Rubrik, Inc. Goldman Sachs Communacopia + Technology Conference 2026

We have been talking about this for the last many years, that prevention and detection is not sufficient. Folks have to really think about recovery and resilience because you can't prevent the unpreventable. What Mythos and frontier models have shown is that you can't really prevent and detect anything because these attacks are at machine speed, and at machine speed, you can't prevent. All the technologies that we have built for cyber in the last 20, 30 years was built for human operator and human attackers. We are in a completely different era. This is a new moment, and all you can do is to think about how do you patch your systems at machine speed, and how do you deliver cyber recovery at machine speed. That's what Rubrik is solving for our customers, doing a cyber recovery at machine speed.

Our goal is to deliver resilience to every aspect of operations. What are the different things we do? Number 1 is data. We want to ensure that your data is recovered and your applications are up and running. Number 2 is identity, because we want to ensure that the data risk comes from identity, and identity systems are up and running, and they are in the correct state. Then the third piece is AI. As we know, agents assume identity and operate on sensitive data. So you need to have resilience and security for agents. How do we ensure that agents are only taking the right actions? If they do bad action, how do we rewind the action of agents? We are very clear. There are 2 major trends in the market, AI and cybersecurity. Underneath AI and cybersecurity is identity and data.

We want to deliver complete cyber resilience across data identity and agentic world.

In my mind, since attacks are going to be at machine speed, it will be a world of continuous attacks. Today, operations and cyber are two different teams and two different things inside any business. I believe that these two, operations and security, will merge. You will have a situation of continuous attack and continuous recovery and continuous patching. In this world of continuous attack and continuous patching, you need to have a human in the loop at the very minimum level, where the humans are making decision, but machines are implementing decisions. This is where the cyber is going to go. It is going to be a world of no human in the loop patching, mostly no human in the loop recovery.

If you think about this idea of Mythos and frontier AI and machine speed, businesses, particularly board and CEOs, are realizing more and more that cyber has gone from a technology discussion, whether it is endpoint network, cloud, zero trust network, all of that mumbo jumbo, to a risk discussion. That can we keep our business up and running? What is our dollar at risk should we go down for a day or two or three? Do we have a situation where my large manufacturing will come to a screeching halt just because of the ransomware attack or cyber attacks? That is the discussion now. Rubrik plays in that discussion because we are giving assurance to our customers, saying, no matter what happens, whether it is AI attack, human attack, machine speed attack, you will always be up and running because of our Preemptive Recovery Engine.

We pre-calculate a clean data state in peace time to be able to deliver a machine speed recovery. This message is resonating. Obviously, Rubrik is a considered purchase, as we are not like a Facebook app that millions of people download overnight and we run the market. There will be a process. I like that process because at the end of the day, I want us to have consistent high growth for many years. We believe that we are set up for it.

Let us just take agents. If you think about agentic security and governance, there are many pieces to it. You need to have visibility into all your agents, sanctioned or unsanctioned. Second piece is, can you do identity-based, just-in-time regulation on activity of these agents? That is the number two. So that is an identity-based MCP server level, which database, which entity these guys can update. The third one is runtime security, and this is where the intent understanding of agents are important. What happened in the OpenAI Hugging Face is these agents to get to a goal, they actually circumvented the guardrails that was built for them. So you need to understand the intent of the agent and check the intent on every interaction of the agent to be able to stop the agentic action on runtime at the point of action.