SentinelOne Raises Guidance as AI Security ARR Triples, But Net New ARR Math Draws Analyst Skepticism
Q2 FY2027 earnings call, reported August 27, 2026
SentinelOne delivered a fifth consecutive quarter of positive year-over-year net new ARR growth and posted record operating margin in its fiscal second quarter, prompting management to raise both revenue and operating income guidance for the year. Revenue rose 21% year-over-year to $292 million, above the high end of guidance, while total ARR grew 22%. Yet beneath the upbeat tone, the most consequential exchange of the call came from Wolfe Research's Josh Tilton, who pressed management on why the full-year net new ARR guardrail still implies only low-to-mid single-digit growth despite what CEO Tomer Weingarten repeatedly called an "acceleration" across the business.
The net new ARR tension
Net new ARR came in at $56 million in the quarter, up just 4% year-over-year, even as total ARR growth held at 22% and remaining performance obligations accelerated to 45%. CFO Sonalee Parekh defended the guidance by pointing to the trend lines rather than the absolute figure: net retention among $100,000-plus customers expanded for a third consecutive quarter, RPO hit a record $1.7 billion versus $1.5 billion last quarter, and AI security ARR tripled year-over-year. "Everything we're seeing in the demand environment and the trends that are in front of us right now in the business have given us the confidence to be able to raise what we do guide on," Parekh said, while declining to walk back the more conservative net new ARR framing. The disconnect between the company's rhetoric of acceleration and the actual guardrail metric is likely to remain a point of debate among investors tracking whether SentinelOne's platform strategy is translating into durable bookings growth or simply larger, longer-duration deals that flatter RPO without moving the net new needle as much.
AI security becomes the growth engine
The clearest new data point from the quarter is the trajectory of SentinelOne's AI security bundle, Prompt Security and Purple AI, which management said tripled in ARR year-over-year and is on track to become the company's next nine-figure ARR category, joining endpoint, cloud, data and Wayfinder. Prompt Security, which secures enterprise AI model usage and agentic workflows, was highlighted as the company's fastest-growing platform solution, with Bell Canada cited as a marquee win to secure one of Canada's most critical telecom networks. Purple AI, the company's agentic SOC investigation tool, was independently validated by IDC at a 338% three-year ROI, and management said an increasing number of new customers are landing with Purple AI from day one rather than adopting it as an add-on. Weingarten framed the opportunity in stark terms: "We are envisioning a world in which agentic endpoint protection is something that every AI workload will need. And AI workloads are going to be by masses more than employees that are using endpoints."
Runtime security as the moat, with real-world scare stories
Management leaned heavily on recent industry incidents to justify its runtime-first architecture thesis. Weingarten pointed to Anthropic's demonstration of models executing end-to-end attacks across complex networks and OpenAI's acknowledgment that model capabilities are "rapidly approaching critical cybersecurity thresholds." More concretely, he cited an incident at Hugging Face in which an autonomous agent system "executed thousands of actions at machine speed, escaped its sandbox, crossed boundaries, and compromised external infrastructure." The lesson, according to Weingarten, is that governance frameworks alone cannot contain agentic AI risk: "While governance defines what an agent should do, runtime security governs what it actually does. This is our foundational vision and our moat." Whether this narrative translates into faster deal cycles beyond the anecdotal customer wins cited on the call, including an aerospace and defense company's full rip-and-replace of a primary competitor and a major American tech giant's expanded cloud security deployment, will be the key test in coming quarters.
Margin expansion outpacing growth, with a caveat
Profitability metrics were the cleanest beat of the quarter. Operating margin reached 10%, up 820 basis points year-over-year and above the high end of guidance, while sales and marketing expense fell to 34% of revenue, a 900-plus basis point improvement. EPS of $0.08 doubled year-over-year. Parekh raised full-year operating income guidance to $124 million to $128 million, implying roughly 10% margin at the midpoint and approximately 700 basis points of improvement over fiscal 2026. However, she cautioned that margin expansion will not proceed linearly: "You will continue to see margins expand, and we did raise the full year on operating income outlook as well. However, you're not going to see margin expansion at the same rate." The company is holding back cushion for reinvestment in AI security go-to-market and partner channels, meaning the back half of the year should show sequential margin improvement but not at the pace delivered in the first half. Trailing 12-month adjusted free cash flow margin reached 6%, up roughly 400 basis points year-over-year, still a modest absolute level for a company of this scale.
Sovereign AI deployment as a differentiator
Management repeatedly positioned SentinelOne's ability to deploy across cloud, on-premises and air-gapped environments as a structural advantage as governments and enterprises build sovereign AI stacks that cannot export telemetry offsite. An aerospace and defense customer reportedly selected SentinelOne after the company was the only vendor to pass every requirement in a multi-vendor proof of concept conducted in an air-gapped, highly restricted environment. Weingarten described this as a durable moat: "There is no next-gen endpoint provider that can deliver that in every single environment, with complete independence of any cloud out there." This claim is difficult to independently verify but is consistent with the company's messaging around telecom and government wins across five continents.
Flex adoption and distribution economics
SentinelOne's Flex consumption model, launched roughly a year ago, has already exceeded 10% of total ARR, a data point that suggests customers are increasingly willing to commit to flexible, expandable contracts rather than discrete point-product purchases. The company also expanded its LevelBlue partnership, naming it a premier remediation partner for Wayfinder Frontier AI Services, and deepened its AWS relationship by integrating AI security capabilities with Amazon Bedrock AgentCore. These distribution moves matter because they reduce customer acquisition friction and are part of the explanation for the improved sales efficiency metrics management highlighted, including deal cycle compression and higher win rates.
For the third quarter, SentinelOne guided to revenue of $309 million to $311 million, representing 20% year-over-year growth at the midpoint, and operating income of $38 million to $40 million, implying roughly 13% operating margin. Full-year revenue guidance was raised to $1.202 billion to $1.207 billion, also 20% growth at the midpoint, with fully diluted EPS guided to $0.30 to $0.32. The company ended the quarter with $813 million in cash and no debt, giving it flexibility for both organic investment and opportunistic buybacks, though management gave no specific signal on near-term capital return plans.