Rubrik Security Cloud (RSC) is Rubrik’s platform for protecting data centre, cloud and SaaS data. For data centre and cloud workloads it is licensed by capacity: back-end terabytes (BETB) for on-premises workloads and front-end terabytes (FETB) for cloud workloads by default.[1] The capacity is sold in editions that set the features. It is bought through one of two commercial programs: Rubrik Scale, which has a Scale Subscription and a Scale True Forward model, or the RSC Utility consumption model.[1]
Editions
Rubrik’s Compare Plans table shows Foundation, Business and Enterprise Editions. All three include Enterprise, Cloud, and SaaS Data Protection, the Data Security Command Center and Mass Recovery. Business Edition adds Anomaly Detection. Enterprise Edition adds Data Discovery and Classification, Threat Monitoring and Turbo Threat Hunting, Threat Containment and Orchestrated Application Recovery.[2] Enterprise Proactive Edition includes all Enterprise Edition capabilities plus data security posture features that show where sensitive data is stored and who has access to it.[4]
| Edition | Adds | Notes |
|---|---|---|
| Foundation | Data protection, Data Security Command Center, Mass Recovery | Edition that migrated on-premises TB converts to in the cloud (see below) |
| Business | Anomaly Detection | Offered under RSC Utility |
| Enterprise | Data discovery and classification, threat monitoring and hunting, threat containment, orchestrated recovery | Eligible for the Ransomware Recovery Warranty; offered under RSC Utility |
| Enterprise Proactive | Data security posture (sensitive data access) | Also eligible for the warranty according to the FAQ |
Rubrik describes Enterprise Edition as a three-year subscription that includes software and support, with access to new software features for the life of the plan.[2] The 2024 data sheet says Rubrik subscription licences include software, hardware of the customer’s choice and support, and that payment can be made in fixed yearly instalments.[3] Rubrik publishes no edition prices or part numbers. Catalog: Rubrik Security Cloud Foundation Edition; Rubrik Security Cloud Business Edition; Rubrik Security Cloud Enterprise Edition; Rubrik Security Cloud Enterprise Proactive Edition.
Cloud workloads inside edition bundles
The data sheet limits the cloud protection that comes with an edition. Cloud workload protection included in Rubrik subscription bundles applies only to workloads migrating from on-premises to the public cloud. Universal Cloud Licenses are an add-on for workloads that are in the public cloud from the start of the subscription.[3] The Licensing Guide sets the conversion: if a customer migrates one TB of on-premises RSC to the cloud, that one BETB converts to one FETB of Universal Cloud License Foundation Edition. More capacity, or functionality beyond Foundation Edition, must be bought.[1] A customer licensed for Enterprise Edition on-premises therefore does not automatically get Enterprise Edition features for workloads it moves to the cloud. Catalog: Migrated on-premises TB converts to UCL Foundation Edition only; Cloud protection in edition bundles is for migration only.
Metrics
The Licensing Guide defines the two capacity units:[1]
- Back-end Terabyte (BETB): “The final volume of data protected after compression, deduplication, replication, or other data operations, regardless of the storage target.” Catalog: Back-end Terabyte (BETB).
- Front-end Terabyte (FETB): “The initial volume of primary data submitted to Rubrik, before compression, deduplication, replication, or other data operations.” Catalog: Front-end Terabyte (FETB).
Under both Scale models, on-premises workloads are measured on a BETB basis and cloud workloads on an FETB basis by default. FETB measurement for on-premises workloads may be available, subject to approval.[1] The choice matters because the same estate gives different numbers. BETB depends on data reduction and on retained and replicated copies. FETB depends only on the size of the primary data.
Counting / floors
One TB, one platform. When one TB is purchased, the customer is entitled to one TB on one of the following platforms: RSC, Edge or Universal Cloud License. It is not one TB on each.[1] Catalog: One purchased TB is usable on one platform only.
No downgrade mid-term. Customers can upgrade to a higher offering at any time but cannot downgrade to a lower offering or quantity during an active Subscription Period. Downgrades are possible at renewal.[1]
Floors. The Licensing Guide sets no general minimum capacity for Scale. The warranty program has its own minimum of 250 TB (see below).[5] A Scale True Forward quote after a review is at least the 75th percentile of daily peak usage, or the minimum capacity hardware, whichever is larger.[1]
Virtualization & partitioning
Because the metrics measure data, not compute, Rubrik’s terms contain no host, socket or core rules. Under Scale, licences are portable. A customer may move its Scale licences across any Rubrik-approved platform, including Rubrik-branded hardware, third-party hardware and the public cloud, at any time during the Subscription Period without buying more licences, within its licensed capacity.[1] To move data to or from a Rubrik-approved public cloud, existing on-premises Scale licences can be converted to Universal Cloud License at 1 BETB = 1 FETB, or the other way.[1] Catalog: Scale licences are portable and convert 1 BETB to 1 FETB.
Hardware
Scale Orders may be placed for third-party hardware. If Rubrik-branded hardware is needed, it must be bought upfront. It cannot be added during the Subscription Period of a Scale Order originally placed for third-party hardware. e1000 appliances cannot be bought under any Scale model.[1] Rubrik-branded hardware is made and sold by third-party manufacturers under a Rubrik brand licence. The manufacturer gives a one-year hardware warranty from shipment. Rubrik supports the hardware only under a post-sale Support Services Plan.[6] Catalog: Rubrik-branded hardware is bought upfront under Scale; Rubrik-branded hardware is made and warranted by third-party manufacturers.
Programs
Scale Subscription
Scale Subscription allows licence portability between Rubrik-branded hardware, third-party hardware and cloud platforms, and allows the customer to buy more SaaS capacity than hardware capacity.[1] It is a three-year subscription with an option to extend to five years. Each Scale model is offered in four packages.[1] Renewals run for 12 to 60 months. A Customer Resilience Manager (CRM) may be required for some Orders, which the customer should confirm with its Reseller.[1] Catalog: Rubrik Scale Subscription.
Scale True Forward
Scale True Forward has the portability of Scale Subscription and lets the customer exceed its capacity and pay for the excess through “True Forward Cycles”. It is available on an approval basis only. The initial term is at least 36 months and renewals run for 36 to 60 months. A CRM must be bought for every Scale True Forward Order.[1]
- Hardware variance. At purchase and throughout the term, Rubrik permits up to 30% variance between hardware capacity and software capacity, in either direction. This applies only to Rubrik-branded hardware, not to third-party hardware.[1]
- Scale Reviews. Rubrik reviews usage logs for the customer’s global environment about six months after the Order and every six months after that. If utilized capacity exceeds the purchase, Rubrik issues a quote through the channel partner for capacity at or above the 75th percentile of daily peak usage in the six-month period. The customer agrees to order within 30 days of the Reseller’s quote.[1]
- No back-charging. Rubrik will not retroactively charge for unplanned capacity consumed before each Scale Review.[1]
- Capacity Burst. If daily usage exceeds the purchased capacity by more than 30% at any time before the next review, Rubrik quotes capacity at the 75th percentile of daily peak usage in the current period. The purchase is prorated to the end of the term and must be ordered within 30 days.[1]
The CRM helps plan capacity through monthly usage reporting.[1] For a licence manager, the 75th percentile rule means that a short peak, such as a migration, may not raise the true-forward quantity, but a sustained rise will. Catalog: Rubrik Scale True Forward; Scale Reviews true forward at the 75th percentile of daily peak; Usage more than 30% over capacity triggers a Capacity Burst purchase. For the general concept, see true-up.
RSC Utility
RSC Utility is a consumption billing model for Business and Enterprise Editions. The initial Utility Subscription Period must be at least 36 months.[1] The customer commits to a Reserve Capacity, which the channel partner invoices in advance. A Billing Report runs on the 25th of each month. If Total Usage exceeds the Reserve Capacity, Rubrik invoices the On-Demand Capacity through the channel partner.[1]
Utility has structural restrictions:[1]
- Usage is metered per TB or per user as the Order states, and the metering metric must stay the same for the term and any renewal.
- RSC Utility clusters cannot be mixed with other clusters, such as standard RSC or previously licensed Rubrik CDM clusters.
- Clusters stay with the original RSC Utility purchase, and later Utility purchases cannot be added to them.
- FETB and BETB Utility models cannot be combined.
- For Microsoft 365, the customer must use either M365 user and capacity licences or the Universal SaaS Application License, not both.
The customer may have to help Rubrik verify Total Usage and link cluster IDs to the Order. A CRM may be required for some Utility Orders.[1] Catalog: RSC Utility; Utility usage is billed from a monthly Billing Report; The Utility metering metric is fixed for the term and renewals. See also consumption credits and prepaid capacity.
Ransomware Recovery Warranty
The Ransomware Recovery Warranty is offered with Enterprise Edition. An Eligible Solution is “a subscription to a minimum of 250 TB of the Rubrik Security Cloud Enterprise Edition specific SKU along with a concurrent subscription to a Customer Resilience Manager”.[5] The FAQ also names the Enterprise Proactive Edition SKU.[4] The warranty must be approved by Rubrik and added to the Reseller’s quote.[5]
Rubrik warrants that, after a ransomware incident in the Warranty Period, the Eligible Solution will let the customer materially restore its Protected Data to the last good backup. If recovery fails because of the Eligible Solution, Rubrik reimburses approved Recovery Incident Expenses up to a cap based on the amount of Protected Data:[5]
| Protected Data | Payment cap (USD) |
|---|---|
| 250 TB to < 500 TB | 250,000 |
| 500 TB to < 750 TB | 500,000 |
| 750 TB to < 5 PB | 1,000,000 |
| 5 PB to < 10 PB | 5,000,000 |
| 10 PB and above | 10,000,000 |
Aggregate payments for several incidents in a Warranty Period cannot exceed the cap.[5] Payment depends on conditions that run throughout the Warranty Period, including an active subscription, the latest software version and security patch, and completed Health Checks with their recommendations implemented.[5] The FAQ adds that Protected Data must be secured with Retention Lock in Compliance Mode, and that the CRM conducts monthly Health Checks.[4] Catalog: Ransomware Recovery Warranty; The Ransomware Recovery Warranty needs 250 TB of Enterprise Edition and a CRM; Warranty payments are capped by tier of Protected Data.
Out of scope
- The four Scale packages, which the Licensing Guide shows in a table that is not in its text.
- Prices, part numbers and Reseller quotes.
- Rubrik Edge and legacy Rubrik CDM licences.
- Rubrik Cloud Vault and cloud workload products, covered in Rubrik Cloud Vault and cloud protection licensing.