Archived research. Equity forecasting is part of the Runchey Research archive (methodology era 1) and is no longer actively updated. Everything remains published at its original URL. Browse the archive
Will SentinelOne report non-endpoint revenue exceeding 55% of new bookings by Q2 FY2027?
Current Prediction
Why This Question Matters
Sourced from unused monitoring trigger 'Data ARR crossing $200M'. Non-endpoint bookings hit 50% in Q4 FY2026 — the pivot point. Crossing 55% would confirm SentinelOne's competitive positioning is shifting from endpoint-centric (where CrowdStrike has 5x scale advantage) to platform-centric (where Purple AI, data, and cloud security create differentiated value). Fills COMPETITIVE_POSITION coverage gap.
Prediction Distribution
Individual Predictions(3 runs)
Non-endpoint crossed 50% of bookings in Q4 FY2026, and the trend has been consistently upward as data (+60% YoY), AI security (Prompt Security ARR doubled), and cloud products grow faster than endpoint. The question is whether the pace of shift can add 5pp in 2 quarters. Key considerations: (1) endpoint is not shrinking — it grew ~15-18% organically, so non-endpoint must grow disproportionately faster to shift the mix, (2) Purple AI's monetization is still early — the 50%+ attach rate is on new deals, but converting that to ARR takes time, (3) seasonal effects matter — Q1 is typically SentinelOne's weakest quarter for bookings, which could compress the non-endpoint share if enterprise deals slip. The Cloudflare data win and Fortune 100 AI security deployment suggest momentum, but 5pp mix shift in 2 quarters is aggressive given endpoint is also growing. 55%.
This is genuinely a coin flip. The trend is clearly favorable: non-endpoint has gone from ~30% of bookings 2 years ago to 50% now. At that trajectory, 55% by Q2 FY2027 is within the confidence interval. But bookings mix can be lumpy — a single large endpoint deal can shift the percentage down in a quarter. The resolution requires 55% in *any* quarter, which gives two shots (Q1 and Q2 FY2027). With two quarters, the probability of at least one exceeding 55% is higher than any single quarter crossing. Against this: management may not disclose the specific bookings mix percentage going forward, which would resolve NO. They've been voluntarily sharing this metric but it's not a committed disclosure. 50%.
The structural trend strongly favors YES but the 2-quarter timeline is tight for a 5pp shift. Key data points: (1) Q3 FY2026 to Q4 FY2026 saw non-endpoint go from ~45% to 50% — roughly 5pp in one quarter, suggesting the pace is achievable, (2) Prompt Security and Observo AI are both ramping, adding incremental non-endpoint bookings that didn't exist in prior quarters, (3) Purple AI monetization is inflecting — the 338% ROI claim and 50%+ attach suggest customers are willing to pay for the AI layer. Counterpoint: the 45%→50% jump may have been driven by the Cloudflare win and Fortune 100 AI security deal — large one-time deals that won't repeat every quarter. On balance, slightly above 50% because the structural composition of the product portfolio has shifted permanently toward non-endpoint, and we get two shots. 53%.
Resolution Criteria
Resolves YES if SentinelOne management reports or states that non-endpoint products (defined as cloud security, data/SIEM, AI security, and identity security — excluding core endpoint protection) account for 55% or more of new bookings in any quarter from Q1 FY2027 through Q2 FY2027. Resolves NO if the percentage remains at or below 55% in all reported quarters, or if the metric is not disclosed.
Resolution Source
SentinelOne quarterly earnings calls and investor presentations through Q2 FY2027
Source Trigger
Non-endpoint bookings mix and Data ARR trajectory toward $200M
Full multi-lens equity analysis