Rubrik Introduces DevOps Protection with Cyber Recovery for Microsoft Azure DevOps and GitHub

Rubrik (NYSE: RBRK) announced cyber recovery capabilities for Microsoft Azure DevOps and GitHub, with general availability expected in the coming months.

See more from StockTitan in Google Search and AI answers. Adds StockTitan as a preferred source · opens Google

Add on Google Not now

New detection, investigation, and recovery capabilities enable resilience for critical data

PALO ALTO, Calif.--(BUSINESS WIRE)-- Rubrik (NYSE: RBRK), the Security and AI Operations Company, today announced cyber recovery capabilities for DevOps platforms Microsoft Azure DevOps and GitHub. With built-in anomaly detection, blast radius investigation, and surgical recovery, organizations will be able to detect suspicious activity on their code, instantly scope the impact of an attack, and undo the attackers’ changes from air-gapped, immutable backups, without disrupting legitimate developer work.

"An organization’s source code is where innovation lives, and attackers know it,” said Anneka Gupta, Chief Product Officer at Rubrik. “One stolen token or poisoned dependency can impact thousands of repositories before anyone notices. Our new cyber recovery capabilities for DevOps allow organizations to detect suspicious activity, see what was impacted, and recover only the unwanted changes, using the air-gapped backups they already trust Rubrik to protect."

Attackers no longer need to breach perimeters; instead, they compromise legitimate credentials to launch attacks that mimic normal developer activity. Accelerated by AI, these attacks can rapidly spread malicious code across thousands of repositories. According to Gartner^Ⓡ, “a growing number of software engineering leaders are modernizing their DevSecOps toolchains by adopting DevSecOps platforms.”¹ These platforms house an organization’s most critical intellectual property, including source code, CI/CD pipelines, and infrastructure as code. As such, they’ve become a primary, identity-driven attack surface.

Enhanced DevOps Protection Capabilities

Operating natively within Rubrik Security Cloud, DevOps Protection Enterprise Edition now connects detection, investigation, and recovery in a single workflow:

• Anomaly Detection: Continuously baselines GitHub and Azure DevOps audit logs, correlating them with Rubrik backup metadata to flag suspicious identity activity and produce a prioritized alert that can be routed directly into existing security and ticketing workflows.
• Blast Radius Investigation: Produces a categorized view of affected assets across repositories, commits, pipelines, workflows, pull requests, and settings, providing the exact scope of impact and determining precisely what needs to be restored.
• Surgical Recovery: Recovers only what the attacker changed while preserving legitimate work from other developers, using the clean, air-gapped, immutable backups customers already hold with Rubrik DevOps Protection. Teams will be able to avoid manual rebuilds and organization-wide code freezes.

Expanded Developer Collaboration Stack Protection

To ensure complete recovery context, Rubrik DevOps Protection (Foundation Edition) now backs up broader platform metadata, settings, and the developer collaboration stack across Azure DevOps and GitHub. From issues, pull requests, and Azure Boards to wikis, packages, and organization settings, businesses can recover the full context of how their teams build software, rather than just the underlying code.

Rubrik’s cyber recovery capabilities for DevOps platforms Microsoft Azure DevOps and GitHub is expected to be generally available in the coming months. For more information, read the blog and join the virtual Cloud Resilience Summit taking place on Tuesday, November 10, 2026.

¹ Source: Gartner, Magic Quadrant^TM for DevSecOps Platforms, Keith Mann, Thomas Murphy, Bill Holz, 15 June 2026. Gartner and Magic Quadrant are trademarks of Gartner, Inc. and/or its affiliates.

About Rubrik

Rubrik (NYSE: RBRK) is the Security and AI Operations Company, delivering one platform built at the intersection of data, identity, and AI. The platform enables agentic cyber resilience and trusted AI operations for enterprises worldwide, built to recover before disruption strikes and stay a step ahead, so security is never the reason ambition stalls. For more information, please visit www.rubrik.com and follow Rubrik on LinkedIn and X.

© 2026 Rubrik, Inc. All rights reserved. Rubrik and the Rubrik logo are trademarks of Rubrik, Inc. Other marks are the property of their respective owners.

SAFE HARBOR STATEMENT: Any unreleased services or features referenced in this document are not currently available and may not be made generally available on time or at all, as may be determined in our sole discretion. Any such referenced services or features do not represent promises to deliver, commitments, or obligations of Rubrik, Inc. and may not be incorporated into any contract. Customers should make their purchase decisions based upon services and features that are currently generally available.

View source version on businesswire.com: https://www.businesswire.com/news/home/20261110678888/en/

Media Contact
Meghan Fintland
Head of Global PR
925.785.9192
press@rubrik.com

Source: Rubrik

Key Terms

anomaly detection technical

Anomaly detection is software that looks for patterns or datapoints that don’t fit expected behavior, like a smoke detector spotting an unusual signal in a room. For investors it flags unexpected events — sudden trading spikes, accounting irregularities, unusual customer behavior or operational problems — providing early warning of risk or opportunity so decisions can be made before small problems become big losses.

blast radius technical

Blast radius is the estimated scope and severity of knock-on effects from a negative event—such as a product failure, regulatory action, data breach, or supplier disruption—indicating how many parts of a business, its partners, or the market could be affected. Investors treat it like a weather forecast for risk: a larger blast radius means greater potential losses, disrupted revenue or reputational damage across suppliers, customers, or related stocks, which can alter valuations and investment decisions.

air-gapped backups technical

Air-gapped backups are copies of a company’s important data stored on systems that are physically isolated from the internet and internal networks, like keeping records in a locked safe that has no phone line. They matter to investors because they reduce the risk that hackers or software failures can destroy or corrupt financial records and operations, helping ensure continuity, protect value, and lower the chance of unexpected costs or downtime.

immutable backups technical

Immutable backups are copies of a company’s data that cannot be altered or deleted once written, like putting documents into a locked safe that cannot be reopened. For investors, they matter because they reduce the risk of catastrophic data loss, fraud or ransomware shutting down operations, support regulatory compliance, and help ensure the business can resume quickly—factors that protect revenue, reputation and long-term value.

ci/cd pipelines technical

CI/CD pipelines are automated workflows that build, test and deploy software updates on a continuous basis, like an assembly line that moves a product from prototype to store shelf without manual stops. For investors, they matter because they help companies deliver features and fixes faster, reduce costly mistakes, improve reliability and scale development efficiently—factors that can lower operational risk, speed revenue growth and protect product reputation.