Inve US ▾
SS

SentinelOne (S) Q1 FY27 earnings call: guidance and Q&A

Earnings call· Apr 2026 (Q1 FY27)· Information Technology· May 28, 2026

Source: earnings call transcript

Executive summary

SentinelOne Q1 FY27 — Record Net New ARR and Strong Operating Margin Expansion

SentinelOne delivered a solid Q1 FY27, marked by record net new ARR and significant operating margin expansion, demonstrating strong execution and business momentum. The company is strategically streamlining its operations and reinvesting in key growth areas like AI, data, and cloud security, while maintaining a strong balance sheet and commitment to durable, profitable growth. Management expressed confidence in balancing growth with continued margin expansion.

Highlights

5
  • Total ARR growth accelerated to 23% in Q1 FY27.

  • Net new ARR reached a record $44 million in Q1 FY27, a 55% increase year-over-year.

  • Operating margin improved by approximately 550 basis points year-over-year to 4% in Q1 FY27.

  • Earnings per share increased 83% year-over-year to $0.04 in Q1 FY27.

  • Remaining Performance Obligations (RPO) grew 30% to a record $1.5 billion in Q1 FY27.

Concerns

1
  • A workforce optimization initiative impacting approximately 8% of the workforce is expected to incur a one-time restructuring charge of approximately $25 million in Q2 FY27.

Guidance & targets

CategoryTargetConfidence
Full fiscal year 2027 revenue
$1.195 billion and $1.205 billion
high materiality
High
Q2 fiscal year 2027 revenue
$289 million and $291 million
high materiality
High
Full fiscal year 2027 operating income
$115 million and $125 million
high materiality
High
Q2 fiscal year 2027 operating income
$23 million and $25 million
medium materiality
High
Full fiscal year 2027 diluted earnings per share
$0.32 and $0.38
high materiality
High
Q2 fiscal year 2027 earnings per share
$0.06 and $0.08
medium materiality
High
Non-GAAP tax rate
approximately 17%
low materiality
High
Weighted average diluted share count
approximately $347 million
low materiality
High
Weighted average diluted share count
approximately $350 million
low materiality
High

S operating KPIs by quarter

S operating KPIs stated on its earnings calls, by fiscal quarter
KPIThis call Apr 2026 Q1 FY27 Jul 2026 Q2 FY27Change vs prior quarter
Remaining performance obligation (RPO)
$1.5B Our total RPO reached a record $1.5 billion in Q1, a clear validation of the trust we've established with our customers and our commitment to innovation. Source: earnings call transcript
$1.7B Our total RPO reached a record $1.7 billion in Q2, a direct reflection of the mission-critical trust customers place in the Singularity platform. Source: earnings call transcript
+13.3%

Operating figures the company stated on at least two of the calls shown, checked against each call's transcript. Click a figure to read the sentence. A dash means it was not stated that quarter.

Orderbook & backlog

Total RPO $1.5 billion Q1 FY27

30% growth

Remaining Performance Obligations

SentinelOne Flex TCV $200 million Q1 FY27

Total Contract Value (TCV) crossed in 3 quarters since launch.

Product announcements

ProductTypeDetails
Singularity AI Red Teaminglaunch
Purple AI auto investigationsmilestone
Wayfinder Frontier AI serviceslaunch

Deals & partnerships

Level Blue partnership coming years

Expansion of partnership announced at RSA, driving strategic consolidation of their endpoint estate onto the Singularity platform and extending reach across their global customer base.

Google Cloud strategic alliance

Expanded strategic alliance to deliver autonomous security at a global scale. SentinelOne won the 2026 Google Cloud Partner of the Year Award.

AWS Security Hub Extended integration

Singularity platform integration into AWS Security Hub Extended, allowing AWS customers to turn on SentinelOne's AI-powered runtime security directly from their AWS console without new contracts or procurements, using a pay-as-you-go model.

Anthropic partnership

Partnered on the launch of Cloud Security and actively engaged to ensure SentinelOne's role in the ecosystem continues to grow.

[indiscernible] AI partnership

Partnered for early access cyber program, embedding frontier models throughout the platform.

Project Glasswing participation

SentinelOne is a participating vendor in Project Glasswing, validating its approach to AI security.

Mandiant, WWT, KPMG, Buzen partnership

Lead partner correlation for Wayfinder Frontier AI services, fusing multimodal AI with human intelligence.

Risks & headwinds

Workforce optimization initiative and restructuring charges Q2 FY27

Approximately 8% reduction in workforce, resulting in a one-time restructuring charge of approximately $25 million.

Mitigation:Expected to result in approximately $45 million in annualized cost savings, providing financial flexibility to purposefully reinvest in key growth areas (AI, data, cloud, endpoint) and drive significant operating margin expansion.

Evolving macroeconomic environment and geopolitical uncertainties Ongoing

Can influence deal timing and sales cycles across the industry.

Mitigation:Company maintains a solid pipeline, strategic partnership opportunities, and rising contribution from emerging solutions (AI, data, cloud, etc.). Management remains mindful of the environment.

Q&A highlights

Are you seeing a pickup in core endpoint demand, and how do you balance selling the full Singularity portfolio initially versus upselling later?

Tomer Weingarten stated that endpoint remains the most important control plane, especially with AI, driving strong demand for core endpoint and immediate attach of Prompt Security. He noted that AI workloads are expanding to cloud, which is another strong area for demand.

“It's clear that the endpoint remains the most important control plane, especially in the age of AI. We're seeing a lot of focus on how to secure agents, how to secure services that could be impacted by the deployment of more and more AI technologies.”

asked by Meta Marshall · answered by Tomer Weingarten

2 min read 6 chapters

Detailed narrative

AI Security Momentum

AI security ARR nearly doubled again in Q1 FY27, driven by solutions like Prompt Security. The U.S. state government selected SentinelOne for AI infrastructure security, marking one of the first government deals led by AI security. Additionally, an iconic enterprise chose Prompt Security over an incumbent next-gen endpoint vendor, demonstrating technology superiority and opening doors for broader platform displacement.

Autonomous SOC with Purple AI

Purple AI, SentinelOne's agentic SOC solution, is rapidly gaining adoption, with early rollouts showing ARR from Purple AI's end-to-end deployment potentially outgrowing a customer's core endpoint footprint. The general availability of Purple AI auto investigations, delivering human-level reasoning and one-click automation, is empowering customers to respond faster and accelerate detection, leading to a 338% ROI for Purple AI customers according to IDC.

Data Solutions and AI SIEM Traction

Data solutions experienced their fourth consecutive quarter of ARR growth acceleration, fueled by increasing demand for AI SIEM. Notable wins include an iconic luxury brand displacing Splunk with a multiyear commitment to SentinelOne's AI SIEM, and a multinational services enterprise signing a 7-figure expansion, replacing their existing SIEM provider due to superior cost of ownership and machine speed investigations.

IDC found SentinelOne's AI SIEM delivers a 331% 3-year ROI with a 7-month payback period.

Cloud Security Expansion and Runtime Protection

Cloud Security ARR growth accelerated in Q1 FY27, driven by strong adoption of best-of-breed runtime security for both on-prem and cloud environments. One of the world's most valuable private companies significantly expanded its footprint with Singularity Cloud for autonomous AI-powered runtime protection, capable of actively neutralizing AI-based threats across dynamic infrastructure in real time, highlighting the inadequacy of static posture management.

Strategic Partnerships and Ecosystem Expansion

SentinelOne expanded its partnership with Level Blue, the world's largest MSSP, for strategic consolidation of their endpoint estate onto the Singularity platform. The company also announced an expanded strategic alliance with Google Cloud, winning the 2026 Google Cloud Partner of the Year Award.

Furthermore, integration into AWS Security Hub Extended allows AWS customers to seamlessly adopt SentinelOne's AI-powered runtime security directly from their console with a pay-as-you-go model.

Workforce Optimization and Efficiency Initiatives

The company implemented a workforce optimization initiative, resulting in an approximately 8% reduction in its workforce. This strategic move aims to streamline organizational structure, reduce complexity, and enhance agility. The initiative is expected to generate approximately $45 million in annualized cost savings, providing financial flexibility to reinvest in high-conviction growth areas such as AI, data, cloud, and endpoint security.

Summary of the company's earnings call; see how call summaries are prepared. Not investment advice.