lower customer costs – especially considering this happens without any “downtime or data loss.” Rubrik can proactively find and fix agentic errors before they become a catastrophe. 

Going back to Predibase for a moment. The entire point of that purchase was to help Rubrik accelerate enterprise AI adoption. They call this acceleration process “AI enablement.” indirectly benefits from this enablement via the large boost in overall company assets that need protecting. Their product suite was already well-positioned for that before this launch. With this release and Predibase’s low-code agent and model customization tools, it is quickly rounding out exciting capabilities to directly harvest financial value from AI enablement.

b. Financial Data & Most Recent Quarter