Rubrik, Inc. (RBRK) Business Profile

What it does

Rubrik sells software that helps organizations protect data and recover it after cyberattacks, operational failures and other disruptions. Its customers range from smaller businesses to large organizations and public-sector entities. The company is headquartered in Palo Alto, California, and its chief executive officer is Bipul Sinha.

Its main suite, Rubrik Security Cloud, is delivered primarily as cloud-based subscription software. It brings together data backup and recovery, threat detection, identity security and tools for finding sensitive information. Customers can use it to protect data held in their own systems, cloud applications and software-as-a-service applications, as well as identity services used to control access.

The platform keeps information about data and its context over time. Rubrik uses that information to look for unusual activity, identify potential threats and find recovery points that are free of known malware. Its design assumes that infrastructure can be breached and requires authentication rather than automatically trusting access requests.

Rubrik also sells Rubrik Agent Cloud, an AI operations suite that became commercially available in February 2026. It is designed to monitor and control actions by AI agents, apply guardrails and undo unwanted actions. The two suites use the same underlying technology architecture.

How it makes money

Rubrik primarily sells subscriptions to Rubrik Security Cloud through its sales team and partner network. Customers buy editions that combine different levels of protection, monitoring and recovery capabilities. The Foundation Edition focuses on keeping data secure and recoverable; the Business Edition adds ransomware monitoring; and the Enterprise Edition adds data-risk monitoring and orchestrated cyber recovery.

Customers can start by protecting one type of data or identity service, then expand as they secure more data, add applications or identities, or buy additional security products. The platform also supports use cases such as finding sensitive data, investigating threats and planning recovery. Rubrik Agent Cloud adds an AI agent operations suite to the product offering.

Rubrik recognizes revenue from most Rubrik Security Cloud subscriptions over the subscription term. Most subscription sales have three-year terms and are paid upfront, while renewals are typically for one year. A self-managed version for selected customers with strict data-control requirements has a different revenue-recognition pattern: part is recognized on delivery and the rest over the subscription term. Rubrik also offers a specialized cloud service for U.S. public-sector organizations.

The company has largely completed the transition of existing customers from its older data-management capabilities to Rubrik Security Cloud. It expects subscription revenue to continue benefiting from customers exercising or forfeiting subscription credits through fiscal 2027, although it expects that benefit to decline sequentially. Rubrik expects Rubrik Security Cloud to remain the majority of revenue in fiscal 2027.

Customers and how it sells

Rubrik sells to organizations of different sizes across financial services, retail, transportation, energy, healthcare, technology, education and other industries. It has dedicated sales teams for public-sector customers, including federal, state and local government organizations. Its sales organization is divided by geography and the size of prospective customers, while an inside sales team serves smaller customers.

The company sells subscriptions through channel partners using an indirect, two-tier fulfillment model. It also offers SaaS products through the marketplaces of technology alliance partners, including GCP, Azure and AWS. Other partners include system integrators, managed service providers and technology partners that help generate leads, implement products and provide services.

Two partners account for substantial portions of revenue: Partner B represented 32.0% and Partner A represented 27.0% in fiscal 2026. Rubrik sells around the world and has invested in research and development, sales and marketing, and customer support in Europe, the Middle East and Africa, and in Asia-Pacific. International revenue from those regions increased from $250.4 million in fiscal year ended 2025 to $364.5 million in fiscal year ended 2026.

Suppliers and costs

Rubrik relies on a limited number of contract manufacturers to assemble appliances, test them and load Rubrik software onto servers. All Rubrik-branded appliances are built on servers designed and supplied by Super Micro Computer, known as Supermicro. A large majority of the customer enterprise data Rubrik secures relies on those appliances.

Under a direct-to-distributor arrangement, channel partners can order Rubrik-branded appliances directly from Supermicro. Rubrik’s agreement with Supermicro expires in November 2026 and has an option to terminate upon each automatic annual renewal thereafter. It does not require Rubrik to make minimum purchases.

Rubrik invests in product development, cloud infrastructure, sales and marketing, customer support and its partner ecosystem. It expects to continue spending substantial resources on those areas, as well as AI tools, international expansion and information security. The company has observed longer sales cycles alongside cost-conscious IT budgets and constraints on compatible commodity servers. Chip shortages and allocation constraints have increased server prices and, in some cases, extended lead times. Rubrik says such conditions can affect customer purchasing and deployment decisions.

Competitive position

Rubrik competes in data protection, recovery and security markets that it describes as competitive and rapidly evolving. It names Commvault, Dell EMC, IBM, Veeam and Cohesity as data management and protection competitors. It also faces smaller cloud and SaaS data-management vendors, as well as vendors focused on threat detection, identity recovery, data classification and other security or governance tools.

Customers evaluate products on factors including recovery after an attack, protection across cloud and SaaS environments, ease of use, reliability, integrations, pricing and customer support. Rubrik combines backup and recovery with security functions in a cloud-based platform. Its technology includes a proprietary way of representing data and its context over time, a threat engine, automated policies and integrations with other security tools.

Our reading: The combined protection and recovery platform is a potential source of differentiation because customers can use it across several data sources and security tasks, though competition spans many of those tasks. Our reading: The time-series data framework and integrations may support customer retention as deployments expand, but the evidence does not establish how difficult customers find it to switch. Our reading: Rubrik’s intellectual property provides some protection for its technology, while continued product development remains important in a market with changing requirements.

Growth opportunities

Rubrik’s growth strategy centers on winning new customers and expanding within existing accounts. Customers can increase their use as the amount of protected data grows, as they add applications and identities, or as they adopt more security products. The company also plans to cross-sell identity security, data governance and compliance products, and Rubrik Agent Cloud.

Rubrik plans to invest in both of its software suites and in its sales and partner network. It intends to develop more products and capabilities on its platform, including tools for governing agent access and recovering unwanted AI-agent actions. Rubrik Agent Cloud became commercially available in February 2026; the company expects Rubrik Security Cloud to remain its main driver of annual recurring revenue growth in fiscal 2027.

Geographic expansion is another priority. Rubrik expects to continue investing in teams and support across Europe, the Middle East and Africa, and Asia-Pacific. It also intends to pursue acquisitions of teams, technology and products to bring new capabilities to market.

Subscription annual recurring revenue grew for the twelve months ended January 31, 2026. Rubrik estimates that approximately 1 percentage point of that growth came from transitioning existing maintenance customers to subscription editions, a contribution that was largely completed in fiscal 2026.

Structural risks

• Renewals and expansion: Results could suffer if customers do not renew subscriptions or expand them to protect more data, applications or identities, or to add capabilities. Growth also depends on attracting customers and differentiating products from competing offerings.
• Operating losses and funding: Rubrik has a history of operating losses and may not achieve or sustain profitability. It expects operating losses to continue and operating cash flows to fluctuate between positive and negative amounts for the foreseeable future. It may need additional capital to execute growth initiatives.
• Security and AI: Cyberattacks, including ransomware, can interrupt operations, expose sensitive information and damage Rubrik’s reputation. Its use of generative and other AI tools can create operational risks and legal liability.
• Hardware supply: A large majority of the enterprise data Rubrik secures relies on appliances built with Supermicro servers. Component shortages and allocation constraints have increased server prices and extended lead times in some cases, potentially affecting customer purchases and deployments.
• Competition and market change: Data security markets have changing technology, standards and customer requirements. Rubrik’s results could be harmed if it does not compete effectively or if adoption of its approach falls short.

Bottom line

Our reading

Rubrik is a subscription software business built around protecting data and restoring it after disruption, with expansion tied to customers securing more data and buying additional capabilities. Its reach through partners and its combined recovery and security products support that model, while renewals, competition and reliance on Supermicro appliances remain material exposures. The company is also investing in AI-agent operations while continuing to report operating losses.