Rubrik Just Quietly Became One of The Most Important Infrastructure Companies.
The AI Control Plane: Part 1 of 3
Everyone is fighting over the model layer. The model layer is a commodity. The control layer is the prize. Rubrik is the only company building enterprise-grade plumbing for both data resilience and AI agent governance, and the market is still pricing it like a backup vendor. This is the setup.
* * *
I. The Misclassification
Rubrik trades as a backup company. Almost every analyst report still leads with the words ’data protection’ or ’cyber resilience.’ That framing is wrong, and the misframing is the entire opportunity. Rubrik is no longer a backup vendor. It is the company building the operational substrate for two of the largest enterprise infrastructure rebuilds happening right now: the post-ransomware hardening of every Fortune 2000 data estate, and the governance layer for the AI agents those same enterprises are about to deploy at scale.
Either of those alone would justify a re-rating. Together, they create a TAM expansion that almost nothing else in software can match. And the market has not priced it. That gap is the trade.
Start with what Rubrik actually reported on March 12, 2026 for fiscal Q4 2026. Subscription ARR of $1.46 billion, growing 34 percent year-over-year. Net new subscription ARR of $115 million in a single quarter, a record. Subscription revenue of $364.9 million, up 50 percent. Free cash flow of $70 million in the quarter, $238 million for the full year. CEO Bipul Sinha, on the earnings call, said win rates against the entire competitive set crossed 90 percent. Not against legacy vendors. Against the entire field, including the next-generation challengers.
Chart 1: Rubrik Subscription ARR by Quarter, Q1 FY24 → Q4 FY26. Source: Rubrik IR filings, Shawarma Capital. From $587M to $1.46B in 12 quarters with no deceleration.
These are not the numbers of a backup company. SaaS infrastructure businesses growing 34 percent at $1.5B ARR scale, with 90 percent win rates and accelerating free cash flow, are the rarest objects in software. The closest analogs are CrowdStrike in 2020, Snowflake in 2021, and Datadog in 2019. All three of those companies were trading at 25 to 35 times forward ARR when they were at this growth profile. Rubrik trades at roughly 11 times. That is the entire setup in one sentence.
II. Why the Market Is Stuck
Three reasons explain the persistent discount. First, Rubrik went public in April 2024 in the middle of the regional bank chaos and the unwind of the AI capex trade. Its first six months as a public company were defined by lockup uncertainty and a bear market in growth software. The narrative that took hold was ’expensive backup company.’ That narrative is sticky.
Second, Wall Street has a hard time pricing platform expansions in real time. When Datadog moved from infrastructure monitoring into APM, then into security, then into log management, the stock spent two years at compressed multiples while the market argued whether each new module was real. Each one turned out to be real. Rubrik is in the middle of the same arc, except its expansion is into AI agent governance, which is the largest greenfield in enterprise software since the cloud transition itself.
Third, the financial profile is in transition. Rubrik booked GAAP losses through fiscal 2025 because it was building a sales motion to attack the enterprise market head-on. That investment cycle is now bearing out: free cash flow flipped from $24 million in FY25 to $238 million in FY26, a roughly 10x year-over-year expansion. Subscription contribution margin expanded over 950 basis points year-over-year. Guidance for FY27 is for non-GAAP EPS between $0.07 and $0.27, with FCF of $265 to $275 million. The company is past the J-curve. The model has flipped. The market has not adjusted.
The misclassification trade: When a high-growth platform company is mispriced because the market still thinks of it as its previous, narrower business, the re-rating happens in a single quarter or a single guide. Rubrik has had four consecutive quarters of accelerating net new ARR. The next earnings print, in late May 2026, will be the most-watched RBRK report in the company’s history.
* * *
III. The Win Rate Story
The single most important data point from Rubrik’s Q4 FY26 call was this: win rates north of 90 percent across every competitive vendor. CFO Kiran Choudary and CEO Bipul Sinha both repeated it. Not against legacy vendors only. Against everyone.
Win rates above 90 percent in enterprise software are extraordinarily rare and almost always indicate one of two things: either the product is a fundamental category winner, or the salesforce is operating with a structural advantage the competition cannot replicate. In Rubrik’s case, both are true.
Chart 2: Rubrik Q4 FY26 Win Rates by Competitor. Source: Rubrik earnings call commentary, Shawarma Capital analysis. Win rates above 90% across legacy and next-generation challengers.
The product advantage is the platform itself. Veeam is a backup product. Cohesity is a backup product. Commvault is a backup product. Dell PowerProtect is a backup product. Rubrik is a security platform that does backup as one of seven things. When a CISO walks into a vendor evaluation in 2026, they are no longer buying backup. They are buying ransomware recovery, identity resilience, data security posture management, and now AI agent governance. Rubrik is the only vendor that ships all of these natively on the same control plane. Every other vendor is forced to either bolt on partner integrations or tell the customer ’we are working on it.’ That comparison is brutal at the level of a sixty-minute architecture review.
The salesforce advantage is the result of two years of disciplined go-to-market investment that Wall Street penalized in the meantime. Rubrik built a direct enterprise sales motion focused on the top 5,000 accounts globally, with a customer base that now includes 2,805 customers paying more than $100,000 in annual subscription, up 25 percent year-over-year. Net retention sits above 120 percent, meaning the average customer is spending 20 percent more per year than the year before. That is the engine of compounding ARR growth, and it is sustainable as long as the platform keeps expanding
Chart 3: Rubrik Customers >$100K ARR. Source: Rubrik IR. 61% growth in 24 months, with average contract size still expanding.
IV. The Real Story: Agent Cloud and the AI Control Plane
If win rates and ARR growth were the entire story, this would already be a compelling thesis. But the real reason to own Rubrik right now is what the company announced on October 22, 2025, at very little fanfare: Rubrik Agent Cloud. And what it followed up with on March 23, 2026, at RSA Conference 2026: the Semantic AI Governance Engine, called SAGE.
Here is the problem Rubrik just solved. Every Fortune 500 company is now deploying AI agents. Microsoft Copilot Studio, Amazon Bedrock, OpenAI’s agent SDK, custom-built agents on LangChain, agents inside Salesforce, agents inside ServiceNow. CEOs are demanding it. CIOs are deploying it. And CISOs are quietly losing their minds, because nobody has any idea what these agents are doing, what data they touch, what actions they take, or how to undo a destructive action when an agent goes wrong. As Rubrik CEO Bipul Sinha put it on the launch call: ’AI agents have the potential to cause 10x the damage in 1/10 of the time.’
The default state today is that AI governance lives in PowerPoint decks. Companies write policies, route them through committees, and then watch agents get deployed without any of those policies being technically enforced. The death-by-committee stall pattern is the dominant blocker to AI ROI right now. Rubrik Agent Cloud kills that pattern. It sits between the application layer, the agent layer, and the underlying LLM, and it provides three things no other vendor can ship in a single product: real-time discovery and monitoring of every agent in the environment, real-time policy enforcement on agent inputs and outputs, and a remediation feature called Agent Rewind that ties directly into Rubrik’s existing backup snapshots to undo destructive agent actions.
Why this is the trillion-dollar TAM: Every enterprise that deploys AI agents needs governance. Every governance solution needs the ability to undo. Only one company in the world has both the data resilience snapshot infrastructure and the security-grade enforcement engine to deliver this at enterprise scale. That company is Rubrik
Chart 4: Rubrik TAM Expansion. Source: Gartner, McKinsey, IDC, Shawarma Capital analysis. From a $24B core data protection market to a $75B+ combined opportunity by 2030.
SAGE, announced at RSAC 2026, takes this further. It is a custom small language model that interprets the semantic intent of governance policies, rather than relying on brittle keyword matching or static rule lists. In Rubrik’s published benchmarks, SAGE processes agent interactions five times faster than OpenAI’s GPT-5.2 while detecting policy violations more accurately. The company is the first to bring a purpose-built SLM to AI governance. Microsoft, Google, and AWS will eventually try to build comparable products. Rubrik is approximately eighteen months ahead of every one of them, and crucially, it is vendor-neutral. Microsoft will only govern Microsoft agents. AWS will only govern AWS agents. Rubrik governs all of them on a single pane of glass. That is exactly the architectural position OKTA occupied for identity, and exactly the position CrowdStrike occupied for endpoint.
V. The Macro Tailwind: Cyber Resilience Becomes Mandatory
The cyber resilience market is not a soft TAM. It is a regulatory floor that is being legislatively cemented in real time. In the European Union, NIS2 is now in force. DORA has applied since January 2025. The EU Cyber Resilience Act adds reporting obligations starting in September 2026, with broader obligations from December 2027. In the United States, multiple federal agencies are signaling national cyber resilience mandates for critical infrastructure and federal supply chain partners arriving in 2026. The direction is not ambiguous. Every regulator on earth is converging on the same conclusion: prevention is impossible at scale, recovery must be provable.
Chart 5: Cyber Resilience Market 2025–2034. Source: Industry analyst consensus, Shawarma Capital. From $20.6B to $223B at 27% CAGR — the fastest-growing segment in cybersecurity.
The macroeconomic shift here is that cyber insurance carriers now require proof of immutable backups, tested recovery, and active threat detection before issuing policies. That gates corporate spending. A CFO who refuses to renew a Rubrik contract is a CFO who is also losing the company’s cyber insurance, which is very quickly becoming uninsurable for any large enterprise without these controls in place. This is a structural floor under demand that did not exist three years ago.
VI. The Competitive Landscape Is Not What You Think
When most investors look at Rubrik’s competitive set, they see Veeam, Cohesity, Commvault, and the legacy backup vendors. That is the wrong frame. The real competitive question is: what is the architectural shape of the winning enterprise platform for cyber resilience plus AI governance? And the answer is that there are three categories of companies trying to win, and Rubrik is the only one in the third category.
Chart 6: Platform Breadth Comparison. Source: Vendor product documentation, Shawarma Capital analysis. Rubrik is the only vendor with native coverage across all five layers of the stack.
Category one is the legacy backup vendors trying to bolt on security: Veeam, Commvault, Veritas, Rubrik’s old peers. They are losing because their architectures were never designed for the security workflow. They are still winning small renewals on inertia, but their net new logo numbers are flat or declining. Cohesity acquired Veritas in 2024 to try to consolidate this category. The integration is not going well, and the combined entity is losing share quarter over quarter to Rubrik.
Category two is the security pure-plays trying to push down into data: CrowdStrike, SentinelOne, Palo Alto Networks. They have the security DNA but they do not have the data infrastructure. CrowdStrike cannot snapshot a Microsoft Exchange server. Palo Alto cannot restore a corrupted Salesforce object. They will partner with backup vendors before they ever build native data protection, because the engineering investment is enormous and not core to their model.
Category three is Rubrik. The only company that started with a true cloud-native, security-first data platform from day one and is now the only one with both the snapshot infrastructure and the security enforcement layer to govern AI agents end-to-end. There is no second-place finisher in this category. There may eventually be one. There is not one today, and Rubrik has at least an eighteen-month lead.
VII. The Bottom Line
Rubrik is a 34 percent grower at $1.5 billion ARR with 90 percent win rates, 12 percent and expanding subscription contribution margin, $238 million in FCF, a category-defining new product in Agent Cloud, regulatory tailwinds across every major economic geography, and the only vendor-neutral architecture in AI agent governance. It trades at approximately 11 times forward ARR. The cybersecurity peer set trades at 16 to 24 times forward ARR. The next-generation platform peer set trades at 18 to 35 times forward ARR. There is no fundamental reason for the discount. The discount is a market mistake, and market mistakes get corrected.
Part 2 will lay out the full valuation work, including the ARR scenario model through FY30, the comparable multiple analysis, and the price target framework that gets you to $250 to $300 on a probability-weighted basis. Part 3 will build the catalyst map, the specific quarterly events that will force the re-rating, and the risk framework. But you do not need to read those to understand the setup. The setup is in the numbers I just walked you through.
The thesis in one paragraph: Rubrik is the only public company that combines the data infrastructure required to recover from a ransomware attack with the security infrastructure required to govern an AI agent. Every Fortune 2000 enterprise needs both. The market still prices Rubrik as a backup company. That mispricing will not survive the next four earnings prints. Buy below $80. Hold through the re-rating.
* * *
I am long $RBRK equity. This is research synthesis, not investment advice. You should not buy or sell securities based on anything I write. I am not a registered investment advisor; I do not owe you a fiduciary duty; my conclusions could be wrong in ways I have not anticipated. Financial projections are model outputs based on publicly available data. They are not guarantees. Do your own due diligence.
More in this series
The AI Control Plane: The Complete Series
The New Era of CyberSecurity: Agentic AI
The Math Says $250. The Bull Case Says $400. Either Way, the Multiple Is Wr