Rubrik announced a new integration with Microsoft Defender at RSAC 2026. The partnership combines Microsoft Defender's real-time identity threat detection with Rubrik's automated identity rollback and recovery capabilities, enabling faster response to identity-based attacks. The integration allows organisations to reverse malicious identity changes and restore infrastructure in hours rather than days. "Detection is only half of the battle," said Anneka Gupta, Rubrik's Chief Product Officer. "By combining Microsoft Defender's threat detection with Rubrik Identity Resilience, we give security and IAM teams the power to move from a detected compromise to a trusted, recovered state in hours, instead of days." The announcement was made at the RSA Conference 2026.

Rubrik has launched its Semantic AI Governance Engine (SAGE), the data security industry's first AI governance engine designed to secure and control autonomous agents in real time. SAGE powers Rubrik Agent Cloud, replacing static manual oversight with intent-driven governance for enterprise AI deployment. The system uses Rubrik's custom Small Language Model to interpret the semantic meaning of policies rather than relying on keyword searches. Key features include semantic policy interpretation, adaptive policy improvement and integrated remediation through Rubrik Agent Rewind. In benchmarking tests, Rubrik's custom SLM processed messages five times faster than OpenAI's GPT-5.2 whilst achieving higher accuracy in detecting policy violations. The technology addresses the governance bottleneck currently stalling enterprise AI deployment by providing real-time command centre capabilities for agentic operations.

Microsoft and Rubrik integration delivers complete identity attack response. Microsoft Defender and Rubrik Identity Resilience create a unified detection-to-recovery offering; customers achieve trusted recovery in hours instead of days SAN FRANCISCO - March 23, 2026 - Rubrik (NYSE: RBRK), the security and AI operations company, today announced a new integration with Microsoft Defender at RSAC 2026, enabling organizations to move from identity threat detection to rapid remediation and trusted recovery. The integration connects Microsoft's real-time identity threat detection with Rubrik's automated identity rollback and recovery capabilities, helping organizations respond faster to identity-based attacks. Identity has become the primary target for modern cyberattacks. According to Rubrik Zero Labs research, 90% of IT and security leaders say identity-driven cyberattacks are their organization's top concern. Yet most security tools stop at detection, leaving organizations to manually investigate malicious changes and restore compromised identity systems. "Detection is only half of the battle," said Anneka Gupta, Chief Product Officer at Rubrik. "Organizations need the ability to quickly and surgically reverse malicious identity changes and completely restore their infrastructure. By combining Microsoft Defender's threat detection with Rubrik Identity Resilience, we give security and IAM teams the power to move from a detected compromise to a trusted, recovered state in hours, instead of days." With this integration, organizations can extend Microsoft Defender detections directly into Rubrik's identity recovery workflows, allowing teams to investigate incidents, reverse malicious identity changes, and restore trust across hybrid environments. Joint Rubrik and Microsoft Defender customers can now: * Understand attack impact faster by correlating threat alerts with identity changes. * Reverse malicious identity modifications without performing full domain restores. * Restore trusted identity states using immutable recovery points. * Maintain visibility across hybrid identity environments, including Active Directory and Entra ID. The integration builds on Rubrik's continued investment and broader vision for Identity Resilience, focused on ensuring identity systems remain trusted, available, and recoverable in the face of cyberattacks, operational disruptions, and evolving compliance requirements. Over the past 15 months, Rubrik has rapidly expanded its identity capabilities, introducing recovery for Active Directory and Entra ID, expanding protection to multi-identity provider environments including Okta, and launching Identity Resilience capabilities that help organizations investigate incidents and reverse malicious changes. The company has also expanded ecosystem integrations with leading security platforms including CrowdStrike Falcon Identity Protection and now Microsoft Defender, connecting threat detection with automated remediation and trusted recovery. For more on how Rubrik is redefining identity security, read more here. About Rubrik Rubrik (NYSE: RBRK) is the Security and AI Operations Company. The company's data security platform secures and recovers data from cyber threats and operational disruptions. Rubrik has been recognized as a Leader in the Gartner(R) Magic Quadrant(TM) for Enterprise Backup and Recovery Software Solutions for two consecutive years and is trusted by over 6,600+ customers across the globe, including world-renowned enterprises and government organizations. For more information, visit www.rubrik.com and follow @rubrikInc on X (formerly Twitter). Media Contact Meghan Fintland Head of Global PR 925.785.9192 [email protected] Press inquiries.