What changed in this filing

/stocks — the workspaceLOADING

Item 1. Business

2024-03-27 compared with 2023-03-29 · 177 added, 183 removed, 405 unchanged (47% of the section changed)

3 unchanged sentences

The rise and persistence of cyberattacks clearly shows that there is a long way to go from here.

Enterprises must deploy solutions that enable them to stay one step ahead of attackers and address intrusion attempts in real-time at machine speed - empowering human operators with the speed, scale, and precision of technology.

We envisioned a revolutionary data and artificial intelligence (AI) paradigm where technology alone could autonomously prevent, detect, and respond to cyberattacks.

Enterprises must deploy solutions that enable them to stay one step ahead of attackers and address intrusion attempts in real-time at machine speed—empowering human operators with the speed, scale, visibility, and precision of technology.

We envisioned a revolutionary data and AI paradigm where technology alone could autonomously prevent, detect, and respond to cyberattacks.

It is time to fight machine with machine.

We pioneered the world’s first purpose-built AI-powered Extended Detection and Response (XDR) platform to make cybersecurity defense truly autonomous, from the endpoint and beyond.

Our Singularity Platform instantly defends against cyberattacks - performing at a faster speed, greater scale, and higher accuracy than otherwise possible from any single human or even a crowd.

By leveraging AI and our fully unified security data lake for analytics, our Singularity Platform instantly defends against cyberattacks—performing at a faster speed, greater scale, and higher accuracy than otherwise possible from any single human or even a crowd.

Purple AI unifies the entire platform experience, supercharges the security operations, and delivers improved efficiency with threat-hunting capabilities across multiple attack vectors.

Our Singularity Platform ingests, correlates, and queries petabytes of structured and unstructured data from a myriad of ever-expanding disparate external and internal sources in real-time.

4 unchanged sentences

In the cloud, our Streaming AI detects anomalies that surface when multiple data feeds are correlated.

Furthermore, our platform provides visibility across an organization’s digital assets through one console, making it easy and very fast for analysts to search through petabytes of data to investigate incidents and hunt threats.

Furthermore, our platform provides visibility across an organization’s digital assets through a fully-integrated console, making it easy and very fast for analysts to search through petabytes of data to investigate incidents and hunt threats.

Our Singularity Platform offers multi-tenancy and can be deployed on a diverse range of environments that our customers choose, including public, private, or hybrid clouds.

On each endpoint and cloud workload, we run highly optimized AI models in a single lightweight software agent.

For each endpoint, cloud workload, and user identity, we run highly optimized AI models in a single lightweight software agent.

Our Static AI model predicts file-based attacks of all types, even previously unknown threats, often referred to as “zero-day attacks,” with extreme precision in milliseconds.

Our Behavioral AI model maps, monitors, and links all behaviors on the endpoint to create rich, contextual narratives that we call Storylines.

Our Behavioral AI model maps, monitors, and links all behaviors to create rich, contextual narratives that we call Storylines.

These high-fidelity Storylines are continuously evaluated by our Behavioral AI model.

7 unchanged sentences

By providing full visibility into the Storyline of every secured device across the organization through one console, our platform makes it very fast for analysts to easily search through petabytes of data to investigate incidents and proactively hunt threats.

We have extended protection and visibility beyond the traditional endpoint to cloud workloads, identity credentials, unmanaged devices, and IoT devices.

Our protection and visibility extend across critical enterprise surfaces, including traditional endpoints, cloud workloads, identity credentials, unmanaged devices, and Internet of Things (IoT) devices.

This empowers security analysts of all skill levels to hunt, investigate, and remediate even the most sophisticated threats across the network leveraging automated context provided by our Storylines.

Our proprietary data stack - DataSet - and cloud architecture enable us to retain this rich, contextual data on behalf of our customers for extended periods of time in a highly cost-efficient manner.

Our proprietary data stack, Singularity Data Lake, and cloud architecture enable us to retain this rich, contextual data on behalf of our customers for extended periods of

time in a highly cost-efficient manner.

All of this threat intelligence is fed back into our AI model and further strengthens our algorithms, creating a strong flywheel effect and deepening our competitive moat.

2 unchanged sentences

Together, these capabilities make our platform the logical choice for organizations of all sizes, industry verticals, and compliance requirements.

Our platform offers true multi-tenancy, which enables the world’s largest organizations and our managed security providers and incident response partners with an excellent management experience.

Our platform offers true multi-tenancy, which enables the world’s largest organizations and provides our managed security providers and incident response partners with an excellent management experience.

Our customers realize improved cybersecurity outcomes with fewer people.

2 unchanged sentences

As a result, we have grown rapidly since our inception.

As of January 31, 2023, we had over 10,000 customers, increasing from over 6,700 as of January 31, 2022.

Our revenue for fiscal 2024 and 2023 was $621.2 million and $422.2 million, respectively, representing year-over-year growth of 47%.

6 unchanged sentences

First, organizations need to ingest, normalize, and correlate petabytes of structured and unstructured data from a myriad of external and internal data in a cost efficient manner.

Second, organizations need to apply powerful AI models on this high-fidelity contextual data to automatically detect known and unknown threats, then autonomously remediate and neutralize the threats.

Second, organizations need to apply powerful AI models on this high-fidelity contextual data to automatically detect known and unknown threats, then autonomously remediate and neutralize such threats.

It is critical that we harness the power of data and AI to protect our digital way of life.

2 unchanged sentences

Powered by very large networks of individual attackers distributed worldwide, cybercrime is practically infinite in scale and transcends geographical boundaries.

To gain access to an organization’s data, cybercriminals target endpoints, applications, user credentials, and deploy a variety of sophisticated methods in the form of attack frameworks, machine learning, weaponized exploits, fileless techniques, and social engineering.

As a result, solutions that help strengthen and scale their cyber defenses cost effectively is a top-level priority for organizations today.

To gain access to an organization’s data, cybercriminals target endpoints, applications, and user credentials and deploy a variety of sophisticated methods in the form of attack frameworks, machine learning, weaponized exploits, fileless techniques, and social engineering.

As a result, solutions that help strengthen and scale cyber defenses cost effectively is a top-level priority for organizations today.

Tectonic shifts in IT require a “Zero Trust” operating procedure.

4 unchanged sentences

Cloud computing has become a strategic imperative for organizations to accelerate their digital transformation.

Security and compliance is a shared responsibility model between the cloud infrastructure provider and their customer, organizations are looking for technology solutions that protect their growing cloud workloads while enabling flexible deployment options across public, private and hybrid clouds.

Security and compliance is a shared responsibility model between cloud infrastructure providers and their customers, and organizations are looking for technology solutions that protect their growing cloud workloads while enabling flexible deployment options across public, private and hybrid clouds.

• The operating system landscape is more complex than ever before .

7 unchanged sentences

As a result, the attack surface has exploded.

Visibility across connected devices and continuous assessment of their risk profile has become a top priority for organizations.

• Remote work is here to stay.

The COVID-19 pandemic changed the way most organizations operate, accelerating technology’s role in supporting remote work.

The pandemic has accelerated the structural shift towards a more distributed workforce.

The growth of remote work has increased the risk of cyberattacks.

Visibility across connected devices and continuous assessment of their risk profiles have become top priorities for organizations.

• Remote and hybrid work is here to stay.

As companies continue to adopt and maintain remote work practices, the risk of cyberattacks has increased.

As a result of the accelerated structural shift towards a distributed workforce, organizations are increasingly looking for cybersecurity solutions that safeguard their remote workforce and employee credentials.

1 unchanged sentence

Cyberattacks have evolved from malware to highly sophisticated, organized and large-scale attacks by malicious insiders, criminal syndicates, and nation-states seeking to circumvent existing security controls and undermine critical societal functions through a variety of attacks that are fast acting that take only seconds to breach organizations, exfiltrate data, demand ransoms, and disrupt operations.

Alternatively, some attacks, such as advanced persistent attacks (APT), and targeted attacks, are designed to breach the organization and stealthily infiltrate across assets to steal data, facilitate future attacks, or cause other harm over a long period of time, all while operating undetected.

Alternatively, some attacks, such as advanced persistent attacks and targeted attacks, are designed to breach the organization and stealthily infiltrate across assets to steal data, facilitate future attacks, or cause other harm over a long period of time, all while operating undetected.

In addition, threat actors are using generative AI to increase the sophistication, frequency, and speed of cyberattacks.

The new challenges in security landscape require autonomous security powered by AI and machine learning.

Cybersecurity teams are unable to scale.

While the number of connected devices, applications and cyber threats have increased exponentially, organizations are facing an acute shortage of skilled cybersecurity talent.

The large number of security solutions that companies have deployed over time generate large volumes of alerts that overwhelm security teams as they have to sift through and analyze.

The large number of security solutions that companies have deployed over time generate large volumes of alerts that overwhelm security teams as they must sift through and analyze.

Out of necessity, organizations are demanding solutions that do not require human intervention to prevent, detect, and remediate cyber threats.

Limitations of Existing Solutions

Limitations of Legacy Solutions

Organizations must deploy solutions that enable them to stay one step ahead of attackers and address intrusion attempts in real-time.

As attackers up the ante, developing new skills and deploying new tactics and techniques, existing tools are often unable to prevent and respond effectively to breaches.

As attackers up the ante, developing new skills and deploying new tactics and techniques, legacy tools are often unable to prevent and respond effectively to breaches.

The result is a rising number of successful high-profile attacks.

Key limitations of existing tools are that they:

Key limitations of legacy tools are that they:

• Cover a limited spectrum of cyber threats .

Existing tools, such as signature-based approaches, human-powered monitoring, application whitelisting and sandboxing, are each effective under limited circumstances, but lack the ability to detect the full spectrum of threats organizations are dealing with.

Legacy tools, such as signature-based approaches, human-powered monitoring, application whitelisting and sandboxing, are each effective under limited circumstances, but lack the ability to detect the full spectrum of threats that organizations face.

For example, signature-based approaches can detect attacks that have been seen previously, but are incapable of preventing a wide range of attacks, such as unknown malware, ransomware, modified versions of previously known attacks and the exploitation of zero day vulnerabilities.

4 unchanged sentences

• Utilize AI approaches that rely on humans to power protection mechanisms .

First generation AI tools cannot handle the volume, variety, and velocity of data that must be ingested and analyzed, in real-time, to be effective in preventing breaches.

First-generation AI tools cannot handle the volume, variety, and velocity of data that must be ingested and analyzed, in real-time, to effectively prevent breaches.

These tools often rely on ineffective pattern-matching algorithms in the cloud that generate so much “noise” that human intervention is required to extract useful “signals.” Without curated, contextual data, these tools only generate more alerts that need to be analyzed by humans.

6 unchanged sentences

• Struggle to protect complex modern IT environments.

Existing tools were not designed to protect today’s multi-cloud, multi-device, multi-OS IT environments.

Legacy tools were not designed to protect today’s multi-cloud, multi-device, and multi-operating system IT environments.

Vendors have extended their existing solutions by bolting on functionalities, which has led to a wide disparity of capabilities across endpoints and operating systems.

Existing tools further lack the ability to identify unmanaged IoT devices which often have very limited, if any, built-in security capabilities and can be used by attackers to access the networks of target organizations.

Legacy tools further lack the ability to identify unmanaged IoT devices which often have very limited, if any, built-in security capabilities and can be used by attackers to access the networks of target organizations.

This lack of unified visibility and control over endpoints, cloud workloads, and IoT devices results in gaps in security coverage for organizations.

• Lack deployment flexibility for organizations .

Organizations struggle with the limited deployment methods mandated by existing tools.

Organizations struggle with the limited deployment methods mandated by legacy tools.

On-premise tools impose complexity and maintenance burdens on organizations.

2 unchanged sentences

• Inhibit technology workflow automation.

Many existing tools lack out-of-the box APIs and rely heavily on professional services, which makes the integration and implementation process long, expensive and often unattainable.

The lack of flexible workflow integrations limits organizations’ ability to reduce overhead by automating processes, and to improve their security by ensuring that process steps are done quickly, consistently, and according to their predefined requirements.

Many legacy tools lack out-of-the box APIs and rely heavily on professional services, which makes the integration and implementation process long, expensive, and often unattainable.

The lack of flexible workflow integrations limits organizations’ ability to reduce overhead by automating processes and improving their security by ensuring that process steps are done quickly, consistently, and according to their predefined requirements.

A new paradigm for cybersecurity is needed to autonomously protect organizations and their heterogeneous IT footprints from highly sophisticated, machine-based attacks in a holistic, seamless, and automated manner.

Our Revolutionary Autonomous Approach to Cybersecurity

Our AI-powered Singularity Platform defines and delivers XDR.

Our AI-powered Singularity Platform defines and delivers enterprise-wide security across diverse attack vectors — powered by a single, unified data and security architecture.

Our platform ingests, correlates, and queries petabytes of structured and unstructured data from a myriad of disparate external and internal sources in real-time.

1 unchanged sentence

As a result, our AI models are highly accurate, actionable, and autonomous.

Our distributed AI models run both locally on every endpoint and every cloud workload, as well as on our cloud platform.

Our Static and vector-agnostic Behavioral AI models, which run on the endpoints themselves, provide our customers with protection even when their devices are not connected to the cloud.

In the cloud, our Streaming AI detects anomalies that surface when multiple data feeds are correlated.

2 unchanged sentences

• Protects against present and future cyber threats .

A combination of our powerful Static AI and Behavioral AI on the device with Streaming AI models in the cloud addresses the spectrum of attacks in an evolving threat landscape, including ransomware, known and unknown malware, trojans, hacking tools, memory exploits, script misuse, bad macros and “living off the land,” or file-less, attacks.

As our on-device machine

learning models assess how an endpoint behaves, they are completely independent of the attack vector itself or any further updates and configurations.

• Platform approach enables protection and visibility across all digital assets .

Our Singularity Platform provides organizations with our full suite of real-time threat prevention, detection, and remediation capabilities across all of their endpoints, cloud workloads, servers, operating systems, and user credentials.

Our platform further leverages our agents, combined with passive and active network discovery methods, to provide our customers with organization-wide visibility into all of their network assets, managed and unmanaged.

A combination of our powerful Static AI and Behavioral AI locally on the device with Streaming AI models in the cloud addresses the spectrum of attacks in an evolving threat landscape, including ransomware, known and unknown malware, trojans, hacking tools, memory exploits, script misuse, bad macros, and “living off the land,” or file-less, attacks.

When our on-device machine learning models assess how an endpoint behaves, they are completely independent of the attack vector itself or any further updates and configurations.

• One Platform approach enables protection and visibility across all digital assets .

Our Singularity Platform provides organizations with our full suite of real-time threat prevention, detection, and remediation capabilities across their endpoints, cloud workloads, servers, operating systems, and user credentials.

Our platform further leverages our agents, combined with passive and active network discovery methods, to provide our customers with organization-wide visibility into their network assets, managed and unmanaged.

Our platform approach helps enterprise consolidate security tools while enhancing enterprise-wide coverage.

4 unchanged sentences

Our platform gives security teams the ability to search their IT assets for behavioral indicators via a single-click interface.

Our deep visibility and contextual data empowers security analysts of all skill levels to run queries at very fast speeds, and quickly understand the root causes behind the most complex threats.

Our watchlists further lighten the load on security teams by giving them the ability to schedule customized and fully automated threat hunting searches according to their own criteria.

Our deep visibility and contextual data empower security analysts of all skill levels to run queries at very fast speeds, and quickly understand the root causes behind the most complex threats.

Purple AI supercharges the security analyst experience, with simplified user experience, improved efficiency, and more holistic hunting capabilities.

• Provides full forensic recall for complete remediation .

We offer our customers the ability to retain rich, contextual data for up to three years in a highly cost efficient manner.

This forensic data helps our customers to investigate breaches that have stealthily infiltrated their organization and operated undetected for many months.

It gives them the ability to ensure that any incident has been fully remediated without the need to reimage or replace elements of their IT infrastructure.

We offer our customers the ability to retain rich, contextual data for extended periods of time in a highly cost-efficient manner.

For compliance and security, enterprises need cost effective data retention for longer periods of time.

This forensic data helps our customers investigate breaches that have stealthily infiltrated their organization and potentially operated undetected for many months giving them the ability to ensure that any incident has been fully remediated without the need to re-image or replace elements of their IT infrastructure.

• Provides a superior customer experience .

We put the user at the center of our product development and engineering processes.

The combination of our intuitive and clean user interface, our ability to provide context with one click, and our high degree of automation empowers our customers to use our platform independent of their expertise level.

The combination of our intuitive and clean user interface, our ability to provide context with one click, and a high degree of automation empowers our customers to use Singularity platform independent of their expertise level.

• Proprietary data stack .

Our modern, innovative, and extensible data stack - DataSet - enables us to ingest, process and analyze massive amounts and a wide variety of data types efficiently.

Our modern, innovative, and extensible data stack, Singularity Data Lake, enables us to ingest, process and analyze massive amounts and a wide variety of data types efficiently.

Our independent, component-driven architecture allows us to evolve rapidly leveraging continued innovations of public cloud infrastructure, while controlling every aspect of our innovation roadmap and customer experience.

As more data improves our AI algorithms and cross-organizational visibility, our data stack allows us to offer superior threat protection for our customers.

• Deeply embedded within our customers’ IT stacks .

Our API-first approach and Singularity Marketplace allow our customers to easily integrate intelligence, analytics, automation, and other third-party business applications with our platform.

Security teams often need to integrate different security tools to address gaps and improve security posture.

Our Singularity Marketplace offers no-code automation that allows customers to seamlessly ingest data from third-party applications into our Singularity Platform.

• Flexible deployment model that delivers rapid time to value.

10 unchanged sentences

Our thought leadership in security and AI, combined with our award-winning culture, allows us to attract and retain some of the best talent at a global scale.

It allows us to develop state-of-the-art solutions, to innovate faster, and to solve many of the industry’s most complex problems.

We believe our leading security and platform breadth position us well to consolidate and unify spend across multiple categories.

Over time, we believe this unification and re-architecture of the prevention, detection and response paradigm will create new opportunities for additional products and features for us.

It allows us to develop state-of-the-art solutions, innovate faster, and solve many of the industry’s most complex problems.

We believe our leading security and platform breadth position us well to consolidate and unify cybersecurity spend across multiple categories.

Over time, we believe this unification and re-architecture of the prevention, detection and response paradigm will create new opportunities for additional products and features.

Growth Strategy

1 unchanged sentence

• Continue to innovate and enhance our cybersecurity and data platform .

We will continue to expand our platform and XDR capabilities by developing new modules to include greater functionality and address additional use cases.

As a pioneer in autonomous and AI-based endpoint security, we have established a track record for expanding our platform capabilities with new modules.

Through convergence of cybersecurity and data, we intend to bring our customers and prospects a variety of differentiated cybersecurity-first and enhanced data analytics offerings.

Having access to some of the world’s top cybersecurity and AI talent through our distributed workforce model and our research and development centers across North America, Europe, Middle East, and Asia allows us to continue hiring top technical talent and innovate to maintain our leading position.

We will continue to expand our platform by developing new modules to include greater functionality and address additional use cases.

As a pioneer in autonomous and AI-based cybersecurity, we have established a track record for expanding our platform capabilities with new modules.

Through convergence of cybersecurity and data, we intend to bring our customers and prospects a variety of differentiated cybersecurity-first, AI powered, and enhanced data analytics offerings.

Having access to some of the world’s top cybersecurity and AI talent through our distributed workforce model and our research and development centers across North America, Europe, the Middle East, and Asia allows us to continue hiring top technical talent and innovate to maintain our leading position.

• Drive new customer acquisition.

As of January 31, 2023, we ha d over 10,000 customers, ranging from large enterprises, such as Fortune 500 companies, to small and medium-sized businesses around the world.

We have customers, ranging from large enterprises, such as Fortune 500 companies, to small and medium-sized businesses around the world.

We intend to continue to add new customers through a product-first approach.

This approach enables us to build trusted relationships with a large and rapidly growing group of highly influential managed service and incident response providers, as opposed to creating a dynamic of competition that creates friction between product vendors and service providers.

We derive significant customer acquisition benefits from our cloud-delivered platf orm, which makes it easy to onboard new customers.

We are currently certified under the Federal Risk and Authorization Management Program (FedRAMP), and we intend to further grow our footprint within the U.S.

federal government.

We are currently certified under the Federal Risk and Authorization Management Program (FedRAMP), and we intend to further grow our footprint within the US federal government.

We intend to continue to build our relationships with our channel partners, including MSPs, MSSPs, MDRs, OEMs, and IR firms, as well as our alliance partners to expand our market reach.

• Increase adoption within our customer base .

We have been successful in our ability to grow revenue from our customer base as they deploy additional endpoints and expand the use of our platform.

As we enhance our platform functionality and value proposition, we expect many of our customers to adopt additional platform functionalities and Singularity modules to address all of their cybersecurity use cases through the same platform and agent.

Our customers can seamlessly activate additional modules to expand platform capabilities through the already deployed agent.

We have successfully grown our revenue from our customer base as they deploy additional licenses and expand the use of our platform by adoption of adjacent solutions.

Our customers can seamlessly activate additional modules to adopt more platform capabilities.

Module-driven growth has been broad-based with notable strength from our cloud and data modules.

This enables us to show in-product promotions and trials and to

drive the expansion of our Singularity Modules.

The success of our land-and-expand strategy is evidenced by our greater than 130% dollar-based net retention rate as of January 31, 2023 .

Our platform also enables us to show in-product promotions and trials and to drive the expansion of our Singularity Modules.

The success of our land-and-expand strategy is evidenced by our dollar-based net retention rate of 114% as of January 31, 2024 .

• Expand our global footprint.

Revenue generated outside of the United States was 35% for fiscal 2023, compared to 32% for fiscal 2022.

Revenue generated outside of the US was 36% for fiscal 2024, compared to 35% for fiscal 2023.

We intend to continue to grow our international customer base by increasing our investments in international operations.

3 unchanged sentences

We intend to use these opportunities to extend the reach of our Singularity Platform into adjacencies that complement our core offerings.

For example, in May 2022, we acquired Attivo Networks, Inc.

(Attivo), a leading identity security and lateral movement protection company, which allowed us to deliver comprehensive identity security as part of our Singularity platform.

In addition, through S Ventures, a $100 million fund that we announced in 2022 to invest in next generation category-defining security and data companies, we are able to further enhance our platform capabilities in areas that may be of future interest to us.

We are committed to innovation, automation, and securing data wherever it resides with a front-row seat into cutting-edge cybersecurity technologies.

For example, in November 2023, through our acquisition of KSG, a strategic advisory group, we launched PinnacleOne to address multifaceted security challenges for enterprises.

PinnacleOne will focus on helping companies and their executives holistically understand the evolving risks of operating in the modern global business landscape through personalized access to expert intelligence, insights, and transformative risk management strategies.

Further, in February 2024, we acquired PingSafe, a cloud native application protection platform (CNAPP) to bolster our existing cloud security product suite.

By adding PingSafe’s CNAPP to our Cloud Workload Security (CWS), we can now provide enterprises with a comprehensive cloud security coverage that drives comprehensive security, improved posture, and autonomous protection across their entire cloud footprint.

Our Singularity Platform

Our Singularity Platform delivers AI-powered autonomous threat prevention, detection, and response capabilities across an organization’s endpoints and cloud workloads, enabling seamless and automatic protection against a full spectrum of cyber threats.

We built our platform to be deployed as a cloud service or in private and hybrid clouds.

Our Singularity Platform delivers AI-powered autonomous threat prevention, detection, and response capabilities across an organization’s endpoints, cloud workloads, and identity credentials, enable seamless and autonomous protection against a full spectrum of cyber threats.

We built our platform to be deployed as a cloud service in public, private, and hybrid cloud environments.

We further offer customers a broad set of capabilities through our Singularity Modules.

We price our modules as a subscription on a per agent basis.

Our platform capabilities are connected through three key patented technologies:

2 unchanged sentences

Our Static, Behavioral, and Streaming AI technologies that run in a distributed manner on our data cloud as well as on every endpoint and every cloud workload we protect.

We overlay the entire user experience with Purple AI, improving the efficiency and effectiveness of security analyst operations.

Our Storyline technology builds a model of real-time running processes and their behaviors, to create rich, contextual data narratives which become the input to our Behavioral AI model.

Storyline powers our unified Endpoint Protection Platform (EPP), EDR, or XDR functionalities.

Storyline is the foundation of our EPP while providing unprecedented levels of visibility with contextual information for benign and malicious processes.

Storyline is the foundation of our EPP providing unprecedented levels of visibility, with contextual information for benign and malicious processes.

We extend our fundamental protection, visibility and response capabilities well beyond the endpoint to cloud, and third-party solutions in our Singularity Platform.

We designed our platform based on our “design to delight” principle and developed a powerful yet simple and intuitive user experience.

Proprietary Security Data Lake

Dataset is our fully integrated security data lake that seamlessly fuses together the data, access, control, and integration planes of EPP, EDR, Cloud Workload Protection (CWP), Identity Protection, and IoT security into a centralized platform.

With our Singularity Platform, enterprises gain access to their security data from multiple sources through a single pane of glass.

It was designed with the goal of optimizing scale, cost and performance - what we call the Golden Ratio of Big Data.

This is achieved by the use of innovative data structures, storage systems, and algorithms:

Our platform is able to ingest structured and unstructured data from any source, with little to no manual configuration and at unprecedented speed and scale.

Singularity Data Lake (SDL), formerly DataSet, is our fully integrated security data lake that seamlessly fuses together the data, access, control, and integration planes of EPP, EDR, CWS, Identity Protection, and IoT security into a centralized platform.

With our Singularity Platform, enterprises gain visibility and access to their security data through a single pane of glass across multiple sources.

SDL was designed with the goal of optimizing scale, cost and performance - what we call the Golden Ratio of Big Data.

This is achieved using innovative data structures, storage systems, and algorithms:

Our platform can ingest structured and unstructured data from any source, with little to no manual configuration and at unprecedented speed and scale.

• Normalize .

3 unchanged sentences

Our Singularity Platform enriches and visualizes every Storyline with information from Threat Intelligence sources, both homegrown and through integrations with third-party intelligence information services.

Endpoint Protection

Our next-generation cybersecurity technology provides autonomous real-time protection across all operating systems, including Windows, Linux, macOS, and cloud-native and containerized workloads.

Our endpoint protection is powered by distributed AI which resides both on devices as well as in the cloud for always-on, machine-speed protection.

It is capable of autonomous decision making on the device and stopping threats in milliseconds rather than minutes, hours or even days.

We are able to provide superior performance compared to traditional signature-based antivirus tools and earlier next-gen antivirus products with the following three key capabilities:

• Static AI .

Our on-device AI model can detect file-based attacks, even those that are previously unknown zero-day exploits, with extreme precision in milliseconds.

Our Static AI model is the output of a supervised machine learning cycle that is trained on a continuously evolving data set from billions of files coupled with the data from multiple threat intelligence sources, including our proprietary Embedded Threat Intelligence.

• Behavioral AI.

Our on-device AI model continuously scores Storylines from the device to precisely classify individual or group behaviors as benign or malicious.

The accuracy of our Behavioral AI is powered by the rich contextual information that is encoded in each Storyline that is being scored.

As a result, it is attack vector agnostic because it is not limited to any particular pathway used by attackers to penetrate a system, such as zero-day vulnerability exploits and living off the land attacks.

• Embedded Threat Intelligence .

Our cloud threat intelligence system combines threat information from our data analytics and research teams, Vigilance MDR and IR services, and other commercial and proprietary threat feeds.

Endpoint Detection and Response

Unlike first-generation EDR products that are reactive and mainly focused on collecting data, our ActiveEDR solutions leverage Storylines to reduce analysis time and to automate response actions by significantly minimizing the time between detection and response through technology automation.

It enables on-device behavioral analysis, auto-remediation, and response in a fully autonomous fashion.

ActiveEDR reduces analysis time and requirements for specialized skills by providing technology-generated context which would otherwise need to be produced by highly skilled people manually in a time-intensive and error prone fashion.

ActiveEDR excels at visualizing context, pinpointing anomalies, and providing a variety of granular responses.

The main capabilities of ActiveEDR are:

• Deep Visibility Threat Hunting .

Deep Visibility Threat Hunting provides an easy-to-use search interface on top of our Deep Visibility dataset.

The Storylines shown within Deep Visibility hunts enable one-click responses, which are far easier and faster to execute than manually scripting responses.

As a result, both entry level analysts and highly skilled analysts can analyze results faster, review more alerts, and be more productive with the power of technology.

• Response Capabilities .

Our Singularity Platform offers one of the broadest sets of response actions in the EDR market.

Leveraging Storylines, we automate responses or make them optionally initiated by operators.

Our response capabilities enable security analyst to Kill, Quarantine, Remediate, Remote Shell, and Rollback .

Multi-tenancy Architecture

1 unchanged sentence

Policies set at the higher tier of the hierarchy are automatically inherited by the lower levels, but administrators may override them to create local policies at any tier.

We also support fully customizable Role Based Access Control (RBAC), that allows organizations to create specific rules controlling console permissions at a granular level.

This enables large, distributed teams to work independently while at the same time providing a global view for the CISO and other stakeholders.

We also support fully customizable Role Based Access Control, that allows organizations to create specific rules controlling console permissions at a granular level.

This enables large, distributed teams to work independently while at the same time providing a global view for the chief information officer and other stakeholders.

It further enables our platform adoption by the world’s largest organizations, MSPs, MSSPs, MDRs, OEMs, and IR firms.

5 unchanged sentences

IT and Security Operations

Our Singularity Platform enables security and IT teams to identify vulnerabilities, fix insecure configurations, and manage endpoints.

Vulnerable and mis-configured applications make it easier for attackers to gain entry and evade detection.

Addressing these vulnerabilities and mis-configured settings strengthens the security risk profile of our customers.

Our Singularity Platform enables security and IT teams to identify software or application vulnerabilities, fix insecure configurations, and manage endpoints.

Vulnerable and misconfigured applications make it easier for attackers to gain entry and evade detection.

Addressing these vulnerabilities and misconfigured settings strengthens the security risk profile of our customers.

Our platform has the following capabilities:

• Application Inventory .

Maintains a software application inventory across an entire organization, by capturing the list of installed applications and their attributes such as their version numbers, install date, and publisher.

Our software collects this information in real-time, enabling our customers to easily search and sort through these attributes in a global application inventory view within the console.

Maintains a software application inventory in real-time across an entire organization and their attributes such as their version numbers, install date, and publisher.

Customers can quickly perform software frequency analysis and compliance checks.

• Scanless Vulnerability Assessment .

Using our real-time organization-wide Application Inventory database, our solution is able to provide highly accurate and dynamic Vulnerability Management information without the need to deploy another solution.

We do so by matching version information from our Application Inventory database to the known vulnerabilities published as Common Vulnerability Enumeration records.

Using our real-time organization-wide Application Inventory database, our solution can provide highly accurate and dynamic Vulnerability Management information without the need to deploy another solution.

• Device Control.

Allows maximum granularity and flexibility when defining Device Control policies to prevent data exfiltration and malware entry.

Our Device Control module supports two main media types:

USB and Bluetooth devices.

Our Bluetooth Device Control capability augments our IoT capability, limiting pairing with unsanctioned hardware and other wearable devices.

We believe the ability to provide granular control for Bluetooth devices in conjunction with other forms of USB media is a competitive differentiator.

• Native OS Host Firewall Control .

Leverages native operating system infrastructure to provide an application-aware and location-aware endpoint firewall orchestrator for remote devices.

Our Device Control capability provides granular control for Bluetooth devices in conjunction with other forms of USB media.

• Native Operating System Host Firewall Control .

Firewall control provides visibility, malware prevention, and network segmentation by utilizing the native firewall capabilities on Windows, macOS, and Linux devices.

With our Singularity Platform, we enable our users to keep their workforce protected, segment their networks, and block traffic from malicious IPs/C2 servers using the same console that they use to monitor threats.

• File Integrity Monitoring .

The data collected by our Deep Visibility EDR can be used to replace traditional file integrity monitoring solutions.

Coupled with Storyline Active Response (STAR), our File Integrity solution (FIM) is able to automatically alert or remediate unauthorized changes to these files.

Organizations use this to be compliant with PCI DSS and other regulatory requirements while eliminating other agents, products, and spend.

Singularity Platform Tiers

Our File Integrity solution (FIM) is able to automatically alert or remediate unauthorized changes to these files.

Organizations use our FIM to be compliant with Payment Card

Industry Data Security Standard (also known as “PCI DSS”) and other regulatory requirements while eliminating other agents, products, and spend.

Singularity Platform Product Offerings

Our Singularity Platform offers a highly flexible deployment model.

It is primarily hosted in Amazon Web Services (AWS) in multiple regions - North America, European Union, Asia Pacific, and AWS GovCloud.

We also support deploying our platform in Google Cloud as well as customers’ on-premise data centers, private, and hybrid cloud environments for organizations with specialized hosting and data sovereignty needs.

It is primarily hosted in Amazon Web Services (AWS) in multiple regions - North America, Europe, Asia Pacific, and AWS GovCloud.

Our platform can also be hosted in Google Cloud, as well as customers’ on-premise data centers, and private and hybrid cloud environments for organizations with specialized hosting and data sovereignty needs.

Our Singularity Platform provides feature parity across Windows, macOS, and Linux.

2 unchanged sentences

• Singularity Core.

Our entry level security solution for organizations that want to replace antivirus tools with our EPP which we believe is more effective and easier to manage than legacy antivirus and next-gen antivirus products.

Singularity Core includes our Static and Behavioral AI models and autonomous threat response and rollback features.

1 unchanged sentence

Made for organizations seeking best-of-breed security with the addition of our “security suite” features for endpoint management.

It provides additional features for control network connectivity, USB and Bluetooth peripherals, and to uncover rogue devices.

It provides additional features for control network connectivity, USB and Bluetooth peripherals, and uncovering rogue devices.

• Singularity Complete.

Our flagship offering that includes a comprehensive suite of product capabilities.

Singularity Platform Modules

We further offer customers a broad set of capabilities through our Singularity Modules.

We price our modules as a subscription on a per agent basis.

Our most notable modules include:

• Singularity Commercial.

Provides a solid foundational security solution across endpoints, cloud, and identities, ensuring that an organization has the necessary tools to stay secure.

• Singularity Enterprise.

Provides comprehensive protection across endpoints, cloud, and identities as well as threat intelligence, vulnerability, and diverse set of services.

Endpoint Protection (EPP)

Our next-generation cybersecurity technology provides autonomous real-time protection across all operating systems, including Windows, Linux, macOS, and cloud-native and containerized workloads.

Our endpoint protection is powered by distributed AI which resides both on devices as well as in the cloud for always-on, machine-speed protection.

It is capable of autonomous decision making on the device and stopping threats in milliseconds rather than minutes, hours or even days.

We are able to provide superior performance compared to traditional signature-based antivirus tools and earlier next-generation antivirus products with the following three key capabilities:

• Static AI .

Our on-device AI model can detect file-based attacks, even those that are previously unknown zero-day exploits, with extreme precision in milliseconds.

• Behavioral AI.

Our on-device AI model continuously scores Storylines from the device to precisely classify individual or group behaviors as benign or malicious.

The accuracy of our Behavioral AI is powered by the rich contextual information that is encoded in each Storyline that is being scored.

As a result, our Behavioral AI is attack vector agnostic because it is not limited to any particular pathway used by attackers to penetrate a system, such as zero-day vulnerability exploits and living off the land attacks.

• Embedded Threat Intelligence .

Our cloud threat intelligence system combines threat information from our data analytics and research teams, Vigilance MDR and IR services, and other commercial and proprietary threat feeds.

Our Purple AI for Threat Intelligence expands and accelerates an organization’s ability to deliver deep insights needed to proactively protect against threats and mitigate risk.

Endpoint Detection and Response (EDR)

It enables on-device behavioral analysis, auto-remediation, and response in a fully autonomous fashion.

ActiveEDR excels at visualizing context, pinpointing anomalies, and providing a variety of granular responses.

The main capabilities of ActiveEDR are:

• Deep Visibility Threat Hunting .

Deep Visibility Threat Hunting provides an easy-to-use search interface on top of our Deep Visibility dataset.

The Storylines shown within Deep Visibility hunts enable one-click responses, which are far easier and faster to execute than manually scripting responses.

As a result, both entry level and highly skilled analysts can analyze results faster, review more alerts, and be more productive with the power of technology.

• Response Capabilities .

Our Singularity Platform offers one of the broadest sets of response actions in the EDR market.

Leveraging Storylines, we automate responses or make them optionally initiated by operators.

Our response capabilities enable security analyst to Kill, Quarantine, Remediate, Remote Shell, and Rollback .

Singularity Data Lake

Building upon the acquisition of Scalyr, Inc., Singularity Data Lake is a revolutionary live enterprise data platform for data queries, analytics, insights, and retention.

It expands our capabilities beyond cybersecurity use cases, such as data analytics.

Singularity Data Lake takes a security-first perspective to data analytics.

It is a cloud-native flexible enterprise data platform built for all types of data live or historical, at petabyte scale.

By eliminating data schema requirements from the ingestion process and index limitations from querying, Singularity Data Lake can process massive amounts of live data in real time, delivering log management, data analytics, and alerting with unparalleled speed, performance, and efficiency built on a security and privacy-first foundation.

As a software as a service (SaaS) platform, it can be deployed in minutes and is easy to operate without any maintenance requirement.

Singularity Data Lake is built for the cloud and offered as a cloud service freeing up engineering resources from managing data refineries.

It is built with the security and controls that enterprises require for their most precious asset:

Cloud Security

Our Cloud Workload Protection (CWP) solution extends distributed, autonomous endpoint protection, detection, and response to compute workloads running in public clouds, private clouds, and on-prem data centers.

We offer both agent and agentless cloud security capabilities in a comprehensive CNAPP.

Offering these in a unified security platform helps reduce operational complexity and improve integrated protection and remediation capabilities.

Our CWS solution extends distributed, autonomous endpoint protection, detection, and response to compute workloads running in public clouds, private clouds, and on-premise data centers.

Our runtime protection delivers prevention, detection, response and hunting functionalities purpose-built for these environments.

1 unchanged sentence

Our Cloud Application Control locks down the running image of servers and containers to prevent configuration drift and protect against unauthorized changes, in line with best practices for cloud workload security.

Identity Protection

Our identity security portfolio acts as a force multipliers for security teams, allowing them to assume a more robust security posture and extend the capabilities of the Singularity Platform to protect user credentials.

Our Cloud Security Posture Management (CSPM) solution automatically and continuously identifies and responds to cloud misconfigurations and reports on compliance with industry benchmarks like NIST, MITRE, CIS, PCI-DSS, and more.

Furthermore, it detects vulnerabilities in cloud infrastructure including infrastructure as a code (IoC) scanning, secret scanning, and code to runtime monitoring across major cloud services (AWS, GCP, Azure, Oracle, Alibaba, and more).

Our Cloud Data Security solution protects cloud environments from the spread of malware through automated file threat analysis.

Customers receive protection from malicious files in Amazon Simple Storage Service (S3) and NetApp.

Our AI-powered threat detection delivers unparalleled visibility and proactive protection against advanced threats, ensuring security and compliance.

Identity Security

Our identity security portfolio acts as a force multiplier for security teams, allowing them to assume a more robust security posture and extend the capabilities of the Singularity Platform to protect user credentials.

Our Singularity Identity solution detects and responds to identity-based attacks and finds attackers early, before they can exploit identities.

37 unchanged sentences

In incident response situations, rapid artifact extraction and endpoint state querying across the entire enterprise is critical.

Our remote script orchestration module allows concurrent execution of

custom and preset scripts across an enterprise, instead of having to triage with a device by device approach.

Our remote script orchestration module allows concurrent execution of custom and preset scripts across an enterprise, instead of having to triage with a device-by-device approach.

By converging our protection, detection, and response capabilities with remote script orchestration, our platform is the only solution that is needed to respond to a breach.

14 unchanged sentences

Allows organizations to export their XDR data in real-time to their private data lakes, whether locally-hosted or in the cloud.

It securely streams a copy of all endpoint EDR telemetry to a customer’s local data lake for further correlation with other security tools, while allowing offline data storage for audit and compliance.

Moreover, it securely streams a copy of all endpoint EDR telemetry to a customer’s local data lake for further correlation with other security tools, while allowing offline data storage for audit and compliance.

WatchTower delivers threat hunting and insights to help customers understand the nature of threats, targeted attacks, threat actors, and risk reduction.

7 unchanged sentences

Our technology-powered digital forensics analysis and incident response offering takes Vigilance MDR two steps further and provides customers with a full-service solution and enables customers to benefit from world-class SOC operations with customized threat annotation and response.

Vigilance MDR helps customers of all sizes augment their cybersecurity staff with a 24/7/365 globally-distributed operation which operates under the industry’s only publicly available Service Level Agreements.

DataSet Platform

Building upon the acquisition of Scalyr, Inc., we launched DataSet, a revolutionary live enterprise data platform for data queries, analytics, insights, and retention.

DataSet expands our capabilities beyond cybersecurity use cases, such as data analytics.

DataSet takes a security-first perspective to data analytics.

It is a cloud-native flexible enterprise data platform built for all types of data live or historical, at petabyte scale.

By eliminating data schema requirements from the ingestion process and index limitations from querying, DataSet can process massive amounts of live data in real time, delivering log management, data analytics, and alerting with unparalleled speed, performance, and efficiency built on a security and privacy-first foundation.

As a software as a service (SaaS) platform, it can be deployed in minutes and is easy to operate without any maintenance requirement.

DataSet is built for the cloud and offered as a cloud service freeing up engineering resources from managing data refineries.

DataSet is built with the security and controls that enterprises require for their most precious asset:

Our Customers

As of January 31, 2023, we had over 10,000 customers using our Singularity Platform in approximately 80 countries.

As of January 31, 2024, we had customers using our Singularity Platform in approximately 80 countries.

We are protecting the digital infrastructures of thousands of customers around the world, including large global enterprises, small and medium sized businesses, and government organizations.

6 unchanged sentences

We also engage temporary employees and consultants as needed to support our operations.

Our U.S.-based employees include team members in all key functions, including go-to-market, customer success, technology, product, and support.

Each of our U.S.

offices has a different functional focus but share a driven, customer-centric culture.

Our US-based employees include team members in all key functions, including go-to-market, customer success, technology, product, and support.

Each of our US offices has a different functional focus but shares a driven, customer-centric culture.

Our headquarters in Mountain View, California is where the majority of our executive team, marketing, finance, legal, people and talent, and sales operations is located, which supports cross functional collaboration.

Our office in Eugene, Oregon hosts our North American customer success and support team, as well as our sales development and inside sales teams.

Having these teams together supports a highly collaborative and customer-focused site.

Our office in Tel Aviv, Israel benefits from Israel’s concentration of cybersecurity experts.

1 unchanged sentence

Our office in Prague, Czech Republic houses research and product development functions to augment current teams across the globe and the expansion of our global engineering organization.

Our European head office is in Amsterdam, Netherlands, which we chose for its talent pool, language versatility, diversity, labor and tax laws, and central location in relation to our offices in the United States and Israel.

Our Dubai office is primarily focused on go-to-market activities in the Middle East and Africa and supports our new business efforts in connecting with both customers and partners across these regions.

30 unchanged sentences

We believe in the strengths of diversity and are committed to building out a diverse talent base.

We plan to continue investing in hiring employees both in and outside of the United States.

We plan to continue investing in hiring employees both in and outside of the US.

We received multiple workplace accolades in 2023.

• Fortune recognized the company as a Best Workplace in Technology, Best Medium Workplace, Best Workplace for Millennials, and Best Workplace in the Bay Area.

• Dun’s 100 list acknowledged SentinelOne as one of the Best High Tech Companies to Work for and one of the Top 10 High Tech Companies to Work for Parents in 2022.

• SentinelOne also achieved Great Place to Work certification for the USA, UK, France, India, and Netherlands in 2022.

• Comparably awarded SentinelOne with 14 distinctions in 2022, including Best Company for Diversity, Best Company for Women, Best CEO, Best Company Perks & Benefits, Best Company Compensation, Happiest Employees, Best Career Growth, Best CEOs for Diversity, Best CEOs for Women, Best Sales Team, Best Engineering Team, Best Places to Work in the Bay Area, Best Global Culture, and Best Company Outlook.

Our presence and engagement across all social media platforms continues to grow rapidly, a reflection of the market’s perception of us and our leadership as innovators in the cybersecurity space.

• Fortune recognized SentinelOne as a Best Workplace in Technology, Best Medium Workplace, Best Workplace for Millennials, and Best Workplace in the Bay Area.

• Dun’s 100 list acknowledged SentinelOne as one of the Best High Tech Companies to Work for in 2023.

• SentinelOne also achieved Great Place to Work certification (December 2023 - December 2024) for the US, UK, France, India, Netherlands, Australia, Canada, Slovakia, Germany, Italy, UAE, Poland, Spain, Czechia, and Singapore.

• SentinelOne received the Best Workplaces in Tech in the UK, Best Workplaces for Women in the UK and Best workplaces in Technology in France.

Our presence and engagement across all social media platforms continue to grow rapidly, a reflection of the market’s perception of us and our leadership as innovators in the cybersecurity space.

We pride ourselves on offering employees an award-winning culture centered around trust and integrity, as together, we work to defeat every cyberattack with autonomous technology.

2 unchanged sentences

Our compensation and benefits program is intended to anticipate and meet the needs of our employees.

and flexible spending accounts, unlimited vacation, wellness reimbursement, 16 weeks of gender-neutral parental leave and more.

In addition to base salary, these programs, which vary by country and region, include bi-annual bonuses, equity awards, an employee stock purchase plan, a 401(k) plan, including a 401(k) match in the US, healthcare and insurance benefits, health savings and flexible spending accounts, unlimited vacation, wellness reimbursement, 16 weeks of gender-neutral parental leave and more.

We have increased our investment in training and development and have rolled out several key programs as well as enabling our employees to access over 1,000 on demand webinars in technical and soft skills areas.

Since the COVID-19 pandemic, we continue to globally align our benefits to focus on business continuity and employee well-being.

We continue to globally align our benefits to focus on business continuity and employee well-being.

We have been very intentional with our efforts to support employees while working from home and in their return to the office.

11 unchanged sentences

• Holding ourselves accountable through data and insights and publishing a DEI dashboard.

• Creating an equitable culture for all through strategic partnerships including Women in Cybersecurity (WiCys).

• Creating an equitable culture for all through strategic partnerships including Women in Cybersecurity (also known as “WiCys”).

Through the S Foundation, we offer grants and scholarships to organizations within our communities.

1 unchanged sentence

• Hearing all voices through our internal celebrations including Black History Month, Women’s History Month, Pride, and Hispanic Heritage Month.

In addition, MentorOne program provides Sentinels the opportunity to mentor and be mentored to develop professionally.

In addition, the MentorOne program provides Sentinels the opportunity to mentor and be mentored to develop professionally.

Research and Development

2 unchanged sentences

Our most significant investments are in research and development to drive core technology innovation and bring new products to market.

Research and development employees are located primarily in our Israel, India, and the Czech Republic offices, and remotely.

Research and development employees are located primarily in our Israel, India, and Czech Republic offices, and remotely.

We have a proven team that constantly works to expand our market, customer and user reach and impact with new, innovative products.

11 unchanged sentences

We engage in paid media, web marketing, out of home media advertising, industry and trade conferences, analyst engagements, producing whitepapers, demand generation via digital and web, telemarketing, and targeted displacement campaigns.

We employ a wide range of digital programs, including search engine marketing, online and social media initiatives, and content syndication to increase traffic to our website and encourage new customers to free trials of our Singularity Platform.

Additionally, we engage in joint marketing activities with our channel and alliance partners.

12 unchanged sentences

Organizations can gain visibility over data across historically disparate security solutions without the need for custom business logic, coding, or complex configuration.

Organizations can integrate any security applications and tools regard-less of vendor into a single platform without coding or scripting required.

Singularity Marketplace extends the power of our platform across the entire security and IT stack to build an effective threat defense posture with layered security, collaborative processes, and integrated products.

Organizations can integrate any security applications and tools regardless of vendor into a single platform without coding or scripting required.

Marketplace extends the power of our platform across the entire security and IT stack to build an effective threat defense posture with layered security, collaborative processes, and integrated products.

Singularity Marketplace enables security teams to converge on a single pane-of-glass for extended detection and response workflows to minimize context switching and distractions during triage and incident response.

them gain insights from shared security events without requiring a massive time investment in custom business logic, code, and complex configuration.

It helps them gain insights from shared security events without requiring a massive time investment in custom business logic, code, and complex configuration.

It allows security teams to drive a unified, orchestrated response among security tools in different domains.

The market for our solutions is competitive and characterized by an evolving IT environment, customer requirements, industry standards and by frequent new product and service offerings and improvements.

The market for our solutions is competitive and characterized by an evolving IT environment, customer requirements, industry standards, frequent new product and service offerings, and improvements.

We compete with an array of established and emerging security solution vendors.

2 unchanged sentences

(CrowdStrike) and VMware, Inc.

(Carbon Black);

• legacy antivirus providers such as Trellix (formerly McAfee Corp.), Symantec (a subsidiary of Broadcom, Inc.) (Symantec), and Microsoft Corporation (Microsoft);

19 unchanged sentences

We rely upon a combination of trademarks, trade secrets, know-how, copyrights, patents, confidentiality procedures, contractual commitments, domain names, and other legal rights to establish and protect our intellectual property.

We generally enter into confidentiality agreements and invention or work product assignment agreements with our officers,

employees, agents, contractors, and business partners to control access to, and clarify ownership of, our proprietary information.

As of January 31, 2023, we had 48 issued patents and 29 pending patent applications in the United States and abroad.

We generally enter into confidentiality agreements and invention or work product assignment agreements with our officers, employees, agents, contractors, and business partners to control access to, and clarify ownership of, our proprietary information.

As of January 31, 2024, we had 66 issued patents and 5 pending patent applications in the US and abroad.

These patents and patent applications seek to protect our proprietary inventions relevant to our business.

These issued patents are scheduled to expire on or around the years between 2034 and 2042 and cover various aspects of our platform and technology.

As of January 31, 2023, we had 7 trademark registrations in the United States, including registrations for “SentinelOne” and our logo.

As of January 31, 2024, we had 11 trademark registrations in the US, including registrations for “SentinelOne” and our logo.

We also had 60 trademark registrations and applications in certain foreign jurisdictions.

1 unchanged sentence

Government Regulation

We are subject to many varying laws and regulations in the United States, the United Kingdom, the European Union and throughout the world, including those related to privacy, data protection, intellectual property, consumer protection, marketing, advertising, employment and labor, competition, customs and international trade, taxation, and more.

As we grow and expand our geographical reach, we may become subject to additional regulations in the United States and internationally.

We are subject to many varying laws and regulations in the US, the United Kingdom (UK), the European Union (EU) and throughout the world, including those related to privacy, data protection, intellectual property, consumer protection, marketing, advertising, employment and labor, competition, customs and international trade, taxation, and more.

As we grow and expand our geographical reach, we may become subject to additional regulations in the US and internationally.

These laws often require companies to implement specific information security controls to protect certain types of information, such as personal data.

19 unchanged sentences

The SEC maintains a website at www.sec.gov that contains reports, proxy and information statements and other information that we file with the SEC electronically.

make available on our website at www.sentinelone.com, free of charge, copies of these reports and other information as soon as reasonably practicable after we electronically file such material with, or furnish it to, the SEC.

We use our investor relations page on our website (www.sentinelone.com), press releases, public conference calls, public webcasts, our Twitter account (@SentinelOne), our Facebook page, and our LinkedIn page as means of disclosing material non-public information and for complying with our disclosure obligations under Regulation FD.

We will make available on our website at www.sentinelone.com, free of charge, copies of these reports and other information as soon as reasonably practicable after we electronically file such material with, or furnish it to, the SEC.

We use our investor relations page on our website (www.sentinelone.com), press releases, public conference calls, public webcasts, our X account (@SentinelOne), our Facebook page, and our LinkedIn page as means of disclosing material non-public information and for complying with our disclosure obligations under Regulation FD.

The information disclosed by the foregoing channels could be deemed to be material information.

4 unchanged sentences

Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.

What changed 10-K

Item 1. Business