Rubrik has announced Rubrik-Hosted Protection for On-Premises Unstructured Data, a service that protects unstructured data on enterprise data centers’ NAS (network-attached storage) by copying it to a vault hosted and managed by Rubrik itself, with no need to install backup appliances. The company unveiled it on November 5, 2026, and the service, part of NAS Cloud Direct, has been generally available since November 3.
Rubrik’s NAS protection in 30 seconds
- Rubrik copies data from on-premises NAS to a vault it hosts and manages itself.
- It uses lightweight data movers on existing servers, with no appliances.
- The vault sits in a separate identity domain with retention lock.
- It includes anomaly detection and threat hunting; sensitive-data discovery is still in preview.
- Available since November 3, 2026, with no published pricing.
Unstructured data (documents, spreadsheets, design files, images or project files) typically lives on NAS from various vendors and is a common ransomware target, because encrypting a shared file resource can paralyze entire departments. Protecting it the classic way means deploying and maintaining backup appliances, secondary storage and, often, an additional off-site copy. Rubrik’s pitch is to take that infrastructure out of the customer’s own facilities.
How the Service Works
Instead of appliances, Rubrik installs lightweight data movers on servers the company already has. Those components read the data from the NAS and send it to a vault hosted by Rubrik, which the company manages as a service. According to Rubrik, NAS from several vendors can be protected under a single policy, avoiding the need to maintain separate tools for each array.
The vault sits in an identity domain separate from the customer’s environment and applies retention lock, so copies can’t be deleted or altered ahead of time. It’s a response to a recurring attack pattern: whoever compromises a company’s admin credentials often also tries to destroy its backup copies before encrypting production data. If the backups depend on a different identity domain, those stolen credentials aren’t enough to reach them.
Recovery isn’t tied to the original hardware either. Rubrik says data can be restored to a different array, to the cloud, or to an isolated recovery environment (IRE), which is useful when the affected NAS can’t be trusted after an attack or needs to be preserved for forensic analysis. The Copy and Migrate feature also lets data be moved between platforms and to the cloud.
Anomaly Detection and Sensitive Data
Beyond copying, the service also analyzes the data. Rubrik includes anomaly detection based on file entropy and change patterns, two typical signals of mass encryption, to help identify when an attack started and which was the last clean copy. It also offers threat hunting over the copies, to locate indicators of compromise before restoring so the problem isn’t reintroduced.
Sensitive data discovery, which locates personal or regulated information within shared resources, is still in preview, so it shouldn’t be assumed to be part of the general service yet.
Anneka Gupta, Rubrik’s chief product officer, said in the announcement that the goal is for companies to be able to protect and recover their on-premises unstructured data without the burden of managing backup infrastructure. That’s the company’s own commercial pitch, and its real-world value will depend on factors the announcement doesn’t detail.
What the Announcement Doesn’t Clarify
The announcement doesn’t publish pricing or a billing model, nor does it specify which regions host the vault, a relevant detail for European companies with sovereignty or GDPR requirements. It also doesn’t list the full set of supported NAS systems or recovery times for large volumes, which depend heavily on the bandwidth available between the data center and the vault. Restoring dozens of terabytes from a remote service isn’t the same as doing it from a local appliance, and that’s the point any systems team will want to test before switching models.
For organizations that prefer to keep control over where their copies reside, the alternative remains in-house infrastructure or a private cloud with immutable storage under their own management.
Frequently Asked Questions
What is Rubrik-Hosted Protection for On-Premises Unstructured Data?
A Rubrik service, part of NAS Cloud Direct, that copies data from on-premises NAS to a vault hosted and managed by Rubrik with no backup appliances.
Since when is it available?
It has been generally available since November 3, 2026. Sensitive data discovery remains in preview.
How does it protect against ransomware?
It keeps copies in a separate identity domain with retention lock and detects anomalies through entropy and change patterns to locate the last clean copy.
How much does it cost?
Rubrik hasn’t published pricing in the announcement.
Sources:
This article is also available in Spanish: “Rubrik protege los NAS locales desde su nube sin appliances de copia,” on revistacloud.com.
