Data center backup is the foundation everything else depends on

FAQ

Everything you need to know

bg-surface-muted

What is enterprise data protection?

Enterprise data protection is the practice of keeping an organization's data recoverable across every workload it runs, regardless of what fails or who attacks. It covers backing up data as it is created, storing those copies where production compromise cannot reach them, monitoring them for threats, and restoring to a verified clean state. Rubrik delivers it across physical systems, operating systems, virtual machines, databases, file systems and containers from a single platform and a single policy engine.

How does data center backup work with Rubrik?

In four stages. Rubrik discovers new workloads automatically as they are created and applies the SLA policy you defined, so nothing waits on a manual job. Each backup writes to an append-only file system that permits additions but never modifications or deletions. Hashes are pre-computed as those backups are created and compared continuously against live threat feeds, so the last known-clean recovery point is already identified. Recovery then runs from the same catalog, at whatever granularity you need — a file, a database table, or hundreds of virtual machines at once.

Which on-premises workloads does Rubrik protect?

Three families, covering physical systems, operating systems, virtual machines, databases, file systems and containers. Hypervisors including VMware, Nutanix and Hyper-V. Databases including SQL Server, Oracle, SAP HANA, MongoDB, PostgreSQL and MySQL. And unstructured file and object data at petabyte scale across NFS, SMB and S3. All three run under the same policy engine and the same console, so the operational model does not change by workload.

Can Rubrik's immutability be turned off?

No. Immutability is a property of the file system rather than a setting applied on top of it, and it is always on and un-configurable. The file system is append-only on the first copy, so data can be added but never modified or deleted — including by an administrator. This is the difference between a platform that is immutable by architecture and one that is immutable until someone changes a policy.

What makes a backup platform Zero Trust?

Zero Trust assumes the environment is already breached and removes the assumptions an attacker would exploit. In Rubrik's case that means five architectural properties: the backup software and hardware ship as one isolated solution; the operating system is proprietary and hardened; the file system exposes no open network protocols; data is append-only from the first copy; and the interface enforces MFA by default, retention lock, and quorum authorization requiring more than one person to approve any change that affects data.

How quickly can Rubrik identify a clean recovery point?

Because hashes are pre-computed as backups are created rather than calculated during the incident, scanning does not require mounting or restoring anything. In internal testing, Turbo Threat Hunting scanned an estimated 75,000 backups in 60 seconds. Approaches that begin scanning only after an attack have to mount and inspect each backup in turn, which at that scale takes 50 days or more. The work is the same. The difference is when it happens.