We are on a mission to secure the world’s data. Cyberattacks are inevitable. Realizing that cyberattacks ultimately target data, we created Zero Trust Data Security to deliver cyber resilience so that organizations can secure their data across the cloud and recover from cyberattacks. We believe that the future of cybersecurity is data security—if your data is secure, your business is resilient. We built Rubrik Security Cloud, or RSC, with Zero Trust design principles to secure data across enterprise, cloud, and software-as-a-service, or SaaS, applications. RSC delivers a cloud native SaaS platform that detects, analyzes, and remediates data security risks and unauthorized user activities. Our platform is architected to help organizations achieve cyber resilience, which encompasses cyber posture and cyber recovery. We enable organizations to confidently accelerate digital transformation and leverage the cloud to realize business agility. Traditional cybersecurity approaches have failed to not only prevent but also provide recovery from increasingly rampant and sophisticated cyberattacks. At the same time, legacy backup and recovery solutions have significant shortfalls in addressing cyber recovery and data security as they were primarily built for operational and natural disaster recoveries. They were not designed to enable reliable recovery from cyberattacks, nor were they designed to natively deliver cyber threat analytics and event response. Architecture matters when it comes to securing data. We built a unique SaaS architecture that combines data and metadata from business applications across enterprise, cloud, and SaaS applications to create self-describing data as a time-series. Self-describing data contains information such as application context, user identity, data sensitivity, and application lineage. This allows us to apply artificial intelligence and machine learning directly to business data to understand emergent data security threats and deliver cyber recovery. Our Zero Trust Data Security platform assumes that information technology infrastructure will be breached, and nothing can be trusted without authentication. Our data threat engine powered by artificial intelligence and machine learning analyzes the self-describing data time-series to derive security intelligence from data and provide remediation recommendations. Automation is at the core of our architecture ethos. Our automated policy-driven platform delivers data security enforcement, incident response orchestration, and API integrations with the broader security ecosystem. We use the following guiding principles to design our RSC platform and products: • Data resilience. Data is always available, notwithstanding cyberattacks, malicious insiders, and operational disruptions. • Data observability. Data is continuously monitored to strengthen data security posture and minimize attack surface. Emergent security risks are identified, contained, and resolved. • Data remediation. Points of infection are identified, threats are remediated, and impacted data assets are rapidly recovered without malware reinfection. Our business is indexed to business data growth. Our customers’ need for our solutions grows in lockstep with their business data growth and their need for additional data security capabilities. We primarily sell subscriptions to RSC through our sales team and partner network by employing a land and expand sales strategy. We land new customers by selling subscriptions to RSC to secure any one of four distinct types of data: private cloud (which we refer to as enterprise), enterprise NAS(1) (which we refer to as unstructured data), cloud, and SaaS applications. Expansion happens along three vectors: the growth of data from applications already secured by Rubrik; new applications secured; and additional data security products. This expansion is driven by a natural flywheel effect in which the value of our platform increases as our customers’ data grows across various applications. As organizations manage more data with RSC, they gain deeper insights into their data, strengthen their overall security posture, and reduce compliance risk. Our average subscription dollar-based net retention rate was 133% as of January 31, 2024. Our platform’s broad applicability allows us to serve organizations of all sizes across a wide range of industries and geographies. As of January 31, 2024, we had more than 6,100 customers, increasing from over 5,000 customers as of January 31, 2023. Organizations around the world rely on Rubrik to achieve business resilience in the face of cyberattacks, malicious insiders, and operational disruptions. As a result, we have experienced rapid growth, with our subscription annual recurring revenue, or Subscription ARR, increasing from $532.9 million as of January 31, 2023, to $784.0 million as of January 31, 2024, representing a 47% increase, and our total revenue increasing from $599.8 million in the fiscal year ended January 31, 2023, or fiscal 2023, to $627.9 million in the fiscal year ended January 31, 2024, or fiscal 2024. We measure our business on the basis of Subscription ARR. Subscription ARR illustrates our success in acquiring new subscription customers and maintaining and expanding our relationships with existing subscription customers. As of January 31, 2024, we had 1,742 customers generating more than $100,000 in Subscription ARR and 99 customers generating more than $1,000,000 in Subscription ARR. We have continued to invest in growing our business and advancing our solutions to capitalize on our market opportunity. (1) Network-Attached Storage. We were initially incorporated under the laws of the State of Delaware in December 2013 under the name ScaleData, Inc. We changed our name to Rubrik, Inc. in October 2014. Our principal executive offices are located at 3495 Deer Creek Road, Palo Alto, California 94304.
