SentinelOne (S) Investor Technology Session at OneCon summary

Strategic vision and technology innovation

• Emphasis on building a fully autonomous, AI-driven cybersecurity platform capable of real-time detection and response across all enterprise surfaces, including Endpoint, Cloud, and data.

• AI leadership is central, with proprietary behavioral and static AI models embedded on devices, reducing the need for frequent updates and enabling real-time threat prevention.

• Open architecture allows integration with third-party products, offering flexibility and choice for customers without requiring full platform replacement.

• Focus on transparency, safety, and auditability in AI model development to ensure customer trust and regulatory compliance.

• Platform supports both large enterprises and SMBs, leveraging a unified codebase and intuitive automation.

Market opportunity and growth drivers

• Addressable market exceeds $100 billion, with significant opportunities in Endpoint, Cloud Security, and data analytics.

• Endpoint market remains 50% controlled by legacy vendors; new OEM partnerships, such as with Lenovo, are expected to accelerate share gains.

• Cloud Security business surpassed $100 million in ARR, and data business exceeded $70 million in ARR, both growing faster than the core business.

• Expansion into new markets is driven by customer demand for best-of-breed, real-time, and autonomous security solutions.

• Flexible go-to-market strategy includes partnerships, MSSPs, OEMs, and platform expansion with existing customers.

Product differentiation and customer impact

• AI SIEM and Purple AI deliver real-time analytics, automated triage, and response, reducing alert fatigue and improving analyst productivity.

• Platform enables seamless data ingestion from third-party sources, supporting side-by-side deployments and gradual transitions from legacy solutions.

• Customers report significant cost savings (up to 80%) and faster response times (up to 80x) with the AI SIEM solution.

• Purple AI offers natural language interfaces, auto-triage, and hyperautomation, driving double-digit product adoption within the first quarter.

• Security operations benefit from unified visibility and automation across Endpoint, Cloud, and Identity products.