CrowdStrike Holdings Inc.

ticker: CRWD step: 01 generated: 2026-05-12 source: quick-research

CrowdStrike Holdings, Inc. (CRWD) — Business Overview

Business Description

CrowdStrike is the dominant pure-play cybersecurity SaaS platform in cloud-native endpoint detection and response (EDR), extended detection and response (XDR), and increasingly Next-Gen SIEM + Identity Protection + Cloud Security. The company's Falcon platform is built around a single lightweight agent that powers ~25+ modules across the security stack, enabling customer consolidation away from legacy point solutions. CrowdStrike crossed $5.25B in ending ARR (+24% YoY) in FY26 — first pure-play cyber software company to reach $5B. Falcon Flex (consumption-based subscription) ARR reached $1.69B (+120%+). The company is also the only major cybersecurity vendor with materially demonstrated AI-native security platform (Charlotte AI) at scale.

Revenue Model

Single reportable segment (subscription SaaS cybersecurity platform):

• Falcon Platform Subscriptions (~95% of revenue) — Multi-module cybersecurity platform; ARR-based recurring revenue.
• Professional Services (~5%) — Incident response, advisory, threat intelligence services.

Revenue is overwhelmingly recurring (multi-year subscriptions); high gross retention (97%) + high net retention (115%).

Products & Services (Falcon Platform Modules)

Core EDR/XDR:

• Falcon Prevent (next-gen antivirus)
• Falcon Insight (EDR/XDR)
• Falcon OverWatch (managed threat hunting)
• Falcon Complete (managed detection + response)

Identity Protection:

• Falcon Identity Threat Protection
• Falcon Identity Threat Detection

Cloud Security:

• Falcon Cloud Security (CNAPP)
• Falcon Container Security
• Falcon ASPM

Next-Gen SIEM:

• Falcon LogScale (formerly Humio; high-speed log ingestion + search)
• Falcon Next-Gen SIEM

Endpoint Recovery + IT Hygiene:

• Falcon Discover
• Falcon Spotlight (vulnerability)
• Falcon Exposure Management

AI / Automation:

• Charlotte AI (generative AI security analyst)
• Falcon Foundry

Data Protection:

• Falcon Data Protection (DLP)

Customer Base & Go-to-Market

• Customers: ~25,000+ subscription customers including ~75% of Fortune 100.
• Geographic mix: ~65% US, ~35% international (Europe + APAC growing fastest).
• Module adoption: ~30% of customers using 8+ Falcon modules (vs. ~25% prior year).
• Falcon Flex: New consumption-based subscription model with multi-module commitment; >$1.69B ARR.

Distribution: Direct enterprise sales (~70%); channel partners (Optiv, GuidePoint, World Wide Technology, etc.); MSP/MSSP partners.

Competitive Position

CrowdStrike is the share leader in EDR/XDR with rapidly expanding share across adjacent cybersecurity markets:

Core EDR/XDR:

• CrowdStrike (CRWD) #1 — Cloud-native, single-agent architecture.
• SentinelOne (S) — Direct competitor; pricing pressure.
• Microsoft Defender for Endpoint — Bundled in E5; commoditizing low-end.
• Palo Alto Networks Cortex XDR — Direct competitor.

Next-Gen SIEM:

• Splunk (now Cisco) — Legacy leader; CrowdStrike Falcon LogScale taking share.
• Datadog (DDOG) — Observability + Cloud SIEM.
• Microsoft Sentinel — Bundled.

Cloud Security (CNAPP):

• Wiz (acquired by Google for $32B) — Cloud-native; multi-cloud.
• Palo Alto Prisma Cloud — Direct competitor.
• Microsoft Defender for Cloud — Bundled.

Identity Protection:

• Okta, CyberArk, BeyondTrust — Specialized identity competitors.
• Microsoft Entra ID — Bundled identity.

Structural advantages:

1. Cloud-native single-agent architecture — Lowest endpoint footprint; fastest deployment; competitive moat vs. legacy agent-heavy products.
2. Threat Graph + Charlotte AI scale — Petabytes of telemetry; AI training data unmatched in cybersecurity.
3. Customer consolidation tailwind — Falcon Flex multi-module subscriptions accelerating; customers consolidating point solutions to single platform.
4. Falcon Flex (+120% ARR growth) — Differentiated consumption-based model.
5. High gross + net retention (97% gross, 115% net) — Best-in-class customer stickiness.
6. AI integration — Charlotte AI usage +600% YoY; first major cyber player with generative AI deeply embedded.

Active risks:

• July 2024 outage incident — Faulty content update caused global Windows BSOD outage; multi-quarter customer-trust + revenue impact. CRWD provided "Customer Commitment Package" subscription credits.
• Microsoft + Palo Alto Networks competition — Microsoft bundling in E5; PANW Cortex platform consolidating.
• Premium valuation (~75x P/E) — Limited margin for error.

Key Facts

• Founded: 2011
• Headquarters: Austin, Texas
• Employees: ~10,000+
• Exchange: NASDAQ
• Sector / Industry: Technology / Application Software
• Market Cap: ~$110B
• FY2025 ARR: $4.24B (+23%)
• FY2026 ARR: $5.25B (+24%)
• FY2026 Net New ARR: $1.01B (+25%, first year >$1B)
• Falcon Flex ARR: $1.69B (+120%+)
• Cloud + Identity + Next-Gen SIEM Combined ARR: $1.9B+ (+45%+ YoY)
• Gross Retention: 97%
• Net Retention: 115%
• Customer Count: ~25,000+
• Fortune 100 Penetration: ~75%
• Long-Term ARR Goal: $10B
• Dividend: NONE (growth focus)
• Note: July 2024 outage incident; subsequent Customer Commitment Package
• Fiscal Year Ends: Late January (FY26 ended ~Jan 2026)

ticker: CRWD step: 04 generated: 2026-05-12 source: quick-research

CrowdStrike Holdings, Inc. (CRWD) — Financial Snapshot

(CrowdStrike's fiscal year ends in late January; FY2026 ended ~Jan 31, 2026.)

Key ARR Metrics

Income Statement Summary

Cash Flow & Capital Allocation (FY2026)

Customer Metrics

Key Ratios (approximate)

• P/E: ~50x (FY27E non-GAAP EPS) | EV/Revenue: ~22x | FCF Yield: ~1.1%
• Revenue Growth (FY26): +23%
• ARR Growth: +24%
• Non-GAAP Operating Margin: ~22%
• Free Cash Flow Margin: ~25%
• Net Cash Position: ~+$4B
• ARR Multiple: ~21x ARR
• ROIC: ~50%+ (asset-light SaaS)
• Dividend: NONE

Growth Profile

FY26 was a milestone year:

• ARR crossed $5B (first pure-play cyber software company)
• Net New ARR crossed $1B (first year)
• Falcon Flex ARR +120% to $1.69B
• Charlotte AI usage +600% YoY
• Customer net retention 115% recovering from post-outage compression

The company's path to $10B ARR (long-term goal) is now on a clear trajectory:

• ~3-4 year path at sustained +24% ARR growth
• Multi-module + Flex consumption-based subscriptions driving expansion
• AI (Charlotte) commercial monetization accelerating
• International expansion (~35% of revenue, growing fastest)

The July 2024 outage incident is largely in the rearview mirror:

• Customer Commitment Package subscription credits expensed FY25
• Customer retention recovered to 97% gross + 115% net
• Net New ARR re-accelerated to $1B+ in FY26

Forward Estimates

FY2027 Consensus:

• Revenue: ~$6.0B+ (+25%)
• Non-GAAP EPS: ~$5.50+ (+30%)
• ARR target: ~$6.5B (+25%)

Bull case: AI + multi-module consolidation accelerates; Falcon Flex penetration reaches 50%; Charlotte AI standalone monetization; $10B ARR reached by FY28-29; multiple expands to 55x P/E; stock could reach $600. Bear case: Microsoft + PANW competitive pressure; Falcon Flex pricing leakage; ARR growth decelerates to 20% in FY27; multiple compresses to 40x P/E; stock stays $380-420. Consensus targets ~$500–580 vs. trading ~$430–460 (~10–25% implied upside).

ticker: CRWD step: 12 generated: 2026-05-12 source: quick-research

CrowdStrike Holdings, Inc. (CRWD) — Investment Catalysts & Risks

Bull Case Drivers

1. First pure-play cyber software company to cross $5B ARR — FY26 ARR $5.25B (+24%); Net New ARR $1.01B (+25%, first year >$1B). On clear path to $10B ARR long-term goal by FY28-29.
2. Falcon Flex consumption-based subscription model — +120% YoY ARR growth — $1.69B in Flex ARR; multi-module commitments at flexible pricing accelerate customer consolidation away from point solutions.
3. Charlotte AI usage +600% YoY — Generative AI security analyst driving customer adoption + ARR expansion. First major cyber player with materially commercialized AI security platform.
4. Cloud + Identity + Next-Gen SIEM combined ARR $1.9B+ (+45%+ growth) — These newer segments are the fastest-growing parts of the platform; expanding share against Splunk + Wiz + Okta competitive set.
5. 97% gross retention + 115% net retention — Best-in-class customer stickiness; recovery from post-July 2024 outage compression confirms customer loyalty.
6. AI workload protection emerging market — 1,800+ AI applications + 160M+ unique instances tracked; CrowdStrike positioned as the security layer for AI infrastructure.
7. 75% Fortune 100 penetration — Massive enterprise install base; expansion + cross-sell opportunity vast.
8. ~$4B net cash + 25% FCF margin — Strong financial flexibility; capacity for buybacks + tuck-in M&A.

Bear Case Risks

1. July 2024 outage incident long-tail — Class action lawsuits + Customer Commitment Package + brand damage long-term. While operational metrics recovered, legal + reputation tail risk persists.
2. Premium valuation (~50x FY27 non-GAAP P/E + ~22x EV/Revenue) — Already prices in continued execution; multiple compression risk if growth decelerates from 24%.
3. Microsoft Defender bundling — Microsoft E5 license includes Defender for Endpoint + Sentinel + Defender for Cloud; commoditizes low-end + mid-market cyber. Long-term pressure.
4. Palo Alto Networks consolidation play — PANW aggressively bundling Cortex XDR + Cloud + SOC platform; direct competitor in customer consolidation.
5. Wiz (now Google) cloud security disruption — Google's $32B Wiz acquisition consolidates leading multi-cloud CNAPP under Google; potential bundling pressure on CrowdStrike Falcon Cloud Security.
6. SentinelOne pricing competition — Aggressive SMB pricing; direct EDR/XDR competitor.
7. Falcon Flex consumption model risk — Multi-module flexible commitments could create revenue smoothing risk if customers don't fully utilize commitments.
8. No dividend; growth-stock vulnerability — In risk-off environments, multiple compresses sharply.

Upcoming Events

• Q1 FY27 earnings (early June 2026): Mid-year FY27 setup + Charlotte AI commercialization update.
• Q2 FY27 earnings (early September 2026): Falcon Flex penetration trajectory.
• Annual Investor Day: Long-term financial framework + path to $10B ARR.
• Fal.Con conference: Major product announcements + customer wins.
• Quarterly ARR + NRR + GRR disclosures: Most important leading indicators.
• Microsoft + Palo Alto Networks competitive announcements: Multi-quarter pricing + bundling trends.
• July 2024 outage litigation milestones: Class action settlements + insurance claims.

Analyst Sentiment

Consensus rating is Buy / Overweight (~80% Buy, 18% Hold, 2% Sell). Price targets cluster $500–580 vs. trading ~$430–460 (~10–25% implied upside). Bull case targets ~$650 on continued ARR acceleration + Charlotte AI; bear case ~$300 on Microsoft competitive pressure + Flex deceleration. Morgan Stanley, JPM, BMO, Wedbush, Bernstein maintain Buy/Overweight; Goldman at Buy; Wolfe at Outperform.

Research Date

Generated: 2026-05-12