Who is the CISO of SentinelOne?

The Chief Information Security Officer (CISO) seat at SentinelOne is open on CISO Tribune's record. Alex Stamos departed, announced week of September 28, 2026, and no successor has been tracked yet.

Is the SentinelOne CISO seat currently filled?

Not as far as CISO Tribune has confirmed, as of week of September 28, 2026.

Who last held the security seat at SentinelOne?

Alex Stamos, Chief Information Security Officer (CISO), whose departure was announced in the week of September 28, 2026.

Which board body oversees cybersecurity at SentinelOne?

SentinelOne's fiscal 2026 Form 10-K places oversight of cybersecurity risk with the Audit Committee.

What does SentinelOne sell?

SentinelOne sells Purple AI, Wayfinder IRR and Wayfinder Emergency Response. Purple AI: AI that handles triage, correlation, and routine response alongside agentic workflows. Wayfinder IRR: On-demand breach readiness, compromise assessments, and incident response. Wayfinder Emergency Response: On-demand access to incident response with no commitment required.

Who does SentinelOne fit?

From its own pages, SentinelOne sells to organizations ranging from global enterprises to fast-moving teams. SentinelOne offers solutions tailored to the regulatory, operational, and threat realities of specific sectors. For analysts, Purple AI and agentic workflows handle triage, correlation, and routine response. Organizations that need expert incident response right now, without a prior commitment, can use an on-demand DFIR block.

How does CISO Tribune file SentinelOne?

CISO Tribune files SentinelOne under EDR and XDR, with Cloud-native application protection (CNAPP), Identity threat detection and response and MDR and managed SOC as secondary categories.

Where is SentinelOne headquartered?

SentinelOne is headquartered in Mountain View, CA, USA.

Company record · security vendor

Who leads security at SentinelOne

CISO Tribune company record: SentinelOne, seat open since week of September 28, 2026

The Chief Information Security Officer (CISO) seat at SentinelOne is open on our record: Alex Stamos departed, announced week of September 28, 2026, and CISO Tribune has not yet tracked a successor.

What SentinelOne tells the SEC

Its fiscal 2026 Form 10-K, filed March 19, 2026, carries an Item 1C cybersecurity disclosure that describes a Chief Trust Officer, with oversight by the Audit Committee. Read the section verbatim or the filing on sec.gov. A filing describes governance as of its date, not today's seat.

Tracked by the Wire since July 29, 2024 · 2 recorded moves · every claim links to a sourced record · Updated November 5, 2026

Where SentinelOne appears on the record (128)

Every page on CISO Tribune and its network that carries this company, 128 in all.

On the Wire (2): Alex Stamos steps down as Chief Information Security Officer (CISO) of SentinelOne · 2026-09-28
Alex Stamos named Chief Information Security Officer (CISO) at SentinelOne · 2024-07-29
SEC filing: Form 10-K cybersecurity disclosure, fiscal 2026 · Item 1C, filed March 19, 2026
Compared with (120): vs ABIR Networks, vs Abnormal AI, vs Acalvio, vs Acronis, vs Agile Defense, vs Alphabet, vs Aqua Security, vs Arctic Wolf, vs Atos, vs AuthMind, vs Barracuda Networks, vs Beyond Identity, vs Binary Defense, vs Bitdefender, vs BlackCloak, vs Blackpoint Cyber, vs Brava, vs Brite, vs Broadcom, vs Cayosoft, vs Check Point Software Technologies, vs Coalfire, vs Critical Start, vs CrowdStrike, vs CyberKord, vs CyberProof, vs Cyderes, vs Cygrid, vs Cynet, vs Cyrenity, vs Cyscale, vs Data Theorem, vs Daylight, vs DeepSeas, vs Deepwatch, vs Defendify, vs DefenseStorm, vs Delinea, vs Dispel, vs DXC Technology, vs Elastic, vs Elbit Systems, vs eSentire, vs ESET, vs Exaforce, vs Expel, vs Fidelis, vs Forte Technologies, vs Fortified Health Security, vs Fortinet, vs FRSecure, vs Guardz, vs Honeywell, vs Huntress, vs HYPR, vs I-TRACING, vs Intezer, vs Inversion6, vs iVerify, vs Judy Security, vs Kaspersky, vs Kroll, vs Kyndryl, vs Leonardo, vs Malwarebytes, vs Material Security, vs Microsoft, vs Millennium Corporation, vs Mitiga, vs NCC Group, vs NINJIO, vs Nokia, vs Oasis Security, vs Obsidian Security, vs Orange Cyberdefense, vs Orca Security, vs P0 Security, vs Palo Alto Networks, vs Permiso, vs Plerion, vs Proficio, vs Proximus NXT, vs Qualys, vs Quorum Cyber, vs Rackspace Technology, vs RAD Security, vs Rapid7, vs Red Canary, vs Secureworks, vs Semperis, vs Silverfort, vs Skyhigh Security, vs SonicWall, vs Sophos, vs Stellar Cyber, vs Sweet Security, vs Sygnia, vs Sysdig, vs Tanium, vs Tenable, vs Tenfold Security, vs Third Wave Innovations, vs Threat Intelligence, vs ThreatDefence, vs ThreatLocker, vs Transmit Security, vs Trellix, vs Trend Micro, vs Trustwave, vs UltraViolet Cyber, vs UnderDefense, vs Uptycs, vs Upwind, vs Valence, vs Vectra AI, vs WatchGuard Technologies, vs White Hat IT Security, vs WithSecure, vs Wiz, vs Xcitium
In the vendor directory (5): EDR and XDR vendors · primary category
Cloud-native application protection (CNAPP) vendors · category
Identity threat detection and response vendors · category
MDR and managed SOC vendors · category
SOC vendors: who they are and how CISOs compare them, from MDR to SIEM · vendor guide

About SentinelOne

CISO Tribune's Leadership Bench files SentinelOne under Cybersecurity Vendors and North America. The SEC classifies it under standard industrial classification 7372, Services-prepackaged software, and EDGAR lists its ticker as S. The Wire has 2 security-leadership moves at SentinelOne on record, the earliest announced in the week of July 29, 2024.

What SentinelOne's 10-K says about security governance

SentinelOne's fiscal 2026 Form 10-K, filed March 19, 2026, describes its cybersecurity governance in Item 1C. The lines below are that filing's own statements, each with the sentence it comes from.

Top security role, as the filing names it: Chief Trust Officer.
Board oversight: the Audit Committee.
“Our Audit Committee provides oversight of our cybersecurity program and receives quarterly cybersecurity updates from our Chief Trust Officer (CTO).”
How often the board or committee hears about it: quarterly.
“Our Audit Committee provides oversight of our cybersecurity program and receives quarterly cybersecurity updates from our Chief Trust Officer (CTO).”
Experience of the security leadership, as the filing states it:
“Our CTO has over 25 years of experience leading technology and security transformation at large-scale, public technology organizations.”
Material incidents: the filing states none.
“In fiscal 2026, and through the filing of this Annual Report on Form 10-K, cybersecurity threats, including as a result of any previous cybersecurity incidents, have not materially affected our business strategy, operating results, and/or financial condition.”

Plain-English reading and full text of the filing · the filing on sec.gov

Security leadership timeline

2026-09-28

Alex Stamos steps down as Chief Information Security Officer (CISO) of SentinelOne

Alex Stamos had left his role as CISO and advisor to the CEO at SentinelOne by the week of September 28, 2026, when SecurityWeek's Industry Moves column reported he had become CISO at Cognition.

2024-07-29

Alex Stamos named Chief Information Security Officer (CISO) at SentinelOne

SentinelOne has moved Alex Stamos into the CISO seat to manage its security engineering and operations teams.

Previous security leaders of SentinelOne

Alex Stamos: Chief Information Security Officer (CISO); departure announced in the week of September 28, 2026 record

Moves by people who came from SentinelOne

2024-05-01

Chris Bates named Chief Information Security Officer at SandboxAQ

Previously Chief Trust and Security Officer at SentinelOne

Security chiefs at other Cybersecurity Vendors organizations

Other organizations CISO Tribune files under Cybersecurity Vendors with a named security chief on record: those in North America first, in alphabetical order from SentinelOne onward.

Socure: Mark Carter, Chief Information Security Officer.
Tanium: Paul Black, Chief Information Security Officer.
Tenable: Robert Huber, Chief Security Officer.
Trellix: David Soto, Chief Information Security Officer.
UltraViolet Cyber: Andrew Park, Chief Information Security Officer (CISO).
Upwind: Rinki Sethi, Chief Security Officer (CSO).
Zscaler: Deepen Desai, EVP, Chief Security Officer.
1Kosmos: Roger Hale, Chief Information Security Officer.

The full Cybersecurity Vendors bench

What the company sells

SentinelOne sells an AI-native platform with unified protection across endpoint, identity, AI, and cloud. SentinelOne describes its platform as powered by Autonomous Security Intelligence. SentinelOne states that attackers now use AI to generate code, move at machine speed, and exploit gaps. SentinelOne aims to stop attacks across AI tools, endpoints, identity, and cloud. SentinelOne offers solutions tailored to the regulatory, operational, and threat realities of specific sectors.

SentinelOne's endpoint security platform combines endpoint protection (EPP), endpoint detection and response (EDR), and automated remediation in a single unified agent. SentinelOne combines EPP and EDR in a single platform, enabling prevention, detection, investigation, and response without separate tools or agents. SentinelOne uses behavioral AI to identify malicious activity based on how processes behave, not just what they look like. SentinelOne applies automated hardening to close gaps without manual intervention. SentinelOne's AI-powered EDR addresses ransomware, zero-day exploits, supply chain attacks, and fileless malware. SentinelOne provides autonomous, AI-powered protection across every workstation, every cloud workload, and every mobile device. SentinelOne deploys in SaaS, on-premises, hybrid, and air-gapped environments. SentinelOne's endpoint security integrates endpoint, identity, cloud, and third-party telemetry.

SentinelOne contains identity threats from one console. SentinelOne detects credential theft, privilege escalation, and lateral movement as they happen. SentinelOne's identity protection addresses exposure across Active Directory and cloud identity providers including Entra ID, Okta, Ping, SecureAuth, and Duo. SentinelOne uses deception technology and conditional access policies to contain adversaries before impact.

SentinelOne provides on-device mobile threat defense for iOS, Android, and ChromeOS users against phishing, malware, and risky apps. SentinelOne's mobile threat defense requires no MDM and works without connectivity. SentinelOne blocks network attacks such as man-in-the-middle, rogue Wi-Fi, and malicious profiles before they reach data.

Purple AI and agentic workflows handle triage, correlation, and routine response. Purple AI investigates what analysts cannot reach in time. SentinelOne provides AI-native protection to detect, contain, and respond to threats in real time.

Wayfinder IRR provides on-demand breach readiness, expert-led compromise assessments, and incident response. DFIR specialists conduct forensic analysis, identify root cause, and collect full-scope evidence, then contain the threat, evict the adversary, and guide teams through remediation. Breach Readiness exercises test plans and people against real-world threat scenarios. SentinelOne's exercises include tabletops, purple teams, war rooms, CTF challenges, and workshops. SentinelOne offers five assessment types: General, M&A, Post-Breach, Insider Threat, and Targeted. SentinelOne's incident response has a 4-hour SLA for initial expert response and a 24-hour SLA for preliminary findings. One retainer secures a renewable pool of expert hours used across readiness, assessments, and response. SentinelOne's response work covers end-to-end investigations, threat eviction, root cause analysis, IOC analysis, and malware reverse engineering. The response phase delivers executive reporting, compliance documentation, and actionable recommendations.

Wayfinder Emergency Response delivers on-demand access with no commitment required. SentinelOne offers an immediate 40-hour on-demand DFIR block that requires no retainer. SentinelOne hunts for hidden, existing threats and undiagnosed malicious activity in the environment. Hidden threats are identified and neutralized by analysts and Google Threat Intelligence.

SentinelLabs, the research arm of SentinelOne, hosted LABScon 2024, a 3-day conference.^{[1][3][4][5][6]}

Categories: EDR and XDR (primary category)
Cloud-native application protection (CNAPP)
Identity threat detection and response
MDR and managed SOC
Compare SentinelOne with companies in the same category
Headquarters: Mountain View, CA, USA^[2]
Founded: Not established from our sources
Ownership: Not established from our sources
CISO on record: Chief Information Security Officer (CISO) seat open on our record (as of week of September 28, 2026). Open seats
Website: sentinelone.com

Products and services

Product names as the company writes them; what each does, in our words, from the company's own product pages. Never how well it does it.

Purple AI^[3][4][5]
AI that handles triage, correlation, and routine response alongside agentic workflows.
Purple AI and agentic workflows handle triage, correlation, and routine response. Purple AI investigates what analysts cannot reach in time. Purple AI accelerates investigations, analysis, and forensic workflows in SentinelOne engagements.
Wayfinder IRR^[5]
On-demand breach readiness, compromise assessments, and incident response.
Wayfinder IRR provides on-demand breach readiness, expert-led compromise assessments, and incident response. DFIR specialists contain, investigate, and eradicate confirmed or suspected breaches. SentinelOne offers five assessment types: General, M&A, Post-Breach, Insider Threat, and Targeted. One retainer secures a renewable pool of expert hours used across readiness, assessments, and response.
Wayfinder Emergency Response^[5]
On-demand access to incident response with no commitment required.
Wayfinder Emergency Response delivers on-demand access with no commitment required. SentinelOne offers an immediate 40-hour on-demand DFIR block that requires no retainer.

Competitors and alternatives

The other companies on our record filed under the same categories, category by category: first those that lead with that category and share more of SentinelOne's categories, then alphabetical. A list from the record, never a ranking.

On edr and xdr, SentinelOne competes with CrowdStrike, Malwarebytes, Bitdefender, Cynet, Fidelis, Sophos, Trend Micro, Xcitium, Broadcom, Kaspersky and 23 more.
On cloud-native application protection (cnapp), SentinelOne competes with Aqua Security, Cyscale, Lacework, Orca Security, Plerion, RAD Security, Sweet Security, Sysdig, Uptycs, Upwind and 12 more.
On identity threat detection and response, SentinelOne competes with Permiso, Semperis, Silverfort, CrowdStrike, Guardz, Huntress, Malwarebytes, Blackpoint Cyber, WatchGuard Technologies, Abnormal AI and 16 more.
On mdr and managed soc, SentinelOne competes with Guardz, Huntress, Blackpoint Cyber, DefenseStorm, Secureworks, Agile Defense, Arctic Wolf, Binary Defense, Critical Start, CyberProof and 54 more.

What review platforms show

The headline rating and review count each platform showed in public search results on the day we looked, with the link. We do not read or reproduce the reviews, and a rating is the platform's, not ours.

G2 · 4.9 out of 5 · 122 reviews^[9]seen November 10, 2026

References

Every fact above cites one of these by number. Tier A is the company itself, a regulator or a filing; tier B is trade or business press.

[1]sentinelone.comSentinelOne · sentinelone.com · undated page, accessed November 5, 2026 · Tier A: the company, a regulator or a filing
[2]CompanySentinelOne · sentinelone.com · undated page, accessed November 5, 2026 · Tier A: the company, a regulator or a filing
[3]SentinelOne | AI-Powered Enterprise Cybersecurity PlatformSentinelOne · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
[4]Singularity™ Endpoint Security Platform | SentinelOneSentinelOne · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
[5]Wayfinder Incident Readiness & Response Services | SentinelOneSentinelOne · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
[6]LABScon24 Replay | Let Them Eat Cake: “Secure by Upgrade” Software is a National Security Threat | SentinelOneSentinelOne · published December 18, 2024 · Tier A: the company, a regulator or a filing
[7]SentinelOne to Add Anthropic's Claude Mythos 5.1 to Wayfinder Frontier AI ServicesSentinelOne · published October 29, 2026 · Tier A: the company, a regulator or a filing
[8]SentinelOne Appoints Sonalee Parekh as Chief Financial OfficerSentinelOne · published March 3, 2026 · Tier A: the company, a regulator or a filing
[9]SentinelOne Singularity Cloud Security Reviews 2026G2 · undated page, accessed November 10, 2026 · Tier C

Last verified November 5, 2026. Our code found the quoted passage behind each fact on its source page when the fact was recorded, and re-checks every record against its sources each month.

Recorded November 5, 2026, expanded November 10, 2026 from the references above.

Work for SentinelOne? Suggest a correction to a fact on this page (with a source on your own domain), or claim this entry by publishing a small file on your domain.

Questions CISOs ask about SentinelOne

Who is the CISO of SentinelOne?: The Chief Information Security Officer (CISO) seat at SentinelOne is open on CISO Tribune's record. Alex Stamos departed, announced week of September 28, 2026, and no successor has been tracked yet.
Is the SentinelOne CISO seat currently filled?: Not as far as CISO Tribune has confirmed, as of week of September 28, 2026.
Who last held the security seat at SentinelOne?: Alex Stamos, Chief Information Security Officer (CISO), whose departure was announced in the week of September 28, 2026.
Who are the security chiefs at other Cybersecurity Vendors organizations?: On CISO Tribune's record they include Mark Carter at Socure, Paul Black at Tanium, Robert Huber at Tenable and David Soto at Trellix.
Which board body oversees cybersecurity at SentinelOne?: SentinelOne's fiscal 2026 Form 10-K places oversight of cybersecurity risk with the Audit Committee.
What does SentinelOne sell?: SentinelOne sells Purple AI, Wayfinder IRR and Wayfinder Emergency Response. Purple AI: AI that handles triage, correlation, and routine response alongside agentic workflows. Wayfinder IRR: On-demand breach readiness, compromise assessments, and incident response. Wayfinder Emergency Response: On-demand access to incident response with no commitment required.
Who does SentinelOne fit?: From its own pages, SentinelOne sells to organizations ranging from global enterprises to fast-moving teams. SentinelOne offers solutions tailored to the regulatory, operational, and threat realities of specific sectors. For analysts, Purple AI and agentic workflows handle triage, correlation, and routine response. Organizations that need expert incident response right now, without a prior commitment, can use an on-demand DFIR block.
How does CISO Tribune file SentinelOne?: CISO Tribune files SentinelOne under EDR and XDR, with Cloud-native application protection (CNAPP), Identity threat detection and response and MDR and managed SOC as secondary categories.
Where is SentinelOne headquartered?: SentinelOne is headquartered in Mountain View, CA, USA.

Related guides

CISO Reporting Structure, the Five Models and What the Filings Show
Most security chiefs report into technology leadership (64%), the rest to business leaders. The five models, their trade-offs and what 10-K filings show.
CISO News: Tracking Every Appointment and Departure in the Top Security Seat
CISO Tribune records every CISO appointment and departure as a sourced, dated entry, not a column: 466 moves to date, each with a primary source and a confirmed-or-reported label.
CISO, CSO, VP of Security, Head of Security: What the Titles Mean and What the Record Shows
A chief information security officer (CISO) owns information security. A chief security officer (CSO) usually adds physical security and investigations.