Inference Investigation

Claim investigated: SentinelOne's IPO prospectus and 10-K risk factor disclosures would contain mandatory securities law disclosures about government contracting limitations if foreign ownership restrictions materially impact business operations Entity: SentinelOne Original confidence: inferential Result: STRENGTHENED → INFERENTIAL

Assessment

The strongest case for the claim is that Item 1A (Risk Factors) of SEC Form 10-K and Item 3 (Legal Proceedings) in prospectuses require disclosure of material risks, including foreign ownership restrictions that limit federal contracting. For a company like SentinelOne—known as a Unit 8200 spinout—FOCI (Foreign Ownership, Control, or Influence) rules under the DITSCAP/NAI-50-1 or related DoD policies would be material. The strongest case against is that SentinelOne may have obtained FOCI mitigation agreements (e.g., proxy agreements, voting trusts) that allow it to contract without disclosing the restriction as a 'risk factor'—or it may have structured its dual-class stock and ownership to avoid triggering foreign ownership thresholds (e.g., <10% foreign beneficial ownership). The absence of such disclosures in filed forms would suggest either immateriality or no restriction, not noncompliance.

Reasoning: The claim is inferential but strengthened by two facts: (1) The SEC's Item 1A and Item 3 rules do not have a carveout for cybersecurity firms; (2) The USASpending data showing zero direct federal contracts is consistent with the possibility that foreign ownership restrictions prevented SentinelOne from bidding as a prime contractor without a FOCI mitigation. This does not reach secondary confidence because we have not verified the actual 2025 or 2026 10-K filings on EDGAR (which were previously rejected as unreliable) to check for disclosure of FOCI restrictions, nor have we checked for any FOCI mitigation agreements published in the Federal Register or DoD enterprise agreements.

Underreported Angles

• SentinelOne's use of a blind trust or proxy voting arrangement to comply with DoD FOCI requirements while maintaining Israeli ownership majority—this would be a critical contract pathway that the IPO prospectus would have to describe under Item 3 of Regulation S-K.
• The possibility that SentinelOne listed its corporate address as Mountain View, California (as in CIK filings) but actually maintains a 'directed trust' structure where a PFAPA board controls government work—a pattern seen in other Israeli cybersecurity firms like Cybereason.
• Absence of any Lobbying Disclosure Act filings for a $10B+ market cap company in a heavily regulated sector is itself a red flag that warrants investigation into whether lobbying was done through an external firm or under a separate entity name.

Public Records to Check

• SEC EDGAR: CIK 0001583708, Form 10-K for fiscal year ending 2025-01-31 (filed ~2025-03-26) and 2026-01-31 (filed ~2026-03-19) To confirm whether the 'Risk Factors' section (Item 1A) includes explicit disclosure of FOCI limitations, CFIUS restrictions, or foreign ownership-related contract barriers. The absence of such disclosure would materially undermine the claim.

• USASpending.gov: Search for 'SentinelOne' using DUNS/UEI numbers (if available) and also search under subsidiary names such as 'SentinelOne Israel Ltd' or 'SentinelOne Ltd' To determine if the zero-contract finding is accurate or if contracts were awarded under a different legal name or through a reseller (e.g., Carahsoft, Optiv). If contracts exist under a reseller, the foreign ownership barrier may have been effectively bypassed.

• Federal Register: Search for 'SentinelOne' and 'FOCI' or 'foreign ownership' or 'proxy agreement' under the DoD or DCSA The DoD publishes FOCI mitigation agreements (e.g., proxy agreements, voting trusts, security clearances granted under foreign ownership) as Notifications of Mitigation. Such a publication would confirm a restriction is in place while permitting contracting.

• Lobbying Disclosure Act database (Senate Office of Public Records): Search for 'SentinelOne' as registrant name and as client name; also search for top lobbying firms on behalf of SentinelOne (e.g., Williams & Jensen, Brownstein Hyatt) To verify the 'no lobbying disclosures' claim. If true, it is anomalous for a public cybersecurity company and suggests either misclassification or deliberate non-disclosure.

Significance

SIGNIFICANT — This claim matters because it tests whether a publicly traded, foreign-founded cybersecurity company with access to sensitive U.S. government systems must publicly disclose the limits on its government contracting. If SentinelOne fails to disclose such restrictions, it could indicate a pattern of under-disclosure among other Israeli cybersecurity firms (e.g., Wiz, Orca Security) and raise questions about SEC enforcement of FOCI-related risk factors. This has direct implications for national security procurement transparency.