Dossier · S · Dormant
S
Last analysed · · source: watchlist_research
Current thesis
SentinelOne busted post Q1 FY2027 — stock cratered 2026-05-28 on an affirm-not-raise guide ($1.195-1.205B rev vs $1.206B est) plus 8% layoffs/$25M charge; analyst wall split $15-$24 with no direction. Broken momentum, not an accelerating leg. No long until it re-bases; cyber leadership belongs to CRWD.
Invalidation trigger
No long until a weekly close reclaims the pre-earnings gap ~$18 with a higher low above ~[entry redacted] Any contrarian probe stops on daily close below the post-earnings low ~[entry redacted] Skip becomes a no-touch if [entry redacted] breaks.
Thesis status
Open commitment scored if the trigger above fires How this is scored →Current Thesis
SentinelOne is a busted momentum name, not an accelerating one. Q1 FY2027 (reported 2026-05-28, after close) triggered a crater — the stock sank hard into 2026-05-29 on an in-line-to-soft guide plus an 8% workforce cut / $25M restructuring charge. Management "affirmed" rather than raised FY guidance, and the sell-side wall splintered: price targets landed everywhere from [entry redacted] to $24 with simultaneous raises AND cuts the same morning — the signature of a name nobody has conviction in. For a narrative-momentum book the read is simple: the cyber-security-software theme is alive, but leadership belongs to CRWD, and S just printed a negative catalyst with no clean setup to buy. This is a wait-for-re-base, not a chase. Default action: stay DORMANT / no long until structure repairs.
Bull Case
- Restructuring = margin reset, not collapse (2026-05-28). The ~8% FTE cut + $25M one-time charge reframes S around "AI, data, cloud, endpoint." If FY2027 Adj EPS guide of $0.32–$0.38 holds, the layoffs are accretive to the bottom line — a story that could re-rate once the dust settles.
- One genuine bull pivot: B of A upgraded to Buy, PT $20 (2026-05-29) into the post-print weakness — the contrarian tell that not everyone read the quarter as broken. Needham (Buy, $20), Wedbush (Outperform, $20) and Cantor (Overweight, $24) all sit well above current ~$14.
- "Rally nearly 40%" framing (2026-05-29): with the price-target cluster around $20 vs a post-crater price near $14, the implied upside-to-consensus is wide. IF a higher low forms, the asymmetry to $18–20 is real.
- Theme tailwind intact: CrowdStrike / IBM / cyber names led the "Big Tech AI Push" coverage (2026-05-31). S rides the same secular AI-security demand, just from a weaker competitive seat.
Bear Case
- The print itself is the bear case. Stock "craters" and "sinks Friday" (2026-05-28/29) — that's a distribution event, not a base. Guidance was affirmed, with revenue midpoint $1.195B–$1.205B below the $1.206B consensus. Affirm-not-raise on a former hypergrowth name = decel confirmed.
- 8% layoffs signal defense, not offense (2026-05-28). Growth companies in an accelerating narrative hire; they don't cut headcount and take charges. This is a cost story dressed as an "AI focus" story.
- Structural #3. S loses share to CrowdStrike (AI-security leader per 2026-05-31 coverage) and to Microsoft Defender bundling. The analyst median is Neutral/Equal-Weight (UBS $16, Scotia $16, Barclays $16, JPM $18, DA Davidson $15) — most of the Street rates it a hold, and several CUT targets the same day.
- No catalyst to force a re-rate inside 30 days. Next earnings (Q2 FY2027) is ~late August. Dead-tape risk between now and then.
Setup & Price Structure
Post-earnings the name is broken below its pre-print structure — a gap-down crater on 2026-05-28 with follow-through selling 2026-05-29. Estimated price ~$14 (the "rally nearly 40%" to the $20 PT cluster implies ~$14.3). Resistance is the pre-earnings gap zone ~$18 and the 20-week EMA above it; support is the post-earnings low ~$13. This is a falling-knife / no-base configuration: RSI likely washed out but momentum is DOWN, MA stack is rolling over. Buying here is averaging-into-weakness on a name the playbook explicitly avoids. The only valid long is a fresh setup: a higher low above ~$13 followed by a weekly close reclaiming ~$18 on volume. Until then there is no setup, only a chart in repair.
Catalyst Calendar (next 30 days)
- None hard inside 30 days. Q1 FY2027 already printed (2026-05-28) — the binary is behind us.
- ~2026-08-26 (est.): Q2 FY2027 earnings — the next real catalyst, outside the 30-day window.
- Ongoing: sell-side PT revisions are still trickling (B of A upgrade 2026-05-29 was the latest pivot); watch for a second bank flipping bullish as an early re-rate tell.
- Black Hat USA ~early August (est.) — product/narrative venue, also outside 30d.
What Would Change Our Mind
- Re-entry trigger (turns us interested): weekly close back above the pre-earnings gap ~$18 with a confirmed higher low above ~$13 — proof the crater was capitulation, not the start of a leg lower.
- Second-bank bull pivot: another major upgrade to Buy/Overweight (joining B of A, with PT raised, not just maintained) signals the Street is re-accelerating the narrative ahead of price.
- Hard skip stays a skip if: price loses ~[entry redacted] post-earnings low, or Q2 (Aug) guidance is cut — that confirms terminal decel and S becomes a no-touch.
Correlation Notes
- CRWD is the tell. S trades as the weaker beta to CrowdStrike; when cyber leads (2026-05-31), CRWD captures the bid and S lags. If we want cyber-security-software momentum exposure, CRWD is the cleaner vehicle.
- MSFT (Defender) is a structural overhang — bundling pressure caps S's share-of-wallet narrative.
- Theme basket: moves with PANW, ZS, OKTA on sector risk-on/off, but S's idiosyncratic post-earnings damage means it will underperform the basket until it re-bases. Don't size S as a cyber-theme proxy right now — it's a special situation in repair.