S
"SentinelOne has 97% subscription revenue, $1.3B RPO growing 35%, and zero debt -- yet trades at ~4x EV/Revenue while CrowdStrike commands ~25x. With SBC at 32.6% of revenue, a 2023 ARR correction, and key metrics going dark, is the market over-discounting or seeing something the fundamentals don't show?"
SentinelOne is an AI-powered cybersecurity platform with ~$1.06B ARR, 79% non-GAAP gross margins at parity with CrowdStrike, and Purple AI at 40%+ customer attach rate. The company has executed seven acquisitions totaling $1.26B+ since FY2022, building out its Data Lake, identity, and AI governance capabilities. Revenue growth has decelerated from 32% to 22%, net new ARR grew only 1% YoY, and the company retired product-level ARR disclosure and quantitative NRR reporting during a period of heavy M&A and CFO departure. Q4 FY2026 earnings on March 12, 2026, are the imminent catalyst.
Executive Summary
Cross-lens roll-up assessment
SentinelOne emerges from five-lens analysis as an operationally sound cybersecurity platform with genuinely DURABLE revenue, a DEFENSIBLE competitive position, and a STABLE balance sheet -- but with a persistent transparency deficit that complicates independent verification of the growth trajectory. The operational fundamentals are validated by multiple lenses: 97% subscription revenue, $1.3B RPO growing 35% YoY, zero debt, improving free cash flow, and multi-module adoption quadrupling. Yet SentinelOne simultaneously carries a 42pp GAAP/non-GAAP gap driven by $267.5M SBC (32.6% of revenue), a 2023 ARR methodology correction, retirement of product-level ARR and quantitative NRR during heavy acquisition activity, and net new ARR growth of only 1% YoY. At ~4x EV/Revenue, expectations are MODEST -- the market prices 15-18% revenue growth against a guided 22% -- but the data needed to confirm the operational thesis has become harder to access independently.
HIGHER_SCRUTINY because: (1) the operational fundamentals are genuinely validated by multiple independent lenses -- revenue is durable, the competitive position is defensible, and the balance sheet is strong; but (2) the systematic reduction in operating metric transparency (ARR correction, product ARR retirement, NRR opacity, CFO departure) creates a pattern that prevents full confidence in the growth trajectory; and (3) the 42pp GAAP/non-GAAP gap and 1% net new ARR growth raise questions that the available data cannot fully resolve. Not AVOID because the fundamentals are sound, expectations are MODEST, the balance sheet is clean, and the dismissed class action suggests the ARR correction was not fraudulent. Not PROCEED_WITH_CAUTION because the transparency pattern is persistent and the approaching Q4 FY2026 earnings could shift multiple signals simultaneously.
Key Takeaways
- •REVENUE_DURABILITY is DURABLE (E2, HIGH confidence) -- ~97% subscription revenue with ratable recognition, $1.3B RPO growing 35% YoY, no customer exceeds 10% of revenue, 1,572 customers above $100K ARR (+20% YoY), 50% of bookings from non-endpoint products. Net beneficiary of cybersecurity regulation with no regulatory dependency.
- •COMPETITIVE_POSITION is DEFENSIBLE (E2, MEDIUM confidence) -- Narrow but genuine moat built on switching costs from multi-module platform adoption (4+ module customers quadrupled) and Data Lake integration (triple-digit bookings growth). Purple AI at 40%+ attach rate provides time-limited secondary differentiation. Constrained by CrowdStrike's ~5x revenue scale advantage and Microsoft Defender bundling.
- •ACCOUNTING_INTEGRITY is QUESTIONABLE (E2, MEDIUM confidence) -- 2023 ARR methodology correction triggered 36% stock decline and securities litigation (dismissed). 42pp GAAP/non-GAAP gap driven by $267.5M SBC. Product-level ARR disclosure retired coinciding with acquisitions. Counterbalanced by clean Deloitte audit, no GAAP restatements, dismissed class action, and conservative DTA treatment. Proximate to CLEAN boundary.
- •EXPECTATIONS_PRICED is MODEST (E2, MEDIUM-HIGH confidence) -- At ~4.1x EV/Revenue, current price implies ~15-18% revenue CAGR (below guided 22%), moderate margin expansion, and SBC compression to ~25%. Expectations are below current operational delivery. Rule of 40 score of ~28 at low end of fair range.
- •FUNDING_FRAGILITY is STABLE (E2, HIGH confidence) -- Zero long-term debt, ~$900-950M estimated cash post-acquisitions, FCF improved to 6% margin. M&A funded through cash and stock issuance without leverage. Shareholder cost manifests through equity dilution, not leverage risk.
- •CAPITAL_DEPLOYMENT is MIXED (E2, MEDIUM confidence) -- Seven acquisitions totaling ~$1.26B+ since FY2022. Scalyr ($155M) produced Data Lake success. Attivo ($616M) retained identity but retired deception ($10M ARR churn) with Fortis litigation. Two FY2026 deals ($405M) closed in 6 weeks during CFO transition.
Key Tensions
- •Operationally Sound Fundamentals vs. Systematic Transparency Reduction -- the underlying business metrics (97% subscription, 35% RPO growth, zero debt) are validated by multiple lenses, but the company has progressively reduced the disclosure of operating metrics (product-level ARR, quantitative NRR) during a period of heavy acquisition activity and leadership transition. The operational case is strong; the ability to verify it independently is diminishing.
- •Severe Valuation Discount vs. Justifiable Transparency Concerns -- at ~4x EV/Revenue versus CrowdStrike's ~25x, SentinelOne's market price implies expectations well below current operational delivery. If the operational fundamentals are as sound as the evidence suggests, the discount may be excessive. But the transparency gaps make it difficult to rule out organic momentum loss that the metric retirement could be obscuring.
- •SBC at 32.6% of Revenue: Growth Investment or Structural Dilution -- four lenses flag SBC as a concern. The 'profitability inflection' narrative rests on non-GAAP margins while GAAP shows a $329M operating loss. SBC compression is embedded in the valuation thesis, but at sustained low stock prices, more shares are needed for the same dollar compensation, potentially reversing the compression trajectory.
Fugazi Filter
Are the numbers trustworthy?
Dual-Axis Risk Classification
Position shows Accounting Integrity × Funding Fragility
Elevated risks in one or more dimensions mean you need a clear reason why the potential reward justifies these specific risks.
Key FindingsClick to expand details
Signal AssessmentsClick for full context
| Signal | Scale | Assessment | Evidence |
|---|---|---|---|
Accounting Integrity | — | QUESTIONABLE | 2Corroborated |
Governance Alignment | — | MIXED | 2Corroborated |
Model Debates
Cross-Lens Insights
Where Lenses Agree
- Solid operational foundation unanimously confirmed: ~97% subscription revenue, $1.3B RPO +35% YoY, zero debt, improving FCF, multi-module adoption quadrupling
- ACCOUNTING_INTEGRITY assessed as QUESTIONABLE by two independent lenses citing the same root causes: 2023 ARR correction, 42pp GAAP/non-GAAP gap, ARR disclosure retirement
- NRR opacity flagged as a cross-lens monitoring concern by three lenses: the most important subscription metric is now dark
- SBC at 32.6% of revenue flagged as a structural concern across four lenses: the single largest factor separating the two financial realities
- Acquisition pace and transparency reduction noted by two lenses: $405M in 6 weeks during CFO transition with simultaneous metric retirement
Where Lenses Differ
ACCOUNTING_INTEGRITY
Both lenses agree on QUESTIONABLE, but Sonnet's minority position through Fugazi Filter argues the assessment is borderline CLEAN: the ARR correction is 2.5+ years old, the class action was dismissed with no fraud finding, and GAAP financials are clean.
The following publicly available documents were collected and extracted into a structured fact dossier that powered this analysis.
SEC Filing
- Annual Report (10-K) -- FY2025 (Jan 31, 2025)
- Quarterly Report (10-Q) -- Q3 FY2026 (Oct 31, 2025)
- Quarterly Report (10-Q) -- Q2 FY2026 (Jul 31, 2025)
- Quarterly Report (10-Q) -- Q1 FY2026 (Apr 30, 2025)
- Quarterly Report (10-Q) -- Q3 FY2025 (Oct 31, 2024)
- Current Report (8-K) -- Q4 FY2025 Earnings (Mar 12, 2025)
- Current Report (8-K) -- Q1 FY2026 Earnings
- Current Report (8-K) -- Q2 FY2026 Earnings
- Current Report (8-K) -- Q3 FY2026 Earnings (Dec 4, 2025)
- Current Report (8-K) -- Prompt Security Acquisition (Aug 2025)
- Current Report (8-K) -- Observo AI Acquisition (Sep 2025)
- Current Report (8-K) -- CFO Departure (Dec 2025)
- Supplemental Proxy Materials (DEFA14A) -- May 2025
- SC 13D/A -- Insight Partners (3 filings, Jan-Dec 2024)
- SC 13G/A -- Institutional Holders (3 filings, 2024)
Earnings Transcript
- Q4 FY2025 Earnings Call Transcript (Mar 12, 2025)
- Q1 FY2026 Earnings Call Transcript
- Q2 FY2026 Earnings Call Transcript
- Q3 FY2026 Earnings Call Transcript (Dec 4, 2025)
Research Document
- Litigation Summary -- CourtListener (Securities Class Action, Fortis dispute)