SentinelOne (s) CEO/CFO meeting focuses on new drivers of NTM momentum

Research evidence excerpt

SentinelOne (s) CEO/CFO meeting focuses on new drivers of NTM momentum

Goldman Sachs SentinelOne (S)

simplifying the product set to map spend to higher-priority risk areas. For example,

SentinelOne’s agentic SoC is designed such that customers could get 85% the way

there by connecting, scanning and using built in remediation playbooks.

n Prompt Security is seeing the clearest AI pull-through, followed by agentic SoC

and cloud runtime: One of the more interesting parts of our conversation was on

pipeline development since April. Most notably, Prompt has moved from ~0% to

~20% of pipeline in a matter of weeks. S is also having more conversations around its

data business for the agentic SoC as customers increasingly want a flexible

approach. In addition, there has been an uptick in interest in cloud workload

protection, both for cloud endpoints and for cloud servers. SentinelOne noted its

architectural advantages with eBPF (Linux kernel technology for running sandboxed

programs), which again becomes important when considering agentic architectures;

SentinelOne already has breadth and depth with eBPF that can now be extended

into agentic-specific deployments to gain complete visibility. Data telemetry

demand also continues to rise through the Google partnership, with additional

interest from frontier labs and other hyperscalers.

2) Agentic SOC

n SOC opportunity shifting from SIEM replacement to outcome automation:

SentinelOne framed the market as structurally changing, with customers less

focused on another SIEM-like system and more focused on reducing investigation

burden/improving SOC outcomes. (In our view, this has been the biggest pain point

in Security for 10+ Years). SentinelOne’s view is that investigation capacity, not