What changed in this filing

/stocks — the workspaceLOADING

Item 1. Business

2026-03-19 compared with 2025-03-26 · 44 added, 39 removed, 520 unchanged (14% of the section changed)

6 unchanged sentences

It is time to fight machine with machine.

We pioneered the world’s first purpose-built AI-powered Extended Detection and Response (XDR) platform to make cybersecurity defense truly autonomous.

We pioneered the world’s first purpose-built AI-powered cybersecurity platform for autonomous defense.

Our autonomous cybersecurity solutions are intelligent and data-driven systems that learn and evolve on their own—working to make the world more secure.

64 unchanged sentences

Unmanaged devices are especially vulnerable.

As a result, the attack surface has exploded.

As a result, visibility across connected devices and continuous assessment of their risk profiles have become top priorities for organizations.

As a result, the attack surface has exploded and visibility across connected devices and continuous assessment of their risk profiles have become top priorities for organizations.

• Remote and hybrid work is here to stay.

1 unchanged sentence

As a result of the accelerated structural shift towards a distributed workforce, organizations are increasingly looking for cybersecurity solutions that safeguard their remote workforce and employee credentials.

Sophisticated cyberattacks circumvent existing security controls.

Sophisticated AI-based cyberattacks circumvent existing security controls.

Cyberattacks have evolved from malware to highly sophisticated, organized and large-scale attacks by malicious insiders, criminal syndicates, and nation-states seeking to circumvent existing security controls and undermine critical societal functions through a variety of attacks.

86 unchanged sentences

and channel partners, such as distributors, resellers, Managed Service Providers (MSPs), Managed Security Service Providers (MSSPs), Managed Detection and Response Providers (MDRs), Original Equipment Manufacturers (OEMs), and Incident Response (IR) firms.

Our partner relationships provide us with significantly broader market reach.

As a result, many of our partners act as force multipliers and broaden our market reach.

By empowering MSPs, MSSPs, MDRs, and IR firms with our technology and through our deep partnerships with them, we benefit from the market penetration of those entities.

Our partner relationships act as force multipliers and provide us with significantly broader market reach.

By empowering MSPs, MSSPs, MDRs, OEMs and IR firms with our technology and through our deep partnerships with them, we benefit from the market penetration of those entities.

• Quality and access of cybersecurity and AI talent .

23 unchanged sentences

Our platform also enables us to show in-product promotions and trials and drive the expansion of our Singul arity Modules.

The success of our land-and-expand strategy is evidenced by our dollar-based net retention rate of 110% as of January 31, 2025.

The success of our land-and-expand strategy remains a driver of our sustainable growth and long-term customer value.

• Expand our global footprint.

8 unchanged sentences

We are committed to innovation, automation, and securing data wherever it resides with a front-row seat into cutting-edge cybersecurity technologies.

For example, in November 2023, through our acquisition of KSG, a strategic advisory group, we launched PinnacleOne to address multifaceted security challenges for enterprises.

PinnacleOne will focus on helping companies and their executives holistically understand the evolving risks of operating in the modern global business landscape through personalized access to expert intelligence, insights, and transformative risk management strategies.

Further, in February 2024, we acquired PingSafe, a Cloud Native Application Protection Platform (CNAPP) to bolster our existing cloud security product suite.

By adding PingSafe’s CNAPP to our Cloud Workload Security (CWS), we can now provide enterprises with a comprehensive cloud security coverage that drives comprehensive security, improved posture, and autonomous protection across their entire cloud footprint.

For example, in September 2025, we expanded our platform capabilities through the acquisitions of Prompt Security and Observo AI.

The acquisition of Prompt provides technology to secure AI in runtime, offering visibility and protection for enterprise AI deployments.

Additionally, the acquisition of Observo, an AI-ready data pipeline company, serves as a complementary catalyst for our AI Security Information and Event Management (SIEM) offering by streamlining data ingestion and enrichment.

Our Singularity Platform

22 unchanged sentences

Therefore, it is critical for a security solution to provide visibility for extended periods of time.

This enhances both retrospective

analysis and proactive hunting measures.

This enhances both retrospective analysis and proactive hunting measures.

We offer data retention for up to three years or more to provide maximum value from our Deep Visibility Threat Hunting module.

48 unchanged sentences

Purple AI delivers industry-leading AI capabilities to reduce mean time to detect, hunt and investigate risks to your business.

Prompt Security

Our security for AI solution, Prompt Security, empowers enterprises to embrace this new AI era with confidence.

By providing the guardrails and governance needed to innovate safely, it enables companies to move fast, unlock the full potential of AI, and build trust with customers and employees alike – turning AI from a source of risk into a catalyst for growth.

Security Information and Event Management (SIEM)

4 unchanged sentences

Singularity AI-SIEM is built for the cloud and offered as a cloud service, freeing up engineering resources from managing data refineries.

Observo.AI is a real-time data pipeline solution that offers freedom and control to for customers to be able to own, secure, and route their data anywhere they want.

It strengthens the value of Singularity platform and offers a model for reducing data costs and improving threat detection, across any SIEM or data lake—helping customers lower data overhead, improve signal quality, and extract more value from the data they already have, no matter where it lives.

Endpoint Security (EPP and EDR)

Our next-generation endpoint security provides autonomous real-time protection across all operating systems, including Windows, Linux, macOS, and cloud-native and containerized workloads.

Our endpoint protection is powered by distributed AI which resides both on devices as well as in the cloud for always-on, machine-speed protection.

Our endpoint protection is powered by distributed AI which resides both on devices as well as in the cloud for always-on, machine-speed

It is capable of autonomous decision making on the device and stopping threats in milliseconds rather than minutes, hours or even days.

6 unchanged sentences

The accuracy of our Behavioral AI is powered by the rich contextual information that is encoded in each Storyline that is being scored.

result, our Behavioral AI is attack vector agnostic because it is not limited to any particular pathway used by attackers to penetrate a system, such as zero-day vulnerability exploits and living off the land attacks.

As a result, our Behavioral AI is attack vector agnostic because it is not limited to any particular pathway used by attackers to penetrate a system, such as zero-day vulnerability exploits and living off the land attacks.

• Embedded Threat Intelligence .

24 unchanged sentences

We offer full-fledged EPP and EDR for servers, virtual machines, and containerized workloads.

Our Cloud Application Control locks down the running image of servers and containers to prevent configuration drift and protect against unauthorized changes, in line with best practices for cloud workload security.

Our Cloud Application

Control locks down the running image of servers and containers to prevent configuration drift and protect against unauthorized changes, in line with best practices for cloud workload security.

Our agentless CNAPP delivers multi-cloud insights spanning asset discovery, misconfigurations, vulnerability management, and more.

30 unchanged sentences

Vulnerability Management increases cyber resilience and reduces complexity by autonomously discovering unmanaged assets, evaluating their risk, and automating controls to isolate unmanaged endpoints.

• Singularity Network Discovery (formerly Ranger) is a real-time network attack surface control solution that identifies all IP-enabled devices on your network without requiring additional agents, hardware, or

network changes.

It uses advanced ML device fingerprinting to inventory and categorize assets, protects against device-based threats with 1-click isolation of suspicious devices, and efficiently deploys agents to unsecured endpoints with configurable peer-to-peer job automation.

1 unchanged sentence

Singularity Threat Services provide a deeper understanding of the threat landscape, monitoring emerging threats to proactively reduce risk and identify adversaries in a digital environment.

• Wayfinder Managed Detection & Response (MDR) provides 24/7/365 detection, investigation, and response, using curated SentinelOne and Google Threat Intelligence to deliver expert threat hunting, comprehensive protection, and proactive defense.

MDR Essentials delivers turnkey 24/7/365 protection with integrated threat hunting, real-time dashboards, and streamlined digital onboarding.

MDR Elite builds on this foundation with dedicated Threat Advisors for tailored security, high-touch proactive engagement and strategic guidance.

With Wayfinder MDR, organizations can stay ahead of threats, reduce risk, and advance security posture with confidence.

• Singularity MDR offers 24/7/365 managed detection and response coverage that extends beyond the endpoint, providing comprehensive threat detection across endpoints, cloud workloads, identity, and more.

7 unchanged sentences

WatchTower distills intelligence down to its most valuable insights, such as a summary bulletin of the threat, its impact on our customers’ organizations, and how the threat can be addressed.

• PinnacleOne is a strategic advisory group that addresses multifaceted security challenges facing organizations.

These services include board briefings and c-suite coaching, enterprise threat modeling and risk management, incident readiness planning, and incident management.

PinnacleOne’s goal is to empower organizations to optimally manage technology and cybersecurity risks.

Independent Validation and Testing

3 unchanged sentences

As of January 31, 2026, we had customers using our Singularity Platform in approximately 100 countries.

We are protecting the digital infrastructures of over 14,000 direct customers around the world, including large global enterprises, small and medium sized businesses, and government organizations.

We are protecting the digital infrastructures of customers around the world, including large global enterprises, small and medium-sized businesses, and government organizations.

Our business does not depend on any single end customer.

19 unchanged sentences

We have not experienced any work stoppages and we believe that our employee relations are strong.

Our mission is to Secure Tomorrow TM and our purpose is to be a Force for Good.

Our vision is a safer future for humanity and our purpose is to give the advantage to those who secure our future.

Our core values are at the foundation of our inclusive culture and guide our approach on how we build and grow our business with all stakeholders:

25 unchanged sentences

We received multiple workplace accolades in 2025.

• Fortune recognized SentinelOne as a Fortune Future 50 company, Best Workplace in Technology, Best Workplace for Parents, Best Workplace in the Bay Area.

• Dun’s 50 list acknowledged SentinelOne as one of the Best High Tech Companies to Work for in 2024 and as a Best High Tech Companies to work for Parents.

News & World Report recognized SentinelOne as a Best Companies To Work For, Best Companies to Work For in IT, Software & Services and Best Companies to Work For in the West.

• Built In acknowledged SentinelOne as a 2024 Best Places to Work Remote.

• SentinelOne also achieved Great Place to Work certification (December 2024 - December 2025) for the U.S., U.K., France, India, Netherlands, Australia, Canada, Costa Rica, Japan, Slovakia, Germany, Italy, UAE, Poland, Spain, Czechia, and Singapore.

• SentinelOne received the Best Workplaces in Tech in the U.K., Best Workplaces for Wellbeing in the U.K., Best Workplaces in Technology in Spain, Best Workplaces in Technology in GCC, Best Workplaces in Technology in Australia, and Best Workplaces in Poland.

• Fortune recognized SentinelOne as a Fortune Future 50 company, 100 Best Companies to Work For in Europe, Best Workplace in Technology, Best Workplace for Parents, Best Workplace in the Bay Area.

News & World Report recognized SentinelOne as one of its 2025 Best Companies to Work For, Best Companies to Work For in IT, and Best Companies to Work For in the West.

• Newsweek named SentinelOne to its America’s Greatest Companies list.

• Built In recognized SentinelOne as a 2025 Best Places to Work in the United States.

• Great Place to Work recognized SentinelOne on Best Workplaces lists in several countries, including the United Arab Emirates in the Small category;

France for Best Workplaces and Best Workplaces in Technology;

Germany across the Information and Communications Technology, Small and Medium Companies, and Bavaria lists;

SentinelOne was also recognized for Best Workplaces for Millennials.

• SentinelOne also achieved Great Place to Work certification (December 2025 - December 2026) for Australia, Canada, Costa Rica, Czechia, France, Germany, India, Israel, Italy, Japan, Netherlands, Poland, Singapore, Slovakia, Spain, the United Arab Emirates, the United Kingdom, and the United States.

Our presence and engagement across all social media platforms continue to grow rapidly, a reflection of the market’s perception of us and our leadership as innovators in the cybersecurity space.

31 unchanged sentences

We work with a number of partners to create “better together” technology solutions for mutual customers, many of which we then leverage in joint go-to-market strategies.

These partnerships include many of the leading ISVs, alliance partners, MSPs, MSSPs, MDRs, OEMs, and IR firms.

These partnerships include many of the leading ISVs,

alliance partners, MSPs, MSSPs, MDRs, OEMs, and IR firms.

We provide our partners with our differentiated technology and platform to enable them to provide the best security service to their own customers.

21 unchanged sentences

• SIEM providers such as Cisco Systems, Inc.

(formerly Splunk) and Elastic;

(which acquired Splunk) and Elastic;

• providers of cloud security, such as Wiz, Inc.

(pending acquisition by Google Cloud).

(acquired by Google Cloud).

We compete on the basis of a number of factors, including but not limited to our:

12 unchanged sentences

• customer support.

Although certain of our competitors enjoy greater brand awareness and recognition, deep customer relationships, and larger existing customer bases, we believe that we compete favorably with respect to our autonomous and AI-powered threat prevention, detection, response, and hunting capabilities.

Although some of our competitors enjoy greater brand awareness and recognition, deep customer relationships, and larger existing customer bases, we believe that we compete favorably with respect to our autonomous and AI-powered threat prevention, detection, response, and hunting capabilities.

Intellectual Property

24 unchanged sentences

Our telephone number is (855) 868-3733.

SentinelOne, the SentinelOne logo, and other registered or common law trade names, trademarks, or service marks of SentinelOne appearing in this prospectus are the property of SentinelOne.

This prospectus contains additional trade names, trademarks, and service marks of ours and of other companies.

SentinelOne, the SentinelOne logo, and other registered or common law trade names, trademarks, or service marks of SentinelOne appearing in this Annual Report on Form 10-K are the property of SentinelOne.

This Annual Report on Form 10-K contains additional trade names, trademarks, and service marks of ours and of other companies.

We do not intend our use or display of other companies’ trade names, trademarks, or service marks to imply a relationship with these other companies, or endorsement or sponsorship of us by these other companies.

Other trademarks appearing in this prospectus are the property of their respective holders.

Solely for convenience, our trademarks and trade names

referred to in this prospectus appear without the ® and ™ symbols, but those references are not intended to indicate, in any way, that we will not assert, to the fullest extent under applicable law, our rights, or the right of the applicable licensor, to these trademarks and trade names.

Other trademarks appearing in this Annual Report on Form 10-K are the property of their respective holders.

Solely for convenience, our trademarks and trade names referred to in this Annual Report on Form 10-K appear without the ® and ™ symbols, but those references are not intended to indicate, in any way, that we will not assert, to the fullest extent under applicable law, our rights, or the right of the applicable licensor, to these trademarks and trade names.

Available Information

9 unchanged sentences

Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.

What changed 10-K

Item 1. Business