SentinelOne (NYSE: S) spearheaded a significant rally in cybersecurity stocks on Monday, as investors repositioned their portfolios in response to growing calls for a slowdown in frontier AI development. The company's shares closed at $22.60, up 14.4% from Friday's close of $19.75, with trading volume reaching 14.8 million shares. This surge brought the stock within 5.6% of its 52-week high of $23.95.
Sector-Wide Momentum
The move was not isolated to SentinelOne. CrowdStrike (CRWD) gained 13.9% to close at $235.38, while Palo Alto Networks (PANW) rose 13.1% to $373.94. The rally came as global AI-linked shares fell following industry leaders' calls for slower development due to safety concerns. According to Investing.com, this has resulted in a 'long-software, short-chip' trade among investors.
The market's logic is straightforward but speculative: a slowdown in AI infrastructure buildout would hurt hardware demand first, while security platforms could benefit if enterprises redirect AI budgets toward governance, identity protection, and threat detection. Monday's price action reflects this expectation, even though no vendor has yet reported incremental revenue from such a shift.
SentinelOne's Operating Story
SentinelOne has operational evidence supporting the thesis, though not proof of a new spending wave. The company recently published an article highlighting its agentic investigation capabilities as an always-on layer for security operations. Its Purple AI and managed Wayfinder service align with the theme investors embraced on Monday, but these are product positioning efforts rather than contract announcements or revised financial forecasts.
More concrete evidence came from the fiscal second-quarter results released on August 27. Revenue grew 21% to $292 million, while annualized recurring revenue (ARR) increased 22% to $1.218 billion. Customers generating at least $100,000 in ARR grew 13% to 1,715. The company raised its fiscal 2027 outlook to $1.202-$1.207 billion in revenue and $124-$128 million in non-GAAP operating income.
Profitability Improvements vs. GAAP Losses
Profit conversion improved significantly, with non-GAAP operating margin reaching 10%, up from 2% a year earlier. This gives shareholders a measurable reason to pay more for each dollar of recurring revenue, as growth is now accompanied by better adjusted operating leverage.
However, the accounting gap tempers enthusiasm. GAAP operating margin was negative 31%, only two percentage points better than the prior year, and GAAP gross margin fell to 72% from 75%. Stock-based compensation totaled $92.1 million in the quarter, roughly 32% of revenue. While SentinelOne holds $813 million in cash and investments, the path from adjusted profit to GAAP profit remains clouded by dilution and excluded expenses.
What to Watch Next
This distinction matters after a sector-wide leap. Cybersecurity demand can strengthen while a particular stock still outruns its fundamentals. SentinelOne's 22% ARR growth and 10% adjusted operating margin are credible improvements, but neither confirms that weekend warnings about AI safety will translate into incremental bookings.
The next earnings report needs to connect the narrative to orders. Investors should watch net new ARR, growth in six-figure customers, and gross margin alongside the guided $309-$311 million in third-quarter revenue. An acceleration in ARR with another margin gain would validate Monday's rerating. Conversely, ARR near its recent pace, especially with gross-margin pressure or another large stock-compensation charge, would leave the stock dependent on a trade that can reverse as quickly as it formed.
