# CrowdStrike Holdings Inc. (CRWD)

**Exchange:** NASDAQ  
**Coverage as of:** 2026-Q2  
**Updated:** 2026-05-12  
**Report type:** Primer (steps 1–3 of 19)  
**API endpoint:** GET /api/v1/research/CRWD/primer

## Business Model

---
ticker: CRWD
step: 01
generated: 2026-05-12
source: quick-research
---

### CrowdStrike Holdings, Inc. (CRWD) — Business Overview

#### Business Description
CrowdStrike is the dominant pure-play **cybersecurity SaaS platform** in cloud-native endpoint detection and response (EDR), extended detection and response (XDR), and increasingly Next-Gen SIEM + Identity Protection + Cloud Security. The company's Falcon platform is built around a single lightweight agent that powers ~25+ modules across the security stack, enabling customer consolidation away from legacy point solutions. CrowdStrike crossed **$5.25B in ending ARR (+24% YoY)** in FY26 — first pure-play cyber software company to reach $5B. Falcon Flex (consumption-based subscription) ARR reached $1.69B (+120%+). The company is also the only major cybersecurity vendor with materially demonstrated **AI-native security platform (Charlotte AI)** at scale.

#### Revenue Model
Single reportable segment (subscription SaaS cybersecurity platform):
- **Falcon Platform Subscriptions** (~95% of revenue) — Multi-module cybersecurity platform; ARR-based recurring revenue.
- **Professional Services** (~5%) — Incident response, advisory, threat intelligence services.

Revenue is overwhelmingly recurring (multi-year subscriptions); high gross retention (97%) + high net retention (115%).

#### Products & Services (Falcon Platform Modules)

**Core EDR/XDR:**
- Falcon Prevent (next-gen antivirus)
- Falcon Insight (EDR/XDR)
- Falcon OverWatch (managed threat hunting)
- Falcon Complete (managed detection + response)

**Identity Protection:**
- Falcon Identity Threat Protection
- Falcon Identity Threat Detection

**Cloud Security:**
- Falcon Cloud Security (CNAPP)
- Falcon Container Security
- Falcon ASPM

**Next-Gen SIEM:**
- Falcon LogScale (formerly Humio; high-speed log ingestion + search)
- Falcon Next-Gen SIEM

**Endpoint Recovery + IT Hygiene:**
- Falcon Discover
- Falcon Spotlight (vulnerability)
- Falcon Exposure Management

**AI / Automation:**
- Charlotte AI (generative AI security analyst)
- Falcon Foundry

**Data Protection:**
- Falcon Data Protection (DLP)

#### Customer Base & Go-to-Market
- **Customers**: ~25,000+ subscription customers including ~75% of Fortune 100.
- **Geographic mix**: ~65% US, ~35% international (Europe + APAC growing fastest).
- **Module adoption**: ~30% of customers using 8+ Falcon modules (vs. ~25% prior year).
- **Falcon Flex**: New consumption-based subscription model with multi-module commitment; >$1.69B ARR.

Distribution: Direct enterprise sales (~70%); channel partners (Optiv, GuidePoint, World Wide Technology, etc.); MSP/MSSP partners.

#### Competitive Position
CrowdStrike is the **share leader in EDR/XDR** with rapidly expanding share across adjacent cybersecurity markets:

**Core EDR/XDR:**
- CrowdStrike (CRWD) #1 — Cloud-native, single-agent architecture.
- SentinelOne (S) — Direct competitor; pricing pressure.
- Microsoft Defender for Endpoint — Bundled in E5; commoditizing low-end.
- Palo Alto Networks Cortex XDR — Direct competitor.

**Next-Gen SIEM:**
- Splunk (now Cisco) — Legacy leader; CrowdStrike Falcon LogScale taking share.
- Datadog (DDOG) — Observability + Cloud SIEM.
- Microsoft Sentinel — Bundled.

**Cloud Security (CNAPP):**
- Wiz (acquired by Google for $32B) — Cloud-native; multi-cloud.
- Palo Alto Prisma Cloud — Direct competitor.
- Microsoft Defender for Cloud — Bundled.

**Identity Protection:**
- Okta, CyberArk, BeyondTrust — Specialized identity competitors.
- Microsoft Entra ID — Bundled identity.

Structural advantages:
1. **Cloud-native single-agent architecture** — Lowest endpoint footprint; fastest deployment; competitive moat vs. legacy agent-heavy products.
2. **Threat Graph + Charlotte AI scale** — Petabytes of telemetry; AI training data unmatched in cybersecurity.
3. **Customer consolidation tailwind** — Falcon Flex multi-module subscriptions accelerating; customers consolidating point solutions to single platform.
4. **Falcon Flex (+120% ARR growth)** — Differentiated consumption-based model.
5. **High gross + net retention (97% gross, 115% net)** — Best-in-class customer stickiness.
6. **AI integration** — Charlotte AI usage +600% YoY; first major cyber player with generative AI deeply embedded.

**Active risks:**
- **July 2024 outage incident** — Faulty content update caused global Windows BSOD outage; multi-quarter customer-trust + revenue impact. CRWD provided "Customer Commitment Package" subscription credits.
- **Microsoft + Palo Alto Networks competition** — Microsoft bundling in E5; PANW Cortex platform consolidating.
- **Premium valuation (~75x P/E)** — Limited margin for error.

#### Key Facts
- Founded: 2011
- Headquarters: Austin, Texas
- Employees: ~10,000+
- Exchange: NASDAQ
- Sector / Industry: Technology / Application Software
- Market Cap: ~$110B
- FY2025 ARR: $4.24B (+23%)
- FY2026 ARR: $5.25B (+24%)
- FY2026 Net New ARR: $1.01B (+25%, first year >$1B)
- Falcon Flex ARR: $1.69B (+120%+)
- Cloud + Identity + Next-Gen SIEM Combined ARR: $1.9B+ (+45%+ YoY)
- Gross Retention: 97%
- Net Retention: 115%
- Customer Count: ~25,000+
- Fortune 100 Penetration: ~75%
- Long-Term ARR Goal: $10B
- Dividend: NONE (growth focus)
- Note: July 2024 outage incident; subsequent Customer Commitment Package
- Fiscal Year Ends: Late January (FY26 ended ~Jan 2026)

## Financial Snapshot

---
ticker: CRWD
step: 04
generated: 2026-05-12
source: quick-research
---

### CrowdStrike Holdings, Inc. (CRWD) — Financial Snapshot

(CrowdStrike's fiscal year ends in late January; FY2026 ended ~Jan 31, 2026.)

#### Key ARR Metrics

| Metric | FY2024 | FY2025 | FY2026 | YoY (FY26) |
|--------|--------|--------|--------|------------|
| Ending ARR | $3.44B | $4.24B | $5.25B | +24% |
| Net New ARR | $850M | $819M | $1.01B | +25% (first year >$1B) |
| Falcon Flex ARR | n/a | nascent | $1.69B | +120%+ |
| Cloud + Identity + NG-SIEM ARR | $0.85B | $1.3B+ | $1.9B+ | +45%+ |
| Gross Retention | 98% | 97% | 97% | stable |
| Net Retention | 119% | 112% | 115% | recovering |

#### Income Statement Summary

| Metric | FY2024 | FY2025 | FY2026 | YoY (FY26) |
|--------|--------|--------|--------|------------|
| Revenue | $3.06B | $3.95B | ~$4.85B | +23% |
| Subscription Gross Margin | ~78% | ~78% | ~79% | stable |
| Non-GAAP Operating Margin | ~22% | ~21% | ~22% | stable |
| Non-GAAP EPS | $3.09 | $3.93 | ~$4.20 | +7% |
| GAAP EPS | $0.36 | $0.21 (outage charges) | ~$1.50 | recovery |

#### Cash Flow & Capital Allocation (FY2026)

| Metric | Value |
|--------|-------|
| Operating Cash Flow | ~$1.4B+ |
| Free Cash Flow | ~$1.2B+ |
| Free Cash Flow Margin | ~25% |
| Share Repurchases | ~$0.5B+ |
| Dividend | NONE |
| Cash & Marketable Securities | ~$5B |
| Total Debt | ~$0.8B (long-term notes) |
| Net Cash Position | ~+$4B |

#### Customer Metrics

| Metric | FY2026 |
|--------|--------|
| Customers | ~25,000+ |
| Customers with 8+ Modules | ~30% |
| Charlotte AI Usage Growth | +600% YoY |
| New Falcon Flex Customers (Quarterly) | ~350+ |
| AI Workloads Tracked | 1,800+ AI applications; 160M+ unique instances |

#### Key Ratios (approximate)
- P/E: ~50x (FY27E non-GAAP EPS) | EV/Revenue: ~22x | FCF Yield: ~1.1%
- Revenue Growth (FY26): +23%
- ARR Growth: +24%
- Non-GAAP Operating Margin: ~22%
- Free Cash Flow Margin: ~25%
- Net Cash Position: ~+$4B
- ARR Multiple: ~21x ARR
- ROIC: ~50%+ (asset-light SaaS)
- Dividend: NONE

#### Growth Profile
FY26 was a milestone year:
- ARR crossed $5B (first pure-play cyber software company)
- Net New ARR crossed $1B (first year)
- Falcon Flex ARR +120% to $1.69B
- Charlotte AI usage +600% YoY
- Customer net retention 115% recovering from post-outage compression

The company's path to $10B ARR (long-term goal) is now on a clear trajectory:
- ~3-4 year path at sustained +24% ARR growth
- Multi-module + Flex consumption-based subscriptions driving expansion
- AI (Charlotte) commercial monetization accelerating
- International expansion (~35% of revenue, growing fastest)

The July 2024 outage incident is largely in the rearview mirror:
- Customer Commitment Package subscription credits expensed FY25
- Customer retention recovered to 97% gross + 115% net
- Net New ARR re-accelerated to $1B+ in FY26

#### Forward Estimates
FY2027 Consensus:
- Revenue: ~$6.0B+ (+25%)
- Non-GAAP EPS: ~$5.50+ (+30%)
- ARR target: ~$6.5B (+25%)

Bull case: AI + multi-module consolidation accelerates; Falcon Flex penetration reaches 50%; Charlotte AI standalone monetization; $10B ARR reached by FY28-29; multiple expands to 55x P/E; stock could reach $600. Bear case: Microsoft + PANW competitive pressure; Falcon Flex pricing leakage; ARR growth decelerates to 20% in FY27; multiple compresses to 40x P/E; stock stays $380-420. Consensus targets ~$500–580 vs. trading ~$430–460 (~10–25% implied upside).

## Recent Catalysts

---
ticker: CRWD
step: 12
generated: 2026-05-12
source: quick-research
---

### CrowdStrike Holdings, Inc. (CRWD) — Investment Catalysts & Risks

#### Bull Case Drivers

1. **First pure-play cyber software company to cross $5B ARR** — FY26 ARR $5.25B (+24%); Net New ARR $1.01B (+25%, first year >$1B). On clear path to $10B ARR long-term goal by FY28-29.
2. **Falcon Flex consumption-based subscription model — +120% YoY ARR growth** — $1.69B in Flex ARR; multi-module commitments at flexible pricing accelerate customer consolidation away from point solutions.
3. **Charlotte AI usage +600% YoY** — Generative AI security analyst driving customer adoption + ARR expansion. First major cyber player with materially commercialized AI security platform.
4. **Cloud + Identity + Next-Gen SIEM combined ARR $1.9B+ (+45%+ growth)** — These newer segments are the fastest-growing parts of the platform; expanding share against Splunk + Wiz + Okta competitive set.
5. **97% gross retention + 115% net retention** — Best-in-class customer stickiness; recovery from post-July 2024 outage compression confirms customer loyalty.
6. **AI workload protection emerging market** — 1,800+ AI applications + 160M+ unique instances tracked; CrowdStrike positioned as the security layer for AI infrastructure.
7. **75% Fortune 100 penetration** — Massive enterprise install base; expansion + cross-sell opportunity vast.
8. **~$4B net cash + 25% FCF margin** — Strong financial flexibility; capacity for buybacks + tuck-in M&A.

#### Bear Case Risks

1. **July 2024 outage incident long-tail** — Class action lawsuits + Customer Commitment Package + brand damage long-term. While operational metrics recovered, legal + reputation tail risk persists.
2. **Premium valuation (~50x FY27 non-GAAP P/E + ~22x EV/Revenue)** — Already prices in continued execution; multiple compression risk if growth decelerates from 24%.
3. **Microsoft Defender bundling** — Microsoft E5 license includes Defender for Endpoint + Sentinel + Defender for Cloud; commoditizes low-end + mid-market cyber. Long-term pressure.
4. **Palo Alto Networks consolidation play** — PANW aggressively bundling Cortex XDR + Cloud + SOC platform; direct competitor in customer consolidation.
5. **Wiz (now Google) cloud security disruption** — Google's $32B Wiz acquisition consolidates leading multi-cloud CNAPP under Google; potential bundling pressure on CrowdStrike Falcon Cloud Security.
6. **SentinelOne pricing competition** — Aggressive SMB pricing; direct EDR/XDR competitor.
7. **Falcon Flex consumption model risk** — Multi-module flexible commitments could create revenue smoothing risk if customers don't fully utilize commitments.
8. **No dividend; growth-stock vulnerability** — In risk-off environments, multiple compresses sharply.

#### Upcoming Events
- **Q1 FY27 earnings (early June 2026)**: Mid-year FY27 setup + Charlotte AI commercialization update.
- **Q2 FY27 earnings (early September 2026)**: Falcon Flex penetration trajectory.
- **Annual Investor Day**: Long-term financial framework + path to $10B ARR.
- **Fal.Con conference**: Major product announcements + customer wins.
- **Quarterly ARR + NRR + GRR disclosures**: Most important leading indicators.
- **Microsoft + Palo Alto Networks competitive announcements**: Multi-quarter pricing + bundling trends.
- **July 2024 outage litigation milestones**: Class action settlements + insurance claims.

#### Analyst Sentiment
Consensus rating is **Buy / Overweight** (~80% Buy, 18% Hold, 2% Sell). Price targets cluster $500–580 vs. trading ~$430–460 (~10–25% implied upside). Bull case targets ~$650 on continued ARR acceleration + Charlotte AI; bear case ~$300 on Microsoft competitive pressure + Flex deceleration. Morgan Stanley, JPM, BMO, Wedbush, Bernstein maintain Buy/Overweight; Goldman at Buy; Wolfe at Outperform.

#### Research Date
Generated: 2026-05-12

## Full Research Available

This primer covers steps 1–3 of 19. The full deep dive (moat analysis, DCF, bull/bear,
management quality, earnings transcript analysis) is available via:

- Investment memo: /memo/crwd
- Full research API: GET /api/v1/research/CRWD/memo
- Coverage universe: /stocks