Rubrik Is Up 16% — but So Is the Whole Security Sector

On the morning of September 14, Rubrik (RBRK) was up 15.6% to $100.20, a market cap of roughly $20.8 billion. Read that in isolation and it looks like a company-specific event. It isn't. The rest of the security complex moved with it in near lockstep: Zscaler +16.5%, SentinelOne +14.5%, CrowdStrike +13.9%, Fortinet +9.0%, Cloudflare +7.8%. The "peer gains" in the headline aren't background noise — they are the driver. When the whole group jumps together in a single session, the move is the sector repricing a shared theme, not the market discovering something new about Rubrik's business.

That distinction is the entire reason to read past the green number, because it separates what happened today from what Rubrik is actually worth.

The rally is a recovery, not a breakout

The sequence matters more than today's print. On August 27, Rubrik reported its second-quarter fiscal-2027 results — subscription ARR up 33% to $1.66 billion, revenue up 38% to $427 million, and a swing from a year-ago loss to roughly $45 million in non-GAAP net income — and the stock closed at a 52-week high near $108. Then it did what a fast, recently-doubled name often does: sold off. It dropped 12.9% the next day and drifted to $86.65 by the prior close, a pullback of about 20% off the high.

Today's 15.6% is that pullback being bought back, not a test of new ground. The stock still sits about 7% below its August record. So "rallies 16% amid peer gains" is, precisely, a rebound inside a sector-wide bid. The buyer here is chasing a recovery, not picking up a fresh entry.

The factor that actually changed the price

The number that deserves more attention than the rally is free cash flow. A year or so ago, Rubrik's trailing free-cash-flow margin sat around −6% — the company was burning cash. In the six months ending July 31, 2026, that margin finished at roughly 19%, and trailing free cash flow is $286 million, up about 58% year over year. That is the inflection the market is now willing to pay up for.

Why it matters: Rubrik is still loss-making on a GAAP basis (its trailing P/E is negative), so the market cannot value it off earnings. It values it off the trajectory — how fast sales grow and how quickly they turn into cash. ARR growing 33% while FCF margin flips from negative to ~19% is the proof that the subscription model is scaling past its costs. That combination is what justifies a premium multiple. Strip the cash-flow inflection out and you're left with just another high-beta software name, and a 13.5x price-to-sales multiple stops making sense.

Is the multiple fair, or is it the AI-security bid?

The fair question is not "is Rubrik a good company." It's "is what you're paying reasonable against the set it competes with?" On price-to-sales, Rubrik trades at about 13.5x. In its peer set that puts it in the middle of the pack: cheaper than CrowdStrike (~45x), Cloudflare (~47x), Snowflake (~22x) and Fortinet (~17x); richer than Zscaler (~9x), MongoDB (~11x) and SentinelOne (~7x).

Read that two ways. Against the pure-security set — CrowdStrike, Zscaler, SentinelOne, Fortinet — Rubrik's multiple is not the most aggressive in the room. It sits mid-pack and is clearly cheaper than the two largest, most AI-hyped names. But it isn't "cheap" either. It is paying up on growth and cash conversion, which is exactly what it's doing.

The risk is that today's move is sector beta, not a Rubrik-specific re-rating. If the AI-security spending cycle holds and Rubrik keeps ARR growing above roughly 30% while holding that ~19% FCF margin, the 13.5x is defensible — it's the price of a fast-growing, cash-generative name. If ARR growth rolls over, or FCF margin compresses back toward breakeven, a 13.5x multiple has to re-rate down toward the cheaper end of the set, and that is where the downside lives. Momentum supports the near-term case — the stock is well above its 50-day line (~$88) and 200-day line (~$69), up roughly 96% over the last half-year — but momentum is a timing tool, not a reason to pay up for a multiple.

What it means in a portfolio

In a portfolio, this is a growth sleeve: a high-momentum, cash-flow-inflecting security name, the kind of holding that outperforms when AI and cyber spending keeps accelerating. It is not a dividend or a defensive cash-flow name — that's the other end of the barbell. The right response to a major winner that just recovered a pullback is not to cut it mechanically because the valuation got warm; hold is not sell. But the rating is earned on two numbers, and the next two reports are the test: ARR growth staying above roughly 30%, and FCF margin holding near 19%. As long as both hold, the multiple is earned. The first one to slip is the tell, and it will show up in the figure — not in the narrative.