Rubrik Needs Security Differentiation
Rubrik
The real battle is no longer who can store one more copy of data, it is who can turn backup data into a higher value security system. Core backup features now look similar across Rubrik, Veeam, Cohesity, Druva, and others, which pushes deals toward price and deployment model. Rubrik is trying to escape that by using its installed backup footprint to sell ransomware recovery, sensitive data monitoring, and compliance products that reach beyond the old backup budget.
-
Backup is a sticky wedge, but it is still a wedge. These vendors all start by protecting VMs, servers, SaaS apps, and cloud workloads, then try to upsell security and governance on top. That makes the core product easier to compare side by side in procurement, which is why pricing pressure rises as feature sets converge.
-
Rubrik has already shifted its business toward this new bundle. By 2023, subscription revenue was 86% of trailing revenue, subscription gross margin reached 82%, and the company framed data security as a market about 2 times the size of backup and growing faster. That is the economic reason the repositioning matters so much.
-
Security and compliance are also not a free extension of backup. BigID goes deep on finding and classifying sensitive data across stores for privacy workflows, and Immuta goes deep on who can access which rows and columns in Snowflake or Databricks. Rubrik has overlap, but its natural advantage is broad protection and recovery, not the deepest control plane for every data security workflow.
The category is moving toward larger platforms that bundle backup, cyber recovery, data classification, and compliance evidence into one contract. If Rubrik keeps proving that its backup graph can power security outcomes, it can expand from an IT backup vendor into a broader data security platform. If it does that well, price stops being the main story and budget pools get much larger.