SentinelOne, Inc.

Previous wording

Investing in our Class A common stock involves a high degree of risk. You should carefully consider the risks and uncertainties described below, together with all of the other information in this Quarterly Report on Form 10-Q, including the section titled “Management’s Discussion and Analysis of Financial Condition and Results of Operations,” and our unaudited condensed consolidated financial statements and the accompanying notes included before making a decision to invest in our Class A common stock. Our business, financial condition, operating results, or prospects could also be adversely affected by risks and uncertainties that are not presently known to us or that we currently believe are not material. If any of the risks actually occur, our business, financial condition, operating results, and prospects could be adversely affected. In that event, the market price of our Class A common stock could decline, and you could lose all or part of your investment.

Current wording

Investing in our Class A common stock involves a high degree of risk. You should carefully consider the risks and uncertainties described below, together with all of the other information in this Quarterly Report on Form 10-Q, including the section titled “Management’s Discussion and Analysis of Financial Condition and Results of Operations,” and our unaudited condensed consolidated financial statements and the accompanying notes included before making a decision to invest in our Class A common stock. These disclosures reflect our beliefs and opinions as to factors that could materially and adversely affect our securities in the future. References to past events are provided by way of example only and are not intended to be a complete listing of such events or a representation as to whether or not such factors or similar events have occurred in the past or their likelihood of occurring in the future. Our business, financial condition, operating results, or prospects could also be adversely affected by risks and uncertainties that are not presently known to us or that we currently believe are not material. If any of the risks actually occur, our business, financial condition, operating results, and prospects could be adversely affected. In that event, the market price of our Class A common stock could decline, and you could lose all or part of your investment.

Previous wording

•If our platform is not effectively interoperated within our customers’ IT infrastructure, deployments could be delayed or canceled, which would adversely affect our business, operating results, and financial condition.

Current wording

•If our platform does not effectively interoperate within our customers’ IT infrastructure, deployments could be delayed or canceled, which would adversely affect our business, operating results, and financial condition.

Previous wording

•The dual class structure of our common stock has the effect of concentrating voting control with certain stockholders who held our capital stock prior to the completion of our IPO, including our directors, executive officers, and other beneficial owners who hold in the aggregate approximately 28% of the voting power of our capital stock, which will limit or preclude your ability to influence corporate matters, including the election of directors and the approval of any change of control transaction.

Current wording

•The dual class structure of our common stock has the effect of concentrating voting control with certain stockholders who held our capital stock prior to the completion of our IPO, including our directors, executive officers, and other beneficial owners who hold in the aggregate approximately 27% of the voting power of our capital stock, which will limit or preclude your ability to influence corporate matters, including the election of directors and the approval of any change of control transaction.

Previous wording

We have incurred net losses in all periods since our inception, and we may not achieve or maintain profitability in the future. We experienced a net loss of $60.3 million and $78.4 million for the three months ended October 31, 2025 and 2024, respectively. As of October 31, 2025, we had an accumulated deficit of $2.0 billion. While we have historically experienced significant growth in revenue, we cannot predict when or whether we will reach or maintain profitability. We also expect our operating expenses to increase in the future as we continue to invest in our future growth, including expanding our research and development function to drive further development of our platform, expanding our sales and marketing activities, developing the functionality to expand into adjacent markets, and reaching customers in new geographic locations, which could negatively affect our operating results if our total revenue does not increase. In addition to the anticipated costs to grow our business, we have incurred and expect to continue to incur significant legal, accounting, and other expenses as a public company. Our revenue growth is expected to slow down as we scale and our revenue may decline for a number of other reasons, including reduced demand for our platform, increased competition, a decrease in the growth or reduction in the size of our overall market, or if we cannot capitalize on growth opportunities, including acquisitions, new products, services, and feature releases. While we consistently evaluate opportunities to reduce our operating costs and optimize efficiencies, including personnel restructuring plans, we cannot guarantee that these efforts will be successful or that we will not re-accelerate operating expenditures in the future in order to capitalize on growth opportunities. If we fail to increase our revenue to offset increases in our operating expenses, or manage our costs as we invest in our business, we may not achieve or sustain profitability.

Current wording

We have incurred net losses in all periods since our inception, and we may not achieve or maintain profitability in the future. We experienced a net loss of $76.2 million and $208.2 million for the three months ended April 30, 2026 and 2025, respectively. As of April 30, 2026, we had an accumulated deficit of $2.2 billion. While we have historically experienced significant growth in revenue, we cannot predict when or whether we will reach or maintain profitability. We also expect our operating expenses to increase in the future as we continue to invest in our future growth, including expanding our research and development function to drive further development of our platform, expanding our sales and marketing activities, and expanding into adjacent markets and geographic locations, which could negatively affect our operating results if our total revenue does not increase. In addition to the anticipated costs to grow our business, we have incurred and expect to continue to incur significant legal, accounting, and other expenses as a public company. Our revenue growth is expected to slow down as we scale and our revenue may decline for a number of other reasons, including reduced demand for our platform, increased competition, a decrease in the growth or reduction in the size of our overall market, or if we cannot capitalize on growth opportunities, including acquisitions, new products, services, and feature releases. While we consistently evaluate opportunities to reduce our operating costs and optimize efficiencies, including personnel restructuring plans, we cannot guarantee that these efforts will be successful or that we will not re-accelerate operating expenditures in the future in order to capitalize on growth opportunities. If we fail to increase our revenue to offset increases in our operating expenses, or manage our costs as we invest in our business, we may not achieve or sustain profitability.

Previous wording

•general global macroeconomic and political conditions, both domestically and in our foreign markets that could impact some or all regions where we operate, including changes in U.S. federal spending, significant political or regulatory developments including changes in trade policy, global economic slowdowns, actual or perceived global banking and finance related issues, government shutdowns, increased risk of inflation, interest rate volatility, supply chain disruptions, labor shortages and potential global recession;

Current wording

•general global macroeconomic and political conditions, both domestically and in our foreign markets that could impact regions where we operate, including changes in U.S. federal spending, significant political or regulatory developments including changes in trade policy, global economic slowdowns, actual or perceived global banking and finance related issues, government shutdowns, inflation, interest rate volatility, supply chain disruptions, labor shortages, and potential global recession;

Previous wording

•changes in customer, distributor or reseller requirements or market needs;

Current wording

•changes in customer, distributor, or reseller requirements, or market needs or preferences;

Previous wording

•the timing and success of new product and service introductions by us or our competitors or any other change in the competitive landscape of our industry, including consolidation among our competitors or customers and strategic partnerships entered into by and between our competitors;

Current wording

•the timing and success of new product and service introductions by us or our competitors, or any other change in the competitive landscape of our industry, including consolidation among our competitors or customers, and strategic partnerships entered into by and between our competitors, and changes in pricing;

Previous wording

•insolvency or credit difficulties confronting our customers, which could increase due to U.S. and global macroeconomic issues, including actual or perceived global banking and finance related issues, inflation, interest rate volatility, government shutdowns, and market downturns, which would adversely affect their ability to purchase or pay for our platform, products, and services in a timely manner or at all;

Current wording

•insolvency or credit difficulties confronting our customers, which could increase due to U.S. and global macroeconomic issues, including actual or perceived global banking and finance related issues, inflation, interest rate volatility, government shutdowns and market downturns;

Previous wording

Conditions in our market could change rapidly and significantly as a result of technological advancements, including but not limited to increased advancements and proliferation in the use of open artificial intelligence applications, partnering or acquisitions by our competitors or continuing market consolidation. Some of our competitors have recently made or could make acquisitions of businesses or have established cooperative relationships that may allow them to offer more directly competitive and comprehensive products and services than were previously offered and adapt more quickly to new technologies and customer needs. These competitive pressures in our market or our failure to compete effectively may result in price reductions, fewer orders, reduced revenue and gross margin, increased net losses, and loss of market share. Even if there is significant demand for endpoint and cloud security solutions like ours, if our competitors include functionality that is, or is perceived to be, equivalent to or better than ours in legacy products that are already generally accepted as necessary components of an organization’s IT security architecture, we will have difficulty increasing the market penetration of our platform. Furthermore, even if the functionality offered by other cybersecurity providers is different and more limited than the functionality of our platform, organizations may elect to accept such limited functionality in lieu of purchasing products and services from additional vendors like us. If we are unable to compete successfully, or if competing successfully requires us to take aggressive action with respect to pricing or other actions, our business, financial condition, and operating results would be adversely affected.

Current wording

Conditions in our market could change rapidly and significantly as a result of technological advancements, including but not limited to increased advancements and proliferation in the use of artificial intelligence applications, partnering or acquisitions by our competitors or continuing market consolidation. Competitive pressures in our market or our failure to compete effectively may result in price reductions, fewer orders, reduced revenue and gross margin, increased net losses, and loss of market share. Even if there is significant demand for endpoint and cloud security solutions like ours, if our competitors include functionality that is, or is perceived to be, equivalent to or better than ours in legacy products that are already generally accepted as necessary components of an organization’s IT security architecture, we will have difficulty increasing the market penetration of our platform. Furthermore, even if the functionality offered by other cybersecurity providers is different and more limited than the functionality of our platform, organizations may elect to accept such limited functionality in lieu of purchasing products and services from additional vendors like us. If we are unable to compete successfully, or if competing successfully requires us to take aggressive action with respect to pricing or other actions, our business, financial condition, and operating results would be adversely affected.

Previous wording

Our operating results have varied significantly from period to period in the past, and we expect that our operating results will continue to vary significantly in the future such that period-to-period comparisons of our operating results may not be meaningful. This could adversely affect our business, operating results, and financial condition. Accordingly, our financial results in any one quarter should not be relied upon as indicative of future performance. Fluctuations in quarterly results may negatively impact the trading price of our Class A common stock. Our quarterly financial results may fluctuate as a result of a number of factors, many of which are outside of our control and may be difficult to predict, including, without limitation:

Current wording

Our operating results have varied significantly from period to period in the past, and we expect that our operating results will continue to vary significantly in the future such that period-to-period comparisons of our operating results may not be meaningful. Accordingly, our financial results in any one quarter should not be relied upon as indicative of future performance. Fluctuations in quarterly results may negatively impact the trading price of our Class A common stock. Our quarterly financial results may fluctuate as a result of a number of factors, many of which are outside of our control and may be difficult to predict, including, without limitation:

Previous wording

•general global macroeconomic and political conditions, both domestically and in our foreign markets that could impact some or all regions where we operate, including changes in U.S. federal spending, significant political or regulatory developments including changes in trade policy, global economic slowdowns, actual or perceived global banking and finance related issues, increased risk of inflation, interest rate volatility, supply chain disruptions, labor shortages, and potential global recession;

Current wording

•global events, general global macroeconomic and political conditions, both domestically and internationally, including geopolitical conflicts (including, but not limited to, the conflict in Iran), changes in U.S. federal spending, significant political or regulatory developments including changes in trade policy, tariffs, global economic slowdowns, actual or perceived global banking and finance related issues, government shutdowns, increased risk of inflation, interest rate volatility, supply chain disruptions, labor shortages and potential global recession;

Previous wording

•the budgeting cycles, seasonal buying patterns, and purchasing practices of customers; including decisions by organizations to purchase security solutions from larger, more established security vendors or from their primary IT equipment vendors and insolvency or credit difficulties confronting our customers, affecting their ability to purchase or pay for our solution

Current wording

•the budgeting cycles, seasonal buying patterns, and purchasing practices of customers; including decisions by organizations to purchase security solutions from larger, more established security vendors or from their primary IT equipment vendors and customer insolvency or credit difficulties;

Previous wording

In addition, we experience seasonal fluctuations in our financial results as we typically receive a higher percentage of our annual orders from new customers, as well as renewal orders from existing customers, in our fourth fiscal quarter as compared to other quarters due to the annual budget approval process of many of our customers.

Current wording

In addition, we experience seasonal fluctuations in our financial results as we typically receive a higher percentage of our annual orders from new customers, as well as renewal orders from existing customers, in our fourth fiscal quarter due to the annual budget approval process of many of our customers.

Previous wording

Any of the above factors, individually or in the aggregate, may result in significant fluctuations in our financial and other operating results from period to period. As a result of this variability, our historical operating results should not be relied upon as an indication of future performance. Moreover, this variability and unpredictability could result in our failure to meet our operating plan or the expectations of investors or analysts for any period. If we fail to meet such expectations for the reasons described above or other reasons, our stock price could fall substantially, and we could face costly lawsuits, including securities class action lawsuits.

Current wording

Any of the above factors, individually or in the aggregate, may result in significant fluctuations in our financial and other operating results from period to period. As a result of this variability, our historical operating results should not be relied upon as an indication of future performance. Moreover, this variability and unpredictability could result in our failure to meet our operating plan or the expectations of investors or analysts for any period. If we fail to meet such expectations, our stock price could fall substantially, and we could face costly lawsuits, including securities class action lawsuits.

Previous wording

Our business depends on the overall demand for information technology and on the economic health of our current and prospective customers. In addition, the purchase of our platform is often discretionary and may involve a significant commitment of capital and other resources. Weak global and regional economic conditions, including the changes in U.S. federal spending, significant political or regulatory developments including changes in trade policy, U.S. and global macroeconomic issues, actual or perceived global banking and finance related issues, labor shortages, supply chain disruptions, fluctuating interest rates and inflation, spending environments, geopolitical instability, warfare and uncertainty, weak economic conditions in certain regions or a reduction in information technology spending regardless of macroeconomic conditions, including the effects of the conflicts in the Middle East and Ukraine, and tensions between China and Taiwan, could adversely affect our business, operating results, and financial condition, including resulting in longer sales cycles, a negative impact on our ability to attract and retain new customers or expand our platform or sell additional products and services to our existing customers, lower prices for our platform, higher default rates among our channel partners, reduced sales to new or existing customers and slower or declining growth. For example, as a result of current uncertainty in macroeconomic conditions and related higher cost consciousness around IT budgets, we have experienced certain impacts on our business, including a decline in usage and consumption patterns from certain customers, especially larger enterprise customers, longer sales cycles, and deal downsizing by new customers and of renewals by existing customers, especially larger enterprises. We expect the global macroeconomic conditions impacting demand to persist in the near term. Deterioration in economic conditions in any of the countries in which we do business could also cause slower or impaired collections on accounts receivable, which may adversely impact our liquidity and financial condition.

Current wording

Our business depends on the overall demand for information technology and on the economic health of our current and prospective customers. In addition, the purchase of our platform is often discretionary and may involve a significant commitment of capital and other resources. Weak global and regional economic conditions, including the changes in U.S. federal spending, significant political or regulatory developments including changes in trade policy (including actual or threatened changes in tariffs and trade restrictions), U.S. and global macroeconomic issues, actual or perceived global banking and finance related issues, labor shortages, supply chain disruptions, fluctuating interest rates and inflation, spending environments, geopolitical instability, warfare and uncertainty, weak economic conditions in certain regions or a reduction in information technology spending regardless of macroeconomic conditions, including the effects of the conflicts in the Middle East and Ukraine, and tensions between China and Taiwan, could adversely affect our business, operating results, and financial condition, including resulting in longer sales cycles, a negative impact on our ability to attract and retain new customers or expand our platform or sell additional products and services to our existing customers, lower prices for our platform, higher default rates among our channel partners, reduced sales to new or existing customers and slower or declining growth. For example, as a result of current uncertainty in macroeconomic conditions and related higher cost consciousness around IT budgets, we have continued to experience certain impacts on our business, including a decline in usage and consumption patterns from certain customers, especially larger enterprise customers, longer sales cycles, and deal downsizing by new customers and of renewals by existing customers, especially larger enterprises. We expect the global macroeconomic conditions impacting demand to persist in the near term. Deterioration in economic conditions in any of the countries in which we do business could also cause slower or impaired collections on accounts receivable, which may adversely impact our liquidity and financial condition.

Previous wording

We incorporate generative AI into many of our offerings, including Purple AI which streamlines threat hunting across various types of data and synthesizes threat intelligence and insights in natural language. As with many innovations, generative AI presents risks, challenges, and unintended consequences that could impact our successful ability to incorporate the use of generative AI in our business. For example, language models may provide flawed results or misinterpret prompts. Further, data practices by us or others that result in controversy could also impair the acceptance of AI solutions. This in turn could undermine confidence in the decisions, predictions, analyses or other content that our AI initiatives produce. Our generative AI solutions are reliant on third-party foundation models that may change their availability or commercial model in a manner that negatively affects our offering. Furthermore, the integration of third-party AI models with our products and services relies on certain safeguards implemented by the third-party developers of the underlying AI models, including those related to the accuracy, bias, and other variables of the data and their safeguards may be insufficient. In addition, our competitors or other third parties may incorporate generative AI solutions into their products more successfully than us, and their solutions may achieve higher market acceptance than ours, which may result in us failing to recoup our investments in developing generative AI-powered offerings. We have made and expect to continue to make significant investments in our AI technology, including in Purple AI. Our ability to employ AI, or the ability of our competitors to do so more successfully, may negatively impact our gross margins, impair our ability to compete effectively, result in reputational harm and have an adverse impact on our operating results. Further, we have, and may in the future, implement AI-based tools and solutions, including third-party software solutions, in order to, among other things, drive efficiencies in our business, IT systems and other internal processes and improve customer support. If these tools and solutions do not achieve their expected benefits or if such tools and solutions have defects, bugs, errors, or vulnerabilities, our business may be adversely impacted.

Current wording

We incorporate generative AI into many of our offerings, including Purple AI and Wayfinder. Purple AI streamlines threat hunting across various types of data and synthesizes threat intelligence and insights in natural language. Wayfinder uses agentic AI, which applies advanced reasoning and automation to process volumes of telemetry and security data, triaging security alerts more accurately and with context. As with many innovations, generative AI presents risks, challenges, and unintended consequences that could impact our ability to incorporate the use of generative AI in our business. For example, language models may provide flawed or inaccurate results or misinterpret prompts. Further, data practices by us or others that result in controversy could also impair the acceptance of AI solutions. This in turn could undermine confidence in the decisions, predictions, analyses or other content that our AI initiatives produce. Our generative AI solutions are reliant on third-party foundation models that may change their availability or commercial terms in a manner that negatively affects our offering. Furthermore, the integration of third-party AI models with our products and services relies on certain safeguards implemented by the third-party developers of the underlying AI models, including those related to the accuracy, bias, and other variables of the data and their safeguards may be insufficient. This may expose us to risks including supply-chain compromise, model poisoning, and vulnerabilities inherent in large-language-model-integrated application attack surfaces. If third-party AI models we rely upon are compromised or behave unexpectedly, our platform features could be degraded or exploited for malicious purposes, and we could face operational disruption, reputational harm, or regulatory liability. In addition, our competitors or other third parties may incorporate generative AI solutions into their products more successfully than us, and their solutions may achieve higher market acceptance than ours, which may result in us failing to recoup our investments in developing generative AI-powered offerings. We have made and expect to continue to make significant investments in our AI technology, including in Purple AI and Wayfinder. Our ability to employ AI, or the ability of our competitors to do so more successfully, may negatively impact our gross margins, impair our ability to compete effectively, result in reputational harm and have an adverse impact on our operating results. Further, we have, and may in the future, implement AI-based tools and solutions, including third-party software solutions, in order to, among other things, drive efficiencies in our business, IT systems and other internal processes and improve customer support. If these tools and solutions do not achieve their expected benefits or if such tools and solutions have defects, bugs, errors, or vulnerabilities, our business may be adversely impacted.

Previous wording

Moreover, AI may give rise to litigation risk, including potential intellectual property, privacy, or cybersecurity liability. Because AI is an emerging technology, there is not a mature body of case law construing the appropriateness of certain of its uses of data whether through the employment of large language models or other models leveraging data found on the Internet and the evolution of this law may limit our ability to exploit AI tools, or expose us to litigation. Further, AI presents emerging ethical issues and if our use of AI algorithms draws controversy due to their perceived or actual impact on society, we may experience brand or reputational harm, or competitive harm.

Current wording

Moreover, AI may give rise to litigation risk, including potential intellectual property, privacy, or cybersecurity liability. Because AI is an emerging technology, there is not a mature body of case law, particularly around copyright, construing the appropriateness of certain uses of data, whether through the employment of large language models or other models leveraging data found on the Internet, and the evolution of this law may limit our ability to exploit AI tools, or expose us to litigation. Intellectual property disputes regarding the use of copyrighted or proprietary data to train AI models, or the outputs generated by such models, could result in costly litigation and liability. Further, AI presents emerging ethical issues and if our use of AI algorithms draws controversy due to their perceived or actual impact on society such as concerns regarding bias, discrimination, misinformation, automation or transparency, we may experience brand or reputational harm, or competitive harm.

Previous wording

In addition, given the complex nature of AI technology, we face an evolving regulatory landscape. The U.S. federal government, various state legislatures and other government entities worldwide have implemented and are in the process of implementing specific laws, regulations, policies and obligations relating to the use of AI, and we will need to continue to monitor these developments to ensure our products that we sell to government entities remain compliant with such applicable regulations. Furthermore, the current administration’s approach to investment in and regulation of AI is expected to deviate from that of the previous administration and we will need to adapt to any resulting changes, including new or revised executive orders and initiatives.

Current wording

In addition, given the complex nature of AI technology, we face an evolving regulatory landscape. The U.S. federal government, various state legislatures and other government entities worldwide have implemented and are in the process of implementing specific laws, regulations, policies and obligations relating to the use of AI, and we will need to continue to monitor these developments to ensure our products remain compliant with such applicable regulations. For example, the E.U. AI Act, which entered into force in 2024 with phased implementation that began in 2025, imposes obligations on AI providers and deployers based on risk classification, including requirements for transparency, documentation, and risk management. In the U.S., a December 2025 executive order asserted federal preemption over the state AI regulations, creating regulatory uncertainty as the scope and enforceability of this preemption claim remains subject to debate and challenge. Compliance with evolving AI regulations will require significant investment in quality assurance, testing, documentation, and reporting systems, and failure to comply could result in fines, enforcement actions, or restrictions on our ability to offer AI-powered products and services.

Previous wording

Companies are subject to an increasing number and wide variety of attacks on their networks on an ongoing basis. Traditional computer “hackers,” malicious code (such as viruses and worms), phishing attempts, ransomware, account takeover, business email compromise, employee fraud, theft or misuse, denial of service attacks, and sophisticated nation-state and nation-state supported actors engage in intrusions and attacks that create risks for our internal networks, cloud deployed products and the information they store and process. Cybersecurity companies face particularly intense attack efforts, and we have faced, and will continue to face, cyber threats and attacks from a variety of sources. The research that we conduct and report may make us, or our customers, a further target for attacks of all kinds. We provide security services to many highly targeted entities, such as U.S. government agencies, defense contractors, and non-U.S. governments. Our work protecting these entities increases the likelihood that we may be targeted by nation-state actors, including those from countries with a history of conducting cyber operations against such organizations. State-supported and geopolitical-related cyberattacks may rise in connection with regional geopolitical conflicts such as the conflicts in the Middle East and Ukraine, and tensions between China and Taiwan. In addition, our cybersecurity product is likely considered a valuable target for lateral attacks because of its highly privileged access. Additionally, bad actors are beginning to utilize AI-based tools to execute attacks, creating unprecedented cybersecurity challenges.

Current wording

Companies are subject to an increasing number and wide variety of attacks on their networks on an ongoing basis. Traditional computer “hackers,” malicious code (such as viruses and worms), phishing attempts, ransomware, account takeover, business email compromise, employee fraud, theft or misuse, social engineering (including phishing, deepfakes, voice cloning), software supply-chain compromises, denial of service attacks, reverse-engineering of AI algorithms, and sophisticated nation-state and nation-state supported actors engage in intrusions and attacks that create risks for our internal networks, cloud deployed products and the information they store and process. Cybersecurity companies face particularly intense attack efforts, and we have faced, and will continue to face, cyber threats and attacks from a variety of sources. The research that we conduct and report may make us, or our customers, a further target for attacks of all kinds. We provide security services to many highly targeted entities, such as U.S. government agencies, defense contractors, and non-U.S. governments. Our work protecting these entities increases the likelihood that we may be targeted by nation-state actors, including those from countries with a history of conducting cyber operations against such organizations. State-supported and geopolitical-related cyberattacks may rise in connection with regional geopolitical conflicts. In addition, our cybersecurity product is likely considered a valuable target for lateral attacks because of its highly privileged access. Additionally, bad actors are utilizing AI-based tools to execute more sophisticated and scalable attacks, creating unprecedented cybersecurity challenges.

Previous wording

Although we have implemented security measures designed to prevent such attacks, our networks and systems, and those of our third-party vendors and service providers may be breached due to the actions of outside parties, human error, insufficient cybersecurity controls, malfeasance, a combination of these, or otherwise, and as a result, an unauthorized party may obtain access to our and/or our customers’ systems, networks, or data. We and our third-party vendors and service providers may face difficulties or delays in identifying or otherwise responding to any attacks or actual or potential security breaches or threats. These risks are exacerbated by developments in generative AI. A breach in our or in our third-party vendors and service providers’ data security or an attack against our platform or our third-party vendors’ or service providers’ platform could impact our networks or the networks and data of our customers that are secured by our platform, creating system disruptions or slowdowns and providing access to malicious parties to information stored on our networks or the networks of our customers, resulting in data being publicly disclosed, misused, altered, lost, or stolen, which could subject us to liability and adversely affect our financial condition. If compromised, our own systems or the systems of our third-party vendors and service providers could be used to facilitate or magnify an attack. Further, the trend towards remote and hybrid work by companies and individuals in has generally increased the attack surface available to bad actors for exploitation, and as such, the risk of a cybersecurity incident potentially occurring has increased. We have accordingly increased our investments in protective measures and risk mitigation strategies, but we cannot guarantee that our efforts, or the efforts of our third- party vendors and service providers or efforts of others upon whom we rely and partner with, will be successful in preventing any such information security incidents. Protecting our own assets has become more expensive from a dollar investment and time perspective and these costs may increase as the threat landscape increases, including as a result of the use of AI by bad actors.

Current wording

Although we have implemented security measures designed to prevent such attacks, our networks and systems, and those of our third-party vendors and service providers may be breached due to the actions of outside parties, human error, insufficient cybersecurity controls, malfeasance, a combination of these, or otherwise, and as a result, an unauthorized party may obtain access to our and/or our customers’ systems, networks, or data. We and our third-party vendors and service providers may face difficulties or delays in identifying or otherwise responding to any attacks or actual or potential security breaches or threats. More capable general-purpose AI models released by major providers that are or may soon become widely accessible to developers and end users have amplified, and will continue to amplify, the capabilities of threat actors, enabling more targeted and convincing phishing and social engineering campaigns, automated identification and exploitation of software vulnerabilities, the generation of novel malware and attack vectors, prompt injection attacks, automated reconnaissance, and the ability to conduct attacks at greater speed and scale than previously possible. These AI-enhanced threats may be more difficult to detect using traditional security measures and may require us to research and invest in additional defensive capabilities. These risks are exacerbated by developments in generative AI. A breach in our or in our third-party vendors and service providers’ data security or an attack against our platform or our third-party vendors’ or service providers’ platform could impact our networks or the networks and data of our customers that are secured by our platform, creating system disruptions or slowdowns and providing access to malicious parties to information stored on our networks or the networks of our customers, resulting in data being publicly disclosed, misused, altered, lost, or stolen, which could subject us to liability and adversely affect our financial condition. If compromised, our own systems or the systems of our third-party vendors and service providers could be used to facilitate or magnify an attack. Further, the trend towards remote and hybrid work by companies and individuals has generally increased the attack surface available to bad actors for exploitation, and as such, the risk of a cybersecurity incident potentially occurring has increased. We have accordingly increased our investments in protective measures and risk mitigation strategies, but we cannot guarantee that our efforts, or the efforts of our third-party vendors and service providers or efforts of others upon whom we rely and partner with, will be successful in preventing any such information security incidents. Protecting our own assets has become more expensive from a dollar investment and time perspective and these costs may increase as the threat landscape evolves, including as a result of the use of AI by bad actors.

Previous wording

Any actual, alleged, or perceived security breach in our systems or networks or those of our third-party vendors and service providers, or any other actual, alleged or perceived data security incident we suffer, could result in damage to our reputation, negative publicity, loss of customers and sales, loss of competitive advantages over our competitors, increased costs to remedy any problems and otherwise respond to any incident, regulatory investigations and enforcement actions, fines and penalties, costly litigation, and other liability. We would also be exposed to a risk of loss or litigation and potential liability under laws, regulations, and contracts that protect the privacy and security of personal data. For example, the California Consumer Privacy Act of 2018, as amended (CCPA), imposes a private right of action for security breaches of personal data that could lead to some form of remedy including regulatory scrutiny, fines, private right of action settlements, and other consequences. Where a security incident involves a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, personal data from the European Economic Area (EEA) or the U.K. in respect of which we are a controller or processor under the E.U. or U.K. General Data Protection Regulation (collectively, the GDPR), this could result in fines of up to €20 million (£17.5 million) or 4% of annual global turnover, whichever is greater. We may also be required to provide notice of such breaches to regulators and/or individuals which may result in us incurring additional costs, penalties, fines or litigation.

Current wording

Any actual, alleged, or perceived security breach in our systems or networks or those of our third-party vendors and service providers, or any other actual, alleged or perceived data security incident we suffer, could result in damage to our reputation, negative publicity, loss of customers and sales, loss of competitive advantages over our competitors, increased costs to remedy any problems and otherwise respond to any incident, regulatory investigations and enforcement actions, fines and penalties, costly litigation, and other liability. We may also be required to publicly disclose material security breaches, which could exacerbate the adverse impact of such incidents. We would also be exposed to a risk of loss or litigation and potential liability under applicable laws, regulations, and contracts that protect the privacy and security of personal data. For additional information regarding these laws and regulations, see the Risk Factor titled “We are subject to laws and regulations affecting our business, including those related to the privacy and data protection of the personal data or other information we collect, process or share. Our actual or perceived failure to comply with such laws or regulations could harm our business.”

Previous wording

In addition, our customer agreements may require us to promptly report security breaches to our customers involving their data on our systems or those of third-party vendors or subcontractors processing such data on our behalf. This mandatory disclosure could be costly, result in litigation, harm our reputation, erode customer trust, and require significant resources to mitigate issues stemming from actual or perceived security breaches. Further, some of our customers may also be subject to the E.U. Digital Operational Resilience Act (DORA), which requires them to impose contractual provisions on us, including certain mandatory third-party risk management provisions. If we fail to materially comply with these contractual requirements, we may be subject to litigation, investigations, audits or other adverse consequences.

Current wording

In addition, our customer agreements may require us to promptly report security breaches to our customers involving their data on our systems or those of third-party vendors or subcontractors processing such data on our behalf. This mandatory disclosure could be costly, result in litigation, harm our reputation, erode customer trust, and require significant resources to mitigate issues stemming from actual or perceived security breaches. Some of our customers may be subject to sector specific regulations, such as the E.U. Digital Operational Resilience Act (DORA) for financial services entities, which may require them to comply with enhanced third-party risk management and contractual obligations. In addition, if a high-profile cybersecurity incident occurs with respect to another SaaS provider or cybersecurity vendor, customers may lose trust in the security of the SaaS business model generally or in cybersecurity companies generally, which could adversely affect our ability to retain existing customers or attract new ones.

Previous wording

Defects, errors, or vulnerabilities in our platform, the failure of our platform to block malware or prevent a security breach, misuse of our platform, or risks of product liability claims would harm our reputation and adversely impact our business, operating results, and financial condition.

Current wording

Defects, errors, or vulnerabilities in our platform, misuse of our platform, or risks of product liability claims would harm our reputation and adversely impact our business, operating results, and financial condition.

Previous wording

In addition, because the techniques used by computer hackers to access or sabotage target computing environments change frequently and generally are not recognized until launched against a target, there is a risk that an advanced attack could emerge that our platform is unable to detect or prevent. Furthermore, as a well-known provider of security solutions and because security solutions are highly privileged in customers environments, our networks, platform, products, including cloud-based technology, and customers could be targeted by attacks specifically designed to disrupt our business, harm our reputation or use our technology to gain unauthorized access. In addition, regional geopolitical conflicts around the world, may result in increased cyberattacks against our customers, resulting in an increased risk of a security breach of our customers’ systems. In addition, defects or errors in our platform could result in a failure to effectively update customers’ cloud-based products. Our data centers and networks may experience technical failures and downtime, may fail to distribute appropriate updates, or may fail to meet the increased requirements of a growing customer base, any of which could temporarily or permanently expose our customers’ computing environments, leaving their computing environments unprotected against cyber threats. Any of these situations could result in negative publicity to us, damage our reputation, and increase expenses and customer relations issues, which would adversely affect our business, financial condition, and operating results.

Current wording

In addition, because the techniques used by computer hackers to access or sabotage target computing environments change frequently and generally are not recognized until launched against a target, there is a risk that an advanced attack could emerge that our platform is unable to detect or prevent. Furthermore, as a well-known provider of security solutions and because security solutions are highly privileged in customers environments, our networks, platform, products, including cloud-based technology, and customers could be targeted by attacks specifically designed to disrupt our business, harm our reputation or use our technology to gain unauthorized access. In addition, defects or errors in our platform could result in a failure to effectively update customers’ cloud-based products. Our data centers and networks may experience technical failures and downtime, may fail to distribute appropriate updates, or may fail to meet the increased requirements of a growing customer base, any of which could temporarily or permanently expose our customers’ computing environments, leaving their computing environments unprotected against cyber threats. Any of these situations could result in negative publicity to us, damage our reputation, and increase expenses and customer relations issues, which would adversely affect our business, financial condition, and operating results.

Previous wording

Advances in computer capabilities, discoveries of new weaknesses and other developments with software generally used online may increase the risk we will suffer a security breach. Furthermore, our platform may fail to detect or prevent malware, ransomware, viruses, worms or similar threats for any number of reasons, including our failure to enhance and expand our platform to reflect industry trends, new technologies and new operating environments, the complexity of the environment of our clients and the sophistication of malware, viruses and other threats. Our platform may fail to detect or prevent threats in any particular test for a number of reasons. Our platform may fail to interoperate or conflict with customer environments causing customer downtime. We or our service providers may also suffer security breaches or unauthorized access to personal data, financial account information, and other confidential information due to employee error, rogue employee activity, unauthorized access by third parties acting with malicious intent or who commit an inadvertent mistake or social engineering. If we experience, or our service providers experience, any breaches of security measures or sabotage or otherwise suffer unauthorized use or disclosure of, or access to, personal data, financial account information or other confidential information, we might be required to expend significant capital and resources to address these problems. We may not be able to remedy any problems caused by hackers or other similar actors in a timely manner, or at all. To the extent potential customers, industry analysts or testing firms believe that the failure to detect or prevent any particular threat is a flaw or indicates that our platform does not provide significant value, our reputation and business would be harmed. Any real or perceived defects, errors or vulnerabilities in our platform, or any other failure of our platform to detect an advanced threat, could result in:

Current wording

Advances in computer capabilities, discoveries of new weaknesses and other developments with software generally used online may increase the risk we will suffer a security breach. Our platform may fail to interoperate or conflict with customer environments causing customer downtime. We or our service providers may also suffer security breaches or unauthorized access to personal data, financial account information, and other confidential information due to employee error, rogue employee activity, unauthorized access by third parties acting with malicious intent or who commit an inadvertent mistake or social engineering. If we experience, or our service providers experience, any breaches of security measures or sabotage or otherwise suffer unauthorized use or disclosure of, or access to, personal data, financial account information or other confidential information, we might be required to expend significant capital and resources to address these problems. To the extent potential customers, industry analysts or testing firms believe that the failure to detect or prevent any particular threat is a flaw or indicates that our platform does not provide significant value, our reputation and business would be harmed. Any real or perceived defects, errors or vulnerabilities in our platform, or any other failure of our platform to detect an advanced threat, could result in:

Previous wording

In addition, we cannot assure that any limitation of liability provisions in our customer agreements, contracts with third-party vendors and service providers, or other contracts would be enforceable or adequate or would otherwise protect us from any liabilities or damages with respect to any particular claim relating to a security breach or other security-related matter or as a result of federal, state, or local laws or ordinances, or unfavorable judicial decisions in the U.S., or other countries. We maintain insurance to protect against certain claims associated with the use of our platform, but our insurance coverage may not adequately cover any claim asserted against us. In addition, even claims that ultimately are unsuccessful could result in our expenditure of funds in litigation, divert management’s time and other resources, and harm our reputation. We also cannot be certain that our insurance coverage will be adequate for data handling or data security liabilities actually incurred, that insurance will continue to be available to us on economically reasonable terms, or at all, or that any future claim will not be excluded or otherwise be denied coverage by any insurer. The successful assertion of one or more large claims against us that exceed available insurance coverage, or the occurrence of changes in our insurance policies, including premium increases or the imposition of large deductible or co-insurance requirements, could adversely affect our business, operating results, and financial condition.

Current wording

Limitation of liability provisions in our contracts may not fully protect us from security-related claims, particularly under applicable data protection laws. We maintain insurance to protect against certain claims associated with the use of our platform, but our insurance coverage may not adequately cover any claim asserted against us. Furthermore, our insurance coverage may not extend to all risks we face, including all AI-related risks, and may not cover us for all losses for errors or omissions caused by AI. In addition, even claims that ultimately are unsuccessful could result in our expenditure of funds in litigation, divert management’s time and other resources, and harm our reputation. We cannot be certain that our insurance coverage will be adequate for data handling or data security liabilities actually incurred, that insurance will continue to be available to us on economically reasonable terms, or at all, or that any future claim will not be excluded or otherwise be denied coverage by any insurer. The successful assertion of one or more large claims against us that exceed available insurance coverage, or the occurrence of changes in our insurance policies, including premium increases or the imposition of large deductible or co-insurance requirements, could adversely affect our business, operating results, and financial condition.

Previous wording

As part of our business strategy, we have in the past and expect to continue to make investments in and/or acquire complementary companies, services, products, technologies, or talent. For example, in February 2024 we acquired both PingSafe, a cloud security platform, and Stride, a security automation company, and in September 2025, we acquired Prompt, a private company focused on the generative and agentic AI security space, and Observo, an AI-ready data pipeline company. We have also invested in certain privately held companies through our S Ventures fund, and we may not realize a return on these investments. All of our venture investments are subject to a risk of partial or total loss of investment capital. Our ability as an organization to acquire and integrate other companies, services or technologies in a successful manner is not guaranteed.

Current wording

As part of our business strategy, we have in the past and expect to continue to make investments in and/or acquire complementary companies, services, products, technologies, or talent. For example, in February 2024 we acquired both PingSafe, a cloud security platform, and Stride, a security automation company, and in September 2025, we acquired Prompt, a private company focused on the generative and agentic AI security space, and Observo, an AI-ready data pipeline company, and in March 2026, we made a strategic investment in Knight JV, LLC. We have also invested in certain privately held companies through our S Ventures fund, which may not generate returns and are subject to a risk of partial or total loss of investment capital. Our ability as an organization to acquire and integrate other companies, services or technologies in a successful manner is not guaranteed.

Previous wording

In the future, we may not be able to find suitable acquisition candidates, and we may not be able to complete such acquisitions on favorable terms, if at all. Our due diligence efforts may fail to identify all of the challenges, problems, liabilities or other shortcomings involved in an acquisition. If we do complete acquisitions, we may not ultimately strengthen our competitive position or ability to achieve our business objectives, and any acquisitions we announce or complete could be viewed negatively by our customers or investors.

Current wording

We may not be able to find suitable acquisition candidates, or complete acquisitions on favorable terms, if at all. Our due diligence efforts may fail to identify all of the material risks, liabilities or other challenges involved in an acquisition. Even if completed, acquisitions or investments may not strengthen our competitive position, may not achieve expected benefits, and may be viewed negatively by our customers or investors.

Previous wording

In addition, if we are unsuccessful at integrating existing and future acquisitions, or the technologies and personnel associated with such acquisitions, into our company, the revenue and operating results of the combined company could be adversely affected. Any integration process may require significant time and resources, and we may not be able to manage the process successfully. We may not successfully evaluate or utilize the acquired technology or personnel, or accurately forecast the financial impact of an acquisition transaction, causing unanticipated write-offs or accounting charges. Additionally, integrations could take longer than expected, or if we move too quickly in trying to integrate an acquisition, strategic investment, partnership, or other alliance, we may fail to achieve the desired efficiencies.

Current wording

In addition, if we are unsuccessful at integrating acquired business, technologies or personnel, the revenue and operating results of the combined company could be adversely affected. Any integration process may require significant time and resources, and we may not be able to manage the process successfully. We may not successfully evaluate or utilize the acquired technology or personnel, or accurately forecast the financial impact of an acquisition transaction, causing unanticipated write-offs or accounting charges.

Previous wording

We have, and may in the future have, to pay cash, incur debt, or issue equity securities to pay for any such acquisition, each of which could adversely affect our financial condition and the market price of our Class A common stock. The sale of equity or issuance of debt to finance any such acquisitions could result in dilution to our stockholders, which depending on the size of the acquisition, may be significant. The incurrence of indebtedness would result in increased fixed obligations and could also include covenants or other restrictions that would impede our ability to manage our operations.

Current wording

We have in the past and may in the future finance acquisitions through cash, debt, or equity securities, each of which could adversely affect our financial condition and the market price of our Class A common stock. The issuance of equity or debt to finance any such acquisitions could result in dilution to our stockholders, which may be significant. The incurrence of indebtedness would result in increased fixed obligations and could also include covenants or other restrictions that would impede our ability to manage our operations.

Previous wording

•diversion of management’s time and focus from operating our business to addressing acquisition integration challenges;

Current wording

•diversion of management’s attention and resources;

Previous wording

•financial reporting, revenue recognition or other financial or control deficiencies of the acquired company that we don’t adequately address and that cause our reported results to be incorrect;

Current wording

•financial reporting, revenue recognition or other financial or control deficiencies of the acquired company that we don’t adequately address and that cause our reported results to be incorrect; and

Previous wording

•successfully compete with other companies in the cybersecurity industry.

Current wording

•successfully compete in the cybersecurity industry.

Previous wording

Our customers have no obligation to renew their subscription for our platform after the expiration of their contractual subscription period, which is generally one to three years, and in the normal course of business, some customers have elected not to renew. In addition, our customers may renew for shorter contract subscription lengths or cease using certain features. Our customer retention and expansion may decline or fluctuate as a result of a number of factors, including our customers’ satisfaction with our services, our pricing, customer security and networking issues and requirements, our customers’ spending levels, our channel partner strategy and pricing, decreases in the number of endpoints to which our customers deploy our solution, mergers and acquisitions involving our customers, industry developments, competition, general economic conditions, or the perceived decline in the incidence of cyberattacks. If our efforts to maintain and expand our relationships with our existing customers are not successful, our business, operating results, and financial condition will materially suffer.

Current wording

Our customers have no obligation to renew their subscription for our platform after the expiration of their contractual subscription period, which is generally one to three years. In the normal course of business, some customers have elected not to renew or have reduced the scope or duration of their subscriptions. Our customer retention and expansion may decline or fluctuate as a result of a number of factors, including our customers’ satisfaction with our services, our pricing, customer security and networking issues and requirements, our customers’ spending levels, our channel partner strategy and pricing, decreases in the number of endpoints to which our customers deploy our solution, mergers and acquisitions involving our customers, industry developments, competition, general economic conditions, or the perceived decline in the incidence of cyberattacks. If our efforts to maintain and expand our relationships with our existing customers are not successful, our business, operating results, and financial condition will materially suffer.

Previous wording

If our platform is not effectively interoperated within our customers’ IT infrastructure, deployments could be delayed or canceled, which would adversely impact our business, operating results, and financial condition.

Current wording

If our platform does not effectively interoperate within our customers’ IT infrastructure, deployments could be delayed or canceled, which would adversely impact our business, operating results, and financial condition.

Previous wording

Our platform must effectively interoperate with our customers’ existing IT infrastructure, which often has different specifications, utilizes multiple protocol standards, deploys products and services from multiple vendors, and contains multiple generations of products and services that have been added over time. As a result, our solutions can sometimes encounter interoperability issues on deployment or over time, which require additional support and problem solving with customers, in some cases, at a substantial cost to us. We may modify our software or introduce new capabilities so that our platform interoperates with a customer’s infrastructure. These issues could cause longer deployment and integration times for our platform, leading to customer churn, which would adversely affect our business, operating results, and financial condition. In addition, government and other customers may require our platform to comply with certain security or other certifications and standards. If we are unable to achieve, or are delayed in achieving, compliance with these certifications and standards, we may be disqualified from selling our platform to such customers, or may otherwise be at a competitive disadvantage, either of which could adversely affect our business, operating results, and financial condition.

Current wording

Our platform must effectively interoperate with our customers’ existing IT infrastructure, which often has different specifications, utilizes multiple protocol standards, deploys products and services from multiple vendors, and contains multiple generations of products and services that have been added over time. As a result, our solutions can sometimes encounter interoperability issues on deployment or over time, which require additional support and problem solving with customers, in some cases, at a substantial cost to us. We may modify our software or introduce new capabilities so that our platform interoperates with a customer’s infrastructure. These issues could cause longer deployment and integration times for our platform, leading to customer churn, which would adversely affect our business, operating results, and financial condition. Government and other customers may require our platform to comply with certain security certifications and standards; failure to maintain such compliance could disqualify us from selling to these customers or create a competitive disadvantage.

Previous wording

Our platform is hosted by third-party cloud hosting providers including AWS. Our software and systems are designed to use computing, storage capabilities, bandwidth, and other services provided by such cloud hosting providers, and currently our cloud service infrastructure is primarily run on AWS. We have experienced, and expect in the future that we may experience from time to time, interruptions, delays or outages in service and availability due to a variety of factors. Capacity constraints could arise from a number of causes such as technical failures, natural disasters, fraud, or security attacks. The level of service provided by our cloud hosting providers, or regular or prolonged interruptions in that service, could also impact the use of, and our customers’ satisfaction with, our platform and could harm our business and reputation. In addition, hosting costs are expected to increase as our customer base grows, which could adversely affect our business, operating results, and financial condition.

Current wording

Our platform is hosted by third-party cloud hosting providers including AWS. Our software and systems are designed to use computing, storage capabilities, bandwidth, and other services provided by such cloud hosting providers, and currently our cloud service infrastructure is primarily run on AWS. We have experienced, and expect in the future that we may experience from time to time, interruptions, delays or outages in service and availability due to a variety of factors, including as we continue to innovate, modernize and transition to new cloud infrastructure. Product, platform and service disruptions including capacity constraints could arise from a number of causes such as technical failures, natural disasters, fraud, or security attacks. Such risks may become more pronounced as we continue to scale our business. The level of service provided by our cloud hosting providers, or regular or prolonged interruptions in that service, could also impact the use of, and our customers’ satisfaction with, our platform and could harm our business and reputation. In addition, hosting costs are expected to increase as our customer base grows, and we may also experience component shortages and pricing increases from our cloud hosting providers as a result of increased demand for computing and storage resources. Any of these factors could adversely affect our business, operating results, and financial condition.

Previous wording

Any of these factors could reduce our revenue, subject us to liability, and cause our customers to decline to renew their subscriptions, any of which would harm our business and operating results.

Current wording

Any of these platform defects, interoperability issues, or service disruptions could reduce our revenue, subject us to liability, and cause our customers to decline to renew their subscriptions, any of which would harm our business and operating results.

Previous wording

Under certain circumstances, our employees may have access to our customers’ platforms. An employee could, in theory, take advantage of such access to conduct unauthorized or malicious activities. Any such misuse of our platform could result in negative press coverage and negatively affect our reputation, which could result in harm to our business, reputation, and operating results.

Current wording

Under certain circumstances, our employees may have access to our customers’ platforms and misuse of such access, whether actual or perceived, could result in negative press coverage and negatively affect our reputation, which could result in harm to our business, reputation, and operating results.

Previous wording

In addition, independent industry and research firms often evaluate our solutions and provide reviews of our platform, as well as the products of our competitors, and perception of our platform in the marketplace may be significantly influenced by these reviews. If these reviews are negative, or less positive as compared to those of our competitors’ products, our brand may be adversely affected. Our solutions may fail to detect or prevent threats in any particular test for a number of reasons that may or may not be related to the efficacy of our solutions in real world environments. To the extent potential customers, industry analysts or research firms believe that the occurrence of a failure to detect or prevent any particular threat is a flaw or indicates that our solutions or services do not provide significant value, we may lose customers, and our reputation, financial condition and business would be harmed.

Current wording

In addition, independent industry and research firms often evaluate our solutions and provide reviews of our platform, as well as those of our competitors, and perception of our platform in the marketplace may be significantly influenced by these reviews. If these reviews are negative, or less favorable than those of our competitors, our brand may be adversely affected. Our solutions may fail to detect or prevent threats in any particular test for a number of reasons that may or may not be related to the efficacy of our solutions in real world environments. To the extent potential customers, industry analysts or research firms believe that the occurrence of a failure to detect or prevent any particular threat is a flaw or indicates that our solutions or services do not provide significant value, we may lose customers, and our reputation, financial condition and business would be harmed.