Rubrik and CrowdStrike Bring Agentic Automation to Identity Attack Resilience

CrowdStrike and Rubrik provide closed-loop agentic identity resilience workflows to recover from identity-based attacks at machine speed

Fal.Con 2026 — Rubrik (NYSE: RBRK), the Security and AI Operations Company, today announced that Rubrik and CrowdStrike will deliver security teams with a complete, agentic identity resilience workflow orchestrated by Charlotte Agentic SOAR. By combining real-time threat detection and response from CrowdStrike Falcon® Next-Gen Identity Security with automated data and identity protection with Rubrik Identity Resilience, organizations can now detect, investigate, and recover from compromised identity environments in hours rather than days. By expediting the transition from threat detection to clean recovery, this integration frees security teams to focus on strategic initiatives.

"Our long-standing partnership with Rubrik has always been about giving joint customers the best of both worlds. Today we execute on the next phase," said Daniel Bernard, Chief Business Officer at CrowdStrike. "By bringing CrowdStrike and Rubrik together via agentic workflows, we're empowering organizations to contain and recover from identity-based attacks faster than ever."

As Identity Attacks Surge, Rapid Recoverability Becomes Non-Negotiable

Recent data from Rubrik Zero Labs found that 90% of IT and security leaders agree that identity-based attacks represent the single largest threat to their organizations.

“As adversaries weaponize AI and a breach unfolds in milliseconds, relying on human reaction time is risky and obsolete,” said Anneka Gupta, Chief Product Officer, Rubrik. “We integrated Rubrik and CrowdStrike because you can't fight rapid AI threats with manual workflows. You need automated, intelligent defense to shut down active attacks instantly and guarantee a clean, fast recovery."

The integration establishes a closed-loop response. CrowdStrike detects and contains malicious activity, while Rubrik correlates detection data with identity activity logs. For example, context within Human Resources Information Systems (HRIS) and IGA solutions can be scanned for threats across backup data. Teams can then surgically undo malicious Active Directory changes or trigger automated forest recovery plans while removing malicious files. From detection to recovery, the incident is then closed with minimal manual intervention.

Key Benefits of CrowdStrike and Rubrik Identity Resilience

• Complete Agentic Incident Response: Consolidates detection, containment, investigation, and recovery into a unified workflow driven by CrowdStrike and Rubrik.
• Unified Security and IT Workflows: Removes console switching and tool friction between security and IT operations.
• Surgical Remediation and Clean Recovery: Reverses unauthorized Active Directory changes, removes malicious files, or executes complete forest recoveries.
• Reduce RTO from Days to Hours: Recovers IdPs fast and clean, and removes attacker persistence. Ensures identity incidents are resolved, not just managed.

Today’s announcement builds on the existing identity-forward integrations that Rubrik supports today from CrowdStrike, including Falcon Next-Gen SIEM, Charlotte Agentic SOAR, Falcon Next-Gen Identity Security, and Threat Intelligence enabling joint customers to recover their IdPs to clean and current states.

Rubrik Sessions at Fal.Con 2026

Visit Rubrik at Booth 1421 for interactive demonstrations and attend the following expert presentations at the show:

• September 2, at 12:30 p.m. – Breakout Session: Rubrik & CrowdStrike Identity IR: Contain and Recover from Identity Attacks
• September 2, at 1:45 p.m. – Hands-On Workshop: Rubrik + CrowdStrike: Full Access Identity Tabletop
• September 2, at 4:30 p.m. – Breakout Session: Identity Under Siege: Eliminate Attacker Persistence for Multi-IdPs with Rubrik & CrowdStrike

SAFE HARBOR STATEMENT: Any unreleased services or features referenced in this document are not currently available and may not be made generally available on time or at all, as may be determined in our sole discretion. Any such referenced services or features do not represent promises to deliver, commitments, or obligations of Rubrik, Inc. and may not be incorporated into any contract. Customers should make their purchase decisions based upon services and features that are currently generally available.

About Rubrik

Rubrik (NYSE: RBRK), the Security and AI Operations Company, leads at the intersection of data protection, cyber resilience, and enterprise AI acceleration. Rubrik Security Cloud delivers complete cyber resilience by securing, monitoring, and recovering data, identities, and workloads across clouds. Rubrik Agent Cloud accelerates trusted AI agent deployments at scale by monitoring and auditing agentic actions, enforcing real-time guardrails, fine-tuning for accuracy and undoing agentic mistakes. For more information, please visit www.rubrik.com and follow @rubrikInc on X (formerly Twitter) and Rubrik on LinkedIn. © 2026 Rubrik, Inc. All rights reserved. Rubrik and the Rubrik logo are trademarks of Rubrik, Inc. Other marks are the property of their respective owners.

View source version on businesswire.com: https://www.businesswire.com/news/home/20260901295825/en/