−Removed: Cybersecurity is indispensable to our digital way of life, with millions of cyberattacks occurring every year resulting in trillions of dollars in damages.
−Removed: We are in the midst of a generational shift in cybersecurity, ushered in by the ongoing digital transformation of the enterprise.
+Added: Cybersecurity is indispensable to our digital way of life, with millions of cyberattacks resulting in trillions of dollars in damages.
+Added: We are in the midst of a generational shift in cybersecurity, ushered in by the ongoing digital transformation of the enterprise and the rise of AI.
Attacks can inflict damages that span operational disruption, leadership change, loss of customer trust, and intellectual property theft, among others.
−Removed: The rise and persistence of cyberattacks clearly shows that there is a long way to go from here.
+Added: The persistence and speed of cyberattacks clearly shows that there is a long way to go from here.
Enterprises must deploy solutions that enable them to stay one step ahead of attackers and address intrusion attempts in real-time at machine speed—empowering human operators with the speed, scale, visibility, and precision of technology.
1 unchanged sentence
It is time to fight machine with machine.
−Removed: We pioneered the world’s first purpose-built AI-powered Extended Detection and Response (XDR) platform to make cybersecurity defense truly autonomous, from the endpoint and beyond.
+Added: We pioneered the world’s first purpose-built AI-powered Extended Detection and Response (XDR) platform to make cybersecurity defense truly autonomous.
+Added: Our autonomous cybersecurity solutions are intelligent and data-driven systems that learn and evolve on their own—working to make the world more secure.
By leveraging AI and our fully unified security data lake for analytics, our Singularity Platform instantly defends against cyberattacks—performing at a faster speed, greater scale, and higher accuracy than otherwise possible from any single human or even a crowd.
−Removed: Purple AI unifies the entire platform experience, supercharges the security operations, and delivers improved efficiency with threat-hunting capabilities across multiple attack vectors.
+Added: Our generative AI technology, Purple AI, unifies the entire platform experience, supercharges the security operations, and delivers improved efficiency with threat-hunting capabilities across multiple attack vectors.
Our Singularity Platform ingests, correlates, and queries petabytes of structured and unstructured data from a myriad of ever-expanding disparate external and internal sources in real-time.
−Removed: We build rich context and deliver greater visibility by constructing a dynamic representation of data across an organization.
−Removed: As a result, our AI models are highly accurate, actionable, and autonomous.
+Added: We aim to build rich context and deliver greater visibility by constructing a dynamic representation of data across an organization.
+Added: As a result, our AI models are able to be highly accurate, actionable, and autonomous.
Our distributed AI models run both locally on every endpoint and every cloud workload, as well as on our cloud platform.
−Removed: Our Static and vector-agnostic Behavioral AI models, which run on the endpoints themselves, provide our customers with protection even when their devices are not connected to the cloud.
−Removed: In the cloud, our Streaming AI detects anomalies that surface when multiple data feeds are correlated.
−Removed: Furthermore, our platform provides visibility across an organization’s digital assets through a fully-integrated console, making it easy and very fast for analysts to search through petabytes of data to investigate incidents and hunt threats.
−Removed: Our Singularity Platform offers multi-tenancy and can be deployed on a diverse range of environments that our customers choose, including public, private, or hybrid clouds.
−Removed: For each endpoint, cloud workload, and user identity, we run highly optimized AI models in a single lightweight software agent.
−Removed: Our Static AI model predicts file-based attacks of all types, even previously unknown threats, often referred to as “zero-day attacks,” with extreme precision in milliseconds.
−Removed: Our Behavioral AI model maps, monitors, and links all behaviors to create rich, contextual narratives that we call Storylines.
−Removed: These high-fidelity Storylines are continuously evaluated by our Behavioral AI model.
−Removed: When activity is deemed a threat, our software autonomously takes action to kill the attack.
−Removed: Because Storylines contain a complete record of unauthorized changes made during an attack, we are ready to remediate or roll back these changes.
+Added: Furthermore, our Singularity Platform provides visibility across an organization’s digital assets through a fully-integrated console, making it easier and faster for security teams to search through petabytes of data to investigate incidents and hunt threats.
+Added: Singularity is designed to offer multi-tenancy and can be deployed on a diverse range of environments that our customers choose, including public, private, or hybrid clouds.
+Added: For each endpoint, cloud workload, user identity and security data lake, we are able to run highly optimized AI models in a single lightweight software agent.
+Added: Our Static AI model can predict file-based attacks of all types, even previously unknown threats, often referred to as “zero-day” attacks, with extreme precision in milliseconds.
+Added: Our Behavioral AI can model, map, monitor, and link all behaviors to create rich, contextual narratives that we call Storylines.
+Added: These high-fidelity Storylines are continuously evaluated by our Behavioral AI model, which contributes to our best-in-class detection capabilities.
+Added: Our generative AI empowers security teams to unify, accelerate, and simplify security operations.
+Added: When activity is deemed a threat, our software is designed to autonomously take action to stop the attack.
+Added: Because Storylines contain a complete record of unauthorized changes made during an attack, users can remediate or roll back unauthorized changes with a single click.
The power to turn back time on a device is unique in the market.
It is the ultimate safety net and exemplifies autonomous cybersecurity.
−Removed: Therefore, our software eliminates manual, expensive, and time-consuming incident cleanup.
−Removed: In the cloud, our platform aggregates Storylines.
−Removed: Our Streaming AI detects anomalies that surface when multiple data feeds are correlated with additional external and internal data.
−Removed: By providing full visibility into the Storyline of every secured device across the organization through one console, our platform makes it very fast for analysts to easily search through petabytes of data to investigate incidents and proactively hunt threats.
−Removed: Our protection and visibility extend across critical enterprise surfaces, including traditional endpoints, cloud workloads, identity credentials, unmanaged devices, and Internet of Things (IoT) devices.
−Removed: This empowers security analysts of all skill levels to hunt, investigate, and remediate even the most sophisticated threats across the network leveraging automated context provided by our Storylines.
−Removed: Our proprietary data stack, Singularity Data Lake, and cloud architecture enable us to retain this rich, contextual data on behalf of our customers for extended periods of
−Removed: time in a highly cost-efficient manner.
−Removed: All of this threat intelligence is fed back into our AI model and further strengthens our algorithms, creating a strong flywheel effect and deepening our competitive moat.
−Removed: Our Singularity Platform can be flexibly deployed on the environments that our customers choose, including public, private, or hybrid clouds.
+Added: Therefore, our software can eliminate manual, expensive, and time-consuming incident cleanup.
+Added: In the cloud, our platform can aggregate Storylines.
+Added: Our Streaming AI can detect anomalies that surface when multiple data feeds are correlated with additional external and internal data.
+Added: By providing full visibility into the Storyline of every secured device across the organization through one console, our platform enables analysts to quickly and easily search through petabytes of data to investigate incidents and proactively hunt threats.
+Added: Singularity’s protection and visibility extend across critical enterprise surfaces, including traditional endpoints, cloud workloads, identity credentials, unmanaged devices, and Internet of Things (IoT) devices.
+Added: This can empower security analysts of all skill levels to hunt, investigate, and remediate even the most sophisticated threats across the network leveraging automated context provided by our AI-powered security.
+Added: Our proprietary data stack, Singularity
+Added: Data Lake, and cloud architecture enable us to retain this rich, contextual data on behalf of our customers for extended periods of time in a highly cost-efficient manner.
+Added: All of this threat intelligence is fed back into our AI models and Purple AI, further strengthening our algorithms and creating a strong flywheel effect that deepens our competitive moat.
+Added: Singularity can be flexibly deployed on the environments that our customers choose, including public, private, or hybrid clouds.
Our feature parity across Windows, macOS, Linux, and Kubernetes offers best-of-breed protection, visibility, and control across today’s heterogeneous information technology (IT) environments.
Together, these capabilities make our platform the logical choice for organizations of all sizes, industry verticals, and compliance requirements.
−Removed: Our platform offers true multi-tenancy, which enables the world’s largest organizations and provides our managed security providers and incident response partners with an excellent management experience.
−Removed: Our customers realize improved cybersecurity outcomes with fewer people.
−Removed: Our Singularity Platform is used globally by organizations of all sizes across a broad range of industries.
+Added: Our platform offers true multi-tenancy, which enables the world’s largest organizations, managed security providers and incident response partners with an excellent management experience.
+Added: Our customers are able to realize improved cybersecurity outcomes with fewer people.
+Added: Singularity is used globally by organizations of all sizes across a broad range of industries.
Our AI and automation driven approach to cybersecurity has been adopted by some of the world’s largest organizations.
2 unchanged sentences
During this period, we continued to invest in growing our business to capitalize on our market opportunity.
−Removed: As a result, our net loss for fiscal 2024 was $338.7 million compared with net loss of $378.7 million in fiscal 2023.
+Added: As a result, our net loss for fiscal 2025 was $288.4 million compared with a net loss of $338.7 million in fiscal 2024.
Industry Background
Cybersecurity is fundamentally a data problem.
−Removed: Advances in AI, specifically machine learning, where algorithms use data to make decisions with minimal human intervention, are already revolutionizing fields such as healthcare, advertising, and securities trading.
+Added: Advances in AI, specifically machine learning (ML), where algorithms use data to make decisions with minimal human intervention, are already revolutionizing fields such as healthcare, advertising, and securities trading.
We believe that AI is ripe for revolutionizing cybersecurity.
First, organizations need to ingest, normalize, and correlate petabytes of structured and unstructured data from a myriad of external and internal data in a cost efficient manner.
−Removed: Second, organizations need to apply powerful AI models on this high-fidelity contextual data to automatically detect known and unknown threats, then autonomously remediate and neutralize such threats.
+Added: Second, organizations need to apply powerful AI models to this high-fidelity contextual data to automatically detect known and unknown threats, then autonomously remediate and neutralize such threats.
It is critical that we harness the power of data and AI to protect our digital way of life.
−Removed: Stakes are high for organizations and cybercriminals.
+Added: Stakes are high for organizations and cybercriminals alike.
The exponential growth of sensitive customer and business data has simultaneously made many organizations and governments the target of highly sophisticated cybercriminals.
Powered by very large networks of individual attackers distributed worldwide, cybercrime is practically infinite in scale and transcends geographical boundaries.
−Removed: To gain access to an organization’s data, cybercriminals target endpoints, applications, and user credentials and deploy a variety of sophisticated methods in the form of attack frameworks, machine learning, weaponized exploits, fileless techniques, and social engineering.
−Removed: As a result, solutions that help strengthen and scale cyber defenses cost effectively is a top-level priority for organizations today.
+Added: To gain access to an organization’s data, cybercriminals target endpoints, applications, and user credentials and deploy a variety of sophisticated methods in the form of attack frameworks, ML, weaponized exploits, fileless techniques, and social engineering.
+Added: As a result, solutions that help strengthen and scale cyber defenses cost effectively are a top-level priority for organizations today.
Tectonic shifts in IT require a “Zero Trust” operating procedure.
With millions of remote devices accessing thousands of applications running in public, private and hybrid clouds, traditional perimeter-based security controls are bypassed, and organizations have to operate in a “Zero Trust” IT environment.
−Removed: The attack surface has expanded considerably, and the notion of a corporate perimeter protected by firewalls is a relic of the past, making the endpoint the epicenter, and endpoint protection software the first, and last, line of defense.
+Added: The attack surface continues to expand rapidly, and the notion of a corporate perimeter protected by firewalls is a relic of the past, making endpoints and cloud workloads the epicenter, and protection software the first, and last, line of defense.
Several tectonic shifts in IT have increasingly left companies vulnerable including:
1 unchanged sentence
Cloud computing has become a strategic imperative for organizations to accelerate their digital transformation.
−Removed: Security and compliance is a shared responsibility model between cloud infrastructure providers and their customers, and organizations are looking for technology solutions that protect their growing cloud workloads while enabling flexible deployment options across public, private and hybrid clouds.
+Added: Security and compliance are a shared responsibility model between cloud infrastructure providers and their customers, and organizations are looking for technology solutions that protect their growing cloud workloads while enabling flexible deployment options across public, private and hybrid clouds.
• The operating system landscape is more complex than ever before .
−Removed: The diversification of IT and bring your-own-device policies brought Macs and other devices into today’s organizations.
−Removed: Organizations are looking for cybersecurity solutions that deliver comprehensive defense capabilities and feature parity across a large variety of operating systems, including Windows, macOS, and Linux, without burdening their IT teams.
+Added: The diversification of IT, the trend towards hybrid work environments, and bring your-own-device policies have brought Macs and other devices into today’s organizations.
+Added: Organizations are looking for cybersecurity solutions that deliver
+Added: comprehensive defense capabilities and feature parity across a large variety of operating systems, including Windows, macOS, and Linux, without burdening their IT teams.
• Proliferation of connected devices .
Billions of connected devices are online today and the numbers are only expected to increase.
−Removed: Many of these devices will have little to no built-in security capabilities.
+Added: Many of these devices have little to no built-in security capabilities.
Cybercriminals are increasingly exploiting inherent vulnerabilities in these devices to breach organizations.
1 unchanged sentence
As a result, the attack surface has exploded.
−Removed: Visibility across connected devices and continuous assessment of their risk profiles have become top priorities for organizations.
+Added: As a result, visibility across connected devices and continuous assessment of their risk profiles have become top priorities for organizations.
• Remote and hybrid work is here to stay.
−Removed: As companies continue to adopt and maintain remote work practices, the risk of cyberattacks has increased.
+Added: As companies continue to adopt and maintain remote and hybrid work practices, the risk of cyberattacks has increased.
As a result of the accelerated structural shift towards a distributed workforce, organizations are increasingly looking for cybersecurity solutions that safeguard their remote workforce and employee credentials.
Sophisticated cyberattacks circumvent existing security controls.
−Removed: Cyberattacks have evolved from malware to highly sophisticated, organized and large-scale attacks by malicious insiders, criminal syndicates, and nation-states seeking to circumvent existing security controls and undermine critical societal functions through a variety of attacks that are fast acting that take only seconds to breach organizations, exfiltrate data, demand ransoms, and disrupt operations.
−Removed: Alternatively, some attacks, such as advanced persistent attacks and targeted attacks, are designed to breach the organization and stealthily infiltrate across assets to steal data, facilitate future attacks, or cause other harm over a long period of time, all while operating undetected.
+Added: Cyberattacks have evolved from malware to highly sophisticated, organized and large-scale attacks by malicious insiders, criminal syndicates, and nation-states seeking to circumvent existing security controls and undermine critical societal functions through a variety of attacks.
+Added: Modern attacks are fast acting and can breach organizations, exfiltrate data, demand ransoms, and disrupt operations within seconds.
+Added: Alternatively, some attacks, such as advanced persistent attacks and targeted attacks, are designed to breach organizations and stealthily infiltrate across assets, steal data, facilitate future attacks, or cause other harm over a long period while operating undetected.
In addition, threat actors are using generative AI to increase the sophistication, frequency, and speed of cyberattacks.
−Removed: The new challenges in security landscape require autonomous security powered by AI and machine learning.
+Added: The new challenges in the security landscape require autonomous security powered by AI and ML.
Cybersecurity teams are unable to scale.
4 unchanged sentences
Organizations must deploy solutions that enable them to stay one step ahead of attackers and address intrusion attempts in real-time.
−Removed: As attackers up the ante, developing new skills and deploying new tactics and techniques, legacy tools are often unable to prevent and respond effectively to breaches.
+Added: As attackers up the ante by developing new skills and deploying new tactics and techniques, legacy tools are often unable to prevent and respond effectively to breaches.
The result is a rising number of successful high-profile attacks.
3 unchanged sentences
For example, signature-based approaches can detect attacks that have been seen previously, but are incapable of preventing a wide range of attacks, such as unknown malware, ransomware, modified versions of previously known attacks and the exploitation of zero-day vulnerabilities.
−Removed: In addition, they lack the ability to detect and prevent an increasing number of fileless attacks, that deposit no malware, but instead exploit operating system vulnerabilities and use trusted tools within IT environments.
−Removed: In general, enterprises need to take a more holistic view of security protection across endpoints, cloud environments, and identity credentials.
−Removed: A unified platform approach is needed to deliver comprehensive protection, visibility, and user experience.
+Added: They also lack the ability to detect and prevent an increasing number of fileless attacks, that deposit no malware, but instead exploit operating system vulnerabilities and use trusted tools within IT environments.
+Added: In general, we believe enterprises need to take a more holistic view of security protection across endpoints, cloud environments, and identity credentials.
+Added: A unified AI-based platform approach is needed to deliver comprehensive protection, visibility, and user experience.
As a result, despite deploying a myriad of point solutions, organizations have continued to suffer huge losses from cyberattacks.
1 unchanged sentence
First-generation AI tools cannot handle the volume, variety, and velocity of data that must be ingested and analyzed, in real-time, to effectively prevent breaches.
−Removed: These tools often rely on ineffective pattern-matching algorithms in the cloud that generate so much “noise” that human intervention is required to extract useful “signals.” Without curated, contextual data, these tools only generate more alerts that need to be analyzed by humans.
−Removed: They cannot take action at machine speed and are thus unable to detect and prevent or stop many fast-acting
+Added: These tools often rely on ineffective pattern-matching algorithms in the cloud
+Added: that generate so much “noise” that human intervention is required to extract useful “signals.” Without curated, contextual data, these tools generate more alerts that need to be analyzed by humans.
+Added: They cannot take action at machine speed and are thus unable to detect and prevent or stop many fast-acting attacks.
Additionally, due to communication latency with the cloud, these tools cannot generate actionable insights in real-time, which is required to stop many current threats.
• Lack long-term data visibility to proactively investigate advanced threats.
−Removed: Existing endpoint detection and response (EDR) tools lack the capability to store large sets of historical data cost efficiently, and consequently often only offer limited data retention capabilities.
+Added: Many existing detection and response tools lack the capability to store large sets of historical data cost efficiently, and consequently often only offer limited data retention capabilities.
This results in only partial datasets being available for threat hunting and time bound retrospective forensic analysis.
−Removed: Limited historical EDR data makes full incident investigation challenging for security personnel, as they are unable to go back in time and see how the attack breached the organization and progressed.
+Added: Limited historical data makes full incident investigation challenging for security personnel, as they are unable to go back in time and see how the attack breached the organization and progressed.
• Struggle to protect complex modern IT environments.
17 unchanged sentences
As a result, our AI models are highly accurate, actionable, and autonomous.
−Removed: Furthermore, our platform provides visibility across an organization’s digital assets through one console, making it easy and very fast for analysts to search through petabytes of data to investigate incidents and hunt threats.
−Removed: Our Singularity Platform offers multi-tenancy and can be deployed on a diverse range of environments that our customers choose, including public, private, or hybrid clouds.
+Added: Furthermore, our platform provides visibility across an organization’s digital assets through one console, making it easier and faster for analysts to search through petabytes of data to investigate incidents and hunt threats.
+Added: Singularity offers multi-tenancy and can be deployed on a diverse range of environments that our customers choose, including public, private, or hybrid clouds.
Singularity Platform Capabilities and Our Competitive Strengths
• Protects against present and future cyber threats .
−Removed: A combination of our powerful Static AI and Behavioral AI locally on the device with Streaming AI models in the cloud addresses the spectrum of attacks in an evolving threat landscape, including ransomware, known and unknown malware, trojans, hacking tools, memory exploits, script misuse, bad macros, and “living off the land,” or file-less, attacks.
−Removed: When our on-device machine learning models assess how an endpoint behaves, they are completely independent of the attack vector itself or any further updates and configurations.
−Removed: • One Platform approach enables protection and visibility across all digital assets .
+Added: A combination of our powerful Static AI and Behavioral AI locally on the device with Streaming AI models in the cloud addresses the spectrum of attacks in an evolving threat landscape, including ransomware, known and unknown malware, trojans, hacking tools, memory exploits, script misuse, bad macros, and “living off the land,” file-less, or AI-based attacks.
+Added: our on-device ML models assess how an endpoint behaves, they are completely independent of the attack vector itself or any further updates and configurations.
+Added: • Platform approach enables protection and visibility across all digital assets .
Our Singularity Platform provides organizations with our full suite of real-time threat prevention, detection, and remediation capabilities across their endpoints, cloud workloads, servers, operating systems, and user credentials.
2 unchanged sentences
• Provides autonomous protection and remediation .
−Removed: Powered by our AI and Storyline technology, our agents defend and heal endpoints autonomously and in real-time by stopping malicious processes, quarantining, remediating, and even rolling back events to surgically keep endpoints clean.
−Removed: Rollbacks are performed autonomously and in real-time, eliminating the need for manual, expensive, and time-consuming incident cleanup.
+Added: Powered by our AI and Storyline technology, our agents can defend and heal endpoints autonomously and in real-time by stopping malicious processes, quarantining, remediating, and even rolling back events to surgically keep endpoints clean.
+Added: Rollbacks can be performed autonomously and in real-time, eliminating the need for manual, expensive, and time-consuming incident cleanup.
+Added: Further, Purple AI allows security teams to quickly identify and respond to threats through natural language queries and automated investigation workflows, significantly reducing response times.
• Enables facilitated, as well as fully automated, incident investigation and proactive threat hunting .
Our platform gives security teams the ability to search their IT assets for behavioral indicators via a single-click interface.
−Removed: Our deep visibility and contextual data empower security analysts of all skill levels to run queries at very fast speeds, and quickly understand the root causes behind the most complex threats.
+Added: Our platform’s unified visibility and contextual data empower security analysts of all skill levels to run queries at very fast speeds, and quickly understand the root causes behind the most complex threats.
Purple AI supercharges the security analyst experience, with simplified user experience, improved efficiency, and more holistic hunting capabilities.
14 unchanged sentences
• Flexible deployment model that delivers rapid time to value.
−Removed: Our Singularity Platform can be quickly and easily deployed on a diverse range of environments of our customers, and without extensive configuration or maintenance, including the public, private or hybrid cloud, making it relevant for organizations of all sizes with varying compliance and regulatory requirements.
+Added: Our Singularity Platform can be quickly and easily deployed on a diverse range of environments for our customers, and without extensive configuration or maintenance, including the public, private or hybrid cloud, making it relevant for organizations of all sizes with varying compliance and regulatory requirements.
+Added: In addition, our platform solutions offer unprotected device discovery and innovative peer to peer installation.
• Rich partner ecosystem .
−Removed: We have deep partnerships with many of the leading Independent Software Vendors (ISVs), alliance partners whom we engage with on joint technology and/or go-to-market strategies;
+Added: We have deep partnerships with many of the leading Independent Software Vendors (ISVs), alliance partners with whom we engage in joint technology and/or go-to-market strategies;
and channel partners, such as distributors, resellers, Managed Service Providers (MSPs), Managed Security Service Providers (MSSPs), Managed Detection and Response Providers (MDRs), Original Equipment Manufacturers (OEMs), and Incident Response (IR) firms.
Our partner relationships provide us with significantly broader market reach.
−Removed: In particular, we do not currently have a services offering that competes with our IR partners.
−Removed: Therefore, they seek to bring us into remediation situations where their customers often become our customers.
As a result, many of our partners act as force multipliers and broaden our market reach.
3 unchanged sentences
It allows us to develop state-of-the-art solutions, innovate faster, and solve many of the industry’s most complex problems.
−Removed: We believe our leading security and platform breadth position us well to consolidate and unify cybersecurity spend across multiple categories.
−Removed: Over time, we believe this unification and re-architecture of the prevention, detection and response paradigm will create new opportunities for additional products and features.
+Added: We believe our leading security and platform breadth positions us well to consolidate and elevate cybersecurity spend across multiple categories.
+Added: Over time, we believe this unification of the prevention, detection and response paradigm will create new opportunities for additional products and features.
Growth Strategy
3 unchanged sentences
As a pioneer in autonomous and AI-based cybersecurity, we have established a track record for expanding our platform capabilities with new modules.
−Removed: Through convergence of cybersecurity and data, we intend to bring our customers and prospects a variety of differentiated cybersecurity-first, AI powered, and enhanced data analytics offerings.
+Added: Through the convergence of cybersecurity and data, we intend to bring our customers and prospects a variety of differentiated cybersecurity-first, AI-powered, and enhanced data analytics offerings.
Having access to some of the world’s top cybersecurity and AI talent through our distributed workforce model and our research and development centers across North America, Europe, the Middle East, and Asia allows us to continue hiring top technical talent and innovate to maintain our leading position.
2 unchanged sentences
We intend to continue to add new customers through a product-first approach.
−Removed: This approach enables us to build trusted relationships with a large and rapidly growing group of highly influential managed service and incident response providers, as opposed to creating a dynamic of competition that creates friction between product vendors and service providers.
−Removed: We are currently certified under the Federal Risk and Authorization Management Program (FedRAMP), and we intend to further grow our footprint within the US federal government.
+Added: This approach enables us to build trusted relationships with a large and rapidly growing group of highly influential managed service and incident response providers, as opposed to creating a dynamic of competition that generates friction between product vendors and service providers.
+Added: As a Federal Risk and Authorization Management Program (FedRAMP) High certified vendor, we are currently authorized to operate under the FedRAMP, and we intend to further grow our footprint within the U.S.
+Added: federal government.
We intend to continue to build our relationships with our channel partners, including MSPs, MSSPs, MDRs, OEMs, and IR firms, as well as our alliance partners to expand our market reach.
• Increase adoption within our customer base .
−Removed: We have successfully grown our revenue from our customer base as they deploy additional licenses and expand the use of our platform by adoption of adjacent solutions.
+Added: We have successfully grown our revenue from our customer base as they deploy additional licenses and expand the use of our platform by adopting adjacent solutions.
As we enhance our platform functionality and value proposition, we expect many of our customers to adopt additional platform functionalities and Singularity modules to address all of their cybersecurity use cases through the same platform.
−Removed: Our customers can seamlessly activate additional modules to adopt more platform capabilities.
−Removed: Module-driven growth has been broad-based with notable strength from our cloud and data modules.
−Removed: Our platform also enables us to show in-product promotions and trials and to drive the expansion of our Singularity Modules.
+Added: Our customers can seamlessly activate additional platform solutions to adopt more product offerings.
+Added: Platform-driven growth has been broad-based with notable strength from our cloud security, data, and Purple AI solutions.
+Added: Our platform also enables us to show in-product promotions and trials and drive the expansion of our Singul arity Modules.
The success of our land-and-expand strategy is evidenced by our dollar-based net retention rate of 110% as of January 31, 2025.
• Expand our global footprint.
−Removed: Revenue generated outside of the US was 36% for fiscal 2024, compared to 35% for fiscal 2023.
−Removed: We intend to continue to grow our international customer base by increasing our investments in international operations.
+Added: Revenue generated outside of the U.S.
+Added: was 37% for fiscal 2025, compared to 36% for fiscal 2024.
+Added: We intend to continue to grow our international customer base by increasing our
+Added: investments in international operations.
We are continuing to invest and hire talent to expand our business in Asia-Pacific and Europe, the Middle East and Africa, and Latin America.
8 unchanged sentences
Our Singularity Platform
−Removed: Our Singularity Platform delivers AI-powered autonomous threat prevention, detection, and response capabilities across an organization’s endpoints, cloud workloads, and identity credentials, enable seamless and autonomous protection against a full spectrum of cyber threats.
+Added: Our Singularity Platform delivers AI-powered autonomous threat prevention, detection, response, and exposure management capabilities across an organization’s endpoints, cloud workloads, and identity credentials, enabling seamless and autonomous protection against a full spectrum of cyber threats.
We built our platform to be deployed as a cloud service in public, private, and hybrid cloud environments.
−Removed: We further offer customers a broad set of capabilities through our Singularity Modules.
−Removed: We price our modules as a subscription on a per agent basis.
+Added: We further offer customers a broad set of capabilities through our platform solutions.
Our platform capabilities are connected through three key patented technologies:
1 unchanged sentence
Our data analytics technology can ingest, correlate, and query petabytes of structured and unstructured data from disparate external and internal sources at machine speed.
−Removed: Our Static, Behavioral, and Streaming AI technologies that run in a distributed manner on our data cloud as well as on every endpoint and every cloud workload we protect.
−Removed: We overlay the entire user experience with Purple AI, improving the efficiency and effectiveness of security analyst operations.
+Added: Our Static, Behavioral, and Streaming AI technologies run in a distributed manner on our data cloud as well as on every endpoint, cloud workload, or user identity we protect.
+Added: We overlay the entire experience with Purple AI, using generative AI to improve the efficiency and effectiveness of overall security operations.
Our Storyline technology builds a model of real-time running processes and their behaviors, to create rich, contextual data narratives which become the input to our Behavioral AI model.
−Removed: Storyline powers our unified Endpoint Protection Platform (EPP), EDR, or XDR functionalities.
−Removed: Storyline is the foundation of our EPP providing unprecedented levels of visibility, with contextual information for benign and malicious processes.
−Removed: We extend our fundamental protection, visibility and response capabilities well beyond the endpoint to cloud, and third-party solutions in our Singularity Platform.
+Added: Storyline is the foundation of our security offerings providing unprecedented levels of visibility, with contextual information for benign and malicious processes.
+Added: Advanced Platform Capabilities
+Added: • Binary Vault .
+Added: Enables customers to store and download copies of any file that has been executed in their environment for forensic review and reverse engineering.
+Added: Binary Vault can store a copy of every known binary, both benign and malicious, that executes across an enterprise.
+Added: • Remote Script Orchestration (RSO) .
+Added: Enables enterprises and incident responders to investigate and respond to threats on multiple endpoints across the organization remotely, enabling them to easily manage their entire fleet.
+Added: Our remote script orchestration capability allows concurrent execution of custom and preset scripts across an enterprise, instead of having to triage with a device-by-device approach.
+Added: • Storyline Active Response (STAR) .
+Added: STAR gives users the capability to set custom Indicators of Compromise (IOC) based rules for real-time analysis, alerting, and automatic response workflows.
+Added: Our STAR module is also capable of ingesting threat intelligence feeds to enhance and correlate analyses.
+Added: • Data Retention .
+Added: Modern attacks can take days and weeks to initiate after infiltration.
+Added: Therefore, it is critical for a security solution to provide visibility for extended periods of time.
+Added: This enhances both retrospective
+Added: analysis and proactive hunting measures.
+Added: We offer data retention for up to three years or more to provide maximum value from our Deep Visibility Threat Hunting module.
+Added: • Cloud Funnel.
+Added: Allows organizations to export their data in real-time to their private data lakes, whether locally-hosted or in the cloud.
+Added: It securely streams a copy of all endpoint telemetry to a customer’s local data lake for further correlation with other security tools, while allowing offline data storage for audit and compliance.
Proprietary Security Data Lake
−Removed: Singularity Data Lake (SDL), formerly DataSet, is our fully integrated security data lake that seamlessly fuses together the data, access, control, and integration planes of EPP, EDR, CWS, Identity Protection, and IoT security into a centralized platform.
+Added: Singularity Data Lake (SDL) is our fully integrated security data lake that seamlessly fuses together the data, access, control, and integration planes of Endpoint Protection (EPP), Endpoint Detection and Response (EDR), Cloud Workload Security (CWS), Identity Protection, and IoT security into a centralized platform.
With our Singularity Platform, enterprises gain visibility and access to their security data through a single pane of glass across multiple sources.
5 unchanged sentences
• Correlate .
−Removed: We correlate events from multiple sources into Storylines which contains event data, both benign and malicious, in a context-rich format for easy understanding.
+Added: We correlate events from multiple sources into Storylines which contain event data, both benign and malicious, in a context-rich format for easy understanding.
Our Singularity Platform enriches and visualizes every Storyline with information from Threat Intelligence sources, both homegrown and through integrations with third-party intelligence information services.
5 unchanged sentences
It further enables our platform adoption by the world’s largest organizations, MSPs, MSSPs, MDRs, OEMs, and IR firms.
−Removed: XDR Integrations
−Removed: Singularity XDR unifies and extends detection, investigation, and response capability across the entire enterprise, providing security teams with centralized end-to-end enterprise visibility, powerful analytics, and automated responses across the technology stack.
−Removed: This empowers security teams to see data collected by disparate security solutions from all platforms, including endpoints, cloud workloads, network devices, email, identity, and more, within a single dashboard.
−Removed: It enables customers to seamlessly extend the power of the Singularity Platform across the entire IT stack—regardless of vendor—to automate response actions.
−Removed: Our XDR integrations give customers the flexibility to operate our platform as a platform-as-a-service in their own customized graphical user interface and workflows simply by leveraging our robust, well-documented and easy-to-use APIs.
IT and Security Operations
3 unchanged sentences
Our platform has the following capabilities:
−Removed: • Application Inventory .
−Removed: Maintains a software application inventory in real-time across an entire organization and their attributes such as their version numbers, install date, and publisher.
−Removed: Customers can quickly perform software frequency analysis and compliance checks.
−Removed: • Scanless Vulnerability Assessment .
−Removed: Using our real-time organization-wide Application Inventory database, our solution can provide highly accurate and dynamic Vulnerability Management information without the need to deploy another solution.
−Removed: • Device Control.
−Removed: Allows maximum granularity and flexibility when defining Device Control policies to prevent data exfiltration and malware entry.
−Removed: Our Device Control capability provides granular control for Bluetooth devices in conjunction with other forms of USB media.
−Removed: • Native Operating System Host Firewall Control .
−Removed: Firewall control provides visibility, malware prevention, and network segmentation by utilizing the native firewall capabilities on Windows, macOS, and Linux devices.
−Removed: • File Integrity Monitoring .
−Removed: Our File Integrity solution (FIM) is able to automatically alert or remediate unauthorized changes to these files.
−Removed: Organizations use our FIM to be compliant with Payment Card
−Removed: Industry Data Security Standard (also known as “PCI DSS”) and other regulatory requirements while eliminating other agents, products, and spend.
−Removed: Singularity Platform Product Offerings
+Added: Application Inventory, Scanless Vulnerability, Assessment, Device Control, Native Operating System Host Firewall Control, and File Integrity Monitoring.
+Added: Singularity Platform Solution Offerings
Our Singularity Platform offers a highly flexible deployment model.
−Removed: It is primarily hosted in Amazon Web Services (AWS) in multiple regions - North America, Europe, Asia Pacific, and AWS GovCloud.
+Added: It is primarily hosted in Amazon Web Services (AWS) in multiple regions across North America, Europe, Asia Pacific, and AWS GovCloud.
Our platform can also be hosted in Google Cloud, as well as customers’ on-premise data centers, and private and hybrid cloud environments for organizations with specialized hosting and data sovereignty needs.
4 unchanged sentences
Our entry level security solution for organizations that want to replace antivirus tools with our EPP which we believe is more effective and easier to manage than legacy antivirus and next-generation antivirus products.
−Removed: Singularity Core includes our Static and Behavioral AI models and autonomous threat response and rollback features.
• Singularity Control.
Made for organizations seeking best-of-breed security with the addition of our “security suite” features for endpoint management.
−Removed: It provides additional features for control network connectivity, USB and Bluetooth peripherals, and uncovering rogue devices.
+Added: It provides additional features for controlling network connectivity, USB and Bluetooth peripherals, and uncovering rogue devices.
• Singularity Complete.
−Removed: Our flagship offering that includes a comprehensive suite of product capabilities.
+Added: Our flagship offering includes a comprehensive suite of EDR product capabilities.
• Singularity Commercial.
−Removed: Provides a solid foundational security solution across endpoints, cloud, and identities, ensuring that an organization has the necessary tools to stay secure.
+Added: Provides AI-powered foundational protection for identities, endpoints, and the cloud.
• Singularity Enterprise.
−Removed: Provides comprehensive protection across endpoints, cloud, and identities as well as threat intelligence, vulnerability, and diverse set of services.
−Removed: Endpoint Protection (EPP)
−Removed: Our next-generation cybersecurity technology provides autonomous real-time protection across all operating systems, including Windows, Linux, macOS, and cloud-native and containerized workloads.
+Added: Provides comprehensive protection across endpoints, cloud, and identities as well as cost-effective services to safeguard businesses.
+Added: Generative AI-Security Agent (Purple AI)
+Added: Purple AI is powered by our generative AI-security innovation and is fully-integrated across Singularity solutions.
+Added: It helps organizations achieve more autonomous Security Operations (SOC).
+Added: Today’s security teams face a sophisticated threat landscape and endless alert queues.
+Added: Purple AI delivers industry-leading AI capabilities to reduce mean time to detect, hunt and investigate risks to your business.
+Added: Security Information and Event Management (SIEM)
+Added: Powered by Singularity Data Lake (SDL), Singularity AI-SIEM is a cloud-native SaaS solution that redefines security operations.
+Added: By eliminating data schema requirements from the ingestion process and index limitations from querying, Singularity AI-SIEM can process massive amounts of live data in real time, delivering log management, data analytics, and alerting with unparalleled speed, performance, and efficiency.
+Added: Singularity AI SIEM offers enterprise visibility, real-time detection, and enhanced productivity.
+Added: This helps improve overall security posture, boost cyber resilience, increase SOC efficiency, and maintain compliance.
+Added: Singularity AI-SIEM is built for the cloud and offered as a cloud service, freeing up engineering resources from managing data refineries.
+Added: Endpoint Security (EPP and EDR)
+Added: Our next-generation endpoint security provides autonomous real-time protection across all operating systems, including Windows, Linux, macOS, and cloud-native and containerized workloads.
Our endpoint protection is powered by distributed AI which resides both on devices as well as in the cloud for always-on, machine-speed protection.
3 unchanged sentences
Our on-device AI model can detect file-based attacks, even those that are previously unknown zero-day exploits, with extreme precision in milliseconds.
−Removed: Our Static AI model is the output of a supervised machine learning cycle that is trained on a continuously evolving data set from billions of files coupled with the data from multiple threat intelligence sources, including our proprietary Embedded Threat Intelligence.
+Added: Our Static AI model is the output of a supervised ML cycle that is trained on a continuously evolving data set from billions of files coupled with data from multiple threat intelligence sources, including our proprietary Embedded Threat Intelligence.
• Behavioral AI.
1 unchanged sentence
The accuracy of our Behavioral AI is powered by the rich contextual information that is encoded in each Storyline that is being scored.
−Removed: As a result, our Behavioral AI is attack vector agnostic because it is not limited to any particular pathway used by attackers to penetrate a system, such as zero-day vulnerability exploits and living off the land attacks.
+Added: result, our Behavioral AI is attack vector agnostic because it is not limited to any particular pathway used by attackers to penetrate a system, such as zero-day vulnerability exploits and living off the land attacks.
• Embedded Threat Intelligence .
1 unchanged sentence
Our Purple AI for Threat Intelligence expands and accelerates an organization’s ability to deliver deep insights needed to proactively protect against threats and mitigate risk.
−Removed: Endpoint Detection and Response (EDR)
Unlike first-generation EDR products that are reactive and mainly focused on collecting data, our ActiveEDR solutions leverage Storylines to reduce analysis time and to automate response actions by significantly minimizing the time between detection and response through technology automation.
11 unchanged sentences
Our response capabilities enable security analyst to Kill, Quarantine, Remediate, Remote Shell, and Rollback .
−Removed: Singularity Data Lake
−Removed: Building upon the acquisition of Scalyr, Inc., Singularity Data Lake is a revolutionary live enterprise data platform for data queries, analytics, insights, and retention.
−Removed: It expands our capabilities beyond cybersecurity use cases, such as data analytics.
−Removed: Singularity Data Lake takes a security-first perspective to data analytics.
−Removed: It is a cloud-native flexible enterprise data platform built for all types of data live or historical, at petabyte scale.
−Removed: By eliminating data schema requirements from the ingestion process and index limitations from querying, Singularity Data Lake can process massive amounts of live data in real time, delivering log management, data analytics, and alerting with unparalleled speed, performance, and efficiency built on a security and privacy-first foundation.
−Removed: As a software as a service (SaaS) platform, it can be deployed in minutes and is easy to operate without any maintenance requirement.
−Removed: Singularity Data Lake is built for the cloud and offered as a cloud service freeing up engineering resources from managing data refineries.
−Removed: It is built with the security and controls that enterprises require for their most precious asset:
+Added: Our endpoint security also covers mobile devices including iOS, Android, and ChromeOS devices.
+Added: It delivers mobile threat defense that is local, adaptive, and real-time, to thwart mobile malware and phishing attacks at the device, with or without a cloud connection.
+Added: Our leading on-device behavioral AI product dynamically detects never before seen malware, phishing, exploits, and man-in-the-middle attacks.
+Added: Singularity Mobile provides security and data privacy to support zero trust.
Cloud Security
1 unchanged sentence
Offering these in a unified security platform helps reduce operational complexity and improve integrated protection and remediation capabilities.
−Removed: Our CWS solution extends distributed, autonomous endpoint protection, detection, and response to compute workloads running in public clouds, private clouds, and on-premise data centers.
+Added: Our agent-based CWS solution extends distributed, autonomous endpoint protection, detection, and response to compute workloads running in public clouds, private clouds, and on-premise data centers.
Our runtime protection delivers prevention, detection, response and hunting functionalities purpose-built for these environments.
1 unchanged sentence
Our Cloud Application Control locks down the running image of servers and containers to prevent configuration drift and protect against unauthorized changes, in line with best practices for cloud workload security.
−Removed: Our Cloud Security Posture Management (CSPM) solution automatically and continuously identifies and responds to cloud misconfigurations and reports on compliance with industry benchmarks like NIST, MITRE, CIS, PCI-DSS, and more.
+Added: Our agentless CNAPP delivers multi-cloud insights spanning asset discovery, misconfigurations, vulnerability management, and more.
+Added: Our CNAPP solutions include:
+Added: • Cloud Security Posture Management (CSPM) automatically and continuously identifies and responds to cloud misconfigurations and reports on compliance with industry benchmarks.
Furthermore, it detects vulnerabilities in cloud infrastructure including infrastructure as a code (IoC) scanning, secret scanning, and code to runtime monitoring across major cloud services (AWS, GCP, Azure, Oracle, Alibaba, and more).
−Removed: Our Cloud Data Security solution protects cloud environments from the spread of malware through automated file threat analysis.
+Added: • Cloud Infrastructure Entitlement Management (CIEM) offers identity management, access controls, continuous monitoring, and advanced analytics to enforce zero-trust network security principles from a centralized console.
+Added: • Cloud Data Security (CDS) protects cloud environments from the spread of malware through automated file threat analysis.
Customers receive protection from malicious files in Amazon Simple Storage Service (S3) and NetApp.
Our AI-powered threat detection delivers unparalleled visibility and proactive protection against advanced threats, ensuring security and compliance.
+Added: • AI Security Posture Management (AI-SPM) helps address the evolving risks associated with generative AI.
+Added: AI-SPM was designed to safeguard AI models and pipelines deployed on managed AI services such as Amazon SageMaker, Amazon Bedrock, Azure OpenAI, and Google Vertex AI.
Identity Security
−Removed: Our identity security portfolio acts as a force multiplier for security teams, allowing them to assume a more robust security posture and extend the capabilities of the Singularity Platform to protect user credentials.
+Added: Our identity security solutions act as a force multiplier for security teams, allowing them to assume a more robust security posture and extend the capabilities of the Singularity Platform to protect user credentials.
Our Singularity Identity solution detects and responds to identity-based attacks and finds attackers early, before they can exploit identities.
1 unchanged sentence
Our identity security portfolio includes:
−Removed: • Singularity Identit y detects real-time identity attacks across the enterprise that target Active Directory and Active Directory (Azure AD).
+Added: • Singularity Identit y Threat Detection and Response (ITDR) detects real-time identity attacks across the enterprise that target identity access management services like Entra ID.
It delivers holistic identity threat detection and response including credential theft, privilege escalation, lateral movement, data cloaking, identity exposure, and more for zero trust cybersecurity.
−Removed: • Singularity Ranger Active Directory uncovers vulnerabilities in Active Directory and Azure AD with a cloud-delivered, continuous identity assessment solution.
−Removed: It provides instant Active Directory visibility of misconfigurations, suspicious password changes, credential harvesting, unauthorized access, and more.
−Removed: • Singularity Hologram lures network and insider threat actors into revealing themselves.
−Removed: Through misdirection of the attack with tactics including breadcrumbs and decoy accounts, files and IPs, organizations gain the advantage of time to detect, analyze, and stop an attacker without impacting enterprise assets.
−Removed: Attack Surface Management
−Removed: Our Ranger module enables control of the enterprise network attack surface in real time by discovering, identifying, and containing any device-based threat.
−Removed: Ranger leverages the presence of our software in an organization’s network to track assets, create an Enterprise Asset Map, perform network segmentation, deploy our agents to unprotected devices, and provide risk scores.
+Added: Exposure and Vulnerability Management
+Added: Our vulnerability management solutions enable control of the enterprise network attack surface in real time by discovering, identifying, and containing any device-based threat.
+Added: Exposure Management leverages the presence of our software in an organization’s network to track assets, create an Enterprise Asset Map, perform network segmentation, deploy our agents to unprotected devices, and provide risk scores.
Ranger provides organization-wide inventory and control of IoT devices by discovering connected devices, including virtual machines, containers, and IoT devices such as printers, smart TVs, and thermostats.
−Removed: Ranger has four key component features:
−Removed: • Rogue Discovery .
−Removed: Enables administrators to identify unprotected or “rogue” assets and verifies our agent is installed on all corporate assets.
−Removed: • Ranger Insight .
−Removed: Provides a clear picture of the inventory and risk in the IoT environment, including open ports, header and application versions, and vulnerability information,
−Removed: • Rogue Control .
−Removed: Creates network segments to restrict access to a corporate network.
−Removed: Rogue Control prevents unsanctioned devices, such as guest machines, from connecting to authorized networks.
−Removed: • Ranger Auto-Deploy .
−Removed: Rapidly deploys our agents using service credentials to unprotected endpoints with no additional IT infrastructure or software.
−Removed: Auto-Deploy provides security teams with complete, instant asset coverage.
−Removed: Mobile Endpoint Security
−Removed: Our Singularity Mobile module enables customers to manage mobile devices through behavioral AI-driven protection, detection, and response directly for iOS, Android, and ChromeOS devices.
−Removed: It delivers mobile threat defense that is local, adaptive, and real-time, to thwart mobile malware and phishing attacks at the device, with or without a cloud connection.
−Removed: It is the industry’s leading on-device behavioral AI product that dynamically detects never before seen malware, phishing, exploits, and man-in-the-middle attacks.
−Removed: Singularity Mobile provides security and data privacy to support zero trust.
−Removed: XDR Power Tools
−Removed: Our Singularity XDR Power Tools modules complement and extend Singularity EDR & XDR capabilities for organizations seeking advanced investigative workflows and a long, retrospective look back to support comprehensive incident response.
−Removed: These modules include:
−Removed: • Binary Vault .
−Removed: Enables customers to store and download copies of any file that has been executed in their environment for forensic review and reverse engineering.
−Removed: Binary Vault can store a copy of every known binary, both benign and malicious, that executes across an enterprise.
−Removed: This enables advanced security analysts to download a copy of any file that has been executed in their environment for forensic review and reverse engineering, and provides them with access to a broader dataset and more complete lookback capabilities than any of our competitors.
−Removed: • Remote Script Orchestration (RSO) .
−Removed: Enables enterprises and incident responders to investigate and respond to threats on multiple endpoints across the organization remotely, enabling them to easily manage their entire fleet.
−Removed: In incident response situations, rapid artifact extraction and endpoint state querying across the entire enterprise is critical.
−Removed: Our remote script orchestration module allows concurrent execution of custom and preset scripts across an enterprise, instead of having to triage with a device-by-device approach.
−Removed: By converging our protection, detection, and response capabilities with remote script orchestration, our platform is the only solution that is needed to respond to a breach.
−Removed: • Storyline Active Response (STAR) .
−Removed: STAR gives users the capability to set custom Indicators of Compromise (IOC) based rules for real-time analysis, alerting, and automatic response workflows.
−Removed: Our STAR module is also capable of ingesting threat intelligence feeds to enhance and correlate analyses.
−Removed: The STAR module uses Streaming AI technology to match billions of events to tens of millions of IOCs at the time of ingestion.
−Removed: STAR is a threat hunting and workflow orchestration force multiplier.
−Removed: Without STAR, it is difficult for security analysts to keep pace with the number and complexity of emerging threats from an EDR perspective.
−Removed: • Data Retention .
−Removed: Offers data retention from one month to three years and beyond.
−Removed: Modern attacks can take days and weeks to initiate after infiltration.
−Removed: Therefore, it is critical for an EDR solution to provide visibility for extended periods of time.
−Removed: This enhances both retrospective analysis and proactive hunting measures.
−Removed: Our platform has been designed and built to support extended data retention to time periods that far exceed what others are able to offer, and we do so on a cost-efficient basis due to our data retention architecture.
−Removed: We offer data retention for up to three years to provide maximum value from our Deep Visibility Threat Hunting module.
−Removed: • Cloud Funnel.
−Removed: Allows organizations to export their XDR data in real-time to their private data lakes, whether locally-hosted or in the cloud.
−Removed: Moreover, it securely streams a copy of all endpoint EDR telemetry to a customer’s local data lake for further correlation with other security tools, while allowing offline data storage for audit and compliance.
+Added: These solutions include:
+Added: • Ranger Entra ID uncovers vulnerabilities in identity infrastructure and credentials such as Entra ID with a cloud-delivered, continuous identity assessment solution.
+Added: It provides instant Active Directory visibility of misconfigurations, suspicious password changes, credential harvesting, unauthorized access, and more.
+Added: • Extended Security Posture Management (xSPM) addresses the lack of visibility into pre- and post-breach issues across multiple siloed security products.
+Added: The result is faster triage, simplified remediation processes, and reduced costs.
+Added: xSPM delivers proactive posture management with real-time insights into vulnerabilities and misconfigurations.
+Added: It unifies exposure management by optimizing risk reduction workflows and providing comprehensive visibility through consolidating and prioritizing security findings from SentinelOne and third-party solutions.
+Added: • Singularity Vulnerability Management (VM) is a network discovery and vulnerability management solution that identifies and prioritizes risks to an enterprise's attack surface.
+Added: It detects vulnerabilities and provides dynamic prioritization based on the likelihood of exploitation and business criticality.
+Added: Using the SentinelOne agent, it delivers streamlined EDR, network discovery, and vulnerability management.
+Added: Vulnerability Management increases cyber resilience and reduces complexity by autonomously discovering unmanaged assets, evaluating their risk, and automating controls to isolate unmanaged endpoints.
+Added: • Singularity Network Discovery (formerly Ranger) is a real-time network attack surface control solution that identifies all IP-enabled devices on your network without requiring additional agents, hardware, or
+Added: network changes.
+Added: It uses advanced ML device fingerprinting to inventory and categorize assets, protects against device-based threats with 1-click isolation of suspicious devices, and efficiently deploys agents to unsecured endpoints with configurable peer-to-peer job automation.
+Added: Threat Services
+Added: Singularity Threat Services provide a deeper understanding of the threat landscape, monitoring emerging threats to proactively reduce risk and identify adversaries in a digital environment.
+Added: • Singularity MDR offers 24/7/365 managed detection and response coverage that extends beyond the endpoint, providing comprehensive threat detection across endpoints, cloud workloads, identity, and more.
+Added: The service combines Singularity Platform's rich intelligence and powerful AI automations with the threat and MDR expertise of the team to deliver faster, more effective detection and response support.
+Added: The service addresses challenges such as talent and expertise shortage, unmanageable alert volumes, and system complexity.
+Added: • Vigilance MDR provides Managed Detection and Response services to help security and IT professionals monitor and respond to emerging threats.
+Added: This offers 24/7/365 monitoring, triage, response, and hunting, with a team of in-house security experts helping to provide seamless integration with the Singularity Platform.
+Added: With fast response times and customer support, we add a human lens to cybersecurity understanding to augment our customers’ in-house security teams.
• WatchTower delivers threat hunting and insights to help customers understand the nature of threats, targeted attacks, threat actors, and risk reduction.
−Removed: It provides intelligence-driven, cross-platform threat hunting to help customers adapt to the modern threat landscape through visibility and actionability to novel attacker techniques, global APT, campaigns, and emerging cybercrimes.
−Removed: As we track threat actors globally, WatchTower parses, consolidates, and contextualizes threat intelligence sources and hunts for threats in our customers’ environments.
+Added: It provides intelligence-driven, cross-platform threat hunting to help customers adapt to the modern threat landscape through visibility and actionability to novel attacker techniques, global advance persistent threat (APT), campaigns, and emerging cybercrimes.
WatchTower distills intelligence down to its most valuable insights, such as a summary bulletin of the threat, its impact on our customers’ organizations, and how the threat can be addressed.
−Removed: Vigilance MDR
−Removed: Vigilance MDR leverages the expertise of our in-house security analysts to review, act upon, and document every threat that our Singularity Platform autonomously identifies.
−Removed: It adds a human lens to cybersecurity understanding and augments our customers’ in-house security teams.
−Removed: Due to the autonomous nature of our Singularity Platform, Vigilance MDR provides rapid response times to threats.
−Removed: Our technology-powered digital forensics analysis and incident response offering takes Vigilance MDR two steps further and provides customers with a full-service solution and enables customers to benefit from world-class SOC operations with customized threat annotation and response.
−Removed: Vigilance MDR helps customers of all sizes augment their cybersecurity staff with a 24/7/365 globally-distributed operation which operates under the industry’s only publicly available Service Level Agreement.
+Added: • PinnacleOne is a strategic advisory group that addresses multifaceted security challenges facing organizations.
+Added: These services include board briefings and c-suite coaching, enterprise threat modeling and risk management, incident readiness planning, and incident management.
+Added: PinnacleOne’s goal is to empower organizations to optimally manage technology and cybersecurity risks.
+Added: Independent Validation and Testing
+Added: Our solutions are regularly assessed by recognized third-party researchers and test labs, where we are consistently recognized as a leader including MITRE Engenuity ATT&CK evaluations, Gartner EPP Magic Quadrant and other industry benchmarking frameworks.
+Added: These independent tests consistently showcase Singularity’s high-fidelity detection rates, minimal performance overhead, and advanced threat response capabilities—further validating our autonomous, AI-driven approach.
Our Customers
As of January 31, 2025, we had customers using our Singularity Platform in approximately 90 countries.
−Removed: We are protecting the digital infrastructures of thousands of customers around the world, including large global enterprises, small and medium sized businesses, and government organizations.
+Added: We are protecting the digital infrastructures of over 14,000 direct customers around the world, including large global enterprises, small and medium sized businesses, and government organizations.
Our business does not depend on any single end customer.
5 unchanged sentences
We also engage temporary employees and consultants as needed to support our operations.
−Removed: Our US-based employees include team members in all key functions, including go-to-market, customer success, technology, product, and support.
−Removed: Each of our US offices has a different functional focus but shares a driven, customer-centric culture.
−Removed: Our headquarters in Mountain View, California is where the majority of our executive team, marketing, finance, legal, people and talent, and sales operations is located, which supports cross functional collaboration.
+Added: Our U.S.-based employees include team members in all key functions, including go-to-market, customer success, technology, product, and support.
+Added: Each of our U.S.
+Added: offices has a different functional focus but shares a driven, customer-centric culture.
+Added: Our headquarters in Mountain View, California is where the majority of our executive, marketing, finance, legal, people and talent, and sales operations team members are located, which supports cross-functional collaboration.
Our office in Tel Aviv, Israel benefits from Israel’s concentration of cybersecurity experts.
1 unchanged sentence
Our office in Prague, Czech Republic houses research and product development functions to augment current teams across the globe and the expansion of our global engineering organization.
−Removed: Our European head office is in Amsterdam, Netherlands, which we chose for its talent pool, language versatility, diversity, labor and tax laws, and central location in relation to our offices in the US and Israel.
+Added: Our European headquarters is in Amsterdam, Netherlands, which we chose for its talent pool, language versatility, diversity, labor and tax laws, and central location in relation to our offices in the U.S.
Our Dubai office is primarily focused on go-to-market activities in the Middle East and Africa and supports our new business efforts in connecting with both customers and partners across these regions.
−Removed: Our Bangalore, India office houses engineering talent as well as supportive functions across general, administrative and go-to-market.
+Added: Our Bangalore, India office houses engineering talent as well as support functions across general, administrative and go-to-market.
The economic climate in India continues to expand with endless potential.
3 unchanged sentences
Our mission is to Secure Tomorrow TM and our purpose is to be a Force for Good.
−Removed: Our core values are at the foundation of our equitable culture and guide our approach on how we build and grow our business with all stakeholders:
+Added: Our core values are at the foundation of our inclusive culture and guide our approach on how we build and grow our business with all stakeholders:
Be dependable.
18 unchanged sentences
Here you will build your future , with amazing benefits and tools to grow.
−Removed: Here you will enjoy your work , in a culture that is built on equity, integrity and autonomous action.
+Added: Here you will enjoy your work , in a culture that is built on equal opportunity, integrity and autonomous action.
We value transparent and respectful communication as key components of our continuous feedback culture, something that we view as a key driver of our business success.
1 unchanged sentence
We believe in the strengths of diversity and are committed to building out a diverse talent base.
−Removed: We plan to continue investing in hiring employees both in and outside of the US.
+Added: We plan to continue investing in hiring employees both in and outside of the U.S.
We received multiple workplace accolades in 2024.
−Removed: • Fortune recognized SentinelOne as a Best Workplace in Technology, Best Medium Workplace, Best Workplace for Millennials, and Best Workplace in the Bay Area.
−Removed: • Dun’s 100 list acknowledged SentinelOne as one of the Best High Tech Companies to Work for in 2023.
−Removed: • SentinelOne also achieved Great Place to Work certification (December 2023 - December 2024) for the US, UK, France, India, Netherlands, Australia, Canada, Slovakia, Germany, Italy, UAE, Poland, Spain, Czechia, and Singapore.
−Removed: • SentinelOne received the Best Workplaces in Tech in the UK, Best Workplaces for Women in the UK and Best workplaces in Technology in France.
+Added: • Fortune recognized SentinelOne as a Fortune Future 50 company, Best Workplace in Technology, Best Workplace for Parents, Best Workplace in the Bay Area.
+Added: • Dun’s 50 list acknowledged SentinelOne as one of the Best High Tech Companies to Work for in 2024 and as a Best High Tech Companies to work for Parents.
+Added: News & World Report recognized SentinelOne as a Best Companies To Work For, Best Companies to Work For in IT, Software & Services and Best Companies to Work For in the West.
+Added: • Built In acknowledged SentinelOne as a 2024 Best Places to Work Remote.
+Added: • SentinelOne also achieved Great Place to Work certification (December 2024 - December 2025) for the U.S., U.K., France, India, Netherlands, Australia, Canada, Costa Rica, Japan, Slovakia, Germany, Italy, UAE, Poland, Spain, Czechia, and Singapore.
+Added: • SentinelOne received the Best Workplaces in Tech in the U.K., Best Workplaces for Wellbeing in the U.K., Best Workplaces in Technology in Spain, Best Workplaces in Technology in GCC, Best Workplaces in Technology in Australia, and Best Workplaces in Poland.
Our presence and engagement across all social media platforms continue to grow rapidly, a reflection of the market’s perception of us and our leadership as innovators in the cybersecurity space.
3 unchanged sentences
Our compensation and benefits program is intended to anticipate and meet the needs of our employees.
−Removed: In addition to base salary, these programs, which vary by country and region, include bi-annual bonuses, equity awards, an employee stock purchase plan, a 401(k) plan, including a 401(k) match in the US, healthcare and insurance benefits, health savings and flexible spending accounts, unlimited vacation, wellness reimbursement, 16 weeks of gender-neutral parental leave and more.
+Added: In addition to base salary, these programs, which vary by country and region, include bi-annual bonuses, equity awards, an employee stock purchase plan, a 401(k) plan, including a 401(k) match in the U.S., healthcare and insurance benefits, health savings and flexible spending accounts, unlimited vacation, wellness reimbursement, 16 weeks of gender-neutral parental leave and more.
We have increased our investment in training and development and have rolled out several key programs as well as enabling our employees to access over 1,000 on-demand webinars in technical and soft skills areas.
3 unchanged sentences
We have built a company that we believe thrives whether our employees are in offices or remote.
−Removed: Diversity, Equity and Inclusion
−Removed: We aim to cultivate and foster an inclusive workplace that is diverse, equitable, and inclusive, where Sentinels can fulfill their potential.
−Removed: We have developed a SentinelOne Diversity, Equity, and Inclusion (DEI) framework that includes a commitment statement and a three-year roadmap focused on moving towards our long term DEI goals.
−Removed: We also have five key pillars to support our DEI initiatives.
−Removed: • Diversifying our talent pipeline including targeting hiring diverse slates across key functional areas and targeting underrepresented groups through our University Recruiting program.
−Removed: • Amplifying the power of communities through our Inclusion Networks including Women’s Inclusion Network, WIN@sentinelone;
−Removed: Black Inclusion Network, BLK@sentinelone;
−Removed: Pride Inclusion Network, Out@sentinelone;
−Removed: Latino Inclusion Network, Latinos@sentinelone and Veteran’s Inclusion Network, Served@sentinelone.
−Removed: • Holding ourselves accountable through data and insights and publishing a DEI dashboard.
−Removed: • Creating an equitable culture for all through strategic partnerships including Women in Cybersecurity (also known as “WiCys”).
−Removed: Through the S Foundation, we offer grants and scholarships to organizations within our communities.
−Removed: And we have established partnerships that support and advocate for underrepresented groups in the workforce.
−Removed: • Hearing all voices through our internal celebrations including Black History Month, Women’s History Month, Pride, and Hispanic Heritage Month.
−Removed: In addition, the MentorOne program provides Sentinels the opportunity to mentor and be mentored to develop professionally.
Research and Development
1 unchanged sentence
It is also responsible for operating and scaling our platform including its underlying infrastructure.
−Removed: Our most significant investments are in research and development to drive core technology innovation and bring new products to market.
+Added: Our most significant investments are in research and development to drive core technology innovation and bring new products to the market.
Research and development employees are located primarily in our Israel, India, and Czech Republic offices, and remotely.
−Removed: We have a proven team that constantly works to expand our market, customer and user reach and impact with new, innovative products.
+Added: We have a proven team that works to expand our market, customer and user reach and impact with new, innovative products.
We intend to continue to invest in our research and development capabilities to extend our platform and products.
1 unchanged sentence
Our sales and marketing organizations partner to create brand awareness, drive demand, and develop customer relationships to deliver strong sales pipeline coverage and revenue growth.
−Removed: We sell subscriptions to our Singularity Platform through our direct sales team, which is composed of field sales and inside sales professionals.
−Removed: Our sales team leverages our global network of channel and alliance partners for prospect access and fulfillment.
+Added: Our direct sales team, which is composed of field sales and inside sales professionals, sells subscriptions to our Singularity Platform by leveraging our global network of channel and alliance partners for prospect access and fulfillment.
For specific market segments, our channel partners independently manage the complete sales cycle resulting in a highly scaled and leveraged sales experience.
3 unchanged sentences
To support these efforts, we deliver broad-based brand campaigns to build awareness of our solutions and our company.
−Removed: We also deliver targeted and situational content to demonstrate thought leadership in the security industry, including speaking engagements with the security industry’s foremost organizations to provide expert advice, educating the public about the cyber threats, and identifying threat research discoveries that illustrate the business outcomes and differentiation of our solution.
+Added: We also deliver targeted and situational content to demonstrate thought leadership in the security industry, including speaking engagements with the security industry’s foremost organizations to provide expert advice, educating the public about cyber threats, and identifying threat research discoveries that illustrate the business outcomes and differentiation of our solution.
We engage in paid media, web marketing, out of home media advertising, industry and trade conferences, analyst engagements, producing whitepapers, demand generation via digital and web, telemarketing, and targeted displacement campaigns.
15 unchanged sentences
Organizations can integrate any security applications and tools regardless of vendor into a single platform without coding or scripting required.
−Removed: Marketplace extends the power of our platform across the entire security and IT stack to build an effective threat defense posture with layered security, collaborative processes, and integrated products.
+Added: Singularity Marketplace extends the power of our platform across the entire security and IT stack to build an effective threat defense posture with layered security, collaborative processes, and integrated products.
Singularity Marketplace enables security teams to converge on a single pane-of-glass for extended detection and response workflows to minimize context switching and distractions during triage and incident response.
5 unchanged sentences
• endpoint security providers, such as CrowdStrike Holdings, Inc.
−Removed: (CrowdStrike) and VMware, Inc.
−Removed: (Carbon Black);
+Added: (CrowdStrike) and Carbon Black (within Broadcom, Inc.);
• legacy antivirus providers such as Trellix (formerly McAfee Corp.), Symantec (a subsidiary of Broadcom, Inc.) (Symantec), and Microsoft Corporation (Microsoft);
1 unchanged sentence
(Palo Alto Networks);
+Added: • SIEM providers such as Cisco Systems, Inc.
+Added: (formerly Splunk) and Elastic;
+Added: • providers of cloud security, such as Wiz, Inc.
+Added: (pending acquisition by Google Cloud).
We compete on the basis of a number of factors, including but not limited to our:
17 unchanged sentences
We generally enter into confidentiality agreements and invention or work product assignment agreements with our officers, employees, agents, contractors, and business partners to control access to, and clarify ownership of, our proprietary information.
−Removed: As of January 31, 2024, we had 66 issued patents and 5 pending patent applications in the US and abroad.
+Added: As of January 31, 2025, we had 82 issued patents and 35 pending patent applications in the U.S.
These patents and patent applications seek to protect our proprietary inventions relevant to our business.
These issued patents are scheduled to expire on or around the years between 2034 and 2044 and cover various aspects of our platform and technology.
−Removed: As of January 31, 2024, we had 11 trademark registrations in the US, including registrations for “SentinelOne” and our logo.
+Added: As of January 31, 2025, we had 12 trademark registrations in the U.S., including registrations for “SentinelOne” and our logo.
We also had 94 trademark registrations and applications in certain foreign jurisdictions.
1 unchanged sentence
Government Regulation
−Removed: We are subject to many varying laws and regulations in the US, the United Kingdom (UK), the European Union (EU) and throughout the world, including those related to privacy, data protection, intellectual property, consumer protection, marketing, advertising, employment and labor, competition, customs and international trade, taxation, and more.
−Removed: As we grow and expand our geographical reach, we may become subject to additional regulations in the US and internationally.
+Added: We are subject to many varying laws and regulations in the U.S., the United Kingdom (U.K.), the European Union (E.U.), and throughout the world, including those related to privacy, data protection, intellectual property, AI, consumer protection, marketing, advertising, employment and labor, competition, customs and international trade, taxation, and more.
+Added: As we grow and expand our geographical reach, we may become subject to additional regulations in the U.S.
+Added: and internationally.
These laws often require companies to implement specific information security controls to protect certain types of information, such as personal data.
10 unchanged sentences
Our telephone number is (855) 868-3733.
−Removed: We completed our initial public offering (IPO) of shares of our Class A common stock in July 2021.
SentinelOne, the SentinelOne logo, and other registered or common law trade names, trademarks, or service marks of SentinelOne appearing in this prospectus are the property of SentinelOne.
2 unchanged sentences
Other trademarks appearing in this prospectus are the property of their respective holders.
−Removed: Solely for convenience, our trademarks and trade names referred to in this prospectus appear without the ® and ™ symbols, but those references are not intended to indicate, in any way, that we will not assert, to the fullest extent under applicable law, our rights, or the right of the applicable licensor, to these trademarks and trade names.
+Added: Solely for convenience, our trademarks and trade names
+Added: referred to in this prospectus appear without the ® and ™ symbols, but those references are not intended to indicate, in any way, that we will not assert, to the fullest extent under applicable law, our rights, or the right of the applicable licensor, to these trademarks and trade names.
Available Information
9 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.