Research Finder
Find by Keyword
Is Rubrik Building the Behavioral Governance Layer That Agentic AI Actually Requires?
Strong Q1 FY2027 results provide evidence that cyber resilience is expanding beyond recovery and into AI accountability.
6/10/2026
By the Numbers
Revenue: $387.1 million, up 39% year over year
Subscription ARR: $1.57 billion, up 32% year over year
Subscription NRR: ~120%
Non-GAAP Gross Margin: 82.9%, up from 80.5% year over year
GAAP Net Loss: $41.8 million, improved from $102.1 million in Q1 FY2026
Free Cash Flow: $74 million, up from $33 million year over year
Key Highlights
- Cloud ARR reached $1.39 billion, up 43%, representing 89% of total subscription ARR, placing Rubrik's cloud transition in its final stages.
- Identity Resilience surpassed $50 million in subscription ARR after 38% quarter-over-quarter growth, establishing a second material growth vector and opening CISO-level buyer relationships.
- Rubrik Agent Cloud entered early production deployments during the quarter, with policy-based agentic governance.
- The Predibase acquisition is now integrated into Agent Cloud, providing the LLM fine-tuning and inference serving infrastructure that underpins Rubrik’s Semantic AI Governance Engine (SAGE).
- Rubrik was granted access to Anthropic's Mythos Research Preview through Project Glasswing, ahead of broader availability.
- The Sophos partnership, announced in August 2025, reached general availability during the quarter, delivering integrated Microsoft 365 backup and recovery.
The News
Rubrik reported Q1 FY2027 financial results on June 4, 2026, exceeding all guided metrics and raising full-year guidance across revenue, ARR, margins, and free cash flow. Revenue grew 39% year over year to $387.1 million, and the company raised its full-year subscription ARR outlook to $1.854 billion to $1.862 billion. The quarter included the general availability of the Sophos partnership for Microsoft 365 recovery, early production deployments of Rubrik Agent Cloud in financial services, and Rubrik's inclusion in Anthropic's Project Glasswing. Management raised all FY2027 guided metrics and framed agentic AI as the defining demand driver for the business going forward. For more details, read the company’s official earnings press release.
Analyst Take
Rubrik's Q1 FY2027 results confirm continued enterprise demand for cyber resilience. Revenue grew 39% year over year, subscription ARR reached $1.57 billion, and management raised guidance across revenue, ARR, margins, and free cash flow. More importantly, the quarter highlights expansion beyond recovery and ransomware protection into identity, governance, and AI accountability.
The HyperFRAME Research Lens 1H 2026 report finds that 78% of organizations consider AI strategically important, yet only 37% have established a structured process for evaluation and deployment. Organizations are moving AI initiatives into production while governance frameworks remain immature. We view this gap as one of the defining infrastructure challenges of the current AI cycle.
Rubrik's Identity Resilience business and Agent Cloud strategy are designed to address different aspects of that challenge. Together they suggest a broader strategic ambition centered on oversight, accountability, and operational trust.
The cyber resilience market is evolving. Recovery remains foundational, but organizations are now focusing on understanding who accessed data, what actions were taken, and how those actions can be audited, governed, and reversed. As AI agents are more deeply embedded into enterprise workflows, those requirements become more urgent. Identity is emerging as a critical control point within this transition. Rubrik's Identity Resilience business surpassed $50 million in subscription ARR during the quarter, demonstrating growing customer demand for protecting and recovering identity systems alongside traditional workloads and data. Modern cyberattacks frequently target identity infrastructure before data itself, making identity recovery an increasingly important component of organizational resilience.
Vendors across the cyber resilience market are expanding their platforms organically and through acquisitions. Commvault has strengthened its identity and security posture capabilities, while Veeam continues to position DataAI and precision recovery around governance and trust. In our view, Rubrik's differentiation lies in its emphasis on behavioral oversight through Agent Cloud and SAGE. These capabilities address a growing accountability challenge as organizations deploy more autonomous systems.
As organizations deploy more autonomous agents, the focus expands beyond protecting data to understanding how AI systems access information, make decisions, and interact with enterprise resources. Policy enforcement, auditability, and recovery are becoming more interconnected. Rubrik is sharpening its focus on behavioral governance: controlling and auditing how identities and AI systems interact with enterprise data.
AI activity is becoming more distributed across cloud services, SaaS applications, infrastructure platforms, and intelligent endpoints. This creates new oversight challenges as organizations seek visibility into how AI systems access data and take action.
What Was Announced
The quarter's most significant product development was the integration of the Predibase acquisition into Rubrik Agent Cloud and the introduction of SAGE, the Semantic AI Governance Engine. Rubrik positions SAGE as the first AI governance engine purpose-built to guardrail autonomous agents in real time by monitoring agent actions, enforcing data access policies, and providing remediation capabilities when outcomes diverge from policy.
CEO Bipul Sinha described a 50% sequential quarter-over-quarter increase in executive-level discussions with CIOs and CISOs, attributing the acceleration to rising enterprise urgency around agentic AI risk. Early proof-of-concept deployments converted to production during the quarter, with financial services customers adopting agent governance as a compliance requirement rather than a discretionary capability.
The identity business continued its expansion, crossing $50 million in subscription ARR. Sinha cited a U.S. agricultural company that expanded into Rubrik Identity Resilience following a ransomware attack that compromised its Active Directory environment, subsequently adding Entra ID and Okta protection as part of a broader hybrid identity recovery posture. Management described the identity business as a distinct expansion vector that opens CISO-level buyer conversations separate from Rubrik's traditional CTO and CIO relationships. This expands Rubrik's reach into CISO-led buying cycles and creates opportunities for larger, more strategic engagements.
On June 2, Rubrik announced participation in Anthropic's Project Glasswing, receiving access to the Mythos Research Preview frontier model for proactive vulnerability identification across its enterprise platform and product suites. Rubrik frames this as a security posture commitment consistent with the company's broader positioning around preemptive resilience.
CFO Kiran Choudary noted on the earnings call that all vectors of expansion are contributing to the approximately 120% subscription NRR, and that higher hardware and storage costs from the current NAND supply constraints have had no material impact on Rubrik given its software and cloud-first architecture.
Looking Ahead
Rubrik's recent investments suggest the company intends to expand its role beyond recovery and into broader questions of AI accountability and operational oversight.
Enterprise AI activity now spans cloud services, SaaS applications, on-premises infrastructure, partner ecosystems, and a growing population of AI-capable client devices. Visibility and control become more difficult as AI systems operate across environments with different ownership, security models, and controls. Shadow AI represents a growing manifestation of this challenge. Organizations continue to struggle with balancing AI innovation and governance, creating demand for technologies that improve visibility, accountability, and policy enforcement.
In our view, Microsoft remains a strategically important dependency for Rubrik across identity, endpoint security, productivity, and AI-enabled workflows. Powerful GPUs are rapidly becoming standard features in enterprise PCs, enabling local inference, autonomous agents, and AI-generated content to run directly on endpoint devices. As AI activity becomes more distributed, continued ecosystem integration will be important to maintaining visibility and accountability throughout the enterprise.
HyperFRAME will be watching the pace of SAGE production deployments, the continued expansion of the Identity Resilience business, and broader efforts across the industry to extend policy visibility and control across decentralized AI environments. As industry conversations expand into identity, governance, accountability, and AI risk management, Rubrik's investments indicate the company intends to participate directly in that evolution.
Don Gentile | Analyst-in-Residence -- Storage & Data Resiliency
Don Gentile brings three decades of experience turning complex enterprise technologies into clear, differentiated narratives that drive competitive relevance and market leadership. He has helped shape iconic infrastructure platforms including IBM z16 and z17 mainframes, HPE ProLiant servers, and HPE GreenLake — guiding strategies that connect technology innovation with customer needs and fast-moving market dynamics.
His current focus spans flash storage, storage area networking, hyperconverged infrastructure (HCI), software-defined storage (SDS), hybrid cloud storage, Ceph/open source, cyber resiliency, and emerging models for integrating AI workloads across storage and compute. By applying deep knowledge of infrastructure technologies with proven skills in positioning, content strategy, and thought leadership, Don helps vendors sharpen their story, differentiate their offerings, and achieve stronger competitive standing across business, media, and technical audiences.