S Q4 FY2026: Record $64M Net New ARR, Two Signal Upgrades, Thesis Upgraded — Stock Falls 5%

SentinelOne delivered a record $64M net new ARR in Q4 FY2026 (+6% YoY, company best), crossed $1B in full-year revenue (+22% YoY), and hired permanent CFO Sonalee Parekh (25+ years experience). Two signals upgraded — ACCOUNTING_INTEGRITY to CLEAN, CAPITAL_DEPLOYMENT to CONSTRUCTIVE — and four prediction markets resolved YES with an average Brier score of 0.234. Our NRR disclosure prediction was the ensemble's biggest miss (Brier 0.640 — the models were 80% confident NRR would not be disclosed). Thesis upgraded from HIGHER_SCRUTINY to PROCEED_WITH_CAUTION. At $13.09 after-hours (−5%), the market is pricing in execution doubt the data does not support.

$64M

Net New ARR

Company record (+6% YoY)

+20%

Q4 Revenue YoY

$271M (FY guide: $1.2B)

109%

NRR ($100K+ customers)

GRR: 96% (first disclosure)

−5%

After-Hours Price

$13.09 (NYSE: S)

The Numbers

Revenue: $271M Q4 (+20% YoY) / ~$1B Full Year (+22%)Beat

Full-year ARR milestone crossed $1B. FY2027 guidance of $1.195B–$1.205B implies 20% growth at scale with 10% non-GAAP operating margin — the first-ever operating margin guidance from SentinelOne. Data ARR exceeded $130M, Cloud ARR exceeded $160M, and Wayfinder ARR crossed $100M, demonstrating platform diversification beyond endpoint.

Net New ARR: $64M (+6% YoY, company record)Record

The prior quarter saw $54M net new ARR. The sequential and year-over-year improvement in a market where peers have reported pressure is the strongest operating signal in the quarter. Purple AI attach rate reached 50%+ (up from 40%+). Multi-module penetration expanded to 65% at 3+ solutions (vs. 39% a year ago). Cloudflare was cited as a competitive displacement in a 7-figure deal.

Balance Sheet: $770M Cash, Zero DebtConstructive

12.2M shares repurchased via buyback program, signaling capital discipline without impairing the growth investment. The clean balance sheet was a primary factor in upgrading CAPITAL_DEPLOYMENT from MIXED to CONSTRUCTIVE. NRR at 109% for $100K+ customers with GRR at 96% — both disclosed publicly for the first time since FY2025.

What Changed: Two Signal Upgrades

ACCOUNTING_INTEGRITY: QUESTIONABLE → CLEANUpgraded

The Fugazi Filter had flagged elevated SBC as a masking mechanism for underlying profitability concerns. This quarter, SBC as a percentage of revenue trended toward the 28% threshold the ensemble tracked, the NRR/GRR disclosure closed a transparency gap that had been a persistent concern, and the permanent CFO hire (Parekh, 25+ years experience) adds institutional credibility to financial governance. The combination of these three factors — SBC trajectory, disclosure improvement, and CFO stability — supports the reclassification.

CAPITAL_DEPLOYMENT: MIXED → CONSTRUCTIVEUpgraded

$770M cash with zero debt, share buybacks executing, and operating margin guidance of 10% for FY2027 collectively address the MIXED-classification concern that capital was being deployed without a credible path to profitability. The 10% margin target is the first concrete operating leverage commitment, making this reclassification durable rather than momentum-driven.

3 confidence upgrades (no reclassification): COMPETITIVE_POSITION confidence raised MEDIUM → HIGH (record net new ARR, Cloudflare displacement), REVENUE_DURABILITY confidence raised MEDIUM-HIGH → HIGH (109% NRR, 96% GRR, 65% multi-module at 3+ solutions), EXPECTATIONS_PRICED confidence raised MEDIUM-HIGH → HIGH (MODEST classification validated).

The Market's Biggest Miss

The ensemble assigned only 20% probability to SentinelOne disclosing NRR in Q4 FY2026. The market resolved YES. Brier score: 0.640 — our worst-scored resolution of the quarter.

NRR Disclosure: The Ensemble Was Wrong

The 9-model ensemble placed 80% probability on NRR not being disclosed, reasoning that management had deliberately omitted this metric since FY2025 and would continue doing so until NRR was demonstrably improving. The flaw in this reasoning: the models weighted the prior disclosure behavior too heavily and underweighted the possibility that a permanent CFO hire and improved NRR metrics would coincide. Parekh's arrival likely created internal pressure to re-establish best-in-class transparency standards. The lesson: leadership transitions can accelerate disclosure changes the models had expected to take multiple quarters. Brier 0.640 is a calibration failure — the models were confidently wrong.

Forecast Update (4 Resolved, 4 Updated)

Market	Before	After	Brier / Shift
Q4 Revenue exceeds $250M? Resolved YES	76%	—	Brier 0.058
NRR disclosed Q4? Resolved YES	20%	—	Brier 0.640
FY2027 guidance ≥20% growth? Resolved YES	58%	—	Brier 0.176
Permanent CFO hired by Q4? Resolved YES	76%	—	Brier 0.063
Net new ARR below $45M?	30%	10%	−20pp
SBC below 28% of revenue?	17%	40%	+23pp
Integration issues materialize?	40%	13%	−27pp
Goodwill impairment by FY2027?	13%	10%	−3pp

Three of four resolved markets scored well (avg Brier 0.099 excluding NRR). The NRR miss pulls the overall average to 0.234 — acceptable but a calibration lesson. The largest active-market shift is the integration issues market (−27pp), driven by the 65% multi-module attach rate at 3+ solutions, which indicates the Singularity platform is functioning as a coherent suite rather than a loosely coupled collection of acquisitions.

After-Hours Disconnect

S fell 5% to $13.09 after-hours on results that, by most objective measures, exceeded expectations: record net new ARR, revenue beat, 109% NRR first disclosed in years, CFO hired, and first-ever operating margin guidance. The divergence between reported data and market reaction is analytically meaningful.

Narrative-Reality Gap: DIVERGING

The after-hours decline suggests the market is pricing in a narrative not fully supported by the numbers. Possible explanations include: (1) the FY2027 revenue guide of $1.195B–$1.205B implies 20% growth — the same rate as FY2026 — which disappointed investors expecting acceleration; (2) the 10% operating margin target may read as modest relative to the profitability timelines peers have committed to; (3) at ~4x EV/Revenue post-close, the stock had priced in significant acceleration that a “20% maintained” guide doesn't justify. The ensemble's EXPECTATIONS_PRICED: MODEST classification — now at HIGH confidence — appears directionally correct: the market was not pricing perfection at the close price, and even strong results can gap down when guidance anchors lower than the implied forward. This is a DIVERGING narrative-reality gap, not a fundamental deterioration.

What's Next

10-K Filing

The annual filing will be the first with Parekh's name on the certifications. Scrutiny point: SBC as a percentage of revenue in the audited financials vs. the earnings call discussion. The ACCOUNTING_INTEGRITY upgrade to CLEAN will be stress-tested.

Sonalee Parekh's First Earnings Call (Q1 FY2027)

The Q1 call is the first opportunity for Parekh to shape the financial narrative directly. Disclosure cadence, metric definitions, and guidance framework under her leadership will determine whether the ACCOUNTING_INTEGRITY upgrade is durable or premature.

H1 FY2027 Net New ARR

Record Q4 ARR sets a high bar. Whether SentinelOne can sustain $60M+ net new ARR in Q1 and Q2 — historically the weakest quarters by seasonality — is the primary operational question. Failure to sustain would call into question whether Q4 was structural or a pull-forward.

Thesis: HIGHER_SCRUTINY → PROCEED_WITH_CAUTION

Classification: Proceed with Caution (Upgraded)HIGH Confidence

HIGHER_SCRUTINY reflected the combination of: (1) SBC opacity, (2) NRR non-disclosure masking retention health, (3) CFO vacancy creating governance uncertainty, and (4) ambiguous capital deployment strategy. This quarter, all four concerns resolved or materially improved simultaneously. Two signal upgrades (ACCOUNTING_INTEGRITY, CAPITAL_DEPLOYMENT) plus three confidence increases in a single quarter is the minimum threshold for a thesis classification change.

What PROCEED_WITH_CAUTION means: The business quality signals are improving but not yet at the level of PRICE_AT_VALUE or PRICE_BELOW_VALUE classification. Remaining concerns include: SBC trajectory not yet confirmed below 28%, operating margin commitment at 10% is modest relative to cybersecurity peers, and the after-hours price reaction suggests the market expects higher forward growth than the guide implies. The ensemble views PROCEED_WITH_CAUTION as appropriately cautious given the positive trajectory without overweighting a single strong quarter.

Purple AI Attach Rate Is the Leading Indicator

Purple AI attach rate moved from 40%+ to 50%+ in a single quarter. This is the single most important leading indicator for durable ARR expansion. AI-native features with 50%+ penetration in the installed base create cross-sell vectors that don't require net new logo acquisition — they compound on existing relationships. If attach reaches 60%+ by Q2 FY2027 alongside maintained NRR of 109%+, that combination would trigger a review of REVENUE_DURABILITY toward DURABLE classification at HIGH confidence, and potentially move the thesis toward PRICE_AT_VALUE if the multiple compresses with the stock decline. The 65% multi-module penetration (3+ solutions) provides structural confirmation: customers who adopted multiple modules are sticky, and Purple AI is the marginal module driving incremental adoption.

Updated analysis with 2 signal upgrades, 3 confidence changes, 4 resolved markets, and revised thesis

S Updated Analysis S Forecasts (4 Active)Updated Thesis