New Microsoft and Rubrik Integration Delivers Complete Identity Attack Response

Key Terms

microsoft defender technical

Microsoft Defender is a suite of security tools that protects computers, servers and cloud services from viruses, hacking attempts and other digital threats. Think of it as a combination of a security guard, alarm system and lock for an organization’s computers that scans for suspicious activity, blocks attacks and helps recover from incidents. Investors care because widespread use affects a company’s cybersecurity costs, operational risk and the maker’s recurring software revenue and competitive standing in the cybersecurity market.

active directory technical

Active Directory is a centralized system that acts like a company-wide digital phonebook plus security guard, storing and managing user accounts, devices, and access permissions so employees and systems can prove who they are and access the right resources. For investors, it matters because it underpins a firm’s IT security, operational continuity and regulatory compliance—failures or weaknesses can lead to outages, data breaches or fines that hurt revenue and reputation.

entra id technical

Entra ID is a cloud-based identity and access service that acts like a digital front door and keycard system for organizations, managing who can sign in, which devices can connect, and which apps people can use. Investors care because widespread use of such services drives steady subscription revenue, reduces companies’ cybersecurity risk (which affects costs and liabilities), and signals demand in the enterprise software market—all factors that influence a company’s growth and valuation.

immutable recovery points technical

Immutable recovery points are fixed copies of data or system state that cannot be changed or erased once created, acting like a tamper-proof snapshot stored for later restoration. For investors, they signal stronger protection against data loss, ransomware and accidental corruption, supporting business continuity and regulatory compliance—similar to keeping an unchangeable safety copy of important documents that a company can rely on to resume operations quickly.

identity provider technical

An identity provider is a service that verifies and manages who users are when they log into an application or website, similar to a passport office or a trusted doorman that checks credentials before granting access. For investors, it matters because a reliable identity provider reduces the risk of fraud, data breaches, and compliance violations, which can protect a company’s reputation, customer trust, and financial performance.

gartner magic quadrant technical

The Gartner Magic Quadrant is a visual tool that shows how different technology companies or products compare in terms of their ability to execute and their completeness of vision. It helps investors and decision-makers quickly identify which companies are leading, challenging, or emerging in a particular market, making it easier to evaluate potential opportunities or risks.

Microsoft Defender and Rubrik Identity Resilience create a unified detection-to-recovery offering; customers achieve trusted recovery in hours instead of days

SAN FRANCISCO--(BUSINESS WIRE)-- Rubrik (NYSE: RBRK), the security and AI operations company, today announced a new integration with Microsoft Defender at RSAC 2026, enabling organizations to move from identity threat detection to rapid remediation and trusted recovery. The integration connects Microsoft’s real-time identity threat detection with Rubrik’s automated identity rollback and recovery capabilities, helping organizations respond faster to identity-based attacks.

Identity has become the primary target for modern cyberattacks. According to Rubrik Zero Labs research, 90% of IT and security leaders say identity-driven cyberattacks are their organization’s top concern. Yet most security tools stop at detection, leaving organizations to manually investigate malicious changes and restore compromised identity systems.

“Detection is only half of the battle,” said Anneka Gupta, Chief Product Officer at Rubrik. “Organizations need the ability to quickly and surgically reverse malicious identity changes and completely restore their infrastructure. By combining Microsoft Defender’s threat detection with Rubrik Identity Resilience, we give security and IAM teams the power to move from a detected compromise to a trusted, recovered state in hours, instead of days.”

With this integration, organizations can extend Microsoft Defender detections directly into Rubrik’s identity recovery workflows, allowing teams to investigate incidents, reverse malicious identity changes, and restore trust across hybrid environments.

Joint Rubrik and Microsoft Defender customers can now:

• Understand attack impact faster by correlating threat alerts with identity changes.
• Reverse malicious identity modifications without performing full domain restores.
• Restore trusted identity states using immutable recovery points.
• Maintain visibility across hybrid identity environments, including Active Directory and Entra ID.

The integration builds on Rubrik’s continued investment and broader vision for Identity Resilience, focused on ensuring identity systems remain trusted, available, and recoverable in the face of cyberattacks, operational disruptions, and evolving compliance requirements.

Over the past 15 months, Rubrik has rapidly expanded its identity capabilities, introducing recovery for Active Directory and Entra ID, expanding protection to multi-identity provider environments including Okta, and launching Identity Resilience capabilities that help organizations investigate incidents and reverse malicious changes. The company has also expanded ecosystem integrations with leading security platforms including CrowdStrike Falcon Identity Protection and now Microsoft Defender, connecting threat detection with automated remediation and trusted recovery.

For more on how Rubrik is redefining identity security, read more here.

About Rubrik

Rubrik (NYSE: RBRK) is the Security and AI Operations Company. The company's data security platform secures and recovers data from cyber threats and operational disruptions. Rubrik has been recognized as a Leader in the Gartner® Magic Quadrant™ for Enterprise Backup and Recovery Software Solutions for two consecutive years and is trusted by over 6,600+ customers across the globe, including world-renowned enterprises and government organizations. For more information, visit www.rubrik.com and follow @rubrikInc on X (formerly Twitter).

View source version on businesswire.com: https://www.businesswire.com/news/home/20260323132456/en/

Media Contact

Meghan Fintland

Head of Global PR

925.785.9192

press@rubrik.com

Source: Rubrik