S · SentinelOne, Inc.

The thesis

SentinelOne's shares are holding near their high on the company's AI-security story, but insiders sold into the rally and recurring-revenue growth still trails the share price. OneCon 2026, starting 20 October 2026, and the third-quarter fiscal 2027 (Q3 FY2027) report expected in early December decide whether results catch up.

The adjusted close was $25.40 on 8 October 2026. That is 1.6% below the 52-week high of $25.80 and above the $25.06 close of 2 October 2026 that the prior note cited. Over three months the shares are up 36.9%, and the 14-day relative strength index (RSI) is 69.8, just under the 70 level often read as overbought.

The business facts have not changed since the 27 August 2026 Q2 FY2027 report. Revenue was $292 million, up 21% year over year. Net new annual recurring revenue (ARR) was $56 million, up 4%. AI-security ARR tripled, but the company has given no dollar figure for it.

The narrative is maturing: CNBC has covered the name since 21 September 2026, and the chief executive sold $13.32 million of stock on 5 October 2026 as the shares traded near their high. The Cybersecurity group turned up again in early October, which supports the price but does not substitute for company results.

Bullish and bearish views on SentinelOne, Inc.

The bull case on SentinelOne, Inc. (S), in brief: Shares hold near the 52-week high. The bear case: Insiders sold into the new high.

Bull case

• Shares hold near the 52-week high. The 8 October 2026 adjusted close of $25.40 sits 1.6% under the $25.80 high, after a 36.9% gain over three months. Buyers have kept the shares above the $25.06 level of 2 October 2026.
• Management linked the gap to larger and longer contracts.
• The top published target sits above the price. TD Cowen kept its Buy rating on 2 October 2026 and raised its target to $29 from $26, citing a 15% reduction in average sales cycles, according to news reports of the note.
• Product recognition continues. SentinelOne said on 8 October 2026 that its Singularity AI SIEM (security information and event management) product won SIEM Solution of the Year in the CyberSecurity Breakthrough Awards 2026.
• Sector demand backdrop is firm. CrowdStrike reached a 52-week high of $260.64 on 23 September 2026, per Benzinga. US Cybersecurity agencies issued a warning on 8 October 2026 that a China-based security company was enabling attacks on critical infrastructure, which keeps threat activity in the news.

Bear case

• Insiders sold into the new high. A Form 4 filed with the SEC shows chief executive Tomer Weingarten exercised 500,000 options at $9.74 and sold 527,368 Class A shares on 5 October 2026 at a weighted average of $25.2642, about $13.32 million, under a 10b5-1 plan adopted 2 July 2026. President of Product and Technology Ana Pinczuk sold 16,042 Class A shares at $25.33 on 6 October 2026, per reported Form 4 filings.
• New recurring revenue is growing slowly. Q2 FY2027 net new ARR was $56 million, up 4% year over year (results, 27 August 2026). That is far below the 36.9% three-month share-price gain.
• Earnings guidance was cut. On 27 August 2026 the company lowered FY2027 adjusted earnings per share guidance to $0.30–0.32 from $0.32–0.38 while raising revenue guidance to $1.202–1.207 billion. The Q2 GAAP operating margin was (31%) against 10% non-GAAP.
• Several targets have been reached. The $25.40 close is above Bernstein's $25 target, set with a downgrade to Market Perform on 17 September 2026. Jim Cramer favoured CrowdStrike and Palo Alto Networks over SentinelOne on CNBC on 15 September 2026.

Price setup

The adjusted close of $25.40 on 8 October 2026 is 1.6% below the 52-week high of $25.80. The shares closed at $22.51 on 18 September 2026 and at $19.88 on 4 September 2026, so most of the three-month gain came in the last five weeks.

RSI of 69.8 sits at the edge of the overbought zone. The 18 September 2026 close of $22.51 is the last level before the run to new highs. A weekly close below $22.00 would put the shares back under it and erase the late-September breakout.

Crowding is visible on three counts. The name had CNBC segments on 21 September 2026, 22 September 2026 and 25 September 2026. Two executives sold stock on 5 October 2026 and 6 October 2026 near the high. The Q3 report falls inside the next three months.

Catalysts, next 30 days

• 20 October to 21 October 2026 — OneCon 2026. The company's investor-relations calendar lists the event from 5:00 p.m. PT on 20 October 2026 to 1:00 p.m. PT on 21 October 2026. A dollar figure for AI-security ARR, or general-availability dates for the Prompt Security guardrails for Amazon Bedrock AgentCore, would address the gap between growth multiples and company-wide results.
• ~3 December 2026, est. Q3 FY2027 report. The quarter ends 31 October 2026. Last year's Q3 report came on 4 December 2025. This report shows whether net new ARR growth improves from 4% and whether FY2027 revenue guidance holds above $1.202 billion.

Elapsed catalysts

• ~Mid-November 2026, est. Q3 date announcement. Last year the company announced its Q3 date on 13 November 2025. (passed 333d ago)

What would change the view

The case breaks if the Q3 FY2027 report shows net new ARR growth at or below Q2's 4%, or if the company cuts FY2027 revenue guidance below the $1.202 billion lower bound set on 27 August 2026. A OneCon 2026 that again gives only a growth multiple for AI-security ARR, with no dollar figure, would weaken the claim that AI security can lift company-wide growth.

On price, a weekly close below $22.00 would undo the breakout above the 18 September 2026 close of $22.51. Further executive sales of similar size as the shares approach $25.80 would add to the evidence that the rally has run ahead of the business.

The case would strengthen if the company disclosed AI-security ARR in dollars large enough to move total ARR, or if Q3 net new ARR growth moved clearly above the single digits.

What it trades with

SentinelOne trades with the Cybersecurity group: CrowdStrike, Palo Alto Networks, Zscaler, Okta, Rubrik and Netskope. On 18 September 2026 Benzinga reported Cybersecurity exchange-traded funds sliding on valuation concerns at CrowdStrike, Palo Alto Networks and Okta, and SentinelOne closed at $22.51 that day before rallying with the group. The group turned higher again in early October.

The read depends partly on that group. A drop in CrowdStrike and Palo Alto Networks back below their late-September highs would likely pull SentinelOne lower regardless of its own results. SentinelOne ranks third in endpoint security behind CrowdStrike and Microsoft Defender, so peer results set the bar its own report is judged against.