CRWD
T2CrowdStrike Holdings, Inc.
OverviewCrowdStrike Holdings, Inc. provides cloud-native cybersecurity, protecting endpoints, cloud, identity, and data via its Falcon platform. It now serves as critic
CrowdStrike Holdings, Inc. provides cloud-native cybersecurity, protecting endpoints, cloud, identity, and data via its Falcon platform. It now serves as critical AI infrastructure, offering solutions like AIDR and Next-Gen SIEM to secure AI adoption. Primarily subscription-based, with 66% U.S. revenue, it serves global enterprises to small businesses through direct and partner channels.
- What They Do (Plain English & Analogies)
- CrowdStrike acts like a highly advanced, cloud-native digital immune system for businesses. Instead of just blocking known threats, it continuously monitors everything happening across a company's digital assets – including computers, servers, cloud environments, and even individual digital identities (like user accounts or AI agents). It uses a single, lightweight 'sensor' on each device to collect vast amounts of data. This data is then analyzed by powerful AI in the cloud to detect and stop even brand-new, sophisticated cyberattacks in real-time. They aim to be the 'operating system of cybersecurity' for businesses, especially as AI expands the types of digital 'workers' (agentic workforce) that need protection. They help companies consolidate many different security tools into one unified platform, making security simpler, faster, and more effective, ultimately promising to 'stop breaches.' In the current era of rapidly expanding AI adoption, CrowdStrike positions itself as the "picks and shovels" for this new technology gold rush, providing the essential security infrastructure that allows organizations to deploy AI safely and at scale.
- Very Brief History
- CrowdStrike Holdings, Inc. was incorporated in 2011 and is based in Austin, Texas. The company pioneered cloud-delivered endpoint protection and has since expanded its Falcon platform to cover cloud workloads, identity, and data. Key to its evolution has been the development of its single-agent, cloud-native architecture, and strategic acquisitions like Onum (real-time telemetry pipeline management) in August 2025, Pangea (AI-enabled detection and response) in September 2025, SGNL.ai (continuous identity and authorization) in February 2026, and Seraphic (browser runtime security) also in February 2026, to enhance its SIEM, data pipeline, AI infrastructure protection, identity security, and browser security capabilities.
- "Street Stereotype"
- CrowdStrike is generally perceived as a leading, innovative cybersecurity platform company, particularly strong in endpoint detection and response (EDR). It's increasingly seen as the 'AI-era security leader' due to its AI-native platform, Charlotte AI, and its focus on securing the expanding attack surface created by AI adoption. Investors are currently focused on its ability to sustain high growth through platform expansion (Next-Gen SIEM, Cloud, Identity) and the continued success of its Falcon Flex licensing model in driving customer consolidation and ARR acceleration, especially in the context of the "Mythos inflection point" where AI adoption necessitates robust cybersecurity.
- Subsidiaries On Linked In*
- {"subsidiaries":[]}
- Customer Sectors & Example Clients
- CrowdStrike serves a wide range of sectors including Financial Services, Logistics, Consumer Packaged Goods, Cloud Providers (Neo cloud/token factories), Government Agencies (US Federal), Healthcare, Professional Services (MSSPs, Incident Response firms), Higher Education, and Mid-market businesses. Specific example clients mentioned in the transcript include a Fortune 100 account, a major US government agency, an automotive financial services leader, a major fuel retailer, a major American health care company, and a high performance AI chip company. Partners in their ecosystem include Accenture, IBM, Kroll, OpenAI, Armadin, Cognizant, HCL Tech, Infosys, KPMG, NTT DATA, Tata Consultancy Services, Wipro, Coalition, Liberty Mutual Insurance, Lockton Resilience, and Marsh.
- New Customers / Segments They'Re Targeting
- CrowdStrike is actively targeting organizations that are rapidly adopting AI, particularly those deploying "agentic workloads" inside virtual machines, and companies building out new AI infrastructure such as hardware (GPUs, MPUs, TPUs, Trainium chips), data centers, hyperscalers, and "Neo Clouds" focusing on inference for token factories. They are also focused on securing "agentic applications" like Cursor, Sierra, 11 Labs, Exa, and Ligura. The company is seeing demand from frontier AI labs themselves (Anthropic and OpenAI) to secure their new models and their adoption. They are also expanding their reach into the insurance sector through partnerships to underwrite frontier AI model risk.
- Supply Chain And Sourcing Geographies
- The provided transcript and existing investment knowledge do not contain specific details about CrowdStrike's supply chain or sourcing geographies for its products or components. CrowdStrike primarily provides software and cloud-delivered services.
- Sales Geographies And Expansion Plans
- CrowdStrike sells its products and services worldwide. In Q1 FY27, the geographic mix of revenue consisted of 66% from the US and 34% from international geographies. The company noted that EMEA and overall international year-over-year revenue growth accelerated compared to Q4 FY26. Management has not explicitly stated plans to expand into new specific geographies beyond its current global presence, but the accelerating international growth suggests continued focus on these markets.
- How Key Themes May Help/Hurt
- CrowdStrike is exceptionally well-positioned to benefit from the buildout of the "AI '25: Cloud Platform & Software" and "AI '25: Phase 2 Deployment" themes. As AI adoption becomes an "existential imperative" for enterprises, the demand for robust security solutions to protect AI infrastructure, models, agents, and data will surge. CrowdStrike's Falcon platform is explicitly designed as "critical AI infrastructure" and an "AI adoption accelerator," making it a necessity for organizations to deploy AI safely and at scale. The rise of the "agentic workforce" and the expansion of AI attack surfaces directly translate into increased demand for CrowdStrike's AIDR, Next-Gen Identity, Cloud Security, and Next-Gen SIEM offerings. Its Falcon Flex model is also ideally suited to monetize this expanding AI-driven demand by enabling rapid adoption and expansion of security modules. The focus on secure, integrated, and cost-efficient AI solutions aligns perfectly with CrowdStrike's platform consolidation strategy and its ability to deliver tangible ROI by stopping breaches and enabling faster AI deployment. While largely beneficial, potential headwinds could arise from the increasing commoditization pressure on foundational AI models and open-source alternatives, which might lead to a perception of reduced value for specialized AI software if not clearly differentiated. The rapid evolution of AI and its associated security risks could also introduce execution challenges if CrowdStrike struggles to keep pace with new threats or integrate new capabilities effectively. Additionally, the increasing trend towards hybrid AI architectures, where inference shifts to on-premise or edge environments, could slightly reduce the exclusive leverage of pure cloud-native solutions if CrowdStrike doesn't adequately adapt its offerings for these diverse deployment models, although its single agent architecture is well-suited for distributed environments.
3 Main Long-Term Bull Details
- AI-Driven Market Expansion and Leadership: CrowdStrike is uniquely positioned as an "AI adoption accelerator" and the "operating system of cybersecurity for the Agentic era." The rapid proliferation of AI, including the "agentic workforce" and AI infrastructure, creates a massive, expanding attack surface that necessitates CrowdStrike's independent protection layer for visibility, compliance, and enforcement. This provides a generational opportunity for growth, as AI use necessitates AI security, evidenced by the rapid growth of AIDR and its potential to be a larger market than EDR.
- Platform Consolidation and Falcon Flex Model: The Falcon platform's unified architecture and the Falcon Flex licensing model are powerful drivers for customer consolidation, leading to higher module adoption, increased Annual Recurring Revenue (ARR), and improved customer stickiness. This model makes it easier for customers to adopt more of the Falcon platform faster, driving continuous net ARR growth and expanding CrowdStrike's wallet share within enterprises, as demonstrated by the significant uplift from "re-Flex" customers.
- Structural Data Moat and Efficacy: CrowdStrike's competitive moat is becoming an "opportunity ocean" due to its vertically integrated, net data creator status. Its Threat Graph correlates over 1 trillion security events per day, analyzing 15+ petabytes of data, combined with cyber reinforced learning from human feedback (RLHF) from its MDR analysts and incident responders. This proprietary, real-time telemetry and expert-labeled data is a structural advantage that no LLM provider can replicate, enabling superior, deterministic outcomes in stopping breaches.
3 Main Long-Term Bear Details
- Competitive Pressure and Bundling: Intense competition from large players like Microsoft (bundling Defender for Endpoint) and Palo Alto Networks, along with other specialized vendors, could lead to pricing pressure and slower market share gains, especially if competitors improve their integrated offerings and leverage their existing customer bases.
- Sustainability of Flex Model and ARR Acceleration: While Flex is currently driving strong results, there's a risk that initial Flex demand could be front-loaded, and the velocity of "re-Flexing" (customers increasing spend) may not sustain beyond early cohorts, potentially impacting the durability of ARR acceleration. The long-term sustainability of this accelerated demand remains a key debate.
- Execution Risk in New Markets and Acquisitions: While showing strong momentum, scaling Next-Gen SIEM, Cloud, Identity, and newly acquired capabilities like browser security and real-time authorization into truly dominant revenue streams requires sustained execution against established incumbents and rapidly evolving market needs. Any missteps in product development, integration, or go-to-market strategy could hinder their ability to fully capitalize on these opportunities.
- Competitors And Differentiation
- CrowdStrike competes with large players like Microsoft (e.g., Defender for Endpoint), Palo Alto Networks, and other legacy SIEM providers (e.g., Splunk), as well as specialized cloud security vendors (e.g., Wiz) and network security hardware vendors. CrowdStrike differentiates itself through its unified, AI-native Falcon platform, which leverages a single lightweight agent for comprehensive protection across endpoints, cloud workloads, identity, and data. Key differentiators include: * **AI-Native Platform & AIDR:** CrowdStrike is positioned as critical AI infrastructure, being the only cybersecurity company selected by both Anthropic and OpenAI from the start to secure their new models. Its AIDR (AI Detection and Response) solution is a new growth pillar, designed to secure seven attack surfaces (data, models, prompts, agents, identities, infrastructure, and the interaction layer) where AI executes, a broader scope than traditional EDR. * **Data Moat & Efficacy:** The Falcon platform's "data moat" correlates over 1 trillion security events daily, providing unparalleled visibility and enabling superior, deterministic outcomes in stopping breaches. * **Falcon Flex Model:** This subscription model drives platform consolidation and continuous expansion, allowing customers to easily adopt more modules and increase their investment over time, leading to significant ARR uplift. * **Next-Gen SIEM & Identity:** CrowdStrike's Next-Gen SIEM, powered by Charlotte AI, transforms the SOC into an "AI SOC" with autonomous triage and cross-domain correlation. Its identity solutions, including the recently acquired Signal, provide granular, policy-based authorization for agentic workloads, addressing the challenge of governing non-human identities. * **Disruptive Pricing:** For Next-Gen SIEM, CrowdStrike offers disruptive pricing by leveraging existing EDR data, making it a cost-effective alternative to legacy providers.
- Recent Performance & What The Market'S Focused On
- CrowdStrike delivered strong Q1 FY27 results, exceeding expectations across all guided metrics. The company reported record Q1 net new ARR of $256 million (up 32% YoY), ending ARR of $5.51 billion (up >24% YoY), and total revenue of $1.39 billion (up 26% YoY), accelerating for the fourth consecutive quarter. They also achieved record free cash flow of $468 million. Management significantly raised its full-year FY27 net new ARR guidance by over $50 million, now expecting growth to accelerate over FY26. The market is intensely focused on the "Mythos inflection point" and the "AI tailwind," which management believes is driving structural demand for cybersecurity and positioning CrowdStrike as critical AI infrastructure. Key areas of market focus include the rapid adoption and pipeline growth of AIDR (AI Detection and Response), the continued success and expansion of the Falcon Flex model, and the accelerating performance of its Next-Gen SIEM, Cloud, and Identity businesses in securing the expanding AI attack surface. The announced 4-for-1 stock split is also a notable event aimed at increasing accessibility for investors.
- Revenue Segments And Estimated Mix
- Subscription Revenue — Mix: ~95% (based on Q1 FY27 total revenue of $1.39B and subscription revenue of $1.32B); Source: Q1 FY27 transcript; Trend: Grew 26% year-over-year in Q1 FY27, accelerating sequentially for the fourth consecutive quarter.
- Professional Services Revenue — Mix: ~5% (based on Q1 FY27 total revenue of $1.39B and professional services revenue of $64.8M); Source: Q1 FY27 transcript; Trend: Grew 23% year-over-year in Q1 FY27.
- Product Brands
- Falcon platform
- Falcon Endpoint Security
- Falcon Cloud Security
- Falcon Next-Gen Identity Security
- Falcon for SaaS
- Falcon Shield
- Falcon Next-Gen SIEM
- Falcon Onum
- AIDR (AI Detection and Response)
- Charlotte AI
- AgentWorks
- Signal
- Seraphic
- Project Glasswing
- Project QuiltWorks
- Daybreak (OpenAI GPT-5.5 Cyber)
Bull / Bear DetailsCrowdStrike is solidifying its position as critical AI infrastructure, with the "Mythos inflection point" driving unprecedented demand for its Falcon platform.
Thesis
CrowdStrike is solidifying its position as critical AI infrastructure, with the "Mythos inflection point" driving unprecedented demand for its Falcon platform. Record Q1 FY27 results and significantly raised FY27 guidance, fueled by the Falcon Flex model and rapid AIDR adoption, underscore its market leadership. Sustained platform expansion across SIEM, Cloud, and Identity, coupled with AI-driven demand, makes the bull case compelling as of June 5, 2026.
Bull case
CrowdStrike's Falcon Flex model continues to drive exceptional platform stickiness and module adoption, evidenced by over $1.9 billion in ending ARR from Flex accounts, growing 99% year-over-year. The model's success is further highlighted by 480 re-Flex accounts, representing nearly 25% of Flex customers, with an average ARR uplift of 26% and 51% for multiple re-Flexes, validating continuous growth.
CrowdStrike is uniquely positioned as critical AI infrastructure, with the "Mythos inflection point" driving unprecedented demand for AI security. As the only cybersecurity company selected by Anthropic and OpenAI, its AIDR solution is rapidly emerging as a new growth pillar, with ending ARR growing over 250% sequentially and a Q2 pipeline exceeding $50 million, poised to be larger than EDR.
Strong performance in Next-Gen SIEM, Cloud, and Identity is accelerating growth, collectively exceeding $2 billion in ending ARR, with Next-Gen SIEM surpassing $600 million. Strategic initiatives like Project QuiltWorks, securing AI adoption with major partners and insurers, and the AgentWorks ecosystem, further solidify CrowdStrike's platform consolidation and market reach in critical security domains.
Bear case
CrowdStrike faces ongoing competitive pressures from large players like Microsoft, which continues to bundle security offerings, potentially leading to pricing pressure. While CrowdStrike is displacing legacy solutions, the rapid evolution of AI security tools and the company's premium valuation could still lead to market skepticism and impact future share performance.
Despite strong recent results, the long-term sustainability of Falcon Flex's accelerated demand and re-Flex velocity remains a key debate. While Flex accounts grew 99% year-over-year, there's a risk that initial demand pull-forward may not sustain at the same rapid pace as early cohorts mature, potentially impacting future ARR growth rates if new customer acquisition or expansion slows.
Rapid expansion into new AI-driven offerings and deep integrations, including recent acquisitions like Signal, introduce execution risk. Successfully integrating these diverse capabilities into the Falcon platform and ensuring widespread customer adoption at scale presents operational and go-to-market challenges, particularly given the "democratization of destruction" by AI-powered adversaries and the complex, rapidly evolving landscape of AI agent governance.
Bull / Bear Case
- Bear Case
- CrowdStrike trades at a significant premium, with a Price-to-Sales (P/S) ratio of approximately 35.9x to 40.0x, substantially higher than the US Software industry average of 3.7x and its peer average of 14.1x. Its EV/EBITDA of 1,069.83x is also astronomically high compared to the software industry median of 10.66. This premium valuation prices in aggressive growth expectations, and despite strong Q1 results and raised guidance, the stock retreated post-earnings, suggesting that high expectations were already factored in. The CEO's caution about the timing of AI security demand realization also tempered enthusiasm. Intense competition from large players like Microsoft and Palo Alto Networks, along with execution risks in integrating new AI-driven offerings and acquisitions, could lead to pricing pressure and impact future growth sustainability.
- Bull Case
- CrowdStrike is uniquely positioned as critical AI infrastructure, with the "Mythos inflection point" driving unprecedented demand for AI security. Its AIDR solution is rapidly emerging as a new growth pillar, with ending ARR growing over 250% sequentially and a Q2 pipeline exceeding $50 million, poised to be a larger market than EDR. The Falcon Flex model continues to drive exceptional platform stickiness and module adoption, evidenced by over $1.9 billion in ending ARR from Flex accounts, growing 99% year-over-year, and significant uplift from re-Flex customers. Strong performance across Next-Gen SIEM, Cloud, and Identity, collectively exceeding $2 billion in ending ARR, further solidifies platform breadth. Record Q1 FY27 results, including 32% YoY net new ARR growth and 26% YoY total revenue growth, underscore robust execution and confidence, leading to raised FY27 guidance and a 4-for-1 stock split.
- More Compelling & Why
- Bear. CrowdStrike's Price-to-Sales (P/S) ratio of approximately 35.9x is significantly higher than the US Software industry average of 3.7x and its peer average of 14.1x. The stock is trading at a substantial premium, with multiple sources indicating it is significantly overvalued (37-38.5% above GF Value™). This valuation prices in aggressive growth, and the post-earnings stock retreat, despite strong results, suggests market skepticism regarding the sustainability of this growth at such a high valuation. My view would flip if CRWD's valuation multiples decelerated closer to industry averages while maintaining or accelerating its impressive ARR growth and profitability, demonstrating that the AI-driven demand is even more robust and durable than current elevated expectations.
Key Factors
| Key Factor | Why It Matters | What To Watch | What It Signals | Where/How To Track | Free Alt Data | Paid Alt Data |
|---|---|---|---|---|---|---|
| Combined Next-Gen SIEM, Cloud, and Identity Ending ARR | This collective metric highlights CrowdStrike's successful expansion beyond endpoint security into critical, high-growth areas. Continued acceleration in these segments validates the platform consolidation strategy and expands CrowdStrike's total addressable market in the AI era. | The combined ending ARR for Next-Gen SIEM, Cloud, and Identity businesses. | Bullish: Combined ending ARR for these segments continues to grow significantly above $2 billion and shows accelerating year-over-year growth in Q2 FY27. Bearish: Combined ending ARR growth for these segments decelerates or stagnates below $2 billion in Q2 FY27. | CrowdStrike's quarterly earnings releases and conference call transcripts (next expected for Q2 FY27). | Industry reports on SIEM, Cloud Security, and Identity Access Management market sizes and growth. | Gartner/IDC market share reports for SIEM, Cloud Security, Identity. |
| Raised Full Year FY27 Net New ARR Guidance | This indicates management's increased confidence in future growth, driven by strong market demand for AI security and the effectiveness of CrowdStrike's platform and go-to-market strategy. It directly impacts investor sentiment and valuation. | CrowdStrike's reported Full Year FY27 Net New ARR guidance in future earnings calls. | Bullish: Full Year FY27 Net New ARR guidance raised above $1.303 billion. Bearish: Full Year FY27 Net New ARR guidance lowered or maintained below $1.279 billion. | CrowdStrike's quarterly earnings releases and conference call transcripts (next expected for Q2 FY27). | Financial news outlets reporting on earnings, analyst consensus estimates for Net New ARR. | Bloomberg Terminal: CRWD consensus estimates, FactSet: CRWD earnings transcripts and analyst models. |
| AIDR (AI Detection and Response) Sequential ARR Growth & Q2 Pipeline | AIDR is a new, high-growth pillar directly addressing the critical need for AI security. Its rapid adoption and strong pipeline validate CrowdStrike's leadership in securing the expanding AI attack surface, signaling significant future revenue potential. | AIDR ending ARR sequential growth rate and the reported Q2 FY27 AIDR pipeline value. | Bullish: AIDR ending ARR sequential growth rate for Q2 FY27 reported above 250%; Q2 FY27 AIDR pipeline exceeds $50 million and shows continued expansion. Bearish: AIDR ending ARR sequential growth rate for Q2 FY27 decelerates significantly below 250%; Q2 FY27 AIDR pipeline growth stagnates or declines. | CrowdStrike's quarterly earnings releases and conference call transcripts (next expected for Q2 FY27). | Industry reports on AI security market growth, cybersecurity news outlets covering new AI security product adoption. | Thinknum: Job postings for 'AI Security Engineer' or 'AIDR' at CrowdStrike; Gartner/IDC reports on AI security market share. |
| Falcon Flex Ending ARR Growth and Re-Flex Customer Uplift | The Falcon Flex model is crucial for driving platform adoption and customer expansion. Sustained high growth in Flex ARR and strong re-Flex metrics demonstrate customer stickiness, increased module adoption, and long-term revenue durability. | Ending ARR from Falcon Flex accounts and its year-over-year growth rate; the number of re-Flex customers and their average ARR uplift. | Bullish: Ending ARR from Flex accounts year-over-year growth for Q2 FY27 remains at or above 99%; number of re-Flex customers increases above 480 with average uplift at or above 26%. Bearish: Ending ARR from Flex accounts year-over-year growth for Q2 FY27 decelerates significantly below 99%; re-Flex customer numbers or average uplift declines. | CrowdStrike's quarterly earnings releases and conference call transcripts (next expected for Q2 FY27). | None directly applicable. | Apptopia/Similarweb: CrowdStrike website traffic (proxy for customer interest/engagement); Thinknum: Customer reviews/sentiment analysis for Falcon Flex. |
| Strategic AI Partnerships (Anthropic & OpenAI) and Project QuiltWorks Progress | Being selected by frontier AI labs like Anthropic and OpenAI establishes CrowdStrike as a foundational security provider for the AI ecosystem. Project QuiltWorks' progress demonstrates the company's ability to capitalize on this strategic positioning and drive broad market adoption for AI security. | Announcements of new or expanded partnerships with frontier AI labs; specific updates on customer wins, vulnerability remediation numbers, or new coalition members for Project QuiltWorks. | Bullish: Announcement of new, significant partnerships or expanded roles with leading AI developers; Project QuiltWorks reports substantial new customer acquisitions or large-scale vulnerability remediation successes. Bearish: Lack of new partnership announcements or limited progress updates on Project QuiltWorks in subsequent quarters. | CrowdStrike's press releases, investor relations updates, and conference call commentary. | AI industry news, press releases from Anthropic/OpenAI mentioning security partners, cybersecurity blogs discussing AI security initiatives. | TechCrunch/The Information: Coverage of AI security partnerships; Gartner Peer Insights: Customer reviews mentioning AI security solutions. |
Key Reported Metrics
| Metric | Why It Matters | Last Period |
|---|---|---|
| Net New ARR | Net New ARR directly measures CrowdStrike's ability to acquire new customers and expand existing relationships. Its acceleration, driven by AI demand and Falcon Flex, signals robust market leadership and future revenue potential. | 32% |
| Total Revenue | Total Revenue reflects CrowdStrike's overall financial performance and market penetration. Its consistent acceleration for four quarters, exceeding guidance, signals strong execution and increasing demand for its cybersecurity solutions. | 26% |
| Ending ARR from Falcon Flex accounts | Falcon Flex ending ARR demonstrates the success of CrowdStrike's strategic licensing model in driving platform adoption and customer expansion. Its sustained high growth validates the company's ability to capture wallet share and accelerate overall ARR. | 99% |
Key QuestionsCan CrowdStrike sustain the accelerated net new ARR growth and re-Flex velocity of its Falcon Flex model to meet or exceed its raised FY27 guidance, particularl
Can CrowdStrike sustain the accelerated net new ARR growth and re-Flex velocity of its Falcon Flex model to meet or exceed its raised FY27 guidance, particularly following the strong Q1 FY27 performance and increased AI-driven demand?
- Question 2
Given the 'Mythos inflection point' and CrowdStrike's positioning as 'critical AI infrastructure,' how effectively will the company translate this unprecedented AI-driven demand into sustained, accelerated adoption and significant ARR contribution from its Next-Gen SIEM, Cloud Security, Identity platforms, and particularly its rapidly growing AIDR offering, while leveraging strategic partnerships and acquisitions?
- Question 3
Can CrowdStrike maintain its strong gross margins and competitive win rates, particularly in the rapidly expanding AI security and Next-Gen SIEM markets, by leveraging its unique AI-native platform and strategic partnerships with frontier AI labs and hyperscalers, to differentiate against both traditional and emerging competitors and solidify its position as the leading AI security layer?
Rerating Thresholds
| Metric | What'S Needed For Rerating | Why It Matters | Earnings Date |
|---|---|---|---|
| Net New ARR | For CrowdStrike (CRWD) to rerate higher, its Net New ARR for Q1 FY27 needs to comfortably exceed analyst expectations of approximately $275 million. Additionally, for a sustained higher rerating, the company should provide a Q2 FY27 guide that credibly supports back-half acceleration and ideally raise its full-year FY27 Net New ARR guidance above the current range of $1.213 billion to $1.264 billion. | Exceeding elevated analyst expectations and signaling accelerated full-year Net New ARR growth would validate the durability of CrowdStrike's Falcon Flex model and AI-driven platform expansion. This demonstrates strong customer adoption and reacceleration, reinforcing market leadership and justifying its premium valuation against competitive pressures. | 2026-06-03 |
| Next-Gen Identity, Cloud, and Next-Gen SIEM Ending ARR (collectively) | For CrowdStrike (CRWD) to rerate higher, the Next-Gen Identity, Cloud, and Next-Gen SIEM Ending ARR (collectively) metric needs to demonstrate continued acceleration, ideally achieving year-over-year growth significantly above the current 45% reported in Q4 FY26. This would indicate sustained momentum beyond the previously established rerating threshold of '45% or higher' for this collective metric. | Exceeding 45% growth validates CrowdStrike's platform expansion beyond endpoint, proving its ability to capture significant Total Addressable Market (TAM) in SIEM, Cloud, and Identity. This demonstrates durable growth, strengthens its competitive moat, and reinforces its position as an AI-era security leader, justifying a higher valuation. | 2026-06-03 |
| Ending ARR | For CrowdStrike's stock to rerate higher, the company needs to report Q1 FY27 Ending ARR that significantly exceeds its prior official guidance of $5.501 billion to $5.504 billion, and, more critically, raise its Full Year FY27 Ending ARR guidance substantially above $6.516 billion. This revised guidance would need to imply an acceleration in the year-over-year Ending ARR growth rate beyond the 24% reported in Q4 FY26, signaling sustained reacceleration into the second half of FY27. | Exceeding current ARR guidance and demonstrating accelerating growth beyond 24% year-over-year would validate the sustained success of the Falcon Flex model and platform expansion into Next-Gen SIEM, Cloud, and Identity. This would reinforce CrowdStrike's position as an AI-era security leader, justifying its premium valuation and alleviating concerns about competitive pressures and demand sustainability. | 2026-06-03 |
Earnings Transcript Summary
· 2027Q1 Earnings Call
| 3 Things Management Is Most Focused On | Call Takeaway & Tone | Prior Quarter'S Y/Y Growth By Segment | 3 Things Analysts Most Pressed On (And Mgmt Responses) | Revenue Segments |
|---|---|---|---|---|
| 1. **AI as critical infrastructure and a demand driver**: Management repeatedly emphasized that AI has dramatically risen in organizational visibility and funding priority, with CrowdStrike being understood as critical AI infrastructure. They highlighted the 'Mythos inflection point' where the world realized AI needs a cybersecurity ecosystem, driving unprecedented demand for Falcon to secure AI adoption and greenfield attack surfaces. 2. **Success and expansion of the Falcon Flex subscription model**: Management underscored the strong performance of the Falcon Flex model, citing record Q1 net new ARR from Flex accounts (nearly $2 billion ending ARR, growing 99% y/y), high Reflex customer numbers (480), and significant average Reflex uplift (26% and 51% for multiple Reflexes). They positioned Flex as the 'commercial harness to drive secure AI adoption.' 3. **Platform consolidation and growth in Next-Gen SIEM, Cloud, and Identity**: Management highlighted record Q1 net new ARR from the combination of these businesses, exceeding $2 billion in ending ARR. They emphasized their role in transforming the SOC with Charlotte AI, securing AI infrastructure in the cloud, and addressing the new identity opportunity in the AI era with offerings like Falcon for SaaS and Signal. | The call conveyed a highly **positive and confident** tone, emphasizing CrowdStrike's strong Q1 FY27 performance and its pivotal role in the 'AI revolution.' The key takeaway was that the 'Mythos inflection point' has dramatically accelerated demand for cybersecurity, positioning CrowdStrike as critical AI infrastructure and the 'picks and shovels' for the world's largest technology gold rush. Management expressed strong conviction in continued accelerated growth, driven by the Falcon platform's ability to secure AI adoption, the success of the Falcon Flex model, and the rapid expansion of next-gen modules like AIDR, SIEM, Cloud, and Identity. The announcement of a 4-for-1 stock split further underscored management's confidence in the company's future. | Net new ARR: 47% year-over-year. Ending ARR: 24% year-over-year. Total revenue: 23% year-over-year. Subscription revenue: 23% year-over-year. Professional services revenue: 26% year-over-year. Operating income (non-GAAP): 44.9% year-over-year. Falcon Flex accounts ending ARR: over 120% year-over-year. Falcon for SaaS ending ARR: Not explicitly provided for the prior quarter. | 1. **Near-term drivers for raised net new ARR guidance and the timing of the AI inflection**: Analysts inquired about the specific factors driving the significant raise in net new ARR guidance and when the 'Mythos moment' inflection in demand began to materialize. **Mgmt Response**: Burt Podbere attributed the confidence to strong module adoption rates, robust gross and net retention, a record Q2 pipeline, and the 'Mythos moment' creating an inflection point around AI. George Kurtz clarified that the inflection started at the end of March, slightly before Mythos, driven by customers needing to protect AI workloads to deploy AI faster, with thousands of interactions post-Mythos. 2. **Source of AI security spending (incremental vs. reallocation) and its impact on budgets**: Analysts questioned whether the current AI tailwind represents incremental security spending or a reallocation of existing budgets, and where this money is coming from within relatively set budgets. **Mgmt Response**: George Kurtz stated that the spending is largely incremental, following the 'crazy inflection point' in frontier model adoption and 'jaw dropping' token spend. He noted that companies are finding new money for AI adoption, as they realize 'if you want to create AI, you need GPUs. If you wanna use AI, you need security.' 3. **TAM for AIDR and competitive landscape**: Analysts asked about the total addressable market (TAM) for AIDR, especially relative to the forecasted $2.5 trillion AI market, and CrowdStrike's competitive advantage in this early market. **Mgmt Response**: George Kurtz believes the AIDR market will be 'larger than EDR' because of the sheer volume of agents (estimated 90 agents per employee) needing protection. He asserted CrowdStrike's 'right to win' due to its pioneering role in EDR, existing endpoint real estate (sensor), and unparalleled visibility into the agentic layer, allowing them to detect, block, and respond where AI actually runs. | Net new ARR: up 32% year over year. Ending ARR: more than 24% growth year over year. Total revenue: up 26% year over year. Subscription revenue: up 26% year over year. Professional services revenue: up 23% year over year. Operating income: up 62% year over year. Falcon Flex accounts ending ARR: growing 99% year over year. Falcon for SaaS ending ARR: growing nearly 4x year over year. |
· 2026Q4 Earnings Call
| 3 Things Management Is Most Focused On | Call Takeaway & Tone | Prior Quarter'S Y/Y Growth By Segment | 3 Things Analysts Most Pressed On (And Mgmt Responses) | Revenue Segments |
|---|---|---|---|---|
| 1. **AI as a Business Accelerant and Security Necessity**: Management repeatedly emphasized that AI is driving elevated demand for the Falcon platform and is a key accelerant for their business. They highlighted that AI is also weaponizing adversaries, making AI security a necessity at every layer of the new AI stack, from GPU foundations to AI applications. CrowdStrike positions itself as an "AI adoption accelerator" and a "catalyst for enterprise AI adoption" by securing AI usage and providing visibility, compliance, and enforcement. 2. **Expansion and Success of the Falcon Flex Subscription Model**: The Falcon Flex model was a central theme, described as "revolutionary" and "turbocharging our land-and-expand motion." Management detailed its success with record ending ARR from Flex accounts, a high number of new Flex customers, and significant ARR lift from "re-Flex" transactions, showcasing its effectiveness in driving platform adoption and customer value. 3. **Platform Consolidation and Growth in Next-Gen Segments (Identity, Cloud, SIEM)**: Management highlighted the strong performance and strategic importance of their Next-Gen Identity, Cloud, and Next-Gen SIEM businesses, which collectively grew over 45% year-over-year. They discussed recent acquisitions (SGNL.ai, Seraphic) to enhance these areas, aiming to consolidate security needs onto the Falcon platform, reduce TCO for customers, and address critical threat vectors like identity. | The overall takeaway from CrowdStrike's Q4 FY26 earnings call was overwhelmingly positive and confident. Management reported a "blockbuster Q4" and "best year yet," exceeding expectations across all guided metrics, driven by strong organic growth and the success of the Falcon Flex model. The tone was highly optimistic, emphasizing CrowdStrike's leadership in the "AI revolution" as both an enabler and protector of AI adoption. Key themes included the structural advantage of CrowdStrike's data moat, the efficacy of its AI-native platform in stopping breaches, the continued success and expansion of the Falcon Flex model, and the accelerating growth of its Next-Gen Identity, Cloud, and Next-Gen SIEM businesses. Management expressed strong conviction in their ability to deliver durable, profitable growth in FY27 and beyond, fueled by AI-driven demand and platform consolidation. | Net new ARR grew 73% year-over-year. Ending ARR grew 23% year-over-year. Ending ARR for cloud, Next-Gen Identity, and Next-Gen SIEM collectively grew more than 40% year-over-year. Ending ARR from accounts that have adopted the Falcon Flex subscription model grew more than 200% year-over-year. Next-Gen Identity business ending ARR accelerated (no specific percentage provided). Falcon Shield ending ARR had a record net new ARR quarter, growing nearly 50% sequentially (no specific year-over-year ending ARR growth provided). Cloud business ending ARR accelerated (no specific percentage provided). Next-Gen SIEM business ending ARR accelerated (no specific percentage provided). Total revenue grew 22% year-over-year. Subscription revenue grew 21% year-over-year. Professional services revenue grew 38% year-over-year. EMEA and APAC year-over-year revenue growth accelerated compared to Q2 (no specific percentage provided). | 1. **Materialization and Market Share of Securing AI**: Analysts questioned when securing AI would meaningfully contribute to ARR and how much of this new market opportunity would go to pure-play cyber vendors versus hyperscalers. **Mgmt Response**: George Kurtz stated that protecting AI is "happening today in terms of ARR growth," citing the 5x growth of AIDR. He emphasized that AI will drive growth not only in AIDR but also in protecting cloud attack surfaces, Next-Gen SIEM, and other AI-touching areas. He drew a parallel to cloud security, where hyperscalers didn't provide all security, and predicted pure-play vendors like CrowdStrike would partner with "AI hyperscalers" to provide better outcomes within the Falcon platform. 2. **Agentic Security, Recent Acquisitions, and Identity as a Hurdle**: Analysts asked for color on CrowdStrike's 10 other agents besides Charlotte, the customer journey for agentic deployments, and if identity is a main hurdle. **Mgmt Response**: George Kurtz confirmed identity as "one of the biggest threat vectors right now," with 80% of breaches being non-malware-based and often related to identity. He highlighted the strength of their identity stack, including the recent SGNL.ai acquisition for zero standing privilege and Seraphic for browser security, which protects the "front door" where attacks and AI interaction occur. He also reiterated AIDR's potential to become as essential as EDR due to compliance needs. 3. **Durability of Next-Gen SIEM Moat against Frontier Labs and LLM Providers**: Analysts expressed concerns that the open-ended SOC modernization opportunity for Next-Gen SIEM might be at risk from frontier labs and LLM providers, questioning the durability of CrowdStrike's moat. **Mgmt Response**: George Kurtz asserted that CrowdStrike is a "net data creator" with unique, real-time telemetry from its agents and Threat Graph, which is vastly different from what LLM providers do. He explained that while they leverage frontier models and have their own small language models, stopping breaches requires "sensors, real-time telemetry, continuous expert validation and enforcement, a closed-loop system, not a text model." He emphasized their "open model" allowing customers to create their own agents leveraging CrowdStrike's technologies, driving consolidation and stickiness. | Net new ARR grew 47% year-over-year. Ending ARR accelerated to 24% growth year-over-year. Ending ARR for cloud, Next-Gen Identity, and Next-Gen SIEM collectively grew more than 45% year-over-year. Ending ARR from accounts that have adopted the Falcon Flex subscription model grew more than 120% year-over-year. Next-Gen Identity business ending ARR grew more than 34% year-on-year. Falcon Shield ending ARR grew more than 300% year-over-year. Cloud business ending ARR grew more than 35% year-over-year. Next-Gen SIEM business ending ARR grew over 75% year-over-year. Total revenue grew 23% year-over-year. Subscription revenue grew 23% year-over-year. Professional services revenue grew 26% year-over-year. EMEA and APAC year-over-year revenue growth accelerated compared to Q3. |
· 2026Q3 Earnings Call
| 3 Things Management Is Most Focused On | Call Takeaway & Tone | Prior Quarter'S Y/Y Growth By Segment | 3 Things Analysts Most Pressed On (And Mgmt Responses) | Revenue Segments |
|---|---|---|---|---|
| 1. **AI Transformation and Security**: Management is heavily focused on CrowdStrike's role in securing the AI era, specifically protecting the 'agentic workforce' and underlying AI infrastructure, emphasizing the expanding attack surface due to AI adoption and the necessity of CrowdStrike's platform as both the 'armor and intelligence layer'. 2. **Single Platform Consolidation**: A core focus is on driving customer consolidation onto CrowdStrike's single platform, particularly with Falcon NextGen SIEM as the foundation. Management highlights that this unified approach delivers superior outcomes, scalability, cost benefits, and ease of use compared to fragmented point products and legacy solutions. 3. **Falcon Flex Adoption**: Management is committed to making Falcon Flex the standard licensing model. They believe Flex makes it easier for customers to adopt more of the Falcon platform faster, leading to increased module utilization, larger deals, and longer-term customer value, contrary to traditional ELA models. | The overall takeaway is that CrowdStrike delivered an exceptional fiscal third quarter 2026, marked by significant acceleration across key financial metrics and strong customer demand. The tone of the call was highly positive and confident, with management emphasizing their strategic leadership in the AI-driven cybersecurity market. Key themes included the successful execution of their single platform strategy, the rapid adoption and expansion driven by the Falcon Flex model, and the strong performance of emerging modules like NextGen SIEM, Cloud, and Identity. Management expressed strong conviction in continued profitable growth and their ability to capitalize on the generational opportunity presented by AI adoption. | In Q2 FY26, net new ARR was a record $221 million, showcasing accelerating net new ARR. Ending ARR grew more than 20% year over year. Total revenue grew 21% year over year. Subscription revenue grew 20% year over year. Cloud, next-gen identity, and next-gen SIEM solutions collectively grew more than 40% year over year. Next-Gen SIEM ARR grew more than 95% year over year. A specific year-over-year growth percentage for the endpoint business or Falcon Flex ending ARR was not explicitly provided for Q2 FY26 in the search results, making a direct comparison to Q3's acceleration difficult for these specific segments. | 1. **Emerging Segments' Performance and AI's Impact on Endpoint**: Analysts inquired about the performance of emerging segments (NextGen SIEM, Identity, Cloud) after CCP initiatives and how AI is accelerating the core endpoint business. *Mgmt Response*: Management stated that emerging products performed 'fantastic,' with NextGen SIEM being an 'all-star standout,' Identity 'key to securing AI,' and strong Cloud wins driving consolidation. For endpoint, AI adoption at the edge (e.g., desktop AI apps) creates new risk factors, acting as a catalyst for renewed interest and protection. 2. **SIEM Market Displacements and Observability Expansion**: Analysts questioned the velocity of SIEM displacements, the value CrowdStrike captures, and the potential for further expansion into observability. *Mgmt Response*: Management likened the SIEM market to the early days of legacy AV replacement, driven by customer demand for better outcomes, faster results, and lower costs. They emphasized disruptive pricing due to existing EDR data and that all customers are NextGen SIEM enabled. They also confirmed viewing observability as a consolidation opportunity, leveraging existing technology and agent capabilities for IT data. 3. **Sustainability of Falcon Flex and AWS Partnership Dynamics**: Analysts probed the long-term sustainability of the Flex model's tailwind on NRR and how the strengthening AWS partnership might affect relationships with other hyperscalers. *Mgmt Response*: Management asserted that Flex drives 'continuous' net ARR growth, designed for easy customer expansion, leading to bigger and longer deals by enabling consolidation and lower TCO. Regarding AWS, they expressed extreme excitement, calling it a 'tremendous enabler' for new customer acquisition and a 'needed technology,' stating it doesn't preclude working with other players. | Net new ARR grew 73% year over year. Ending ARR accelerated to 23% growth year over year. Total revenue grew 22% over Q3 of last year. Subscription revenue grew 21% over Q3 of last year. Ending ARR from accounts that have adopted the Falcon Flex subscription model grew more than 200% year over year. There was broad-based ending ARR acceleration across cloud, next-gen identity, and next-gen SIEM collectively, as well as acceleration in the endpoint business. Falcon NextGen SIEM had a record net new ARR quarter. FalconShield (part of the identity business) had a record net new ARR quarter, growing nearly 50% sequentially. Cloud delivered Q3 record net new ARR. US and APAC year-over-year revenue growth accelerated compared to Q2. |
Transcript Tidbits
| About Expanding Eligible Market | About Competition | About The Broader Industry | Where Things Are Headed | Updates On Theme | Broader Themes Emerging | Bullish-Leaning Quotes (Short) | Bearish-Leaning Quotes (Short) | Hiring |
|---|---|---|---|---|---|---|---|---|
| CrowdStrike reported record Q1 net new ARR of $256 million, a 32% year-over-year increase, and ending ARR of $5.51 billion, accelerating over Q4 with more than 24% growth. Total revenue reached $1.39 billion, up 26% year-over-year, marking the fourth consecutive quarter of acceleration. The company added over 300 Falcon Flex accounts in the quarter, with Flex accounts now representing more than $1.9 billion in ending ARR, growing 99% year-over-year. AIDR (AI detection and response) saw its ending ARR grow over 250% sequentially, with a Q2 pipeline exceeding $50 million. The Next-Gen SIEM business surpassed $600 million in ending ARR, and the combined Cloud and Identity businesses exceeded $2 billion in ending ARR. Falcon for SaaS ending ARR grew nearly 4x year-over-year. The Falcon Flex model continues to drive expansion, with 480 Reflex customers (nearly 25% of all Flex customers) achieving an average uplift of 26% within seven months, and over 130 customers Reflexing multiple times for an average 51% ARR uplift over their original Flex contract. Notable wins include an 8-figure new logo land in a major US government agency, replacing legacy security products across over 200,000 hosts, a 7-figure AIDR win with an automotive financial services leader, and an 8-figure cloud security win with a high-performance AI chip company. CrowdStrike was also the only cybersecurity company selected by both Anthropic and OpenAI from the start to secure their new models, and expanded its Project QuiltWorks coalition to include major consulting firms and insurers. | CrowdStrike was the only cybersecurity company selected by both Anthropic and OpenAI from the very start to secure their new models. The company successfully replaced a legacy AV, an operating system EDR, and a legacy vulnerability management point product in an 8-figure new logo land with a major US government agency. Kroll, a new logo account, replaced their incumbent next-gen endpoint vendor with CrowdStrike. In an 8-figure new logo land with a major fuel retailer, CrowdStrike was chosen to replace a legacy SIEM, a next-gen EDR, and integrate software from a network security hardware vendor. George Kurtz highlighted CrowdStrike's unique advantage, stating that while competitors may provide AI visibility, only CrowdStrike can detect, block, and respond where AI actually runs. He also noted that CrowdStrike is not burdened by legacy technology and patchwork solutions, particularly in identity, offering a fresh approach to zero standing privileges. | Cybersecurity has dramatically risen in organizational visibility and funding priority. AI adoption is now an existential imperative across all geographies and verticals, with increasing AI adoption directly correlating to increased cybersecurity requirements. The 'Mythos inflection moment' in April demonstrated that the world, including frontier AI labs, recognizes the critical need for a cybersecurity ecosystem for AI. Adversaries are leveraging new AI models to 'democratize destruction,' enabling more potent cyber attacks. AI's impact on cybersecurity is twofold: the need to secure AI itself as foundational infrastructure, and the explosion of greenfield attack surfaces (hardware, data centers, Neo Clouds, agentic applications) that all require cybersecurity. The market's perception of cybersecurity has shifted from primarily risk management to a strategic accelerator and critical enabler of AI adoption. The rapid adoption of AI tools has significantly expanded the endpoint attack surface, leading to renewed enterprise focus on endpoint security investment. The emergence of nonhuman identities and agents necessitates new demand for security sensors. While worldwide AI spending is projected to exceed $2.5 trillion, only a low single-digit percentage of organizations have an advanced AI security strategy, creating the widest security asymmetry since the cloud transition. In the AI era, every agent requires an identity and governance, as enterprises struggle to differentiate between human and machine identities. The US government's executive order to upgrade systems for advanced AI is expected to create a tailwind for AI security businesses. AI adoption is still in its early stages, with security adoption typically lagging behind technology adoption. The 'Mythos moment' is described as a 'Y2K moment for security'. | CrowdStrike is guiding for net new ARR acceleration for the full year, expecting growth to accelerate over FY 2026, driven by AI creating structural and compounding demand for cybersecurity. The company views AIDR as a new growth pillar and a larger opportunity than EDR, securing seven distinct AI attack surfaces. Charlotte AI is becoming the reasoning engine across Falcon, and AgentWorks will expand the ecosystem with specialized AI agents built by partners on the Falcon platform, aiming to transform CrowdStrike into the operating system of the AI SOC. Falcon Flex is positioned as the commercial model to drive secure AI adoption. CrowdStrike aims to be the world's AI security layer, leveraging its nearly 100,000 customers and thousands of partners. Dr. Bartley Richardson has joined as Chief AI and Autonomous System Officer to deepen NVIDIA collaboration and verticalize AI into cybersecurity. The company is raising its full-year net new ARR guidance by over $50 million and announced a 4-for-1 stock split to enhance investor accessibility. CrowdStrike expects FY27 net new ARR growth to accelerate to 27.7% at the midpoint, a 520 basis point increase from prior guidance. The company plans to remain opportunistic in share repurchases and will continue strategic M&A, focusing on integrating best-of-breed tech and teams, particularly in emerging AI areas like data protection. The FalconFlex license model is designed to accommodate future token consumption-based pricing. | Cloud | The 'Mythos inflection point' signifies a collision between cybersecurity and frontier AI, leading to a universal understanding that AI necessitates robust defense. This moment is likened to a 'Y2K moment for security,' demanding a fundamental shift in security paradigms. The 'democratization of destruction' highlights the increased threat from adversaries leveraging new AI models for sophisticated cyber attacks. The concept of 'AI as critical infrastructure' underscores its foundational role and the imperative for integrated security. The rise of the 'agentic workforce' and the proliferation of nonhuman identities and agents represent a significant expansion of the attack surface. | CrowdStrike is now being understood as critical AI infrastructure. AI adoption is not a nice to have it is an existential imperative across every geography, and vertical. The more AI an organization adopts, the more cybersecurity it requires. AI driving structural demand for cybersecurity that compounds, not decelerates. CrowdStrike is the only cybersecurity company to secure both Anthropic and OpenAI's introduction programs from the very start. AIDR is quickly becoming a new growth pillar in our business. In my career, I have never seen adoption happen this fast. As I look forward, I see AIDR as a larger opportunity than EDR. The gap between AI adoption and AI protection is the widest asymmetry in security since the cloud transition. Customers are coming back multiple times and they are continuously spending more. CrowdStrike is not only in the right place at the right time, we are the right technology to stop the breach. Think of CrowdStrike as the picks and shovels for the world's largest technology gold rush of all time. We are raising our full year net new ARR guidance by more than $50 million. We are announcing CrowdStrike's first stock split as a public company. Cybersecurity is not a nice to have in the world of AI. it is a need to have. We delivered strong first quarter results to begin the new fiscal year. The Mythos moment marked an inflection point for the industry. The data gravity and the data moat that we talk about is obviously here. For me, it is, you know, 1 of the most exciting times since when I started the company. | Now any human or agent can be a viable hacker or worse, wage serious cyber attacks that threaten enterprise survival. Deploying AI across the enterprise is simply too risky without it from the start. Governing what AI agents can and cannot do across the enterprise... a problem that simply did not exist 2 years ago. We heard just crazy stories about AI run amok. The adoption front runs the security piece of it. | Dr. Bartley Richardson joins George Kurtz's leadership team as chief AI and autonomous system officer, coming from NVIDIA where he led Agentic AI and cybersecurity AI. |
| About Expanding Eligible Market | About Competition | About The Broader Industry | Where Things Are Headed | Updates On Theme | Broader Themes Emerging | Bullish-Leaning Quotes (Short) | Bearish-Leaning Quotes (Short) | Hiring |
|---|---|---|---|---|---|---|---|---|
| Falcon Flex ending ARR exceeded $1.69B and grew >120% YoY; over 1,600 Falcon Flex customers with 350+ added in Q4; nearly 4 new Flex customers per day in the quarter; >380 Flex accounts have re-Flexed, ~23% of Flex base, up from 5% in Q1; average Flex ending ARR >$1M; 50% of subscription customers use 6+ modules, 34% use 7+, 24% use 8+; AWS marketplace activity nearing $1.5B in total contract value; Microsoft marketplace collaboration opened; Onum and SGNL.ai acquisitions expanding telemetry and identity capabilities; Falcon Cloud Security 8-figure Flex wins; partnership-driven expansion (EY, Accenture, Deloitte, HCL, Wipro, KPMG, Infosys) and MSSP growth (Kroll, Pax8, NinjaOne); 1.01B net new ARR for FY26, ending ARR $5.25B; Cloud, Next-Gen Identity and Next-Gen SIEM driving net new ARR growth; expanding coverage across cloud, identity, SIEM alongside endpoint." | CrowdStrike highlights displacement of Wiz in cloud security and wins against legacy SIEMs and hyperscalers (e.g., Splunk, Defender for Endpoint, other point cloud security products); disruptive pricing for Next-Gen SIEM due to existing EDR data; 2 SIEM replacements in a Fortune 500 healthcare account; partnerships that enable rapid expansion (Deloitte, Wipro, Kroll) and strong AWS partnership as a gateway to Flex adoption; emphasis on Falcon being purpose-built for AI security across layers, contrasting with frontier models and generic LLMs; AWS and Microsoft marketplaces as acceleration channels but not substitution for Falcon platform; ongoing competition from bundled security offerings by large incumbents and AI security tools; relentless platform consolidation as a moat against point-product competitors. | AI-driven security paradigm expanding attack surfaces (agentic workforce); demand for a single, unified, AI-native security platform; rise of runtime cloud security and observability as core capabilities; increasing third-party SaaS risk and need for real-time telemetry; shift from point products to platform-based approaches; ongoing emphasis on data moat and threat intel as durable competitive advantages; cloud providers being integrated as partners, not sole security providers; maturation of the cloud security market with emphasis on protection at runtime and integration with CSPM, CIEM, and threat hunting. | AI adoption is a generational tailwind; Falcon Flex to become the standard licensing model to accelerate platform adoption and ARR expansion; NextGen SIEM and cloud identity will continue to drive multi-year ARR growth; AWS and Microsoft partnerships will convert usage to Flex subscriptions, expanding enterprise reach; SGNL.ai and Seraphic acquisitions enhance identity and browser security, strengthening agentic security workflows; CrowdStrike aims to be the operating system of cybersecurity for the Agentic era with phase transitions from endpoint to identity, cloud, and SIEM integration; continued M&A to extend capabilities while integrating them into Falcon platform. | Phase | Falcon Flex unlocks never-seen-before adoption for customers. |
| About Expanding Eligible Market | About Competition | About The Broader Industry | Where Things Are Headed | Updates On Theme | Broader Themes Emerging | Bullish-Leaning Quotes (Short) | Bearish-Leaning Quotes (Short) | Hiring |
|---|---|---|---|---|---|---|---|---|
| Falcon Flex ending ARR exceeded $1.69B and grew >120% YoY; over 1,600 Falcon Flex customers with 350+ added in Q4; nearly 4 new Flex customers per day in the quarter; >380 Flex accounts have re-Flexed, ~23% of Flex base, up from 5% in Q1; average Flex ending ARR >$1M; 50% of subscription customers use 6+ modules, 34% use 7+, 24% use 8+; AWS marketplace activity nearing $1.5B in total contract value; Microsoft marketplace collaboration opened; Onum and SGNL.ai acquisitions expanding telemetry and identity capabilities; Falcon Cloud Security 8-figure Flex wins; partnership-driven expansion (EY, Accenture, Deloitte, HCL, Wipro, KPMG, Infosys) and MSSP growth (Kroll, Pax8, NinjaOne); 1.01B net new ARR for FY26, ending ARR $5.25B; Cloud, Next-Gen Identity and Next-Gen SIEM driving net new ARR growth; expanding coverage across cloud, identity, SIEM alongside endpoint." | CrowdStrike highlights displacement of Wiz in cloud security and wins against legacy SIEMs and hyperscalers (e.g., Splunk, Defender for Endpoint, other point cloud security products); disruptive pricing for Next-Gen SIEM due to existing EDR data; 2 SIEM replacements in a Fortune 500 healthcare account; partnerships that enable rapid expansion (Deloitte, Wipro, Kroll) and strong AWS partnership as a gateway to Flex adoption; emphasis on Falcon being purpose-built for AI security across layers, contrasting with frontier models and generic LLMs; AWS and Microsoft marketplaces as acceleration channels but not substitution for Falcon platform; ongoing competition from bundled security offerings by large incumbents and AI security tools; relentless platform consolidation as a moat against point-product competitors. | AI-driven security paradigm expanding attack surfaces (agentic workforce); demand for a single, unified, AI-native security platform; rise of runtime cloud security and observability as core capabilities; increasing third-party SaaS risk and need for real-time telemetry; shift from point products to platform-based approaches; ongoing emphasis on data moat and threat intel as durable competitive advantages; cloud providers being integrated as partners, not sole security providers; maturation of the cloud security market with emphasis on protection at runtime and integration with CSPM, CIEM, and threat hunting. | AI adoption is a generational tailwind; Falcon Flex to become the standard licensing model to accelerate platform adoption and ARR expansion; NextGen SIEM and cloud identity will continue to drive multi-year ARR growth; AWS and Microsoft partnerships will convert usage to Flex subscriptions, expanding enterprise reach; SGNL.ai and Seraphic acquisitions enhance identity and browser security, strengthening agentic security workflows; CrowdStrike aims to be the operating system of cybersecurity for the Agentic era with phase transitions from endpoint to identity, cloud, and SIEM integration; continued M&A to extend capabilities while integrating them into Falcon platform. | Phase | Falcon Flex unlocks never-seen-before adoption for customers. |
| About Expanding Eligible Market | About Competition | About The Broader Industry | Where Things Are Headed | Updates On Theme | Broader Themes Emerging | Bullish-Leaning Quotes (Short) | Bearish-Leaning Quotes (Short) | Hiring |
|---|---|---|---|---|---|---|---|---|
| CrowdStrike is expanding its eligible market through the Falcon Flex subscription model, which has over $1.35 billion in ending ARR from adopted accounts, growing over 200% year over year. The company sees broad-based ARR acceleration across cloud, next-gen identity, and next-gen SIEM, as well as its endpoint business. AI is rapidly expanding the attack surface, creating a new 'agentic workforce' that necessitates protection, positioning CrowdStrike as the armor and intelligence layer for agentic identity security. The acquisition of Onum further enhances its hyper-scalable telemetry detection pipeline, bringing CrowdStrike closer to all customer data. The expanded partnership with AWS makes Falcon NextGen SIEM natively available to millions of AWS customers, with the intent to convert usage into Flex subscriptions. Falcon Shield can land new logo accounts even without endpoint deployments, addressing the elevated third-party SaaS risk environment. The F5 partnership expands the endpoint TAM by enabling protection for BIG IP hardware and virtual appliances, historically unable to support endpoint agents. A new MSSP partnership with Kroll involves migrating nearly half a million endpoints to Falcon, opening up the mid-market and incident response segments. CrowdStrike also sees opportunities in observability, with customers already using its platform for such use cases, and views it as a consolidation opportunity. The company serves customers of all sizes, from enterprise to SMB and MSSPs, with its technology being agnostic to customer size. | CrowdStrike's Falcon NextGen SIEM is displacing hyperscalers and firewall vendor SIEMs, winning against competitors like Splunk. The company has seen multiple displacements of Wiz in cloud security and has replaced two SIEMs, Defender for Endpoint, and a point cloud security product in a Fortune 500 healthcare account. Deloitte and Wipro have standardized their SIEM practices on Falcon, replacing legacy SIEM providers. CrowdStrike's AI capabilities are highlighted as being beyond chatbots, differentiating it from competitors who are 'still stuck on chatbots'. The company offers disruptive pricing for NextGen SIEM due to already having EDR data in its platform. The Kroll partnership involved an almost 8-figure rip and replace transaction, displacing an inferior point product SMB EDR. CrowdStrike continues to take market share from legacy AV, which still constitutes 50% of the market. | The digital society mandates cybersecurity as a necessity, regardless of market swings or geopolitical tensions. Organizations are undergoing AI transformations to improve workforce productivity, leading to the emergence of an 'agentic workforce' and a rapidly expanding attack surface. The 'democratization of destruction' is a reality, with AI-powered adversarial tradecraft, including state-sponsored adversaries using LLMs for cyber intrusions. Cybersecurity in the agentic era demands a single, unified platform to operate with agility and efficacy, as fragmented point products create vulnerabilities. The cloud security market is maturing, with customers realizing that posture alone doesn't equate to prevention, necessitating active runtime defense. AI adoption is driving renewed interest in endpoint security, as the endpoint becomes the epicenter of human and nonhuman interaction with AI. There is an elevated third-party SaaS risk environment demanding visibility and protection. Many organizations previously avoided collecting certain data due to cost, but new solutions are enabling broader data collection. The GSI community is actively pursuing SIEM and SOC transformation opportunities. A Canalys report indicates that CrowdStrike's ecosystem creates up to $7 in services opportunities for every dollar of Falcon product sales. | CrowdStrike anticipates continued near-term and long-term growth driven by customer, prospect, and partner momentum. The company aims to be the 'operating system of cybersecurity for the Agentic era' through its technology innovation engine and ecosystem. Successful AI adoption will necessitate cybersecurity transformation and a new operating system. Falcon NextGen SIEM is positioned as the foundation of this operating system, with the acquisition of Onum making it even easier to build on the platform. Falcon Flex is expected to become the standard licensing model, accelerating module adoption and platform utilization. The AWS partnership is intended to convert NextGen SIEM usage into Flex subscriptions, onboarding AWS accounts to Falcon as their cybersecurity operating system. AI is seen as the largest opportunity and demand driver, with CrowdStrike aiming to revolutionize cybersecurity using AI and secure the world's use of AI. The company views this as a 'generational opportunity' and expects AI to be a significant tailwind. CrowdStrike has strong conviction in delivering profitable growth for FY '26 and beyond, with a robust demand environment and a large Q4 opportunity. The company plans to continue building out its identity stack and will be opportunistic and strategic in M&A, focusing on integrating best-of-breed technologies into its single platform. The SIEM market displacement is viewed as a multiyear, long-tail journey similar to legacy AV displacement. | Phase | The emergence of an 'agentic workforce' and the 'democratization of destruction' due to AI-powered adversarial tradecraft are significant broader themes. AI transformations are driving investments in workforce productivity across industries, leading to a rapidly expanding attack surface. The necessity for a single, unified cybersecurity platform is becoming critical due to the complexities and vulnerabilities created by fragmented point products in this new era. | It was a record quarter as the business continued accelerating. CrowdStrike Holdings, Inc. is mission-critical in today's agentic society. CrowdStrike Holdings, Inc. wins as the market's broadest and only single platform solution. Falcon NextGen SIEM had a record net new ARR quarter. Falcon Shield delivers near-immediate time to value and is a product that we can land new logo accounts with even without endpoint deployments. CrowdStrike Holdings, Inc. is the cloud runtime security leader. AI adoption is supercharging renewed interest in the endpoint. Falcon Flex is an unlock, not an ELA. AWS selected Falcon NextGen SIEM as the default SIEM for all their customers. AI represents our largest opportunity and demand driver yet. I can't imagine a better defender than CrowdStrike Holdings, Inc. Acceleration is back. This was one of our very best quarters in company history. We delivered an exceptional third quarter driven by organic growth, exceeding expectations across all guided metrics. We achieved record Q3 net new ARR of $265 million, exceeding our expectations by double-digit millions and more than 10 percentage points. ending ARR reached $4.92 billion, accelerating to 23% growth over last year. all-time record pipeline entering Q4, we have strong conviction in our ability to deliver profitable growth. We're not selling products. We're delivering outcomes. | No quotes were perceived as bearish. |
Earnings ResultsCrowdStrike's subscription revenue of $1.24 billion and 23% year-over-year growth fell slightly short of the rerating trigger's requirement of at least $1.25 bi
| Metric | Prior Quarter | Rerating Trigger | Actual Reported | Hit Target? | Notes |
|---|---|---|---|---|---|
| Subscription Revenue | 21% year over year | CrowdStrike's Subscription Revenue needs to hit at least $1.25 billion, representing a year-over-year growth rate of 25% or higher. This would signify an acceleration from the 21% year-over-year growth reported in Q3 FY26 and exceed the implied analyst consensus of approximately 22-23% year-over-year growth for Q4 FY26 subscription revenue. | $1.24 billion (23% y/y growth) | No | CrowdStrike's subscription revenue of $1.24 billion and 23% year-over-year growth fell slightly short of the rerating trigger's requirement of at least $1.25 billion and 25% year-over-year growth. While the company reported strong top-line performance and exceeded overall expectations, this specific metric did not meet the higher threshold for a rerating. |
| Net New ARR | 73% year over year | For CrowdStrike (CRWD) to rerate higher, the Net New ARR metric for Q4 FY26 needs to comfortably exceed the high end of management's guidance for 'low to mid-teens sequential net new ARR growth' from Q3 FY26. Given Q3 FY26 Net New ARR was $265 million, this implies a Q4 FY26 Net New ARR of at least $305 million, ideally closer to $310 million or higher. Additionally, the company needs to demonstrate that its second-half FY26 net new ARR growth is significantly above its raised guidance of 'at least 50% year-over-year'. This is particularly important given recent analyst revisions that have lowered projections for Q4 net new ARR growth from 18% to 14% sequentially. | $330.7 million (47% y/y growth) | Yes | CrowdStrike reported a record net new ARR of $330.7 million for Q4 FY26, significantly exceeding the rerating trigger's target of at least $305 million and ideally closer to $310 million or higher. This performance was described as a 'blockbuster Q4' and 'well ahead of our stated expectations'. The year-over-year growth for Q4 was 47%, which is strong, although the second-half FY26 growth was not explicitly stated as 'significantly above 50% year-over-year' in the transcript. However, the primary absolute value target for Q4 net new ARR was comfortably met, indicating strong customer acquisition and expansion. |
| Next-Gen SIEM / Cloud / Identity ARR Momentum | more than 40% year over year | For CrowdStrike Holdings, Inc. (CRWD) to rerate higher, the Next-Gen SIEM / Cloud / Identity ARR Momentum metric needs to demonstrate continued acceleration and strong performance in its upcoming Q4 FY26 earnings. Specifically, investors will be looking for: Next-Gen SIEM ARR to sustain year-over-year growth at or above 95%. Cloud ARR to accelerate year-over-year growth to at least 40% (from its current +35%). Identity ARR to accelerate year-over-year growth to at least 25% (from its current +21%). Collectively, the blended year-over-year growth rate for Next-Gen SIEM, Cloud, and Identity ARR should be 45% or higher, exceeding the '>40% blended growth' bull point mentioned in the investment thesis. | Collectively >45% y/y growth; Next-Gen SIEM >75% y/y growth; Cloud >35% y/y growth; Identity >34% y/y growth | Partially | The collective ending ARR for Next-Gen SIEM, Cloud, and Identity solutions grew 'more than 45% year-over-year', meeting the collective rerating threshold. Individually, the Next-Gen Identity business grew 'more than 34% year-on-year', exceeding its 25% target. However, Next-Gen SIEM grew 'over 75% year-over-year', falling short of the 95% target, and the Cloud business grew 'more than 35% year-over-year', not accelerating to the 'at least 40%' target. The mixed performance across the individual components results in a 'Partially' hit for this multi-faceted metric. |
| Net New ARR | 32% | For CrowdStrike (CRWD) to rerate higher, its Net New ARR for Q1 FY27 needs to comfortably exceed analyst expectations of approximately $275 million. Additionally, for a sustained higher rerating, the company should provide a Q2 FY27 guide that credibly supports back-half acceleration and ideally raise its full-year FY27 Net New ARR guidance above the current range of $1.213 billion to $1.264 billion. | $255.8 million (32% y/y growth) | Partially | CrowdStrike reported Q1 FY27 net new ARR of $255.8 million, which was below analyst expectations of approximately $275 million. However, the company did raise its full-year FY27 net new ARR guidance to a range of $1.279 billion to $1.303 billion, exceeding the prior upper range of $1.264 billion. Management expressed strong confidence in the full-year outlook, citing AI tailwinds and a record Q2 pipeline. |
| Next-Gen Identity, Cloud, and Next-Gen SIEM Ending ARR (collectively) | >45% | For CrowdStrike (CRWD) to rerate higher, the Next-Gen Identity, Cloud, and Next-Gen SIEM Ending ARR (collectively) metric needs to demonstrate continued acceleration, ideally achieving year-over-year growth significantly above the current 45% reported in Q4 FY26. This would indicate sustained momentum beyond the previously established rerating threshold of '45% or higher' for this collective metric. | Exceeded $2 billion in ending ARR (growth not explicitly stated as significantly above 45% y/y) | Partially | The combined Next-Gen Identity, Cloud, and Next-Gen SIEM businesses exceeded $2 billion in ending ARR and achieved record Q1 net new ARR. While management noted that Next-Gen Identity net new ARR growth accelerated versus Q4, a specific year-over-year ending ARR growth rate for the collective that is 'significantly above 45%' was not explicitly provided in the earnings transcript for Q1 FY27 to directly compare against the rerating trigger. |
| Ending ARR | 24% | For CrowdStrike's stock to rerate higher, the company needs to report Q1 FY27 Ending ARR that significantly exceeds its prior official guidance of $5.501 billion to $5.504 billion, and, more critically, raise its Full Year FY27 Ending ARR guidance substantially above $6.516 billion. This revised guidance would need to imply an acceleration in the year-over-year Ending ARR growth rate beyond the 24% reported in Q4 FY26, signaling sustained reacceleration into the second half of FY27. | $5.51 billion (more than 24% y/y growth) | Yes | CrowdStrike reported Q1 FY27 ending ARR of $5.51 billion, which exceeded its prior official guidance of $5.501 billion to $5.504 billion. The company also raised its full-year FY27 ending ARR guidance to a range of $6.532 billion to $6.556 billion, substantially above the prior threshold of $6.516 billion. The reported year-over-year growth rate of 'more than 24%' indicates sustained acceleration beyond the prior quarter's 24% growth. The company's confidence was further underscored by the announcement of a 4-for-1 stock split. |
Notes
| Date | Comment | Comment Type | Comment Sentiment | Link | IS CHANGE | Price Reaction |
|---|---|---|---|---|---|---|
| 2025-08-28 | Q2 FY26 showed strong platform momentum: net new ARR hit $221M (vs. $194M prior), subscription revenue rose 20% YoY to $1.10B, and Next-Gen SIEM ARR surged ~95% YoY with solid cloud/identity growth. Management guided FY26 revenue to $4.74–$4.81B and reaffirmed back-half ARR acceleration. Despite revenue optics noise (low Q3 guide) from CCP, investors viewed Flex traction and module adoption as proof of durable growth. Stock closed +4.5% on the day. | Earnings Transcript | Mixed | -4.14% (vs SPY: -2.81%) | ||
| 2025-06-03 | Beat expectations with solid ARR and Flex deal momentum. Growth is slower than last year but Flex is creating larger, stickier, faster deals. Analysts are testing whether this model really accelerates ARR and improves margins—or whether revenue recognition quirks and Microsoft/PANW pressure make it look better than it is. Management is leaning on Flex, platform breadth (esp. SIEM/Cloud/Identity), and Charlotte AI to re-accelerate growth in the back half. | Earnings Transcript | Mixed | -4.16% (vs SPY: -4.67%) | ||
| 2026-06-03 | CrowdStrike's Q1 FY27 earnings revealed an "AI inflection point," driving unprecedented demand for its Falcon platform as critical AI infrastructure. The company reported record net new ARR of $256M, up 32% YoY, and significantly raised its full-year FY27 net new ARR guidance, expecting acceleration. This, alongside a 4-for-1 stock split announcement, indicates strong market confidence and robust growth. | Earnings Transcript | Neutral | False | N/A |
Upcoming Events
| Catalyst ID | Estimated Timing | Estimated Date Start | Estimated Date End | Catalyst | Why It Matters | Ticker Or Theme Specific | Transcript Date | Source Type |
|---|---|---|---|---|---|---|---|---|
| CRWD_9ddf8a0f | yesterday's AWS announcement | 2025-12-01 | 2025-12-01 | AWS selected Falcon NextGen SIEM as the default SIEM for all AWS customers, with federated search and native access to AWS telemetry in NextGen SIEM. | Significant expansion of CrowdStrike's addressable TAM and faster velocity of SIEM adoption via a premier hyperscaler integration, potentially driving higher ARR growth and channel-led upsell sentiment. | Ticker | 2025-12-02 | earnings_transcript |
| CRWD_97101daa | Q4 FY26 | 2025-12-01 | 2026-01-31 | Integration of the Pangaea acquisition into the Falcon platform, rolling into the platform in Q4 FY26. | Adds platform breadth and data telemetry capabilities, potentially boosting cross-sell across NextGen SIEM, Cloud, Identity, and endpoint modules; supports ARR expansion and margin potential if integration accelerates adoption. | Ticker | 2025-12-02 | earnings_transcript |
| CRWD_39a397d2 | second-half net new ARR growth of at least 50% year over year | 2025-08-01 | 2026-01-31 | Management-guided acceleration in net new ARR in H2 FY26, with at least 50% YoY growth. | A strong H2 net new ARR pace would validate the Falcon Flex model's durability and platform expansion (SIEM, Cloud, Identity), potentially lifting valuation via sustainable ARR momentum. | Ticker | 2025-12-02 | earnings_transcript |
| CRWD_a5d8a49b | FY '27 year-over-year net new ARR growth of at least 20% | 2026-02-01 | 2027-01-31 | Guidance that FY27 net new ARR growth will be at least 20% YoY. | Signals durable growth beyond FY26 and supports long-term TAM expansion from NextGen SIEM, Cloud, and Identity, with potential for multiple expansion if growth outpaces expectations. | Ticker | 2025-12-02 | earnings_transcript |
| CRWD_853b83fe | Q4 FY26 | 2025-12-01 | 2026-01-31 | Separation of $13-$15 million in Q4 from ARR to subscription revenue due to CCP and related partner programs (per modeling notes). | Affects ARR attribution and revenue mix; could influence reported revenue and investor perception of ARR quality and margin dynamics in the near term. | Ticker | 2025-12-02 | earnings_transcript |
| CRWD_87a07c9e | remaining quarters of FY '27 | 2026-05-01 | 2027-01-31 | Completion of native integration of SGNL.ai and Seraphic acquisitions into the Falcon platform, followed by the full scaling of their go-to-market efforts. | Successful integration and subsequent full scaling are crucial for these acquisitions to materially contribute to ARR beyond the initial minimal contribution, expanding CrowdStrike's identity and browser security offerings and validating its M&A strategy. | Ticker | 2026-03-03 | earnings_transcript |
| CRWD_18f83bee | now open for business (impact in future quarters) | 2026-03-03 | 2027-01-31 | Customer adoption and utilization of Microsoft Azure consumption commitment dollars for Falcon on the Microsoft marketplace. | This new channel could significantly expand CrowdStrike's reach, drive new customer acquisition, and accelerate ARR growth by leveraging existing customer spend commitments with Microsoft, impacting revenue and competitive positioning. | Ticker | 2026-03-03 | earnings_transcript |
| CRWD_7c8021c9 | unfolding in the market... into the future | 2026-03-03 | 2028-12-31 | The broader AI revolution and its impact on the cybersecurity software market, specifically the differentiation between 'existentially vulnerable' and 'thriving' software companies. | CrowdStrike believes it is positioned to thrive as a 'mission-critical, trusted infrastructure technology' in the AI era. The actual market outcome will materially impact CrowdStrike's long-term valuation, investor sentiment, and competitive landscape. | Theme | 2026-03-03 | earnings_transcript |
| CRWD_15d5c321 | For the full year | 2026-02-01 | 2027-01-31 | CrowdStrike's ability to achieve its raised full-year FY27 net new ARR growth acceleration target of 27.7% at the midpoint, translating to $1.291 billion of net new ARR. | This is a key financial guidance metric; exceeding or missing this target would materially impact valuation and investor sentiment, as it reflects the company's ability to capitalize on AI-driven demand and platform consolidation. | Ticker | 2026-06-03 | earnings_transcript |
| CRWD_53e96eca | As I look forward | 2026-05-01 | 2027-01-31 | Continued rapid growth and adoption of AIDR (AI Detection and Response) solutions, with Q2 pipeline already exceeding $50 million, and its potential to become a larger market opportunity than EDR. | Successful execution and market penetration of AIDR could significantly expand CrowdStrike's total addressable market and drive substantial future ARR, positively impacting valuation and investor sentiment. | Ticker | 2026-06-03 | earnings_transcript |
| CRWD_b08b9bd3 | trading on a split adjusted basis expected to commence at market open on July 2, 2026 | 2026-06-25 | 2026-07-02 | Completion of CrowdStrike's 4-for-1 forward stock split, with trading on a split-adjusted basis commencing July 2, 2026. | While a stock split does not change fundamental valuation, it can increase accessibility for retail investors and potentially boost liquidity and investor sentiment. | Ticker | 2026-06-03 | earnings_transcript |
| CRWD_cdad19ec | For the second quarter of FY27 | 2026-05-01 | 2026-07-31 | CrowdStrike's actual financial results for Q2 FY27 relative to its guidance for ARR ($5.793B-$5.795B), net new ARR ($284M-$286M), and total revenue ($1.436B-$1.442B). | Meeting or exceeding this short-term guidance is crucial for maintaining investor confidence and validating the company's growth trajectory, especially given the raised full-year outlook. | Ticker | 2026-06-03 | earnings_transcript |
| CRWD_03654344 | For the full fiscal year 2027 | 2026-02-01 | 2027-01-31 | CrowdStrike's ability to achieve its raised full-year FY27 financial guidance for ARR ($6.532B-$6.556B), net new ARR ($1.279B-$1.303B), and total revenue ($5.915B-$5.959B). | This is a critical long-term financial target; achieving or surpassing this guidance would strongly affirm the company's market position and growth potential, while a miss could negatively impact valuation. | Ticker | 2026-06-03 | earnings_transcript |
| CRWD_90e8575b | as they unfold | 2026-06-05 | 2027-06-05 | The impact and implementation of the US government's executive order to upgrade systems for advanced AI on federal cybersecurity spending and prioritization. | This regulatory action could create a significant tailwind for CrowdStrike by driving increased demand for modern cyber defenses within federal agencies, potentially boosting public sector revenue. | Theme | 2026-06-03 | earnings_transcript |