Rubrik (RBRK) Q2 2027 Earnings Call Transcript

Rubrik reported Q2 FY2027 subscription ARR of $1.66B (+33% YoY) and net new subscription ARR of ~$96M (+35% YoY), with total revenue of $427.3M (+38% YoY). Profitability improved alongside scale: non-GAAP EPS was $0.20 vs a non-GAAP loss of $0.03 in Q2 FY2026, non-GAAP subscription ARR contribution margin rose to 14% (+460 bps YoY), and free cash flow increased to $65.7M (+$8.2M YoY). The company raised outlook, guiding Q3 revenue to $429M–$431M (+23% YoY, +31% normalized for material rights) and FY2027 subscription ARR to $1.88B–$1.885B (+~29%), with FY2027 free cash flow of $323M–$333M, though management flagged reduced “material rights” revenue (full-year ~$18M) as a headwind to reported growth.

Analysis

This is more important as a quality-of-demand signal than as a single-quarter beat. The takeaway is that Rubrik is converting a migration story into a true expansion story: the core installed base is still compounding, enterprise concentration is rising, and newer modules are starting to create a second growth vector. That combination usually supports a higher durability multiple because it reduces the market’s fear that growth collapses once legacy migrations roll off.

The second-order winner is the broader cyber-resilience stack, but not evenly. Legacy backup appliances and point tools are the clearest structural losers because board-level buying is shifting toward platform consolidation and recovery speed, not feature depth. Within cybersecurity, identity-centric vendors and broader platform names should not panic, but Rubrik’s pitch implies budget may migrate from detection/prevention toward recovery, governance, and data control; that is a subtle headwind for vendors whose value prop is still mostly perimeter detection. The non-cloud / sovereign angle also matters: regulated and geo-sensitive demand can keep the on-prem mix healthier than bears expect, which is margin-accretive and reduces dependence on hyperscaler-linked spending.

The main risk is timing mismatch. The AI/agentic narrative is real, but ARR contribution from that layer is still embryonic, so the stock can outrun the monetization curve if investors capitalize RAC too early. What would falsify the bullish thesis is a sharp drop in net-new ARR after the migration tailwind ends, or evidence that guide raises are still mostly accounting-driven rather than broad-based demand. The next 1-3 months should be about funnel-to-production conversion; the 6-18 month story is whether identity and agent governance become meaningful ARR lines rather than slideware.

Key Decisions for Investors

• Long RBRK on post-earnings weakness or any 5%-8% pullback: the setup favors a higher base multiple if the next two quarters confirm that net-new ARR is decoupling from legacy migration noise.
• Use a 1-3 month alert on RBRK if cloud net-new ARR decelerates into the low-teens or if management leans harder on material-rights normalization than on true subscription demand; that would be the first sign the growth story is peaking.
• Pair trade: long RBRK / short CIBR for 2-4 months as a relative-value expression that cyber budgets are rotating toward recovery/governance platforms rather than the broad security basket.
• Avoid paying up for RAC narrative alone; wait for evidence of repeatable production conversions before underwriting meaningful FY27 ARR contribution. If RAC stays at 'pilot-to-production' but not revenue, treat it as upside optionality, not core thesis.
• For more conservative exposure, buy RBRK call spreads into earnings-season volatility only after a pullback; the risk/reward is better if the market gives back some of the hype around agentic AI.