SentinelOne Inc. (S) shares were trading lower Thursday, even after a brief pop following enthusiastic coverage from Citron Research. Sometimes the market just needs time to digest good news.

The Citron Case

The short-seller-turned-occasional-bull set a $32 price target and made the case that this cybersecurity company needs a valuation do-over. Their reasoning? SentinelOne just played a starring role in cracking the Salt Typhoon hack, tracing two Chinese state-sponsored attackers back to Cisco's own training program. That's the kind of irony you can't make up.

"$S just cracked the Salt Typhoon hack — tracing two Chinese state attackers back to Cisco's own training program," Citron wrote on X. "While exposing the biggest telecom breach in U.S. history, the company completed its transformation from 'endpoint vendor' to full AI-native security platform."

Here's where it gets interesting: more than half of SentinelOne's third-quarter bookings came from Cloud, Data and AI offerings. That's a big deal because it shows the company has evolved beyond being just another endpoint security vendor into something broader—a platform play.

The Valuation Argument

Yet the stock still trades at roughly 5x revenue, "as if it's a commodity endpoint product," according to Citron. Their $32 target applies 8.5x forward revenue—what they call "the LOW END of platform comps"—to fiscal 2026 estimates, adjusted for cash. That math gets you to a $9.5 to $10 billion market cap.

"This company must be rerated!" Citron insisted. "No heroics. Just valuing SentinelOne as what it already is."

SentinelOne shares were down 1.44% at $15.02 at the time of publication Thursday.