Rubrik management meeting reinforces confidence in multiple growth engines; Goldman Sachs reiterates Buy

Overview

Goldman Sachs published meeting notes after hosting an in-person Rubrik management NDR on June 24-25. The report's core conclusion is that Rubrik's investment story is expanding from traditional backup and recovery market replacement into a multi-growth-engine platform centered on data security, identity resilience, agent security, and AI data readiness. The analysts believe Rubrik still exhibits the characteristics of a top-tier growth asset, including a durable core data protection business, greater CISO relevance through Identity, and long-term optionality from RAC and Annapurna.

Core views

The report reiterates a Buy rating on Rubrik. First, the core backup and recovery market still has significant replacement opportunity, and AI-driven threat velocity and sovereign data requirements may continue to drive enterprises from legacy architectures toward modern cyber resilience platforms. Second, Identity is the clearest evidence of Rubrik extending from data protection into a broader control layer; its positioning is not to replace Okta, Microsoft, or CrowdStrike, but to provide a recovery, continuity, and orchestration layer when identity fails. Third, the key appeal of Rubrik Agent Cloud is not simply monitoring agents, but governing agent actions by combining data context, identity posture, runtime guardrails, and rollback capabilities. Fourth, Annapurna gives Rubrik a more concrete AI data adjacency opportunity, helping customers identify in place which unstructured or non-text data is worth feeding into AI and analytics systems.

Analysis framework

The report combines management NDR feedback, channel observations, product roadmap interpretation, and the Goldman Sachs software investment framework to assess Rubrik's growth quality, product expansion path, hardware-related concerns, AI and agent security opportunities, and valuation support. Valuation uses a dual framework: 50% based on target EV/S multiples and 50% based on target EV/FCF multiples.

Methodology notes

• Software investment frameworkGS Framework for Investing in Software

  Evaluates software company quality based on TAM, pace of innovation, differentiated products, long-term revenue growth, and free cash flow compounding ability.

  The report argues that Rubrik has a high pace of innovation and platform expansion capability in the low-innovation backup and recovery market, and as demand for cyber resilience rises, it may sustain revenue growth above 20% over the next few years.

• Valuation frameworkDual valuation framework

  The target price is derived with a 50% weighting each for EV/S and EV/FCF methods.

  Goldman Sachs uses a 10x EV/S multiple and a 44x EV/FCF multiple, applied respectively to Q5-Q8 revenue and free cash flow estimates, with the multiples referenced against high-growth platform and security software peers.

• Factor frameworkGS Factor Profile

  Compares a stock's position versus the market and industry peers across four attributes: Growth, Financial Returns, Multiple, and Integrated.

  This framework calculates percentiles using metrics such as sales growth, EBITDA growth, EPS growth, ROE, ROCE, CROCI, and valuation multiples to provide investment context for the stock.

Asset mapping & comparison

Structured mapping from thesis to named assets (strengths, weaknesses, peers, risks).

• Rubrik Inc. (RBRK.US)

  Covered company and U.S.-listed software infrastructure name

  Strengths

  It has a durable core data protection business and is expanding through Identity, RAC, and Annapurna into higher-value cyber resilience, agent security, and AI data workflows.

  Weaknesses

  Some new products are still early stage; Annapurna's near-term contribution should not be overly modeled, and RAC also needs more production deployments and budget validation.

  Comparison

  Compared with traditional backup vendors, Rubrik emphasizes its cloud-native RSC platform and data security positioning; compared with endpoint, network, identity, and workflow security platforms, RAC's differentiator is that it combines data context, identity posture, and recovery capabilities.

  Risks

  Intensifying competition, industry consolidation, excessive sales and R&D spending, and slower-than-expected adoption of next-generation backup and recovery could all pressure growth and operating leverage.

• Identity

  Rubrik's product line extending from data protection into identity resilience

  Strengths

  It has exceeded $50M ARR and has a complementary positioning with CrowdStrike, Okta, and Microsoft; it can provide recovery, continuity, and orchestration when identity fails.

  Weaknesses

  Growth still depends on attach-sales momentum and continued customer recognition of identity resilience budgets.

  Comparison

  It does not directly compete in access configuration, authentication, privileged governance, or behavioral detection, but instead complements existing identity and security stacks.

  Risks

  If the partner ecosystem or customer budget priorities change, Identity's expansion pace may come in below expectations.

• Rubrik Agent Cloud (RAC)

  Early-stage growth optionality in agent security and governance

  Strengths

  It is positioned as a control layer that observes agents, understands their identity, enforces runtime guardrails, and rolls back actions when errors occur; Predibase enhances its feasibility through lower cost, lower latency, and higher accuracy.

  Weaknesses

  It is still early stage, with limited current traction, and needs more evidence of conversion from POCs to production deployments.

  Comparison

  It is closer to a control and recovery point than simple agent monitoring; compared with LLM-intensive governance, the fine-tuned SLM-based approach emphasizes economics more strongly.

  Risks

  If enterprise agent adoption or budget formation is slower than expected, RAC's commercialization timeline may be delayed.

• Annapurna

  Adjacency product for AI data readiness and unstructured data classification

  Strengths

  By leveraging Rubrik's access to high-integrity production data and metadata, it helps customers identify in place which data is relevant, sensitive, or worth feeding into downstream AI and analytics systems.

  Weaknesses

  Initial product-market fit is still taking shape, and it should not be modeled as a major revenue contributor in the short term.

  Comparison

  Its competitive set may include data platforms, catalogs, DSPM vendors, and AI data tools.

  Risks

  Early adoption, repeatability, and degree of differentiation still need to be observed.

Key data

• 12-month target price$93.00The report reiterates the target price.
• Current price$72.33Price disclosed on the report cover.
• Implied upside28.6%Corresponds to the target price and current price disclosed in the report.
• Identity ARR$50M+The management meeting indicates that Identity has reached a clear validation point, and if attach-sales momentum continues, it may exceed $100M ARR by year-end.
• On-prem data protection as a share of NNARRabout 20%Used to show that exposure to hardware-related concerns is limited in the new business mix.
• On-prem data protection as a share of subscription ARRabout 40%The report argues that hardware constraints look more like deployment friction than demand destruction.
• Core TAM$15B+ by CY27Refers to the core backup and recovery TAM mentioned in the Goldman Sachs software investment framework.
• Traditional backup and recovery market$11B+The report believes Rubrik is well positioned to disrupt the market dominated by traditional vendors.
• Predibase efficiency metrics20%-30% better performance, at about 1/10 to 1/20 of the cost of LLM solutionsUsed to support that RAC has a more credible path to scale in both technical and economic terms.
• Long-term gross margin framework77%-82%Management linked RAC's economic model to the company's broader gross margin framework.
• Valuation multiples44x EV/FCF；10x EV/SThe multiples used in the dual valuation framework remain unchanged.

Impact & implications

If the report's view proves correct, Rubrik's investment narrative will expand from a single backup replacement story into a broader enterprise cyber resilience platform: core data protection provides a durable revenue base, Identity increases relevance to CISO budgets, RAC enters the agent security control point, and Annapurna creates long-term optionality in AI data readiness. This helps support valuation frameworks in line with high-growth software and security peers, though new products still need validation through adoption, repeatable sales, and scalable economics.

Risks

• Stronger competition from Cohesity, Commvault, Veeam, and others could limit Rubrik's share gains in the traditional backup and recovery market.
• Industry consolidation, such as the combination of Cohesity and Veritas' data protection business, could create a better-resourced competitor with broader distribution and more competitive products.
• Product development, sales, and marketing expenses remaining elevated could hinder further operating leverage expansion.
• Slower-than-expected adoption of next-generation backup and recovery solutions could compress Rubrik's addressable market and growth path.
• New growth vectors such as RAC and Annapurna are still early stage, and commercialization, budget formation, and scalable economics remain to be validated.
• Hardware, memory inflation, and device supply constraints could cause deployment friction, although the report believes this currently looks more like execution friction than demand destruction.

What to watch

• Whether Identity ARR can continue progressing from $50M+ toward a $100M+ path by year-end.
• Whether RAC can continue converting POCs into production deployments with ACVs in the hundreds of thousands of dollars.
• Whether the Predibase-driven SLM governance architecture can achieve enterprise-scale deployment across low latency, high accuracy, and low cost.
• Adoption, repeatability, and competitive differentiation of Annapurna in unstructured and non-text data classification.
• Changes in new business mix across on-prem data protection, cloud, SaaS, Identity, and other workloads.
• Progress in core backup and recovery market replacement, Salesforce and Google Workspace expansion, Oracle database opportunities, and sovereign data demand.