AI agents are breaking things and organisations know it. They are deploying more anyway.

Rhea-AI Summary

Rubrik (NYSE:RBRK) highlighted new research on AI agents and cybersecurity risks. A global survey of 800+ decision-makers shows 98% of organisations have already faced disruptive AI agent incidents, while 90% deploy agents faster than security teams can govern them.

The study finds two-thirds lack full agent visibility, only 30% have robust rollback capabilities, and security budgets still favor prevention (55%) over response and recovery (45%). Findings will be discussed at the Rubrik FORWARD EMEA conference.

News Market Reaction – RBRK

-4.70%

9 alerts

-4.70% Session close to close

-2.4% Trough in 29 min

$15.34B Market Cap

0.1x Rel. Volume

In the Jun 25 session, RBRK declined 4.70%, reflecting a moderate negative market reaction. Argus tracked a trough of -2.4% from its starting point during tracking. Our momentum scanner triggered 9 alerts that day, indicating moderate trading interest and price volatility.

Data tracked by StockTitan Argus on the day of publication.

Market Context

This announcement reinforces Rubrik’s focus on securing AI agents, matching prior AI launches that a...

Analysis

This announcement reinforces Rubrik’s focus on securing AI agents, matching prior AI launches that averaged a -0.84% move afterward. Strong revenue growth and improving cash flow help underpin the story, while moderate short interest remains a risk to monitor.

Key Figures

Total revenue: $387.1M Subscription revenue: $374.2M Net loss: $41.9M +5 more

8 metrics

Total revenue $387.1M Quarter ended April 30, 2026

Subscription revenue $374.2M Quarter ended April 30, 2026

Net loss $41.9M Quarter ended April 30, 2026; narrowed from $102.1M

Operating cash flow $81.7M Quarter ended April 30, 2026

Free cash flow $73.6M Quarter ended April 30, 2026; 19% margin

Subscription ARR $1.57B As of April 30, 2026; 32% YoY growth

Cloud ARR $1.39B As of April 30, 2026; 43% YoY growth

FY27 revenue guidance $1.638–$1.648B Full fiscal year 2027 company guidance

Previous AI Reports

5 past events · Latest: Jun 17 (Positive)

Same Type Pattern 5 events

Date	Event	Sentiment	24h Move	Catalyst
Jun 17	AI security integration	Positive	+0.1%	Planned integration of Rubrik Agent Cloud with Amazon Bedrock AgentCore to secure AI agents.
Jun 09	AI coding agents	Positive	-0.3%	Launch of Rubrik Agent Cloud for Anthropic’s Claude Code and Claude Cowork with runtime security.
Jun 09	Rubrik AI launch	Positive	-0.3%	Introduction of Rubrik AI agentic layer across Rubrik Security Cloud and Rubrik Agent Cloud.
Jun 09	Unstructured data AI	Positive	-0.3%	Announcement of Rubrik Annapurna to create an AI-ready unstructured data layer for enterprises.
Jun 02	Frontier AI access	Positive	-3.2%	Access to Anthropic Mythos Research Preview via Project Glasswing to enhance cyber resilience.

24h Move is the share-price change in the day after each event; other market factors may also have contributed.

Pattern Detected

AI-related announcements for RBRK have often seen flat-to-negative next-day moves despite generally positive strategic messaging.

Key Terms

agentic ai, minimum viable business configurations, rule 10b5-1 trading plan, restricted stock units (rsus), +1 more

5 terms

agentic ai technical

"The study, Power without control: Rethinking cybersecurity for the age of agentic AI, draws on a global survey"

Agentic AI refers to computer systems that can make their own decisions and take actions without needing someone to tell them what to do each time. It's like giving a robot a degree of independence to solve problems or achieve goals on its own, which matters because it could change how we work and interact with technology in everyday life.

minimum viable business configurations technical

"Of the 73% of organisations that have defined their minimum viable business configurations, fewer than half test them regularly"

A minimum viable business configuration is the smallest set of operations, roles, products and systems a company needs to function and generate revenue while testing a market idea — like a bare-bones storefront or skeleton crew that proves a concept works. For investors it signals how quickly a firm can validate demand, limit cash burn and scale; a lean, effective configuration reduces early risk and shows whether additional funding will likely drive profitable growth.

rule 10b5-1 trading plan regulatory

"The transaction was carried out under a pre-arranged Rule 10b5-1 trading plan adopted on December 15, 2025."

A Rule 10b5-1 trading plan is a pre-arranged schedule that allows company insiders to buy or sell stock at specific times, even if they have inside information. It helps prevent accusations of unfair trading by making these transactions look planned and transparent, rather than sneaky or illegal.

restricted stock units (rsus) financial

"He received 3,709 restricted stock units (RSUs) at no cost, increasing his directly held shares"

Restricted stock units (RSUs) are a type of company promise to give employees shares of stock in the future, usually after certain conditions like working for a set time. They are like a gift promised today that you receive later, which can become valuable if the company's stock price goes up. RSUs matter because they are a way companies reward employees and can be a significant part of compensation.

free cash flow financial

"Operating cash flow was $81.7 million, driving free cash flow of $73.6 million, a 19% margin."

Free cash flow is the amount of money a company has left over after paying all its expenses and investing in its business, like buying equipment or updating facilities. It shows how much cash is available to reward shareholders, pay down debt, or save for future growth. This helps investors understand if a company is financially healthy and able to grow.

View in glossary

AI-generated analysis. How Rhea-AI works. Not financial advice.

See more from StockTitan in Google Search and AI answers. Adds StockTitan as a preferred source · opens Google

Add on Google Not now

LONDON, June 25, 2026 /PRNewswire/ -- Inside most large organisations today, an AI agent is making decisions, accessing data and taking actions that nobody is fully tracking. Not because leaders are unaware; 90% say they are deploying agents faster than their security teams can evaluate or govern them, but because competitive pressure to adopt agents outpaces the infrastructure to control them. New research from Economist Enterprise, developed as part of its Tech Frontiers initiative and supported by Rubrik, puts a number against the consequences: 98% of organisations have already experienced a disruptive agent-related incident and nine-in-ten expect more regardless of the safeguards put in place.

In the agentic era, failure is inevitable

98% of organisations have already experienced a disruptive AI agent-related incident. Nine in ten expect more.

The study, Power without control: Rethinking cybersecurity for the age of agentic AI, draws on a global survey of more than 800 business decision-makers across nine countries, all of whom operate AI agents in live environments. Its central finding is unambiguous: disruption is no longer a risk to be prevented, it is a reality to be managed. 88% of respondents believe that agents introduce fundamentally new types of risk that existing controls were not designed to manage, yet deployment continues to accelerate.

When, not if, incidents occur, the consequences reach far beyond IT. Leaders identify regulatory fines, supply chain disruption, revenue loss and reputational damage as the four business areas most vulnerable to agent-related incidents. Agentic risk is a business problem, not a technology problem.

The illusion of preparedness

Awareness of agentic risk is widespread, but readiness tells a different story. Two-thirds of organisations lack full visibility into their AI agents, leaving most unable to detect, contain or reverse failures when they occur.

The gap between confidence and capability runs deeper still: while 95% of organisations have recovery time targets, nearly half of those targets remain informal or loosely defined, creating a false sense of readiness when incidents actually occur. Just 30% have robust, fully tested rollback capabilities and 43% report that their recovery processes do not cover all agents or incident types.

The problem extends to the boardroom. Only one in four organisations regularly reports cyber recovery performance to senior leadership, leaving boards to make consequential decisions about AI investment without visibility into whether the organisation can actually recover when something goes wrong.

"Two thirds of organisations cannot tell you what their agents did five minutes ago. When an incident unfolds at machine speed, that is not an inconvenience, it is the difference between containment and catastrophe. We are deploying autonomous systems faster than we are building the means to understand them," said Kavitha Mariappan, Chief Transformation Officer, Rubrik.

Security spending hasn't caught up with reality

The investment picture compounds the problem. Despite near-universal incidents and widespread acknowledgement that more incidents are coming, organisations continue to allocate the majority of their cybersecurity budgets to prevention rather than response and recovery — 55% versus 45% today — and leaders expect this imbalance to persist until  2030.

"For decades, cybersecurity has focused on keeping external threats out. Agentic AI fundamentally changes that paradigm. As risk moves inside organisations, fortifying the walls is no substitute for fixing the foundations," said Vaibhav Sahgal, principal of technology at Economist Enterprise, who led the research programme. "Disruption must now be assumed. Leaders should move beyond asking how to prevent it, and instead ask how prepared their organisation is to contain the impact and recover quickly when disruption occurs."

Three capabilities define cyber resilience in the agentic era

The research points to three capabilities that separate resilient organisations from those that will be scrambling when incidents occur:

• First, full observability. Organisations cannot control what they cannot see, yet two-thirds lack visibility into their agents. Without it, detection, containment and recovery become guesswork.
• Second, rapid response and recovery. When incidents move at machine speed, the window to contain them is measured in minutes, not hours or days. The study found that only 30% of organisations have robust, tested capabilities to roll back harmful agent actions.
• Third, regular testing and validation. Having a recovery plan is not enough. Of the 73% of organisations that have defined their minimum viable business configurations, fewer than half test them regularly, leaving their ability to respond unproven under pressure.

The research will be discussed today in the opening keynote at Rubrik FORWARD EMEA conference. Read the full report: Power without control 

About Economist Enterprise
Economist Enterprise is the arm of The Economist Group that provides services to businesses, government agencies and financial institutions. Its work is grounded in The Economist Group's values of independence, integrity and progress. Economist Enterprise gives organisations the tools to make better decisions, take confident action and demonstrate leadership on a global stage.

Find out more about Economist Enterprise: https://www.economistgroup.com/press-centre/the-economist-group/the-economist-group-launches-economist-enterprise

About Rubrik 
Rubrik (NYSE: RBRK), the Security and AI Operations Company, leads at the intersection of data protection, cyber resilience, and enterprise AI acceleration. Rubrik Security Cloud delivers complete cyber resilience by securing, monitoring, and recovering data, identities, and workloads across clouds. Rubrik Agent Cloud accelerates trusted AI agent deployments at scale by monitoring and auditing agentic actions, enforcing real-time guardrails, fine-tuning for accuracy and undoing agentic mistakes. For more information, please visit www.rubrik.com and follow @rubrikInc on X (formerly Twitter) and Rubrik on LinkedIn.

About the research
Power without control: Rethinking cybersecurity for the age of agentic AI is an Economist Enterprise study, developed as part of its Tech Frontiers initiative, and supported by Rubrik. The study surveyed 804 business decision makers (VP+) at organisations with at least US$500m in annual revenue across Australia, France, Germany, India, Italy, Japan, Spain, the UK and the US between December 2025 and January 2026. All respondents have AI agents currently operating in their systems.

Explore the research:
https://insights.economistenterprise.com/technology-innovation/ctrlz

 

View original content to download multimedia:https://www.prnewswire.com/news-releases/ai-agents-are-breaking-things-and-organisations-know-it-they-are-deploying-more-anyway-302810480.html

SOURCE Economist Enterprise

FAQ

What did Rubrik (NYSE:RBRK) reveal about AI agent risks on June 25, 2026?

Rubrik shared research showing 98% of organisations have already experienced disruptive AI agent incidents. According to the study, 90% of leaders deploy agents faster than security teams can govern them, making disruption a reality to manage rather than a risk to avoid.

What are the key findings of the Power without control agentic AI report for RBRK investors?

The report finds most organisations lack control over AI agents, with two-thirds lacking full visibility. According to the research, only 30% have robust, tested rollback capabilities and 43% say recovery processes do not cover all agents or incident types.

How are cybersecurity budgets allocated between prevention and recovery in the age of AI agents?

The research shows cybersecurity budgets still favor prevention over response and recovery, at 55% versus 45%. According to the survey, leaders expect this imbalance to persist until 2030, despite near-universal AI agent incidents and expectations of more disruptions ahead.

What three capabilities define cyber resilience in the agentic AI era for organisations using RBRK solutions?

The study highlights three core capabilities: full observability of AI agents, rapid response and recovery, and regular testing and validation. According to the research, lacking these leaves detection, containment, and rollback of harmful agent actions largely to guesswork during fast-moving incidents.

Why do most organisations lack visibility into AI agents, according to the Rubrik-supported research?

The survey reports two-thirds of organisations lack full visibility into their AI agents’ actions. According to the findings, agents are being deployed quickly under competitive pressure, outpacing the security and governance infrastructure needed to track, understand, and control their behavior effectively.

How prepared are organisations to recover from AI agent failures, based on the June 2026 findings?

Preparedness appears limited, even where recovery plans exist. According to the research, 95% have recovery time targets but nearly half are informal, and only 30% have robust, fully tested rollback capabilities, leaving many unsure they can recover when disruption occurs.