SentinelOne CEO: Microsoft has more vulnerabilities than any other company

Photo of Jeremy Phillips
By Jeremy Phillips Published

Quick Read

  • Microsoft’s dominance in enterprise IT and vulnerability exposure is driving demand for standalone cybersecurity vendors that operate independent of the operating system provider.

This post may contain links from our sponsors and affiliates, and Flywheel Publishing may receive compensation for actions taken through them.
SentinelOne CEO: Microsoft has more vulnerabilities than any other company

© ImageFlow / Shutterstock.com

SentinelOne (NYSE:S | S Price Prediction) CEO Tomer Weingarten made a pointed claim on live TV recently that cuts right to the heart of the enterprise security debate: “Microsoft has the most vulnerabilities and that is factual than any other company in the world.”

That is a bold statement. And it is the foundation of a broader investment thesis that benefits not just SentinelOne, but every standalone cybersecurity vendor.

The “Separate Control Layer” Argument

Weingarten was responding to whether his argument against Microsoft-only security was self-serving. His answer: it applies equally to Palo Alto Networks (NASDAQ:PANW) and CrowdStrike (NASDAQ:CRWD).

The core thesis is that when you put all your eggs in one basket with Microsoft, you lose the independent layer of protection that is separate from the operating system provider and the environment manager. Think of it like having your home security system run by the same company that built your house and holds your spare key. If that company has a problem, you have no fallback.

Microsoft (NASDAQ:MSFT) itself lists “Cyberattacks and security vulnerabilities” as an explicit risk factor in its own filings. The company generated $81.27B in revenue last quarter and is investing heavily in AI, but its sheer scale and ubiquity make it the world’s largest attack surface.

The Threat Landscape Context

Weingarten characterized Iran as a “second-tier” cyber attacker while describing China as top-level. He also described adversaries as increasingly opportunistic, noting they would not target the Department of Defense directly but would instead go after softer, more accessible attack surfaces.

That framing matters for enterprise buyers. The question is not whether a nation-state can breach the Pentagon. It is whether your company, running a Microsoft-only security stack, becomes the path of least resistance.

What This Means for SentinelOne

SentinelOne just crossed $1.06B in ARR and posted a record 7% non-GAAP operating margin in Q3 FY2026, a roughly 1,200 basis point improvement year-over-year. Revenue grew 22.9% to $258.91M. The stock trades around $13.78, well below the analyst consensus target of $19.99.

The vulnerability argument Weingarten is making is a structural case for why standalone security vendors exist and why the debate over consolidating entirely onto a single vendor’s stack remains active among enterprise security teams. The more dominant Microsoft becomes in enterprise IT, the stronger that argument gets.

Photo of Jeremy Phillips
About the Author Jeremy Phillips →

I've been writing about stocks and personal finance for 20+ years. I believe all great companies are tech companies in the long run, and I invest accordingly.

Featured Reads

Our top personal finance-related articles today. Your wallet will thank you later.

Continue Reading

Top Gaining Stocks

CBOE Vol: 1,568,143
PSKY Vol: 12,285,993
STX Vol: 7,378,346
ORCL Vol: 26,317,675
DDOG Vol: 6,247,779

Top Losing Stocks

LKQ
LKQ Vol: 4,367,433
CLX Vol: 13,260,523
SYK Vol: 4,519,455
MHK Vol: 1,859,865
AMGN Vol: 3,818,618