SentinelOne

SentinelOne is an AI-native cybersecurity platform company headquartered in Mountain View, California, delivering autonomous endpoint protection, cloud security, identity threat detection, and security analytics through its Singularity platform. As of January 31, 2026, SentinelOne reported ARR of $1.119 billion, a 22% year-over-year increase, crossing the $1 billion ARR milestone in late 2025.

Customers with ARR of $100,000 or more grew 18% to 1,667. Non-endpoint solutions—Cloud Security, Identity Threat Detection, and the Singularity Data Lake—account for approximately 50% of new quarterly bookings as of early 2026.

Purple AI, SentinelOne's generative AI security analyst embedded in the Singularity platform, achieved a 40% attach rate on new licenses in late 2025, enabling autonomous threat hunting and incident forensics synthesis across the Singularity Data Lake. SentinelOne also launched Purple AI Athena, described as the first end-to-end agentic AI platform for cybersecurity.

The company acquired Prompt Security and Observo AI in 2025 to strengthen AI security and data pipeline capabilities. Singularity XDR uses patented behavioral AI engines to detect and respond to threats across endpoints, cloud workloads, identities, and data without relying on signature updates.

NYSE-listed (S) with approximately 3,000 employees, holding SOC 2 Type II, ISO 27001, FedRAMP Authorization, PCI DSS, and HIPAA certifications. Named Best Security Company at the 2025 SC Awards Europe.

SentinelOne sits in the same agent-based endpoint tier as CrowdStrike Falcon and is most often shortlisted directly against it, differentiating on autonomous response executed on the agent itself — which keeps working while a device is offline — and on treating the Singularity Data Lake as the analytics substrate rather than a separate SIEM purchase. It also publishes list pricing: Singularity Core at $69.99 per endpoint per year, Singularity Complete at $179.99 and Singularity Commercial at $229.99, with Singularity Enterprise quoted by sales.

SentinelOne states that all purchases are transacted through an authorised third-party partner, so those published figures are indicative rather than final and the reseller relationship is part of the decision. Best fit: teams that want endpoint, cloud and identity telemetry consolidated into one queryable data lake instead of paying twice for storage, and buyers who prefer a channel-led purchase with a named implementation partner.