SentinelOne

The cheapest scaled growth asset in security: ~4.3x EV/forward revenue for a business reaccelerating to 23% ARR growth, with non-endpoint products (AI SIEM, cloud, AI security) now half of ARR, operating margin guided to ~10% non-GAAP this year, and ~$812M net cash providing downside support and takeout optionality.

• ARR growth reaccelerated to 23% with record net-new ARR (+55% y/y) in Q1 FY27 -- the growth story is inflecting up, not down, unlike most software peers at this multiple
• Data/AI SIEM has posted four consecutive quarters of ARR growth acceleration and is displacing Splunk in enterprise deals; SIEM replacement is a multi-billion-dollar pool SentinelOne barely touched two years ago
• Operating leverage is real: non-GAAP operating margin from -3% (FY25) to 3% (FY26) to a guided ~10% (FY27), with the 8% workforce reduction adding ~$45M annualized savings
• Valuation dislocation vs peers: roughly 4-4.5x EV/ARR vs CrowdStrike's high-teens-plus class multiple for a comparable ~20%+ growth rate -- partial multiple convergence alone is significant upside
• $812M net cash (~13% of market cap), record RPO +30%, and strategic scarcity as an independent AI-native security platform create a floor and persistent M&A optionality
• Prompt Security gives it an early lead in GenAI/LLM security -- a new category where Microsoft/CrowdStrike do not yet have an entrenched offering

A structurally sub-scale challenger caught between Microsoft's bundle and CrowdStrike's platform, whose headline reacceleration masks GAAP losses, eroding gross margin, and a restructuring that reads as demand caution -- the discount multiple may be deserved, and the stock has been a value trap since IPO.

• Platform-consolidation dynamics favor the biggest vendors: CISOs are cutting vendor count, and SentinelOne at ~$1.2B ARR is a fraction of CrowdStrike's scale and a rounding error vs Microsoft security's revenue
• Microsoft's E5/Defender bundling structurally caps endpoint pricing; every renewal is a price negotiation against 'free'
• GAAP operating margin is still -29% with a $76.2M quarterly net loss; the non-GAAP profit story leans on excluding heavy SBC that drives mid-single-digit annual share-count dilution
• Non-GAAP gross margin fell ~200bps y/y to 77% -- the growth engines (data-heavy AI SIEM, acquired products) are lower-margin than the core endpoint business
• An 8% workforce cut in the same quarter as a 'record' print suggests management sees a harder demand environment than the ARR headline implies; revenue guide was maintained, not raised, and the stock fell ~8% on the report
• Growth has fallen from 47% to ~20% in two years; if net-new ARR momentum stalls, a low-teens grower with 77% gross margin merits the discount multiple, and the reacceleration thesis breaks