Breaking Down a Data Fortress

A high-growth SaaS play, built for the AI era.

Welcome back to GRIT Alpha! This week we’re analyzing a company that helps enterprises achieve business resilience against cyberattacks, malicious insiders, and operational disruptions. They secure data wherever it lives — across enterprise, cloud, and SaaS — helping businesses brace for a world full of bad actors.

Dive in with us below! Before you do — check out the offer below.

Consider checking out a huge offer for 5 free hotel nights on one of our favorite travel rewards credit cards. This is the best offer we’ve seen this year for this card.

Stock Pick: Rubrik (RBRK-US, $16.8B MCAP)

Execution eats strategy for breakfast.

Earnings season is the ultimate showcase of execution.

Every quarter, public companies head to the confessional to provide financial statements that give an in-depth, boots-on-the-ground look at how the company is operating. When you read enough of these filings, you start to develop an eye for “what to look for.”

What I want to do this week, is look at a company with the best execution in a currently unloved section of the market: software. This area of the market has gone through an interesting couple of years. Multiples rapidly expanded over Covid, while profitability was low as players in the space aggressively spent to capture market share.

Post-Covid, we saw massive multiple compression as IT budgets pulled back on overspend, through a period widely known as optimization. Over this period, companies “got fit” by becoming much more profitable as growth rates slowed.

Now, there are several very attractive names in the space on a valuation basis. At the same time, we are seeing a reacceleration in growth rates as AI adoption increases.

A stock that can put up the numbers even in tighter times is right in my wheelhouse, and this company has done this in spades.

  • Why now? 👉 Cloud Data Protection Tailwinds

  • Overview 👉 What Does Rubrik Do?

  • Competitive Landscape 👉 Data Security and Backup Rivals

  • Product Suite 👉 Rubrik’s Cloud Security Platform

  • How Do They Make Money? 👉 Subscription SaaS at Scale

  • Ecosystem Fit 👉 Strategic Positioning

  • By The Numbers 👉 Key Metrics

  • Risks 👉 Potential Pitfalls

Why now? 👉 Cloud Data Protection Tailwinds

Enterprises face mounting data challenges—massive cloud migrations, soaring ransomware, and stricter regulations—creating powerful tailwinds for cloud-centric security vendors like Rubrik. Fragmented data sprawls across on-prem and multi-cloud environments, overwhelming legacy backup tools. Rubrik’s cloud-native platform unifies protection for datacenters, SaaS apps, and cloud workloads; its immutable backups and rapid recovery meet rising cyber-resilience mandates as ransomware attacks climb >150% annually.

AI adoption and privacy rules further enhance Rubrik’s appeal: its data-classification and governance capabilities protect training datasets and enforce compliance, while new integrations let customers safely tap governed backups for AI use-cases. These forces have placed Rubrik squarely in demand: revenue surged 49% YoY last quarter, and its shares have tripled since the April 2024 IPO, underscoring how cloud data protection has shifted from back-office task to boardroom priority—and why Rubrik’s zero-trust message is resonating.

Overview 👉 What Does Rubrik Do?

Source: Company Filings

Rubrik brands itself a Zero Trust Data Security platform, tasked with protecting and governing critical data on-prem and in the cloud. Founded in 2014 as “ScaleData,” it introduced an “iCloud for enterprise” model that replaced fragmented backup gear with an integrated appliance-plus-software stack. That stack automated policy-driven protection for virtual machines, databases, and files, while rule-based engines let admins set service level agreements and retention in clicks, eliminating manual scripting.

The mandate has since widened from backup to full data security. Today’s Rubrik Security Cloud bundles backup and disaster recovery with ransomware detection, sensitive-data discovery, and orchestrated cyber recovery, now covering 25-plus SaaS and cloud-native workloads. Immutable snapshots prevent attackers from encrypting backups, and subscription SaaS licensing streamlines procurement. Rather than just storing copies, the platform continually scans for anomalies, locks clean snapshots, and spins workloads back up within minutes after an attack, user error, or infrastructure failure.

As ransomware losses and regulatory scrutiny mount, backup has shifted from back-office chore to board-level risk control. That sea change has turned Rubrik’s tools from “nice-to-have” to essential insurance for data-driven enterprises, propelling its evolution from cloud-backup pioneer to end-to-end data-security leader.

CEO Bipul Sinha sums up the mission: when infrastructure is compromised or fails, a company’s data—and thus its operations—must be rapidly restored.

Competitive Landscape 👉 Data Security and Backup Rivals

Rubrik competes in a crowded data-protection field that includes Cohesity, Veeam, Commvault, Dell EMC, Druva, and OwnBackup. To stand out, Rubrik pivoted from “just backup” to cyber-resilient, cloud-native data security—leveraging its immutable file system and timeline restore for ransomware recovery and governance. That strategy pulls it into the broader security stack, where it partners (rather than clashes) with leaders like CrowdStrike and Zscaler: CrowdStrike supplies endpoint telemetry, Zscaler the zero-trust network layer; Rubrik provides the data “last line of defense.” Although platform giants such as Microsoft, Palo Alto, or the hyperscalers could encroach, Rubrik is carving a Snowflake-style niche—reimagining legacy backups for the cloud era and aiming to define the emerging “data security” category before incumbents catch up.

Source: Company Filings

Product Suite 👉 Rubrik’s Cloud Security Platform

Rubrik has grown into a full Cloud Data Security Platform. Its foundation is automated, policy-driven backup, replication, and rapid recovery for on-prem, cloud, and SaaS workloads, with all snapshots kept immutable to meet Zero-Trust standards. Around that core, Rubrik bundles:

  1. Threat Detection & Analytics – ML models flag ransomware-like anomalies; integrations (e.g., CrowdStrike) map infections to specific files and apps.

  2. Data Security Posture Management (DSPM) – via the Laminar buyout, Rubrik now discovers “shadow data,” maps permissions, and highlights risky exposures across clouds, bolstering compliance.

  3. Sensitive-Data Classification & Compliance – scans backups for regulated financial fields, applies policies, and honors labels like Microsoft Sensitivity.

  4. Orchestrated Cyber Recovery – isolated clean-room restores, Cloud Vault off-site copies, instant mass VM recovery, and identity-system rebuilds minimize downtime.

All capabilities sit in the Rubrik Security Cloud, managed through one UI and delivered mostly as SaaS (with optional appliances). By spanning preventive posture, detective analytics, and rapid recovery, Rubrik positions itself as an end-to-end “Zero Trust Data Security” shield rather than just another backup tool.

How Do They Make Money? 👉 Subscription SaaS at Scale

Source: Company Filings

Subscribe to Premium to read the rest.

Become a paying subscriber of Premium to get access to this post and other subscriber-only content.

Already a paying subscriber? Sign In.

A subscription gets you:

  • • 2x FREE newsletters a month 📩
  • • 2x PAID Deep Dive newsletters a month 📩