SentinelOne (S) Q1 2027 earnings review
Strong Top-Line Reacceleration, But Cloud Costs Bite Gross Margins
SentinelOne delivered a solid Q1, with ARR growth accelerating to 23% ($1.16B) and overall revenue up 21%. The core thesis is playing out: the company is no longer just an endpoint vendor. Emerging products (AI, Cloud, Data) now account for 50% of total ARR. While management raised the full-year operating profit outlook, the actual cost of delivering these new AI and Cloud solutions is quietly eroding gross margins. Non-GAAP Gross Margin dropped to 77% from 79% a year ago. The Rule of 40 remains in sight, but future profitability gains must now come from ruthless operating expense cuts rather than product economics.
🐂 Bull Case
Emerging solutions (Data, Cloud, AI) crossed the 50% threshold of total ARR. The platform approach is working, increasing stickiness and driving larger deal sizes.
Net New ARR saw a record Q1 YoY growth rate. The company successfully navigated past previous macroeconomic spending pauses and is back to accelerating momentum.
🐻 Bear Case
Non-GAAP Cost of Revenue surged 34% YoY, drastically outpacing 21% revenue growth. The shift toward data-heavy SIEM and Cloud workloads is structurally more expensive than legacy endpoint security.
Non-GAAP operating margin fell sequentially to 4% (from 6% in Q4 and 7% in Q3). To hit the implied 10% target for FY27, management needs massive leverage in the back half of the year.
⚖️ Verdict: ⚪
Cautiously Bullish. The top-line reacceleration and success of non-endpoint solutions prove SentinelOne is winning in the AI era. However, the compression in gross margins prevents a perfect score.
Key Themes
Emerging Solutions Reach Critical Mass
Management's strategy to diversify beyond endpoint security has hit a landmark. Emerging products—comprising Data, Cloud, and AI—now represent half of total company ARR. This is accelerating total ARR growth (23% in Q1 vs 22% last year) and proving that customers are treating SentinelOne as a foundational platform rather than a point solution.
Gross Margin Compression Contradicts Leverage Narrative
While management highlighted 'strong operating profit margin' and 'operating leverage', the actual product economics are moving the wrong way. Non-GAAP Gross Margin has been steadily decelerating, dropping to 77% this quarter from 79% a year ago. Non-GAAP Cost of Revenue jumped 34% YoY ($63.8M vs $47.5M), while revenue only grew 21%. Hosting AI models and processing massive data pipelines for SIEM replacements carries heavy cloud infrastructure costs.
Upmarket Execution Remains Stable
The push into larger enterprises continues unabated. Customers with ARR of $100,000 or more grew 17% YoY to 1,702. This is the engine feeding the platform consolidation story, as these larger customers are the ones deploying Purple AI and Cloud infrastructure protection at scale.
Sequential Step-Down in Operating Margin
Non-GAAP operating margin came in at 4%. While this is a Reversing trend from the -2% posted a year ago, it is a sequential step-down from the 7% and 6% recorded in 26Q3 and 26Q4, respectively. Seasonality plays a role in Q1, but with gross margins shrinking, SentinelOne has a tighter tightrope to walk to hit its aggressive full-year profit targets.
Macro Resilience in Cybersecurity Spend
A year ago (26Q1), SentinelOne warned of 'elongated sales cycles' and 'paused spending decisions.' This quarter, the tone reversed entirely, with record net new ARR growth for Q1. This indicates that while the broader macro environment hasn't vastly improved, cybersecurity—particularly AI-native defense—has regained its status as an untouchable enterprise budget item.
Tax Settlement Drains Operating Cash Flow
Operating cash flow margin plummeted to 14% (down from 23% YoY). The culprit was a massive $30.6M cash tax payment related to the Israel Tax Authority (ITA) Agreement. Management rightly provides 'Adjusted Free Cash Flow' (which strips this out to show a 22% margin), but cash out the door is still cash out the door. Investors must monitor if further legacy tax liabilities will surface.
Other KPIs
Accelerating. Up 23% YoY, a slight acceleration from the 22% YoY growth reported at the end of FY26. Adding roughly $44M in Net New ARR in a typically slower Q1 underscores solid sales execution.
Accelerating. Margin improved to 22% from 20% in the prior year period. Excludes the one-time $30.6M tax payment to the ITA, demonstrating the core software business generates healthy, sustainable cash.
Stable. The balance sheet remains bulletproof with no debt. Cash reserves give the company ample flexibility for continued share repurchases or tuck-in M&A like the recent Observo AI and Prompt Security deals.
Guidance
Decelerating slightly. The midpoint of $290M implies roughly 19.8% YoY growth, a slight step down from the 21% delivered in Q1. This suggests management is keeping expectations prudently beatable.
Stable. Maintained guidance implies ~20% full-year growth. The company is successfully replacing the legacy endpoint deceleration with new Cloud and Data platform revenues.
Accelerating. Raised outlook. The midpoint of $120M implies roughly a 10% full-year operating margin, up dramatically from the 3.5% margin delivered in FY26. Getting there will require intense OpEx discipline.
Key Questions
Gross Margin Floor
Non-GAAP Gross Margin has compressed from 79% to 77% over the last year as Data and Cloud solutions scale. Where is the structural floor for gross margins, and are you willing to sacrifice unit economics to win SIEM replacement deals?
Bridge to 10% Operating Margin
You printed a 4% Non-GAAP operating margin in Q1, but your full-year guide implies 10%. With gross margins under pressure, exactly which operating expense lines (R&D, S&M) will provide the massive leverage needed in the back half of the year?
Israel Tax Authority Resolution
Q1 cash flow took a $30.6M hit from the ITA settlement. Are there any remaining cash outlays expected regarding this agreement, or is this issue entirely behind us?