In December 2024, Cohesity closed its acquisition of Veritas’ enterprise data protection business and became the largest data-protection software vendor in the world — roughly $1.7 billion in combined revenue, as of the companies’ own figures. Then in June 2026 it bought Stone Ram, a small UK firm whose Tranzman tooling exists for one purpose: moving NetBackup estates onto other platforms without the original backup software. That second deal tells you everything about where this market is going. “Cohesity” no longer means a product. It means a portfolio — and if you are comparing it against Rubrik in 2026, you need that decoded before you sign anything.
This brief covers what actually separates the two platforms, where each one earns its keep, where each one will frustrate you, and what NetBackup customers — the people googling this hardest right now — should do at renewal.
The verdict
Pick Rubrik when security leads the purchase. If your CISO co-owns the decision, if you want a single product with a single SaaS control plane, and if a vendor-managed, logically air-gapped vault matters more to you than infrastructure consolidation, Rubrik is the cleaner story. Pick Cohesity when scale and breadth lead. If you are consolidating backup, file services, and dev/test copies onto one platform, if you need to restore hundreds of VMs at once after a wide-blast ransomware event, or if you already run NetBackup, Cohesity’s portfolio fits more of your estate. Neither choice is wrong. The mistake is buying one vendor’s story while your actual requirements match the other’s.
What changed
Two things reshaped this comparison since 2024. First, the Veritas merger made Cohesity a two-flagship company: DataProtect (its original scale-out backup software) and NetBackup (the most widely deployed enterprise backup product of the last two decades) now live under one roof, with Helios positioned as the unified management plane across both. Cohesity has said publicly that NetBackup customers will not be forced to migrate, and that both products remain supported and on active roadmaps.
Second, the June 2026 Stone Ram acquisition put real machinery behind the migration path. Tranzman recovers and moves backup data without needing the original backup application, and Cohesity claims it can cut migration and upgrade time by as much as 75 percent. Read that plainly: the “no forced migration” promise stands, but Cohesity is now investing in making the NetBackup-to-DataProtect move as frictionless as possible. That is a roadmap signal, and buyers should treat it as one.
Rubrik spent the same period sharpening a different blade. It has repositioned entirely as a cyber-resilience company — anomaly detection, threat hunting inside backup data, sensitive-data discovery, and identity recovery for Active Directory and Entra ID, all delivered through Rubrik Security Cloud. Gartner named it a Leader in the 2026 Magic Quadrant for Backup and Data Protection Platforms, positioned furthest in vision. The two vendors are no longer running the same race at different speeds. They are running different races.
Side-by-side comparison
| Rubrik | Cohesity | |
|---|---|---|
| Core architecture | Atlas — append-only, immutable filesystem; backups never exposed over writable NFS/SMB | SpanFS — distributed scale-out filesystem consolidating backup, files, and objects |
| Control plane | Rubrik Security Cloud (SaaS) | Helios / Cohesity Data Cloud, being unified across DataProtect and NetBackup |
| Isolated vault | Rubrik Cloud Vault — vendor-managed, logically air-gapped, immutable | FortKnox — SaaS cyber vault with virtual air gap |
| Ransomware tooling | Anomaly detection, Threat Hunting and Turbo Threat Hunting, sensitive-data discovery | DataHawk threat protection, anomaly detection, Gaia AI-assisted search |
| Mass recovery | Orchestrated recovery, strong per-workload granularity | Instant Mass Restore — hundreds of VMs concurrently from SpanFS snapshots |
| NetBackup path | Competitive replacement only | Native — Helios management plus Stone Ram/Tranzman migration tooling |
| Gartner Peer Insights (mid-2026) | 4.7 across ~776 reviews | 4.8 across ~1,330 reviews |
Where Rubrik wins
Rubrik’s advantage is architectural coherence in service of one job: surviving an attack. The Atlas filesystem is append-only, which means ransomware — or a compromised admin credential — has no write path to your snapshots. That is a stronger default posture than immutability bolted on as a feature flag. Rubrik Cloud Vault extends it off-site as a fully managed service, so the isolated copy exists even if your entire on-prem environment is owned. If you are evaluating vault architectures across vendors, our cyber recovery vault comparison breaks down how these isolation models actually differ.
The threat-hunting story is genuinely differentiated. Turbo Threat Hunting scans backup metadata using pre-computed hashes rather than crawling files, and Rubrik claims internal testing found clean recovery points across 75,000 backups in about a minute. Treat vendor benchmarks as vendor benchmarks — but the design approach is sound, and finding a clean restore point fast is the single most underrated variable in real ransomware recovery. Add identity resilience for AD and Entra ID, and Rubrik covers the two things attackers actually target first: your directory and your backups.
Where Cohesity wins
Cohesity’s advantage is scale — in three senses. First, technical scale: SpanFS was built as a general-purpose distributed filesystem, so one cluster consolidates backup, file shares, object storage, and dev/test data copies. If your storage team wants fewer platforms, that consolidation is real money. Second, recovery scale: Instant Mass Restore brings back hundreds of VMs concurrently because SpanFS serves them directly from snapshots. After a wide-blast encryption event, the difference between restoring 40 VMs at a time and 400 is the difference between a bad week and a bad quarter.
Third, market scale. Post-Veritas, Cohesity has the largest install base and the broadest workload coverage in the industry — NetBackup’s workload matrix remains unmatched for legacy and exotic enterprise systems. FortKnox gives it a credible SaaS vault answer to Rubrik Cloud Vault, and the Peer Insights numbers — 4.8 across roughly 1,330 reviews versus Rubrik’s 4.7 across roughly 776, as of mid-2026 — suggest the customer base is not merely large but satisfied. For NetBackup shops, Cohesity is the only vendor offering continuity and modernization in the same contract.
Honest downsides, both sides
Rubrik’s costs run high. List pricing varies by capacity and edition, but Rubrik is rarely the cheap option in a three-way bake-off, and capacity-based subscription costs compound as data grows. It is also not a consolidation play — you are buying a security and recovery platform, not a general-purpose storage layer, so the “fewer platforms” argument goes to the other side. Its review base is smaller, and shops that just want boring, inexpensive backup may find themselves paying for a security posture they never operationalize.
Cohesity’s risk is the merger itself. Running two flagship backup products while unifying management planes and, eventually, filesystems is one of the hardest integration jobs in enterprise software, and roadmap ambiguity is the tax customers pay while it happens. Helios unification across DataProtect and NetBackup is still in progress. And even with Tranzman, a NetBackup migration is a project with real risk, not a button. Buyers should also remember that “no forced migration” is a promise about today’s roadmap, not a contractual term — unless you make it one.
What to do about it
If you run NetBackup: do not panic, but do use the moment. Your renewal is leverage. Ask Cohesity for the Helios unification timeline and the NetBackup support horizon in writing, request a Tranzman-based migration assessment even if you never intend to move, and get a competing Rubrik quote to price-check the renewal. The worst position is renewing for three years without asking any of those questions.
If you are buying fresh: run a recovery bake-off, not a backup bake-off. Measure time-to-clean-recovery for your top 20 applications — including the time to find an uninfected restore point — and make each vendor demonstrate it live. My rule of thumb: if you cannot demonstrate clean recovery of your critical applications inside 24 hours, that gap matters more than any feature on either datasheet. And widen the field before you narrow it — our Veeam vs Rubrik and Commvault vs Veeam briefs cover the adjacent matchups most shortlists should include.
The takeaway for the meeting: Rubrik sells a security platform that does backup; Cohesity sells a data platform that does security. Buy the one that matches who is signing the check.
Frequently asked questions
Is Cohesity better than Rubrik?
Neither is categorically better. Cohesity leads on consolidation, mass-restore scale, and workload breadth, and holds a slight Peer Insights edge — 4.8 versus 4.7 as of mid-2026. Rubrik leads on security architecture, threat hunting, and its managed cloud vault. Match the platform to whether security or infrastructure owns the purchase.
What does the Cohesity-Veritas merger mean for NetBackup customers?
NetBackup remains supported with an active roadmap, and Cohesity says migration to DataProtect is optional. Helios is becoming the common management plane, and the Stone Ram acquisition adds tooling that Cohesity claims cuts migration time by up to 75 percent. Get support horizons in writing at renewal.
Will Cohesity force NetBackup customers to move to DataProtect?
Cohesity has stated publicly that it will not force migrations and will keep selling and supporting both products. The Stone Ram deal signals it wants the move to be easy, not mandatory. Treat the promise as a roadmap statement and negotiate contractual support commitments if NetBackup continuity is critical to you.
What is the main architectural difference between Rubrik and Cohesity?
Rubrik’s Atlas filesystem is append-only and purpose-built so backup data can never be modified in place, prioritizing attack survival. Cohesity’s SpanFS is a general-purpose distributed filesystem that consolidates backup, files, and objects on one scale-out cluster, prioritizing platform consolidation and restore concurrency.
Is Rubrik worth the cost?
For organizations where a ransomware event is a board-level risk and the CISO is involved in data-protection decisions, usually yes — the immutability, threat hunting, and managed vault reduce real recovery risk. For cost-driven shops that only need dependable backup, cheaper options exist and the premium is harder to justify.
Enterprise Techie publishes vendor-honest analysis like this daily — get the brief by email, free.