#1SentinelOne + Attivo NETWORKS. Leaders in Identity Security SentinelOne to Acquire Attivo Networks Bringing Identity to XDR March 15, 2022#2Important Notice and Disclaimers This presentation contains "forward-looking statements" within the meaning of Section 27A of the Securities Act of 1933, as amended, and Section 21E of the Securities Exchange Act of 1934, as amended, which statements involve risks and uncertainties, including statements regarding our planned acquisition of Attivo, the timing of such acquisition, and impact of such acquisition on our total addressable market; business, operating results and financial condition. These forward-looking statements are made as of the date they were first issued and were based on current expectations, estimates, forecasts, and projections as well as the beliefs and assumptions of management. The words "believe," "may," "will," "potentially," "estimate," "continue," "anticipate," "intend," "could," "would," "project," "target," "plan," "expect," the negative of these terms and similar expressions are intended to identify forward-looking statements. However, not all forward-looking statements contain these identifying words. You should not rely on these forward-looking statements, as actual outcomes and results may differ materially from those contemplated by these forward-looking statements as a result of such risks and uncertainties. All forward- looking statements in this presentation, the shareholder letter for Q4 FY 2022 and live webcast are based on information and estimates available to us as of March 15, 2022, and we do not assume any obligation to update the forward-looking statements provided to reflect events that occur or circumstances that exist after the date of this presentation and live webcast or to reflect new information or the occurrence of unexpected events, except as required by law. We may not actually achieve the plans, intentions, or expectations disclosed in our forward-looking statements, and you should not place undue reliance on our forward-looking statements. There are a significant number of factors that could cause our actual results to differ materially from statements made in this letter and live webcast, including: our limited operating history; our history of losses; intense competition in the market we compete in; fluctuations in our operating results; network or security incidents against us; our ability to successfully integrate any acquisitions and strategic investments, including the planned acquisition and integration of Attivo; defects, errors or vulnerabilities in our platform; risks associated with managing our rapid growth; the continuing impact of the COVID-19 pandemic on our and our customers' business; our ability to attract new and retain existing customers, or renew and expand our relationships with them; the ability of our platform to effectively interoperate within our customers IT infrastructure; disruptions or other business interruptions that affect the availability of our platform; the failure to timely develop and achieve market acceptance of new products, and subscriptions as well as existing products, subscriptions and support offerings; rapidly evolving technological developments in the market for security products and subscription and support offerings; length of sales cycles; risks of securities class action litigation; general market, political, economic, and business conditions, including those related to the continuing impact of COVID-19 and the effects of the recent conflict in Ukraine. Additional risks and uncertainties that could affect our financial results are included under the captions "Risk Factors" and "Management's Discussion and Analysis of Financial Condition and Results of Operations" set in our filings and reports with the SEC, including our final prospectus filed with the SEC pursuant to Rule 424(b), dated June 29, 2021, our most recently filed Quarterly Report on Form 10-Q, our Annual Report on Form 10-K that will be filed for our 2022 fiscal year, and other filings and reports that we may file from time to time with the SEC, copies of which are available on our website at investors.sentinelone.com and on the SEC's website at www.sec.gov. You should not rely on these forward-looking statements, as actual outcomes and results may differ materially from those contemplated by these forward-looking statements as a result of such risks and uncertainties. All forward- looking statements in this presentation, shareholder letter and the live webcast are based on information and estimates available to us at the time of this letter, and we do not assume any obligation to update the forward-looking statements provided to reflect events that occur or circumstances that exist after the date of this letter and live webcast or to reflect new information or the occurrence of unexpected events, except as required by law. We may not actually achieve the plans, intentions, or expectations disclosed in our forward-looking statements, and you should not place undue reliance on our forward-looking statements. Certain information contained in this presentation and statements made orally during this presentation relate to or are based on publications and other data from third-party sources. While we believe these third-party publications to be reliable as of the date of this esentation, it has not been independently verified, and SentinelOne makes no representations as to the adequacy, fairness, accuracy or completeness of, any information obtained from third- party sources. SentinelOne” 2#3Transaction Summary Transaction Value and Funding $616.5 million Purchase Price (58% cash and 42% in shares)¹ Funded with a combination of stock and cash Strategic and Financial Fit Leading Identity Threat Detection & Response (ITDR) technology for enterprise Zero Trust adoption ~$30 million in CY 2021 ARR Additive to SentinelOne's hypergrowth and accretive to GAAP and Non-GAAP gross margins¹ Closing Expectations Expected to close in SentinelOne's Q2 FY23 Closing subject to regulatory approval and customary closing conditions SentinelOne* The number of shares to be issued in connection with the Stock Consideration will be based on a fixed value of $40.49 per share, which represents the average of the daily volume weighted average sales price of a share of the Company's Class A common stock for the 30 consecutive trading days ending on March 14, 2022), subject to adjustments as set forth in the Agreement. See appendix A for definition of metrics 3#4Key Investment Highlights > Leading Identity Security Platform with Go-to-Market Fit Differentiated identity security platform with a rapidly growing business of 300+ global enterprises¹ including Fortune 500 companies - opens new customer and cross sell opportunities Broadens Singularity XDR Platform Capabilities Extends Singularity XDR capabilities to identity-based threats across endpoint, cloud workloads, IoT devices, mobile, and data wherever it resides TAM Expansion within Adjacent Market Expands SentinelOne's total addressable market by $4 billion² in the fast-growing, critical identity security market Compelling Financial Profile Additive to SentinelOne's hypergrowth and accretive to GAAP and Non-GAAP gross margins³ Strong Cultural Fit Proven leadership team with strong track record of customer success and innovation Sentinel One* ¹As of December 31, 2021, ² Source: Gartner - Forecast Analysis: Information Security and Risk Management, Worldwide (August 2021), ³ See appendix A for definition of metrics 4#5Strategic Rationale Identity Security is Critical Misused credentials are now the top technique used in breaches¹, Active Directory and identity-based attacks are too common Shift to hybrid work and increased cloud adoption has established identity as a new perimeter Identity Threat Detection and Response (ITDR) is the missing link in holistic XDR and zero trust strategies Attackers are targeting identity and access management gaps to gain a foothold within trusted environments and advance laterally in pursuit of high- value targets SentinelOne* ¹Source: Gartner, “Top Security and Risk Trends for 2021," Kasey Panetta, November 15, 2021 SentinelOne + Attivo Networks Extends XDR platform: Adds leading Identity security platform to Singularity XDR, now spanning across endpoints, cloud, loT, data, and identity Enhances Zero Trust capabilities: Creates a more comprehensive security posture for enterprises, adding new line of defense around user identity and credentials Natural platform enhancement and adjacency for customers: Unlocks go-to-market opportunities for new and existing enterprises with broader offering 5#6Attivo Networks Comprehensive Identity Security Platform $4B Identity Security TAM¹ Attivo NETWORKS. Leaders in Identity Security 3 Pillars of Attivo's Identity Security Platform ~$30M ARR² 1 50%+ ARR Growth² Identity Threat Detection and Response Expert in detecting and preventing Identity privilege escalation and lateral movement - specialize in the protection of identities, credentials, and high value assets across Endpoints, Active Directory, and Cloud Infrastructure Delivers holistic prevention, detection, and response providing real-time identity security including credential theft, privilege escalation, lateral movement, data cloaking, identity exposure, and more supporting conditional access and for zero trust cybersecurity. 300+ Customers incl. many Fortune 500s² 2 Identity Infrastructure Assessment 200+ Employees² Provides instant Active Directory visibility of misconfigurations, suspicious password and account changes, credential exposures, unauthorized access, and more enabling identity-focused attack surface reduction SentinelOne* ¹Source: Gartner - Forecast Analysis: Information Security and Risk Management, Worldwide (August 2021), ² As of December 31, 2021 HQ Fremont, CA R&D Team, India 3 Identity Cyber Deception Network and cloud-based deception suite lures attackers into revealing themselves with tactics including breadcrumbs and decoy accounts, files and IPs. Organizations gain the advantage of time to detect, analyze, and stop attackers and insider threats without impacting enterprise assets. 6#7Broadened XDR Platform with Identity 000 Endpoint Security on Security Operations NGAV Remediate & Rollback SEE Windows Mac Linux EDR Embedded Threat Intelligence Cloud Servers Containers Incident Response Forensics & Analytics Network Rogues lo T Custom Detections Remote Scripting iOS Android Chrome OS Device Control Rogue Discovery IT Operations Storage Firewall Control Rogue Control STORYLINE™ PROTECT XDR Integrations Network Vulnerability Management Email SENTINELS Agent Deployment Sandbox IT Ops 24/7/365 MDR & DFIR Threat Hunting TIOST Services SASE CASB Deployment Support & Training Intelligence SIEM/SOAR Identity Security Protection AD Visibility Deception THOSE RESOLVE 3rd Party Vendor Ecosystems#8Appendix 270 225 315, (3) TAL-AND-|||#9Definitions Annualized Recurring Revenue (ARR): ARR represents the annualized revenue run rate of our subscription contracts at the end of a reporting period, assuming contracts are renewed on their existing terms for customers that are under subscription contracts with us. Non-GAAP Gross Margin: We define non-GAAP gross margin as GAAP gross margin excluding stock-based compensation expense, employer payroll tax on employee stock transactions, and amortization of acquired intangible assets. SentinelOne” 9