Rubrik, Inc. (RBRK)

Rubrik is an enterprise software company that built a market around a problem most large companies have not yet solved: how to back up, protect, and recover data in a world where computing happens everywhere at once. Traditional backup software was designed for the datacenter era, when companies owned their own servers and all data sat in one place. Today, applications and data are scattered across on-premises systems, multiple public clouds, and hybrid arrangements. Rubrik’s platform treats all of these as a unified landscape, allowing enterprises to protect and quickly recover data regardless of where it lives.

The company went public in 2023 and since then has been building a profitable, growing business that sits at the intersection of two enterprise spending trends: the shift to cloud computing and the rising cost of data breaches and ransomware attacks. When a breach happens or a disaster strikes, every hour of downtime can mean millions of dollars in lost revenue and customer trust. Rubrik’s software is designed to make that downtime as short as possible.

Why data protection matters more than it used to

The scale of data modern enterprises manage is staggering — terabytes, petabytes, sometimes exabytes. A decade ago, a company might have housed most of its operational data in a primary datacenter with a backup facility nearby. Today that same company might run applications on Amazon Web Services, store data in Microsoft Azure, manage Salesforce instances in the cloud, keep on-premises infrastructure for legacy systems, and orchestrate everything with orchestration platforms like Kubernetes.

A ransomware attack, a disgruntled insider, a natural disaster, or simply a developer mistake can corrupt or delete critical data in minutes. Recovery — getting the data back quickly enough that the business does not grind to a halt — is not a luxury, it is a competitive necessity. Rubrik’s argument is that the old point-in-time backup model, where you snapshot data once a day and hope yesterday’s copy is good enough, no longer serves that reality.

How Rubrik’s platform works

The company’s flagship product is a software platform that abstracts data across whatever infrastructure a customer is using. Instead of managing separate backup systems for on-premises VMware, AWS, Azure, and Google Cloud, an enterprise can use Rubrik as a single control plane that enforces consistent backup policies, retention rules, and recovery procedures across all of them. The software also includes built-in immutable snapshots (copies that cannot be deleted or encrypted by a ransomware attacker), rapid recovery capabilities, and forensic analytics that can help a company understand what was accessed and when.

Rubrik sells primarily as a SaaS subscription, meaning customers pay a recurring annual or multi-year fee for the software and the managed services that come with it. Some deployments are cloud-native (running on Rubrik’s managed infrastructure), while others are hybrid or on-premises (the customer runs Rubrik’s software inside their own infrastructure but pays for support and updates). That flexibility matters because many enterprises are wary of moving all their data protection to a vendor-hosted platform; having the option to run locally is a powerful sales asset.

Market position and competition

The data-protection market is crowded and long-established. Legacy names like Veritas, Veeam, and Commvault have decades of customer relationships and installed bases. Larger software and infrastructure companies — IBM, Dell, Hewlett Packard — also make backup software. Yet the market has undergone significant shift over the past five years as enterprises have moved toward cloud and begun consolidating their security stacks.

Rubrik’s competitive angle is not that it invented data protection, but that it rethought it for the cloud era. The company emphasizes the speed and simplicity of recovering from any point, across any infrastructure, without lengthy meetings with IT to figure out where a snapshot lives or how to restore it. In an industry where time-to-recovery is literally measured in dollars per minute, that framing resonates with chief information security officers and IT leaders.

The real competition is not always another backup vendor — it is the customer’s in-house engineering team, who may believe they can build a backup solution themselves. Many large enterprises attempt exactly that, and many fail, discovering that home-built solutions cannot scale to the complexity of modern distributed systems. Those projects often end with a call to a vendor like Rubrik.

Economics and scale

Data protection is a high-margin software business once a company reaches scale. The marginal cost of backing up one more customer is low — mostly support and some infrastructure. Rubrik’s public filings show the company pursuing a familiar SaaS playbook: invest heavily in sales and marketing to acquire customers, improve the product to reduce churn, and lean into upselling existing customers to expand annual contract value.

The unit economics are most visible in the dollar-based net retention rate — a metric showing how much incremental revenue the company gets from existing customers through upsells and expansion. A net retention rate above 120% (meaning each customer, on average, spends 20% more the next year) signals a product that is sticky and that the company is successfully expanding use cases within its installed base.

What an investor should watch

Anyone researching Rubrik should start with its quarterly shareholder letters and earnings call transcripts, available via SEC filings (CIK 0001943896). Key metrics to track include total customer count, annual contract value, gross margins (which reveal whether the company can scale without raising prices), and churn rate (the percentage of customers who do not renew). A rising churn rate would signal product or competitive weakness; stable or declining churn suggests the product is sticky.

Also watch how the company breaks out revenue by deployment model — cloud-native versus on-premises. The move toward cloud-native deployments (where Rubrik manages the infrastructure) is strategically important because it gives the company greater control, better data collection, and stickier customer relationships.

The broader market context also matters. The frequency and severity of ransomware attacks, regulatory requirements around data protection (including new rules from Europe and others requiring proof of recoverability), and the pace of enterprise cloud migration are all tailwinds. Any shift by regulators to mandate more frequent backups or faster recovery times benefits all vendors in the space.

Rubrik’s strategy hinges on being the simplest, fastest way for an enterprise to manage data protection across a fragmented infrastructure landscape. That is a substantial market, and the company’s public financials offer a clear window into whether it is winning.