CRWD

CrowdStrike Holdings, Inc.

Next est. report 2026-12-01 · AMC

AI '25: Cloud Platform & Software AI '25: Phase 2 Deployment Agentic Utilities '26: Deterministic Telemetry Agentic Utilities '26: Governance & Zerotrust Business Services '26: AI Governance, Trust & Compliance Data Owners '25: Cybersecurity & Threat Intelligence Software '24: CyberSecurity

Loading…

Loading chart…

Overview

CrowdStrike Holdings, Inc. delivers cloud-native cybersecurity, protecting endpoints, cloud, identity, and data via its Falcon platform. It serves as critical A

CrowdStrike Holdings, Inc. delivers cloud-native cybersecurity, protecting endpoints, cloud, identity, and data via its Falcon platform. It serves as critical AI infrastructure, offering solutions like AIDR and Next-Gen SIEM to secure AI adoption. Primarily subscription-based (around 95%), with 65% U.S. revenue, it serves global enterprises to small businesses through direct and partner channels.

Search Keywords Brand Product

Falcon platform
Falcon Flex
AIDR
AI Detection and Response
Falcon Cloud Security
Falcon Next-Gen SIEM
Falcon Identity
Falcon Shield
Falcon Exposure Management
AgentWorks
Signal
AI cybersecurity
AI security infrastructure
Agentic AI security
Zero Trust security
cybersecurity platform
endpoint security
cloud security
identity protection
SIEM transformation
vulnerability management
cyber attack prevention
data exfiltration prevention
AI usage visibility
AI governance

Search Keywords Event Phrases

Mythos moment
Falcon conference
Q2 FY27 earnings
CrowdStrike financial results

Search Keywords Policy Regulatory

AI governance guardrails
Zero Trust mandates

What They Do (Plain English & Analogies): CrowdStrike acts like a digital immune system for businesses, constantly watching over all their digital assets – from computers and servers to cloud environments and even the digital identities of users and AI programs. Instead of just blocking known threats, it uses a single, lightweight 'sensor' on each device to gather massive amounts of data. This data is then analyzed by powerful artificial intelligence (AI) in the cloud to spot and stop even brand-new, sophisticated cyberattacks in real-time. Think of it as a highly advanced security guard that not only protects your physical building but also monitors every employee, visitor, and even autonomous robots (AI agents) to ensure they're behaving correctly and not causing harm. CrowdStrike aims to be the foundational security layer for businesses adopting AI, helping them consolidate many different security tools into one unified platform to make security simpler, faster, and more effective, ultimately promising to 'stop breaches.'
Very Brief History: CrowdStrike Holdings, Inc. was founded in 2011 and is headquartered in Austin, Texas. The company pioneered cloud-delivered endpoint protection and has since expanded its Falcon platform to encompass cloud workloads, identity, and data. Its evolution has been marked by the development of its single-agent, cloud-native architecture and strategic acquisitions, including Onum (real-time telemetry pipeline management) in August 2025, Pangea (AI-enabled detection and response) in September 2025, SGNL.ai (continuous identity and authorization) in February 2026, and Seraphic (browser runtime security) also in February 2026. The company recently announced the acquisition of XM Cyber's technology assets, expected to close in the second half of FY27.
"Street Stereotype": CrowdStrike is widely perceived as a leading, innovative cybersecurity platform company, particularly strong in endpoint detection and response (EDR). It is increasingly seen as the 'AI-era security leader' due to its AI-native Falcon platform, Charlotte AI, and its intense focus on securing the expanding attack surface created by AI adoption. Investors are currently focused on its ability to sustain high growth through platform expansion (Next-Gen SIEM, Cloud, Identity) and the continued success of its Falcon Flex licensing model in driving customer consolidation and Annual Recurring Revenue (ARR) acceleration, especially in the context of the 'Mythos inflection point' where AI adoption necessitates robust cybersecurity.
Subsidiaries On Linked In*: {"subsidiaries":[]}
Customer Sectors & Example Clients: CrowdStrike serves a wide range of sectors including Financial Services, Logistics, Consumer Packaged Goods, Cloud Providers (Neo cloud/token factories), Government Agencies (US Federal), Healthcare, Professional Services (MSSPs, Incident Response firms), Higher Education, and Mid-market businesses. Specific example clients mentioned in the transcript include a Frontier lab, a European automotive manufacturer, a large financial services firm, one of the world's largest banks, a major American power provider, a global religious organization, Kroll (an MSSP partner), and Accenture (a GSI partner). Other examples include an Australian health care provider and an American manufacturing firm.
New Customers / Segments They'Re Targeting: CrowdStrike is actively targeting new customer segments driven by the 'AI revolution.' This includes 'Frontier Labs' and 'AI native companies' that are involved in creating and deploying AI, as they have a critical need to protect their rapidly expanding AI infrastructure and workloads. The company is also seeing significant traction in the SMB (small and medium-sized business) space through its MSSP (Managed Security Service Provider) partners like Kroll and Accenture Edge, which are standardizing on the Falcon platform. Essentially, any organization adopting or developing AI is a target, as AI expands the attack surface and necessitates new security measures.
Supply Chain And Sourcing Geographies: The provided information does not contain specific details about CrowdStrike's supply chain or sourcing geographies for its products or components. CrowdStrike primarily provides software and cloud-delivered services, suggesting its supply chain is largely digital and focused on software development, cloud infrastructure, and data centers rather than physical goods. Therefore, specific geographic sourcing details for physical components are not applicable or disclosed.
Sales Geographies And Expansion Plans: CrowdStrike sells its products and services globally. In the fiscal second quarter of 2027, approximately 65% of its revenue came from the U.S., with the remaining 35% from international geographies. The company noted broad-based strength across its major regions, which drove international year-over-year revenue growth acceleration for the fifth consecutive quarter. Recent wins include a European automotive manufacturer and an Australian health care provider, highlighting its strong international presence. While management has not explicitly stated plans to expand into new specific geographies beyond its current global presence, the accelerating international growth indicates a continued focus on expanding within these existing markets.
How Key Themes May Help/Hurt: The buildout of the 'Agentic Utilities '26: Governance & Zerotrust' theme is a significant tailwind for CrowdStrike. As autonomous AI agents proliferate, the need for robust governance and Zero Trust security becomes paramount. CrowdStrike is directly addressing this by positioning its Falcon platform as the critical infrastructure layer for AI adoption, providing the necessary visibility, control, and enforcement for AI agents. Its offerings like AIDR, Next-Gen Identity (including Falcon Shield and Signal for non-human identities), and Falcon Exposure Management directly align with the theme's focus on managing agent behavior, controlling costs, preventing data leaks, and enforcing least-privilege access for agentic workflows. The company's ability to set policy and enforce guardrails for AI usage, track token costs, and provide real-time granular access models for both human and non-human users positions it as a strategic partner for implementing AI governance. This theme helps CrowdStrike by expanding its total addressable market, driving demand for its platform consolidation strategy, and reinforcing its competitive differentiation in securing the evolving AI attack surface.

3 Main Long-Term Bull Details

AI-Driven Market Expansion and Leadership: CrowdStrike is uniquely positioned as critical AI infrastructure, with the 'Mythos inflection point' driving unprecedented demand for AI security. The rapid proliferation of AI, including the 'agentic workforce,' creates a massive, expanding attack surface that necessitates CrowdStrike's independent protection layer for visibility, compliance, and enforcement, providing a generational opportunity for growth. 2. Platform Consolidation and Falcon Flex Model: The Falcon platform's unified architecture and the Falcon Flex licensing model are powerful drivers for customer consolidation, leading to higher module adoption, increased Annual Recurring Revenue (ARR), and improved customer stickiness. This model makes it easier for customers to adopt more of the Falcon platform faster, driving continuous net ARR growth and expanding CrowdStrike's wallet share within enterprises. 3. Structural Data Moat and Efficacy: CrowdStrike's competitive moat is becoming an 'opportunity ocean' due to its vertically integrated, net data creator status. Its proprietary, real-time telemetry and expert-labeled data, collected over 15 years, provide a structural advantage that enables superior, deterministic outcomes in stopping breaches, which no large language model (LLM) provider can replicate.

3 Main Long-Term Bear Details

Intense Competition and Bundling: Intense competition from large players like Microsoft, which continues to bundle security offerings, and other specialized vendors, could lead to pricing pressure and slower market share gains. While CrowdStrike is displacing legacy solutions, the rapid evolution of AI security tools and the company's premium valuation could still lead to market skepticism and impact future share performance. 2. Sustainability of Flex Model and ARR Acceleration: Despite strong current results, the long-term sustainability of Falcon Flex's accelerated demand and re-Flex velocity remains a key debate. There's a risk that initial demand pull-forward from the 'Mythos moment' may not sustain at the same rapid pace as early cohorts mature, potentially impacting future ARR growth rates if new customer acquisition or expansion slows, especially given the early innings of AI adoption. 3. Execution Risk in New Markets and Acquisitions: Rapid expansion into new AI-driven offerings and deep integrations, including recent acquisitions like Signal and Seraphic, introduce execution risk. Successfully integrating these diverse capabilities into the Falcon platform and ensuring widespread customer adoption at scale presents operational and go-to-market challenges. The 'democratization of destruction' by AI-powered adversaries also creates a complex, rapidly evolving landscape for AI agent governance.

Competitors And Differentiation: CrowdStrike competes with a range of cybersecurity vendors, including large players like Microsoft (which bundles security offerings) and Palo Alto Networks, as well as specialized vendors in areas like EDR, SIEM, vulnerability management, and cloud security. CrowdStrike differentiates itself through its cloud-native Falcon platform, which uses a single, lightweight agent to provide comprehensive protection across endpoints, cloud workloads, identities, and data. Its key differentiators include: 1. **AI-Native Approach**: Positioning itself as 'cybersecurity's infrastructure layer for AI adoption,' CrowdStrike leverages its deep data expertise and AI models to detect and stop agentic attacks, offering products like AIDR (AI Detection and Response) which is seen as a new, significant growth pillar. 2. **Platform Consolidation**: The Falcon platform aims to replace multiple legacy point products (e.g., legacy AV, EDR, SIEM, vulnerability management) with a unified solution, offering superior outcomes, immediate platform consolidation, and better economics. 3. **Falcon Flex Model**: This licensing model drives platform adoption and expansion, allowing customers to easily consume multiple modules and leading to significant ARR uplift upon conversion and re-Flexing. 4. **Real-time Detection & Response**: Its ability to outpace new real-time adversaries, particularly AI agents, and provide continuous prioritization for exposure management sets it apart from antiquated solutions. 5. **Data Moat**: CrowdStrike emphasizes its unique and rich threat data, collected over 15 years, which is used to train its AI models, providing a distinct advantage in identifying and mitigating threats.
Recent Performance & What The Market'S Focused On: CrowdStrike delivered a record fiscal second quarter 2027, exceeding expectations across all guided metrics. The company reported an all-time record net new ARR of $333 million, accelerating to 51% year-over-year growth, and ending ARR reached $5.84 billion, up more than 25% year-over-year. Total revenue accelerated for the fifth consecutive quarter, reaching $1.47 billion, up 26% year-over-year. CrowdStrike also achieved record free cash flow of $377 million and record operating income of $372 million. The Falcon Flex subscription model saw significant acceleration, with ending ARR from Flex accounts surpassing $2.29 billion, accelerating to 101% year-over-year growth, and AIDR ending ARR nearly tripled versus Q1. The market is focused on the durability of this strength, particularly the continued acceleration of net new ARR, the sustained success and expansion of the Falcon Flex model, and the rapid growth of AI-driven products like AIDR. Investors are closely watching how CrowdStrike translates the 'Mythos moment' and unprecedented AI-driven demand into sustained ARR contribution from its rapidly growing AIDR offering, alongside continued expansion of its Next-Gen SIEM, Cloud Security, and Identity platforms.

Revenue Segments And Estimated Mix: Subscription Revenue — Mix: ~95.2%; Source: Q2 FY27 transcript; Trend: Grew 27% year-over-year in Q2 FY27, accelerating sequentially for the fifth consecutive quarter.
Professional Services Revenue — Mix: ~4.8%; Source: Q2 FY27 transcript; Trend: All-time record of $71 million in Q2 FY27.
Product Brands: Falcon platform
Falcon Flex
Falcon Endpoint Security
Falcon Cloud Security
Falcon Next-Gen Identity Security
Falcon for SaaS
Falcon Shield
Falcon Next-Gen SIEM
Falcon Onum
AIDR (AI Detection and Response)
Charlotte AI
AgentWorks
Signal
Seraphic
Falcon Exposure Management
Project Glasswing
Project QuiltWorks
Daybreak (OpenAI GPT-5.5 Cyber)

Bull / Bear Details

CrowdStrike is solidifying its position as the essential AI security layer, with Q2 FY27 marking its best quarter ever as the 'Mythos inflection point' transfor

Thesis

CrowdStrike is solidifying its position as the essential AI security layer, with Q2 FY27 marking its best quarter ever as the 'Mythos inflection point' transforms into sustained acceleration. Record net new ARR, significantly raised FY27 guidance, and AIDR's explosive growth underscore market leadership. Continued platform expansion across SIEM, Cloud, and Identity, coupled with the successful Falcon Flex model, makes the bull case compelling as of 2026-08-28.

Bull case

CrowdStrike is uniquely positioned as critical AI infrastructure, with the 'Mythos moment' driving unprecedented demand for AI security. Q2 FY27 delivered record net new ARR of $333 million, accelerating to 51% YoY growth, and AIDR's ending ARR nearly tripled versus Q1, with management believing it can be larger than EDR.
The Falcon Flex model continues to drive exceptional platform stickiness and module adoption. Ending ARR from Flex accounts surpassed $2.29 billion, accelerating to 101% YoY growth. Record Flex deal volume added over 935 accounts, and repeat re-Flex customers saw an average ending ARR uplift of 53%, validating continuous growth and customer consolidation.
CrowdStrike's strong financial performance and significantly raised guidance reflect robust market momentum. Total revenue accelerated for the fifth consecutive quarter to $1.47 billion (up 26% YoY). The FY27 net new ARR guidance was raised by an additional 630 basis points, now expecting 34% YoY growth at the midpoint, demonstrating strong confidence in future growth.

Bear case

Intense competition from large players like Microsoft, which continues to bundle security offerings, and other specialized vendors, could lead to pricing pressure and slower market share gains. While CrowdStrike is displacing legacy solutions, the rapid evolution of AI security tools and its premium valuation could still lead to market skepticism.
Despite strong current results, the long-term sustainability of Falcon Flex's accelerated demand and re-Flex velocity remains a key debate. There's a risk that initial demand pull-forward from the 'Mythos moment' may not sustain at the same rapid pace as early cohorts mature, potentially impacting future ARR growth rates if new customer acquisition or expansion slows.
Rapid expansion into new AI-driven offerings and deep integrations, including recent acquisitions like XM Cyber (though not bringing ARR/revenue), introduces execution risk. Successfully integrating these diverse capabilities into the Falcon platform and ensuring widespread customer adoption at scale presents operational and go-to-market challenges, especially with AI agents 'going rogue' and breaking the exploit sound barrier.

Bull / Bear Case

Bear Case: Intense competition from large players like Microsoft, which continues to bundle security offerings, and other specialized vendors, could lead to pricing pressure and slower market share gains. Despite strong current results, the long-term sustainability of Falcon Flex's accelerated demand and re-Flex velocity remains a key debate, with a risk that initial demand pull-forward from the 'Mythos moment' may not sustain at the same rapid pace. Rapid expansion into new AI-driven offerings and deep integrations, including acquisitions like XM Cyber (which brings no ARR/revenue), introduces execution risk. Successfully integrating these diverse capabilities and ensuring widespread customer adoption at scale presents operational and go-to-market challenges, especially with AI agents 'going rogue' and breaking the exploit sound barrier.
Bull Case: CrowdStrike is uniquely positioned as critical AI infrastructure, with the 'Mythos moment' driving unprecedented demand for AI security. Q2 FY27 delivered record net new ARR of $333 million, accelerating to 51% YoY growth, and AIDR's ending ARR nearly tripled versus Q1, with management believing it can be larger than EDR. The Falcon Flex model continues to drive exceptional platform stickiness and module adoption, with ending ARR from Flex accounts surpassing $2.29 billion, accelerating to 101% YoY growth. This, coupled with strong financial performance, including total revenue accelerating for the fifth consecutive quarter to $1.47 billion (up 26% YoY), and significantly raised FY27 net new ARR guidance (34% YoY growth at midpoint), reflects robust market momentum and confidence in future growth.
More Compelling & Why: Bull. The market's strong positive reaction, with the stock outperforming the SPY by over 22% post-earnings, indicates robust confidence in CrowdStrike's execution and market position. While the company trades at a premium Price-to-Sales (P/S) ratio, the 'Mythos moment' has clearly translated into accelerating financial results, particularly in net new ARR and AIDR growth, positioning CrowdStrike as the indispensable AI security layer. A significant deceleration in net new ARR growth below guidance or evidence of slowing Falcon Flex expansion would flip my view.

Key Factors5 rows

Key Factor	Why It Matters	What To Watch	What It Signals	Where/How To Track	Free Alt Data	Paid Alt Data
Falcon Flex Ending ARR Growth and Re-Flex Activity	Falcon Flex's continued acceleration and high re-flex rates confirm the effectiveness of CrowdStrike's licensing model in driving platform adoption, customer stickiness, and expanding wallet share.	Ending ARR from Falcon Flex accounts year-over-year growth rate, number of new Flex accounts added, and average ARR uplift from re-flex customers.	Bullish: Ending ARR from Flex accounts year-over-year growth for Q3 FY27 remains at or above 101%; new Flex accounts added exceed 935; average ending ARR uplift from repeat re-flex customers remains at or above 53%.	Company earnings call transcripts and investor presentations.	None directly applicable.	Apptopia/Sensor Tower: Enterprise software adoption trends (indirect proxy).
Project QuiltWorks Pipeline and GSI Business Growth	The growing pipeline from Project QuiltWorks and strong GSI business growth indicate successful leverage of the partner ecosystem to expand market reach and drive larger, more complex deals, especially in AI security transformations.	Total contract value pipeline from Project QuiltWorks partners and year-over-year growth of the GSI business.	Bullish: Project QuiltWorks pipeline exceeds $400 million in future updates; GSI business year-over-year growth remains at or above 50%.	Company earnings call transcripts, investor presentations, and partner announcements.	Partner press releases, industry news on GSI cybersecurity engagements.	Channel partner sales data (if available, highly proprietary).
Next-Gen SIEM, Identity, and Cloud Segment Performance	Strong performance in these adjacent markets demonstrates CrowdStrike's successful platform expansion beyond endpoint, capturing a larger share of the cybersecurity market and diversifying revenue streams. The individual growth rates provide granular insight into the health of these critical segments.	Year-over-year ending ARR growth rates for Next-Gen SIEM, Identity, and Cloud businesses, and reported net new ARR from the combination of these businesses.	Bullish: Next-Gen SIEM ending ARR growth remains at or above 60% YoY; Identity ending ARR growth remains at or above 34% YoY; Cloud ending ARR growth remains at or above 29% YoY; and the combined businesses report record net new ARR in Q3 FY27.	Company earnings call transcripts and investor presentations.	Industry reports on SIEM, Identity, and Cloud security market growth.	Gartner/Forrester reports: Market share and growth rates for SIEM, Identity, Cloud security.
AIDR (AI Detection and Response) Ending ARR Growth	AIDR's rapid growth validates CrowdStrike's leadership in the emerging AI security market, indicating successful monetization of the 'Mythos moment' and a significant new revenue pillar.	AIDR ending ARR sequential growth rate in future quarters.	Bullish: AIDR ending ARR sequential growth rate for Q3 FY27 reported at or above 'nearly tripled' (approximately 200% sequential growth).	Company earnings call transcripts and investor presentations.	Industry news articles on AI security product adoption.	AlphaSense/Sentieo: Keyword search for 'AIDR ARR' in competitor transcripts.
Raised Full Year FY27 Net New ARR Guidance	A significant increase in full-year guidance demonstrates strong management confidence in sustained demand and execution, directly impacting investor sentiment and valuation.	CrowdStrike's reported Full Year FY27 Net New ARR guidance in future earnings calls. Specifically, watch for the midpoint of expected net new ARR and the year-over-year growth rate.	Bullish: Full Year FY27 Net New ARR guidance raised above $1.35 billion (midpoint of current guidance) or further increases from the current 34% YoY growth expectation.	Company earnings releases, investor relations website (ir.crowdstrike.com), SEC filings (Form 8-K, 10-Q).	Financial news outlets (e.g., Reuters, Bloomberg), analyst reports.	Bloomberg Terminal: Consensus estimates for ARR.

Key Reported Metrics, Reratings Triggers & Results3 rows

Total Revenue reflects CrowdStrike's overall financial performance and market penetration. Its consistent acceleration signals strong execution and increasing d

Upcoming print · 2026-12-01

Key reported metrics
Metric	Last period	Why it matters
Total Revenue	$1.47 billion (26% y/y growth)	Total Revenue reflects CrowdStrike's overall financial performance and market penetration. Its consistent acceleration signals strong execution and increasing demand for its cybersecurity solutions, particularly driven by AI.
Falcon Flex Ending ARR Growth	$2.29 billion (101% y/y growth); >630 re-Flex accounts (up 6x y/y); 53% average ARR uplift for repeat re-flex customers	Falcon Flex ending ARR demonstrates the success of CrowdStrike's strategic licensing model in driving platform adoption and customer expansion, validating its ability to capture wallet share and accelerate overall ARR.
Net New ARR	$333 million (51% y/y growth); FY27 Net New ARR guidance raised to $1.35 billion (34% y/y growth at midpoint)	Net New ARR is a direct measure of CrowdStrike's ability to acquire new customers and expand existing relationships, signaling robust market leadership and future revenue potential, especially with AI-driven demand.

Last reported · 2026-08-26

Key reported metrics			Rerating thresholds			Earnings results
Metric	Last period	Why it matters	What's needed for rerating	Rerating context	Earnings date	Actual reported	Hit target?	Notes
Total Revenue	26%	Total Revenue reflects CrowdStrike's overall financial performance and market penetration. Its consistent acceleration for four quarters, exceeding guidance, signals strong execution and increasing demand for its cybersecurity solutions.	CrowdStrike's Total Revenue for Q2 FY27 (ending July 31, 2026) needs to exceed $1.475 billion. This would represent year-over-year growth of at least 26%, matching or accelerating beyond the 26% growth reported in Q1 FY27, and significantly surpassing the company's guidance of $1.436 billion to $1.442 billion.	Exceeding this threshold signals continued acceleration in financial performance and market penetration. It validates robust demand for AI-powered cybersecurity and the Falcon Flex model, reinforcing CrowdStrike's position as critical AI infrastructure and justifying a higher valuation amidst high market expectations.	2026-08-26	$1.47 billion (26% y/y growth)	Partially	Total revenue reached $1.47 billion, growing 26% year-over-year, which matched the prior quarter's growth and exceeded the company's guidance range. However, it narrowly missed the absolute revenue rerating trigger of exceeding $1.475 billion, falling short by $5 million. Despite this slight miss on the absolute number, the accelerated growth for the fifth consecutive quarter and exceeding guidance were positive indicators.
Ending ARR from Falcon Flex accounts	99%	Falcon Flex ending ARR demonstrates the success of CrowdStrike's strategic licensing model in driving platform adoption and customer expansion. Its sustained high growth validates the company's ability to capture wallet share and accelerate overall ARR.	For the stock to rerate higher, CrowdStrike's Ending ARR from Falcon Flex accounts needs to demonstrate year-over-year growth exceeding 99% for Q2 FY27. Alternatively, if year-over-year growth remains at 99%, a significant increase in re-Flex customers (above 480) with an average ARR uplift at or above 26% (and 51% for multiple re-Flexes) would also be crucial.	This metric validates the Falcon Flex model's success in driving platform stickiness, module adoption, and customer expansion. Exceeding this threshold reinforces CrowdStrike's market leadership and ability to accelerate overall ARR, justifying a higher valuation amidst competitive pressures and the 'Mythos inflection point' in AI security.	2026-08-26	$2.29 billion (101% y/y growth); >630 re-Flex accounts (up 6x y/y); 53% average ARR uplift for repeat re-flex customers	Yes	Ending ARR from Falcon Flex accounts surpassed $2.29 billion, accelerating to 101% year-over-year growth, comfortably exceeding the 99% rerating trigger. The company also reported record re-flex activity with over 630 accounts (well above the 480 threshold) and an average ARR uplift of 53% for repeat re-flex customers, exceeding the 51% target. This demonstrates strong success and expansion of the Falcon Flex model.
Net New ARR	32%	Net New ARR directly measures CrowdStrike's ability to acquire new customers and expand existing relationships. Its acceleration, driven by AI demand and Falcon Flex, signals robust market leadership and future revenue potential.	CrowdStrike's Net New ARR for Q2 FY27 needs to comfortably exceed its own guidance of $284 million to $286 million, ideally reaching at least $288 million. This would represent year-over-year growth at or above 30% over Q2 FY26's $221 million. Additionally, for a sustained higher rerating, the company should raise its full-year FY27 Net New ARR guidance above the current $1.279 billion to $1.303 billion range.	Exceeding these Net New ARR thresholds would validate the sustained success of CrowdStrike's Falcon Flex model and AI-driven platform expansion, particularly AIDR. It would demonstrate robust customer adoption and reacceleration, reinforcing market leadership and justifying its premium valuation amidst competitive pressures and the 'Mythos inflection point'.	2026-08-26	$333 million (51% y/y growth); FY27 Net New ARR guidance raised to $1.35 billion (34% y/y growth at midpoint)	Yes	CrowdStrike reported an all-time record net new ARR of $333 million, significantly exceeding its guidance and demonstrating accelerated year-over-year growth of 51%. The company also raised its full-year FY27 net new ARR guidance to $1.35 billion at the midpoint, well above the rerating threshold, indicating strong confidence in future growth.

Key Questions

Can CrowdStrike sustain the accelerated net new ARR growth, particularly in Q3 FY27 (guided to $343-$347 million, 29-31% YoY growth), and maintain the strong re

Can CrowdStrike sustain the accelerated net new ARR growth, particularly in Q3 FY27 (guided to $343-$347 million, 29-31% YoY growth), and maintain the strong re-Flex velocity (average 53% uplift for repeat re-Flexes) of its Falcon Flex model, which now surpasses $2.29 billion in ending ARR growing 101% year-over-year, to validate its market leadership and justify its premium valuation amidst the 'Mythos inflection point' and increasing AI-driven demand?

Question 2: How effectively will CrowdStrike translate the 'Mythos inflection point' and unprecedented AI-driven demand into sustained, accelerated ARR contribution from its rapidly growing AIDR offering (which nearly tripled ending ARR sequentially in Q2), which management believes will be larger than EDR, alongside continued expansion of its Next-Gen SIEM (now surpassing $695 million ending ARR), Cloud Security, and Identity platforms (with record Q2 net new ARR from these combined businesses), leveraging its platform and ecosystem to secure the expanding AI attack surface?
Question 3: Can CrowdStrike maintain its strong non-GAAP gross margin (79% in Q2, 81% subscription) and operating margin (25% in Q2), alongside its competitive win rates in the rapidly evolving AI security and Next-Gen SIEM markets, by leveraging its unique AI-native platform and 'first-party data advantage' to differentiate against both traditional and emerging competitors and solidify its position as the leading AI security layer, especially given the 'arms race' and 'agentic adversary' dynamics?

Earnings Transcript Summary4 rows

2026-08-26 · 2027Q2 Earnings Call

3 Things Management Is Most Focused On	Call Takeaway & Tone	Prior Quarter'S Y/Y Growth By Segment	3 Things Analysts Most Pressed On (And Mgmt Responses)	Revenue Segments
3 Things Management Is Most Focused On1. AI as a demand driver and critical infrastructure: Management consistently highlighted the 'Mythos moment' as an inflection point, with AI driving increased cyber attacks and spending, positioning CrowdStrike's Falcon platform as the essential infrastructure layer for AI adoption. George Kurtz stated, 'The world came to understand that cybersecurity is a necessity for AI adoption. New models created a new risk environment with no turning back.' and 'CrowdStrike's quarter demonstrates the market trusting us more than ever to secure their adoption of AI with cybersecurity's single platform of choice.' 2. Success and expansion of the Falcon Flex subscription model: Management emphasized the record performance of Falcon Flex, its 'FlexFirst' go-to-market strategy, and the significant ARR uplift from both new customer adoption and existing customer re-flexes. George Kurtz noted, 'This quarter, we delivered record flex deal volume adding more than 935 flex accounts... When Falcon customers convert from standard subscriptions to flex, we see a greater than 40% average ending ARR uplift.' Burt Podbere added, 'Falcon Flex continues to be a key driver of our platform consolidation with this quarter showcasing the power of our FlexFirst strategy.' 3. Platform consolidation and accelerated growth in next-gen modules (AIDR, SIEM, Identity, Cloud, Exposure Management): Management detailed strong performance across various products, including the acceleration of the Endpoint business, the rapid growth of AIDR, and record net new ARR from the combined Cloud, Identity, and Next-Gen SIEM businesses. George Kurtz stated, 'We delivered record Q2 net new ARR from the combination of these businesses.' and 'AIDR ending ARR nearly tripled versus Q1 as customers embrace our frictionless approach to AI visibility and security.'	Call Takeaway & ToneThe call conveyed a highly positive, confident, and optimistic tone. Management repeatedly emphasized that the 'Mythos moment' has transformed into significant acceleration across all key financial metrics, making Q2 FY27 the 'best quarter in company history'. The core takeaway is that the urgent need for AI security is driving unprecedented demand for CrowdStrike's Falcon platform, which is successfully positioned as the critical infrastructure layer for AI adoption. This is evidenced by record net new ARR, accelerating growth in ending ARR and total revenue, and exceptional performance of the Falcon Flex model and next-gen modules like AIDR, SIEM, Cloud, and Identity. Management expressed strong conviction in continued durable, profitable growth, significantly raising the FY27 outlook.	Prior Quarter'S Y/Y Growth By SegmentNet new ARR: 32% year over year; Ending ARR: 24% year over year; Total revenue: 26% year over year; Subscription revenue: 26% year over year; Professional services revenue: 23% year over year; Falcon Flex accounts ending ARR: 99% year over year; AIDR ending ARR: Not explicitly provided as Y/Y growth for prior quarter (only sequential growth of >250%); Identity business ending ARR: Not explicitly provided for prior quarter; Falcon Shield ending ARR: Not explicitly provided for prior quarter; Privileged account security offering ending ARR: Not explicitly provided for prior quarter; Cloud ending ARR: Not explicitly provided for prior quarter; Next gen SIEM ending ARR: Not explicitly provided for prior quarter; GSI business: Not explicitly provided for prior quarter; Cloud marketplaces deal value: Not explicitly provided for prior quarter	3 Things Analysts Most Pressed On (And Mgmt Responses)1. Durability of AI-driven strength/Mythos moment: Analysts inquired about the sustainability of the demand acceleration seen post-Mythos. Mgmt Response: George Kurtz affirmed the durability, citing the raised FY27 outlook and the ongoing need for security as companies deploy AI. He believes the AIDR business can be larger than EDR due to the proliferation of agents. Burt Podbere reinforced this with a record Q3 pipeline and a significant increase in full-year guidance. 2. Product strategy for securing agents in production/AI governance: Analysts questioned how CrowdStrike advises clients on products needed to move AI agents from sandboxed environments to production with real enterprise data, and its role in AI governance. Mgmt Response: George Kurtz explained that CrowdStrike provides comprehensive protection across the threat spectrum, including an identity control plane for non-human identities, data protection, runtime visibility of agents, exposure management, and network connectivity monitoring. He highlighted the ability to set policies, enforce guardrails, track tokens, and manage costs for AI usage. 3. AIDR versus core EDR platform, and AIDR's ramp/potential size: Analysts sought clarification on whether AIDR is incremental to EDR and the context of its rapid growth. Mgmt Response: George Kurtz clarified that AIDR is 'separate and incremental,' a new module priced separately, and uses the same agent for friction-free deployment. He described its ramp as 'incredible' and believes it's a 'home run' because it offers unique value without requiring customers to deploy another agent.	Revenue SegmentsNet new ARR: 51% year over year growth; Ending ARR: >25% year over year growth; Total revenue: 26% year over year growth; Subscription revenue: 27% year over year growth; Professional services revenue: All-time record $71 million (Y/Y growth not explicitly provided for Q2 FY27); FalconFlex ending ARR: 101% year over year growth; Identity business ending ARR: 34% year over year growth; Falcon Shield ending ARR: >185% year over year growth; Privileged account security offering ending ARR: >35x year over year growth; Cloud ending ARR: >29% year over year growth; Next gen SIEM ending ARR: 60% year over year growth; GSI business: Nearly 50% year over year growth; Cloud marketplaces deal value: >30% year over year growth

2026-06-03 · 2027Q1 Earnings Call

3 Things Management Is Most Focused On	Call Takeaway & Tone	Prior Quarter'S Y/Y Growth By Segment	3 Things Analysts Most Pressed On (And Mgmt Responses)	Revenue Segments
3 Things Management Is Most Focused On1. AI as critical infrastructure and a demand driver: Management repeatedly emphasized that AI has dramatically risen in organizational visibility and funding priority, with CrowdStrike being understood as critical AI infrastructure. They highlighted the 'Mythos inflection point' where the world realized AI needs a cybersecurity ecosystem, driving unprecedented demand for Falcon to secure AI adoption and greenfield attack surfaces. 2. Success and expansion of the Falcon Flex subscription model: Management underscored the strong performance of the Falcon Flex model, citing record Q1 net new ARR from Flex accounts (nearly $2 billion ending ARR, growing 99% y/y), high Reflex customer numbers (480), and significant average Reflex uplift (26% and 51% for multiple Reflexes). They positioned Flex as the 'commercial harness to drive secure AI adoption.' 3. Platform consolidation and growth in Next-Gen SIEM, Cloud, and Identity: Management highlighted record Q1 net new ARR from the combination of these businesses, exceeding $2 billion in ending ARR. They emphasized their role in transforming the SOC with Charlotte AI, securing AI infrastructure in the cloud, and addressing the new identity opportunity in the AI era with offerings like Falcon for SaaS and Signal.	Call Takeaway & ToneThe call conveyed a highly positive and confident tone, emphasizing CrowdStrike's strong Q1 FY27 performance and its pivotal role in the 'AI revolution.' The key takeaway was that the 'Mythos inflection point' has dramatically accelerated demand for cybersecurity, positioning CrowdStrike as critical AI infrastructure and the 'picks and shovels' for the world's largest technology gold rush. Management expressed strong conviction in continued accelerated growth, driven by the Falcon platform's ability to secure AI adoption, the success of the Falcon Flex model, and the rapid expansion of next-gen modules like AIDR, SIEM, Cloud, and Identity. The announcement of a 4-for-1 stock split further underscored management's confidence in the company's future.	Prior Quarter'S Y/Y Growth By SegmentNet new ARR: 47% year-over-year. Ending ARR: 24% year-over-year. Total revenue: 23% year-over-year. Subscription revenue: 23% year-over-year. Professional services revenue: 26% year-over-year. Operating income (non-GAAP): 44.9% year-over-year. Falcon Flex accounts ending ARR: over 120% year-over-year. Falcon for SaaS ending ARR: Not explicitly provided for the prior quarter.	3 Things Analysts Most Pressed On (And Mgmt Responses)1. Near-term drivers for raised net new ARR guidance and the timing of the AI inflection: Analysts inquired about the specific factors driving the significant raise in net new ARR guidance and when the 'Mythos moment' inflection in demand began to materialize. Mgmt Response: Burt Podbere attributed the confidence to strong module adoption rates, robust gross and net retention, a record Q2 pipeline, and the 'Mythos moment' creating an inflection point around AI. George Kurtz clarified that the inflection started at the end of March, slightly before Mythos, driven by customers needing to protect AI workloads to deploy AI faster, with thousands of interactions post-Mythos. 2. Source of AI security spending (incremental vs. reallocation) and its impact on budgets: Analysts questioned whether the current AI tailwind represents incremental security spending or a reallocation of existing budgets, and where this money is coming from within relatively set budgets. Mgmt Response: George Kurtz stated that the spending is largely incremental, following the 'crazy inflection point' in frontier model adoption and 'jaw dropping' token spend. He noted that companies are finding new money for AI adoption, as they realize 'if you want to create AI, you need GPUs. If you wanna use AI, you need security.' 3. TAM for AIDR and competitive landscape: Analysts asked about the total addressable market (TAM) for AIDR, especially relative to the forecasted $2.5 trillion AI market, and CrowdStrike's competitive advantage in this early market. Mgmt Response: George Kurtz believes the AIDR market will be 'larger than EDR' because of the sheer volume of agents (estimated 90 agents per employee) needing protection. He asserted CrowdStrike's 'right to win' due to its pioneering role in EDR, existing endpoint real estate (sensor), and unparalleled visibility into the agentic layer, allowing them to detect, block, and respond where AI actually runs.	Revenue SegmentsNet new ARR: up 32% year over year. Ending ARR: more than 24% growth year over year. Total revenue: up 26% year over year. Subscription revenue: up 26% year over year. Professional services revenue: up 23% year over year. Operating income: up 62% year over year. Falcon Flex accounts ending ARR: growing 99% year over year. Falcon for SaaS ending ARR: growing nearly 4x year over year.

2026-03-03 · 2026Q4 Earnings Call

3 Things Management Is Most Focused On	Call Takeaway & Tone	Prior Quarter'S Y/Y Growth By Segment	3 Things Analysts Most Pressed On (And Mgmt Responses)	Revenue Segments
3 Things Management Is Most Focused On1. AI as a Business Accelerant and Security Necessity: Management repeatedly emphasized that AI is driving elevated demand for the Falcon platform and is a key accelerant for their business. They highlighted that AI is also weaponizing adversaries, making AI security a necessity at every layer of the new AI stack, from GPU foundations to AI applications. CrowdStrike positions itself as an "AI adoption accelerator" and a "catalyst for enterprise AI adoption" by securing AI usage and providing visibility, compliance, and enforcement. 2. Expansion and Success of the Falcon Flex Subscription Model: The Falcon Flex model was a central theme, described as "revolutionary" and "turbocharging our land-and-expand motion." Management detailed its success with record ending ARR from Flex accounts, a high number of new Flex customers, and significant ARR lift from "re-Flex" transactions, showcasing its effectiveness in driving platform adoption and customer value. 3. Platform Consolidation and Growth in Next-Gen Segments (Identity, Cloud, SIEM): Management highlighted the strong performance and strategic importance of their Next-Gen Identity, Cloud, and Next-Gen SIEM businesses, which collectively grew over 45% year-over-year. They discussed recent acquisitions (SGNL.ai, Seraphic) to enhance these areas, aiming to consolidate security needs onto the Falcon platform, reduce TCO for customers, and address critical threat vectors like identity.	Call Takeaway & ToneThe overall takeaway from CrowdStrike's Q4 FY26 earnings call was overwhelmingly positive and confident. Management reported a "blockbuster Q4" and "best year yet," exceeding expectations across all guided metrics, driven by strong organic growth and the success of the Falcon Flex model. The tone was highly optimistic, emphasizing CrowdStrike's leadership in the "AI revolution" as both an enabler and protector of AI adoption. Key themes included the structural advantage of CrowdStrike's data moat, the efficacy of its AI-native platform in stopping breaches, the continued success and expansion of the Falcon Flex model, and the accelerating growth of its Next-Gen Identity, Cloud, and Next-Gen SIEM businesses. Management expressed strong conviction in their ability to deliver durable, profitable growth in FY27 and beyond, fueled by AI-driven demand and platform consolidation.	Prior Quarter'S Y/Y Growth By SegmentNet new ARR grew 73% year-over-year. Ending ARR grew 23% year-over-year. Ending ARR for cloud, Next-Gen Identity, and Next-Gen SIEM collectively grew more than 40% year-over-year. Ending ARR from accounts that have adopted the Falcon Flex subscription model grew more than 200% year-over-year. Next-Gen Identity business ending ARR accelerated (no specific percentage provided). Falcon Shield ending ARR had a record net new ARR quarter, growing nearly 50% sequentially (no specific year-over-year ending ARR growth provided). Cloud business ending ARR accelerated (no specific percentage provided). Next-Gen SIEM business ending ARR accelerated (no specific percentage provided). Total revenue grew 22% year-over-year. Subscription revenue grew 21% year-over-year. Professional services revenue grew 38% year-over-year. EMEA and APAC year-over-year revenue growth accelerated compared to Q2 (no specific percentage provided).	3 Things Analysts Most Pressed On (And Mgmt Responses)1. Materialization and Market Share of Securing AI: Analysts questioned when securing AI would meaningfully contribute to ARR and how much of this new market opportunity would go to pure-play cyber vendors versus hyperscalers. Mgmt Response: George Kurtz stated that protecting AI is "happening today in terms of ARR growth," citing the 5x growth of AIDR. He emphasized that AI will drive growth not only in AIDR but also in protecting cloud attack surfaces, Next-Gen SIEM, and other AI-touching areas. He drew a parallel to cloud security, where hyperscalers didn't provide all security, and predicted pure-play vendors like CrowdStrike would partner with "AI hyperscalers" to provide better outcomes within the Falcon platform. 2. Agentic Security, Recent Acquisitions, and Identity as a Hurdle: Analysts asked for color on CrowdStrike's 10 other agents besides Charlotte, the customer journey for agentic deployments, and if identity is a main hurdle. Mgmt Response: George Kurtz confirmed identity as "one of the biggest threat vectors right now," with 80% of breaches being non-malware-based and often related to identity. He highlighted the strength of their identity stack, including the recent SGNL.ai acquisition for zero standing privilege and Seraphic for browser security, which protects the "front door" where attacks and AI interaction occur. He also reiterated AIDR's potential to become as essential as EDR due to compliance needs. 3. Durability of Next-Gen SIEM Moat against Frontier Labs and LLM Providers: Analysts expressed concerns that the open-ended SOC modernization opportunity for Next-Gen SIEM might be at risk from frontier labs and LLM providers, questioning the durability of CrowdStrike's moat. Mgmt Response: George Kurtz asserted that CrowdStrike is a "net data creator" with unique, real-time telemetry from its agents and Threat Graph, which is vastly different from what LLM providers do. He explained that while they leverage frontier models and have their own small language models, stopping breaches requires "sensors, real-time telemetry, continuous expert validation and enforcement, a closed-loop system, not a text model." He emphasized their "open model" allowing customers to create their own agents leveraging CrowdStrike's technologies, driving consolidation and stickiness.	Revenue SegmentsNet new ARR grew 47% year-over-year. Ending ARR accelerated to 24% growth year-over-year. Ending ARR for cloud, Next-Gen Identity, and Next-Gen SIEM collectively grew more than 45% year-over-year. Ending ARR from accounts that have adopted the Falcon Flex subscription model grew more than 120% year-over-year. Next-Gen Identity business ending ARR grew more than 34% year-on-year. Falcon Shield ending ARR grew more than 300% year-over-year. Cloud business ending ARR grew more than 35% year-over-year. Next-Gen SIEM business ending ARR grew over 75% year-over-year. Total revenue grew 23% year-over-year. Subscription revenue grew 23% year-over-year. Professional services revenue grew 26% year-over-year. EMEA and APAC year-over-year revenue growth accelerated compared to Q3.

2025-12-02 · 2026Q3 Earnings Call

3 Things Management Is Most Focused On	Call Takeaway & Tone	Prior Quarter'S Y/Y Growth By Segment	3 Things Analysts Most Pressed On (And Mgmt Responses)	Revenue Segments
3 Things Management Is Most Focused On1. AI Transformation and Security: Management is heavily focused on CrowdStrike's role in securing the AI era, specifically protecting the 'agentic workforce' and underlying AI infrastructure, emphasizing the expanding attack surface due to AI adoption and the necessity of CrowdStrike's platform as both the 'armor and intelligence layer'. 2. Single Platform Consolidation: A core focus is on driving customer consolidation onto CrowdStrike's single platform, particularly with Falcon NextGen SIEM as the foundation. Management highlights that this unified approach delivers superior outcomes, scalability, cost benefits, and ease of use compared to fragmented point products and legacy solutions. 3. Falcon Flex Adoption: Management is committed to making Falcon Flex the standard licensing model. They believe Flex makes it easier for customers to adopt more of the Falcon platform faster, leading to increased module utilization, larger deals, and longer-term customer value, contrary to traditional ELA models.	Call Takeaway & ToneThe overall takeaway is that CrowdStrike delivered an exceptional fiscal third quarter 2026, marked by significant acceleration across key financial metrics and strong customer demand. The tone of the call was highly positive and confident, with management emphasizing their strategic leadership in the AI-driven cybersecurity market. Key themes included the successful execution of their single platform strategy, the rapid adoption and expansion driven by the Falcon Flex model, and the strong performance of emerging modules like NextGen SIEM, Cloud, and Identity. Management expressed strong conviction in continued profitable growth and their ability to capitalize on the generational opportunity presented by AI adoption.	Prior Quarter'S Y/Y Growth By SegmentIn Q2 FY26, net new ARR was a record $221 million, showcasing accelerating net new ARR. Ending ARR grew more than 20% year over year. Total revenue grew 21% year over year. Subscription revenue grew 20% year over year. Cloud, next-gen identity, and next-gen SIEM solutions collectively grew more than 40% year over year. Next-Gen SIEM ARR grew more than 95% year over year. A specific year-over-year growth percentage for the endpoint business or Falcon Flex ending ARR was not explicitly provided for Q2 FY26 in the search results, making a direct comparison to Q3's acceleration difficult for these specific segments.	3 Things Analysts Most Pressed On (And Mgmt Responses)1. Emerging Segments' Performance and AI's Impact on Endpoint: Analysts inquired about the performance of emerging segments (NextGen SIEM, Identity, Cloud) after CCP initiatives and how AI is accelerating the core endpoint business. Mgmt Response: Management stated that emerging products performed 'fantastic,' with NextGen SIEM being an 'all-star standout,' Identity 'key to securing AI,' and strong Cloud wins driving consolidation. For endpoint, AI adoption at the edge (e.g., desktop AI apps) creates new risk factors, acting as a catalyst for renewed interest and protection. 2. SIEM Market Displacements and Observability Expansion: Analysts questioned the velocity of SIEM displacements, the value CrowdStrike captures, and the potential for further expansion into observability. Mgmt Response: Management likened the SIEM market to the early days of legacy AV replacement, driven by customer demand for better outcomes, faster results, and lower costs. They emphasized disruptive pricing due to existing EDR data and that all customers are NextGen SIEM enabled. They also confirmed viewing observability as a consolidation opportunity, leveraging existing technology and agent capabilities for IT data. 3. Sustainability of Falcon Flex and AWS Partnership Dynamics: Analysts probed the long-term sustainability of the Flex model's tailwind on NRR and how the strengthening AWS partnership might affect relationships with other hyperscalers. Mgmt Response: Management asserted that Flex drives 'continuous' net ARR growth, designed for easy customer expansion, leading to bigger and longer deals by enabling consolidation and lower TCO. Regarding AWS, they expressed extreme excitement, calling it a 'tremendous enabler' for new customer acquisition and a 'needed technology,' stating it doesn't preclude working with other players.	Revenue SegmentsNet new ARR grew 73% year over year. Ending ARR accelerated to 23% growth year over year. Total revenue grew 22% over Q3 of last year. Subscription revenue grew 21% over Q3 of last year. Ending ARR from accounts that have adopted the Falcon Flex subscription model grew more than 200% year over year. There was broad-based ending ARR acceleration across cloud, next-gen identity, and next-gen SIEM collectively, as well as acceleration in the endpoint business. Falcon NextGen SIEM had a record net new ARR quarter. FalconShield (part of the identity business) had a record net new ARR quarter, growing nearly 50% sequentially. Cloud delivered Q3 record net new ARR. US and APAC year-over-year revenue growth accelerated compared to Q2.

Transcript Tidbits5 rows

2026-08-26

About Expanding Eligible Market	About Competition	About The Broader Industry	Where Things Are Headed	Updates On Theme	Broader Themes Emerging	Bullish-Leaning Quotes (Short)	Bearish-Leaning Quotes (Short)	Hiring
About Expanding Eligible MarketCrowdStrike reported all-time record net new ARR of $333 million, accelerating to 51% year over year growth and beating guidance by over $45 million. Ending ARR growth accelerated for the fourth consecutive quarter, reaching $5.84 billion, up more than 25% year over year. Total revenue growth accelerated for the fifth consecutive quarter, reaching $1.47 billion, up 26% year over year. The company achieved all-time record net new ARR from new logos, and FalconFlex ending ARR surpassed $2.29 billion, accelerating to 101% year over year growth. Record Flex deal volume added more than 935 Flex accounts, exceeding the last three quarters combined. Flex new logo ARR contributed a record 34% of Q2 net new ARR, and record re-flex activity saw more than 630 accounts re-flex at least once, up 6x year over year, with an average ending ARR uplift of 53% for repeat re-flex customers. AIDR ending ARR nearly tripled versus Q1, while Next-Gen SIEM ending ARR surpassed $695 million. The identity business ending ARR grew 34% year over year to over $585 million, with Falcon Shield ending ARR growing over 185% year over year and privileged account security growing over 35x year over year. Cloud ending ARR reached $105 million, growing over 29% year over year. Project Quiltworks partners are collaborating on nearly $400 million of total contract value pipeline, and the GSI business grew nearly 50% year over year. Cloud marketplace transactions reached $600 million in deal value, representing over 30% year over year growth, with Microsoft Marketplace opening a new addressable market. The endpoint business accelerated for the fourth consecutive quarter as customers look to secure their growing AI attack surface, with over 400% growth in cloud usage and over 100% growth in custom agent usage on endpoints in recent months. Management believes the AIDR business can be 'bigger than the EDR business' given the estimated 90 agents per person.	About CompetitionAI is driving a clear divide between cybersecurity companies that solve problems and those that compound them, with CrowdStrike seeing 'failing products as open doors for agentic adversaries.' The company successfully replaced a next-gen EDR, a legacy SIM, and a legacy vulnerability management product for a European automotive manufacturer. A large financial services firm replaced a NextGen EDR, and a major American power provider replaced a legacy acquired SIM, selecting CrowdStrike's Next-Gen SIEM over a firewall-first product for technical, speed, and economic superiority. A global religious organization replaced a legacy vulnerability management product as part of AI transformation. Kroll strategically migrated all 450,000 endpoints of its customers off a competing next-gen endpoint technology to Falcon, growing their spend with CrowdStrike by over 3x. CrowdStrike's 'native first party data advantage coupled with the speed and efficiency of our platform continue to set us apart,' and it is positioned as 'the leader in cloud runtime security' and 'the leader in endpoint.' The company is 'displacing a lot of the legacy vendors in the market today' because 'legacy AV and legacy providers are not really gonna have the capabilities to identify rogue AI agents, shadow AI, and be able to protect against it.'	About The Broader IndustryThe 'Mythos moment' established that cybersecurity is a necessity for AI adoption, creating a new, irreversible risk environment. AI is now driving more cyber attacks and more cyber spending, leading to an 'arms race.' The world's adoption of AI is rapidly expanding the attack surface with more models, agents, agentic applications, and data, leading to more identities, permissions, policies, cyber attacks, and risk. Agent proliferation is becoming mainstream, acting as 'human and machine risk multipliers' with access to data, continuous operational capability, and limited judgment, with agents observed 'going rogue' and capable of data theft and organizational compromise. The 'agent of today is both a friend and foe.' The 'currency of protection is increasingly presence and speed,' and the AI threat environment is exposing which products are effective. The AI transformation necessitates a fundamentally new go-to-market motion focused on time to value, ecosystem impact, and ROI. The endpoint is increasingly the epicenter for agentic work and a top spend priority. Point-in-time posture scans are no longer sufficient against fast-moving threats, and the 'agentic adversary has broken the exploit sound barrier,' making it impossible to patch vulnerabilities fast enough. AI is still in its early innings, and its expansion of the attack surface is driving a broader security modernization cycle.	Where Things Are HeadedCrowdStrike expects 'inflection has become acceleration' and sees these dynamics continuing, describing the current environment as an 'arms race.' The company raised its FY 2027 net new ARR guidance by an additional 630 basis points, now expecting 34% year-over-year growth at the midpoint, a $116 million increase from its initial outlook. Management believes the 'AIDR business can be bigger than the EDR business' given the estimated 90 agents per person, and that 'sustained tailwinds' will lead to more stories of 'agents gone wild,' which CrowdStrike will protect against. The company will unveil new AI security innovations at the upcoming Falcon conference. AgentWorks will enable security teams to build, deploy, and manage custom AI security agents, setting the foundation for the AI SOC. CrowdStrike's role in securing enterprises, governments, and economies is deemed 'vital to AI adoption and mission critical in an AI first world.' The company expects free cash flow margin of 27.5% in Q3 and at least 30% for the full fiscal year. For FY27, total revenue is expected to be $5.991 to $6.011 billion, up 25% year over year, with non-GAAP diluted EPS of $1.25 to $1.26. The acquisition of XM Cyber's technology assets is expected to close in the second half of FY27 but will not bring ARR or revenue. CrowdStrike already implements token-based pricing for AIDR, and plans to continue expanding its partner ecosystem and platform capabilities.	Updates On ThemeGovernance	Broader Themes EmergingThe 'Mythos moment' is an inflection point where the world recognized cybersecurity as a necessity for AI adoption, leading to 'acceleration' in demand. This has created an 'arms race' where AI drives more cyber attacks and spending, clearly dividing cybersecurity companies into problem-solvers and problem-compounders. Agent proliferation is becoming mainstream, with AI agents acting as both 'friend and foe' and 'human and machine risk multipliers,' capable of going rogue and causing data theft or organizational compromise. This necessitates a new 'currency of protection' based on presence and speed. The AI transformation is driving a 'fundamentally new go to market motion' focused on time to value, ecosystem impact, and ROI. The 'agentic adversary has broken the exploit sound barrier,' rendering traditional vulnerability patching too slow and creating a need for new exposure management approaches. The expansion of the AI attack surface is driving a broader 'security modernization cycle' across industries, reinforcing that AI is in its early days but will become more powerful, making AI security an absolute necessity for every company.	Bullish-Leaning Quotes (Short)CrowdStrike's Q2 was our very best quarter in company history. Inflection has become acceleration. We are in an arms race. AI is driving more cyber spending. The market trusting us more than ever to secure their adoption of AI. Demand for AI grows our TAM, driving the need for CrowdStrike. AIDR ending ARR nearly tripled versus Q1. Demand, adoption, and growth like this is rarely seen. Privileged account security offering saw a stellar adoption with ending ARR growing more than 35x year over year. Project Quiltworks partners are collaborating with us on nearly $400 million of total contract value pipeline. In Q2 alone, we transacted $600 million in deal value through cloud marketplaces. We are still in the early innings of the AI revolution. The innovation engine is in overdrive. The AIDR business can be bigger than the EDR business. It is sustained tailwinds.	Bearish-Leaning Quotes (Short)New models created a new risk environment with no turning back. The markets newest adversary, AI agents themselves. Agents are also human and machine risk multipliers with access to data, continuous operational capability, and limited judgment. We are seeing agents go rogue swarming to attack and moving beyond their guardrails to autonomously harm. Agents are proving capable of data theft, permission alteration, and full-on command and control at scale leading to organizational compromise. The agent of today is both a friend and foe. Point in time posture scans are no longer enough to protect against fast moving threats that now proliferate in seconds. The agentic adversary has broken the exploit sound barrier and you simply cannot patch vulnerabilities fast enough. Companies cannot keep up with the patching. The acquisition of XM Cyber's technology assets... will not bring any ARR or revenue to CrowdStrike.	HiringDr. Bartley Richardson, previously at NVIDIA, has joined us as our chief AI autonomous system officer as part of our long planned and mutually agreed upon CTO leadership transition. Our internal investments in automation and AI continue to yield greater operational efficiencies and productivity gains across our business.

2026-06-03

About Expanding Eligible Market	About Competition	About The Broader Industry	Where Things Are Headed	Updates On Theme	Broader Themes Emerging	Bullish-Leaning Quotes (Short)	Bearish-Leaning Quotes (Short)	Hiring
About Expanding Eligible MarketCrowdStrike reported record Q1 net new ARR of $256 million, a 32% year-over-year increase, and ending ARR of $5.51 billion, accelerating over Q4 with more than 24% growth. Total revenue reached $1.39 billion, up 26% year-over-year, marking the fourth consecutive quarter of acceleration. The company added over 300 Falcon Flex accounts in the quarter, with Flex accounts now representing more than $1.9 billion in ending ARR, growing 99% year-over-year. AIDR (AI detection and response) saw its ending ARR grow over 250% sequentially, with a Q2 pipeline exceeding $50 million. The Next-Gen SIEM business surpassed $600 million in ending ARR, and the combined Cloud and Identity businesses exceeded $2 billion in ending ARR. Falcon for SaaS ending ARR grew nearly 4x year-over-year. The Falcon Flex model continues to drive expansion, with 480 Reflex customers (nearly 25% of all Flex customers) achieving an average uplift of 26% within seven months, and over 130 customers Reflexing multiple times for an average 51% ARR uplift over their original Flex contract. Notable wins include an 8-figure new logo land in a major US government agency, replacing legacy security products across over 200,000 hosts, a 7-figure AIDR win with an automotive financial services leader, and an 8-figure cloud security win with a high-performance AI chip company. CrowdStrike was also the only cybersecurity company selected by both Anthropic and OpenAI from the start to secure their new models, and expanded its Project QuiltWorks coalition to include major consulting firms and insurers.	About CompetitionCrowdStrike was the only cybersecurity company selected by both Anthropic and OpenAI from the very start to secure their new models. The company successfully replaced a legacy AV, an operating system EDR, and a legacy vulnerability management point product in an 8-figure new logo land with a major US government agency. Kroll, a new logo account, replaced their incumbent next-gen endpoint vendor with CrowdStrike. In an 8-figure new logo land with a major fuel retailer, CrowdStrike was chosen to replace a legacy SIEM, a next-gen EDR, and integrate software from a network security hardware vendor. George Kurtz highlighted CrowdStrike's unique advantage, stating that while competitors may provide AI visibility, only CrowdStrike can detect, block, and respond where AI actually runs. He also noted that CrowdStrike is not burdened by legacy technology and patchwork solutions, particularly in identity, offering a fresh approach to zero standing privileges.	About The Broader IndustryCybersecurity has dramatically risen in organizational visibility and funding priority. AI adoption is now an existential imperative across all geographies and verticals, with increasing AI adoption directly correlating to increased cybersecurity requirements. The 'Mythos inflection moment' in April demonstrated that the world, including frontier AI labs, recognizes the critical need for a cybersecurity ecosystem for AI. Adversaries are leveraging new AI models to 'democratize destruction,' enabling more potent cyber attacks. AI's impact on cybersecurity is twofold: the need to secure AI itself as foundational infrastructure, and the explosion of greenfield attack surfaces (hardware, data centers, Neo Clouds, agentic applications) that all require cybersecurity. The market's perception of cybersecurity has shifted from primarily risk management to a strategic accelerator and critical enabler of AI adoption. The rapid adoption of AI tools has significantly expanded the endpoint attack surface, leading to renewed enterprise focus on endpoint security investment. The emergence of nonhuman identities and agents necessitates new demand for security sensors. While worldwide AI spending is projected to exceed $2.5 trillion, only a low single-digit percentage of organizations have an advanced AI security strategy, creating the widest security asymmetry since the cloud transition. In the AI era, every agent requires an identity and governance, as enterprises struggle to differentiate between human and machine identities. The US government's executive order to upgrade systems for advanced AI is expected to create a tailwind for AI security businesses. AI adoption is still in its early stages, with security adoption typically lagging behind technology adoption. The 'Mythos moment' is described as a 'Y2K moment for security'.	Where Things Are HeadedCrowdStrike is guiding for net new ARR acceleration for the full year, expecting growth to accelerate over FY 2026, driven by AI creating structural and compounding demand for cybersecurity. The company views AIDR as a new growth pillar and a larger opportunity than EDR, securing seven distinct AI attack surfaces. Charlotte AI is becoming the reasoning engine across Falcon, and AgentWorks will expand the ecosystem with specialized AI agents built by partners on the Falcon platform, aiming to transform CrowdStrike into the operating system of the AI SOC. Falcon Flex is positioned as the commercial model to drive secure AI adoption. CrowdStrike aims to be the world's AI security layer, leveraging its nearly 100,000 customers and thousands of partners. Dr. Bartley Richardson has joined as Chief AI and Autonomous System Officer to deepen NVIDIA collaboration and verticalize AI into cybersecurity. The company is raising its full-year net new ARR guidance by over $50 million and announced a 4-for-1 stock split to enhance investor accessibility. CrowdStrike expects FY27 net new ARR growth to accelerate to 27.7% at the midpoint, a 520 basis point increase from prior guidance. The company plans to remain opportunistic in share repurchases and will continue strategic M&A, focusing on integrating best-of-breed tech and teams, particularly in emerging AI areas like data protection. The FalconFlex license model is designed to accommodate future token consumption-based pricing.	Updates On ThemeCloud	Broader Themes EmergingThe 'Mythos inflection point' signifies a collision between cybersecurity and frontier AI, leading to a universal understanding that AI necessitates robust defense. This moment is likened to a 'Y2K moment for security,' demanding a fundamental shift in security paradigms. The 'democratization of destruction' highlights the increased threat from adversaries leveraging new AI models for sophisticated cyber attacks. The concept of 'AI as critical infrastructure' underscores its foundational role and the imperative for integrated security. The rise of the 'agentic workforce' and the proliferation of nonhuman identities and agents represent a significant expansion of the attack surface.	Bullish-Leaning Quotes (Short)CrowdStrike is now being understood as critical AI infrastructure. AI adoption is not a nice to have it is an existential imperative across every geography, and vertical. The more AI an organization adopts, the more cybersecurity it requires. AI driving structural demand for cybersecurity that compounds, not decelerates. CrowdStrike is the only cybersecurity company to secure both Anthropic and OpenAI's introduction programs from the very start. AIDR is quickly becoming a new growth pillar in our business. In my career, I have never seen adoption happen this fast. As I look forward, I see AIDR as a larger opportunity than EDR. The gap between AI adoption and AI protection is the widest asymmetry in security since the cloud transition. Customers are coming back multiple times and they are continuously spending more. CrowdStrike is not only in the right place at the right time, we are the right technology to stop the breach. Think of CrowdStrike as the picks and shovels for the world's largest technology gold rush of all time. We are raising our full year net new ARR guidance by more than $50 million. We are announcing CrowdStrike's first stock split as a public company. Cybersecurity is not a nice to have in the world of AI. it is a need to have. We delivered strong first quarter results to begin the new fiscal year. The Mythos moment marked an inflection point for the industry. The data gravity and the data moat that we talk about is obviously here. For me, it is, you know, 1 of the most exciting times since when I started the company.	Bearish-Leaning Quotes (Short)Now any human or agent can be a viable hacker or worse, wage serious cyber attacks that threaten enterprise survival. Deploying AI across the enterprise is simply too risky without it from the start. Governing what AI agents can and cannot do across the enterprise... a problem that simply did not exist 2 years ago. We heard just crazy stories about AI run amok. The adoption front runs the security piece of it.	HiringDr. Bartley Richardson joins George Kurtz's leadership team as chief AI and autonomous system officer, coming from NVIDIA where he led Agentic AI and cybersecurity AI.

2026-03-03

About Expanding Eligible Market	About Competition	About The Broader Industry	Where Things Are Headed	Updates On Theme	Bullish-Leaning Quotes (Short)
About Expanding Eligible MarketFalcon Flex ending ARR exceeded $1.69B and grew >120% YoY; over 1,600 Falcon Flex customers with 350+ added in Q4; nearly 4 new Flex customers per day in the quarter; >380 Flex accounts have re-Flexed, ~23% of Flex base, up from 5% in Q1; average Flex ending ARR >$1M; 50% of subscription customers use 6+ modules, 34% use 7+, 24% use 8+; AWS marketplace activity nearing $1.5B in total contract value; Microsoft marketplace collaboration opened; Onum and SGNL.ai acquisitions expanding telemetry and identity capabilities; Falcon Cloud Security 8-figure Flex wins; partnership-driven expansion (EY, Accenture, Deloitte, HCL, Wipro, KPMG, Infosys) and MSSP growth (Kroll, Pax8, NinjaOne); 1.01B net new ARR for FY26, ending ARR $5.25B; Cloud, Next-Gen Identity and Next-Gen SIEM driving net new ARR growth; expanding coverage across cloud, identity, SIEM alongside endpoint."	About CompetitionCrowdStrike highlights displacement of Wiz in cloud security and wins against legacy SIEMs and hyperscalers (e.g., Splunk, Defender for Endpoint, other point cloud security products); disruptive pricing for Next-Gen SIEM due to existing EDR data; 2 SIEM replacements in a Fortune 500 healthcare account; partnerships that enable rapid expansion (Deloitte, Wipro, Kroll) and strong AWS partnership as a gateway to Flex adoption; emphasis on Falcon being purpose-built for AI security across layers, contrasting with frontier models and generic LLMs; AWS and Microsoft marketplaces as acceleration channels but not substitution for Falcon platform; ongoing competition from bundled security offerings by large incumbents and AI security tools; relentless platform consolidation as a moat against point-product competitors.	About The Broader IndustryAI-driven security paradigm expanding attack surfaces (agentic workforce); demand for a single, unified, AI-native security platform; rise of runtime cloud security and observability as core capabilities; increasing third-party SaaS risk and need for real-time telemetry; shift from point products to platform-based approaches; ongoing emphasis on data moat and threat intel as durable competitive advantages; cloud providers being integrated as partners, not sole security providers; maturation of the cloud security market with emphasis on protection at runtime and integration with CSPM, CIEM, and threat hunting.	Where Things Are HeadedAI adoption is a generational tailwind; Falcon Flex to become the standard licensing model to accelerate platform adoption and ARR expansion; NextGen SIEM and cloud identity will continue to drive multi-year ARR growth; AWS and Microsoft partnerships will convert usage to Flex subscriptions, expanding enterprise reach; SGNL.ai and Seraphic acquisitions enhance identity and browser security, strengthening agentic security workflows; CrowdStrike aims to be the operating system of cybersecurity for the Agentic era with phase transitions from endpoint to identity, cloud, and SIEM integration; continued M&A to extend capabilities while integrating them into Falcon platform.	Updates On ThemePhase	Bullish-Leaning Quotes (Short)Falcon Flex unlocks never-seen-before adoption for customers.

2026-03-03

About Expanding Eligible Market	About Competition	About The Broader Industry	Where Things Are Headed	Updates On Theme	Bullish-Leaning Quotes (Short)
About Expanding Eligible MarketFalcon Flex ending ARR exceeded $1.69B and grew >120% YoY; over 1,600 Falcon Flex customers with 350+ added in Q4; nearly 4 new Flex customers per day in the quarter; >380 Flex accounts have re-Flexed, ~23% of Flex base, up from 5% in Q1; average Flex ending ARR >$1M; 50% of subscription customers use 6+ modules, 34% use 7+, 24% use 8+; AWS marketplace activity nearing $1.5B in total contract value; Microsoft marketplace collaboration opened; Onum and SGNL.ai acquisitions expanding telemetry and identity capabilities; Falcon Cloud Security 8-figure Flex wins; partnership-driven expansion (EY, Accenture, Deloitte, HCL, Wipro, KPMG, Infosys) and MSSP growth (Kroll, Pax8, NinjaOne); 1.01B net new ARR for FY26, ending ARR $5.25B; Cloud, Next-Gen Identity and Next-Gen SIEM driving net new ARR growth; expanding coverage across cloud, identity, SIEM alongside endpoint."	About CompetitionCrowdStrike highlights displacement of Wiz in cloud security and wins against legacy SIEMs and hyperscalers (e.g., Splunk, Defender for Endpoint, other point cloud security products); disruptive pricing for Next-Gen SIEM due to existing EDR data; 2 SIEM replacements in a Fortune 500 healthcare account; partnerships that enable rapid expansion (Deloitte, Wipro, Kroll) and strong AWS partnership as a gateway to Flex adoption; emphasis on Falcon being purpose-built for AI security across layers, contrasting with frontier models and generic LLMs; AWS and Microsoft marketplaces as acceleration channels but not substitution for Falcon platform; ongoing competition from bundled security offerings by large incumbents and AI security tools; relentless platform consolidation as a moat against point-product competitors.	About The Broader IndustryAI-driven security paradigm expanding attack surfaces (agentic workforce); demand for a single, unified, AI-native security platform; rise of runtime cloud security and observability as core capabilities; increasing third-party SaaS risk and need for real-time telemetry; shift from point products to platform-based approaches; ongoing emphasis on data moat and threat intel as durable competitive advantages; cloud providers being integrated as partners, not sole security providers; maturation of the cloud security market with emphasis on protection at runtime and integration with CSPM, CIEM, and threat hunting.	Where Things Are HeadedAI adoption is a generational tailwind; Falcon Flex to become the standard licensing model to accelerate platform adoption and ARR expansion; NextGen SIEM and cloud identity will continue to drive multi-year ARR growth; AWS and Microsoft partnerships will convert usage to Flex subscriptions, expanding enterprise reach; SGNL.ai and Seraphic acquisitions enhance identity and browser security, strengthening agentic security workflows; CrowdStrike aims to be the operating system of cybersecurity for the Agentic era with phase transitions from endpoint to identity, cloud, and SIEM integration; continued M&A to extend capabilities while integrating them into Falcon platform.	Updates On ThemePhase	Bullish-Leaning Quotes (Short)Falcon Flex unlocks never-seen-before adoption for customers.

2025-12-02

About Expanding Eligible Market	About Competition	About The Broader Industry	Where Things Are Headed	Updates On Theme	Broader Themes Emerging	Bullish-Leaning Quotes (Short)	Bearish-Leaning Quotes (Short)
About Expanding Eligible MarketCrowdStrike is expanding its eligible market through the Falcon Flex subscription model, which has over $1.35 billion in ending ARR from adopted accounts, growing over 200% year over year. The company sees broad-based ARR acceleration across cloud, next-gen identity, and next-gen SIEM, as well as its endpoint business. AI is rapidly expanding the attack surface, creating a new 'agentic workforce' that necessitates protection, positioning CrowdStrike as the armor and intelligence layer for agentic identity security. The acquisition of Onum further enhances its hyper-scalable telemetry detection pipeline, bringing CrowdStrike closer to all customer data. The expanded partnership with AWS makes Falcon NextGen SIEM natively available to millions of AWS customers, with the intent to convert usage into Flex subscriptions. Falcon Shield can land new logo accounts even without endpoint deployments, addressing the elevated third-party SaaS risk environment. The F5 partnership expands the endpoint TAM by enabling protection for BIG IP hardware and virtual appliances, historically unable to support endpoint agents. A new MSSP partnership with Kroll involves migrating nearly half a million endpoints to Falcon, opening up the mid-market and incident response segments. CrowdStrike also sees opportunities in observability, with customers already using its platform for such use cases, and views it as a consolidation opportunity. The company serves customers of all sizes, from enterprise to SMB and MSSPs, with its technology being agnostic to customer size.	About CompetitionCrowdStrike's Falcon NextGen SIEM is displacing hyperscalers and firewall vendor SIEMs, winning against competitors like Splunk. The company has seen multiple displacements of Wiz in cloud security and has replaced two SIEMs, Defender for Endpoint, and a point cloud security product in a Fortune 500 healthcare account. Deloitte and Wipro have standardized their SIEM practices on Falcon, replacing legacy SIEM providers. CrowdStrike's AI capabilities are highlighted as being beyond chatbots, differentiating it from competitors who are 'still stuck on chatbots'. The company offers disruptive pricing for NextGen SIEM due to already having EDR data in its platform. The Kroll partnership involved an almost 8-figure rip and replace transaction, displacing an inferior point product SMB EDR. CrowdStrike continues to take market share from legacy AV, which still constitutes 50% of the market.	About The Broader IndustryThe digital society mandates cybersecurity as a necessity, regardless of market swings or geopolitical tensions. Organizations are undergoing AI transformations to improve workforce productivity, leading to the emergence of an 'agentic workforce' and a rapidly expanding attack surface. The 'democratization of destruction' is a reality, with AI-powered adversarial tradecraft, including state-sponsored adversaries using LLMs for cyber intrusions. Cybersecurity in the agentic era demands a single, unified platform to operate with agility and efficacy, as fragmented point products create vulnerabilities. The cloud security market is maturing, with customers realizing that posture alone doesn't equate to prevention, necessitating active runtime defense. AI adoption is driving renewed interest in endpoint security, as the endpoint becomes the epicenter of human and nonhuman interaction with AI. There is an elevated third-party SaaS risk environment demanding visibility and protection. Many organizations previously avoided collecting certain data due to cost, but new solutions are enabling broader data collection. The GSI community is actively pursuing SIEM and SOC transformation opportunities. A Canalys report indicates that CrowdStrike's ecosystem creates up to $7 in services opportunities for every dollar of Falcon product sales.	Where Things Are HeadedCrowdStrike anticipates continued near-term and long-term growth driven by customer, prospect, and partner momentum. The company aims to be the 'operating system of cybersecurity for the Agentic era' through its technology innovation engine and ecosystem. Successful AI adoption will necessitate cybersecurity transformation and a new operating system. Falcon NextGen SIEM is positioned as the foundation of this operating system, with the acquisition of Onum making it even easier to build on the platform. Falcon Flex is expected to become the standard licensing model, accelerating module adoption and platform utilization. The AWS partnership is intended to convert NextGen SIEM usage into Flex subscriptions, onboarding AWS accounts to Falcon as their cybersecurity operating system. AI is seen as the largest opportunity and demand driver, with CrowdStrike aiming to revolutionize cybersecurity using AI and secure the world's use of AI. The company views this as a 'generational opportunity' and expects AI to be a significant tailwind. CrowdStrike has strong conviction in delivering profitable growth for FY '26 and beyond, with a robust demand environment and a large Q4 opportunity. The company plans to continue building out its identity stack and will be opportunistic and strategic in M&A, focusing on integrating best-of-breed technologies into its single platform. The SIEM market displacement is viewed as a multiyear, long-tail journey similar to legacy AV displacement.	Updates On ThemePhase	Broader Themes EmergingThe emergence of an 'agentic workforce' and the 'democratization of destruction' due to AI-powered adversarial tradecraft are significant broader themes. AI transformations are driving investments in workforce productivity across industries, leading to a rapidly expanding attack surface. The necessity for a single, unified cybersecurity platform is becoming critical due to the complexities and vulnerabilities created by fragmented point products in this new era.	Bullish-Leaning Quotes (Short)It was a record quarter as the business continued accelerating. CrowdStrike Holdings, Inc. is mission-critical in today's agentic society. CrowdStrike Holdings, Inc. wins as the market's broadest and only single platform solution. Falcon NextGen SIEM had a record net new ARR quarter. Falcon Shield delivers near-immediate time to value and is a product that we can land new logo accounts with even without endpoint deployments. CrowdStrike Holdings, Inc. is the cloud runtime security leader. AI adoption is supercharging renewed interest in the endpoint. Falcon Flex is an unlock, not an ELA. AWS selected Falcon NextGen SIEM as the default SIEM for all their customers. AI represents our largest opportunity and demand driver yet. I can't imagine a better defender than CrowdStrike Holdings, Inc. Acceleration is back. This was one of our very best quarters in company history. We delivered an exceptional third quarter driven by organic growth, exceeding expectations across all guided metrics. We achieved record Q3 net new ARR of $265 million, exceeding our expectations by double-digit millions and more than 10 percentage points. ending ARR reached $4.92 billion, accelerating to 23% growth over last year. all-time record pipeline entering Q4, we have strong conviction in our ability to deliver profitable growth. We're not selling products. We're delivering outcomes.	Bearish-Leaning Quotes (Short)No quotes were perceived as bearish.

Notes4 rows

Date	Comment	Comment Type	Comment Sentiment	Price Reaction
2025-08-28	Q2 FY26 showed strong platform momentum: net new ARR hit $221M (vs. $194M prior), subscription revenue rose 20% YoY to $1.10B, and Next-Gen SIEM ARR surged ~95% YoY with solid cloud/identity growth. Management guided FY26 revenue to $4.74–$4.81B and reaffirmed back-half ARR acceleration. Despite revenue optics noise (low Q3 guide) from CCP, investors viewed Flex traction and module adoption as proof of durable growth. Stock closed +4.5% on the day.	Earnings Transcript	Mixed	-4.14% (vs SPY: -2.81%)
2025-06-03	Beat expectations with solid ARR and Flex deal momentum. Growth is slower than last year but Flex is creating larger, stickier, faster deals. Analysts are testing whether this model really accelerates ARR and improves margins—or whether revenue recognition quirks and Microsoft/PANW pressure make it look better than it is. Management is leaning on Flex, platform breadth (esp. SIEM/Cloud/Identity), and Charlotte AI to re-accelerate growth in the back half.	Earnings Transcript	Mixed	-4.16% (vs SPY: -4.67%)
2026-06-03	CrowdStrike's Q1 FY27 earnings revealed an "AI inflection point," driving unprecedented demand for its Falcon platform as critical AI infrastructure. The company reported record net new ARR of $256M, up 32% YoY, and significantly raised its full-year FY27 net new ARR guidance, expecting acceleration. This, alongside a 4-for-1 stock split announcement, indicates strong market confidence and robust growth.	Earnings Transcript	Neutral	N/A
2026-08-26	CrowdStrike's Q2 FY27 was its best quarter, with record net new ARR ($333M, +51% YoY) and significantly raised FY27 guidance (+630 bps). The "Mythos moment" (AI inflection) is accelerating demand for AI security, driving explosive AIDR growth and strong Falcon Flex adoption. The stock surged 22.97% (outperforming SPY), reflecting strong market confidence in CrowdStrike's AI-driven leadership.	Earnings Transcript	Positive	+22.97% (vs SPY: +22.55%)

Upcoming Events8 rows

Catalyst ID	Estimated Timing	Estimated Date Start	Estimated Date End	Catalyst	Why It Matters	Ticker Or Theme Specific	Transcript Date	Source Type
CRWD_03654344	For the full fiscal year 2027	2026-02-01	2027-01-31	CrowdStrike's ability to achieve its raised full-year FY27 financial guidance for ARR ($6.532B-$6.556B), net new ARR ($1.279B-$1.303B), and total revenue ($5.915B-$5.959B).	This is a critical long-term financial target; achieving or surpassing this guidance would strongly affirm the company's market position and growth potential, while a miss could negatively impact valuation.	Ticker	2026-06-03	earnings_transcript
CRWD_15d5c321	For the full year	2026-02-01	2027-01-31	CrowdStrike's ability to achieve its raised full-year FY27 net new ARR growth acceleration target of 27.7% at the midpoint, translating to $1.291 billion of net new ARR.	This is a key financial guidance metric; exceeding or missing this target would materially impact valuation and investor sentiment, as it reflects the company's ability to capitalize on AI-driven demand and platform consolidation.	Ticker	2026-06-03	earnings_transcript
CRWD_53e96eca	As I look forward	2026-05-01	2027-01-31	Continued rapid growth and adoption of AIDR (AI Detection and Response) solutions, with Q2 pipeline already exceeding $50 million, and its potential to become a larger market opportunity than EDR.	Successful execution and market penetration of AIDR could significantly expand CrowdStrike's total addressable market and drive substantial future ARR, positively impacting valuation and investor sentiment.	Ticker	2026-06-03	earnings_transcript
CRWD_a5d8a49b	FY '27 year-over-year net new ARR growth of at least 20%	2026-02-01	2027-01-31	Guidance that FY27 net new ARR growth will be at least 20% YoY.	Signals durable growth beyond FY26 and supports long-term TAM expansion from NextGen SIEM, Cloud, and Identity, with potential for multiple expansion if growth outpaces expectations.	Ticker	2025-12-02	earnings_transcript
CRWD_87a07c9e	remaining quarters of FY '27	2026-05-01	2027-01-31	Completion of native integration of SGNL.ai and Seraphic acquisitions into the Falcon platform, followed by the full scaling of their go-to-market efforts.	Successful integration and subsequent full scaling are crucial for these acquisitions to materially contribute to ARR beyond the initial minimal contribution, expanding CrowdStrike's identity and browser security offerings and validating its M&A strategy.	Ticker	2026-03-03	earnings_transcript
CRWD_18f83bee	now open for business (impact in future quarters)	2026-03-03	2027-01-31	Customer adoption and utilization of Microsoft Azure consumption commitment dollars for Falcon on the Microsoft marketplace.	This new channel could significantly expand CrowdStrike's reach, drive new customer acquisition, and accelerate ARR growth by leveraging existing customer spend commitments with Microsoft, impacting revenue and competitive positioning.	Ticker	2026-03-03	earnings_transcript
CRWD_90e8575b	as they unfold	2026-06-05	2027-06-05	The impact and implementation of the US government's executive order to upgrade systems for advanced AI on federal cybersecurity spending and prioritization.	This regulatory action could create a significant tailwind for CrowdStrike by driving increased demand for modern cyber defenses within federal agencies, potentially boosting public sector revenue.	Theme	2026-06-03	earnings_transcript
CRWD_7c8021c9	unfolding in the market... into the future	2026-03-03	2028-12-31	The broader AI revolution and its impact on the cybersecurity software market, specifically the differentiation between 'existentially vulnerable' and 'thriving' software companies.	CrowdStrike believes it is positioned to thrive as a 'mission-critical, trusted infrastructure technology' in the AI era. The actual market outcome will materially impact CrowdStrike's long-term valuation, investor sentiment, and competitive landscape.	Theme	2026-03-03	earnings_transcript