Profits accelerate while enterprise growth cools
- Q2 FY27 revenue grew 21% to $292 million, with ARR growing 22%.
- The company reported a record 10% non-GAAP operating margin, proving its path to profitability.
- AI security offerings tripled year over year, while the new Flex licensing model quickly exceeded 10% of total ARR.
- Growth in customers with ARR over $100,000 decelerated to 13%, raising concerns about new logo acquisition.
- Total remaining performance obligations jumped 45%, showing strong future commitments from existing customers.
Profits over pace
SentinelOne is proving it can run a sustainable business. Q2 FY27 delivered a record 10% non-GAAP operating margin, up 820 basis points from the prior year. This margin expansion validates the bull case: the company is scaling out of its heavy loss phase and showing real operating leverage.
The platform expansion is working. AI security products like Prompt and Purple AI tripled year over year. At the same time, the new Flex licensing model drove consolidation, crossing 10% of total ARR within a year. Customers are clearly buying more than just the basic endpoint protection.
The bear case centers on a slowing volume of large new customers. The growth of customers spending over $100,000 dropped to 13% year over year in Q2. While total commitments and deal sizes grew, the shrinking rate of new enterprise logos suggests the core endpoint market remains highly competitive.
Subscriptions sold through partners
SentinelOne makes money from subscriptions to its Singularity Platform. Pricing is generally based on the number of agents deployed. The introduction of the Flex licensing model gives customers an easier way to adopt multiple modules across the platform, which helps the company increase its average revenue per user.
The business relies heavily on a land-and-expand strategy. SentinelOne wins a new account with basic protection, then tries to sell additional capabilities over time. This approach depends on partners like resellers, distributors, and managed service providers to bring the software into more accounts.
This model breaks if customers delay renewals, refuse to buy new modules, or shift to a larger bundled competitor. A slowdown in adding large new logos puts more pressure on the company to sell to its existing base.
From endpoint to platform
Endpoint Protection and Response
This is the core product area. It protects laptops, desktops, servers, and other devices, helping security teams detect and respond to attacks.
Singularity Platform
The main platform connects data from endpoints, cloud workloads, and other systems. It uses AI to spot threats and automate responses.
Cloud Security and CNAPP
SentinelOne expanded cloud security through its PingSafe acquisition. This gives customers broader coverage for cloud workloads and application risks.
Purple AI
Purple AI brings generative AI into threat hunting and security operations. Management noted this offering is in hyper growth.
AI Runtime Security
The Prompt Security acquisition added tools to protect enterprise AI systems while they run. This area is seeing rapid early adoption.
Data Pipeline Management
The Observo AI acquisition added data pipeline technology for security data. This helps customers control security data costs and quality.
One segment, global revenue
SentinelOne reports one operating segment. For Q2 FY27, revenue outside the U.S. was 39%, so the mix below shows revenue by geography.
What could break
Large customer growth slows
High impact · High oddsGrowth in customers with ARR over $100,000 fell to 13% in Q2 FY27. If this rate keeps falling, the platform story may not be enough to sustain high valuation multiples.
Restructuring execution
Medium impact · Medium oddsThe company executed a workforce reduction in Q1 to save costs, taking a charge in Q2. Layoffs can hurt morale and sales focus. The company must prove it can grow without adding headcount.
GAAP losses last too long
High impact · Medium oddsSentinelOne has a history of net losses even as non-GAAP profit improves. Investors eventually need a clear path to real GAAP profitability, which includes stock-based compensation.
AI products create new risk
Medium impact · Medium oddsGenerative AI can help security teams, but it can also give flawed results or rely on third-party models. A serious error in an AI security workflow could damage trust.
Channel or enterprise deal delays
Medium impact · Medium oddsSentinelOne depends on channel partners and large enterprise deals. These deals can take time and slip between quarters, especially in a weaker IT spending environment.
In one breath
How does SentinelOne make money?
SentinelOne sells subscriptions to its Singularity cybersecurity platform. Customers usually pay per agent, and SentinelOne tries to grow each account by selling more modules over time.
Is SentinelOne profitable?
SentinelOne reported a record 10% non-GAAP operating margin in Q2 FY27. It still has to prove it can reach and sustain GAAP profitability, which includes more real-world costs.
Why is non-endpoint ARR important?
Non-endpoint ARR shows how much revenue comes from products beyond the original endpoint security base. Cloud, Data, and AI products approach 50% of the total ARR mix, supporting the platform thesis.
What is the biggest debate for SentinelOne stock?
The debate is profit expansion versus slowing enterprise growth. Bulls see better margins and a broader platform, while bears see slower new logo acquisition and a highly competitive endpoint market.
Sources and research notes
This page combines Finn's company research with public filings and other cited materials. The thesis is reviewed when material company information changes; Finn Scores use the latest available scoring data.
- Thesis reviewed
- August 30, 2026
- Score data
- September 27, 2026
- Reviewed by
- Shivam Bharuka
Comparable Software - Infrastructure companies
Companies near SentinelOne, Inc. in Finn's Software - Infrastructure industry ranking.
