SentinelOne Inc Earnings - Q1 2026 Analysis & Highlights

SentinelOne delivered strong Q1 FY2027 results with accelerating ARR growth and significant margin expansion, driven by platform consolidation and AI security momentum, while implementing workforce optimization and maintaining confidence in full-year guidance despite macroeconomic uncertainties.

Key Financial Results

  • Revenue grew 21% year-over-year to $277 million in Q1, with sequential acceleration.
  • Total ARR growth accelerated to 23% in Q1, with $44 million in net new ARR representing a 55% year-over-year increase, setting a new company record.
  • International markets revenue grew 25% and represented 39% of total revenue, demonstrating strong global demand.
  • Gross margin remained strong, highlighting healthy platform unit economics and scale efficiencies.
  • Operating margin of 4% exceeded expectations and represented an improvement of approximately 550 basis points year-over-year.
  • Earnings per share of $0.04 exceeded expectations and represented an improvement of 83% year-over-year.
  • Adjusted free cash flow margin was 6.5% on a trailing 12-month basis, representing an improvement of about 440 basis points year-over-year.
  • ARR per customer reached a new company record, led by strong momentum in the $100,000+ ARR cohort which grew 17% year-over-year.
  • Remaining performance obligations (RPO) accelerated to 30% growth with total RPO reaching a record $1.5 billion.
  • Cash position of $812 million in cash, cash equivalents and investments with no debt.
  • Business Segment Results

  • Non-endpoint solutions approached 50% of total ARR for the first time, driven by accelerated growth in AI security, data, and cloud solutions.
  • AI security ARR nearly doubled again in Q1, with Prompt Security standing out as the only enterprise-grade, scalable solution for securing AI at scale.
  • Data solutions marked the fourth consecutive quarter of ARR growth acceleration, with enterprises seeking unified visibility and autonomous response with superior unit economics compared to legacy alternatives.
  • Cloud security ARR growth accelerated in Q1, driven by strong adoption of runtime security covering both on-premises and cloud environments.
  • SentinelOne Flex crossed $200 million in total contract value (TCV) in just three quarters of its launch, with increasing contributions from large deals.
  • Purple AI agentic SOC solution is rapidly becoming the bedrock of modern security operations, with early rollouts showing instances where Purple AI ARR can outgrow a customer's core endpoint footprint.
  • Capital Allocation

  • Capital allocation priorities remain focused on organic investments that drive growth, with a high bar for inorganic investments requiring strategic fit.
  • Company will opportunistically repurchase shares given the long-term potential of the business and positive ROI at current levels.
  • Strong balance sheet provides flexibility to support innovation and strategic initiatives while maintaining capacity for opportunistic market actions.
  • Approximately $45 million in annualized cost savings expected from the workforce optimization initiative, providing financial flexibility to reinvest in key growth areas.
  • Industry Trends and Dynamics

  • AI security is the fastest growing segment in cybersecurity, growing more than 70% year-over-year according to Gartner, representing a massive market opportunity.
  • Frontier AI models are rapidly changing cyber defense, allowing adversaries to execute AI-based attacks faster than human teams can react.
  • AI is fundamentally expanding the attack surface, creating new security categories, accelerating customer urgency, and opening growth vectors still in early stages.
  • Nearly half of the existing endpoint sector is still using legacy antivirus solutions, representing a clear opportunity for continued market share gains.
  • Static cloud visibility and posture management are insufficient for securing dynamic cloud environments; runtime security is increasingly needed.
  • Supply chain attacks are becoming more sophisticated, with exploit-free attacks designed to bypass traditional security controls and move at machine speed.
  • Competitive Landscape

  • SentinelOne maintains solid win rates across all competitive situations and is gaining mindshare and market share among customers and partners.
  • Customers of all sizes, especially large enterprises, are increasingly recognizing SentinelOne's AI advantage.
  • Company is winning standalone AI security deals from customers of direct competitors, serving as a strategic entry point to expand broader market exposure.
  • SentinelOne displaced Splunk with a multiyear commitment from an iconic luxury brand for AI SIEM as their dedicated security data platform.
  • SentinelOne's AI SIEM delivers 331% three-year ROI with only a seven-month payback period, with customers seeing 70% faster queries, 75% faster investigations, and four times the threat coverage.
  • IDC Business Value study found Purple AI customers achieve 338% ROI, with human-level reasoning at scale providing one-click automation with clear verdicts in seconds.
  • Endpoint remains the ultimate control plane for comprehensive AI security, providing deep foundational visibility at the point of execution.
  • SentinelOne has structural advantages in securing Mac and Linux systems, where AI compute is rapidly growing and many competitors remain dependent on Windows-only environments.
  • Macroeconomic Environment

  • Company continues to be mindful of the evolving macroeconomic environment and geopolitical uncertainties, which can influence deal timing and sales cycles across the industry.
  • Growth Opportunities and Strategies

  • Platform strategy is showing solid traction with clear technology leadership across AI, data, cloud, and endpoint domains.
  • Enterprises cannot defend against AI-driven threats by consolidating onto legacy platforms; what is needed is a natively unified, AI-driven data and security architecture.
  • Singularity AI Red Teaming launched in May, purpose-built to secure AI applications from the inside-out by autonomously stress testing against real-world attack scenarios.
  • Purple AI Auto-Investigations announced as general availability, representing a major milestone toward delivering a fully autonomous SOC.
  • Wayfinder Frontier AI Services launched in Q1 as a lead partner coalition including Mandiant, WWT, KPMG and Booz Allen, fusing multimodal AI with human intelligence.
  • Deep relationships with frontier AI labs including partnerships with Anthropic on Cloud Security and OpenAI's early access cyber program, embedding frontier models throughout the platform.
  • Company is a participating vendor in Project Glasswing, validating the approach being built toward AI security.
  • Expanded partnership with LevelBlue, the world's largest MSSP, driving strategic consolidation of their endpoint estate onto the Singularity Platform.
  • Expanded strategic alliance with Google Cloud to deliver autonomous security at global scale, winning the 2026 Google Cloud Partner of the Year award.
  • Singularity Platform integration into AWS Security Hub Extended removes traditional procurement barriers, allowing AWS customers to turn on AI-powered runtime security in minutes.
  • Usage-based metering model expansion to capture full value of customer usage of emerging solutions like security data lake and Purple AI.
  • Workforce optimization initiative reducing approximately 8% of workforce to reduce complexity, raise performance bar, and build a leaner, more agile organization.
  • Company-wide rollout of frontier models is delivering meaningful productivity gains, with work previously taking months now completed in weeks or days.
  • Tightening sales coverage and driving greater productivity across the sales organization to improve operating leverage, sales efficiency, and execution velocity.
  • Financial Guidance and Outlook

  • Full fiscal year 2027 revenue guidance of $1.195 billion to $1.205 billion, representing 20% year-over-year growth at the midpoint.
  • Q2 revenue guidance of $289 million to $291 million, representing 20% year-over-year growth at the midpoint.
  • Full fiscal year 2027 operating income guidance raised to $115 million to $125 million, representing an operating margin of 10% at the midpoint and a 650-basis-point increase over fiscal year 2026.
  • Q2 operating income guidance of $23 million to $25 million, representing an operating margin of 8% at the midpoint.
  • Full-year fiscal 2027 fully diluted earnings per share guidance of $0.32 to $0.38, representing $0.35 at the midpoint.
  • Q2 earnings per share guidance of $0.06 to $0.08.
  • Non-GAAP tax rate expected at approximately 17% for fiscal year 2027.
  • Weighted average diluted share count expected at approximately 347 million for Q2 and 350 million for the full year.
  • One-time restructuring charge of approximately $25 million expected in Q2, excluded from non-GAAP results.
  • Outlook supported by solid pipeline, strategic partnership opportunities, and rising contribution of emerging solutions including AI, data, cloud and others.
  • Company expects continued positive net new ARR growth for fiscal 2027.
  • Gross retention rate remained stable, underscoring the mission-critical nature of the Singularity Platform.
  • Dollar-based net retention rate for $100,000+ ARR customers improved both sequentially and year-over-year, driven by continued success in multi-product platform adoption.
  • Operational Performance and Execution

  • Fourth consecutive quarter of positive net new ARR growth, exceeding expectations and showcasing execution consistency and strong business momentum.
  • Cross-platform adoption drove record ARR per customer, signifying momentum in contributions across platform solutions.
  • Healthy balance maintained between new logo acquisition and existing customer expansion, allowing market share increases while retaining significant future expansion potential.
  • Partner ecosystem serving as a force multiplier, expanding global reach and driving broader platform adoption.
  • MSSP ecosystem benefits from Singularity Platform's AI-native, multi-tenancy and remote management capabilities, providing structural competitive advantage.