Some links on this page are affiliate links: if you buy through them we may earn a commission, at no extra cost to you.
Chris Krebs left SentinelOne effective immediately on April 16, 2025, saying he needed his “complete focus and energy” for a fight over the Trump administration’s actions against him. President Donald Trump’s April 9 document was formally a presidential memorandum—not an executive order—and directed the revocation of Krebs’s security clearance, a review of clearances held by people at entities associated with him, and an investigation into his government work. Krebs and SentinelOne described his departure as his decision; the company said it did not expect the clearance review to materially affect its business.
What happened
Krebs announced on April 16 that he was stepping away from SentinelOne, where he had served as chief intelligence and public policy officer and president of PinnacleOne. His departure was effective immediately, according to contemporaneous reporting. Krebs said the circumstances required him to devote his complete focus and energy to what he described as a fight for democracy, freedom of speech and the rule of law. He did not announce a specific lawsuit or legal strategy in that statement.
The departure followed a presidential memorandum signed by Trump on April 9. Although it was frequently called an “executive order” in public discussion and company communications, its formal title and document type were “Addressing Risks From Chris Krebs and Government Censorship,” a presidential memorandum.
What Trump’s memorandum directed
The memorandum ordered federal agencies to revoke any active security clearance held by Krebs. It also directed the suspension, pending review, of active clearances held by individuals at entities associated with him, including SentinelOne. That did not mean every SentinelOne employee lost a clearance, or that the company’s ordinary cybersecurity operations were prohibited.
#1 Best Overall
The document also called for reviews of Krebs’s conduct while serving in government, including his leadership of the Cybersecurity and Infrastructure Security Agency (CISA), and of CISA activities during the relevant period. It directed the attorney general, the director of national intelligence and other relevant agencies to take appropriate steps consistent with existing law. Among the issues it identified for review were federal suitability standards, possible unauthorized dissemination of classified information and policies connected to Trump’s January 20, 2025 order concerning government censorship and free speech. These were directions to investigate and review; they were not findings that Krebs had committed wrongdoing.
The White House’s fact sheet presented the action as a response to alleged censorship and CISA conduct. Critics saw it differently: they connected the move to Krebs’s public rejection of false claims that the 2020 election had been compromised. Those are competing interpretations of motive, not an established finding about why the administration acted.
Why Krebs was already a political target
Krebs was the first director of CISA, the Department of Homeland Security agency responsible for helping protect the nation’s critical infrastructure from cyber and other threats. In November 2020, while serving in Trump’s first administration, he was fired by Trump after CISA publicly described that year’s election as secure. The agency said there was no evidence voting systems had deleted, lost or changed votes, or been compromised.
That history helps explain why the 2025 memorandum drew attention beyond the immediate clearance issue. The administration framed its action around alleged censorship and government conduct. Krebs’s supporters and other critics argued that targeting a former official who had contradicted election-fraud claims could punish or intimidate public criticism. The Electronic Frontier Foundation’s support letter and a congressional hearing record reflect that concern. Whether the action amounted to unlawful retaliation was not settled by the memorandum itself.
Rank #3
Why SentinelOne was named
SentinelOne employed Krebs in a senior policy and intelligence role, and the memorandum’s clearance provision reached people at entities associated with him. The document did not accuse SentinelOne itself of wrongdoing. Its relevance was that Krebs worked there and the company had personnel with government clearances subject to review.
SentinelOne first appointed Krebs to its advisory board in 2021. After the company acquired the Krebs Stamos Group, he became chief intelligence and public policy officer and president of PinnacleOne, its strategic advisory group. His roles also included service on CISA’s Cyber Safety Review Board. The company announced the appointments and roles in its statements about his advisory-board appointment, PinnacleOne and the review board.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.What SentinelOne said about business impact
SentinelOne described Krebs’s departure as a personal decision. In its response to the memorandum, the company said it would cooperate with any required review of personnel clearances through existing government processes. It said fewer than 10 employees overall held relevant clearances and that it did not expect the matter to materially affect its business. That was the company’s assessment, not independent proof of the eventual business impact.
Quick wins for a faster PC:
Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Repair Windows errors before they cause bigger problemsFix Now →Scan for outdated or missing drivers - takes under a minuteDriver Scan →The company also emphasized its continuing relationships with the U.S. government, military and intelligence community. Krebs’s exit therefore separated his personal response to the administration’s action from SentinelOne’s corporate relationships and commercial interests. It did not, by itself, show that the company had lost contracts, that all relevant clearances had been permanently revoked, or that SentinelOne’s operations had been suspended.
Best Value
What “fighting the order” meant—and what remained unclear
Krebs’s stated reason was that he needed to focus on the broader fight prompted by the administration’s actions. That could include responding to the reviews, defending his public-service record, challenging clearance decisions or pursuing legal, congressional or public-advocacy avenues. But the available announcement did not specify a plan, and contemporaneous coverage noted uncertainty about whether he would sue.
It is important to distinguish an investigation from a conclusion. The memorandum ordered reviews; it did not establish that Krebs had mishandled classified information, lead to a stated criminal charge, or resolve the legality of the administration’s actions. The initial reporting also did not establish a final outcome for the investigations or the clearance review.
Why the departure mattered beyond one company
Cybersecurity firms often work with government customers and employ people whose expertise or responsibilities involve security clearances. A clearance review affecting employees at a company can create practical uncertainty even when the company is not accused of misconduct. In this case, SentinelOne said the number of potentially affected employees was small and expected no material business effect, but the episode highlighted the overlap between private cybersecurity work and national-security policy.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
It also raised a broader concern among critics: whether government action against former officials and their employers could chill public disagreement, including on election security. That concern is distinct from proving that retaliation occurred in this case. The central facts are narrower: Trump’s memorandum ordered clearance and conduct reviews; Krebs left SentinelOne and said he needed to focus on the fight; and SentinelOne characterized his exit as personal while seeking to reassure customers that it did not expect material business disruption.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
