He grew up studying under lamplight in Bihar. Now he runs one of the most consequential cybersecurity companies on the planet. Rubrik is the platform that picks up after every ransomware attack - and Bipul Sinha built it before ransomware was a household word.
Darbhanga, Bihar. Monsoon season. The family's home floods. Bipul Sinha is somewhere in that house, reading by lamplight, preparing for an exam that statistically he should not pass. His father, himself a failed entrepreneur who left a pharmaceutical sales career to start a venture in one of India's most economically challenged regions, had told him something that stuck: "Failure is never permanent, and neither is success."
"Education was my only road to salvation."- Bipul Sinha
He failed the IIT entrance exam on his first try. His mother borrowed money from relatives to pay for coaching materials. He sat it again. This time, he got in. Indian Institute of Technology, Kharagpur. Electrical engineering. The campus placement that followed landed him at a Tata-IBM joint venture, and a career path that would run through IBM in Bangalore, American Megatrends in Atlanta, nine years at Oracle - where he would accumulate over 30 patents in distributed computing - and eventually, a seat at the table as a venture capitalist at Lightspeed Venture Partners.
His mother's advice through all of it: "Do not start a business. Get a job, get a salary." She had watched his father's venture fail. She had lived the consequences. And she was not wrong to worry. Bipul, however, had developed a different lens: "If one is born and brought up in poverty, the only thing that one becomes good at is maximising opportunities."
"Your current circumstances are not indicative of what you could become."- Bipul Sinha
In late 2013, he left Lightspeed - where he had backed Nutanix, Hootsuite, Bromium, and Pulse News - and called three engineers he trusted: Arvind "Nitro" Nithrakashyap (an Oracle colleague), Soham Mazumdar (Google), and Arvind Jain (also Google). The target market: backup and recovery software. At the time, nobody thought that was a big idea.
That was exactly the point. "The real outcomes happen when people aren't sure if the value can be created," Sinha would later say. Rubrik was founded in January 2014. By 2015 - its first real sales year - it generated $50 million in revenue.
Sinha is blunt about the state of the industry before Rubrik: "The traditional cybersecurity industry almost earns $200 billion per year selling 60 to 80 different tools across hundreds of vendors for prevention. And they have not been able to prevent anything." Rubrik's bet was different - what if instead of trying to stop every attack, you built a platform that guaranteed recovery?
The 2016 ransomware attack on a Rubrik customer proved the thesis. The company's zero-trust architecture and dynamic backup approach meant full system recovery in hours. That event turned a backup company into a cybersecurity platform with a story no competitor could tell.
Today Rubrik protects PepsiCo, Home Depot, Goldman Sachs, Allstate, and GSK, among 5,500+ enterprise customers. Microsoft is a strategic backer. Mark McLaughlin, the former CEO of Palo Alto Networks, sits on the board. Michael Mestrovich, the former CIA CISO, heads security. NBA star Kevin Durant invested. The company Bipul's mother told him never to start became the standard for enterprise data resilience.
In 2025, Rubrik launched Rubrik Agent Cloud - described as the industry's first unified control layer for autonomous AI agents. The product lets enterprises monitor, govern, and remediate AI agent actions across hybrid and multi-cloud environments. At RSAC 2026, the company unveiled SAGE, a Semantic AI Governance Engine that uses a custom Small Language Model to convert plain-language security policies into enforceable logic. Sinha's thesis: Rubrik is not just a backup company or even a cybersecurity company - it is becoming the platform that makes enterprise AI trustworthy.
Most Silicon Valley origin stories feature a garage, a pivot, and a Series A with a Sand Hill Road firm. Sinha's had coffee shops. After leaving Lightspeed, he personally cold-called engineers near tech campuses in Silicon Valley - deliberately positioning himself within walking distance to reduce the friction of a meeting. He wasn't yet a CEO. He was a founder with an idea about backup software trying to convince people that backup software was interesting.
The early sales approach was even more unconventional. Rubrik sold "$3,000 early access contracts" for a product not yet built. Hundreds of commitments came in before the first line of production code shipped. It was market validation masquerading as a product launch - and it worked.
Rubrik was a backup company until 2016, when one of its customers was hit by one of the earliest significant ransomware attacks. The customer recovered - fully, in hours - because of Rubrik's zero-trust architecture and immutable backup design. This wasn't a feature Sinha had designed specifically for ransomware. It was a consequence of building backup correctly. That realization reshaped Rubrik from a storage infrastructure play into a cybersecurity company with a story no competitor could credibly tell: not "we'll stop the attack," but "we'll make you whole after one."
As Rubrik scaled to hundreds of employees, Sinha delegated day-to-day operations to a professional executive team. The result, briefly, was exactly what happens when a founder delegates poorly: departmental silos, sluggish decisions, and a growing gap between strategy and execution. His fix was structural. He replaced brief bi-monthly executive meetings with intensive three-hour weekly working sessions - collaborative, real-time, decision-making in a group. The format is still in use.
"Helping founders think through foundation, culture, team, product, and market is my passion."- Bipul Sinha
Rubrik's latest chapter is the most ambitious. Sinha argues that Rubrik has accumulated something no pure-play AI company has: a vast dataset of enterprise metadata - from backups, from incident responses, from recovery workflows - that can power AI-driven security, compliance, and anomaly detection at scale. His claim is that Rubrik could become one of the most important AI companies in the enterprise, not by branding itself as one, but by becoming the platform that makes everyone else's AI safe to use.
Rubrik Agent Cloud (launched October 2025, GA February 2026) and SAGE (announced RSAC 2026) are the first concrete expressions of this thesis. The former governs autonomous AI agents across hybrid cloud. The latter converts plain-language security policies into enforceable machine logic using a custom Small Language Model. Both products exist at an intersection that no competitor currently occupies.