SentinelOne, Inc. (S)

Key figures

The last twelve months reported, with the latest price and balance sheet.

Revenue, last twelve months

$1.1B

Revenue growth

21.1%

Net income, last twelve months

-$340.1M

Earnings per share

-$1.01

Gross margin

72.5%

Operating margin

-29.5%

Net margin

-31.0%

Free cash flow

$56.5M

Return on equity

-23.5%

Market value

$8.7B

Cash

$201.0M

Debt

$0

Debt to equity

0.00

Financial statements

Revenue, profit and cash flow by fiscal year, each year linked to its annual report.

By quarter

What the company said with its results

From the second quarter of fiscal year 2027 results, filed 27 August 2026.

• Revenue grew 21% to $292 million. Total revenue was $292 million, up from $242 million a year earlier and $277 million in the prior quarter.
• ARR reached $1,218 million, up 22%. ARR was $1,218 million at July 31, 2026, up from $1,163 million at April 30, 2026. Year-over-year growth was 22%, against 23% in the prior quarter.
• Customers at $100K ARR rose 13%. Customers with ARR of $100,000 or more numbered 1,715, up 13% year over year and up from 1,702 at April 30, 2026. Prior-quarter growth was 17%.
• Non-GAAP operating margin rose to 10%. Non-GAAP operating income was $30.5 million. The margin was 2% a year earlier and 4% in the prior quarter.
• GAAP operating margin improved year over year. GAAP operating margin was (31)%, against (33)% a year earlier and (29)% in the prior quarter.
• Gross margin below year-ago levels. GAAP gross margin was 72% and non-GAAP gross margin 77%, against 75% and 79% a year earlier. Both were unchanged from the prior quarter.
• Non-GAAP EPS rose to $0.08. Non-GAAP diluted EPS was $0.08, against $0.04 a year earlier. GAAP diluted loss per share was $(0.27), against $(0.22).
• Restructuring charges rose sharply. GAAP restructuring expense was $24.4 million, against $3.9 million a year earlier. The company excludes restructuring charges from non-GAAP results.
• Acquired-intangible amortization rose. Amortization of acquired intangible assets in cost of revenue was $8.2 million, against $4.2 million a year earlier. Six-month amount was $16.2 million.
• Non-GAAP R&D spending increased. Non-GAAP research and development expense was $65.9 million, against $53.9 million a year earlier.
• Non-GAAP sales and marketing declined. Non-GAAP sales and marketing expense was $97.9 million, against $103.8 million a year earlier.
• Free cash flow was negative in quarter. Free cash flow was $(13.2) million in the quarter, against $(7.1) million a year earlier. Six-month free cash flow was $17.5 million.
• Adjusted free cash flow added back ITA taxes. Six-month adjusted free cash flow was $48.1 million, after adding back $30.7 million of discrete cash income tax payments tied to the ITA Agreement.
• Cash and investments reached $813 million. Cash, cash equivalents and investments were $813 million, against $812 million at April 30, 2026.

Revenue by segment

As the company reports it in the segment note of its annual report.

By region, FY2026

Company events

The newest 8-K filings of 45 held.

Every filing

The newest filings with the SEC of 108 held.

Insider trades

Form 4 trades by officers, directors and 10% owners, last 12 months.

Planned insider sales

Form 144 notices, filed when the sell order goes to the broker.

Large holders

Schedule 13D and 13G filings by holders of more than 5% of the voting shares.

Short interest

Shares sold short and not yet bought back, on each FINRA settlement date.

Funds that hold it

From each fund's latest Form 13F.

550 funds held it at 30 Jun 2026: 256 added and 137 trimmed in the quarter. The largest:

Peers

Companies in the same industry.

• Microsoft Corp. (MSFT): revenue $346.4B, market value $3.95T
• Palantir Technologies Inc. (PLTR): revenue $6.2B, market value $473.1B
• Oracle Corp. (ORCL): revenue $71.8B, market value $436.3B
• SAP SE (SAP): revenue $41.6B, market value $276.7B
• CrowdStrike Holdings, Inc. (CRWD): revenue $5.4B, market value $273.1B
• Shopify Inc. (SHOP): revenue $13.3B, market value $218.4B
• Salesforce, Inc. (CRM): revenue $43.9B, market value $199.5B
• ServiceNow, Inc. (NOW): revenue $15.4B, market value $155.6B
• Snowflake Inc. (SNOW): revenue $5.4B, market value $119.8B
• Cloudflare, Inc. (NET): revenue $2.5B, market value $113.0B

What the company does

SentinelOne sells the Singularity Platform, a cybersecurity platform that uses AI to prevent, detect and respond to cyberattacks on endpoints, cloud workloads and user identities. The company calls it the world's first purpose-built AI-powered cybersecurity platform for autonomous defense. As of 31 January 2026 it had customers in approximately 100 countries and over 2,900 full-time employees. It was incorporated in Delaware in January 2013 as Sentinel Labs, Inc., took its current name in March 2021, and is headquartered in Mountain View, California.

What it sells

Customers buy the platform in tiers: Singularity Core, Control, Complete, Commercial and Enterprise. Core replaces antivirus tools with endpoint protection. Complete adds endpoint detection and response (EDR) capabilities, and Commercial and Enterprise extend protection across identities, endpoints and the cloud.

- Endpoint security for Windows, macOS, Linux and mobile devices (iOS, Android and ChromeOS). - Cloud security, both agent-based and agentless, including a cloud-native application protection platform (CNAPP). - - Singularity AI-SIEM, a cloud security information and event management product built on the Singularity Data Lake. - Purple AI, a generative AI security assistant. - Prompt Security, which secures enterprise AI use. - Observo.AI, a data pipeline product. - Managed detection and response (MDR) and threat hunting services, including Wayfinder MDR, Singularity MDR, Vigilance MDR and WatchTower.

The company added Prompt Security and Observo AI through acquisitions in September 2025.

How the technology works

Static AI runs on the device and predicts file-based attacks, including previously unknown ones. Behavioral AI scores the behaviors on the device. Streaming AI runs in the cloud and looks for anomalies across correlated data feeds. A technology the company calls Storyline links processes and behaviors into a record of an attack, and users can roll back unauthorized changes with a single click.

The Singularity Data Lake stores security data, and the company offers data retention of up to three years or more. Multi-tenancy has four tiers: Global, Account, Site and Group, with policies inherited from higher tiers. The platform is primarily hosted in Amazon Web Services (AWS) and can also run in Google Cloud, in private or hybrid clouds, and in customers' own data centers.

How it makes money

Most revenue comes from subscriptions to the Singularity Platform, generally priced per agent. An agent usually corresponds to an endpoint, server, virtual machine or container. Contracts typically run one to three years, and revenue is recognized ratably over the term. Customers are invoiced upfront, periodically or in arrears. The company describes a land-and-expand model in which customers add licenses and modules over time. Its main cost of revenue is third-party cloud infrastructure used to host the platform.

Orders are seasonal. The company receives a higher share of annual orders in its fourth fiscal quarter because of customers' annual budget cycles.

Who buys and how it sells

Customers include large global enterprises, small and medium-sized businesses, and government organizations. The company holds FedRAMP High certification. Revenue outside the United States was 39% of the total for fiscal 2026.

A direct sales team of field and inside sales staff works with channel and alliance partners. These include resellers, distributors, managed service providers, managed security service providers, MDR providers, original equipment manufacturers and incident response firms. Software is fulfilled through channel partners. The company counts managed service providers and similar partners that buy for multiple companies as a single customer, and it does not count resellers or distributors as customers.

Who it competes with

The filing names these competitors:

- Endpoint security: CrowdStrike and Carbon Black, which is part of Broadcom. - Legacy antivirus: Trellix, Symantec and Microsoft. - Network security: Palo Alto Networks. - SIEM: Cisco, which acquired Splunk, and Elastic. - Cloud security: Wiz, which was acquired by Google Cloud.

The company lists the factors it competes on, including threat detection, breadth of functionality, automation, threat hunting speed, deployment options, data retention, ease of use and the quality of its MDR service. It acknowledges that some competitors have greater brand awareness and larger customer bases. It says it believes it competes favorably on autonomous and AI-powered threat prevention, detection, response and hunting.

Its people and intellectual property

The company has offices in Mountain View, Tel Aviv, Prague, Amsterdam, Dubai and Bangalore. Amsterdam is its European headquarters, and Dubai focuses on go-to-market work in the Middle East and Africa. Research and development staff are located primarily in Israel, India and the Czech Republic, and remotely. None of its employees are represented by a labor union.

As of 31 January 2026 it held 78 issued patents and 10 pending patent applications in the United States and abroad. It also held 18 trademark registrations in the United States and 103 registrations and applications in certain foreign jurisdictions.

*From SentinelOne's annual report on Form 10-K for the year ended 31 January 2026. [The filing](https://www.sec.gov/Archives/edgar/data/1583708/000158370826000020/s-20260131.htm)*

From the company's 10-K.