At a glance
Rubrik was founded in 2014 by Bipul Sinha (CEO), Arvind Nithrakashyap, Soham Mazumdar, and Arvind Jain. Listed on NYSE (RBRK) in April 2024. Market capitalisation approximately $9 billion as of April 2026. Rubrik entered the DSPM market through its acquisition of Laminar (Israel) in August 2023, making it one of the first major incumbents to acquire DSPM capability. Laminar's technology has been integrated into the Rubrik Security Cloud (RSC) as Rubrik DSPM.
Rubrik's core business is data resilience — backup, recovery, ransomware protection, and data observability. The DSPM acquisition reflects a convergence thesis: organisations investing in ransomware recovery and backup also need to know what sensitive data they hold, where it lives, and who has access to it. The combined value proposition — "know what you have, protect it, and recover it" — is compelling at the CIO level.
What Rubrik DSPM actually is
Rubrik DSPM is the Laminar platform integrated into the Rubrik Security Cloud. It provides cloud-native DSPM discovery and classification across AWS, Azure, and GCP, with native labelling capability (applying Microsoft Purview labels) and data security posture management. The integration with Rubrik's backup platform creates a unique capability: using Rubrik's backup snapshots for DSPM scanning, which eliminates the need for separate scanning infrastructure and avoids performance impact on production systems.
This is a genuinely innovative architectural approach. Rather than deploying agentless scanners that query production data stores (which creates network traffic and requires appropriate access), Rubrik can classify data from backup snapshots — the same snapshots used for ransomware recovery. This means DSPM coverage requires no additional access provisioning beyond what backup already has.
Capability assessment
Strengths: Integration with backup infrastructure creates a unique discovery approach with minimal production impact. For existing Rubrik backup customers, the DSPM capability adds material value at incremental cost — a compelling TCO argument. The combined platform addresses both the recovery question ("can we restore after a breach?") and the prevention question ("do we know what sensitive data we hold?") from a single vendor. Public company stability and financial transparency. Strong enterprise channel and large existing customer base provides distribution advantage.
Weaknesses: The DSPM capability was acquired in 2023 and integration is still maturing — practitioner reviews note that some DSPM capabilities that were standalone in Laminar require additional configuration to activate in the Rubrik platform. SaaS and on-premises coverage is narrower than pure-play DSPM alternatives. There is no tokenisation capability. Identity management — a gap explicitly noted in the Omdia 2025 DSPM Universe report — leaves access governance as an area requiring complementary tooling. The value proposition is strongest for existing Rubrik customers; for non-Rubrik organisations evaluating standalone DSPM, the combined platform overhead is unnecessary.
Company health
Public company with approximately $9 billion market capitalisation. Post-IPO financial transparency provides buyers with confidence in commercial stability. Rubrik reported strong ARR growth in its first post-IPO reports. The data resilience market (backup, recovery, ransomware) is structurally growing as organisations treat ransomware as inevitable rather than preventable — this provides Rubrik with a durable revenue base from which to invest in the DSPM capability expansion.
Strengths and weaknesses
Best for: Existing Rubrik backup customers wanting to add data security governance at incremental cost. CIOs consolidating backup and security governance into a single vendor relationship. Organisations building ransomware resilience programmes that also need sensitive data visibility as part of the recovery planning process.
Worst for: Organisations evaluating standalone DSPM without existing Rubrik investment — pure-play alternatives offer more depth and faster deployment. Buyers whose primary requirement is SaaS data governance, access governance depth, or AI security monitoring. Non-cloud environments requiring on-premises DSPM coverage.
Negotiation and buying considerations
For existing Rubrik customers, negotiate DSPM access as a bundle with backup renewal — the combined deal economics are more favourable than standalone DSPM pricing. Get a specific roadmap commitment for the capabilities you need: identity management, SaaS source coverage, and access governance depth are areas where the roadmap matters more than the current state. For non-Rubrik organisations, the switching cost justification needs to work for both backup and DSPM simultaneously, which is a higher bar to clear.
Customer evidence
2,805 customers with $100K+ ARR (up 25% YoY). NRR consistently above 120%. 90%+ competitive win rate in Q4 FY2026. Named publicly: Las Vegas smart city, Iron Mountain, PepsiCo. Gartner Magic Quadrant Leader for 6th consecutive year.
Q4 FY2026 earnings — what changed
Rubrik's Q4 FY2026 results (March 2026) are materially better than the profile originally reflected. Key numbers: subscription ARR of $1.46 billion, growing 34% year-over-year; net new subscription ARR of $115 million in Q4 alone — a company record; free cash flow of $238 million for the full fiscal year 2026, more than 10x the prior year; subscription NRR above 120%; and competitive win rates crossing 90%.
The company launched a second product suite — Rubrik Agent Cloud — which is now generally available and in pilot use at Fortune 500 companies and AI startups. Rubrik Agent Cloud monitors and audits agentic AI deployments, providing dynamic guardrail controls for AI agents operating across enterprise environments. This positions Rubrik uniquely: the only vendor in VendorAudit's coverage that combines backup-snapshot DSPM, identity resilience (900 customers, doubled from 400 three quarters ago — the fastest-growing product in company history), and now AI agent monitoring in a single platform.
The identity business reaching 900 customers is the metric most buyers overlook. Rubrik is no longer just a backup vendor with a DSPM module — it is building toward a unified data, identity, and AI governance platform. Buyers evaluating Rubrik only through the lens of backup + DSPM are underestimating its trajectory.
The $238M free cash flow figure is significant in context: Rubrik is now more cash-generative than any private pure-play DSPM vendor has disclosed being — which puts the health scoring conversation on a different footing than a year ago.