Rubrik (RBRK) Q4 2026: Net New Subscription ARR Hits $115M as Identity and AI Drive Platform Expansion
Rubrik’s Q4 net new subscription ARR surged as identity and AI security adoption accelerated, outpacing legacy rivals and expanding its multi-product platform. The company’s strong free cash flow and margin gains reflect disciplined execution and a differentiated approach to cyber resilience and agentic AI control. Guidance points to continued double-digit growth as Rubrik leans into emerging customer needs around data, identity, and AI operations.
Summary
- Identity and AI Security Momentum: Identity recovery and agentic AI controls are rapidly expanding Rubrik’s platform relevance.
- Margin and Cash Flow Expansion: Improved operating leverage and disciplined execution fuel robust free cash flow and margin gains.
- Legacy Displacement Accelerates: Competitive win rates above 90% underscore continued share gains from incumbents.
Business Overview
Rubrik provides cloud-based data security and cyber resilience solutions, enabling enterprises to protect, recover, and govern critical data, identities, and applications across on-premises, cloud, and SaaS environments. The company’s core revenue streams are subscription-based, anchored by Rubrik Security Cloud for cyber resilience and the newly launched Rubrik Agent Cloud for AI operations. Rubrik’s business model centers on recurring subscription ARR, with major segments including data protection, identity resilience, and emerging agentic AI controls.
Performance Analysis
Rubrik delivered a record quarter with net new subscription ARR of $115 million, driving total subscription ARR to $1.46 billion, up 34% year-over-year. Subscription revenue grew 50%, and large customer momentum remained robust, with 2,805 customers contributing $100,000 or more in ARR (now 87% of total subscription ARR). Free cash flow for the year reached $238 million, more than 10x the prior year, highlighting operational discipline and scale benefits.
Gross margin improved to 84%, up four points year-over-year, reflecting greater efficiency in hosting costs and revenue outperformance. Margin expansion was also evident in the subscription ARR contribution margin, which improved by approximately 950 basis points to 12% over the last twelve months. Notably, expansion within existing accounts is accelerating: additional security product adoption contributed over 45% of subscription net retention, up from 34% a year ago. The company’s cloud transition is nearly complete, with cloud ARR now representing 88% of total subscription ARR.
- Large Customer Concentration: Customers with $1 million+ ARR grew by over 50%, signaling deepening enterprise adoption.
- Cloud Transformation Tailwinds: Cloud ARR up 48%, with material rights contributing to revenue but normalizing over time.
- Global Expansion: Revenue outside the Americas grew 51%, outpacing domestic growth and supporting international scale.
Rubrik’s platform adoption is broadening, with SaaS protection, identity recovery, and AI agent controls all contributing to multi-product momentum and stickier customer relationships.
Executive Commentary
"We continue to deliver phenomenal results quarter after quarter because we are comprehensively winning against the competition and enabling enterprise AI acceleration. In fact, our competitive win rates have crossed 90% in Q4 as we continue to disrupt the data and identity protection market with our transformative products that deliver comprehensive cyber resilience."
Bipul Sinha, CEO, Chairman and Co-Founder
"This robust financial outcome demonstrates our focused execution and solidifies our leading position in the mission-critical cyber resilience market, a market that is benefiting from the ramping AI transformation."
Kiran Chaudhary, Chief Financial Officer
Strategic Positioning
1. Multi-Product Platform Expansion
Rubrik’s platform strategy is driving both land and expand motions, enabling customers to start with a single product (data, identity, or cloud) and grow into the full suite. This approach increases account stickiness and wallet share, evidenced by rising net retention and cross-sell of security products.
2. Identity Resilience as a Growth Engine
Identity recovery and resilience solutions have become Rubrik’s fastest-growing product line, now with over 900 customers in under a year. The expansion into Okta recovery and broad identity coverage positions Rubrik as a strategic partner for CISOs, not just CIOs.
3. Agentic AI Controls and Rubrik Agent Cloud
Rubrik Agent Cloud, now generally available, targets the emerging need for real-time monitoring and guardrails on enterprise AI agents. Early POCs with Fortune 500 firms and AI startups focus on observability and dynamic control, with the “rewind” remediation use case expected to grow as agentic adoption matures.
4. Legacy Vendor Displacement
Rubrik’s win rates above 90% against legacy and next-gen competitors demonstrate sustained share gains. The company is still early in replacing entrenched legacy solutions, with a large remaining TAM as enterprises modernize and consolidate data protection and security.
5. Cloud and Sovereign Infrastructure Tailwinds
Sovereign cloud demand is emerging as a new growth vector, with geopolitical and regulatory drivers pushing enterprises and governments to modernize infrastructure with localized control. Rubrik is investing in product adaptation to capture this evolving opportunity.
Key Considerations
Rubrik’s Q4 underscores a business in transition from pure backup to a broad cyber resilience and AI operations platform. The company’s execution on margin, free cash flow, and customer expansion is notable, but investors should weigh the durability of these drivers as competition and technology cycles evolve.
Key Considerations:
- Cross-Sell Momentum: Over 45% of net retention now comes from customers adopting additional security products, a sign of deepening platform penetration.
- AI Operations Platform Potential: Rubrik Agent Cloud is early but positions the company to lead in AI agent governance, an area with few established competitors but significant market noise.
- Legacy Displacement Runway: Management believes the legacy replacement cycle is still in its early innings, suggesting continued growth headroom.
- Margin Expansion Sustainability: Free cash flow and margin gains reflect scale benefits, but ongoing R&D and go-to-market investments will test cost discipline as Rubrik pursues new markets.
Risks
Rubrik faces risks from rapid technology shifts, including the potential for AI-driven automation to commoditize parts of the data recovery market over time. While management downplays direct disruption risk, elevated R&D spend and new product bets could pressure margins if adoption lags. Competitive intensity is increasing, particularly as cybersecurity and observability vendors pivot toward agentic AI controls. Additionally, macroeconomic or hardware supply disruptions could impact enterprise modernization projects, though management currently sees limited effect.
Forward Outlook
For Q1 2027, Rubrik guided to:
- Revenue of $365 million to $367 million, up 31-32% (36-37% normalized for material rights)
- Non-GAAP subscription ARR contribution margin of 10-11%
For full-year 2027, management provided:
- Subscription ARR guidance of $1.83 billion to $1.84 billion (25-26% YoY growth)
- Total revenue of $1.50 billion to $1.61 billion (27-28% normalized growth)
- Non-GAAP subscription ARR contribution margin of ~13%
- Free cash flow of $265 million to $275 million
Management emphasized continued investment in R&D and go-to-market to scale identity and agentic AI products, with guidance reflecting a balance of growth and efficiency. The outlook assumes stable macro conditions and minimal disruption from hardware supply or go-to-market transitions.
- Operational investments will target high-ROI regions and verticals
- AI contributions are not yet material to FY27 guidance but are viewed as a multi-year growth lever
Takeaways
Rubrik’s Q4 results highlight a business capitalizing on secular shifts in data, identity, and AI-driven security.
- Platform Expansion Accelerates: Cross-sell of identity and AI controls is driving higher net retention and larger account penetration, supporting durable ARR growth.
- Margin Gains Signal Operating Leverage: Gross margin and free cash flow improvements show scale benefits, but future investments in innovation and go-to-market will be key to sustaining profitability.
- AI and Sovereign Cloud as Emerging Catalysts: Early traction in agentic AI controls and sovereign infrastructure could unlock new markets, but execution and customer adoption will determine the pace and scale of impact.
Conclusion
Rubrik enters FY27 with strong momentum, a broadening product portfolio, and expanding customer relationships. The company’s ability to balance innovation with disciplined execution will be central to sustaining growth and defending its lead in the evolving cyber resilience and AI operations landscape.
Industry Read-Through
Rubrik’s results and commentary reinforce several broader cybersecurity and cloud infrastructure themes. Identity recovery and AI agent governance are fast becoming must-have capabilities for enterprises, raising the bar for legacy and next-gen security vendors alike. The shift toward platform-based, multi-product adoption is a clear signal that customers prefer integrated solutions that span data, identity, and application security. Rubrik’s early moves in sovereign cloud and agentic AI controls suggest that vendors able to combine compliance, real-time control, and cross-domain observability will have an edge as regulatory and operational complexity rises. For the broader industry, the pace of legacy displacement and the urgency of AI risk management are set to accelerate, pressuring incumbents and creating openings for differentiated platforms.