SentinelOne, Inc. (S) | The Buildout — AI Infrastructure
The Verdict
SentinelOne sells cybersecurity software. Its Singularity Platform uses AI to prevent, detect and respond to attacks across endpoints, cloud workloads and identity credentials, and it reports as a single operating segment. The company frames its AI exposure in two directions: AI as the engine of the product, and security sold because customers are adopting AI themselves. It also sells into customer-owned infrastructure, including on-premises and air-gapped environments that cloud-only rivals cannot reach. The criticality assessment is blunt: if SentinelOne disappeared, the AI buildout would not slow — enterprises would shift to other AI-driven security platforms within months.
| Market Cap | — |
| Revenue (TTM) | $1.1B |
| Revenue Growth | +21.1% |
| EBITDA Margin (TTM) | -20.8% |
| Net Cash | $655M |
| Earnings Beats | 6 of 7 |
| P/E (TTM) | — |
| EV/EBITDA (TTM) | — |
What We Like
- The mix shift is documented: non-endpoint ARR approached 50% of the total for the first time in Q1 FY27, with Data ARR accelerating for a fifth consecutive quarter and Cloud for a third.
- Backlog is growing faster than revenue. RPO reached a record $1.7B, up 45% YoY, and the company expects to recognize 81% of it within 24 months.
- Operating margin inflected from 4% to 10% in two quarters, with sales and marketing down to 34% of revenue — a 900-plus basis point YoY improvement. FY27 operating income guidance was raised twice.
- AI security ARR (Prompt and Purple AI) tripled YoY in Q2, and Flex, the usage-based model, passed 10% of total ARR within a year of launch.
- The balance sheet is clean: $813M in cash, equivalents and investments, and no debt.
What We’re Watching
- Net new ARR growth fell from +55% YoY in Q1 to +4% in Q2, and management did not raise the full-year net new ARR guardrail despite a strong first half. First-half net new ARR grew 22% YoY.
- GAAP gross margin fell to 72% from 75% a year earlier as cloud hosting usage charges rose $9.1M, alongside higher support and amortization costs. The non-GAAP operating margin gain is an operating-expense story.
- The ~$25M Q2 restructuring charge and ~$45M annualized savings guided in Q1 went unmentioned on the Q2 call, leaving no explicit bridge from cost actions to the margin beat.
- Competitors are already scaled where SentinelOne is emerging: Palo Alto Networks' Prisma AIRS passed $100M ARR within four quarters of launch.
The business is strengthening in some places and slowing in others at the same time. Margins and backlog are clearly improving — operating margin went from 4% to 10% in two quarters and RPO accelerated from +30% to +45% — while the metric that drives the growth story, net new ARR, decelerated to +4% YoY and the full-year guardrail was left unraised. The AI products are accelerating, but off a base the company describes as still below nine figures. The open question is whether AI, data and cloud grow large enough to bend the consolidated growth curve before the maturing endpoint engine sets the pace.
Earnings Beat
SentinelOne reported Q2 FY27 revenue of $292M, up 21% YoY and above the top of its guidance range, for the quarter ended July 31, 2026. Gross margin was 72.1%. Operating margin reached a record 10%, up 820 basis points YoY, and EPS of $0.08 was double the year-ago figure. RPO reached a record $1.7B, up 45% YoY, accelerating from 30% growth in Q1.
| Metric | Q2 FY2027 | Q1 FY2027 | Q2 FY2026 | YoY |
|---|---|---|---|---|
| Revenue | $292M | $277M | $242M | +20.6% |
| Gross margin | 72.1% | 71.8% | 75.0% | -290bps |
| EBITDA | −$47M | −$61M | −$68M | −31.8% |
| EPS | $-0.28 | $-0.23 | $-0.22 | +26.5% |
| Net new ARR | $56M | $44M | n/a | +4% YoY |
| Total RPO | $1.7B | $1.5B | n/a | +45% YoY |
ARR from our AI security offerings, Prompt and Purple AI, continues to be in hyper growth, tripling year-over-year in Q2. We expect this to become our next 9-figure ARR category, following endpoint, Cloud, Data and Wayfinder.— Tomer Weingarten, CEO, 2026-08-27
Management tone: The Q2 tone was confident and thematic on products, with near-absolutist competitive claims — "only," "sole provider" — paired with a more measured CFO cadence on the numbers. Two items blunted the quarter: net new ARR growth decelerated to +4% YoY and FY27 EPS guidance was cut. AI-security language escalated from Q1's "nearly doubled" to Q2's "tripling," and the sovereign claim escalated from an "emerging growth avenue" to an absolute statement that SentinelOne is the only modern security platform deployable to cloud, on-premises and air-gapped environments. By contrast, the Q1 restructuring charge and savings target went unmentioned on the Q2 call, and the Google Cloud momentum cited in Q1 received no Q2 update. Sonalee Parekh, the recently appointed CFO, was on her second earnings call.
Management Guidance
For FY27, management guided revenue of $1.202B–$1.207B, raised from $1.195B–$1.205B, and operating income of $124M–$128M, raised from $115M–$125M. FY27 EPS was lowered to $0.30–$0.32 from $0.32–$0.38 on a higher expected diluted share count and nonoperating FX; the share count guide moved to ~370M for Q3 and ~361M for FY27. Q3 guidance was initiated at $309M–$311M revenue, $38M–$40M operating income and $0.08–$0.09 EPS, with a ~17% non-GAAP tax rate. Management said H2 margin expansion continues but not at the same rate, with Q3 and Q4 improving sequentially and the FY27 ~10% figure implying a much higher Q4 exit rate; the company said it built a cushion for reinvestment in AI, data, cloud, go-to-market and partner channels. Net new ARR is not specifically guided, and management expects full-year growth YoY.
Trajectory
Revenue growth has held flat at the headline — 21% YoY in both Q1 and Q2 FY27, at $277M and $292M — while the composition rotates toward data, cloud and AI products. Operating margin moved from 4% to 10% in two quarters, and RPO accelerated from +30% to +45% on larger lands and longer contract duration. Against that, net new ARR growth fell from +55% to +4% YoY, and gross margin compressed to 72.1% from 75.0% a year earlier. Quarterly revenue has grown from $18.0M in Q1 FY2021 to $292.0M in Q2 FY2027, but the company's 10-Q states plainly that revenue growth is expected to slow down as it scales.
The Model
The model projects FY+1 revenue of $1,210M with EBITDA of -$160M, a -13.2% margin, and FY+2 revenue of $1,445M with EBITDA of -$97M, a -6.7% margin. That implies roughly 19% revenue growth from FY+1 to FY+2. Both years stay EBITDA-negative on this basis, which adds depreciation and amortization back to operating income as reported; the loss narrows from -13.2% to -6.7% of revenue. The revenue path keeps compounding while EBITDA losses shrink.
| Metric | FY2026 | Next FY (E) | Following FY (E) |
|---|---|---|---|
| Revenue | $1.0B | $1.2B | $1.4B |
| YoY Growth | — | +20.8% | +19.4% |
| EBITDA | −$266M | −$160M | −$97M |
| EBITDA Margin | -26.6% | -13.2% | -6.7% |
Projections are the median of 5 independent model runs. The model’s revenue sits 6.2% above analyst consensus.
For FY27, management guided revenue of $1.202B–$1.207B, raised from $1.195B–$1.205B, and operating income of $124M–$128M, raised from $115M–$125M. FY27 EPS was lowered to $0.30–$0.32 from $0.32–$0.38 on a higher expected diluted share count and nonoperating FX; the share count guide moved to ~370M for Q3 and ~361M for FY27. Q3 guidance was initiated at $309M–$311M revenue, $38M–$40M operating income and $0.08–$0.09 EPS, with a ~17% non-GAAP tax rate. Management said H2 margin expansion continues but not at the same rate, with Q3 and Q4 improving sequentially and the FY27 ~10% figure implying a much higher Q4 exit rate; the company said it built a cushion for reinvestment in AI, data, cloud, go-to-market and partner channels. Net new ARR is not specifically guided, and management expects full-year growth YoY.
What Could Go Right — and Wrong
- AI security ARR crosses $100M on a disclosed basis, turning the next nine-figure category from an aspiration into a named number.
- Net new ARR growth re-accelerates year over year and the full-year guardrail is raised, reconciling the product narrative with the consolidated curve.
- Net revenue retention expands beyond the $100k+ cohort, the area management flagged as the historical soft spot on the expansion side.
- Q4 operating margin lands above the ~10% FY27 figure, confirming the margin inflection is structural rather than cost-cutting.
- RPO growth holds at 45% or higher and converts into revenue, while gross margin stabilizes.
- Net new ARR growth turns negative, or the full-year guardrail is cut rather than simply left unraised.
- Revenue growth falls below ~20% while margin expansion is driven mainly by the ~$45M restructuring savings.
- An anchor frontier-model or hyperscaler partnership is lost, or AWS uses its leverage on hosting terms.
- $100k+ customer cohort growth keeps decelerating without offsetting expansion in net revenue retention.
- Rivals move decisively into the sovereign and air-gapped niche, neutralizing the deployable-everywhere claim.
- The Mythos moment proves thematic rather than budgeted, showing no net retention or net new ARR benefit over coming quarters.
Looking Ahead
The next twelve months turn on two clocks. The product clock is running fast: AI security ARR is tripling, Flex and MSSP distribution are scaling, and Wayfinder Frontier AI Services was expanded with OpenAI Daybreak models on 2026-09-03. The revenue clock is slower — management itself calls the modernization shift multi-quarter and multi-year. Management pre-committed to slower margin expansion in the second half, with Q3 and Q4 improving sequentially and a much higher Q4 exit rate than the ~10% full-year figure. The test is whether the AI and data products grow large enough to move the consolidated growth rate before the endpoint base sets the tone.
- Q3 FY2027Q3 FY27 results — Guided ~20% YoY revenue growth; tests whether net new ARR growth holds
- H2 FY2027Slower margin expansion — Q3 and Q4 improve sequentially, but not at Q2's 820 bps pace
- Q4 FY2027Q4 exit margin — FY27's ~10% implies a much higher Q4 exit rate, per management
- FY2027Full-year net new ARR — Management expects YoY growth; the guardrail was left unraised
- UnspecifiedAI security $100M ARR — Prompt Security remains the fastest-growing platform solution, with AI security deals also won stand-alone from direct competitors
- Coming yearsLevelBlue estate migration — Tens of millions of endpoints consolidating onto Singularity
Financials
Annual Summary
| Metric | FY2025 | FY2026 | TTM | YoY |
|---|---|---|---|---|
| Revenue | $821M | $1.0B | $1.1B | +21.9% |
| Gross Margin | 74.2% | 74.9% | 73.3% | +67bps |
| EBITDA | −$287M | −$266M | −$229M | +7.1% |
| EBITDA Margin | -34.9% | -26.6% | -20.8% | +830bps |
| Net Income | −$288M | −$451M | −$340M | -56.2% |
| Free Cash Flow | $7M | $52M | $38M | — |
| Net Cash | — | — | — | — |
Key Ratios (Trailing)
- P/E TTM—
- EV/EBITDA TTM—
- EV/Revenue TTM—
- Price/FCF TTM—
- Gross Margin (TTM)73.3%
- EBITDA Margin (TTM)-20.8%
- Net Margin (TTM)-31.0%
- ROIC-29.5%
- SBC / Revenue29.3%
The Company
SentinelOne is a cybersecurity software company that reports as a single operating segment. Its Singularity Platform uses AI to prevent, detect and respond to attacks across endpoints, cloud workloads and identity credentials, sold in tiers and wrapped around named products including Purple AI, Prompt Security, a cloud-native AI SIEM and a real-time data pipeline. The 10-K says the company pioneered the first purpose-built AI-powered cybersecurity platform for autonomous defense. Its AI exposure runs in two directions: AI as the engine of the product, and security sold because customers are adopting AI themselves.
The business is asset-light. It has no factories and owns no disclosed data centers; its only named infrastructure dependency is AWS cloud hosting, disclosed in the 10-K as a concentration risk. Offices are administrative and engineering — Mountain View headquarters on a lease expiring February 2028, plus Tel Aviv, Prague (R&D/product development), Amsterdam (European HQ), Dubai (MEA go-to-market) and Bangalore. International revenue was 39% of the Q2 FY27 total.
Business Segments
Competitive Landscape
SentinelOne's 10-K describes competition as intense, fragmented and rapidly evolving, and says many competitors have greater financial, technical, marketing and sales resources, greater name recognition, longer operating histories and a larger base of customers. The filing names endpoint security, legacy antivirus, general network security, SIEM and cloud security vendors as its competitive set. Management's own claim is narrower and repeated: that SentinelOne is the only modern security platform that can be deployed to cloud, on-premises and air-gapped environments, proven in one aerospace and defense win where it was the sole provider to pass every requirement. Neighbor evidence cuts the other way, showing rivals already at scale in AI security.
- CrowdStrike HoldingsNamed in the FY26 10-K as an endpoint security competitor. SentinelOne described a "complete rip and replace of our primary competitor" in Q2 without naming the vendor.
- Named in the FY26 10-K among legacy antivirus and endpoint competitors. Neighbor evidence characterizes Microsoft bundling across its security stack, and its sovereign-cloud expansion, as the sharpest challenge to SentinelOne's deployable-everywhere claim.
- Named in the FY26 10-K as a general network security competitor. Neighbor evidence shows its Prisma AIRS scaled rapidly in AI security, and it cautions that AI security will not produce coding-agent-style ARR.
- Cisco Systems (which acquired Splunk)Named in the FY26 10-K as a SIEM competitor. SentinelOne disclosed a Q1 win where a luxury brand "displaced Splunk with a multiyear commitment."
- Wiz (acquired by Google Cloud)Named in the FY26 10-K as a cloud security competitor.
Supply Chain
SentinelOne sits in the AI build-out as a security software layer, not a hardware supplier. It builds nothing physical, and its one disclosed infrastructure dependency is AWS cloud hosting, surrounded by a web of named partnerships.
Related companies
See all Software & Design companies → · How this layer works: Chapter 11, The Software →
More on S: Earnings recap