What this research found
Following Cisco's $28B purchase of Splunk and Google's $23B move on Wiz, five listed cybersecurity vendors were screened for acquisition appeal on size and growth. Only SentinelOne cleared both filters, and applying precedent-deal multiples to its $0.96B of trailing revenue implied a takeout price of $26.55 to $40.60 per share against $13.19 in the market. The 14-page memo ranks Cisco as the most likely buyer and rates the shares a buy on a probability-weighted expected return of 143.8%.
- SentinelOne alone passed both screens — a market capitalisation between $2B and $15B and revenue growth above 20% — at $4.48B and 22.9%. Zscaler ($29.88B) and CyberArk ($20.55B) were too large, Tenable grew only 11.2%, and Rapid7 failed on both counts.
- Six precedent cybersecurity deals cleared at a median of 9.4 times enterprise value to trailing revenue, ranging from Cisco-Splunk at 6.7 times to Google-Wiz at 46.0 times. Excluding Wiz as a growth outlier narrows the range to 9.2 to 10.0 times, well above SentinelOne's own 4.45 times.
- Applied to $0.96B of trailing revenue, those multiples imply enterprise values of $8.79B to $13.57B and share prices of $26.55, $28.79 and $40.60 across the conservative, base and optimistic cases — premiums of 101%, 118% and 208% over the $13.19 price.
- Cisco scores highest on strategic fit at 14 points, against 6 for Alphabet and 4 each for Microsoft, Palo Alto Networks and CrowdStrike, because SentinelOne's endpoint, cloud and AI products fill gaps in Cisco's portfolio instead of duplicating what it already sells.
- Financing is not the binding constraint for three of the five candidates. Microsoft ($684.6B of dry powder), Alphabet ($603.4B) and Cisco ($70.9B) could fund a $13.6B all-cash deal, while Palo Alto Networks and CrowdStrike would need stock components of $5.9B and $9.6B.
- Every structure modelled is mildly dilutive: -6.71% to -5.82% on Cisco's earnings per share and -0.94% to -0.70% on Alphabet's, with the deal worth 4.2% of Cisco's market capitalisation against 0.3% of Alphabet's. Blending the outcomes gives an expected value of $32.15 per share and a 41.6-to-1 risk/reward ratio.
How it was done
Five listed cybersecurity vendors were screened on market capitalisation between $2B and $15B and year-over-year revenue growth above 20%. Six precedent transactions — Cisco-Splunk, Google-Wiz, Google-Mandiant and three Thoma Bravo take-privates — were compiled into takeout multiples, which were then applied to SentinelOne's trailing revenue under conservative, base and optimistic cases. Five candidate acquirers were assessed for ability to pay, defined as cash plus three times EBITDA of debt capacity, scored for portfolio fit across endpoint, cloud, identity, SIEM and AI segments, and run through an accretion and dilution model at a 5.5% interest rate and 21% tax rate. A four-scenario probability model produced the expected return, delivered as a 14-page memo built around a valuation football-field chart.
Data sources
- Market and financial data for five cybersecurity targets: SentinelOne, Zscaler, CyberArk, Tenable and Rapid7
- Six precedent transactions: Cisco/Splunk ($28.0B), Google/Wiz ($23.0B), Google/Mandiant ($5.4B), Thoma Bravo/SailPoint ($6.9B), Thoma Bravo/Ping Identity ($2.8B) and Thoma Bravo/ForgeRock ($2.3B)
- Balance sheet, EBITDA and free cash flow data for five potential acquirers: Microsoft, Alphabet, Cisco, Palo Alto Networks and CrowdStrike
Limitations
The four deal scenarios use assigned probabilities rather than empirically estimated ones, so the headline expected return and the 85% chance of a positive outcome inherit that judgement. The dilution model also uses a stress-test loss figure for the target's net income.
Figures from this analysis
Outputs produced
Raw financial data with screening results for all 5 cybersecurity targets
screening_summary.md
Detailed markdown summary with individual company analysis, screening results, precedent transaction analysis, valuation analysis, and acquirer analysis
Python script for fetching financial data using yfinance API
Precedent M&A transaction data with calculated EV/Revenue multiples
Python script for precedent transaction analysis and valuation multiple calculation
Python script for SentinelOne valuation analysis using precedent multiples
SentinelOne valuation scenarios with implied EV, share prices, and takeout premiums
Python script for acquirer financial capacity analysis
How this research was produced
K-Dense Web planned and ran this m&a analysis investigation end to end — gathering the sources, carrying out the analysis, producing the figures, and drafting the report. The full session transcript, including every intermediate step, is available to view.
