In 2014 an enterprise protecting its data center bought backup as separate parts: backup software from vendors such as Symantec, CommVault, EMC or IBM, servers to run it, deduplicating disk targets and, at most large enterprises, tape for long-term copies RB21 RB33. Many ran several backup products at once to cover different workloads and contain license costs, and even EMC's own backup products were not yet fully integrated with each other RB21. Gartner reported rising frustration with backup, frequent complaints about pricing at a leading vendor and customers left several releases behind, and expected 40% of organizations to add to or replace their backup application by 2018 RB21. Installing a traditional system could take months, and administrators described spending their time tending the backup system itself RB18 RB3.
Rubrik
A backup box that replaced a three-part stack won data centers through resellers, then a 2016 ransomware rescue led Rubrik to sell its locked copies as security months ahead of Cohesity, and customers kept adding services on backups they could not easily move.
Arena: Market Conditions Before Rubrik
What shaped the outcome
Step 1 of 4 · 2015–18
One scale-out box replaced the backup software, media servers and storage a data center bought separately
In 2014 an enterprise backing up its VMware estate typically bought backup software, servers to run it and deduplicating disk or tape from different vendors, and many ran several backup products side by side RB21 RB33. Bipul Sinha, a Lightspeed partner who had been one of Nutanix's first investors and sat on its board, started Rubrik with engineers from Google, Oracle's Exadata team and Data Domain RB2 RB20 RB18. Their March 2015 product put the backup software, deduplication and flash and disk storage in one 2U, four-node box priced from under $100,000 RB3. It discovered VMware machines without agents, grew by adding nodes that joined the cluster on their own, archived old copies to AWS and exposed every function through an API RB19 RB40. Lightspeed said customers were running in 15 minutes against up to six months for a traditional system RB18, and backups could be mounted and run directly from the box RB3. An early customer's IT manager described his old setup as 'baby-sitting backup' RB3. A university infrastructure director who tested Rubrik in 2020 reported it 'up and running in <30 minutes' RB53.
The appliance applied to backup the design Nutanix had applied to primary servers and storage: commodity nodes, scale-out software and one management plane. That removed the separate media servers and storage targets that made installation slow and upgrades a forklift job, so a mid-sized VMware team could buy one thing and have it running the same day. The design won switches from legacy stacks, but it did not separate Rubrik from Cohesity. Gartner's Dave Russel treated the two as one disruption in 2018, rising on the same three complaints: backup cost too much, was too hard to use and was too slow RB60. Buyers who compared them split on the details, picking Rubrik for setup and support and Cohesity for wider file storage and hardware choice RB53 RB51.
Rivals The customer's alternatives were NetBackup, Commvault or EMC software on separate servers with Data Domain targets, integrated backup appliances from those vendors, and Veeam for VMware-only shops RB21. Cohesity, founded in 2013 by Nutanix co-founder Mohit Aron, sold a comparable converged scale-out platform from 2015 RB42. Russel said in 2018 that the two newcomers had caused Commvault to react and Dell EMC to bring out an integrated data protection appliance RB60. PeerSpot users choosing between them from 2018 to 2021 chose Rubrik for fast setup and support ('Between the great support and the ease of use, you just can't beat it') and Cohesity for NFS support, broader secondary storage and remote-site deployment RB53. A Canadian service provider that moved from Rubrik to Cohesity in 2021 cited, in a Cohesity case study, hardware flexibility and 75% lower capital cost RB51.
Step 2 of 4 · 2014–18
Paid early-access deals, a big launch and an all-reseller sales force turned interest into $100 million in two years
Before writing much code the founders held about 60 customer calls and used Lightspeed's network to put the idea in front of technology buyers RB1 RB2. They then sold $3,000 early-access contracts for software that was about a year away; Sinha said the small check mattered because a buyer had to persuade a boss and procurement, which signaled a later $100,000 purchase, and several hundred companies signed RB5. Rubrik sold $350,000 of beta product and spent about $250,000 sponsoring VMworld before launch to fill its pipeline RB1. It sold only through resellers ('We sell 100% through the channel. We do not sell direct') and paid its own sellers double beyond modest quotas, with $100,000 bonuses for million-dollar deals RB4 RB1. At its 2024 IPO it still sold primarily through distributors and resellers, counted them as its customers and paid them a fixed percentage of each contract as a rebate RB64. Sinha said Rubrik sold $47 million of contract value in its first full year RB56. By August 2016 the average first purchase was $250,000 and 30 to 40 percent of customers added more within six months RB20; by January 2017 the annual run rate was $100 million RB39, and in February 2018 Rubrik reported a bookings run rate approaching $300 million RB60. Large financial institutions were slower: Sinha said Rubrik 'lost a flurry of financial services deals' because buyers 'wanted faster horses' RB29.
Paid pre-orders turned market research into a qualified pipeline before launch, and the reseller channel gave a company of about 40 people RB33 access to enterprise IT buyers who already bought backup through those partners. Heavy launch spending and aggressive pay traded cash for speed, which Rubrik could afford because it raised $112 million in its first 17 months RB20. Speed counted because the race was between twins: by early 2018 Russel saw both newcomers on enterprise short lists RB60, and Rubrik's bookings run rate was approaching $300 million while Cohesity reported a sixfold rise in 2017 sales without giving a figure RB60.
Rivals Incumbents sold through the same resellers with installed bases to defend. Cohesity raised $70 million by mid-2016 and $90 million more in April 2017 and sold against Rubrik in the same accounts RB50 RB60. Customers' alternative was renewing the existing backup contract.
Step 3 of 4 · 2016–24
A 2016 ransomware rescue turned Rubrik's backups into a security product, months before Cohesity followed
Backup had been built to recover from floods, fires and operator mistakes RB27 RB13. In 2016 a Rubrik customer was hit by an early large ransomware attack that encrypted nearly all its systems; its Rubrik copies, which could not be altered over the network, survived and Rubrik restored everything in a few hours. Sinha said: 'We realized we had found the killer use case for backup data' RB5. Customers would not yet pay for ransomware detection, so Rubrik gave it away RB5; Sinha said Rubrik built cyber resilience features from 2016 and 2017, 'shifted the whole focus on cyber disaster' and waited until 2019 for the market to come around RB56. In July 2018 Rubrik released Radar, a ransomware detection and recovery application on its Polaris SaaS platform RB47. In March 2018 both newcomers still sold themselves as data management RB60; Cohesity's first anti-ransomware features came in January 2019, which trade press called its first step into security, and its product manager declined to call it a security move RB45. Rubrik's 2019 Andes release put security features 'center stage' RB23. In 2021 Rubrik called itself 'The Zero Trust Data Security Company', took a Microsoft investment and co-engineered anti-ransomware services for Azure and Microsoft 365 RB49 RB28 RB16. In October 2021 it offered what it called the industry's first ransomware recovery warranty, up to $5 million, raised to $10 million in April 2023, with no claims made by January 2024 RB49 RB64. Cohesity's chief legal officer dismissed such guarantees in November 2022, saying no customer had asked Cohesity for one RB65; in April 2024 Cohesity offered to double any rival's payout RB66. Rubrik also sold ransomware investigation, sensitive-data discovery and threat hunting on the same backup data RB27 and bought Laminar for data security posture in 2023 RB22.
Reframing backup as the last line of defence against ransomware moved the purchase from a storage budget, where backup is a cost to minimize, toward a security budget, and it raised the cost of choosing a vendor whose copies could be deleted with stolen credentials. Rubrik says its append-only file system made backups immutable from the start RB30, so the repositioning needed less product rework than at incumbents built for disaster recovery. Cohesity had an immutable file system too RB45, so the difference was timing and commitment rather than capability: Rubrik led on the product by six months, led on the warranty by two and a half years, and moved its positioning to security while Cohesity, in January 2019, still declined to call its features a security move RB45. William Blair's Jason Ader credited Rubrik, 'more than any other vendor', with changing how customers view backup and making 'cyber resilience' stick RB17. Investors priced the result: in September 2025 Rubrik traded at 12.75 times sales against Commvault's 7.16 RB58.
Rivals Cohesity followed each step: anti-ransomware features in January 2019 RB45, the FortKnox cloud vault in May 2022, a Data Security Alliance with CrowdStrike, Palo Alto Networks, Splunk and others in November 2022 RB50 RB52, and a warranty match in 2024 RB66. Its IPO, filed in December 2021, stalled amid the loss of 22 senior executives RB59, and Sanjay Poonen, chief executive from August 2022, bought Veritas' data protection business rather than list as what he called a 'small fish' beside Rubrik and Commvault RB50 RB58. Veeam and Commvault also moved to cyber resilience messaging and features RB34. Security vendors (Microsoft, CrowdStrike, Palo Alto) are an emerging alternative for the security budget.
Customer DiscoveryChanging technical requirementsCategory Design
Step 4 of 4 · 2018–26
Rubrik swapped hardware and perpetual licences for subscriptions and a SaaS console, then sold more services on the data it already held
Rubrik began by selling appliances with perpetual licences and maintenance RB14. In April 2018 it launched Polaris, a SaaS layer with a global policy framework, search and catalog over those appliances RB44. It moved to term subscriptions in fiscal 2020, stopped selling perpetual licences by February 2022, handed appliance sales to its contract manufacturers from late 2022 and made Rubrik Security Cloud, a SaaS control plane, available in fiscal 2023 RB14 RB38 RB13. The switch was costly in reported numbers: revenue grew 5% in fiscal 2024 while subscription ARR grew 47%, legacy maintenance revenue halved, and the net loss reached $354 million RB35 RB15. Subscriptions rose from 59% to 91% of revenue in two years RB11. On the SaaS console Rubrik sold ransomware investigation, sensitive-data discovery and threat hunting as add-ons over the backups customers already kept with it RB27; Sinha's S-1 letter describes an architecture that combines data with application metadata RB36. Net retention was 150% in January 2023, 133% in January 2024 and over 119% in mid-2026 RB14 RB9. Subscription ARR passed $1 billion in October 2024 and reached $1.66 billion in July 2026, with cloud ARR at $1.48 billion and positive free cash flow RB7 RB8.
Subscriptions and a vendor-run console let Rubrik sell new security products as switches on an existing deployment rather than new hardware projects, which helps explain why net retention stayed above 119% as legacy migrations wound down RB9. The SaaS console itself did not separate Rubrik from Cohesity, which shipped Helios four months after Polaris and sold backup as a service on AWS two years before Rubrik Security Cloud RB48 RB46. What differed was what Rubrik sold on it: security services priced as subscriptions on top of the backup estate. The backup history and recovery runbooks held in the platform also make leaving costly. A customer who switches must keep the old system to restore older copies or migrate them, the problem Rubrik raised for NetBackup customers facing a move to Cohesity RB24, and one Cohesity itself was building translation software to solve after buying Veritas RB55. Typical three-year contracts RB14 add to that.
Rivals Cohesity launched its Helios SaaS console in August 2018, four months after Polaris RB48, and sold backup as a service from December 2020 RB46. Poonen said he weighed a stand-alone IPO in 2022 but would have been a 'small fish' beside Rubrik and Commvault, so he bought Veritas' business first to lead on share; before the merger Cohesity held about 5% share and grew a little under 30% a year RB58. Commvault (Metallic SaaS), Cohesity-Veritas and Veeam all offer SaaS consoles; Gartner judged Dell in 2025 to lag on SaaS control-plane maturity RB34.
Subscription PricingPlatformizationData GravitySwitching costs
Key dates
- 2014-01Rubrik founded
- 2015-03-24Appliance launched
- 2016First ransomware recovery
- 2017-01$100 million run rate
- 2018-04-04Polaris SaaS layer
- 2018-07-25Radar ransomware application
- 2019-01-15Security moves center stage
- 2020Term subscriptions
- 2021-08-17Microsoft invests
- 2021-10-11Recovery warranty
- 2022Rubrik Security Cloud and exit from hardware
- 2024-04-25IPO
- 2026-07-31$1.66 billion subscription ARR
Sources
Oldest first.
- RB21 Magic Quadrant for Enterprise Backup Software and Integrated Appliances. Analyst report (contemporaneous)
- RB18 Why We Invested in Rubrik. Investor memo
- RB19 Startup intro: Rubrik. Backup and recovery redefined. Practitioner blog
- RB3 Startup Rubrik goes all-in-one with backup appliance. Trade press launch report
- RB40 Rubrik Raises $10M for Converged Data Management System. Trade press
- RB33 Rubrik raises $41 million. News report
- RB20 Khosla bolsters bet on Nutanix mafia with Rubrik investment. News report
- RB4 Exclusive Interview With Bipul Sinha, CEO, Rubrik. Founder interview
- RB39 Data management startup Rubrik confirms $180M round at a $1.3B valuation. News report
- RB26 Rubrik thinks it is on a data management winner. Founder interview in trade press
- RB1 Engineering Hypergrowth at Rubrik: from Zero to nearly $300 million in Revenue in Four Years. Investor interview with founder
- RB53 Is Cohesity better than Rubrik? (user answers). Customer account (buyer reviews)
- RB60 Hyperconverged Secondary Storage or Cloud Data Management? It's a Hot Market Regardless. Trade press with analyst commentary
- RB44 Rubrik Launches Polaris, the Industry's First SaaS Platform for Data Management Applications. Company press release
- RB47 Rubrik Launches Radar, an Intelligent Application to Defend Against Ransomware. Company press release
- RB48 Cohesity's Helios tool tells you when your cluster's in a fluster. Trade press
- RB63 Inside Enterprise Tech's Newest Feud: Rubrik vs. Cohesity. Trade press
- RB23 Data management startup Rubrik gets $261M at a $3.3B valuation as it moves into security and compliance. News report
- RB45 Cohesity Fights Ransomware, Dips Its Toes Into Security. Trade press
- RB32 Cohesity and Rubrik join the leaders in Gartner's Backup and Recovery magic quadrant. Trade press on analyst report
- RB46 Cohesity DataProtect: A SaaS-based offering protecting on-premises and cloud-based data. Trade press
- RB16 Rubrik teams with Microsoft to develop Zero Trust anti-ransomware Azure services. Trade press
- RB28 Rubrik Announces Strategic Agreement with Microsoft to Mitigate Ransomware Threats and Tightly Integrate Cloud Services. Company release
- RB51 Replacing Rubrik with Cohesity Improves Stage2Data Top and Bottom Lines. Customer account (rival vendor case study)
- RB49 Rubrik Launches Ransomware Recovery Warranty; Rubrik Ups the Ante with $10 Million Ransomware Recovery Warranty. Company press release
- RB27 Rubrik's Bipul Sinha on Surpassing $400M in Subscription ARR. Founder interview
- RB59 Cohesity IPO on Hold After Executive Exodus. Trade press
- RB65 Cohesity: Don't rely on ransomware guarantees. Trade press with rival executive quotes
- RB52 Cohesity strengthens anti-ransomware strategy. Trade press
- RB37 Bipul Sinha, Founder and CEO of Rubrik (The Decibel Podcast). Podcast episode page
- RB2 How Rubrik Became A Cybersecurity Headliner. Investor essay with founder quotes
- RB61 Rubrik revenue, valuation & funding. Outside analysis
- RB6 The Big Interview: Rubrik CEO Bipul Sinha. Founder interview
- RB24 Veritas, Cohesity, and Rubrik: Backup or Go Forward. Company blog
- RB5 How Rubrik CEO Bipul Sinha Built a Cybersecurity Leader. Investor essay with founder quotes
- RB55 Commvault, Rubrik want to lure folks from Cohesity-Veritas merger, CEO snaps back. Trade press
- RB66 Introducing Cohesity's new ransomware warranty offer, with an industry-best 200% payout. Rival company blog
- RB29 From Bihar to California: Rubrik, NYSE and the American dream. Founder profile with quotes
- RB36 Letter 178: Bipul Sinha (2024). Founder letter
- RB38 Rubrik, Inc. Registration Statement (Form S-1). Company filing
- RB15 Rubrik IPO: S-1 Breakdown. Outside analysis of filing
- RB14 Rubrik IPO: S-1 Breakdown. Outside analysis of filing
- RB35 Rubrik: Benchmarking the S-1 Data. Outside analysis of filing
- RB41 IDC: Veeam has the largest share of the data protection market. Trade press on IDC data
- RB11 Rubrik stock pops 16% in NYSE debut after company prices IPO above range. News report
- RB13 Rubrik, Inc. Prospectus (Form 424B4). Company filing
- RB64 Rubrik, Inc. Prospectus (Form 424B4): Risk Factors (warranty), Business: Our Competition, Note F-8 (Channel Partners). Company filing
- RB7 Rubrik Reports Third Quarter Fiscal Year 2025 Financial Results. Company filing
- RB25 Cohesity Becomes World's Largest Data Protection Software Provider After Completing Combination with Veritas' Enterprise Data Protection Business. Rival press release
- RB12 Rubrik IPO: Lessons From a $5.6 Billion Milestone. Outside analysis
- RB56 The New Rules of Silicon Valley with Rubrik CEO Bipul Sinha. Founder interview
- RB62 Rubrik Reviews, Competitors and Pricing. Customer account (buyer reviews)
- RB43 Success Story: Rubrik. Profile
- RB17 Data protection vendor market share history and changes. Analyst commentary on IDC data
- RB54 Rubrik, Inc. Form 10-K for fiscal year ended January 31, 2025 (Item 1, Business). Company filing
- RB34 Rubrik, Veeam Lead in Changing Backup & Data Protection Market. Trade press on analyst report
- RB58 NVIDIA-Backed Cohesity Plans 2026 IPO With Valuation Target Matching Rubrik's $17 Billion Market Cap. Rival executive interview (secondary report)
- RB57 Rubrik (RBRK) Q4 fiscal 2026 earnings call transcript. Company earnings call
- RBX1 Rubrik, Inc. (NYSE: RBRK): Best Growth in the De-Rated Cyber Bin, Still Paying Itself in Stock. Context only (AI-generated analysis)
- RB8 Rubrik Reports Second Quarter Fiscal Year 2027 Financial Results. Company filing
- RB9 Rubrik (RBRK) Q2 2027 Earnings Call Transcript. Earnings call transcript
- RB10 Rubrik (RBRK) Stock Price & Overview. Market data
- RB22 Rubrik. Encyclopedia
- RB30 Rubrik vs Cohesity. Vendor comparison page
- RB31 Cohesity vs. Rubrik. Rival comparison page
- RB42 Cohesity. Encyclopedia
- RB50 Cohesity. Reference