SentinelOne
Acquisitions
5
Major Deals Covered
$872M
Disclosed Deal Value
SentinelOne's largest disclosed acquisition here is Attivo Networks for $616.5M in 2022. This page covers 5 major deals from 2021 to 2025, each with its price where disclosed and the reason behind it.
| Company | Year | Price | Purpose |
|---|---|---|---|
| Scalyr | 2021 | $155.0M | Acquired high-performance cloud data analytics and log management platform to eliminate indexing bottlenecks. |
| Attivo Networks | 2022 | $616.5M | Acquired identity security leader to protect Active Directory, manage credential risk, and deploy deception decoys. |
| PingSafe | 2024 | $100.0M | Acquired cloud-native application protection platform (CNAPP) startup providing agentless posture management and offensive security analysis. |
| Krebs Stamos Group | 2023 | Undisclosed | Acquired boutique cybersecurity advisory firm founded by Chris Krebs (former CISA Director) and Alex Stamos (former Stanford Internet Observatory head and Facebook CISO). |
| Observo AI | 2025 | Undisclosed | Acquired AI telemetry pipeline and telemetry optimization platform to automate data pre-processing and routing. |
2025
Acquired AI telemetry pipeline and telemetry optimization platform to automate data pre-processing and routing.
Reduced data ingestion costs and enhanced telemetry enrichment for the Singularity Data Lake.
Accelerated development of SentinelOne's next-generation AI-powered SIEM operations.
2024
$100M
Acquired cloud-native application protection platform (CNAPP) startup providing agentless posture management and offensive security analysis.
Combined agentless cloud security posture management (CSPM) with SentinelOne's runtime workload agents.
Enhanced Singularity Cloud Security into a comprehensive multi-cloud defense platform.
2023
Acquired boutique cybersecurity advisory firm founded by Chris Krebs (former CISA Director) and Alex Stamos (former Stanford Internet Observatory head and Facebook CISO).
Bolstered SentinelOne's strategic executive advisory, crisis management, and national security intelligence capabilities.
Integrated into PinnacleOne, SentinelOne's strategic advisory and geopolitical threat consultancy.
2022
$617M
Acquired identity security leader to protect Active Directory, manage credential risk, and deploy deception decoys.
Established Singularity Identity, extending XDR coverage to human and non-human identity surfaces.
Integrated as a premier enterprise subscription module protecting enterprise credential stores.
2021
$155M
Acquired high-performance cloud data analytics and log management platform to eliminate indexing bottlenecks.
Formed the technological engine for the Singularity Data Lake and real-time XDR security operations.
Fully integrated into SentinelOne's core data platform to deliver high-speed telemetry search.
Under CEO Tomer Weingarten, SentinelOne is pursuing four strategic growth imperatives: (1) Scaling Purple AI Adoption: Driving enterprise monetization of Purple AI as an automated security analyst, empowering tier-1 SOC analysts to perform advanced threat hunting and cutting mean time to detect (MTTD) by over 80%; (2) Cloud Native Security (CNAPP) Expansion: Expanding Singularity Cloud across AWS, Azure, and Google Cloud, protecting Kubernetes clusters, serverless functions, and containerized microservices; (3) Identity and Credential Defense: Leveraging Attivo Networks to detect Active Directory privilege escalation and credential theft before adversaries move laterally; and (4) Global MSSP Partner Channel Scaling: Deepening strategic distribution partnerships with Managed Security Service Providers (MSSPs) and system integrators to penetrate mid-market enterprises across Europe, Asia-Pacific, and Latin America.
SentinelOne operates a pure-play cloud Software-as-a-Service (SaaS) subscription business model with high gross margins and predictable annual recurring revenue: (1) Singularity Core, Control, and Complete Subscriptions (~85% of revenue), billed annually on a per-endpoint or per-workload basis, providing multi-tiered endpoint protection, automated EDR investigation, and autonomous ransomware rollback; (2) Cloud Security and Identity Threat Defense (~10% of revenue), securing containerized Kubernetes workloads, public cloud infrastructure (AWS, Azure, GCP), and enterprise Active Directory credentials via Attivo technology; and (3) Singularity Data Lake and Purple AI (~5% of revenue), which monetizes high-throughput security log ingestion, extended data retention, and generative AI copilot natural language querying for Security Operations Center (SOC) analysts. SentinelOne maintains an impressive net revenue retention rate exceeding 115%, driven by organic customer expansion from core endpoint protection to cloud and identity modules.
SentinelOne pursues a disciplined, strategic M&A approach focused on acquiring proprietary technologies, expanding customer distribution reach, and unlocking operational cost synergies rather than pursuing unselective scale.
Transformative transactions in SentinelOne's history include pivotal mergers and acquisitions that secured key regional footprints, consolidated core market share, and brought proprietary software intellectual property in-house.
SentinelOne deploys dedicated integration teams to harmonize core software stacks, align regulatory compliance systems, and unite company cultures while preserving entrepreneurial agility.
Yes, SentinelOne periodically evaluates its corporate portfolio, strategically divesting non-core or non-strategic assets to redeploy capital into high-margin core operational divisions.
Compare corporate acquisition records, deal values, and strategic targets
Explore SentinelOne
Core profile pages, founders and related research hubs for this company.