What’s New: Enhanced Cyber Resilience for Databases, Hypervisors, and Unstructured Data

Every security leader has been told some version of the same comforting thing: don't worry, we have backups. But when ransomware strikes, the hard questions start. Which copy is clean? What comes back first? How long until the business is running? Has anyone actually tested this?

That’s when reality hits: having backups isn’t the same as being able to recover the business.

This reality gets tougher to face as the infrastructure spreads out. Clusters help protect the database availability, but hypervisors come in several flavors now. VMware may run alongside Hyper-V, Azure Local, and a Proxmox cluster that started as a test bed and quietly became production. Unstructured data continuously expands in the background, often representing the biggest (and least protected) pile of data in an organization. Every one of those places becomes a source of anxiety when it comes time to recover the business.

This quarter’s releases close that gap across three places where recovery gets hardest: databases, hypervisors, and unstructured data. MySQL backups now survive a failover without breaking the chain. Proxmox, Azure Local, and Hyper-V get threat analytics, file-level recovery, and tested cyber recovery plans. NAS data gets hosted protection, migration, offline recovery, and sensitive data discovery. The goal is the same everywhere: assume breach, and build the recovery before you need it.

MySQL High Availability: Failover Shouldn't Break Your Backups

Most production MySQL runs in high availability mode, which makes it tricky to protect. When a primary failed over, backups used to start a fresh chain, with a new full backup, a break in point-in-time recovery, and a storage spike at the worst possible moment. 

Rubrik now treats an HA pair as one workload. Backups carry on through a failover on a single chain, and you can run them from the standby so the primary stays focused on production. 

If your compliance team has ever said "not on the primary," this is for them. Generally available now.

Proxmox VE: Open-Source Virtualization, Enterprise-Grade Resilience

More teams are putting production workloads on Proxmox VE for good reasons: cost, flexibility, and independence. What they shouldn't have to do is give up enterprise protection to get there. 

Moving to a new hypervisor often means leaving established security tools behind and falling back on scripts and manual steps, which is exactly where gaps open up. A couple of new capabilities for Proxmox close them.

• Know What's Inside Your Backups with Data Threat Analytics: You can back up a compromised VM faithfully for weeks. You can restore a clean-looking file that carries something nasty. And you can have sensitive data sitting in a backup that nobody knows about. Data Threat Analytics uses machine learning to spot ransomware-like activity, hunt for known threats, and find sensitive data inside the backup pipeline. No extra infrastructure is required. There’s no additional load on production. Your security posture shouldn't depend on which hypervisor you pick, and now it doesn't. Generally available now.
   

• Recover One File, Not a Whole VM with File-Level Recovery: Most of the time, what goes missing is a file or a folder, not an entire machine. Restoring a full VM is a slow, resource-intensive way to find a single document. With File-Level Recovery, you pull back exactly what you need from a VM backup without restoring the rest. Generally available now.

   

Export to Azure Local (Arc) VM: Recover It as What It Was

Every Azure Local VM is an Azure resource. But a standard recovery brings it back as a plain Hyper-V VM that the Azure Portal can't see. Export to Azure Local (Arc) VM fixes that. Recovered VMs land as native Arc VMs in the right resource group and network, manageable from the Portal the moment they boot. Currently in Limited Availability for Customers.

Cyber Recovery for Hyper-V and Azure Local: Recover the Business, Not Just the Data

When ransomware hits a hypervisor, it doesn’t hit one VM. It hits everything running on it, and entire application stacks go down together. 

Finding the clean snapshot is half the job. Then the clock starts, and it isn't only your clock. Regulators expect organizations to restore within defined timeframes and show they can. Cyber Recovery for Hyper-V and Azure Local does more than restore VMs, it restores the business. 

First, you build the plan while things are calm: which VMs come back, in what order, onto what compute, storage, and network. A plan can represent a single application or an entire minimum viable business. Validate the clean snapshot in an isolated clean room first, so malware doesn't get a way back into production. Then test it on a schedule. Every run produces a recovery report, which is the evidence your auditors and your board ask for. 

Cyber Recovery for Hyper-V is in limited availability for customers now, and Azure Local is coming soon, with the choice of recovering to a Hyper-V VM or a native Azure Local (Arc) VM.

Unstructured Data: Cyber Resilience for the Biggest Pile of Data You Own

NAS estates represent your biggest, least-protected pile of data. Snapshots and replicas on the same array can carry ransomware along with your files, and backup storage is costly and slow to buy and install. 

Four updates this quarter help you protect unstructured data, move it, recover it, and find what is in it.

• Rubrik-Hosted Protection for On-Premise Unstructured Data: This update delivers clean recovery without the operational burden of managing storage. Rubrik runs the backup storage, capacity, and updates, so you manage policy and recovery in Rubrik Security Cloud without managing the systems underneath. Every backup lands in an isolated, immutable, Rubrik-hosted vault, and ransomware detection runs on every backup. Data movers run on your site. Generally Available Now.
   

• Copy and Migrate: Move data without leaving the platform that protects it. Create and manage copy schedules in Rubrik Security Cloud, with the same access controls as the rest of your workloads. Move NAS data across platforms, secondary sites, or cloud storage, and destination policies are applied directly in Rubrik Security Cloud, so the data stays protected after the move. Generally Available Now.
   

• NCD Offline Recovery: Now you can have a last-resort restore path when Rubrik Security Cloud Is unreachable. Metadata and configurations sync to a bucket you control, so you can restore from the NAS Cloud Direct VM you already run. Generally Available Now.
   

• Sensitive Data Discovery Anywhere: Find sensitive data on any supported source, independent of backups. Scan NFS, SMB, and Generic S3 sources directly, on a schedule you set. Scanning runs independent of backups and scales the way NAS Cloud Direct does for backups: add data movers. Findings appear in Rubrik Security Cloud. In invite-only preview for Enterprise Edition customers.

   

   

One Platform, One Direction

Back up what attackers can't touch. Protect every workload you run. Know the clean point. Recover the business, and prove it works. That's what we mean by engineering past the incident, with data, identity, and AI on one platform so resilience is already in place before anyone needs it.

Join us at the quarterly Rubrik Round Up webinar to learn more about the latest product and feature releases and how to leverage these innovations to protect your business from modern cyber threats.

Safe Harbor Statement: Any unreleased services or features referenced in this document are not currently available and may not be made generally available on time or at all, as may be determined in our sole discretion. Any such referenced services or features do not represent promises to deliver, commitments, or obligations of Rubrik, Inc. and may not be incorporated into any contract. Customers should make their purchase decisions based upon services and features that are currently generally available.