Rubrik Is Selling the Undo Button for AI Agents

Somewhere inside your company right now, a software agent is being handed the keys. It opens tickets, moves money, rewrites records, and occasionally deletes things. The question nobody in the boardroom asks is the expensive one: when that agent has a very bad afternoon, how do you put it back?

Rubrik is the company that keeps the copy you rebuild from. It walks an enterprise's whole data estate, from on-prem servers and public cloud to SaaS apps and code repositories, into an immutable, identity-aware snapshot. Ransomware can encrypt production systems. It cannot touch the copy behind the air gap.

The newer half of the pitch is the agent layer. In August Rubrik shipped Agent Identity, which watches autonomous agents act in real time. September brought MCP support, a secure, programmable path for a company's own AI agents into Rubrik's data, identity and application intelligence. Permissions carry over, and the guardrails line up with the OWASP MCP Top 10.

Here is why a backup vendor suddenly matters to the AI trade. Every agent granted permission to touch a production system is a fresh way to lose the company's data. Logs tell you what an agent did. Rubrik sells the fact that you can take it back.

You already let software act on your behalf. Your phone's assistant books the table; your bank's model freezes the card. Enterprises are about to hand that class of software power over the systems the business runs on.

Think of the difference between an alarm and a rebuildable building. Alarm vendors sell you the warning, and half a dozen of them sell the same warning. Rubrik sells the part where the company still exists afterward.

The quarter's launches stacked up fast. Rubrik partnered with CrowdStrike on automation for identity attacks, extended protection to Apache Iceberg data lakes on AWS, and staged the MCP release. The company says its AI products now reach a third of its global customers.

Rubrik frames the opportunity as a $125 billion market by 2029, growing near 20% a year at non-GAAP gross margins above 80%. Stickiness is the point: once the archive holds the audit trail and the recovery plan, ripping it out means rebuilding the disaster plan from scratch.

The numbers say the market noticed. Subscription ARR reached $1.66 billion, up 33% year over year, and cloud ARR hit $1.48 billion, up 39%. Revenue of $427.3 million grew 38%, and that turned into $65.7 million of free cash flow. Some 3,084 customers now spend at least $100,000 a year on subscription ARR, up 23%.

What matters to the stock is the next turn, not the last one. Management raised guidance to $1.88 billion of subscription ARR and $323–333 million of free cash flow. The model it laid out at its June analyst day calls for free cash flow margins above 25% at scale. Get net new ARR climbing again and turn agent governance into a paid line item, and the multiple holds.

At roughly 72 times this year's guided cash flow, about 14 times revenue and 149 times forward earnings, the market is not pricing the risk. It is pricing the story. The stock is also trading for a premium while the company still loses money on a GAAP basis.

The share move tells you what people are buying. After Anthropic's chief executive published an essay arguing model capability is outrunning the labs' ability to manage risk, AI semiconductors sold off and data-resilience names ran. Rubrik posted its biggest one-day gain of 2026.

Now the bear case, and it is not small. Strip out migrations and adjusted net new cloud ARR has fallen for three straight quarters, sliding from $110 million to $99 million to $86 million. Management guides to roughly 29% ARR growth this year, against roughly 34% last year. GAAP gross margin is 78%.

Its own 10-K puts Dell, IBM, Veeam, Commvault and Cohesity in the same ring. CrowdStrike, Microsoft and Palo Alto can fold data protection into suites customers already own. Secure agent access is a feature every vendor is racing to ship this year, and Rubrik's version sits in private preview. Paying 72 times free cash flow for decelerating growth is how sentiment trades end.

Which makes October the month to watch. MCP general availability is targeted then. The number that decides the next quarter is whether net new cloud ARR turns back up from $86 million, or stalls there.

Rubrik's chief executive, Bipul Sinha, told Yahoo Finance he wants to "let AI cook", adding that guardrails and boundary conditions are what keep the consequences contained. That is a fair summary of the trade. The market is buying insurance on the agentic era, and it is paying a full insurance price for it.

Disclosure: The Signal holds no position in RBRK. Positions may change. This is not financial advice.