CrowdStrike Holdings, Inc.

CRWD · NASDAQ · USD

Is CrowdStrike's AI-driven demand a durable new security spending cycle, or a temporary surge from customer alarm after new model releases that fades as rivals add similar tools?

Last 4 earnings calls · through Q2 FY2027

Bull case

  • AI adoption expands attack surface

    The bull case is that every new AI model, agent and workload adds attack surface, so security spending grows with AI adoption rather than with general IT budgets.

  • Licensing model packs more modules

    CrowdStrike's subscription licensing lets customers add modules without a new procurement cycle, which turns platform breadth into larger and longer contracts over time.

  • Endpoint franchise reaccelerates

    Endpoint protection, the company's original business, is growing again as AI tools run on employee machines, and that installed base pulls through newer modules.

Bear case

  • Threat scare drives demand

    The bear case is that much of the recent acceleration came from customer alarm after a single new model release, and that urgency may fade as the news cycle moves on.

  • Profit measures rely on adjustments

    Reported profitability relies on adjustments that exclude stock pay and acquisition costs and on a longer commission write-off period, so the earnings picture is flattered.

  • Competition from model providers

    Frontier model labs and platform vendors are building their own security features, which could pressure CrowdStrike's pricing and slow its entry into new categories.

Bull and bear points

Growth & Execution

In short: Net new ARR is accelerating on AI-driven demand, but guidance leans on a demand surge and on acquisitions.

Bull · 2

  • Management has raised its full-year net new ARR outlook twice

    A quarter ago management guided to net new ARR growth of 20% to 25%; it now points to about 34%, a much steeper ramp than it described at the start of the year.

    Tone shiftQ4 FY2026 → Q2 FY2027

  • AI detection and response is ramping faster than any prior product

    AIDR ending ARR nearly tripled versus the prior quarter and management expects AI detection to become a larger market than endpoint detection, which would widen its addressable base.

    Q2 FY2027 call
Bear · 2

  • Acquired ARR adds little organic growth

    CrowdStrike bought SGNL, Seraphic, Onum and Pangea for new modules, but management assumes minimal organic contribution from them while integration adds cost.

    Q4 FY2026 call

  • ARR growth runs ahead of subscription revenue

    Flex and partner program deals widen the gap between reported ARR and recognized subscription revenue, so headline ARR growth overstates near-term reported revenue.

    Q3 FY2026 call

Profitability & Financial Strength

In short: Free cash flow is at records, while GAAP profit is thin and partly helped by accounting changes.

Bull · 2

  • The company has moved from GAAP losses to GAAP profit

    A few quarters ago CrowdStrike reported a GAAP net loss of $34 million; it has now posted positive GAAP net income for three consecutive quarters.

    Tone shiftQ3 FY2026 → Q2 FY2027

  • Free cash flow covers acquisitions and buybacks

    Free cash flow of $1.6 billion over the last twelve months, about 30% of revenue, funds the recent purchases and share repurchases without adding debt.

    Filed financials
Bear · 2

  • Profit helped by accounting change

    Stretching sales commission amortization from four years to five adds $85 million to $95 million to FY27 non-GAAP operating income, so part of the margin expansion is accounting rather than trading.

    Q4 FY2026 call

  • GAAP operating margin still negative

    The GAAP operating margin was negative 2.3% in the latest quarter because stock-based pay and acquisition costs sit outside the non-GAAP profit the company highlights.

    Filed financials

Market Position

In short: CrowdStrike is a default platform for securing AI, while model labs and platform vendors could compete.

Bull · 2

  • Selected by Anthropic and OpenAI

    CrowdStrike was the only security vendor chosen by both Anthropic and OpenAI for their model launch programs, giving it early standing as the reference protector of AI models.

    Q1 FY2027 call

  • AI security reframed as its largest market

    Management once called protecting AI early-stage; it now says AIDR can be a larger market than endpoint detection, which would enlarge the company's addressable market.

    Tone shiftQ4 FY2026 → Q2 FY2027
Bear · 2

  • AI labs as potential competitors

    The model providers CrowdStrike partners with, and other vendors adding AI to their products, could ship their own security features and reduce demand for Falcon modules.

    10-K, filed 2026-03-05

  • Litigation over the July 19 outage

    Lawsuits from shareholders and consumers over the July 2024 faulty sensor update remain open, and defense and settlement costs fall outside normal operating expenses.

    10-K, filed 2026-03-05