Image source: The Motley Fool.

DATE

Thursday, May 28, 2026 at 4:30 p.m. ET

CALL PARTICIPANTS

• Chief Executive Officer — Tomer Weingarten
• Chief Financial Officer — Sonalee Elizabeth Parekh
• VP, Investor Relations — Douglas G. Clark

TAKEAWAYS

• Revenue -- $277 million, up 21% year over year, with international revenue increasing 25% and accounting for 39% of total revenue.
• Total Annual Recurring Revenue (ARR) -- Grew 23% to a new record, with $44 million in net new ARR, representing a 55% increase driven by new logo acquisition and platform expansion.
• Operating Margin -- Reached 4%, reflecting a 550 basis point improvement year over year.
• Earnings Per Share (EPS) -- Reported at $0.40, up 83% compared to the previous year.
• Customers Spending $100,000+ in ARR -- Increased 17%, indicating strong upmarket momentum.
• Gross Retention Rate (GRR) -- Maintained stability, signaling the mission-critical nature of the Singularity platform.
• Net Retention Rate (NRR) for $100,000+ Cohort -- Improved both sequentially and year over year, reflecting multiproduct adoption.
• Record ARR per Customer -- Achieved due to increased cross-platform and multiproduct engagement.
• AI Security ARR -- Nearly doubled sequentially in the quarter, signifying rapid adoption of emerging solutions.
• Non-endpoint ARR Mix -- Approached 50% of total ARR for the first time, a milestone reached through accelerated growth in AI security, data, and cloud.
• Singularity Flex Total Contract Value (TCV) -- Surpassed $200 million in less than a year since launch, contributing to larger 7- and 8-figure deals.
• Adj. Free Cash Flow Margin -- 6.5% on a trailing 12-month basis, up by 44 basis points.
• Remaining Performance Obligations (RPO) -- Climbed 30% to a record $1.5 billion.
• Cash and Investments -- Ended the period with $812 million and no debt.
• Workforce Reduction -- Implemented an 8% workforce cut, resulting in expected $45 million annualized cost savings after a $25 million restructuring charge in Q2.
• Q2 and fiscal 2027 Guidance -- Revenue expected between $289 million and $291 million for Q2; full-year revenue projected between $1.195 billion and $1.205 billion, both reflecting 20% year-over-year growth at midpoints.
• Fiscal 2027 Operating Income Forecast -- Raised to $115 million-$125 million, targeting a 10% margin at the midpoint, a 650 basis point increase from prior year.
• Fiscal 2027 EPS Guidance -- Expected between $0.30 and $0.38, with Q2 EPS guided at $0.06-$0.08.
• Non-GAAP Tax Rate -- Anticipated at approximately 17% for the fiscal year, with expected diluted share counts at 347 million for Q2 and 350 million for the year.
• Strategic Partnerships -- Expanded alliances with Level Blue (largest MSSP) and Google Cloud, with the Singularity platform integrated into AWS Security Hub for direct AWS procurement.

Need a quote from a Motley Fool analyst? Email [email protected]

RISKS

• CFO Sonalee Elizabeth Parekh stated, "we are implementing a workforce optimization initiative impacting approximately 8% of our workforce," with an expected restructuring charge of $25 million in Q2.
• Outlook commentary highlighted, "we continue to be mindful of the evolving macroeconomic environment geopolitical uncertainties, which can influence deal timing, and sales cycles across the industry."

SUMMARY

SentinelOne (S 12.57%) delivered accelerating revenue and ARR growth driven by both new customer wins and expanding multiproduct adoption, pushing non-endpoint ARR near half of the overall mix. Management executed a significant workforce reduction to streamline operations and redeploy resources toward AI, cloud, and data growth initiatives. The company reported record net new ARR, robust operating margin expansion, and rising remaining performance obligations, while maintaining a strong balance sheet and no debt. Strategic alliances with leading global partners, new AI security offerings, and enhanced procurement routes underline the company's competitive positioning and vision for autonomous cybersecurity. Guidance for fiscal 2027 (ending April 30, 2027) points to continued revenue and margin growth, with an upgraded profitability outlook and a clear focus on capturing AI-driven market opportunities.

• AI product uptake is translating into measurable ARR gains as customers prioritize real-time security and governance for AI deployments.
• The Flex platform and token-based models are fueling larger, longer-term commitments and recurring revenue visibility.
• Level Blue and Google Cloud partnerships expand distribution and market reach, particularly in MSSP and hyperscaler ecosystems.
• SentinelOne's approach to operating leverage combines headcount optimization and targeted reinvestment, underpinning its multiyear trajectory toward the rule of 40.
• Stability in gross and net retention rates, particularly in high-value cohorts, signals improving durability and stickiness of the customer base amid sector shifts.

INDUSTRY GLOSSARY

• Annual Recurring Revenue (ARR): The subscription-based revenue SentinelOne expects to recognize from customers on an annualized basis for active contracts.
• Singularity Flex: SentinelOne’s flexible, hybrid licensing and monetization model allowing usage-based consumption and upfront commitment for its platform solutions.
• Prompt Security: SentinelOne’s enterprise-grade AI security module focused on governance, compliance, and threat protection for AI and generative AI applications.
• AI SIM: SentinelOne’s AI-powered Security Information and Event Management solution that unifies security data ingestion, detection, and orchestration.
• Purple AI: SentinelOne’s agentic SOC automation suite enabling autonomous detection, investigation, and response for cybersecurity operations.
• MSSP: Managed Security Services Provider—partners who deliver security solutions and monitoring to customer organizations, often as part of broader outsourcing models.
• Rule of 40: A software industry metric suggesting that the sum of revenue growth rate and profit margin should exceed 40% to indicate a healthy SaaS business model.

Full Conference Call Transcript

Douglas G. Clark: Good afternoon, everyone, and welcome to SentinelOne's earnings call for the first quarter of fiscal year 27. Which ended April 30, 2026. With us today are Tomer Weingarten, CEO and Sonalee Elizabeth Parekh, CFO. Our press release and an earnings presentation were issued earlier today and are posted on the Investor Relations section of our website. This call and accompanying slides are being broadcast live via webcast and a replay will be available on our website shortly after the call. Before we begin, I would like to remind you that during today's call, we will be making forward looking statements about financial performance, and future events. Including our guidance for the fiscal second quarter and full fiscal year 27.

As well as long term financial targets. We caution you that such statements reflect our best judgment based on factors currently known to us and that our actual results or events could differ materially. Please refer to the documents we file from time to time with the SEC, in particular, our quarterly reports on Form 10 Q and annual report on Form 10 k. These documents contain and identify important risk factors and other information that may cause our actual to differ materially from those contained in our forward looking statements. Any forward looking statements made during this call are being made as of today.

If this call is replayed or reviewed after today, the information presented during the call may not contain current or accurate information. Except as required by law, we assume no obligation to update these forward looking statements publicly or to update the reasons why actual results may differ materially from those anticipated even if new information becomes available in the future. During this call, we will discuss non GAAP financial measures, and all comparisons made are year over year unless otherwise noted. These non GAAP financial measures are not prepared in accordance with generally accepted accounting principles.

A reconciliation of the GAAP and non GAAP results other than with respect to our non GAAP financial outlook is provided in today's press release and in our earnings presentation. These non GAAP measures are not intended to be a substitute for our GAAP results. Our financial outlook excludes stock based compensation expense, employer payroll tax on employee stock transactions, amortization expense of acquired intangible assets, acquisition related compensation costs, restructuring charges, gains on strategic investments, impact of the previously announced ITA tax settlement, and income tax provision which cannot be determined at this time and are therefore not reconciled in today's press release. And with that, let me turn the call over to Tomer Weingarten, CEO of SentinelOne.

Tomer Weingarten: Good afternoon, everyone, and thank you for joining our first quarter earnings call. Q1 was a solid start to the year for SentinelOne. We delivered strong revenue growth, record net new ARR growth, and significant operating margin improvement year over year. Total ARR growth accelerated to 23%, in Q1, driven by strong new logo acquisition and expansion with existing customers. delivered $44 million in net new ARR in Q1, a 55% increase year over year setting a new company record. This marks our 4th consecutive quarter of positive net new ARR growth while exceeding expectations. These results showcase execution consistency and strong business momentum. Our platform strategy is showing solid traction.

Have established clear technology leadership across the most critical domains of cybersecurity including AI, data, cloud, and endpoint. Enterprises realize they cannot defend against AI driven threats by consolidating onto legacy platforms that simply bolt on separate tools together. what is needed is a natively unified AI driven data and security architecture. And that is what SentinelOne delivers. According to Gartner, AI security is the fastest growing segment in cyber growing more than 70% year over year. AI represents a massive market opportunity for us and a durable tailwind for our business. We are already seeing this momentum with our AI offerings as our AI security ARR nearly doubled again in Q1.

AI has been foundational to the Singularity platform from day 1. This inherent AI advantage has never been more critical. And we are well positioned to expand our market share across a $100 billion+ market opportunity. Now let's dive deeper into the details of our quarterly performance. We are winning new logos and expanding our footprint across diverse platform categories. Beyond the singularity platform's best in class efficacy and autonomy, its intuitive design and operational simplicity are driving strong customer adoption. In Q1, our total ARR mix reached an important inflection point. For the first time, the total ARR from our non endpoint solutions approached 50%.

This performance was driven by accelerated ARR growth of our AI security, data, and cloud solutions. A clear testament to the diversity in customer outcomes of the Singularity platform. Our cross platform adoption drove a record ARR per customer in the quarter, signifying the momentum and contributions across our platform solutions. Overall, we are maintaining a healthy balance between new logo acquisition and existing customer expansion. Given our scale and relative market share, this strategy allows us to increase our market share while still retaining significant future expansion potential. We maintained solid win rates across all competitive situations. We are gaining mindshare and market share among customers and partners.

Customers of all sizes, especially large enterprises, are increasingly recognizing SentinelOne's AI advantage. Among our platform solutions, AI security continues to be a bright spot. With ARR nearly doubling again sequentially in Q1. Today, Prompt Security stands out as the only enterprise grade scalable solution capable of securing AI at this level. And organizations are recognizing that this is a prerequisite for safely accelerating their AI initiatives. Let's look at our Q1 wins that exemplify this. The US state government selected SentinelOne to secure its AI infrastructure in 1 of the first government deals led by AI security. With thousands of employees accessing AI tools across sensitive government systems, the need for real time visibility and governance was urgent.

This customer chose Prompt alongside Endpoint Cloud and AI SIM get runtime visibility into their employees AI usage, while satisfying strict government compliance requirements. Moreover, we are increasingly winning standalone AI security deals from the customers of our direct competitors. This serves as a strategic entry point to expand our broader market exposure. In Q1, an iconic enterprise selected Prompt Security over the incomplete AI offering over their incumbent next gen and vendor. Winning this head to head evaluation has built tremendous trust By demonstrating the superiority of SentinelOne's technology, we have opened the door to displace that next gen competitoR&Drive broader consolidation for this enterprise with the Singularity platform.

As organizations race to build and deploy homegrown AI applications, the attack surface is expanding faster than legacy tools can address it. To close that gap, we launched Singularity AI red teaming in May. Purpose built to secure AI applications from the inside out. This solution autonomously stress tests AI applications against real world attack scenarios before they ever reach production. This creates a highly complementary lend and expand motion for us. Red teaming discovers the vulnerabilities in development in our core platform seamlessly blocks them. At runtime. We are now delivering AI security from the first line of code through execution. Next, Purple AI, our agentic SOX solution is rapidly becoming the bedrock of modern security operations.

With the increasingly sophisticated capabilities of Purple, we are empowering customers to respond faster, accelerate detection, and automate investigations. In Q1, we announced the general availability of Purple AI auto investigations, a major milestone in our journey towards delivering a fully autonomous SOC. Purple AI represents a significant expansion opportunity over time, In several early rollouts, we are seeing instances where ARR from Purple AI's end to end deployment can outgrow a customer's core endpoint footprint. Delivering AgenTek SOX autonomous capabilities can drive outsized value. Purple is built for enterprise scale and natively with Singularity Hyperautomation, but its value extends well beyond large enterprises.

We have architected Purple to deliver meaningful impact across customers of all sizes, and we see a particularly compelling opportunity with MSSP providers, which tend to benefit from significant cost efficiencies and a step change acceleration across their entire operations. At the capability level, Purple's latest auto investigation feature delivers human level reasoning at scale. Providing 1 click and soon zero click automation with clear verdicts in seconds. This closes the critical gap between insight and action. Fundamentally changing what security teams can accomplish The accuracy we are seeing compared to human analysts make this a true game changer. Allowing security practitioners to shift from manual investigation immediate remediation.

This is consistent with IDC's finding noting a 338% ROI for Purple AI customers. For data solutions, Q1 marked the 4th consecutive quarter of ARR growth acceleration. We are seeing increasing demand for our AI SIM, enterprises seek unified visibility, real time detection, and autonomous response. All this with far more efficient unit economics than legacy alternatives. With an integrated observable AI, our customers now benefit from owning the critical data pipeline that powers modern security operations. We are delivering a truly comprehensive security data lake that natively unifies petabyte scale ingestion, orchestration, and hyperautomation into a single seamless experience.

Among several wins in the quarter, an iconic luxury brand displaced Splunk with a multiyear commitment to SentinelOne's AI SIM as their dedicated security data platform. Global operations needed a solution that offered unified visibility into a single AI native platform. The combination of real time autonomous security and operational simplicity of the platform made it a winning choice. In another win, a multinational services enterprise signed a 7-figure expansion with SentinelOne, replacing their existing SIM provider. This enterprise selected the Singularity platform for superior cost of ownership machine speed investigations, and AI native unified platform. Independent validation continues to reinforce our competitive position.

A recent IDC business value study found that SentinelOne's AI sim delivers a 331 percent 3 year ROI with only a 7-month payback period. Our AI sim customers see 70% faster queries, 75% faster investigations, and 4x the threat coverage. For cloud security, ARR growth accelerated in Q1, driven by the strong adoption of our best of breed runtime security covering both on prem and cloud environments. As AI workloads multiply and cloud environments expand, the need for robust runtime security is increasing. Among cloud security wins, 1 of the most valuable private companies in the world soon to become public, significantly expanded its footprint with SentinelOne in the quarter.

To secure an enterprise of this magnitude, static cloud visibility or management was simply insufficient. This enterprise doubled down on Singularity Cloud for autonomous, AI powered runtime protection capable of actively neutralizing AI based threats across their dynamic infrastructure in real time. To secure dynamic cloud environments, organizations need more than static posture management. Our runtime cloud security stops real world cloud attacks in real time and seamlessly scales alongside our customers' operation. It is clear that in an AI driven threat landscape, static defenses are no longer sufficient. Verifying identity at the door is useful, but it does not stop modern threats. We have seen this play out repeatedly.

Traditional identity access management solutions and PAM solutions were built for the past. They were fine at mapping and governing access, but they were never designed to autonomously detect and respond to what happens next. Attackers often bypass access controls post authentication, operating undetected inside environments where trust was already granted. Machine speed behavioral analysis and continuous validation at runtime is the key competitive edge and the only formidable defense strategy stop real time attacks in the age of AI. As the market pivots towards securing AI agents, and frontier models, the endpoint remains the ultimate control plane. You simply cannot deliver comprehensive AI security without deep foundational visibility at the point of execution.

On the host machine, that runs AI. AI powered EDR remains a critical vector capturing the evolving AI security opportunity. With deep expertise and a significant portfolio of patented machine learning and behavioral detection algorithms, SentinelOne is uniquely positioned to protect endpoints, and AI workloads, directly where they are created and operated. Beyond monitoring access, we align intent to action through real time analysis, detecting threats that no identity or parameter control can see. Most recent supply chain attacks, including those targeting light LLM and Axios underscore this point clearly, These were exploit free attacks. Purpose built to bypass traditional security controls and move at machine speed No signature. No known vulnerability. No parameter trigger.

The only effective defense was autonomous behavioral protection at the host level. Exactly where SentinelOne operates. These real world examples reinforce why the execution layer is where the battle is won. We continue to be a growth leader in the broader endpoint sector by delivering the most autonomous endpoint security solution available. Combining industry leading efficacy performance, and user experience. Nearly half of the existing endpoint sector is still using legacy antivirus solutions, This is a clear opportunity for continued market share gains. We are also beginning to see increased traction in securing highly restricted on prem environments. Where true sovereignty is required, which is a distinct structural advantage for us.

While our competitors cannot really secure these environments, this provides an emerging growth avenue for us. We have the distinct advantage of delivering fully autonomous high velocity AI protection in any environment. Both cloud and on prem. Our expanding customer base now includes some of the most sophisticated and iconic companies on the planet. From Frontier AI Labs, and major financial institutions to critical global supply chains. The world's most demanding organizations rely on and trust SentinelOne. Turning to SentinelOne FLIX. It is proving to be a highly effective model for broader platform adoption. We are seeing an increasing number of large deals and contributions from Flex.

In just 3 quarters of its launch, Flex had crossed $200 million in TCV. Looking ahead, our pipeline and demand for Flex shows continuation of this momentum. Central 1 Flex is simplifying the purchasing process and driving an increasing number of large 7- and 8-figure deals and longer term commitments. Overall, our success upmarket is directly fueling bigger deals driving steady retention, and creating a highly visible, durable runway for long term growth. With the growth of token based AI adoption, we are also expanding our monetization model to capture the full value of how customers use our emerging solutions. Usage based metering creates a natural growth engine.

As customers expand their use of our products, like security data lake and Purple AI. Customers can choose upfront, annualized SentinelOne Flex commitments that provide cost visibility and preferred economics while giving us committed revenue visibility. Together, SentinelOne Flex and prepaid structures create a durable hybrid model. A reliable baseline meaningful expansion opportunity layered on top. In the partner ecosystem, we continue to expand our reach and scale. Our partner ecosystem is a force multiplier, expanding our global reach and driving broader platform adoption. For MSSPs, the Singularity platform delivers the AI native multi tenancy and remote management capabilities that drive valuable operational leverage. This structural advantage gives us a unique competitive edge within the MSP ecosystem.

A strong proof point of this leadership came at RSA, where we announced an expansion of our partnership with Level Blue, the world's largest MSSP. This partnership drives the strategic consolidation of their endpoint estate onto the Singularity platform in the coming years and extends our reach across their global customer base. At RSA, we also announced an expanded strategic alliance with Google Cloud to deliver autonomous security at a global scale, and we were honored by winning the 2026 Google Cloud Partner of the Year award. Last week, we also announced Singularity platform's integration into AWS Security Hub extended, This removes the traditional barriers of enterprise procurement.

AWS customers can now turn on SentinelOne's AI powered runtime security in minutes directly from their AWS console without new contracts or procurements. This pay as you go model allows organizations to seamlessly secure their modern digital footprints with SentinelOne. Let's shift gears to the broader industry dynamics. Frontier AI models are rapidly changing cyber defense. Allowing adversaries to execute AI based attacks and weaponize weaknesses faster than human teams can react. To stay secure, enterprises must rebuild infrastructure from the ground up. With a unified AI native foundation to build modern and secure enterprise infrastructure, we believe a collaborative approach is key to solving this generational challenge. Our relationships with the Frontier AI labs are deep and strategic.

We partnered with Anthropic on the launch of cloud security and with OpenAI to its early access for cyber program embedding frontier models throughout our platform. We complement these with our own proprietary and fine tuned models and our core engines remain multimodal and model agnostic by design. AI security is becoming a focal point across the industry with programs like Glasswing or Daybreak. It validates the approach we have been building towards for years. platform leadership. And we are actively engaged with both Anthropic and OpenAI to ensure CenterOne's role in this ecosystem continues to grow alongside our I am also pleased to share that we are a participating vendor in project Glasswing.

Proactive visibility is only half of the equation. We must neutralize active threats at the point of execution. The new class of AI based attacks are designed to move faster than any human analyst could react. To give the advantage back to defenders, we launched Wayfinder Frontier AI services in Q1. We are a lead partner coalition, including Mandiant, WWT, KPMG, and Booz Allen, were fusing multimodal AI with tip of the spear human intelligence. Protecting the AI powered business world requires securing the systems where AI is actually being built and used. Often Linux and Mac operating systems.

While many cybersecurity vendors remain dependent on securing only Windows environments, our established strength to secure Mac and Linux systems give us structural advantages in AI security. We are expanding our native EDR telemetry to protect autonomous AI agents across these operating systems where AI compute is rapidly growing. Our singularity platforms own device behavioral AI recognizes malicious execution patterns and mitigates the processes preemptively. We autonomously stopped recent supply chain attacks instantly across multiple customers with zero prior knowledge and no human analysts in the loop. Before they could do any damage. At SentinelOne, we are delivering end to end AI security from data to runtime. Shifting gears to our operating model.

As always, we remain committed to balancing durable growth with improving profitability, and accelerating our path towards the rule of 40. That commitment requires us to continuously sharpen how we operate. As I outlined in March, we have been actively refining our team structures and go to market focus while accelerating our internal use of AI. In alignment with this strategy, we made a difficult but the necessary decision. We are streamlining our organizational structure resulting in about an 8% reduction in our workforce. This is not a reactive measure. It is a deliberate evolution to reduce complexity raise the performance bar, and build a leaner, more agile SentinelOne.

On the go to market side, we see an opportunity to uplevel our teams and streamline distribution. This includes tightening our coverage and driving greater productivity across our sales organization. Our goal is straightforward. Driving better operating leverage, sales efficiency, and execution velocity. On the AI side, through the company wide rollout of frontier models, we are seeing meaningful productivity gains across organization. Work that previously took months is now being completed in weeks and, in some cases, days. Together, these actions provide us the resources and flexibility to concentrate investments in our highest conviction growth areas. AI, data, cloud, and endpoint.

Before I turn the call over, I am very pleased to officially welcome Sonalee Elizabeth Parekh to her first earnings call. Over the past months, we have been working closely together Sony brings an impressive level of operational rigor aligns with our focus on execution velocity, profitability. She's a phenomenal addition to our executive team and already making an impact. In closing, I want to take a moment to acknowledge the contributions of all Sentinels Their relentless focus, dedication, and execution drives our success. And thanks to all our customers, partners, and shareholders for their continued support. Thank you again for joining us today. With that, 'll hand it over to our CFO, Sonalee Elizabeth Parekh.

Sonalee Elizabeth Parekh: Thank you, Tomer, and thanks everyone for joining us today. 60 days in as CFO of SentinelOne, and the conviction that brought me here has only deepened. Q1 was a strong quarter. And it reflects what I have seen firsthand. A platform that is genuinely best in class, a business model with meaningful operating leverage ahead of us, and a market at an inflection point. AI is fundamentally expanding the attack surface creating new security categories accelerating customer urgency, and opening growth vectors that are still in their earliest stages. SentinelOne is built for exactly this moment. Now let's review the details of our Q1 fiscal 27 financial performance and our guidance for Q2 and the full fiscal year 2027.

As a reminder, all comparisons are year over year and financial measures discussed here are non GAAP unless otherwise noted. Q1 was a solid quarter for SentinelOne. Our revenue growth accelerated sequentially growing 21% year over year to $277 million. Our International Markets revenue grew 25%. And represented 39% of total revenue. Demonstrating strong international demand and a growing global footprint. In Q1, our total ARR growth accelerated to 23% and we added $44 million in net new ARR. Which comfortably exceeded our expectations. This record net new ARR growth of 55% was driven by new logo acquisition and broader platform adoption within our existing customer base. Our move upmarket continues to yield excellent results.

Our ARR per customer reached a new company record, led by strong momentum at the top end of the market where our cohort of customers with ARR of $100 thousand or more grew 17% year over year. Our gross retention rate or GRR across our customer base remains stable, underscoring the mission critical nature of the Singularity platform. For customers spending $100 thousand or more in ARR, our dollar based net retention rate or NRR, improved both sequentially and year over year. Driven by continued success in multiproduct platform adoption. We are increasingly landing premier logos, providing us with a highly durable runway for long term growth.

Overall, we are maintaining a balanced split between new logo acquisition and existing customer expansion. Given our scale and relative market share, this focus allows us to increase our market share with significant future expansion potential. This performance clearly reflects the value customers realize from our Singularity platform. And our continued success in driving multiproduct expansion and stickier customers. Now turning to profitability. We continue to maintain a strong gross margin profile. Highlighting healthy platform unit economics and scale efficiencies. In Q1, our operating margin of 4% exceeded our expectations and represented an improvement of approximately 550 basis points year over year.

Our earnings per share of $0.4 also exceeded our expectations and represented an improvement of 83% year over year. We are sustaining a top tier growth profile while rapidly expanding our profitability. Most importantly, we are driving the structural operating leverage without compromising our relentless pace of innovation. On a trailing 12 month basis, our adjusted free cash flow margin was 6.5%, representing an improvement of about 44 basis points year over year. We have put the company on a path to sustainable positive free cash flow growth which underscores our commitment to durable profitable growth at scale. Complementing this strong performance, our remaining performance obligations Growth accelerated to 30% in Q1.

Our total RPO reached a record $1.5 billion in Q1, a clear validation of the trust we have established with our customers and our commitment to innovation. We ended the year with a robust balance sheet, including $812 million in cash, cash equivalents, and investments. And no debt. Looking ahead, SentinelOne is well positioned at the intersection of AI data, and cybersecurity to lead the industry into the next era of autonomous defense. Capitalizing on this opportunity requires us to evolve our operating model and the way we work. As Tomer discussed, we are implementing a workforce optimization initiative impacting approximately 8% of our workforce.

We are harnessing productivity gains to increase our agility and to invest in solutions like AI security, Purple AI, data, and cloud, which are key to delivering durable growth. In connection with this initiative, we expect to incur a onetime restructuring charge of approximately $25 million in the second quarter. Which will be excluded from our non GAAP results. Once fully implemented, we expect this action to result in approximately $45 million in annualized cost savings. This provides us with the financial flexibility to purposefully reinvest in our key growth areas. While continuing to drive significant operating margin expansion.

With our strong growth profile, clear technology leadership, and growing structural tailwinds, we have all the ingredients to scale into a multibillion dollar highly profitable, durable business. Now turning to guidance for Q2 and fiscal year 27. For the full fiscal year 27, we continue to expect revenue to be between $1.195 and $1.205 billion. Representing 20% year over year growth at the midpoint. For Q2, we expect revenue to be between $289 million and $291 million representing 20% year over year growth at the midpoint. Overall, this outlook is supported by a solid pipeline strategic partnership opportunities, and rising contribution of our emerging solutions including AI, data, cloud, and others.

As always, we continue to be mindful of the evolving macroeconomic environment geopolitical uncertainties, which can influence deal timing, and sales cycles across the industry. Turning to the outlook for our profitability metrics. For fiscal 27, we are raising our operating income outlook to be between $115 and $125 million representing an operating margin of 10% at the midpoint. Representing a 650 basis point increase over fiscal year 26. For Q2, we expect operating income to be between $23 million and $25 million representing an operating margin of 8% at the midpoint. For full year fiscal 27, we expect fully diluted earnings per share to be between point $3.02 and 38 cents. Representing $0.35 at the midpoint.

For Q2, we expect earnings per share to be between $0.06 and $0.08. Continue to expect a non GAAP tax rate of approximately 17% for the fiscal year 27. And we expect our weighted average diluted share count To be approximately 347 million for Q2. And 350 million for the full year. Taking a step back, our technology leadership and competitive position remain strong. We are scaling the business while consistently driving operating leverage. Our investment approach strikes a disciplined balance between capturing long term growth opportunities and maintaining a durable, profitable financial profile. This strategy is foundational to scaling SentinelOne into a multibillion dollar business.

At the same time, we are instilling operational discipline with a sharp focus on greater efficiency. In summary, we are well positioned at the intersection of AI data, and cybersecurity. Leading the industry into the next era of autonomous security. Security is no longer just a safeguard It is a key strategic enabler of AI innovation. With a strong financial foundation, a differentiated platform, and growing market opportunity we remain committed to delivering shareholder value. Thank you all for joining us today, and thank you to all Sentinels for giving me such a warm welcome. And with that, operator, we are ready for questions. Thank you.

Operator: At this time, if you would like to ask a question, please click on raise hand button which can be found at the black bar at the bottom of your screen. When it is your turn, you will receive a message on your screen. Based on your place in the queue. Please accept, unmute your audio and ask your question. As a reminder, we are allowing analysts 1 question today. We will wait 1 moment to allow the queue to form. Our first question will come from Meta Marshall with Morgan Stanley. You may now unmute your audio and ask your question.

Analyst (Meta Marshall): And congrats on the quarter and the acceleration in Q1. From an opportunity standpoint, you know, are you seeing a pickup in core endpoint as customers try to address technical debt? And how are you balancing selling them the full Singularity at initial sale versus upselling them later?

Tomer Weingarten: Hi, Sozi. Thank you for your question. it is clear that the endpoint remains the most important control plane especially in the age of AI. We are seeing a lot of focus on how to secure AI agents, how to secure surfaces that could be impacted by the deployment of more and more AI technologies. So not only this bodes well for our overall core endpoint business. If you think about prompt security, generative AI protection that specific and deployed on the endpoint, this is typically what we are seeing right now and how we are lending.

So when we look at our pipeline, you are actually seeing a lot of contribution not only from core endpoint, which, again, has been phenomenal for us, both in Q4 and in Q1 and will continue to grow. But also the immediate attach all prompt security generative AI protection is adjacent to the endpoint as well. Lastly, I will say the definition of the endpoint is also expanding And when you think about where AI workloads are being deployed today, it also spans towards cloud workload. And that is another strong suit of ours where we are seeing a lot of demand for the protection of these workloads that are now housing either AgenTeq workloads or other model workloads.

So all in all, really strong you know, really strong demand across endpoint surfaces and workflow surfaces.

Operator: Thank you. Our next question comes from Brad Alan Zelnick with Deutsche Bank. Please go ahead.

Analyst (Brad Zelnick): So much. Tomer, I think we would all like to hear your thoughts on the extent Project Daybreak, the just the broader pace of AI innovation might be impacting customer spending behavior. The extent to which it is in some cases, maybe accelerating, or perhaps even slowing down, or even expanding budgets Any color is helpful and as well why you are well positioned to capture what is ahead.

Tomer Weingarten: Absolutely. And, again, we are a proud member of the Glasswing project. I would say, by far, this drives you know, a lot of concern. that is not gonna be new to anybody. I would say at the same time, vulnerabilities are not the only concern. So code security is definitely a big, I would say, big of how you secure an entire enterprise. We have launched Frontier AI services alongside Anthropic and OpenAI. We are using these Frontier models to go to customer environments and reduce risk immediately. We are talking about deployments that take sometimes, you know, hours and days, not weeks and months.

So with the customer urgency, there is also an ability to deploy fast and show you know, immediate returns on these technologies. So all in all, a lot of attention. I think a lot of customers are still grappling with what to protect first. And that, again, goes back to my assertion around vulnerabilities. You know, what Minkos brings to bear or what know, models are bringing to bear right now, you know, GPT 5.5 as well, is the ability to not only find vulnerabilities in software, but really detect and exploit weaknesses in overarching network infrastructure, not just software, not just vulnerabilities, and that presents very wide attack surface.

Once again, cetto-1 is well positioned to stop to mitigate to help customers reduce risk actively. All of those things are obviously in motion. A lot of them showed up, you know, with this Daybreak moment. And will provide for structural tailwinds throughout the year.

Operator: Thank you. Our next question comes from Brian Essex with JPMorgan. Please unmute your line and go ahead.

Analyst (Brian Essex): Great. Good afternoon. Thank you for taking the question, and nice to see the acceleration in better profitability outlook Maybe Tomer, for you, I would love to get some color on the reduction in force that you announced You know, where were the cuts made? You know, any changes to the sales organization And I get the productivity you know, the AI driven productivity enhancements that you noted, but would love to maybe just connect the dots in terms of where the adjustments were weighed, how many to the sales org, and maybe the outlook for sales productivity and growth for the rest of the year? Thank you.

Tomer Weingarten: Sure. And as you have seen in the past, we are focused on driving operational excellence all the time, honestly. And simplifying our processes and removing unnecessary layers that is happening, you know, all the time. We have been carrying more organizational capacity I think we require at this stage of our scale and growth, and profile of hiring is also changing. The talent we are recruiting is different, and we are just aligning a lot of what we do. With both our upmarket success and our emerging product categories. You have seen the inflection in the overall business mix I mean, that is tremendous.

And as always, you know, we are focused on driving higher efficiencies and allocating resources towards those key growth areas, which naturally would be AI, data, cloud, endpoint. These are the growing areas. For us. This is our major focus, and this is the absolutely right thing for the business. You know, it is it is never an easy decision. At the same time, we want to go after these areas in the most aggressive way that we can. We recognize an opportunity right now, and we want to put all of our resources in the right places. We are barely, you know, impacting our technology groups with this. We are focused on streamlining parts of the organization.

We are continuously and always investing in innovation, and that is the key point here. We are delivering to the market what the market needs. We are delivering protections best of breed, cutting edge, to our customers using Frontier models that where we are going. that is where we are gonna be continuously investing, and that is what you see us doing.

Operator: Thank you. Our next question comes from Joseph Anthony Gallo with Jefferies. Please go ahead.

Analyst (Joseph Gallo): Hey. Thank you for the question. As a follow-up to that, should we expect any sales disruption particularly in 2Q? And as a part of that, certainly, great to see the improvement in margins. Can you just talk a little bit more about your comfortability that you can capture this mass opportunity and not sacrifice the durability of growth? Thank you.

Tomer Weingarten: Of course. We do not expect any go to market disruption. As you can probably imagine, you know, this comes on natural performance management. You know, folks that may have not been, you know, the biggest contributors We are kind of focusing on the places where we see the greatest contribution. So if anything, again, this will provide more focus in kind of a distilled crystallized go to market motion. I do not expect any major changes. We have not been you know, changing things in a in a dramatic way here. This is a kind of a continuous mode for us along the go to market side.

We have said it for quite a few quarters. there is really almost nothing new here. And again, I mean, we look at you know, our pipelines, when we look what the opportunity is, we are just aligning towards that. We believe that a lot of the reinvestment capacity is actually going to allow us to go after that exact same endpoint opportunity that we have been talking about. You can see some evidence of that with our partnership with Level Blue. This gives us immediate access to tens of millions of endpoints over the years.

Without needing to go and sell to those customers 1 by 1. that is just 1 way that we are thinking about aggressive expansion, and we are going to do more of those. So to us, it is all pointing in the right direction. We feel very comfortable with our technology's ability to go and replace the legacy incumbent and the opportunity that comes with it. Is massive. it is still a massive market. it is still you know, in many parts dominated by incumbents. And that represents a major opportunity for us. Lentwood endpoint with attached generative AI capabilities and protection from all these new vectors of attack.

We leverage frontier AI models deliver the best protection for our customers. These are all positive trends from the business that we are frankly very excited about.

Sonalee Elizabeth Parekh: Yeah. So thanks for the question, and we are really delighted with the margin. Progression that we showed this quarter and obviously it is due to the upgrade to the operating margin guide for the full year. So I think the short answer is we do not see growth and margin expansion as trade off in this case. The investments that actually drive durable growth that Tomer was talking about in AI data, cloud, the labs, are exactly where we are reinvesting. So we are removing organizational complexity that was actually slowing us down and redeploying it into the highest return and highest conviction opportunities that we see in the business.

And I think the evidence that we can do both is actually already in the Q1 numbers. So this quarter, we delivered record net new ARR. So up 55% year over year. While simultaneously expanding operating margins by 550 basis points. So I think that is really our platform model working at scale. When I look forward, the demand signals give me real confidence. So RPO, again, at a record 1.5 billions. Growing 30%. Net retention expanding in our $100 thousand plus cohort that is both sequentially and year over year. To above a 110. You know, some of our products like Prompt ARR nearly doubling again. I think these are all leading indicators of durable growth.

I think you are gonna see both durable growth and sequential and annual operating margin expansion. We really feel like we can deliver on both. Thank you.

Operator: Our next question comes from Shaul Eyal at TD Cowen. Please go ahead.

Analyst (Shaul Eyal): Thank you. Question to Sono Lee. So now being there a couple of months, have your initiatives you would like to undertake changed, or how do you see opportunities to build upon the operating leverage you guys are seeing?

Sonalee Elizabeth Parekh: Yeah. Thanks. So, yes, 60 days in. I would say what struck me most coming in was really the strength of the Singularity platform. Our product leadership and technology differentiation, and then the significant opportunity in front of us for this category much of which is just really in the early innings. So I think the operating leverage potential of the business as we scale given our industry leading gross margin, creates this enormous opportunity to create outside value. And I would say my conviction on that has only increased.

So in terms of priorities, first, it is my job to ensure we are allocating our resources and investing in the parts of the business where we feel we see the highest opportunity for growth and ROI. So that is data, cloud, AI security, I think will be massive. And you see already our emerging solutions now 50% of our ARR. So it is these areas where we feel like we have real competitive differentiation and a significant market opportunity ahead. I think prompt is a perfect example of that. Second, you know, continuing to improve on the cost structure. You saw the announcement we made today on restructuring. it is really important that we focus the business.

I am gonna be extremely focused on unit economics, driving excellence and discipline across the business, particularly in sales and marketing where I see the largest opportunity for productivity improvement. In today's results, you will already know we have made a lot of progress in sales and marketing. If you look at sales and marketing as a percentage of revenue, Q1, it came in at 39%. That compares to 47% a year ago. And if you think about our upgraded full year operating profit guide of 10%, that is 700 basis points of year over year improvement.

But I think what is most interesting and compelling, really, it is What that implies in terms of where we are gonna be exiting Q4. That exit operating margin, that is significantly above the 10% guide. So we are on a path to deliver multi quarter, multiyear margin expansion. Which you know, you are already beginning to see. And then lastly, I think it is really important that and Thoma and I are completely aligned on this. We need to put ourselves firmly on the path to rule of 40. Which means not just efficiency, but durability. And I will be really focused on taking that NRR where we have already seen great progress and improving upon it.

And, you know, it is not just on the NRR side. On the GRR side, We have seen improved logo retention this quarter and stability. And I think that just underscores the mission critical nature of our platform. And then finally, would just say, you know, it was 1 of the few platform providers in cyber security, the traction we are seeing with the platform is resulting in larger lands So our ARR per customer reached a new company record, And, also, really importantly and, again, this is just the platform working. it is stickier customers. Thank you.

Operator: Our next question comes from John DiFucci with Guggenheim Securities. Please go ahead.

Analyst (John DiFucci): Thank you. Thanks for taking my question. And congrats to the whole team for the new addition, and it is great to have you. Sonalee. Listen. You guys put up really strong ARR this quarter. With growth that accelerated. You pointed that out, but it is accelerated for the first time in more than 3 years. After 3 years of somewhat, you know, moderation, which with the law of large numbers, you would expect But frankly, the growth in new ARR, even if you take into account attrition, was even better than it is been in almost 4 years from our calculations. So, I know you do not guide to ARR. But you maintained your revenue guidance for the year.

And I realize it is early, but how should we be thinking about that given I mean, that ARR is really the best determinant of the future revenue. Thanks.

Sonalee Elizabeth Parekh: Yeah. John, thanks. Thanks so much for the question. And it is great to be here. I am I am thrilled to be here on my first earnings call. So you are absolutely right. We had a great showing on net new ARR this quarter, as you say, The growth was driven both by strong new logo additions, but also strong expansion. And great contributions from our emerging products. So data ARR accelerated in Q1. I already talked about prompt, but that nearly doubled again in Q1. And our cloud ARR accelerated strongly as well. In terms of the overall guide, we did reiterate the guide.

And what I would say there is we are still pretty early in the year, and we still continue to expect positive net new ARR growth for fiscal 27. In terms of the actual revenue contribution on the guide, we did see a fairly back end loaded quarter with some of those larger deals. And Ed, a larger proportion of our bookings are from larger deals. I think we will expect to see a bit more of that back end loading, and that is why you are seeing that from a timing perspective. We still are feeling really confident around net new ARR for the year.

Analyst (John DiFucci): That makes total sense, totally. And I was only gonna ask 1 question. I do not believe it. The second 1 would have been a linearity. You read my mind. Thank you.

Operator: Our next question comes from Fatima Boolani with Citi. Please unmute your line and go ahead.

Ana: Hi, good afternoon. I am on the line.

Operator: We will come back to you at a later point. Our next question comes from Shrenik Kothari with Baird. Please unmute your line and ask your question.

Analyst (Zachary Schneider): Hey, guys. This is Zachary Schneider on for Shrenik Kothari. Thanks for taking the question. So maybe 1 on capital allocation. Now with $800 million-plus in cash, a path towards $100 million-plus in free cash flow generation. No debt. You guys have it seems much more flexibility than you have had historically. So maybe how should we think about capital allocation going forward And are there any changes there in strategy or priorities? Thank you.

Sonalee Elizabeth Parekh: Yeah. Sure. Thanks for the question. So, yeah, we feel really good about where the balance sheet is, a very robust balance sheet. I think our capital allocation priorities really have not changed. So we will continue to focus on organic investments that drive our growth. We will consider inorganic investments, but I would say there is a fairly high bar there. So it would be very selective and would need to be extremely strategic. And then finally, we absolutely will use our strong balance sheet and free cash flow to give us the flexibility and capacity to be able to opportunistically repurchase our shares.

Given the long term potential of our business and, you know, so long as we believe it is a positive ROI initiative, which certainly at current levels we would. So I would say we our capital allocation policy is dynamic. And, you know, opportunistic. And, again, we will do our best to take advantage of any dislocations in the market. And also maintain a strong cash position support our innovation and strategic initiatives from here.

Operator: Great. Thank you. Our next question comes from Richard Poland with Wells Fargo. Please go ahead.

Analyst (Richard Poland): Thanks for taking the question. I guess if you just think about the balance of the reinvestment that you are making I think you quantified it somewhere in the range of $45 million in annualized savings from the reduction I guess as we think about how that flows through the investments and just kind of how you are calibrating, you know, how much drops to the bottom line versus how much gets put back into things like AI. We have this, I guess, just contextualize that the rest of the year?

Sonalee Elizabeth Parekh: Yeah, so why do not I start with that? So, for the full year, we are now guiding to about 700 basis points of year over year operating margin improvement. And as I said earlier, that would imply exiting at an operating margin significantly above that 10%. And we also talked about the desire to balance growth and profitability. And we felt strongly that there were areas where we had high conviction around parts of the market and product where we wanted to reinvest some of those savings. So we talked about AI security, We talked about cloud data. We really feel like those are the right opportunities to go after right now from an ROI perspective.

And we feel like we will be able to deliver both durable growth and operating margin expansion. And still be able to, you know, again, upgrade that operating margin from where we were, a couple of months ago.

Tomer Weingarten: Yeah. I would just add to that. I mean, we have a tremendous R&D and product and technology groups. And for us, when we look at the opportunity ahead, clearly, we want to build more, we want to produce more capability that we believe, can add massive value to the security posture of our customers and at large. So all in all, I mean, in the in the world of today, the ability to build, the ability to push forward versus, you know, maybe a few years ago, a lot of the innovation was coming for other companies through acquisition.

I sincerely think that with the strength of our R and D, with the strength of our talent, we just want to do more and we want to enable them to do more. We want to bring more great people on board, and that is kind of how we are thinking about the philosophy behind our reinvestment.

Operator: Great. Thank you both. Our next question comes from Roger Foley Boyd with UBS.

Analyst (Roger Boyd): Please Awesome. Thanks for the question. Tomer, we continue to hear really strong feedback from the channel on prompt security, and it seems like it is already becoming a pretty material contributor to ARR. Can you talk about what you are seeing with Prompt as maybe the tip of the spear for new engagements? And have you seen Prompt lead to bigger platform deals, including competitive displacements in endpoint or data lake SIM? Thanks.

Tomer Weingarten: Yes. And there is no question. Prompt is delivering that every single enterprise needs right now. And that none of our competitors have. So we are seeing both the natural expansion of our customer base, plus lending bigger with new logos, and even in competitive environments. The ease of use, the seamlessness of the deployment, the time to value. I think all of those are just radically different than anything else that you are finding in the space today. The level of coverage, compliance, governance, everything that everybody's missing right now, is being delivered by what Prompt, you know, can bring to bear.

So all in all, it is a great catalyst for us because pretty much every vector of our go to market motion And at the same time, you can imagine most of our customer state is still under penetrated. They are still not deploying Com. So we are also moving pretty fast to enable Prompt to be absorbed and consumed. By our customer state directly through the platform, and that is gonna unlock more growth opportunities for us in the out years. Thanks very much.

Operator: Our final question of today comes from Fatima Boolani with Citi. Please go ahead.

Analyst (Fatima Boolani): Oh, good afternoon. Thank you so much. For taking my questions and being patient with me today. Sonalee, this 1 is for you, and nice to see you on board here.

Just looking at the deferred revenue and billings performance, I know you do not manage the business to billings, but just as we sort of you know, look at the deferred revenue cadence, Was there anything atypical or different here that happened that just as we noted, some weaker seasonality in some of the growth on the deferred revenue side, and maybe tying it back to some of your commentary with respect to, net retention rate maybe outside of the 100 k ARR cohort and on some of the gross retention rate comments you alluded to earlier. I would love any incremental color on why may we may be saw that come out as seasonally weaker than prior periods.

Thank you.

Sonalee Elizabeth Parekh: Yeah. Sure. So on billings, would say there is nothing specific to call out other than the fact that this metric can move around a bit. Just due to the timing of invoicing. So we tend to focus, and we actually run the business much more around net new ARR as our key operating metric. Where, obviously, we saw a record number this quarter. In terms of GRR, we saw continued stability. it is actually you know, when I first arrived here, of course, I was looking through all the metrics. it is actually been stable for many, many, many quarters.

And I remember seeing that and thinking that is an extremely strong sign just in terms of the stickiness and mission criticality of our platform. Like, when we win a customer, they stay with us. I think up to now where we have seen somewhere just an impact on net retention has been on the expansion side of things. And I think we saw positive traction there with some of our larger customers this quarter, which helped to drive net retention up. And that is something I said, I think in Meta's question, you know, around priorities. it is something that I will be really focused on.

And when I look at, you know, some of the signals you know, as we look forward to coming quarters, that is a metric that I expect to continue to improve. And, again, that is what gives me confidence on the full year guide as well is that will be a support that improving that retention rate. Because, of course, every point we improve on that retention you know, helps it creates a tailwind on revenue. Thank you. I appreciate that.

Operator: Thank you. We have now reached the end of our allotted time for questions. I will turn the call back over to Mr. Weingarten for closing remarks.

Tomer Weingarten: Thank you, everyone, and have a good day.