SentinelOne, Inc. (S): Business Model Canvas [Dec-2025 Updated]

You're looking for the real story behind SentinelOne, Inc.'s growth, and honestly, the canvas shows a clear shift: this is now an autonomous AI platform play, not just endpoint defense. As someone who spent a decade leading analyst teams, I can tell you the numbers back up the ambition: their Annual Recurring Revenue reached $920.1 million as of January 2025, supported by a strong 110% dollar-based net retention rate in the last fiscal year. We need to map out exactly how their Key Resources, like the proprietary AI models, feed into their Value Propositions of operational efficiency for their 1,411 large enterprise customers. Keep reading below to see the precise structure driving that $821.5 million in total revenue for fiscal year 2025.

SentinelOne, Inc. (S) - Canvas Business Model: Key Partnerships

You're looking at how SentinelOne, Inc. scales its AI-native security platform beyond direct sales, and partnerships are defintely a huge lever for that. The ecosystem is built around hyperscalers, service providers, and hardware OEMs to embed the Singularity Platform everywhere.

Cloud providers like AWS and Google Cloud for integrations and marketplace sales are central to the strategy. SentinelOne was recognized as the 2025 NAM Cloud Partner of the Year by AWS. This deep co-building collaboration has resulted in integrations across more than 20 key AWS services. New offerings, such as Singularity Hyperautomation for AWS Security Incident Response, are now available on AWS Marketplace, directly accessing cloud and AI security budgets. Furthermore, SentinelOne introduced the Wayfinder Threat Detection & Response suite, which is powered in part by Google Threat Intelligence. SentinelOne will use data from Google's Gemini 1.5 Pro and Flash models to further enhance its Purple AI capabilities.

The adoption of AI features is strong across the board; for instance, Purple AI achieved a 30% attach rate for all licenses sold during the second quarter of fiscal year 2025.

Global System Integrators (GSIs) and Managed Security Service Providers (MSSPs) are crucial for delivering managed services and large-scale deployments. The company recognized top MSSP partners at its 2025 PartnerOne Summits, naming Coalition the 2025 NAM MSSP Partner of the Year and SNS the 2025 EMEA MSSP Partner of the Year. This channel focus supports the overall growth; SentinelOne, Inc. reported 1,572 customers paying more than $100,000 annually as of the third quarter of fiscal year 2025.

Incident Response (IR) firms provide the critical last-mile service for customers facing active breaches, leveraging the platform for rapid containment and remediation. SentinelOne, Inc. recognizes these firms for their expertise in deploying the Singularity Platform during high-stakes crises.

Here's a look at some recognized IR partners:

The partnership with Arete, for example, has protected millions of jobs since 2018.

OEM partners like Lenovo to expand market reach and pre-install solutions offer massive scale. SentinelOne, Inc. has a multi-year collaboration with Lenovo, a vendor that sells tens of millions of devices annually. This deal embeds the Singularity Platform and Purple AI into new Lenovo PC shipments, expanding its ThinkShield security portfolio. As a result of this OEM strategy, SentinelOne, Inc. is scaling AI-powered security to millions of PCs and servers globally. Lenovo is also building a new Managed Detection and Response (MDR) service using the Singularity Platform as its foundation.

These channel and OEM efforts contribute to the top-line performance; SentinelOne, Inc.'s Annual Recurring Revenue (ARR) reached $1.06 billion as of the third quarter of fiscal year 2025, representing 22.8% year-over-year growth.

• Cloud Marketplace availability helps drive platform expansion.
• IR partners reduce incident response times, with Purple AI reportedly reducing response times by up to 60%.
• The overall cybersecurity market spending is projected to reach $287.6 billion by 2029.
• SentinelOne's revenue growth of 22% in Q2 2025 is roughly twice the projected market growth rate of 11%.

Finance: review the Q4 2025 cash flow projection against the Q3 2025 Free Cash Flow of $15.9 million by next Tuesday.

SentinelOne, Inc. (S) - Canvas Business Model: Key Activities

You're looking at the core actions SentinelOne, Inc. takes to run and grow its AI-native security business as of late 2025. These aren't just ideas; they are the engine room activities backed by real spending and measurable results.

Continuous AI-native platform development (Singularity, Purple AI)

SentinelOne, Inc. focuses heavily on advancing its core Singularity Platform, with Purple AI serving as the agentic security analyst. This development is reflected in significant Research and Development spending. For the twelve months ending July 31, 2025, Research and Development expenses reached $0.296B, marking a 28.5% increase year-over-year. The platform's AI capabilities are central to its value proposition.

The company has been recognized for this development, being named a Leader in the 2025 Gartner Magic Quadrant for Endpoint Protection Platforms for the fifth consecutive year. Furthermore, the Purple AI Model Context Protocol (MCP) Server is now Generally Available, allowing secure integration with any AI framework.

Here are some performance metrics tied to the platform's AI capabilities:

Strategic acquisitions like Observo AI for data pipeline technology

A key activity is integrating strategic technology through mergers and acquisitions to solve data challenges. SentinelOne, Inc. announced its intent to acquire Observo AI, a data streaming platform, for approximately $225 million in cash and stock. This deal is expected to close in the third quarter of fiscal year 2026.

The goal of this integration is to enhance the Singularity Platform's data foundation, allowing the Observo AI pipelines to enrich and filter data in real-time, potentially cutting data volumes by up to 80% before storage or analysis. This directly addresses the growing security data volume problem, which is a major operational challenge for security operations centers.

Sales and marketing to acquire large enterprise customers

Driving revenue growth through sales and marketing is a primary operational focus. For the trailing twelve months ending January 31, 2025 (Fiscal Year 2025), Sales & Marketing costs were $487.2 million, representing 52% of total expenses for that period. More recently, the GAAP Sales and Marketing expense for the second quarter of fiscal year 2026 was $127,879 (in thousands).

This investment supports customer acquisition and expansion, as evidenced by the growth in Annualized Recurring Revenue (ARR). As of October 31, 2025 (Q3 FY26), ARR stood at $1,055.3 million, a 23% increase year-over-year. The company reported having over 14,000 direct customers as of Q4 Fiscal Year 2025.

Key customer growth statistics include:

• Customers with ARR of $100,000 or more grew 23% year-over-year as of July 31, 2025.
• Customers with ARR exceeding $100,000 marked a 24% year-over-year increase in Q3 2025.
• The growth in customers with $100K+ ARR was approximately 50% as of a recent presentation date.

Maintaining FedRAMP High Authorization for regulated sectors

A critical activity for serving the public sector is maintaining high-level government compliance. SentinelOne, Inc. announced in May 2025 that its Purple AI, Singularity Cloud Security (CNAPP), and Singularity Hyperautomation achieved Federal Risk and Authorization Management Program (FedRAMP) authorization at the High Impact Level.

This authorization is significant because it is the first time a cybersecurity AI analyst and a unified platform delivering Endpoint Detection and Response (EDR), Security Information and Event Management (SIEM), and CNAPP capabilities have received this status. This designation enables SentinelOne, Inc. to cater to:

• U.S. Federal agencies.
• The Public Sector.
• The Defense Industrial Base (DIB).
• Critical Infrastructure sectors.

These authorized services build upon the existing FedRAMP High-Authorized Singularity Platform and Singularity Data Lake.

SentinelOne, Inc. (S) - Canvas Business Model: Key Resources

You're building a security stack on the foundation of what SentinelOne, Inc. brings to the table. As a seasoned analyst, I can tell you the tangible assets-the Key Resources-are what truly underpin their valuation and competitive moat as of late 2025. These aren't just abstract concepts; they are concrete technological and financial pillars.

The Singularity Platform Architecture

The core resource is the Singularity Platform itself. This is their unified, single-agent architecture designed to cover endpoint, cloud workloads, and identity security from one console. This architectural choice is a key differentiator, allowing for data integration that competitors often struggle to match.

The platform's effectiveness is reflected in its financial performance and market recognition:

• The platform achieved a GAAP gross margin of 74% for the full fiscal year 2025.
• Annualized Recurring Revenue (ARR) reached $920.1 million as of January 31, 2025.
• By October 31, 2025, ARR had grown to $1.06 billion year-over-year.
• SentinelOne was named a Leader in the 2025 Gartner Magic Quadrant for Endpoint Protection Platforms for the fifth consecutive year.

Proprietary AI/ML Models

The intelligence layer running on the Singularity Platform is arguably the most valuable intangible asset. SentinelOne has heavily invested in proprietary machine learning models that enable autonomous response, which is critical in an environment where threats move at machine speed. This technology is patented, covering everything from their unique storyline logic to on-device remediation capabilities.

Here's how their AI features are translating into customer value and product adoption:

The reliance on their own models, which can run on the endpoint, is a key resource that helps them solve for air-gapped environments, unlike competitors that depend heavily on cloud lookups. Honestly, this on-device intelligence is what separates the leaders from the laggards in modern EDR.

Strong Balance Sheet

Liquidity provides the runway for continued R&D and market expansion. You need to know they can fund their operations while chasing growth. As of the end of the fiscal year 2025, SentinelOne, Inc. maintained a solid financial footing.

The key figure here is the cash position:

• Cash, cash equivalents, and investments totaled $1.1 billion as of January 31, 2025.

This substantial reserve gives management the flexibility to invest in platform expansion, like the acquisition of Prompt Security to secure Large Language Model (LLM) interactions, and to navigate competitive pressures. They also achieved a key milestone, delivering positive free cash flow on a trailing-twelve-month basis as of the end of Q3 FY2026.

Elite Cybersecurity Professionals for Managed Services (Wayfinder)

While the platform is automated, the human element remains a critical, high-value resource, especially for customers needing 24/7 coverage or specialized incident response. SentinelOne, Inc. formalized this with the introduction of the Wayfinder Threat Detection & Response suite, unveiled in November 2025.

This resource is defined by the expertise they deploy, which is now explicitly combined with external threat intelligence:

• Wayfinder embodies the fusion of agentic AI, elite human expertise, and market-leading threat intelligence from Google Threat Intelligence.
• The service offerings include Managed Detection & Response (MDR) that provides 24/7/365 expert coverage across endpoints, cloud, and identities.
• The team structure is designed to deliver end-to-end coverage, spanning proactive preparation through to detection, investigation, response, and recovery.

If onboarding takes 14+ days, churn risk rises, so having these expert teams ready to deploy via Wayfinder is a necessary resource to ensure rapid customer success and adoption. Finance: draft 13-week cash view by Friday.

SentinelOne, Inc. (S) - Canvas Business Model: Value Propositions

You're looking at the core reasons customers choose SentinelOne over other options in the crowded security space. It boils down to speed, consolidation, and automation that directly impacts the bottom line and the stress level of your security team.

Autonomous security: Real-time threat response without human intervention.

SentinelOne's value proposition here is built on its patented AI models that act instantly. This is critical when you consider the threat landscape; for example, ransomware accounted for 35% of all attacks, an increase of 84% over the previous year in one reported period leading up to 2025. The platform's core design is to fight machine with machine, providing autonomous prevention, detection, and response across endpoints, cloud workloads, and identity systems. The proof of concept for this capability is strong, as SentinelOne achieved a 100% score in the Detection category in the 2024 MITRE ATT&K Evaluations: Enterprise. Furthermore, the AI-powered Purple AI, which acts as an AI security analyst, has been cited as reducing incident response times by up to 60%.

Unified XDR platform: Consolidates endpoint, cloud, and identity security.

The market is moving away from tool sprawl, and SentinelOne's unified architecture is a key selling point. The Singularity platform merges native endpoint, cloud, and identity security, along with SIEM capabilities, all enhanced by AI. This consolidation is translating directly into customer purchasing decisions. Roughly 50 percent of SentinelOne's bookings during its latest reported quarter came from emerging products outside of core endpoint security, showing major adoption of the broader platform. The AI SIEM and data analytics business alone surpassed $100 million in Annualized Recurring Revenue (ARR) in Q1 2025. The platform's XDR capabilities are recognized, as SentinelOne was named a Leader in the 2025 IDC MarketScape for Worldwide Extended Detection and Response (XDR) Software, and a 2025 Customers' Choice in the Gartner Peer Insights 'Voice of the Customer' for XDR report, based on reviews from 144 users.

Here's a quick look at the platform's growing footprint as of late 2025:

Operational efficiency: Reduces security operations center (SOC) workload with AI.

The focus here is on making the existing security team more effective, which is vital given the reported cybersecurity skills gap. The AI-driven tools are designed to handle the high volume of alerts. For instance, the Purple AI agentic SOC analyst capability speeds up threat hunting, triage, and reporting. This directly addresses the need for efficiency, as the platform's overall design helps reduce the signal-to-noise ratio in alerts. The company's non-GAAP operating margin improved significantly to 7% in Q3 FY2026, up from negative 5% in the prior year period, suggesting internal operational leverage is being realized alongside customer efficiency gains.

Cost optimization: Observo AI integration helps reduce security data costs.

The financial benefit extends beyond just preventing breaches; it involves managing the massive data volumes inherent in modern security. SentinelOne is positioning its Data Lake and AI SIEM to integrate with third-party data lakes without forcing a full migration, a feature that helped a Fortune 500 retailer replace Splunk, citing cost reduction. While specific cost savings figures tied directly to the Observo AI integration aren't public, the broader impact of AI automation is quantified: organizations extensively using security AI and automation can save an average of $2.22 million on data breach costs. Considering the average cost of a data breach in 2025 was reported at $4.8 million, that potential saving is a concrete value driver. The company's Free Cash Flow turned positive at $15.9 million in Q3 CY2025, showing a tangible shift toward financial discipline.

• Non-GAAP Gross Margin reached 79% in the latest reported quarter.
• Non-GAAP Operating Margin improved to 7% in Q3 FY2026.
• The company reported $1.1 billion in cash, cash equivalents, and investments as of January 31, 2025.

Finance: draft 13-week cash view by Friday.

SentinelOne, Inc. (S) - Canvas Business Model: Customer Relationships

You're looking at how SentinelOne, Inc. keeps its customers engaged and growing their spend, which is key for any subscription business. The relationship strategy blends direct, high-touch engagement for the biggest accounts with a massive partner network for scale and service delivery.

Dedicated enterprise sales teams for high-touch, large-account management.

SentinelOne, Inc. uses direct sales teams to engage directly with enterprise clients, offering customized solutions. This segment is structured to handle complex sales cycles, evidenced by job roles like Enterprise Sales Representative and Director of Sales, which focus on running a sophisticated sales process from prospecting to closure in strategic accounts. This direct approach is designed for rapid prospect engagement and building lasting relationships with large organizations.

• Direct sales efforts are segmented by customer size for efficiency.
• Enterprise Account Executives are tasked with building strategic partnerships with VARs and MSPs to drive pipeline.
• The company is focused on securing an increasing number of businesses of all sizes, including large enterprises and federal agencies.

Partner-led service delivery and support through the PartnerOne ecosystem.

Service delivery is heavily reliant on the PartnerOne ecosystem, which SentinelOne, Inc. launched its Global PartnerOne Program for in April 2025. This ecosystem is built on a partner-first philosophy, recognizing that strong partnerships drive customer value. The program is structured around four specialized tracks to meet partners where they are, ensuring service delivery is consistent and scalable.

The key tracks supporting service delivery include:

• Manage: Designed for MSPs, MSSPs, and MDRs to integrate SentinelOne, Inc.'s technology into their offerings for scaled, automated customer protection.
• Deliver: For system integrators and service providers who offer hands-on security expertise.

Partners are instrumental in delivering the power of SentinelOne, Inc.'s technology to customers globally.

Subscription-based model with high dollar-based net retention (110% in FY2025).

The subscription nature of the business is validated by strong metrics showing existing customers expand their usage. While the goal for fiscal year 2025 was cited as 110%, the latest confirmed real-life figure for Dollar-Based Net Retention Rate (NRR) from the prior fiscal year (FY2024) was approximately 115%. This metric, which measures the percentage change in Annual Recurring Revenue (ARR) from the existing customer base, indicates that customers are not only staying but significantly increasing their spending year-over-year. The growth in high-value customers supports this expansion story.

Here's a look at the growth in the high-value customer segment:

Also, the total Annualized Recurring Revenue (ARR) reached $1,055.3 million as of October 31, 2025, showing continued subscription momentum.

Continuous product innovation influenced by customer feedback.

SentinelOne, Inc. maintains customer relationships by continuously evolving its platform, which is driven by the need to match the advanced threat landscape. The company is pioneering fully autonomous, agentic AI workflows, which is a direct response to the market's need for automated defense. This innovation cycle is supported by the ecosystem, as seen in the launch of the Global PartnerOne Program, which is designed to empower partners to bring new capabilities and services to market faster. The platform's ability to ingest data and leverage patented AI models is central to delivering autonomous protection that customers rely on.

SentinelOne, Inc. (S) - Canvas Business Model: Channels

You're looking at how SentinelOne gets its platform into the hands of customers, which is a mix of deep partner relationships and direct enterprise selling. The strategy is clearly leaning into making partners the primary engine for scale, especially as the platform expands beyond just endpoint detection and response (EDR).

Indirect Sales via a Global Network of Resellers and MSSPs

SentinelOne is heavily focused on expanding its Managed Security Service Provider (MSSP) ecosystem. The company views agentic AI as a massive opportunity for these partners, suggesting that MSSPs can now manage the entire enterprise security stack, not just EDR, representing a potential 10X opportunity for each provider. SentinelOne is actively investing in enablement for its MSSP partners on technologies like CNAP and Purple AI. This channel is critical for reaching the mid-market and SMB segments, while also supporting enterprise penetration.

The commitment to the channel is evident in partner recognition events, such as the 2025 APJ PartnerOne Summit Awards, which honored specific MSSP and IR (Incident Response) partners across various regions. The company is making its partner program, the Flex program, more lucrative for channel partners to encourage selling the full platform, which now boasts about 30 different capabilities.

• Partnerships include major players like Pax8 and ConnectWise for service delivery and procurement.
• The company is pushing partners to sell the full platform solution instead of just the core EDR.
• International revenue represented 38% of total revenue in Q1 Fiscal Year 2026.

Cloud Marketplaces like AWS Marketplace for Simplified Procurement

Leveraging hyperscaler marketplaces simplifies procurement and directly taps into cloud and AI security budgets. SentinelOne has significantly deepened its collaboration with Amazon Web Services (AWS), earning the AWS Generative AI Competency designation. This makes it easier for customers to consume SentinelOne's expanding suite of offerings.

The availability of key products on the AWS Marketplace is a strategic move to align with cloud budget spending. For example, the Prompt Security tools are now available there, helping customers safely implement generative AI. Furthermore, the recently acquired Observo AI data pipeline is now offered on the AWS GenAI Marketplace, which uses AI/ML models to help customers reduce security and observability costs by 50% or more.

• Prompt Security tools are available on AWS Marketplace.
• Singularity Hyperautomation for AWS Security Incident Response provides no-code automated workflows for AWS security events.
• The Purple AI MCP Server is also on AWS Marketplace for secure integration with any AI framework.

Direct Sales Force for Closing Large, Complex Enterprise Deals

While the channel is scaling, the direct sales force remains essential for securing the largest, most strategic enterprise accounts. SentinelOne is actively managing a transition from a product-led sales motion to a platform-first engagement model, which naturally involves more complex, direct sales cycles. You should note that large deal cycles remain extended, especially within federal and global accounts, which can create variability in the timing of revenue recognition.

To be fair, the direct sales team is focused on driving platform adoption across the entire Singularity portfolio. This is reflected in the growth of high-value customers. The company saw a significant uplift in platform adoption, with roughly 50 percent of SentinelOne's bookings in the third quarter of fiscal year 2026 coming from emerging products outside of EDR, which often involves direct negotiation for platform consolidation.

Online Resources and Technical Documentation for Self-Service

The self-service and documentation channels support both the direct sales motion and the partner ecosystem by providing necessary technical depth. The platform's modularity and ease of use, as highlighted by the Singularity Flex licensing model, are designed to accelerate adoption and scale usage once the initial contract is signed. The focus on AI-native solutions, like Purple AI, which saw a 40-percent attach rate when licenses were sold in Q1 Fiscal Year 2026, suggests that technical documentation and resources must be robust to support the integration of these advanced capabilities.

The platform itself is designed to be intelligent, with features like Purple AI's Auto Triage enabling automated investigation and response within seconds, which reduces the manual workload on Security Operations Centers (SOCs) that rely on SentinelOne's documentation and APIs for integration.

Here's a quick look at the customer base growth that these channels support:

What this estimate hides is the exact revenue contribution from the self-service/documentation path versus the direct sales force, as the company reports channel sales through overall revenue figures, but the push for platform sales suggests higher-touch engagement for larger deals.

Finance: draft 13-week cash view by Friday.

SentinelOne, Inc. (S) - Canvas Business Model: Customer Segments

You're looking at the core customer base for SentinelOne, Inc. (S) as of late 2025. This segment is all about landing and expanding within the largest, most security-conscious organizations. Honestly, the numbers show a clear focus on high-value enterprise accounts.

The company's strategy heavily leans on driving platform adoption across its enterprise base. For instance, as of January 31, 2025, SentinelOne, Inc. (S) reported having 1,411 customers with Annual Recurring Revenue (ARR) exceeding $100,000. This figure represented a 25% year-over-year growth in that high-ARR cohort as of the end of fiscal year 2025. To put that in perspective against the total business size at that time, the total ARR was $920.1 million.

SentinelOne, Inc. (S) is definitely targeting specific verticals where the risk and compliance burden are highest. You see this focus in their success within:

• Finance: A Fortune 500 financial services firm recently consolidated several security vendors onto the Singularity Platform.
• Federal Government: The company has achieved FedRAMP High authorization for key products, making it trusted by government and critical infrastructure entities.
• Healthcare: This sector, like Finance, demands stringent compliance, making SentinelOne, Inc. (S)'s unified platform attractive for risk reduction.

The platform's global reach is also a significant component of its customer segment strategy. International markets are not just an afterthought; they are a substantial part of the revenue base. For the quarter ending April 30, 2025, revenue from international markets grew 27% year-over-year and represented 38% of the total quarterly revenue. This global footprint helps diversify risk and capture worldwide demand for AI-native security.

Here's a quick snapshot of the key enterprise metrics as of the end of FY2025 (January 31, 2025) and the most recent reported international mix:

Finally, you see a clear push toward mid-market companies that are tired of managing a patchwork of different security tools. These organizations are looking to consolidate vendors, often replacing legacy Security Information and Event Management (SIEM) systems with SentinelOne, Inc. (S)'s AI-powered Singularity Platform for operational simplicity and cost savings. For example, one major retailer consolidated its legacy SIEM for an annual cost savings of $1 million. That's the kind of tangible outcome that drives consolidation decisions in the mid-market, and defintely helps sales cycles.

SentinelOne, Inc. (S) - Canvas Business Model: Cost Structure

You're managing a high-growth, AI-focused cybersecurity platform, so your cost structure is naturally weighted toward engineering talent and market penetration. The primary cost drivers for SentinelOne, Inc. (S) reflect this focus on innovation and aggressive customer acquisition.

High Research and Development (R&D) costs for AI and platform innovation remain a significant investment area. This spending fuels the continuous evolution of the Singularity Platform, especially around autonomous capabilities and securing new vectors like cloud and identity. For context, in the third quarter of fiscal year 2025 (ended October 31, 2024), Research and Development expenses were $70 million. This is compared to $58 million in the first quarter of fiscal year 2025 (ended April 30, 2024).

Sales and Marketing (S&M) expenses are substantial, necessary to drive new logo acquisition and expand within existing accounts. This is typically the largest operating expense category for SentinelOne, Inc. (S). To give you a sense of the scale, in Q1 FY2025, S&M as a percentage of revenue was reported at 47.2%. The company is focused on improving efficiency here; this ratio represented a decrease of 3.5 percentage points year-over-year in that quarter.

Cost of Revenue (CoR) is managed well, though it includes the necessary costs for delivering the service. SentinelOne, Inc. (S) maintains high gross margins, indicating efficient scaling of the cloud infrastructure and support functions. For the third quarter of fiscal year 2026 (ended October 31, 2025), the Non-GAAP gross margin was 79%. This compares to a GAAP gross margin of 74% in the same period. For the full fiscal year 2025, the Non-GAAP gross margin was 79%, up from 77% the prior year.

General and Administrative (G&A) overhead reflects the costs of operating as a rapidly scaling public company. This includes finance, legal, HR, and executive functions needed for compliance and scale. In Q1 FY2025, G&A as a percentage of revenue was 11.9%. This ratio improved by 0.9 percentage points year-over-year in that quarter. The total operating expenses for Q3 FY2025 were $247 million (GAAP), which was an increase of 22% year-over-year. Non-GAAP operating expenses for that same quarter were $178 million, representing 85% of revenue.

Here is a breakdown illustrating the relative weight of these cost components based on the most granular data available, using Q1 FY2025 as the basis for expense ratios and Q3 FY2025 for the most recent total operating expense dollar figure for context:

The trend shows a deliberate effort to maintain high R&D investment while driving operating leverage, as evidenced by the Non-GAAP operating margin moving to 7% in Q3 FY2026 from (5)% in Q3 FY2025.

Finance: draft 13-week cash view by Friday.

SentinelOne, Inc. (S) - Canvas Business Model: Revenue Streams

You're looking at how SentinelOne, Inc. (S) converts its platform adoption into actual dollars, which is almost entirely through recurring revenue models, a key indicator for software companies. The core of the business is built around subscription licensing for the Singularity Platform, which is the foundation for their Annual Recurring Revenue (ARR).

The financial performance for the last completed fiscal year shows this clearly. SentinelOne, Inc. (S) reported that its Total revenue for fiscal year 2025 was $821.5 million. This revenue base is underpinned by the subscription commitment from its customer base.

The subscription metric that really matters is the ARR. As of the end of that fiscal year, Annual Recurring Revenue (ARR) reached $920.1 million as of Jan 31, 2025. By the end of the third quarter of fiscal year 2026 (October 31, 2025), this figure had climbed further to $1.06 billion or $1,055.3 million, showing continued momentum in securing future revenue.

The revenue streams aren't just about the initial endpoint protection sale; they are heavily focused on expansion within the existing customer base. This is where upselling new modules (e.g., Purple AI, Cloud Security) to existing customers becomes a major driver. The success here is quite pronounced, as roughly 50 percent of SentinelOne's bookings during its latest reported quarter came from these emerging products outside of the core endpoint security offering.

Here's a quick look at the key revenue-driving metrics as of late 2025:

The expansion revenue is fueled by specific platform add-ons. For instance, the AI-powered security operations tools are gaining traction:

• Purple AI attach rate reached 40-percent when licenses were sold in SentinelOne's fiscal third quarter.
• Growth in the data segment, which includes AI SIEM (security information and event management), saw triple-digit growth year-over-year during the same quarter.
• The adoption of solutions like Singularity Cloud Security and Singularity Hyperautomation is also contributing to this expansion revenue.

Beyond the core platform subscriptions and module upselling, SentinelOne, Inc. (S) also generates revenue from its professional services, notably Managed Detection and Response (MDR) services revenue. While specific MDR revenue figures aren't broken out in the latest reports, the overall platform momentum suggests strong uptake in these managed offerings, complementing the do-it-yourself subscription model. The company is clearly pushing its entire Singularity platform, which includes AI, Data, Cloud, and Endpoint capabilities, as a unified revenue generator.

Finance: review Q4 FY2026 guidance against the $1.001 billion full-year revenue forecast by next Tuesday.