S - NYSE

Hello, and welcome to the SentinelOne, Inc. Q4 FY 2026 Earnings Conference Call. We ask that you please hold all questions until the completion of the formal remarks, at which time you will be given instructions for the question and answer session. Also, as a reminder, this conference is being recorded today. If you have any objections, please disconnect at this time. I will now turn the call over to Saad Nazir, Head of Investor Relations.

Good afternoon, everyone, and welcome to SentinelOne, Inc.'s earnings call for the fiscal year ended 01/31/2026. With us today are Tomer Weingarten, CEO, and Barry Paget, Interim CFO. Our press release and an earnings presentation were issued earlier today and are posted on the Investor Relations section of our website. This call and accompanying slides are being broadcast live via webcast, and a replay will be available on our website after the call. Before we begin, I would like to remind you that during today's call, we will be making forward-looking statements about financial performance and future events, including our guidance for the fiscal first quarter and full fiscal year 2027, as well as long-term financial targets. We caution you that such statements reflect our best judgment based on what is currently known to us, and that our actual results or events could differ materially. Please refer to the documents we file from time to time with the SEC, in particular, our quarterly reports on Form 10-Q and our annual report on Form 10-K. These documents contain and identify important risk factors and other information that may cause our actual results to differ materially from those contained in our forward-looking statements. Any forward-looking statements made during this call are being made as of today. If this call is replayed or reviewed after today, the information presented during the call may not contain current or accurate information. Except as required by law, we assume no obligation to update these forward-looking statements publicly or to update the reasons why actual results may differ materially from those anticipated, even if new information becomes available in the future. During this call, we will discuss non-GAAP financial measures, and all comparisons made are year over year unless otherwise noted. These non-GAAP financial measures are not prepared in accordance with generally accepted accounting principles. A reconciliation of the GAAP and non-GAAP results, other than with respect to our non-GAAP financial outlook, is provided in today's press release and in our earnings presentation. These non-GAAP measures are not intended to be a substitute for our GAAP results. Our financial outlook excludes stock-based compensation expense, employer payroll tax on employee stock transactions, amortization expense of acquired intangible assets, acquisition-related compensation costs, restructuring charges, gains on strategic investments, impacts of the previously announced Italian tax settlement, and income tax provision which cannot be determined at this time and are therefore not reconciled in today's press release. And with that, let me turn the call over to Tomer Weingarten, CEO of SentinelOne, Inc.

Good afternoon, everyone, and thank you for joining our fourth quarter earnings call. Fiscal 2026 was a landmark year for SentinelOne, Inc. We achieved a $1 billion revenue scale, growing 22% year over year, and delivered full-year operating profitability, a significant milestone towards profitable growth. In Q4, our total ARR grew 22%, driven by strong new logo acquisition and expansion with existing customers. We delivered $64 million in net new ARR in Q4, a company record. This marks our third consecutive quarter exceeding ARR expectations, showing execution consistency and positive growth. We drove about half of our new business to new logos, showing a balanced split between new logo acquisition and expansion within our existing customer base. We are gaining traction in the most critical domains of cybersecurity—both AI for security and security for AI. We are helping organizations advance their digital transformations securely and intelligently. SentinelOne, Inc. offers the only cybersecurity platform that delivers disunifications—truly. AI represents a significant TAM expansion and a long-term tailwind for our business. From early on, AI-native security has been foundational to our platform architecture. This early advantage positions us to emerge as the category winner in the AI era across more than a $100 billion market opportunity. We have established SentinelOne, Inc. as a clear technology leader in cybersecurity. Our relentless focus on delivering AI-powered innovations that truly unify security, data, and automation has positioned us at the forefront of the industry. As we enter the new fiscal year, we are accelerating our path towards achieving the Rule of 40 driven by durable growth and higher profitability. Now, let us dive deeper into the details of our quarterly performance. We are winning new logos and expanding our footprint across diverse platform categories. Enterprises are choosing the Singularity Platform for unified AI-native security that provides a single pane of glass and seamless workflow. We firmly believe that cybersecurity should not be complicated. Beyond the Singularity Platform's best-in-class efficacy, its intuitive design and operational simplicity are driving stronger customer adoption. Today, our unified platform spans seven core solution categories, delivering more than 40 different modules designed to solve the most complex use cases, all while providing end-to-end autonomous cybersecurity. In fiscal 2026, our non-endpoint solutions surpassed half of our total annual bookings, a clear testament to the diversity and customer outcomes of the Singularity Platform. Customers are increasingly consolidating on our platform. In fiscal 2026, the percentage of our enterprise customers using three or more solutions increased to 65% versus 39% a year ago. Enterprises using four or more solutions more than doubled to 42% versus 19% a year ago. And enterprises using five or more solutions increased to 22%, versus 9% a year ago. And for many of the enterprise logos we are adding, this is just the beginning of a long-term expansion journey. In Q4, our cross-platform adoption drove a record ARR per customer, signifying solid momentum contributions from our AI, Data, Cloud, Wayfinder, and Endpoint solutions. Customers of all sizes, especially large enterprises, are increasingly recognizing Singularity's architectural advantage. Our Q4 performance clearly demonstrates this momentum. We drove sequentially higher win rates across every market segment, anchored by accelerating gains in the enterprise. Let us look at an enterprise win that exemplifies this. Internet security giant Cloudflare, a company securing about 40% of all human-originated internet traffic, moved to SentinelOne, Inc. in less than 24 hours, completely uninterrupted. After a rigorous POC, they selected SentinelOne, Inc. to replace our closest competitor as their security platform of choice, citing our superior technology and ease of use as the deciding factors. This seven-figure deal included endpoint security, Purple, and our Wayfinder Elite services. This is a clear testament to our technological edge and the platform value we deliver. Next, looking at our key growth drivers, Purple is becoming the bedrock of modern security operations, empowering teams to respond faster, accelerate detection, and automate investigations. The trajectory of Purple adoption continues to outpace our internal expectations, hitting a record attach rate of over 50% on licenses sold in Q4. According to IDC's independent study, Purple users experienced 55% faster threat remediation, a 60% lower likelihood of major incidents, and an impressive 338% return on investment over just three years. We are seeing strong Purple uptake across both new logos and existing customers. Many of our Purple AI customers are expanding their usage, signifying future growth potential and the value it delivers. For AI security, we are benefiting from the accelerating enterprise demand for secure adoption of AI models, agentic workflows, and employee AI usage. In Q4, ARR from Prompt Security more than doubled sequentially. In addition to existing customer upsells, we have started winning standalone AI security deals with Fortune 500 companies. Moreover, we are beginning to win AI security deals from customers of our direct competitors, creating a new strategic entry point to expand our market share and footprint. There are no serious scalable alternatives to Prompt Security in the market, and customers need to adopt AI now. For example, in the past quarter, a Fortune 100 financial services company deployed nearly 100,000 licenses for AI security and governance. Prompt is helping solve complex AI governance and compliance challenges for customers across our industry. In another example, a multinational retail giant deployed Prompt Security to eliminate a visibility black hole surrounding unmonitored employee AI usage. They chose SentinelOne, Inc. for quick deployment, visibility, and real-time AI security, all while satisfying strict European GDPR requirements. We also launched Closed Security, the industry's first open-source security suite to secure emerging autonomous agents like OpenClaw and others. For Data solutions, we surpassed $130 million in ARR with growth accelerating sequentially. We are seeing rising demand for our AI SIEM as it delivers deeper visibility, real-time detection, and autonomous response, all with far more efficient unit economics than legacy alternatives. In Q4, we also launched our new AI-native Data Security Posture Management solution, or DSPM, to help customers secure their data and AI workloads. Furthermore, with Observo.ai, we now own the data pipeline that powers modern security operations. The market is clearly recognizing this value. We were just named SIEM Innovation of the Year in the Cybersecurity Breakthrough Awards. We have now fully integrated Observo.ai's data pipeline solution into the Singularity Platform. This creates a truly comprehensive data architecture, natively unifying petabyte-scale ingestion, data pipeline, orchestration, and hyperautomation into a single seamless experience. For Data solutions, we signed a multi-year infrastructure partnership with a global hyperscaler. As part of our expanding alliance, SentinelOne, Inc.'s threat intelligence data now pairs with this company's native threat intelligence services. This shared telemetry model powers our own joint offerings and establishes a highly strategic growth vector for our Data business. In addition to taking share from legacy incumbents, our platform is now beginning to serve as the foundational data layer for the world's largest technology innovators. For Cloud security, we are seeing strong expansion, especially with our best-of-breed runtime workload capabilities covering both on-prem and cloud environments. In Q4, our Cloud security solution surpassed $160 million in ARR. As cloud environments expand and AI workloads multiply, the need for robust security is increasing. We are meeting this demand by delivering comprehensive cloud-native detection and response that scales with our customers' infrastructure, simplifying their operations and elevating defenses with our unified platform. For Endpoint, we achieved double-digit ARR growth in Q4. We continue to outgrow the broader market by delivering the most autonomous endpoint security solution available, combining industry-leading efficacy, performance, and user experience. Nearly half of the existing Endpoint sector is still using legacy antivirus solutions. We see this as a clear opportunity for continued market share gains. Our leadership in AI-native security is attracting the most advanced technology innovators in the world. In Q4, one of the top frontier labs selected the Singularity Platform to secure mission-critical infrastructure in the development of its flagship models. This win underscores that the architects of the AI frontier recognize SentinelOne, Inc. as the definitive security layer for the future of intelligence. In the era of AI, securing highly restricted on-prem environments, where true sovereignty is of paramount importance, is becoming one of the most strategic growth opportunities. While our competitors have no ability to secure these environments, we saw triple-digit booking growth in the quarter, signifying an emerging growth vector for us. We have the distinct advantage of delivering fully autonomous, high-velocity AI protection both in the cloud and on-prem. This differentiation was clear in our recent win with one of the largest postal operators globally. The customer signed a five-year commitment to secure their vast network with SentinelOne, Inc. Our ability to deliver specialized on-prem security at scale, while meeting the most rigorous government standards, was the deciding factor. In addition, we are seeing strong enterprise interest in Wayfinder Threat Services, which crossed $100 million in ARR in Q4. As enterprises race to adopt generative AI, they often lack the blueprint to do so safely. Wayfinder fills that gap by serving as both an implementation arm and a managed supervision layer for AI cybersecurity. Our Wayfinder AI-augmented services deliver immediate time to value by deploying in under 15 minutes and resolving 99% of threats without any customer action required. Trust is a big factor. We believe that expert human oversight is the way forward to build customer trust when adopting new autonomous technologies. Wayfinder embodies this vision by pairing our AI-native platform with elite AI security experts. As expected, SentinelOne, Inc. Flex is proving to be a highly effective model for broader platform adoption. By simplifying the purchasing process, Flex is driving larger deal sizes, multi-solution deployments, and extended commitments. Flex simplifies the path for large-scale platform adoption and secures long-term, high-value partnerships. For a platform consolidation win, we secured an eight-figure TCV deal with an iconic global logistics company that standardized on the Singularity Platform for unified AI security. To protect their highly distributed and critical infrastructure, this enterprise consolidated multiple competing vendors on the Singularity Platform. SentinelOne, Inc. was the clear choice to modernize their operations and securely implement AI. Alongside industry-leading efficacy, the Singularity Platform's intuitive design, unified interface, and ease of use are key differentiators that are driving strong platform adoption. We are delivering the only single-plane platform on the market capable of being deployed anywhere, which stands in stark contrast to our next-gen peers. Large enterprises, especially leading innovators, are recognizing this—in many cases, securing millions of assets in a single deployment. Our continued upmarket trajectory is driving larger deal sizes and steady retention rates. Landing these premier enterprise logos at scale provides us with a significant, highly durable runway to drive strong growth for years to come. Today, we proudly secure nearly one-fifth of the Fortune 500 and hundreds of Global 2000 enterprises. Our expanding customer base now includes some of the most sophisticated and iconic companies on the planet, alongside highly regulated, mission-critical infrastructure—from the pioneers building today's frontier AI models to the global category leaders in semiconductors, automotive, aviation, finance, and smartphone giants the world relies on. In the partner ecosystem, we continue to expand and deepen our engagements. Our partners are a force multiplier, helping expand our reach and scale. We are seeing strong traction driven by increasing platform adoption across AI, Data, Cloud, and broader platform solutions. We are increasingly winning at the top end of the market, highlighted by an eight-figure strategic partner win in Q4. This deal provides access to our entire Singularity Platform through a flexible deployment schedule. In addition, we are strategically scaling our mid-market adoption by driving operational leverage for our partners. Our success across the managed security ecosystem is a clear testament to this strategy. In fiscal 2026, we achieved over 60% ACV growth with our top 20 MSSP partners and over 75% ACV growth with our top 10 MSSP partners. These partners are rapidly expanding beyond the endpoint. They are adopting our AI, Data, Cloud, and broader platform solutions. Our MSP partners are standardizing on SentinelOne, Inc. Our unique platform architecture delivers the multi-tenancy and remote management capabilities that drive real operational leverage and technology differentiation. This technology advantage translates directly into a dominant competitive position for SentinelOne, Inc. in the managed security ecosystem. We are also deepening collaboration with hyperscalers by integrating our technology and platform across their cloud marketplaces and AI services. Together, these alliances are enhancing our market presence and positioning SentinelOne, Inc. as a trusted partner for enterprises worldwide. In the public sector, we achieved FedRAMP authorization at the High impact level, and this opens more public sector opportunities for us in both Federal and SLED environments. Let us shift gears to the broader industry dynamics and why SentinelOne, Inc. is a distinguished beneficiary for the AI era. There has been a lot of debate about the impact of AI on traditional SaaS business models. While some of these concerns are justified, especially if you are selling an antiquated platform built upon a legacy code base, modern security operations remain mission critical. Cybersecurity is an imperative for safe adoption and usage of AI, is a significant tailwind for SentinelOne, Inc., and we are already seeing AI security as the fastest growth category for us today. We are the builders enabling secure AI adoption for builders. Our enterprise success clearly validates this. Our platform and AI models are forged from real-time proprietary threat intelligence data at petabyte scale that is gathered across tens of thousands of organizations and tens of millions of assets globally. That scale, intellectual property, and depth of data—combined with human insights—are a unique competitive moat. The reality is that cybersecurity is paramount in the age of AI. The market needs reflect this reality. Gartner recently highlighted that AI security is the fastest-growing segment in cybersecurity, expanding over 70%. Security and trust remain the single biggest barrier to enterprise AI adoption in the United States and globally. At SentinelOne, Inc., we are helping organizations move from basic AI systems to true autonomous agentic action with trust and safety embedded as our guiding principles. We are putting defenders firmly in control of the AI boom, delivering the platform, tools, strategies, and services they need to build, secure, and benefit from AI. We are delivering an end-to-end AI-native platform that seamlessly delivers security for data, infrastructure, and runtime as a single unified system. We actively partner with, invest in, and protect the pioneers building today's frontier AI models. Grounded in this ecosystem, we are pushing into the frontier of autonomous agentic security, where AI does not only assist humans, but also independently detects and stops complex threats in real time. Reflecting upon the past year, we delivered strong growth and margin improvement while driving innovations that are shaping the future of cybersecurity. At increasing scale and durable top-line growth, we are continuously refining our operating model to be well positioned for the opportunities ahead. We remain laser-focused on our most efficient go-to-market channels while unlocking structural productivity gains by integrating AI throughout our business. We have always operated with a builder mindset. Looking ahead, we are establishing a stronger SentinelOne, Inc. that is well positioned to lead in an AI-first security landscape while creating long-term value for our customers, partners, and shareholders. Before I turn the call over to Barry, I am pleased to welcome Sonalee Parekh to our leadership team. Sonalee is joining SentinelOne, Inc. as our new Chief Financial Officer. She brings more than 25 years of experience across public software and technology companies. Sonalee has a proven track record of scaling high-growth software platforms, driving financial discipline, and overseeing multi-product strategies. That is an ideal fit to lead the next phase of SentinelOne, Inc.'s financial strategy—delivering growth and profitability. I look forward to our partnership. I would also like to thank Barry for his leadership and steady hand as Interim CFO. He has been a trusted partner, ensuring a seamless transition and leading our finance function. In closing, I want to take a moment to acknowledge the contributions of all Sentinels—their relentless focus, dedication, and execution drive our success. And thanks to all our customers, partners, and shareholders for their continued support. Our mission to be a force for good remains as important as ever, in ensuring AI is also a force for good. Thank you again for joining us today. With that, I will hand it over to our Interim CFO, Barry Paget.

Thank you, Tomer, and thanks, everyone, for joining us today. Let us review the details for Q4, the full fiscal year 2026, and our guidance for Q1 and fiscal year 2027. As a reminder, all comparisons are year over year, and financial measures discussed here are non-GAAP unless otherwise noted. Fiscal year 2026 was a transformational year for SentinelOne, Inc., highlighted by two major financial milestones. Firstly, we scaled the business past $1 billion in revenue, growing 22% year over year. Secondly, we achieved full-year operating profitability, driving a 600-plus basis point year-over-year improvement to expand our operating margin to 3.5%. Let us review the financial performance of our fourth quarter. In Q4, our revenue grew 20% year over year to $271 million. International markets grew 30% and represented 40% of total revenue, reflecting strong international demand and a growing global footprint. In Q4, our total ARR grew 22%, and we added a record $64 million in net new ARR, which exceeded our expectations. These results were driven by a balanced split between new logo acquisition and platform adoption by existing customers. As we continue our strategic shift upmarket, our ARR per customer reached a new company record. We are seeing strong momentum at the top end of the market, as our cohort of customers with ARR of $1 million or more grew 20% year over year to 153 customers in Q4. Additionally, customers with ARR of $100,000 or more grew 18% to 1,667. Furthermore, retention rates across our large customers remain strong, underscoring the mission-critical nature of the Singularity Platform. For customers with $100,000 or more in ARR, our gross retention rate was 96% in Q4, and our dollar-based net retention rate for these customers was 109%, driven by these large organizations continuing to adopt the broader platform and consuming multiple products from us. Overall, we are maintaining a balanced split between new logo acquisition and existing customer expansion. Given our scale and relative market share, this focus allows us to increase our market share with significant future expansion potential. Turning to margins, we maintained a solid gross margin profile in Q4 at 78%, highlighting healthy platform unit economics and scale efficiencies. In Q4, our operating margin was 6%, representing an improvement of 450 basis points year over year. We also achieved a net income margin of 9% in the quarter. On a trailing 12-month basis, we delivered a free cash flow margin of 5% and successfully delivered our second full year of positive free cash flow. This is an important milestone that underscores our path towards sustained profitable growth. We ended the year with a robust balance sheet, including $770 million in cash, cash equivalents, and investments, and, most importantly, no debt. Given our strong balance sheet and confidence in our long-term trajectory, we opportunistically repurchased 6.5 million shares this quarter, bringing the total shares repurchased to 12.2 million in fiscal year 2026. We will continue to employ a balanced capital allocation strategy, prioritizing organic investments while returning capital to shareholders. Turning to our guidance for Q1 and fiscal year 2027, as we enter our next chapter of scale and profitability, we are enhancing our guidance framework. In addition to our revenue and operating income outlook, we are providing guidance for earnings per share and some helpful modeling assumptions. We believe this enhanced framework offers a more comprehensive view of the company's earnings growth and cash generation. For the full fiscal year 2027, we expect revenue to be between $1.195 billion and $1.205 billion, representing 20% year-over-year growth at the midpoint. For Q1, we expect revenue to be between $276 million and $278 million, representing 21% year-over-year growth at the midpoint. Our fiscal year 2027 revenue outlook also implies a year-over-year improvement in net new ARR. Overall, our outlook is supported by a solid pipeline, strategic partnership opportunities, and rising contributions from our emerging solutions, including AI, Data, Cloud, Wayfinder, and others. At the same time, we continue to monitor the evolving macroeconomic environment and geopolitical uncertainties, which can still influence deal timing and sales cycles across the industry. Turning to our profitability metrics, for fiscal 2027, we expect operating income to be between $110 million and $120 million, representing an operating margin of 10% at the midpoint. For Q1, we expect operating income to be between $4 million and $6 million, representing an operating margin of 2% at the midpoint. Our strong operating income outlook is driven by increasing operational efficiencies with scale and with cost discipline. We are accelerating toward the Rule of 40, mainly led by sustained top-line growth and improving profitability. For fiscal year 2027, we expect fully diluted earnings per share to be between $0.32 and $0.38 per share, representing $0.35 at the midpoint. And for Q1, we expect earnings per share to be between $0.01 and $0.02. We expect a non-GAAP tax rate of approximately 17% for fiscal year 2027. We expect our weighted average diluted share count to be approximately 345 million for Q1 and 352 million for the full year. Adjusting for the scheduled tax settlement payments of $40 million in fiscal year 2027 disclosed in our January 8-Ks, we expect our adjusted full-year free cash flow margin to closely track our operating margin outlook for fiscal 2027. For Q1, we expect adjusted free cash flow margins to be in the low teens, reflecting our standard historical seasonality and strong underlying cash generation. Taking a step back, our technology leadership and competitive position remain strong. We are scaling the business while consistently driving strong operating leverage. Our investment approach strikes a disciplined balance between capturing long-term growth opportunities and maintaining a responsible, profitable financial profile. This strategy is foundational to scaling SentinelOne, Inc. into a multibillion-dollar, highly profitable business. Before closing, I would like to welcome Sonalee as our new CFO. Her expertise scaling global businesses is a great fit for us. Over the coming weeks, I will be working closely with Sonalee and our seasoned finance team to ensure a seamless handoff. In summary, we are very well positioned at the intersection of AI, Data, and cybersecurity, leading the industry into the next era of autonomous security. Security is no longer just a safeguard; it is the strategic enabler of AI innovation. With a strong financial foundation, a highly differentiated platform, and a vast market opportunity, we remain firmly committed to maximizing our business potential. Thank you all for joining us today. We will now take your questions. Operator, please open up the line.

Thank you. At this time, if you would like to ask a question, please click on the Raise Hand button, which can be found on the black bar at the bottom of your screen. When it is your turn, you will receive a message on your screen from the host allowing you to talk, and then you will hear your name called. Please accept, unmute your audio, and ask your question. As a reminder, we are allowing analysts one question today. We will wait one moment to allow the queue to form. Our first question comes from Brian Essex at JPMorgan. Please go ahead with your question.

Hi, good afternoon, and thank you for taking the question. Maybe for Tomer, I would love to understand some of the dynamics around the growth that you have had this quarter, particularly in light of the lower sales and marketing growth. What percentage of the deals were partner-led or partner-influenced, and what are the plans for hiring and product and expectations for productivity as you move through fiscal 2027?

Thanks for the question, Brian. We delivered record fourth-quarter net new ARR, 6% year-over-year growth, and probably the strongest sequential growth we have had in the last 24 months. It really demonstrates more than anything execution consistency and solid demand pretty much across the board. I would say that there was not any big change between our business with partners and our business with end customers. We are doing larger deals, and I think that is probably reflected. Flex is taking, I think, a more pronounced part of our overall bookings. So, all in all, I would say the dynamic is one that we have seen throughout the quarters and throughout the year. As we look into next year, when we review how we want to focus, I think we are pretty clear that we are on a quest to optimize. I do not think you are going to see us grow headcount in a significant way, and it will imply that sales productivity, which is reflected in the margin guide, is going to get better. We are clear on our continued upmarket trajectory. We are clear on the need and the desire to do more with our partner base. We are clear about the potential in our partner base. You can see some of the figures with our growth with our MSP partners—top 10 partners growing 75% year over year. Obviously, there is a lot of potential both in our partner base and with our move upmarket. So, all in all, we plan to do much of the same this year in an improved manner with an optimized sales force.

Our next question comes from John Stephen DiFucci at Guggenheim. Please go ahead with your question.

Thank you. Since Brian asked about top line, I am going to ask about the bottom line. It is just a little confusing. Like, this quarter, and in the first quarter, profit margins are a little lower than I think people were looking for—at least we were. But for the year, they look great. So if you could just explain that a little bit, maybe Barry, again, just so we understand what is happening in the model.

Yeah, John. On the free cash flow side, we feel pretty comfortable on the cash collection. We have seen meaningful improvement over the past few years. That being said, it can be a little lumpy just in terms of larger deals and when they fall into a particular quarter. And as those larger deals roll out maybe over months and quarters as opposed to days, like smaller deals.

Our next question comes from Meta Marshall at Morgan Stanley. Go ahead with your question.

Great, thanks. I just wanted to ask—clearly, a lot of success selling with the 65% of customers having three or more solutions. How do you, in combination with maybe NRR ticking down a hair, think about the ability to continue to add new or get further adoption of new products into the base? Thanks.

Absolutely. We definitely think that this is a source for additional growth for us. We are very stable on the NRR front. I think the biggest thing I would call out there is that, for us, it means that we are doing more new logo business, which is exactly what we want to see, and we have executed that strategy for the last few years. It is not going to change this year. So we are really driving those in tandem. And what you can see is that not only are we creating more and more adoption within our customer base, even with that, our customer base is still relatively underpenetrated. We have tremendous capabilities. Our platform is incredibly broad. That just means that for a lot of these new logos that we are just starting the journey with, the expansion opportunity is really in the future. Which is great, which really means that we can land and onboard new customers, and then, with time, we will see more and more from the customer base. That is exactly the dynamic we want to see. That is exactly what is reflected in these results.

Our next question comes from Nasr Islam at Deutsche Bank, on for Brad

Hi, this is Nasr Islam on for Brad

Of course. Endpoint still remains a strong growth driver for us. We grew double digit, and that is non-trivial in the market today. We are still gaining share in Endpoint, and there is still a lot to go after in terms of incumbent providers. It is clear that the best control point right now for GenAI is actually attached to those same endpoints. So when you look at us selling AI security, I think the success we are seeing there is tied to our ability to deploy that within minutes, sometimes on those exact same endpoints—whether our agent is already there or not. Our ability to continue and expand our Endpoint footprint is what makes our AI security product incredibly successful. So, all in all, not only are you gaining the best and the most complete telemetry from the endpoint today, it is also becoming one of the only true control points to regulate what employees, what the workforce, is doing with generative AI—block it, sanitize it, make sure there is no data leakage, put the right guardrails—and that is exactly what we are doing with our AI security platform and with Prompt Security specifically.

Next question comes from Shrenik Kothari at Baird. Please go ahead with your question.

Yeah, thanks for taking my question. So, Tomer, you brought in Sonalee. As she steps in, what are the top, say, three priorities you have explicitly asked her to focus on first? And then, just related to, kind of financially, how should investors think about the next phase of the model under her? Thanks a lot.

Of course. Thank you for the question. We are incredibly excited to welcome her. Her focus is going to be durable growth and acceleration in our go-to-market. I think what we are seeing right now is growing demand for our platform with multiple avenues for growth. We have talked about AI security growing triple digit. We have talked about on-prem, which is a new revenue vector for us, now growing triple digit as well, and infrastructure deals that are also growing triple digit. So, obviously, her job is going to be to balance that with continuing to improve and hone in on our entire go-to-market and sales and marketing spend and expense. There is no surprise here that as we look into next year and the coming year, the landscape is changing in terms of what customers are looking for. And it is very clear that we have some of the most unique solutions right now for some of the most urgent problems in the market. So, as we look at this year, it is a lot about realigning a lot of our resources to go after these opportunities. As we improve our business, you can see some of that already reflected in our operating margin. This is the trajectory we are on. We are accelerating our path to even better profitability. We are optimizing on cash flow. I think these are the things that we will collectively be focused on.

Our next question comes from Patrick Edwin Colville at Scotiabank. Please go ahead with your question.

Thank you so much. And, Tomer, let me ask this one to you. Nice reacceleration in new ARR this quarter. You gave us the sort of breadcrumb that you expect a year-on-year improvement in new ARR in fiscal 2027. So, two parts, if I may. One is, can you unpack that last bit a little bit more to provide any more color? And then, what would be the driver of that? Is it kind of core Endpoint—to your point earlier that there is this renaissance in spend on Endpoint—or is it that plus these emerging products and the multiple tailwinds coming together in fiscal 2027?

Yes. Let me try and unpack that. Obviously, that is exactly what we want to see. We want to improve net new ARR. You have seen a little bit of that in Q4, but that is what we are looking at for this coming year. On top of that, we are also starting to see a seasonality change. We are moving from this 40/60 first-half/second-half dynamic we have had in the past couple of years more to roughly 50/50. So that means that the first half of the year is very solid, and that has positive impact on growth for the year for both revenue and ARR. These are some of the dynamics that we are seeing there. Some of it is coming from Endpoint. I would not call it the full renaissance, to be honest, but there is definitely more traction in Endpoint. I think if you are seeing some of our businesses crossing the $100 million ARR mark and still accelerating in a pretty significant way, those are our sources of added revenue growth and added ARR growth. So, all in all, we believe that an improved net new ARR is a good starting point for us in our revenue guide.

Our next question comes from Richard Poland at Wells Fargo. Please go ahead with your question.

Hey, thanks for taking my question. I guess, just on the gross margin side, I noticed that gross margin ticked down a little bit in the quarter, but I think it was maybe a touch better than expectations. As we look forward to next year, could we see that start to stabilize or tick up, or is there anything underlying there that we should think about?

Yes, of course. I would say our gross margins are incredibly stable. They are also best in industry, so they are incredibly high. We put it exactly at the high end of our range of our long-term targets. So, all in all, we feel like they are stable. They are going to continue to be stable. We do not forecast any change in that.

Our next question comes from Michael Joseph Cikos at Needham. Please go ahead with your question.

Thanks for taking the question here. Tomer, if I could come back to the prepared comments and the opening script. Great to hear about the seven-figure deal over at Cloudflare displacing your next closest competitor. Can you discuss that a little bit more as far as how Cloudflare came to you, how the deal came together—again, just given their positioning in the software ecosystem, they are thought of as being pretty market leading? I would love to get some more color there. Thank you.

Of course. It is a combination of the set of capabilities that we have today that—through the prepared remarks—we tried outlining how unique the capabilities that we have today are, especially at scale. So when customers are looking to add and prepare themselves for adopting more generative AI and more AI agents, the most advanced ones really need these capabilities now. They cannot buy off a demo. They cannot buy off something with a roadmap. They need something tangible that works today and works at scale and is proven. And that is exactly what Prompt Security and Purple AI bring to bear. These are already fully deployed, fully scalable products that are covering right now millions of devices and assets globally. So that drives a lot of demand from customers of all competitors. And in the case of Cloudflare, I think efficacy was a big deal, the ease of deployment, coverage for systems of all operating systems—these were some of the key things that they wanted to find. I think they also wanted a like-minded partner that can move fast with them in AI. And, as you pointed out, despite them being a leading partner for some of our competitors, they have chosen the best technology that they could. And doing this at a scale where you need to be completely flawless in your transition to create no interruption, I think that was also a very impressive feat by both teams, and I think that punctuates the win.

Our next question comes from Shaul Eyal at TD Cowen. Please go ahead with your question.

Thank you. Good afternoon, everybody. Tomer or Barry, can you talk to us about the sources of operating leverage and margin for fiscal 2027, as we think about double digit for the year?

Sure.

Happy to share here. A couple of things that we are super focused on. Firstly, really sharpening the focus on the highest-yielding go-to-market opportunities. You heard Tomer talk about some of the product lines and some of the businesses that are rapidly growing for us—some of them in the triple digits—making sure that we are investing behind those and giving them the oxygen they need. And then, secondly, not necessarily germane just to us, but integrating AI throughout our business and our business operations. We are seeing meaningful productivity gains across the board—everything from engineering and development to how we serve customers to how we just run the internal organism itself.

I would just add to that. You have seen us through the past couple of years also taking pretty hard decisions on what not to invest in and what to potentially deprecate and prune away. I think these are the decisions we are going to continue to make. You have seen us do that with a couple of product lines last year. We do not expect the exact same thing this year, but we are definitely honing in on more areas where we see higher yield. So I think it is not farfetched to see us narrowing our focus, at least in go to market, on not only the most yielding but the most important parts of our platform—what is the most important right now for customers. So, all in all, we have not grown our headcount. We have not inflated our ranks in the past couple of years. That is definitely not going to happen this year. We are finding more and more ways to become more productive with AI. It is already happening. A meaningful amount of the code we generate today is generated with AI. That has tremendous impact on us. We are a big R&D shop. We are a big innovation hub. That means that we can build more with less, we can take products to market faster, we can iterate and get better outcomes to customers. All of those are going to help us also drive benefits to the bottom line as well.

Our next question comes from Roger Foley Boyd at UBS. Please go ahead with your question.

Great, thanks for the question. Tomer, it looked like it was a pretty strong quarter overall for new customer acquisition. You noted, I think, half of new business came from new customers. And against that, you had a 50% attach rate of Purple. Any directional color on what that attach rate looks like with new customers, and to what extent are you finding that Purple is driving these new customer wins and really influencing your win rates in areas like Endpoint? Thanks.

Of course. First of all, it is pretty balanced. We are seeing the uptake both from existing customers and new customers. I think we mentioned a couple of earnings calls ago that we created a new bundle, and we took our Complete bundle and made it a Complete AI bundle, basically adding in some of the Purple AI capability. That is creating a nice differentiator for us in the mass market. So that is driving some of that attach. But, at the end of the day, it is really clear—when you can create 60% faster outcomes, when you can have 300% plus return on investment, it becomes almost a no-brainer. If you are using one of these things, you are actually saving money, and the economics are favorable for customers. That is the main driver behind the Purple uptake. We are also— as I have said in the past—continuously adding more capabilities to the Purple suite. We are adding more and more agentic capabilities that are completely integrated into the platform. We do not require customers to buy another product or to deploy something else or to build their own agent, or we just give them a studio. We are giving them complete integrated AI capabilities they can turn on with one click of a button. That seamlessness—that user experience—is resonating in the market.

Our next question comes from Joseph Anthony Gallo at Jefferies. Please go ahead with your question.

Hey, thanks for the question. It was great to see the $130 million in Data ARR. Can you talk through the sustainability of growth in that business? And then, Tomer, regarding SIEM, how do you think that market evolves in an LLM-based world? Does it become more or less important? Is there any risk of disruption? Thank you.

Thank you for the question. Our Data business is going to go only one way, which is up. That is terabytes and terabytes and petabytes of data that we are seeing down our pipeline. There is a very familiar dynamic in the data space where the initial land is just a piece of customers' overall data needs, and as they onboard our data lake, it is the starting point for them into how much more they can put into it over the years. We are starting to see those expansion opportunities pop up. We are absolutely seeing more and more demand for our data lake capability. Specifically for SIEM—and I think there is a small nuance here—SIEM, you can think about it as its front end for security operations that you put on top of the data lake. I would say that certain customers still want that front end. They want those capabilities. At the same time, what we are seeing more and more is that when we apply some of our Purple suite agentic operations directly on the data—directly on the ingested data—now with Observo integrated into it, the ability to ingest data in real time and apply LLMs that are on the backbone of Purple AI to then orchestrate autonomous operation, to us that is the future of where cybersecurity is going to go. And I am saying the future, but it is also happening right now for certain customers. So I think it is really a question of what models you are going to support for customers. Some customers are going to want more controls, more dashboards, more of that legacy experience—I would call that the SIEM experience. Other customers are much more focused on automation, on embedding LLMs and agentic workflows into their data ingestion as close as possible to the point of ingestion, and that, to us, is almost a new model for cybersecurity that maybe, in the course of the next few years, is going to make SIEM something that is less mandatory than it is today. But right now, what we see in the market is both approaches, and we are doing what customers are asking us to do.

Our next question comes from Eric Heath at KeyBanc. Please go ahead with your question.

Hey, thanks for taking the question here, and nice finish to the year. Maybe Barry or Tomer, could you speak to the linearity in the quarter that you saw, given that the DSOs were a little bit higher than they have been—revenue being in line with your guidance? Thanks.

Yep. I think the revenue beat for us, the entire year, was very minimal beats, I would say. Q4 was a little bit more back-end loaded. I think you see that as well reflected. As Barry mentioned, some of the collections came a bit later than we wanted, but nothing too dramatic. I think that is the full extent of the dynamic that we have seen. Otherwise, the other thing—obviously, when you are not getting these collections in time—it is going to show up a bit later. So you should expect something a bit more healthy maybe in Q2. And I think, again, I called out the changing seasonality for us, so that is another dynamic that is going to be at play. It is probably going to look a bit different for us this year in a very positive way, I should say. So these are the fullest dynamics that we are seeing.

Our next question comes from Adam Tindle at Raymond James. Please go ahead with your question.

Okay, thank you. I just wanted to continue on that last comment there, Tomer, on net new ARR and seasonality. I think you said earlier 50/50 for first half/second half. And if I am doing the math right for the full year, you are probably going to be somewhere in the neighborhood of $200 million of net new ARR—correct me if I am wrong there. But I think that would imply $100 million or so in the first half, which would be very strong, I think up over 20%. I know it is important with Sonalee coming on, and, under prior CFOs, we had early stumbles in terms of relative to expectations and numbers and just wanting to avoid that. You talked on the call about gaining credibility, which you are certainly doing as you are executing. So I wanted to give this a forum to flush out those net new ARR comments so we do not get too far ahead of ourselves for the first half as Sonalee comes on. Thanks.

Of course. Good questions overall. I would say, first, I think you are not wrong on the net new ARR number—probably a slight improvement over that. And I think the seasonality is just what we have line of sight to right now and just a very solid start for the year. Once we are able to transact earlier in the year, you can do the math of what that means for the rest of the year, and that is what we are seeing. That is what is happening. So we are just calling it out. And, as I mentioned, it is just a good starting point for us. We are starting to maintain that consistency, and I think that should persist. We do not see a reason why it would not.

Our next question comes from Jonathan Frank Ho at William Blair. Please go ahead with your question.

Hi. I wanted to dig a little bit into Wayfinder, and could you give us a sense of what some of these enhancements like human-plus-AI capabilities and Intel—how does that allow you to reimagine modern MDR solutions? Thank you.

Thank you. Great question. I think that is exactly it. It is really clear that the role of MDR is shifting. If MDR, in past years, was really manual human work to sift through alerts, with the increased automation and autonomous action of our platform, our MDR analysts and overall service are graduating to be more of a supervision layer, and that is helping us not only scale, but also achieve much better outcomes for customers. And I think, more than anything, it is really clear that we all need to still establish a level of trust when we talk about autonomous agents. Obviously, the margin of error is quite big with some of what these autonomous agents are doing. So, for us, a good way to control that and a good way to make sure that agents always stay within their guardrails—that all autonomous action and critical action are always happening with human supervision—is attaching services like Wayfinder to monitor these agentic actions that are happening, and we are doing so in a highly scalable way. Once again, that is something that resonates with customers. Right now, with us, they can onboard agentic workflows and have humans regulate that, and that is a big thing. We are not just offering them a piece of technology. We are offering them complete managed supervision of their security stack.

Our next question comes from Ittai Kidron at Oppenheimer & Co. Please go ahead with your question.

Hey, guys. For me, maybe one for you, Tomer, and one for you, Barry. Tomer, on your side, you clearly have a very broad portfolio at this point, and it is nice to see the traction there. Can you talk about how the comp plan for quotas for salespeople is changing because of that, and what are you incentivizing, and how do you get salespeople focused on the right thing? And then for you, Barry, with your initial guide for fiscal 2027 and going back to the previous questions, in what way are you more conservative, or in what way is your guidance philosophy right now for 2027 different from the exercise you went through in 2026?

Thank you for the questions. Comp plans have not changed in a dramatic way. I just want to remind everybody that we always had this component that we called emerging products, and we are just changing what we put in that basket of emerging products, and we like the behavior that we are seeing. We also see some natural affinity to what customers are asking for, and we are making sure that we are aligning that basket of emerging products to reflect what is happening right now in the market and what we believe are the best products that are the best fit to what customers are trying to solve right now. You are not going to be surprised that you find things there like AI security. You are not going to be surprised that Data is still there. So, obviously, that is a great tool for us—has been and will continue to be—to drive people in the right direction and where the market is currently showing the most demand.

And just to your question on guidance overall, I think this is the right starting point for the year. We are really comfortable with the guide. If you look at the things that are supporting it, it is a few things: solid pipeline, strategic partnership opportunities, and we have been talking a lot about the rising contribution of our emerging solutions—AI, Data, Cloud, Wayfinder, others. So we feel like we are at the right spot.

We have no further questions at this time. We will turn the call back over to Tomer Weingarten for closing remarks.