Prepared remarks
Good afternoon. Thank you for attending today's SentinelOne Q4 Fiscal Year 2025 Earnings Conference Call. My name is Jaylin, and I will be your moderator for today. All lines will be muted during the presentation portion of the call, with an opportunity for questions-and-answers at the end. I'd now like to turn the conference over to our host Doug Clark, the Vice President of Investor Relations. Doug, you may proceed.
Good afternoon, everyone, and welcome to SentinelOne's earnings call for the fourth quarter of fiscal year 2025, which ended January 31, 2025. With us today are Tomer Weingarten, CEO; and Barbara Larson, CFO. Our press release and an earnings presentation were issued earlier today and are being posted on the Investor Relations section of our website. This call and accompanying slides are being broadcast live via webcast and a replay will be available on our website after the call concludes. Before we begin, I would like to remind you that during today's call, we will be making forward-looking statements about future events and financial performance, including our guidance for the first fiscal quarter and full fiscal year 2026, as well as long-term financial targets. We caution you that such statements reflect our best judgment based on factors currently known to us, and that our actual events or results could differ materially.
Please refer to the documents we file from time to time with the SEC, in particular, our annual report on Form 10-K and our quarterly reports on Form 10-Q. These documents contain and identify important risk factors and other information that may cause our actual results to differ materially from those contained in our forward-looking statements. Any forward-looking statements made during this call are being made as of today. If this call is replayed or reviewed after today, the information presented during the call may not contain current or accurate information. Except as required by law, we assume no obligation to update these forward-looking statements publicly or to update the reasons actual results could differ materially from those anticipated in the forward-looking statements, even if new information becomes available in the future. During this call, we will discuss non-GAAP financial measures unless otherwise stated.
These non-GAAP financial measures are not prepared in accordance with generally accepted accounting principles. A reconciliation of the GAAP and non-GAAP results other than with respect to our non-GAAP financial outlook is provided in today's press release and in our earnings presentation. These non-GAAP measures are not intended to be a substitute for our GAAP results. Our financial outlook excludes stock-based compensation expense, employer payroll tax on employee stock transactions, amortization expense of acquired intangible assets, acquisition-related compensation costs, restructuring charges, and gains on strategic investments, which cannot be determined at this time and are, therefore, not reconciled in today's press release. And with that, let me turn the call over to Tomer Weingarten, CEO of SentinelOne.
Good afternoon, everyone, and thank you for joining our fiscal fourth quarter earnings call. Fiscal year '25 was a transformative year for SentinelOne, ending with a strong Q4 that exceeded our expectations across all guided metrics. For the full year, we also successfully met or exceeded the guidance targets that we set at the start of last year. Notably, we reaccelerated second-half net new ARR growth back into positive territory. This performance was fueled by strong win rates, disciplined execution, and the growing adoption of our platform solutions, particularly in data, AI, and cloud. Once again, we delivered industry-leading revenue growth and margin improvement. We were one of the only software companies at scale to achieve over 30% top-line growth while driving over 15 percentage points of operating margin expansion. Additionally, we set a new customer growth record and scaled our emerging platform solutions to new highs, with non-endpoint solutions crossing 50% of our full-year bookings.
We successfully transformed our business from an endpoint-focused model to a comprehensive leading AI-native cybersecurity platform. At the same time, we accelerated our time to profitability through focused investments and discipline. We achieved significant profitability milestones, including our first quarter of positive operating income in Q4, well ahead of our expectations, our first full year of positive net income and earnings per share, and our first full year of positive free cash flow. With these results, we've crossed a key inflection point, and we believe the company is well positioned for sustained growth and profitability at scale. We expect to surpass $1 billion in both ARR and revenue this year, an important milestone in our growth journey. We also expect to achieve full-year operating income profitability while continuing to invest in our platform and future opportunities.
In fiscal year '26, we remain focused on execution and advancing Singularity as the preeminent AI-powered cybersecurity platform for the future, which brings me to the state of the market. In many ways, the cybersecurity status quo was a disappointment in 2024: more breaches, more costs, and more data was stolen than ever before, including personal data, financial data, healthcare data, and more. Our entire world is now digital, and these breaches are challenging that very basic fabric. Furthermore, AI is no longer experimental and in the hands of attackers; it's a real threat. The scale, automation, and speed of attacks are accelerating. Looking ahead, we must redefine the security landscape with a modern approach; our industry cannot afford to rely on the same outdated approaches from the past two decades. They simply don't work. Our AI-native autonomous security is fundamentally redefining how cybersecurity challenges are addressed, setting us apart in the industry.
Enterprise-wide security, unified data, and AI are the core pillars of every solution within the Singularity platform. Today, I'm excited to announce that we're the first company to embed foundational generative AI capabilities into every platform solution by default, including endpoint, cloud, data solutions, and more. From the beginning, we introduced an AI-based approach to endpoint security. A decade later, we remain at the forefront of innovation, pioneering the use of generative and agentic AI to transform enterprise-wide security applications. We're harnessing AI to empower humans and automate defenses at scale. This is how we elevate cybersecurity for enterprises and help them become exponentially better. As a company, we are nimble and adaptive, a key competitive advantage compared to other incumbents. We can leap, not just take steps forward. And this year, we're leaping forward to where the future is going to be.
We have an incredible opportunity ahead to collaborate with our customers, partners, and enterprises worldwide to usher in the new era of cybersecurity with Singularity. Our success stems from our focused innovation strategy and technology leadership. Let me cover that in more detail. Three things set our Singularity platform apart. One, unified defenses; the only open unified AI security platform integrates data, endpoint, cloud identity, and third-party solutions for broad and complete coverage and protection. Two, outpace threats; autonomous security and industry-leading signal-to-noise ratio deliver real-time protection and actionable insights to stay ahead of threats. And three, enhanced security analysts; our generative and agentic AI set the standard in defending against modern threats, designed to evolve and constantly adapt. Singularity helps move faster, more efficiently, and save costs.
Take a look at the latest MITRE ATT&CK Evaluations, the industry's gold standard for comparing and contrasting performance across security vendors. For the fifth consecutive year, Singularity achieved 100% detection. It's also important to take a more detailed look at MITRE results beyond the detection score. This is where true differentiation emerges. The latest MITRE Evaluation introduced new performance criteria for detection delays and alerts. Singularity delivered zero detection delays and 88% fewer alerts compared to competing solutions. The relative outperformance of Singularity is impressive; competing vendors required four times, eight times, or in one case, 9,000 times more alerts. With SentinelOne's industry-leading signal-to-noise ratio, enterprises don't have to compromise between protection, reliability, and noise. Detections are real-time with the Singularity platform, eliminating gaps and ensuring enterprises stay ahead of evolving threats.
Our emphasis on quality over quantity minimizes alert fatigue and enables security teams to remain focused and effective against adversaries. Put simply, our AI-driven security approach simplifies and streamlines operations. We're focused on delivering the best solutions that address the most critical enterprise needs. Our platform solutions fall into seven key categories: AI and automation, data, endpoint, cloud and identity security, exposure management, and threat services. Each of these seven solution categories encompasses multiple individual product offerings that collectively address over 30 distinct use cases. As an example, our cloud security solutions represent one of the broadest portfolios in the industry, covering cloud workload protection, CSPM, CIEM, AI-SPM, cloud data security, and more. This extensive coverage highlights the depth and versatility of the Singularity platform, delivering AI-native cybersecurity across diverse environments.
Importantly, all of our platform offerings are powered by the unified Singularity Data Lake and integrated with AI and Hyperautomation capabilities. We've experienced robust adoption and expansion of our platform solutions over the past two years. As of this quarter, we've tripled the number of customers with three or more solution categories and quadrupled the number of customers with four or more solutions. I'm also excited to share that about 40% of our enterprise customers have adopted three or more platform solutions, and about 20% have adopted four or more solutions. This incredible progress in customer receptivity illustrates the diversity and growth potential of our business. In fiscal year '25, over 50% of our bookings came from non-endpoint solutions. This milestone shows our ability and momentum to disrupt large markets with leading technology. We've just begun to scratch the surface of an immense $100 billion market opportunity.
In Q4, we achieved record bookings contribution from our data cloud and AI security solutions, once again showing the accelerating adoption of our broader platform. Data and AI were our fastest-growing solutions, fueled by the adoption of our Singularity AI SIEM. Our AI SIEM is redefining security data management with enhanced visibility, real-time detection, on-streaming data, accelerated investigations, and autonomous responses. Many of our largest and most strategic wins in the quarter included AI SIEM alongside broader platform solutions. Let's look at a few examples. A customer with an eight-figure total deal value in the APAC region expanded endpoint and cloud coverage, added CNAPP, and fully replaced a legacy SIEM with AI SIEM—a true platform win. Next, a leading financial institution switched from Splunk to AI SIEM, reducing costs and improving performance. The multi-million dollar deal increased the customer size by five times.
Finally, in another multi-million dollar expansion, one of the largest retailers in its category selected AI SIEM to replace an incumbent vendor, which resulted in savings of more than $1 million per year for this customer. By combining AI SIEM with adjacent Singularity solutions, this enterprise can now detect and respond to incidents up to 12 hours faster than before. Customers are starting to migrate away from legacy SIEM products and modernize their infrastructures. We're partnering with them at their pace. The momentum is clear. As we engage in more strategic large enterprise conversations, we're building trust and long-term relationships. We're listening to our customers' objectives and helping them solve their security and data challenges. In Q4, we welcomed one of the largest airlines in the world, a Fortune 100 company that chose SentinelOne to replace their incumbent vendor. After six months of engagement and support by the SentinelOne team, this enterprise adopted the Singularity platform across their network to improve security and resilience.
Q4 was one of our strongest quarters of competitive displacements; still, large-scale security decisions, evaluations, and deal engagements take time and careful consideration. The market interest and customer engagements are strong, opening new opportunities for SentinelOne, all contributing to our expanding pipeline. Turning to our partners, we're also seeing increased interest from managed security, incident response, and insurance providers for our broader platform solutions. In Q4 alone, more than a dozen large partners started adopting AI SIEM, Purple AI, CNAPP, and more. In particular, MSSPs remain a strong driver of growth and opportunity. They are doubling down with SentinelOne, embracing more of the platform, and establishing longer-term contracts. This benefits us and our partners with more visibility and predictability into future growth. Our long-standing partnerships with managed service providers are built on collaboration and innovation.
Multi-tenancy, automated response tools, and rollback capabilities enhance their own service offerings. Now with AI SIEM, Purple AI, and CNAPP, we're taking this to the next level, helping them consolidate security coverage into a single console powered by our leading AI innovations in highly efficient data ingestion and analytics. Let's also discuss the latest innovations across our solutions, starting with Purple AI. We believe every customer should be able to leverage generative AI's foundational abilities for security applications. After a year of customers selecting and using Purple AI, it's clear how much it can scale and automate time-consuming human tasks. We're now the first security company to include foundational Gen-AI security capabilities like natural language queries and auto-generated summaries across our platform by default. This is just the first step in redefining today's categories of EDR, cloud security, and SIEM to be AI-powered, bringing advanced agentic capabilities to not just hundreds of enterprises but thousands.
The inclusion of Purple AI foundations across the Singularity platform sets the baseline for AI usage, driving immediate engagement and fueling the adoption of more platform solutions. More advanced agentic AI workflows with Purple are available to further enhance speed and performance. Additionally, we're extending the power of Purple AI across a wider range of security data. We've added support for third-party solutions, including Zscaler, Okta, Palo Alto Networks, Fortinet, Microsoft, and others. By breaking data silos, customers can unleash the full power of Purple AI across their entire security infrastructure. We're committed to an open platform that can seamlessly coexist and orchestrate a broader ecosystem of security solutions. Purple is already the first and only scaled agentic AI for cybersecurity; Purple plus Hyperautomation are the bedrock for agentic AI in cybersecurity. We believe this will become table stakes for autonomous security in the coming years.
This is the future, and we're extending our lead. In cloud security, we continue to gain traction with new and existing capabilities. More enterprises are securing their cloud environment with our leading cloud workload security and CNAPP capabilities. In Q4, we secured our largest CNAPP deal since the acquisition of PingSafe. In a multi-million dollar opportunity, a leading software company adopted several platform solutions, including workload security and CNAPP, after a rigorous competitive evaluation. Singularity was selected for best-in-class performance, unified capabilities, and lower cost of ownership compared to point solutions. The success of our cloud security platform is further validated by customer testimonials and third-party accolades. During the quarter, SentinelOne was named a 2024 Gartner Peer Insights Customer Choice for CNAPP. We received the highest number of customer responses in the Voice of the Customer, with 98% of customers saying they would recommend us to their peers.
We were also awarded the best overall cloud and application security offering in CRN's 2024 Product of the Year. As we turn to a new fiscal year, let's look at the broader market dynamics and our strategic focus for the path forward. Our technology, scale, and market presence are better than ever. We delivered consistent improvement throughout the year in customer growth, retention, and platform adoption, and we're seeing increased partner and customer interest in SentinelOne. Broadly, AI is impacting how companies make decisions and implement technology. It's changing what we know about software and software development. The world of technology and software is rapidly evolving, and so are we as a company to lead in the future of AI-powered cybersecurity. This involves focusing our resources and aligning teams toward key growth areas. We're sharpening our innovation focus towards AI native data and security solutions.
We must also remain mindful of the macro environment. For many organizations, economic and political uncertainty continues to impact budgets, timing, and business decisions. As we enter fiscal year '26, our product, sales, and marketing teams are fully aligned to expand on the reach and scale of our platform through new customer growth and expansions. We're focused on strong execution and deeper engagement across our partner ecosystem. We believe this positions us well to drive premium growth while continuously improving margins in the years to come. We've achieved a lot in the past year from delivering industry-leading growth and margin improvements to bringing cutting-edge innovations to the market, and most importantly, keeping our customers secure. I'm proud of all Sentinels for their dedication and relentlessness over the past year and for their enthusiasm for what's to come. In closing, I want to extend my thanks and gratitude to our customers and partners for their trust in SentinelOne.
Congratulations to all Sentinels. Their hard work and commitment drive our success and help secure tens of thousands of businesses around the world. And thanks to our shareholders for their continued support. Our mission to be a force for good remains unwavering. With that, I would like to turn the call over to Barbara Larson, our Chief Financial Officer.
Thank you, Tomer, and thanks to everyone for joining us today. Let's review the details of our Q4 and fiscal year '25 financial performance and our guidance for Q1 and fiscal year '26. As a reminder, all comparisons are year-over-year and financial measures discussed here are non-GAAP unless otherwise noted. We continued to deliver industry-leading growth and margin expansion in fiscal year '25. Our revenue grew 32% to $821 million, while gross margin reached a new full-year high, and operating margin improved by 16 percentage points year-over-year. In addition, we crossed two important profitability milestones this year, delivering a positive net income margin of 2% and a positive free cash flow margin of 1% for the full year. Our profitability improvements are driven by increasing scale, operational efficiencies, and a disciplined investment strategy. We will continue to build on this and improve our profit and free cash flow margins in fiscal year '26.
Turning to our fourth quarter results, our overall performance signifies a strong competitive position and demand for SentinelOne’s best-in-class cybersecurity solutions. We are taking market share and mind share from incumbents and next-gen vendors alike. Q4 revenue of $226 million grew 29% year-over-year and exceeded our expectations. This outperformance was driven by strong new business growth and linearity in the quarter. Revenue from international markets grew 36% and represented 37% of our quarterly revenue. In Q4, we added net new ARR of $60 million and our total ARR grew 27% to $920 million. We delivered on our goal to reaccelerate net new ARR growth in the second half of the year, achieving 2% growth, an improvement of 12 percentage points compared to the first half of the year. This performance improvement was driven by improved execution, a stronger competitive position, and success across our platform solutions, notably cloud, data, and AI.
Our Q4 competitive win rates were strong and improved compared to prior quarters. Exiting fiscal year '25, we're now protecting over 14,000 direct customers. Keep in mind, this does not include the thousands of businesses served by our strategic partners like MSSPs. In Q4, we continued to solidify our leadership position with MSSPs. We have established deeper relationships and long-term growth commitments with leading MSSP partners. These strategic partnerships provide visibility into our mutual growth and success. This contributed to the strong RPO growth in the quarter, which reaccelerated to 30% growth and reached a new record of $1.2 billion. In addition, we're seeing success with both new and existing customers. Customers with ARR of $100,000 or more grew 25% year-over-year in Q4 to 1,411. This reflects more than 100 customer additions quarter-over-quarter, the largest net adds for the year.
Our average deal size and ARR per customer continue to increase as well, highlighting our platform momentum and ongoing move upmarket. We continue to maintain healthy expansion rates and for the full year, we achieved a dollar-based net retention rate of 110%. Even as enterprises navigate a challenging macro environment, they continue to embrace more of the Singularity platform. Beyond the top-line growth and customer momentum, we delivered record profit margins in Q4. We achieved our first quarter of positive operating margin, outperforming our prior guidance by over 400 basis points. This outperformance was driven by cost discipline in the quarter and our focused investment strategy. Turning to our guidance for Q1 and fiscal year '26. This year, we expect to surpass $1 billion in both ARR and revenue. We also expect to deliver our first full year of positive operating margin. To be specific, we anticipate revenue of $1.07 billion to $1.12 billion, representing 23% growth.
While we typically do not comment on an ARR outlook, this quarter, we believe it may provide helpful context around our growth expectations. For fiscal year '26, we expect to deliver approximately $200 million in net new ARR, growing about 2% year-over-year. This positive trajectory builds on our reacceleration in recent quarters, continuing our growing market presence and platform adoption. At the same time, we're mindful of macroeconomic conditions, deal timing, and federal spending uncertainty. In addition, we're focused on delivering efficiencies, and that means prioritizing our investments in data, cloud, and especially AI. As a result, we made the strategic decision to retire our legacy deception solution. Our outlook includes up to $10 million of expected churn from the retirement of deception, with nearly half of that impacting Q1. Excluding this impact, we expect our full-year net new ARR would increase by a mid to high-single-digit percentage year-over-year.
For Q1, we expect revenue of approximately $228 million, growth of 22% or 24% when normalizing for the leap year benefit from last Q1. Additionally, we expect Q1 net new ARR in the low $30 million range. Our Q1 expectations include the impact of the retirement of our legacy deception solution. Excluding this impact, we would expect our net new ARR to be approximately flat year-over-year. Turning to our outlook for margins, we expect to maintain industry-leading gross margins as we grow our customer and platform base. We expect Q1 gross margin to be about 79%. And for the full year, we expect gross margin to be between 78.5% and 79.5%. For operating margin, we expect Q1 to be about negative 2%, implying a year-over-year improvement of approximately 400 basis points. For the full year, we expect operating margin to be between positive 3% and 4%, an improvement of over 650 basis points at the midpoint compared to fiscal year '25.
In addition, we expect our full-year free cash flow margin to be several percentage points higher than operating margin, as we continue to improve our profitability and cash flow profile. As we shift towards generating more meaningful positive free cash flow, we still have over $1.1 billion in cash and cash equivalents, which provides ample flexibility as we invest in and scale the business. Taking a step back, our momentum, technology leadership, and competitive position remain strong, and we're committed to delivering ongoing leverage in the business as we execute our growth strategy. Our investment approach strikes a thoughtful balance between maximizing long-term growth opportunities and maintaining a strong, responsible, and profitable financial profile, a strategy that's key to scaling SentinelOne to a multi-billion dollar business. At the same time, we're instilling operational discipline by identifying ways to enhance efficiency and productivity.
One example is the prioritization of investments towards AI-powered security and data. In addition, we are optimizing our facilities footprint and aligning resources to strategic growth areas. These enhancements make us more nimble while freeing up investments in our key growth priorities of data, cloud, and AI, all while delivering additional margin expansion this year. Our goal is to deliver growth at scale while continuously improving operating and free cash flow margins over time. Thank you all for joining us today. We will now take questions. Operator, please open up the line.
Questions and answers
Our first question comes from Adam Tindle with Raymond James. Adam, your line is now open.
Okay. Thanks. I'm going to ask one, but it's going to be multi-part. I'm going to try to beat up net new ARR right out of the box here, so bear with me. Appreciate the highlight that net new ARR flipped back to positive for the back half. But if we're looking at just Q4, it was flattish on easier comparison. So just rationale for that in Q4. And then Barbara, as we look to fiscal ‘26, it was helpful to get that color on total ARR growth. I guess the question would be on that starting kind of flattish, I think if I backed out the retirement of the product you mentioned and needing to grow low-single digits for the year as the comparisons get tougher throughout the year. What kind of gives you the confidence to come out here with that back half tougher comparisons and with this ramp throughout the year? Thank you.
Thanks, Adam. So let me actually address that first. So in fiscal year ‘25, we delivered revenue growth of over 30%, that's industry-leading with full year profitability, with really strong win rates, pipeline growing, interest from new larger enterprises. That just means more awareness for SentinelOne. And we're seeing very strong adoption from all of our platform capabilities. If you kind of think about that with successfully reaccelerating our net new ARR growth in the second half of the year. For FY ‘26, we expect to grow that meaningfully if you adjust it for the deception end of sale, that will be mid to high growth single digits. So we feel confident in the opportunity and the trajectory. I think the underlying strength of the business is somewhat masked by that end-of-life decision, which we believe is the right decision longer term. And all in all, the guide gives, I think, a good achievable starting point for us as we execute throughout the year.
And then I'll just follow-up with the question on Q4 ‘25. We did have some impact from churn in this Q4 related to deception. And if we adjust that out, our Q4 net new ARR would have grown in mid-single digits.
Our next question comes from Brian Essex with the company JPMorgan. Brian, your line is now open.
Hi, good afternoon. Thank you for the question. I was curious about the contribution from Lenovo regarding ARR and net new ARR. Are you seeing any progress? Are they successfully selling devices? You mentioned previously that this might happen in the latter half of the year. I'm just looking for more insight into that relationship and how it might influence your guidance for the year.
We're working very closely with the Lenovo team. All of the go-to-market elements are now being put in place. And as I've said before, we expect that impact to be much more back-end loaded, mostly, I would say, even in the next fiscal year as more on-the-box shipments are starting to get out the door. So everything we know, understand and want to take into this year is factored in the guidance. We believe the Lenovo, which is a multiyear relationship with ramp baked into it, is going to be much more meaningful in the out years versus in this immediate fiscal year.
Okay. Great. Thank you. I’ll keep it one and follow-up afterwards. Thank you.
Our next question comes from Gray Powell with the company BITG. Gray, your line is now open.
Great. Thanks for taking the question. So maybe one for Barbara. You've been at SentinelOne a little over six months now. It's your first time owning the guide for the full year. Are there any material changes that you're making? Are you looking at any different KPIs or just any difference with regards to your guidance philosophy versus your predecessor?
Yeah, Gray. Thanks so much for the question. In terms of the guide, we really feel like this is the right starting point for the year. We're focused on setting reasonable expectations that reflect the potential that we see in the business. Of course, it's based on what we have line of sight to pipeline activity, contributions from new products, anticipated conversions, and win rates. We're mindful of the macro as well. It's not extremely different than what we’ve seen recently. It just continues to persist; it’s still volatile. It’s almost like it’s the new normal. But we do believe this is the right starting point for this year.
Understood. That’s very helpful. Thanks.
Our next question comes from Joseph Gallo with the company Jefferies. Joseph, your line is now open.
Hi, guys. This is Annick Baumann on for Joe Gallo. Tomer, you guys have put a ton of work into your go-to-market engine, and I'm just curious if there's any more tweaks as you begin to work through FY '26? And how do you think about capacity and hiring in the context of looking to reach over $1 billion in ARR this year?
Thank you for the question. There's always evolution happening. I mean, we are working on better productivity. We've improved productivity year-over-year. We are gearing towards more platform sales. We're adjusting our pricing structures. I mean, we're allowing for even more flexibility for our customers, and we're aligning with some of the pricing structures that we're seeing out there. So all in all, we're in this evolution of go-to-market; every indicator that we track is looking better, and that's reflected through win rates, that's reflected through channel contribution. And we're obviously working with more and more automation throughout pretty much every avenue we have. All of those should be somewhat of contributors in this fiscal year, but the vast majority of it is really a poor contribution for the out years and strategic decisions we're taking right now to continue and sustain growth in the years to come.
And operator, I want to jump in here for a second. We're under the impression that folks on the webcast could not hear the first question or the response. So I just want to repose it and allow Tomer and Barbara to answer. It was a question about ARR growth expectations for fiscal '26, as well as Q4 fiscal '25. Tomer, if you want to address that again?
Certainly. In fiscal '25, we are continuing to experience leading revenue growth in the industry at over 30%. Our win rates remain strong, and our pipeline is expanding. We are noticing increased interest from new and larger enterprises, resulting in greater awareness of SentinelOne. Our platform solutions are being adopted widely, with a fourfold increase in the number of enterprise customers utilizing four or more modules. We successfully reaccelerated and improved our net new Annual Recurring Revenue (ARR) growth in the latter half of fiscal year '25. We expect continued growth in net new ARR in FY '26 as well. When adjusting for the end-of-sale decision we are implementing, we anticipate an increase in the mid to high-single digits. We are very confident in our growth opportunities and trajectory. The underlying strength of our business, when considering new sales and upsells, is robust, although it may be somewhat obscured by the end-of-life decision, which we view as a necessary long-term strategy. There is significant change occurring in the software landscape, and we believe focusing on data and AI will necessitate the reduction of some legacy capabilities, which is a path many companies should consider. This remains our central focus, supported by our business's underlying strength along with our strategic long-term decisions.
And then following up on Q4 '25, we delivered flat year-over-year net new ARR in Q4 as planned. We did have some impact from churn related to the retirement of our legacy deception solution. To the extent that we adjust that out, our Q4 net new ARR would have grown in mid-single digits in Q4 '25.
Thank you, operator. We can go to the next question, please. Our next question comes from John DiFucci with the company Guggenheim Securities. John, your line is now open.
Thank you. In this quarter, if I focus solely on new ARR, taking into account the usual small amount of attrition, it actually showed slight growth. About half of our companies experienced growth in new ARR. Barbara, I appreciate your insights on the guidance, which prompts me to ask this: you mentioned assumptions regarding the demand environment and referred to a new normal. It seems that you believe the backdrop is consistent, indicating that you expect SentinelOne to perform somewhat better in this environment this year compared to last year. Could you provide a bit more detail on why you anticipate this improved performance in new ARR? Thank you.
Thank you for the question. Looking at fiscal year '25, we saw an improvement in our new business growth during the second half. We anticipate this trend to carry into fiscal year '26, with a projected increase of 2% in full-year net new ARR year-over-year, reaching approximately $200 million. This projection accounts for about $10 million in churn related to deception, which presents a challenge. Most of this churn will occur in the first quarter. Thus, we expect a front-loaded headwind, but we anticipate that our net new ARR growth will improve sequentially thereafter.
Yeah. And maybe let me add a couple of points there, John. I mean the one thing that obviously is very different for us is just the adoption of the platform modules. And if you couple that with the ramped sales force, I think we're entering this year on a much stronger note. AI is going to be a tremendous driver and I think everybody understands already. Just to give you some context there, we've done more than 300 AI deals in Q4. I mean that is most likely more than any other security vendor out there. And we definitely see more traction for these solutions. Now obviously, we're accounting for some of the things that we are pruning away. But all in all, we feel like there's quite a bit of momentum in the business. Our pipelines point to that. Again, the maturity of the sales force, all of those are the contributing factors. And then I think that what allows Barbara, not to put words in your mouth, to really put kind of an achievable bar or a good starting point for the year for us.
Our next question comes from Jonathan Ho with the company William Blair. Jonathan, your line is now open.
Hi. Good afternoon. Could you maybe give us a little bit of additional color in terms of your exposure on the federal government side and perhaps what you're seeing in terms of what your customers are saying or what your sales force is saying there? Thank you.
There is certainly a level of unknown and uncertainty with many changes occurring. However, we have actually seen our federal pipeline expand, which is a clear source of demand for us. Additionally, for the type of offerings we provide to federal agencies, especially since we are one of the few security vendors permitted to sell AI in a FedRAMP High environment, we create cost synergies. We help these agencies reduce their data ingestion and operational costs, which positions us favorably even in a macro environment where cost savings and prudence are essential. Overall, we view the federal sector as a source of strength. That said, there may be some uncertainty regarding deal timing and budgets, and we are working at the customers' pace. Nonetheless, demand remains strong.
Our next question comes from Shaul Eyal with the company TD Cowen. Shaul, your line is now open.
Thank you. Hi. Good afternoon. Tomer, I had a question on deception. What's driving that decision? And maybe is some of the deception capabilities from a product perspective being displaced by some of the Singularity AI-driven capabilities?
Yes. Thanks for the question, Shaul. The biggest thing with deception is just it's a legacy code base that we acquired with Attivo. As a matter of fact, it actually has even hardware components. For us, that's obviously not a long-term business we want to be in. And the cost of maintenance is creeping up while the ROI is not really showing up. So for us, it's a very simple decision of realigning resources into the high-yielding elements of our business. And to the latter part of your question, AI is most definitely going to be a consolidator of capabilities. And I think deception is one of them to a certain extent. You can think about identity. You can think about many elements of the broader security platform you're seeing out there as capabilities that can be delivered as agentic AI instead of a fully-fledged product. And I think that's what we're seeing as the progression, at least of our Purple AI capability set.
That's why we're already including it in most of our Singularity offerings. We believe philosophically that AI, GenAI capabilities for software products are going to become table stakes. If you're not going to have them, you're going to be much less relevant, and we're using that to seed growth to kind of get customers accustomed to it and to drive more usage while we build more and more tiers and more and more agentic capabilities. So that's what we see for the coming fiscal year, and that's how we kind of couch all of it with that base. The majority of it is deception. There's a couple of other small components in there, but that's just, I think, in a broader sense, how we're thinking about the shift from legacy code bases to newer offerings, AI-based, which is something, again, I think you'll start seeing a lot of other companies go down the path.
Our next question comes from Shrenik Kothari with the company Baird. Shrenik, your line is now open.
Great. Hi. This is Zach Schneider on for Shrenik. Thanks for taking the question. So obviously, your emerging product portfolio is becoming an increasingly critical growth driver. And you highlighted data and AI as your fastest-growing solution. But maybe are there any specific solutions that stand out in terms of adoption velocity, cross-sell success? Have there been any surprises, either outperformers that are scaling faster than expected, or areas where traction has been slower than anticipated? Would love to just get a sense of what's working best and where there's still white space to accelerate adoption. Thanks.
I definitely mentioned AI as one of these. Purple AI, with 300 deals in the quarter, is remarkable. Additionally, AI SIEM has been a source of strength for us. The combination of these two makes us much more strategic for these types of customers. I would highlight AI SIEM and Purple AI as the main drivers of growth. In terms of cloud security, we have started selling our complete unified cloud security suite and achieved a record deal with cloud security in Q4. All of these areas are progressing nicely, and we will continue to focus on them as the most strategic points of engagement with customers.
Our next question comes from Rudy Kessinger with the company D.A. Davidson. Rudy, your line is now open.
Hey, guys. Thanks for taking my question. I'm curious if you look at the second half of this year in net new ARR. Obviously, it improved quite a bit from the first half. But if you were to maybe strip out some of the benefit from the displacements from CrowdStrike that were specifically due to the outage that would have otherwise likely not have occurred. What would that second half net new ARR growth have looked like?
I'm not sure we can strip out, and I'm not sure that you can think about it in such a distinct way. To us, and I mentioned it in the opening question, what is changing the most is consideration. And even customers that maybe chose to stay with the incumbent, they're still entertaining and considering what they're going to do next. So a lot of folks are doing anything in an unplanned fashion. But once they go through that cycle, and it could be one year or two years out, sometimes the consideration is very different. So as I mentioned, to us, the way we look at it is something structurally had shifted. I think that creates more consideration for SentinelOne. And all in all, I think that what we've seen is somewhat of incremental contribution. I think it's much more smoothened out than one would imagine. I think maybe folks were expecting some upticks. It's not an uptick type contribution; it's smoothened, it's gradual, and we believe it's also here to stay, which is the most important part.
Our next question comes from Tal Liani with the company Bank of America. Tal, your line is now open.
Hi, everyone. I wanted to clarify the guidance. Your guidance is about $7 million to $8 million below the consensus, and $20 million for the year. The guidance for the next quarter is also $7 million to $8 million below. Part of this seems to be due to the deception, and I'm trying to get a clearer picture. Can you quantify the impact of the deception on the revenue guidance, excluding ARR? Additionally, what are the positive and negative factors that led you to guide slightly below expectations? Your message is compelling, and I see the historical numbers, but the current figures appear slightly weaker. Thank you.
So from a deception perspective, I'll first cover that for net new ARR. So for FY '26, the impact is about $10 million of churn for the year, and Q1 is about half of that. On a revenue perspective for the full year, deception has about a one point headwind on FY '26 revenue.
Got it. So regarding the rest of the guidance, there seems to be a slight weakness compared to expectations. Is there anything you would like to point out about why you are guiding below expectations? Is the growth rate decelerating from last year? What is causing this deceleration?
I think what we're trying to factor at the end of the day is just the unknowns. And we truly believe this is a good starting point for us. There's a lot of factors in play. There's a lot of shifts happening in software. We believe we're making the right responsible decisions here. So all in all, we're just factoring in everything that we believe and know. And obviously, our goal is always to overachieve, and that's going to be my job. Barbara sets the guidance; I try to overachieve it. But all in all, we believe, again, that captures everything we know today.
Our next question comes from Eric Heath with the company KeyBanc. Eric, your line is now open.
Hey, thanks for taking the question. Maybe just one housekeeping one. Just wanted to clarify deception and the decision to end-of-life that was factored in the guidance as of last quarter. And then, Tomer, the question I wanted to ask is on pricing. You called out some adjustments to pricing. So just curious if you could elaborate a little bit more about what that means and if it's some sort of credit model that we're seeing a lot of vendors do to enable more adoption, more modules across the platform. Thanks.
So I'll cover the first one. We did factor that into the guidance. There was some churn in Q4.
And as for pricing, I mean, the first thing I'll open and say is that pricing has been very stable for us. So it's not about discounting, and it's not about needing to tweak our pricing model. But obviously, customers are looking for more flexible ways to procure. And I think that's where we don't see a lot of downside in going down the path of allowing some of these more flexible terms, given that the expansion you've seen in our capabilities set is significant. I mean, our platform today is seven capabilities with about 30 something modules. That's a lot, and customers like to try out a lot of different capabilities that we have. So moving into a pricing model that allows them access to the entire platform is something that we believe is going to be beneficial, and that's the direction that we're heading towards.
Our next question comes from Trevor Walsh with the company Citizens. Trevor, your line is now open.
Thank you for addressing my questions. Tomer and your team, I really value the new information regarding module or solution adoption you shared across the seven; it's impressive to see. I'm wondering if this is primarily for reporting purposes during the call or if there’s a shift towards a more solution-based selling approach for the sales team, and what playbooks you might be implementing to group those together. Additionally, one of your competitors has mentioned that in cloud security, the focus is shifting more towards detection and response, with the SOC taking a larger share of that market, which seems to benefit them and other companies with a runtime agent-based approach. Regarding selling multiple components of your platform, do you agree with this trend in cloud security, and how does that relate to your strategy of offering various solutions across your platform? Thank you.
I believe the most important factor is our desire to provide flexibility. Unlike some other vendors, we don’t require customers to adopt an all-or-nothing strategy. We offer a comprehensive cloud security suite that includes all CNAPP capabilities and leading runtime workload protection. However, we are also open to integrating our solutions in environments where customers prefer to use best-in-class worker protection alongside another CNAPP provider. Our focus is primarily on providing flexibility. We notice that as customers try out at least one of our capabilities, they tend to adopt more of our offerings. Typically, our solutions are recognized as best in class; we have received accolades such as Gartner customer choice for endpoint protection, cloud security, and managed detection response, along with Product of the Year for AI. Clearly, our solutions lead in their respective fields. We provide all-inclusive capabilities comparable to other leading platforms in the market today. Our approach prioritizes meeting customer needs and addressing current requirements rather than focusing on future possibilities. The uptake in our numbers reflects this trend, which is why we are transitioning to more flexible pricing structures that will enable customers to gradually consume more of our capabilities.
Our last question comes from Andrew Nowinski with the company Wells Fargo. Andrew, your line is now open.
Thank you for squeezing me in. So just maybe two quick housekeeping questions. First, did the deception products have an impact on the decline in your NRR when it went down to 110% this quarter? And then second, you gave the cloud and data analytics ARR of $170 million back in Q2. And given that it's a high priority for your investments, I'm just wondering if you could break those two out again in Q4 here or perhaps tell us how much you expect them to contribute to that $200 million in net new ARR for FY '26. Thank you.
So we're not going to be disclosing per product ARR at this point. We will give an update potentially later on in the year. On the NRR front, there was no, I would say, material impact on Q4 NRR. We do expect that that's going to be a headwind to NRR, the deception end of sale, specifically in Q1. And I think once we clear that headwind, I think you'll see NRR maybe in a more healthy place. So that, I think, kind of is the way that we're looking at it today.
I would now like to pass the conference back over to Tomer Weingarten for closing remarks. Tomer, you may proceed.
Thank you. We delivered a strong end to fiscal year '25 and see significant opportunity ahead in fiscal '26. We continue to lead the industry with best-in-class technology. I'm especially pleased with our AI innovations, which we believe will transform cybersecurity in the coming years. We're at the forefront of an AI revolution, driving the next wave of security innovation. Our product and go-to-market strategy are fully aligned to deliver premier AI cybersecurity. And this is driving broader platform adoption among new and existing customers. We're delivering strong revenue growth and margin expansion and achieved new profitability milestones with more to come. Thank you again to our customers, partners, shareholders and Sentinels around the world.
That will conclude today's conference call. Thank you for your participation, and enjoy the rest of your day.