Detailed narrative
AI-Native Approach to Cybersecurity
SentinelOne emphasizes its AI-native approach, built on a unified architecture and single control plane, to defend modern infrastructure against AI-driven threats. The company highlights its "Singularity" platform as the autonomous security platform of the future, offering best-in-class capabilities across Endpoint, Cloud, Data, AI SOC, AI EDR, and ADR, all unified by its autonomous runtime engine. This architectural advantage is crucial for securing modern AI infrastructure.
Market-Leading Wins and Consolidation
The company reported increased competitive win rates and expanding net revenue retention among its largest customers, with 7- and 8-figure customer wins becoming consistent. Cross-platform adoption drove record ARR per customer, growing double digits YoY. Enterprises are consolidating multiple point products onto the Singularity platform, exemplified by a leading aerospace and defense firm replacing a primary competitor across Endpoint, Data, Cloud, and AI Security.
Hypergrowth in AI Security Offerings
Prompt Security remains SentinelOne's fastest-growing platform solution, with ARR from AI security offerings (Prompt and Purple AI) tripling YoY in Q2. The company expects this category to become its next 9-figure ARR category. Prompt Security is leading the AI security category, securing AI models, agentic guardrails, and enterprise AI usage, with Bell Canada selecting it for critical network protection. Purple AI, an AI SOC engine, is also seeing increased adoption, with IDC validating a 338% 3-year ROI for its customers.
Accelerating Momentum in Data and Cloud Solutions
Q2 marked the fifth consecutive quarter of ARR growth acceleration for Data Solutions, driven by the hybrid SOC trend and the need to consolidate and optimize security data. SentinelOne's AI SIEM delivers significant ROI, faster queries, and broader threat coverage. Cloud Security also saw its third consecutive quarter of ARR growth acceleration, fueled by the massive AI infrastructure build-out and demand for real-time runtime protection. A major American tech giant expanded its SentinelOne cloud deployment, citing superior performance.
Sovereign Defense and Partner Ecosystem
SentinelOne highlights its unique capability for sovereign defense, allowing deployment in cloud, on-premises, and air-gapped environments, which is critical for institutions maintaining data residency. An aerospace and defense giant selected SentinelOne for its air-gapped environment. The partner ecosystem, including MSSPs like LevelBlue, serves as a force multiplier, expanding global reach and driving efficient scale. Hyperscaler alliances, such as with AWS, are also expanding for unified AI governance.
SentinelOne Flex Driving Platform Adoption
SentinelOne Flex, launched within the last year, now accounts for over 10% of total ARR, demonstrating strong traction with new and existing customers. This offering streamlines purchasing and expansion across the Singularity platform, aligning with evolving security priorities and reducing friction for adding new capabilities, thereby strengthening consolidation and long-term partnerships.