CrowdStrike Holdings Inc.

ticker: CRWD step: 01 generated: 2026-05-12 source: quick-research

CrowdStrike Holdings, Inc. (CRWD) — Business Overview

Business Description

CrowdStrike is the dominant pure-play cybersecurity SaaS platform in cloud-native endpoint detection and response (EDR), extended detection and response (XDR), and increasingly Next-Gen SIEM + Identity Protection + Cloud Security. The company's Falcon platform is built around a single lightweight agent that powers ~25+ modules across the security stack, enabling customer consolidation away from legacy point solutions. CrowdStrike crossed $5.25B in ending ARR (+24% YoY) in FY26 — first pure-play cyber software company to reach $5B. Falcon Flex (consumption-based subscription) ARR reached $1.69B (+120%+). The company is also the only major cybersecurity vendor with materially demonstrated AI-native security platform (Charlotte AI) at scale.

Revenue Model

Single reportable segment (subscription SaaS cybersecurity platform):

• Falcon Platform Subscriptions (~95% of revenue) — Multi-module cybersecurity platform; ARR-based recurring revenue.
• Professional Services (~5%) — Incident response, advisory, threat intelligence services.

Revenue is overwhelmingly recurring (multi-year subscriptions); high gross retention (97%) + high net retention (115%).

Products & Services (Falcon Platform Modules)

Core EDR/XDR:

• Falcon Prevent (next-gen antivirus)
• Falcon Insight (EDR/XDR)
• Falcon OverWatch (managed threat hunting)
• Falcon Complete (managed detection + response)

Identity Protection:

• Falcon Identity Threat Protection
• Falcon Identity Threat Detection

Cloud Security:

• Falcon Cloud Security (CNAPP)
• Falcon Container Security
• Falcon ASPM

Next-Gen SIEM:

• Falcon LogScale (formerly Humio; high-speed log ingestion + search)
• Falcon Next-Gen SIEM

Endpoint Recovery + IT Hygiene:

• Falcon Discover
• Falcon Spotlight (vulnerability)
• Falcon Exposure Management

AI / Automation:

• Charlotte AI (generative AI security analyst)
• Falcon Foundry

Data Protection:

• Falcon Data Protection (DLP)

Customer Base & Go-to-Market

• Customers: ~25,000+ subscription customers including ~75% of Fortune 100.
• Geographic mix: ~65% US, ~35% international (Europe + APAC growing fastest).
• Module adoption: ~30% of customers using 8+ Falcon modules (vs. ~25% prior year).
• Falcon Flex: New consumption-based subscription model with multi-module commitment; >$1.69B ARR.

Distribution: Direct enterprise sales (~70%); channel partners (Optiv, GuidePoint, World Wide Technology, etc.); MSP/MSSP partners.

Competitive Position

CrowdStrike is the share leader in EDR/XDR with rapidly expanding share across adjacent cybersecurity markets:

Core EDR/XDR:

• CrowdStrike (CRWD) #1 — Cloud-native, single-agent architecture.
• SentinelOne (S) — Direct competitor; pricing pressure.
• Microsoft Defender for Endpoint — Bundled in E5; commoditizing low-end.
• Palo Alto Networks Cortex XDR — Direct competitor.

Next-Gen SIEM:

• Splunk (now Cisco) — Legacy leader; CrowdStrike Falcon LogScale taking share.
• Datadog (DDOG) — Observability + Cloud SIEM.
• Microsoft Sentinel — Bundled.

Cloud Security (CNAPP):

• Wiz (acquired by Google for $32B) — Cloud-native; multi-cloud.
• Palo Alto Prisma Cloud — Direct competitor.
• Microsoft Defender for Cloud — Bundled.

Identity Protection:

• Okta, CyberArk, BeyondTrust — Specialized identity competitors.
• Microsoft Entra ID — Bundled identity.

Structural advantages:

1. Cloud-native single-agent architecture — Lowest endpoint footprint; fastest deployment; competitive moat vs. legacy agent-heavy products.
2. Threat Graph + Charlotte AI scale — Petabytes of telemetry; AI training data unmatched in cybersecurity.
3. Customer consolidation tailwind — Falcon Flex multi-module subscriptions accelerating; customers consolidating point solutions to single platform.
4. Falcon Flex (+120% ARR growth) — Differentiated consumption-based model.
5. High gross + net retention (97% gross, 115% net) — Best-in-class customer stickiness.
6. AI integration — Charlotte AI usage +600% YoY; first major cyber player with generative AI deeply embedded.

Active risks:

• July 2024 outage incident — Faulty content update caused global Windows BSOD outage; multi-quarter customer-trust + revenue impact. CRWD provided "Customer Commitment Package" subscription credits.
• Microsoft + Palo Alto Networks competition — Microsoft bundling in E5; PANW Cortex platform consolidating.
• Premium valuation (~75x P/E) — Limited margin for error.

Key Facts

• Founded: 2011
• Headquarters: Austin, Texas
• Employees: ~10,000+
• Exchange: NASDAQ
• Sector / Industry: Technology / Application Software
• Market Cap: ~$110B
• FY2025 ARR: $4.24B (+23%)
• FY2026 ARR: $5.25B (+24%)
• FY2026 Net New ARR: $1.01B (+25%, first year >$1B)
• Falcon Flex ARR: $1.69B (+120%+)
• Cloud + Identity + Next-Gen SIEM Combined ARR: $1.9B+ (+45%+ YoY)
• Gross Retention: 97%
• Net Retention: 115%
• Customer Count: ~25,000+
• Fortune 100 Penetration: ~75%
• Long-Term ARR Goal: $10B
• Dividend: NONE (growth focus)
• Note: July 2024 outage incident; subsequent Customer Commitment Package
• Fiscal Year Ends: Late January (FY26 ended ~Jan 2026)

ticker: CRWD step: 12 generated: 2026-05-12 source: quick-research

CrowdStrike Holdings, Inc. (CRWD) — Investment Catalysts & Risks

Bull Case Drivers

1. First pure-play cyber software company to cross $5B ARR — FY26 ARR $5.25B (+24%); Net New ARR $1.01B (+25%, first year >$1B). On clear path to $10B ARR long-term goal by FY28-29.
2. Falcon Flex consumption-based subscription model — +120% YoY ARR growth — $1.69B in Flex ARR; multi-module commitments at flexible pricing accelerate customer consolidation away from point solutions.
3. Charlotte AI usage +600% YoY — Generative AI security analyst driving customer adoption + ARR expansion. First major cyber player with materially commercialized AI security platform.
4. Cloud + Identity + Next-Gen SIEM combined ARR $1.9B+ (+45%+ growth) — These newer segments are the fastest-growing parts of the platform; expanding share against Splunk + Wiz + Okta competitive set.
5. 97% gross retention + 115% net retention — Best-in-class customer stickiness; recovery from post-July 2024 outage compression confirms customer loyalty.
6. AI workload protection emerging market — 1,800+ AI applications + 160M+ unique instances tracked; CrowdStrike positioned as the security layer for AI infrastructure.
7. 75% Fortune 100 penetration — Massive enterprise install base; expansion + cross-sell opportunity vast.
8. ~$4B net cash + 25% FCF margin — Strong financial flexibility; capacity for buybacks + tuck-in M&A.

Bear Case Risks

1. July 2024 outage incident long-tail — Class action lawsuits + Customer Commitment Package + brand damage long-term. While operational metrics recovered, legal + reputation tail risk persists.
2. Premium valuation (~50x FY27 non-GAAP P/E + ~22x EV/Revenue) — Already prices in continued execution; multiple compression risk if growth decelerates from 24%.
3. Microsoft Defender bundling — Microsoft E5 license includes Defender for Endpoint + Sentinel + Defender for Cloud; commoditizes low-end + mid-market cyber. Long-term pressure.
4. Palo Alto Networks consolidation play — PANW aggressively bundling Cortex XDR + Cloud + SOC platform; direct competitor in customer consolidation.
5. Wiz (now Google) cloud security disruption — Google's $32B Wiz acquisition consolidates leading multi-cloud CNAPP under Google; potential bundling pressure on CrowdStrike Falcon Cloud Security.
6. SentinelOne pricing competition — Aggressive SMB pricing; direct EDR/XDR competitor.
7. Falcon Flex consumption model risk — Multi-module flexible commitments could create revenue smoothing risk if customers don't fully utilize commitments.
8. No dividend; growth-stock vulnerability — In risk-off environments, multiple compresses sharply.

Upcoming Events

• Q1 FY27 earnings (early June 2026): Mid-year FY27 setup + Charlotte AI commercialization update.
• Q2 FY27 earnings (early September 2026): Falcon Flex penetration trajectory.
• Annual Investor Day: Long-term financial framework + path to $10B ARR.
• Fal.Con conference: Major product announcements + customer wins.
• Quarterly ARR + NRR + GRR disclosures: Most important leading indicators.
• Microsoft + Palo Alto Networks competitive announcements: Multi-quarter pricing + bundling trends.
• July 2024 outage litigation milestones: Class action settlements + insurance claims.

Analyst Sentiment

Consensus rating is Buy / Overweight (~80% Buy, 18% Hold, 2% Sell). Price targets cluster $500–580 vs. trading ~$430–460 (~10–25% implied upside). Bull case targets ~$650 on continued ARR acceleration + Charlotte AI; bear case ~$300 on Microsoft competitive pressure + Flex deceleration. Morgan Stanley, JPM, BMO, Wedbush, Bernstein maintain Buy/Overweight; Goldman at Buy; Wolfe at Outperform.

Research Date

Generated: 2026-05-12