B+
Overall grade
B+
Financial quality
The sleeper story is Observo's $225M price tag setting up SentinelOne for a SIEM market land grab by controlling the entire data pipeline, potentially unlocking hundreds of millions in ARR as enterprises dump legacy Splunk deployments. While everyone celebrates 40% Purple AI attach rates, the real tell is management dropping specific 'triple-digit growth' language despite record adoption-suggesting growth rates are moderating even as penetration improves. The binding constraint is deal timing variability in an uncertain macro environment, evidenced by conservative Q4 guidance despite strong Q3 execution. As Tomer said: 'The best security starts with clear visibility and Observo enhances that by enabling data to flow instantly into our Singularity data lake.' My view changes if Q4 net new ARR disappoints significantly or if Purple AI attach rates plateau below 50%.
The 30-second version
- THE SLEEPER: Observo acquisition is quietly setting up a SIEM land grab
- Purple AI hits 40% attach rate but growth rate language softened
- CFO transition masks concerning Q4 guidance conservatism
What changed this quarter
| Metric | Prior | This quarter |
|---|---|---|
| Revenue | $242M (+22% YoY) | $259M (+23% YoY) |
| ARR | $1.01B (+24% YoY) | $1.08B (+23% YoY) |
| Net New ARR | $53M (+20% YoY) | $54M (positive YoY) |
| Operating Margin | 2% | 7% |
| Free Cash Flow Margin | 2% TTM | 6% |
| Gross Margin | 79% | 79% |
| International Revenue % | 38% | 40% |
| Customers >$100K ARR | 1,513 (+23% YoY) | 1,572 (+20% YoY) |
Accountability tracked
7 new promises made5 narrative shifts flagged6 prior promises graded
Inside the full report
The complete write-up covers the full promise ledger with kept/missed calls, disclosure-quality scoring, the metrics-vanished check, verification items, and the questions to ask next quarter.
Subscribe to Call Sheet Daily →