For years, you've been stuck making an impossible choice during cyber recovery: restore fast from snapshots and risk reinfection, or restore slowly from backups and watch your RTO balloon.
That choice just became obsolete.
Today marks the general availability of the Cyber Resilience Visibility Integration between Rubrik Security Cloud and Pure Storage. This isn't a capability announcement or a roadmap promise. You can deploy this in your environment right now.
What You Get Starting Today
When Rubrik Security Cloud detects threats in your backup data, it now automatically tells Pure Storage Pure1 which FlashArray volumes and SafeMode snapshots contain those same threats. Pure1 Workflow Automation then tags them immediately. You can see exactly which snapshots are clean and which aren't, directly in the Pure Storage interface you already use to manage your FlashArray Fleet.
This gives you something no other solution in the market can deliver: the ability to recover hundreds of terabytes in seconds from snapshots you know are safe.
Here's how it works in practice:
Continuous threat scanning: Rubrik indexes and hashes all your VMware workloads running on Pure FlashArray. It compares those hashes against live threat feeds, including Mandiant's database of 1.5 million known threats and over 6,000 YARA rules. This happens continuously, not just when you decide to run a scan.
Automatic threat correlation: When Rubrik detects indicators of compromise, entropy anomalies, suspicious encryption patterns, or hypervisor-level encryption of virtual machines, it identifies which Pure Storage volumes and snapshots contain the compromised data. Pure1 Workflow Automation queries Rubrik's threat intelligence and correlates it with your production storage.
Instant visibility: Pure1 Workflow Automation automatically tags the specific snapshots that Rubrik has flagged. Your storage team doesn't need to learn new tools or wade through security reports. They can see which snapshots are safe to use and which aren’t.
- Near-zero RTO recovery: You can now restore verified clean data directly from Pure SafeMode snapshots with the confidence that Rubrik's threat intelligence provides. If you need surgical recovery for specific files or applications, Rubrik's immutable backups give you that option as a secondary path.
Why This Integration Matters Now
The statistics on ransomware attacks remain dire. According to the Rubrik Zero Labs report The State of Data Security: Measuring Your Data Risk, 96% of attacks target backups and 74% of those attacks at least partially succeed. The average cost of a data breach in the U.S. is $10.22 million (source: IBM Cost of a Data Breach Report 2025).
What makes recovery expensive isn't just downtime. It's uncertainty. When you can't determine which recovery points are clean, you either gamble on speed or you spend days analyzing compromised systems while revenue bleeds out.
The Rubrik & Pure Storage integration eliminates that uncertainty. You get definitive answers about which data is safe to restore, and you get those answers before you need them, not during a crisis when every minute costs money.
The First-of-Its-Kind Advantage
No other vendor pairing delivers native threat intelligence sharing between enterprise storage and cyber resilience platforms. Competitors can offer snapshots or backup threat detection, but they can't automatically correlate threats across both layers.
Here's what makes this unique:
Pre-computed threat analysis: Rubrik performs the computationally intensive work of threat scanning continuously in the background. When an incident occurs, correlation takes seconds rather than hours. Other solutions scan during recovery, when you can least afford the delay.
Native Pure1 integration: Rubrik is the only backup and recovery platform with direct integration with Pure1 Workflow Automation. This isn't an API someone built as an afterthought. It's joint engineering between two companies that built their products to work together.
True Defense-in-Depth: You maintain three copies of your data following the 3-2-1-1-0 rule, primary storage on FlashArray with SafeMode snapshots, secondary immutable backups on Rubrik Secure Vault, and long-term retention on Pure Storage FlashBlade. All three layers now share the same threat intelligence—a compromise detected anywhere informs the security posture everywhere.
Flash performance at every layer: Pure's all-flash architecture delivers latency of 150 μs to 1ms. When you need to recover terabytes of data, you're not waiting on spinning disks. Combined with Rubrik's ability to instantly identify clean recovery points, you can achieve RTOs that would be impossible with any other architecture.
What This Looks Like in Your Environment
Let's say ransomware hits your VMware environment at 2 AM on a Saturday. By the time your team logs in, here's what they see:
The FlashArray UI will display your volumes and snapshots across your FlashArray Fleet, with clear tags indicating which volumes and snapshots Rubrik has verified contain anomalies and/or quarantined threats.
Your storage admin doesn't need to call the backup team or wait for security to finish forensics. The answer is right there.
You restore from the most recent clean snapshot. Hundreds of terabytes come back online in seconds. Your applications are running again before your competitors would have finished analyzing logs.
If you need to recover specific files or do surgical restoration, Rubrik's backups give you that granular control with the same threat visibility. You're not choosing between speed and security. You get both.
From Practitioners, For Practitioners
This integration was built on customer feedback that recovery was a guessing game. Storage teams wanted faster snapshots. Backup teams wanted immutable and clean copies. Security teams wanted threat visibility. Nobody could get all three to work together.
Now you can. The integration handles the complexity of correlating threat data across platforms. You get the benefit without needing to become an expert in Rubrik's API or Pure Storage Pure1's Workflow Automation. It just works.
If you're running VMware on FlashArray and using Rubrik for data protection, you can enable this today. If you're evaluating options for cyber resilience, you can see this in action in a live demo, not just a PowerPoint slide.
See It In Action
Register now for a technical webinar where you'll see the integration working in real time. No handwaving about future capabilities. You'll watch Rubrik detect threats and see Pure1 Workflow Automation tag snapshots automatically, which would be impossible without this level of integration.
The webinar will cover:
Technical architecture walkthrough showing how the integration works
Live demonstration of threat and anomaly detection and automatic snapshot tagging
Q&A with the product experts
What Happens Next
You can deploy this integration starting today. If you're already running the Rubrik and Pure Storage Cyber Resilience Stack, reach out to your account teams to get started. If you're evaluating cyber resilience options, this is your chance to see what a truly integrated solution looks like.
The debate about snapshots versus backups is over. You don't have to choose anymore. You get the speed of Pure Storage snapshots with the intelligence of Rubrik threat detection, working together to deliver recovery you can trust.
That's not a future capability. That's available right now.