Investment Memorandum · Preview
For informational purposes only. Not investment advice.
CrowdStrike Holdings, Inc.
CRWD
May 23, 2026
CrowdStrike Holdings (NASDAQ: CRWD) is the dominant cloud-native cybersecurity SaaS platform, offering 25+ security modules through a single Falcon agent and unified data lake (Threat Graph) — including EDR (endpoint detection and response), XDR (extended detection and response), Next-Gen SIEM, identity protection, cloud security, and emerging AI-driven Charlotte AI. FY2026 (ended Jan 2026): revenue $5.10B, ending ARR $5.25B (+22% YoY, first pure-play cyber at this scale), NRR 115%, GRR 97%, FCF $1.30B (25% margin), GAAP loss ~$625M (SBC-driven). The platform survived the July 2024 Windows kernel outage with minimal customer churn — a moat validation event. George Kurtz is CEO/co-founder.
▲ Bull Case
- ◆Falcon Flex platform consolidation accelerates: $3.2B Flex deal value compounds; NRR recovers to 120%+; ARR reaches $10B by FY2028 → 22x EV/ARR multiple → +36% upside
- ◆Microsoft E5 stumbles in enterprise (security ≠ bundle): Enterprise customers continue choosing best-of-breed; CRWD captures full TAM → multiple expansion 2-3x
- ◆AI / Charlotte AI monetization unlocks: New revenue line at 80%+ margins; ARR growth re-accelerates to 25%+ → +25-35% from multiple sustain
▼ Bear Case
- ◆ARR growth decelerates to 15%: Modest slowdown from current 22% but with 90x P/E = severe multiple compression to 12x EV/ARR → -23-33%
- ◆Microsoft E5 captures mid-market: SMB and mid-market shifts to bundled offerings; NRR drops to 110% → -18-27%
- ◆Second major outage or breach: Customer trust collapses; churn spikes; multiple compresses to 30-40x → -36-55%
“Bulls: CRWD's platform moat + Flex consolidation + AI monetization justifies 90x P/E for 5+ years of 20%+ growth. Bears: 90x P/E has zero room for error; SBC dilution + Microsoft pressure + law-of-large-numbers deceleration creates fat-tailed downside. Decision-margin: is the consumption-based Flex model accelerating ARR per customer, or just shifting deal timing. Q1-Q2 FY2027 ARR prints + Fal.Con September 2026 will be the convergence catalysts. Most analysts have FY2027 ARR at $6.3B (vs. this $6.4B) — modest upward bias.”
- ◆Q1 FY2027 earnings (Jun 2026) — up if NN ARR >$270M
- ◆Q2 FY2027 earnings (Aug-Sep 2026)
- ◆Fal.Con conference (Sep-Oct 2026) — AI modules + Charlotte AI announcements
- ◆Investor Day (H2 2026) — up if $10B ARR timeline raised
- ◆FY2027 full-year ARR (Feb 2027) — up if >$6.5B
- ◆ARR growth <18% in any quarter (30% over 18 mo, HIGH severity) — triggers TRIM 25%
- ◆Microsoft E5 mid-market success (40% probability, MEDIUM-HIGH severity)
- ◆Second major outage or breach (5% over 36 mo, EXTREME severity) — customer trust event
Full Memo Continues
5 more sections, locked
- ●Valuation Range & DCFBase/bull/bear fair-value range, WACC, terminal growth, sensitivity to revenue + margin assumptions.
- ●Risk/Reward AssessmentPosition-sizing framework with explicit upside/downside skew and entry conditions.
- ●Management & Capital AllocationMulti-year capital-allocation track record, incentive alignment, and management readout.
- ●Monitoring FrameworkWhat to watch each quarter — leading indicators and inflection signals tracked by the analyst.
- ●Unresolved QuestionsOpen analyst questions and follow-up research items — the depth signal.
For Agents — $2 per memo
Call the JSON API with a Stripe Shared Payment Token. No account, no signup — just pay and call.
GET /api/v1/research/CRWD/memo Authorization: Bearer spt_...
Fund managers — coverage subscriptions launching soon. See marginofinsight.com.