SentinelOne Inc Earnings - Q2 2027 Analysis & Highlights
SentinelOne delivered strong Q2 FY2027 results with record profitability and net new ARR growth, driven by platform consolidation momentum, accelerating AI security adoption, and expanding margins, while raising full-year guidance amid a transformative moment in cybersecurity defined by AI-native threats and autonomous defense requirements.
Key Financial Results
Revenue grew 21% year-over-year to $292 million, exceeding the top end of guidance range.
Total ARR grew 22% year-over-year, with record second quarter net new ARR of $56 million, growing 4% year-over-year.
International markets represented 39% of total revenue, demonstrating growing global footprint.
ARR per customer reached a new company record, led by strong momentum at the top end of the market.
Gross margin remained strong, highlighting healthy platform unit economics and scale efficiencies.
Operating margin reached a record 10%, representing 820 basis points of expansion year-over-year, above the high end of guidance range.
Sales and marketing expense as a percentage of revenue reached 34%, a 900-plus-basis-point year-over-year improvement.
Earnings per share of $0.08 exceeded expectations and doubled year-over-year.
Adjusted free cash flow margin on a trailing 12-month basis reached 6%, an improvement of roughly 400 basis points year-over-year.
Remaining performance obligation (RPO) growth accelerated to 45% in Q2, with total RPO reaching a record $1.7 billion.
Business Segment Results
AI security offerings (Prompt and Purple AI) tripled year-over-year in Q2, with ARR expected to become the next nine-figure ARR category following endpoint, cloud, data, and Wayfinder.
Data solutions marked the fifth consecutive quarter of ARR growth acceleration.
Cloud security marked the third consecutive quarter of ARR growth acceleration, driven by strong adoption of runtime cloud security covering both cloud and on-prem environments.
Endpoint continues to grow, particularly through large-scale consolidation deals and strategic partnerships with MSSPs.
Prompt Security remains the fastest growing platform solution, with strong demand across model security, agentic guardrails, and enterprise AI usage.
Purple AI continues to redefine the AI SOC, with an increasing number of new customers landing with Purple AI from day one.
SentinelOne Flex exceeded 10% of total ARR within a year of its launch, with strong traction from both new and existing customers.
Capital Allocation
Cash, cash equivalents and investments totaled $813 million with no debt at quarter end.
Company employs a measured and dynamic capital allocation policy striking a disciplined balance between investing in growth opportunities organically and inorganically and returning cash to shareholders via opportunistic share buybacks.
Industry Trends and Dynamics
AI is transforming the way software is built, businesses operate, and adversaries attack, with the speed, scale, and sophistication of AI models making the threat landscape increasingly complex.
Cybersecurity is at a fork in the road, requiring real-time connected intelligence that operates at machine speed rather than bundled fragmented products or disjointed platforms.
Offensive AI capabilities are compressing the time between vulnerability discovery and weaponization, with frontier models advancing from basic vulnerability discovery to reasoning through multistage attack paths and executing autonomous cyberattacks.
Autonomous agents introduce unprecedented operational risk, as agents execute code, call APIs, handle credentials, and interact with infrastructure, often finding execution paths their developers never intended.
Nearly half of the endpoint security sector still relies on legacy antivirus, creating a massive displacement opportunity.
The future SOC will be hybrid, with enterprises continuing to operate across diverse security tools and data sources while increasingly adopting AI-driven investigation and automation.
Sovereign AI security is becoming an operational imperative, as public and private institutions deploy private AI stacks to maintain data residency.
Competitive Landscape
SentinelOne's competitive win rates increased sequentially and year-over-year, anchored by growing platform momentum and consolidation wins.
Seven- and eight-figure customer wins are becoming consistent, with cross-platform adoption driving record ARR per customer.
A leading aerospace and defense enterprise chose Singularity to execute a complete rip and replace of a primary competitor, consolidating endpoint, data, cloud as well as AI security with SentinelOne.
SentinelOne continues to win stand-alone AI security deals from direct competitors, serving as a strategic entry point for broader platform expansion.
SentinelOne is the only modern security platform that can be deployed to cloud, on premises, in air-gapped environments, delivering high-velocity runtime protection wherever the AI workload resides.
SentinelOne was named a Visionary Leader in the 2026 Frost Radar for cloud workload protection platforms, recognized for innovation and growth against a field of more than 45 qualified vendors.
IDC independently validated a 338% three-year ROI for Purple AI customers, 331% three-year ROI for AI SIEM, and 301% three-year ROI for Singularity Endpoint.
Macroeconomic Environment
Recent market shifts, referred to as cybersecurity's Mythos moment, are refocusing enterprise boardrooms on systemic AI security.
Modernizing cybersecurity infrastructure and enterprise budget deployments are multi-quarter and multiyear shifts that materialize over time.
Growth Opportunities and Strategies
SentinelOne is positioned as the premier platform to defend both traditional endpoints and the emerging AI stack, as cybersecurity shifts from detecting threats to governing autonomous agents.
The company is extending its global reach and accelerating platform adoption through its partner ecosystem, with Singularity's multi-tenant architecture, centralized management, and native automation empowering service providers to efficiently manage vast customer estates.
LevelBlue, the world's largest managed security provider, selected SentinelOne to scale its managed security service offerings, with expansion as a premier remediation partner for Wayfinder Frontier AI Services.
SentinelOne expanded AWS collaboration around unified AI governance, integrating AI security capabilities directly with Amazon Bedrock AgentCore to deliver real-time runtime guardrails for autonomous agents.
SentinelOne is serving as a security partner in initiatives like Glasswing and Daybreak, helping establish the company as a trusted runtime security layer for emerging AI-native software.
The company is scaling its go-to-market with more innovation and marketing investment in AI security products, with majority of innovation going towards these products.
SentinelOne is putting more capabilities directly into the platform for customers to consume completely by themselves, representing a new motion for the company.
Financial Guidance and Outlook
Full fiscal year 2027 revenue guidance raised to a range of $1.202 billion to $1.207 billion, representing 20% year-over-year growth at the midpoint.
Q3 revenue expected in the range of $309 million to $311 million, representing 20% year-over-year growth at the midpoint.
Full fiscal 2027 operating income outlook raised to a range of $124 million to $128 million, representing an operating margin of approximately 10% at the midpoint, an improvement of approximately 700 basis points over fiscal year 2026.
Q3 operating income expected in the range of $38 million to $40 million, representing an operating margin of approximately 13% at the midpoint.
Full year fiscal 2027 fully diluted earnings per share expected in the range of $0.30 to $0.32.
Q3 earnings per share expected in the range of $0.08 to $0.09.
Non-GAAP tax rate expected to be approximately 17% for fiscal year 2027.
Weighted average diluted share count expected to be approximately 370 million for Q3 and 361 million for the full year.
Company expects net new ARR to grow year-over-year for the full year, though specific guidance is not provided.
Margins will continue to expand in the second half of the year, with improvement in Q3 sequentially and improvement in Q4, with Q4 exit rate significantly higher than current levels.
Company has given itself cushion for reinvestment in products and go-to-market motions, fully contemplated in the raised guidance.
Platform and Technology Leadership
Singularity is positioned as the autonomous security platform of the future, with every platform solution unified by an industry-leading autonomous runtime engine and delivered via a single pane of glass.
Machine speed runtime protection is fundamental to platform architecture, with AI security growth and contribution indicating SentinelOne is leading in this fast-moving category.
SentinelOne's AI-native EDR foundation combines years of technology leadership in behavioral detection and autonomous response, positioning the company to defend both traditional endpoints and the emerging AI stack.
The company's proprietary behavioral AI engine was built to analyze anomalies and intercept malicious execution in real time.
SentinelOne's runtime foundation gives the company the unique ability to map behavior to action, making it the essential platform for the AI era.
