Is S a Buy? What to Consider in 2026
Last updated June 2026
Short answer
There is no universal answer to whether S is a buy; it depends on your thesis, time horizon, and what you already own. Below is the case for SentinelOne, the main risks to weigh, where the stock trades, and a framework to decide for yourself. This is informational, not a recommendation, and Walnut is not an investment adviser.
SentinelOne (S) is a cybersecurity company specializing in AI-driven endpoint and cloud security. Its Singularity platform protects endpoints (laptops, servers, cloud workloads) by using machine learning to detect, block, and automatically respond to threats like malware and ransomware in real time, without relying solely on signature databases or human analysts. A distinctive feature is autonomous response: the platform can isolate and remediate attacks on its own, and it offers one-click rollback to undo ransomware damage. SentinelOne sells through a subscription SaaS model, so revenue is recurring and measured by annual recurring revenue (ARR), and it has expanded from endpoint protection into cloud security, data and log analytics (including a Singularity Data Lake), identity protection, and AI-assisted security operations. It competes most directly with CrowdStrike for next-generation endpoint security. Founded in 2013 and headquartered in Mountain View, California, SentinelOne is a high-growth challenger still investing heavily toward profitability.
The case for SentinelOne
1. AI-native endpoint protection.
SentinelOne's core differentiator is autonomous, machine-learning-driven detection and response that can act without human analysts, including one-click ransomware rollback. As attacks grow faster and more automated, AI-native endpoint security is a structural growth category where SentinelOne is a recognized leader and the main challenger to CrowdStrike.
2. Platform expansion.
SentinelOne is broadening beyond endpoints into cloud security, identity protection, and a data lake for security analytics, letting customers consolidate tools onto one platform. Cross-selling these modules lifts ARR per customer and positions the company against broad security suites, the classic land-and-expand SaaS motion.
3. Data and AI analytics.
The Singularity Data Lake ingests and analyzes security data at scale, and SentinelOne is layering AI assistants for security operations on top. This expands its addressable market into SIEM-like analytics and threat hunting, areas with large budgets historically owned by Splunk and others.
4. Strong ARR growth.
SentinelOne continues to grow ARR and customer count at high rates with healthy net retention as customers add modules. Rapid recurring-revenue growth, improving gross margins, and progress toward free-cash-flow positivity drive the investment narrative.
The risks to weigh
SentinelOne competes head-to-head with CrowdStrike, which is larger, profitable, and has a strong brand, plus Microsoft, which bundles endpoint security into broad licensing at attractive prices. It is still working toward consistent GAAP profitability and carries significant stock-based compensation, so it depends on sustaining high growth to justify its multiple. Decelerating growth, pricing pressure from bundling, or churn would weigh heavily on the stock. As a high-multiple growth name, it is sensitive to sentiment, rate cycles, and security-spending shifts. A high-profile security incident or product gap could also damage trust in a market where reputation is paramount.
Valuation context (as of early 2026)
- Revenue (TTM): ~$850 million
- Annual recurring revenue: Growing rapidly (around or above $900 million)
- Revenue growth: Strong (high double-digit, decelerating from very high)
- Gross margin: High (improving, ~75%+ non-GAAP)
- Operating margin: Negative GAAP; approaching breakeven non-GAAP
- Free cash flow: Turning positive
- Price to sales: High (premium SaaS multiple)
- Dividend yield: None
SentinelOne trades as a high-growth cybersecurity name valued on ARR growth and platform expansion rather than current GAAP earnings. The premium price-to-sales multiple reflects strong recurring-revenue growth and improving margins, balanced against GAAP losses, dilution, and direct competition with CrowdStrike and Microsoft. Valuation is highly sensitive to growth-rate changes and the path to profitability.
How to decide for yourself
Rather than asking whether S is a buy in the abstract, it tends to help to answer four questions:
- Thesis: do you believe the case above, and is it still true today?
- Time horizon: a single stock can be volatile, so a longer horizon absorbs more of the swings.
- Position sizing: a thesis can be right and the sizing still wrong; decide how much of your portfolio one name should be.
- Overlap: check whether you already hold S indirectly through an index or sector ETF before adding more.
For the full picture, see the S stock guide (what the company does, the ETFs that hold it, similar stocks, and the themes it fits). In Walnut you can ask its AI about S against your real portfolio and see your actual exposure before deciding.
Build a basket around S with Walnut
Use SentinelOne as one constituent in a thematic basket Walnut's AI helps you assemble. Describe a thesis you believe in, the AI proposes the holdings and weights, and you approve before any broker order.
FAQ
Is S a good stock to buy right now?
+
There is no universal answer. Whether SentinelOne fits depends on your thesis, time horizon, risk tolerance, and what you already own. This page lays out the case for, the main risks, and where the stock trades, so you can decide for yourself. Walnut is not an investment adviser and this is not a recommendation.
What does SentinelOne do?
+
AI-native endpoint and cloud security platform with autonomous response; the high-growth challenger to CrowdStrike.
What are the main risks of S?
+
SentinelOne competes head-to-head with CrowdStrike, which is larger, profitable, and has a strong brand, plus Microsoft, which bundles endpoint security into broad licensing at attractive prices. It is still working toward consistent GAAP profitability and carries significant stock-based compensation, so it depends on sustaining high growth to justify its multiple. Decelerating growth, pricing pressure from bundling, or churn would weigh heavily on the stock. As a high-multiple growth name, it is sensitive to sentiment, rate cycles, and security-spending shifts. A high-profile security incident or product gap could also damage trust in a market where reputation is paramount.
What is SentinelOne's ticker symbol?
+
S, listed on the NYSE. Officially SentinelOne, Inc. Founded 2013, headquartered in Mountain View, California. Publicly traded since 2021. It trades during US market hours and is available at every major US brokerage. The single-letter ticker S is distinctive.
What does SentinelOne do?
+
SentinelOne provides AI-driven cybersecurity through its Singularity platform. It protects endpoints, servers, and cloud workloads using machine learning to detect, block, and autonomously respond to threats like ransomware in real time, with one-click rollback. It has expanded into cloud security, identity protection, and security data analytics.
Who are SentinelOne's main competitors?
+
By segment. Endpoint detection and response: CrowdStrike is the closest competitor, with Microsoft Defender and Palo Alto Networks also competing. Cloud security: Palo Alto Networks, CrowdStrike, Wiz, and Microsoft. Security analytics: Splunk (Cisco) and Microsoft Sentinel as SentinelOne expands its data lake.
Is SentinelOne profitable?
+
Not yet on a GAAP basis. SentinelOne is still investing heavily for growth and carries significant stock-based compensation, so it reports GAAP losses. However, gross margins are high, non-GAAP results have moved toward breakeven, and free cash flow has been turning positive, with profitability targeted as ARR scales.
Walnut is informational and is not an investment adviser. This page is educational and not a recommendation to buy or sell S; figures are approximate and dated, and your own situation, time horizon, and risk tolerance should drive any decision. Verify current data before investing.