CrowdStrike Holdings
Security software that lives on every company computer: one small program watches what each machine does, and every new product is switched on with a licence rather than installed.
Our viewUnattractive Medium conviction
The scores
The profile · 1-4
Growth3/4 ↑
Growth is 25.8% and accelerating, but it fell from 36.3% to 21.7% first, and three acquisitions closed inside twelve months.
Business quality3/4 →
The same customers spent 15% more a year after the outage, but Microsoft is standardising the interface the sensor depends on.
Financial position4/4 →
Net cash of about $4.27B against $750M of 3.00% notes due 2029; the $7.0B of purchase commitments is covered by revenue, not borrowing.
Execution record3/4 →
Beat guidance in seven of the last eight quarters, but it crashed its customers' machines in 2024 and restated stock-compensation timing this year.
Per share capture2/4 ↓
Stock awards are 27.1% of revenue and the buyback offset a quarter of them; net cash and an unused authorisation keep it off the bottom.
Potential2/4 →
The signed contracts are real, but the upside the price needs is an artificial-intelligence security market whose size rests on customers' spending decisions.
Risk profile2/4 →
Two regulators are asking how it recognises revenue and reports the metric the whole story leads with, and Delta's suit is in discovery.
Valuation1/4 ↓
It pays about $730 for each $1 of yearly cash after share awards, against $600 when written; no print has moved the cash since.
Evidence quality3/4 →
The central figures are filed and the arithmetic runs on the company's own reconciliation, but most trace back to one filing and one release.
The Verdict
We rate CrowdStrike unattractive. It sells one security program that sits on every computer a company owns, and switches on extra products as licences. The business is mixed: demand is speeding up, but most of the recent profit gain is last year's one-off charges falling away and an accounting change, while shares handed to staff cost over a quarter of revenue. The price needs the cash left for owners to grow strongly for a decade, so it is stretched, not cheap. The view hinges on staff share costs falling as a share of revenue while growth holds. A good business, priced for perfection.
The long caseCompanies putting AI agents to work create more things to watch over, and CrowdStrike sells more products to each customer; that selling must keep growing as staff share costs fall.
The evidence under this - 9 claims
C01facthigh confidence
Falcon is one software agent installed on laptops, servers and cloud workloads that reports what the machine does to CrowdStrike's cloud, where detection runs and one console shows the whole estate.
C02management claimmedium confidence
A new module is a licence entitlement on the agent already deployed, so the incremental sale needs no new rollout across the customer's machines.
sourceQ2 FY2027 earnings call transcript, held 26 August 2026primaryQ2 FY2027 Form 10-Q, quarter ended 31 July 2026primary
against this
- Microsoft's Windows Endpoint Security Platform is designed so that any participating vendor's product runs in user mode through the same documented interface, which is the mechanism that would let a rival deploy as easily.
- The claim comes from the chief executive on a call and from the company's own MD&A. No customer, filing or third party in this manifest states it.
C07facthigh confidence
Revenue was $1,470.9M in Q2 FY2027, up 25.8% on Q2 FY2026, with the year-on-year rate rising for four straight quarters from 22.2%.
C09estimatehigh confidence
Excluding the July 19 Incident line and the restructuring - the two items the company itself removes and which fell to nothing this year - the operating loss widened from $31.4M to $47.8M, 52% wider, while revenue grew 25.8%.
derivedTaken from the company's own GAAP-to-non-GAAP table in the Q2 FY2027 release. Q2 FY2026 GAAP loss of $105.457M plus the $35.656M July 19 add-back plus the $38.384M Strategic Plan charge gives $31.417M. Q2 FY2027 GAAP loss of $33.232M less the $14.528M July 19 recovery gives $47.760M. Both reconcile to the printed non-GAAP figures of $254.952M and $371.649M.
against this
- Legal and remediation costs from a real incident are a real cost, and a company that has stopped incurring them is genuinely better off. On the company's stated measure the improvement is not cosmetic.
- The Strategic Plan cut 5% of the workforce and was completed by 31 July 2026, so its charges were always going to lapse; the saving it bought sits in the ongoing cost base rather than in the add-back line.
C11facthigh confidence
In February 2026 the company extended the period over which it writes off sales commissions from four years to five, cutting commission expense by $25.5M in Q2 FY2027 and $53.4M in the half.
C10facthigh confidence
Stock-based compensation and related employer payroll taxes were $399.0M in Q2 FY2027, 27.1% of revenue, up 44.2% year on year against revenue up 25.8% - twelve times the GAAP operating loss.
against this
- Three acquisitions closed inside twelve months and each converted the target's unvested equity into CrowdStrike awards, so part of the increase is acquisition consideration recognised over a service period rather than ordinary pay inflation.
- The share price roughly doubled over the year, which raises the accounting cost of awards granted at the higher price without the company handing over more shares.
C18estimatemedium confidence
Annualising the half-year figure, buyers now pay about $730 for each $1 of yearly cash the business keeps after the shares it hands to staff.
derivedMarket value of about $250,400M (the 2026-10-15 close of $244.57 times the 1,023.9 million shares on the 10-Q cover) against $171.3M of free cash flow after stock compensation in the six months to 31 July 2026, doubled to $342.6M for a year, is about 731 times. On the company's own FY2027 guidance the answer is dearer still: free cash flow of at least 30% of a $6,001M revenue midpoint is about $1,800M, less stock compensation at the Q2 run rate of about $1,508M, leaving roughly $293M, or about 855 times.
against this
- The second half is seasonally the stronger one, so doubling the first half understates the year; the company guides free cash flow to at least 30% of revenue for the full year.
- Stock compensation as a share of revenue falls mechanically as a software company matures, and Palo Alto Networks - one of the two filed peers - reached a positive operating margin on the same path.
- 2026-09-28editedre-struck at the 2026-09-25 close of $252.13 on the daily review's maintenance route -- drift +22.0%, past the 12% trigger. Free cash flow after stock compensation unchanged since no new quarter has printed.
- 2026-10-16editedrefreshed at the owner-requested review of 2026-10-16: re-struck at the 2026-10-15 close; the basis still carried the market value of the first pass ($210,515M, about 614 times) under a claim saying $750, and now states the figure the claim uses.
C17facthigh confidence
At the 15 October 2026 close of $244.57 the market value is about $250.4B on the 1,023.9 million shares the latest 10-Q cover reports - 46.4 times the $5,396.1M of revenue reported over the last four quarters, against a six-year median of 23.9 times.
sourceResearch pack, refreshed at the 2026-10-16 review and frozen…secondaryQ2 FY2027 Form 10-Q, quarter ended 31 July 2026primaryQ2 FY2027 results release, Exhibit 99.1 to the Form 8-K of…primary
- 2026-09-28editedre-struck at the 2026-09-25 close of $252.13 (from $206.74) on the daily review's maintenance route -- drift +22.0%, past the 12% trigger. Trailing revenue unchanged since no new quarter has printed.
- 2026-10-16editedrefreshed at the owner-requested review of 2026-10-16: re-struck at the 2026-10-15 close of $244.57 (from $252.13), with the market value now taken from the 10-Q cover share count of 1,023.9M rather than the vendor figure. Trailing revenue unchanged; no new quarter has printed.
C14estimatehigh confidence
Free cash flow in the six months to 31 July 2026 was $845.9M on the company's own definition, and stock-based compensation over the same period was $674.6M, leaving $171.3M.
sourceQ2 FY2027 results release, Exhibit 99.1 to the Form 8-K of…primaryQ1 FY2027 results release, Exhibit 99.1 to the Form 8-K of 3…primary
against this
- Subtracting stock compensation from free cash flow assumes every share issued must be bought back. The company is growing, and a growing company can carry a rising share count without value per share falling if revenue per share rises faster.
- Free cash flow is flattered the other way too: customers pay upfront, so deferred revenue rose $83.3M in the half and part of the cash is next year's revenue collected early.
The company
Every company computer is a door an attacker can try. Old antivirus compared files against a list of known bad ones, so it could not see an attack that used no file.
Falcon is one small program on each laptop, server and cloud machine. It watches what the machine does and reports to CrowdStrike's cloud, where the detection runs and one screen shows everything.
The evidence under this - 1 claim
C01facthigh confidence
Falcon is one software agent installed on laptops, servers and cloud workloads that reports what the machine does to CrowdStrike's cloud, where detection runs and one console shows the whole estate.
How it makes money
Customers pay a subscription, usually for one to three years. The first sale installs the program; every later one is a licence on top, with nothing new to roll out. The yearly value of all subscriptions reached $5.84B at the end of July, up 25%.
The evidence under this - 3 claims
C51facthigh confidence
Remaining performance obligations were $10.7B at 31 July 2026, about 46% expected within twelve months; subscription contracts typically run one to three years and most are non-cancelable.
C02management claimmedium confidence
A new module is a licence entitlement on the agent already deployed, so the incremental sale needs no new rollout across the customer's machines.
sourceQ2 FY2027 earnings call transcript, held 26 August 2026primaryQ2 FY2027 Form 10-Q, quarter ended 31 July 2026primary
against this
- Microsoft's Windows Endpoint Security Platform is designed so that any participating vendor's product runs in user mode through the same documented interface, which is the mechanism that would let a rival deploy as easily.
- The claim comes from the chief executive on a call and from the company's own MD&A. No customer, filing or third party in this manifest states it.
C06factmedium confidence
Annual recurring revenue was $5,841.4M at 31 July 2026, up 25% year on year, of which $332.8M was added in the quarter - a record, and 51% more than the quarter a year earlier.
sourceQ2 FY2027 Form 10-Q, quarter ended 31 July 2026primaryQ2 FY2027 results release, Exhibit 99.1 to the Form 8-K of…primary
against this
- The Department of Justice and the Securities and Exchange Commission have requested information relating to the company's recognition of revenue and reporting of annual recurring revenue for transactions with certain customers.
- Annual recurring revenue is defined by the company, computed by the company and audited by nobody. It assumes every contract expiring in the next twelve months renews on its existing terms.
Where the money comes from, stream by stream
| Stream | Share of sales (Q2 FY2027) | How it earns it |
|---|---|---|
| Subscription | 95.2% | Falcon modules licensed per endpoint or workload for one to three years, including Falcon Flex commitments drawn down across modules. |
| Professional services | 4.8% | Incident response, forensics and deployment work billed by engagement, run at a thin margin to win and keep subscriptions. |
Who runs it
George Kurtz founded CrowdStrike and has run it since 2011; Burt Podbere has been finance chief since 2015. Insiders own under 2% of the company, and Kurtz under 1%. Most of the yearly bonus rides on new subscription sales; the rest, and the share awards, ride on profit measured before stock pay, so the share awards this thesis worries about cost the executives nothing.
The evidence under this - 3 claims
C55facthigh confidence
George Kurtz founded the company and has been chief executive, president and a director since November 2011; Burt Podbere has been chief financial officer since September 2015; Michael Sentonas, chief technology officer from 2020, has been president since March 2023.
C56facthigh confidence
At 3 April 2026 the eleven directors and executive officers owned 1.67% of the 254.6 million Class A shares then outstanding; George Kurtz, the largest insider, held 2,384,082 shares, under 1%; no Class B shares were outstanding; Vanguard (7.27%) and BlackRock (6.70%) were the only holders above 5%.
C57facthigh confidence
The FY2026 annual cash bonus paid 70% on net new annual recurring revenue and 30% on non-GAAP operating income, with a net retention modifier, and paid 108.8% of target; the PSUs paid on revenue and non-GAAP earnings per share, at 200% of target; the chief executive's December 2025 PSUs pay on three-year return against the S&P 500.
against this
- Both profit measures the plan pays on are non-GAAP and leave out stock compensation (C13), the cost this thesis turns on, so its growth from 17% to 23% of revenue cost the plan nothing.
- The PSU revenue range was $4,743.5M to $4,805.5M against $4,812.1M achieved, a maximum reached by $6.6M on revenue guided near the range, which says the bar sat at the guide.
Why it wins, and who could beat it
Why customers come back
Once the program is on every machine, the next product is just a licence. A rival's first sale has to be installed and tested on every machine the customer owns, and years of collected history do not come with it.
It shows in customers buying more. Existing customers spent 15% more in the year to January 2026, against 12% the year before, and 51% now run six or more products.
The evidence under this - 3 claims
C02management claimmedium confidence
A new module is a licence entitlement on the agent already deployed, so the incremental sale needs no new rollout across the customer's machines.
sourceQ2 FY2027 earnings call transcript, held 26 August 2026primaryQ2 FY2027 Form 10-Q, quarter ended 31 July 2026primary
against this
- Microsoft's Windows Endpoint Security Platform is designed so that any participating vendor's product runs in user mode through the same documented interface, which is the mechanism that would let a rival deploy as easily.
- The claim comes from the chief executive on a call and from the company's own MD&A. No customer, filing or third party in this manifest states it.
C05facthigh confidence
Dollar-based net retention was 115% at 31 January 2026, against 112% a year earlier: the same customers spent 15% more than a year before.
C04facthigh confidence
At 31 July 2026, 51%, 35% and 26% of subscription customers had adopted six or more, seven or more, and eight or more modules.
The threat
Microsoft is the one to watch. Its security bundle lists at $12.00 a user a month and includes endpoint protection beside email and identity, so a buyer already paying Microsoft can drop a separate vendor. SentinelOne sells the same one-program design, and Palo Alto Networks names CrowdStrike as a rival it folds into its wider platform.
The evidence under this - 3 claims
C23factmedium confidence
Microsoft's published list price for the Defender Suite, which includes endpoint security alongside email, identity and software-as-a-service protection, is $12.00 per user per month paid yearly.
C24facthigh confidence
SentinelOne's own annual report names CrowdStrike first among its competitors and describes the same architecture - one agent on every endpoint and cloud workload reporting to one console.
C25facthigh confidence
Palo Alto Networks' own annual report names CrowdStrike among the independent security vendors it competes with, in the same category it places itself in.
Who else does this, rival by rival
| Ticker | Rival | How far along | Priced against it |
|---|---|---|---|
| MSFT | Microsoft Defender for Endpoint, sold inside the Microsoft Defender SuitePriced against it: One segment only | On sale | One segment only |
| S | SentinelOne Singularity PlatformPriced against it: Yes | On sale | Yes |
| PANW | Palo Alto Networks CortexPriced against it: Yes | On sale | Yes |
How big it could get
How big this could get
Price every one of the 159.0 million people on American payrolls at Microsoft's list rate and the market comes to about $22.9B a year. CrowdStrike's $5.84B of yearly subscriptions is already a quarter of that, though the count leaves out its sales abroad and what it charges for cloud machines and data.
The evidence under this - 3 claims
C45facthigh confidence
United States nonfarm payrolls stood at 159,044 thousand in September 2026 - 159.0 million people.
- 2026-10-16editedrefreshed at the owner-requested review of 2026-10-16: the September 2026 print; August was revised to 159,015 thousand.
C23factmedium confidence
Microsoft's published list price for the Defender Suite, which includes endpoint security alongside email, identity and software-as-a-service protection, is $12.00 per user per month paid yearly.
C06factmedium confidence
Annual recurring revenue was $5,841.4M at 31 July 2026, up 25% year on year, of which $332.8M was added in the quarter - a record, and 51% more than the quarter a year earlier.
sourceQ2 FY2027 Form 10-Q, quarter ended 31 July 2026primaryQ2 FY2027 results release, Exhibit 99.1 to the Form 8-K of…primary
against this
- The Department of Justice and the Securities and Exchange Commission have requested information relating to the company's recognition of revenue and reporting of annual recurring revenue for transactions with certain customers.
- Annual recurring revenue is defined by the company, computed by the company and audited by nobody. It assumes every contract expiring in the next twelve months renews on its existing terms.
Where the growth is coming from, business by business
Where the growth is coming from
| Business | Share of revenue | Growth: last quarter | Last half-year | Last year | Share in 3 years at its latest-quarter rate |
|---|---|---|---|---|---|
| Subscription And Circulation | 95% | +27.0% | - | - | 97% |
| Professional Services | 5% | +7.0% | - | - | 3% |
| Whole company | 100% | +25.8% | - | - | 100% |
On the filed split through 2026-07-31, if each business keeps its latest quarter's growth, the company grows about 26% next year and 26% in year 3, against 24.3% over the last twelve months. A scenario, not a forecast: no business holds its rate.
The results
The numbers
Is it growing?Steady
Sales grew 22% in the year to Jan 2026, slower than the 29% in the year before.
Is it profitable?Losing
Operating margin is −6.1%, up from −8.5% in the year to Jan 2023.
Does growth pay off?Flat
Running costs take 81¢ of each sales dollar, down from 83¢ in the year to Jan 2022.
Does it earn good returns?Poor
Shareholders' money lost 4.2% a year, up from −25% in the year to Jan 2022.
Is it making cash?Strong
It turned 27% of sales into free cash, $1.31B over the year.
Is the balance sheet safe?Net cash
It holds $5.23B of cash against $745M of debt, $4.48B more cash than it owes.
Are shares being diluted?Creeping
The share count rose 10% in 4.0 years, and pay in shares costs 23% of sales.
All the numbers
Filed figures from the company's 10-K and 10-Q, read 2026-10-04. Fiscal years end in January.
| Jan 2022 | Jan 2023 | Jan 2024 | Jan 2025 | Jan 2026 | |
|---|---|---|---|---|---|
| Size and growth | |||||
| Sales | $1.45B | $2.24B | $3.06B | $3.95B | $4.81B |
| Sales growth | +66% | +54% | +36% | +29% | +22% |
| Profit | |||||
| Gross margin | 74% | 73% | 75% | 75% | 75% |
| Operating margin | −9.8% | −8.5% | −0.6% | −2.9% | −6.1% |
| Net margin | −16% | −8.2% | 2.4% | −0.4% | −3.4% |
| What growth costs, per sales dollar | |||||
| Research and development | 26% | 27% | 26% | 27% | 29% |
| Sales and marketing | 42% | 40% | 37% | 39% | 38% |
| General and admin | 15% | 14% | 13% | 12% | 14% |
| Pay in shares | 21% | 23% | 21% | 22% | 23% |
| Capital spending | 7.7% | 10% | 5.8% | 6.4% | 6.3% |
| Cash | |||||
| Cash from operations | $575M | $941M | $1.17B | $1.38B | $1.61B |
| Free cash flow | $463M | $706M | $990M | $1.13B | $1.31B |
| Balance sheet | |||||
| Cash and short-term investments | $2.00B | $2.71B | $3.47B | $4.32B | $5.23B |
| Debt | $740M | $741M | $742M | $744M | $745M |
| Net cash | $1.26B | $1.96B | $2.73B | $3.58B | $4.48B |
| Returns and shares | |||||
| Return on capital | - | - | −0.5% | - | - |
| Shares (diluted) | 227M | 233M | 244M | 245M | 251M |
What growth costs
Growing has made selling cheaper per dollar of sales, but the savings went into engineers and share awards. So five years of fast growth have not made the company more profitable on the reported line; it still loses a little money before interest.
The evidence under this - 2 claims
C59facthigh confidence
Per sales dollar from FY2021 to FY2026, sales and marketing fell from 45.9 cents to 38.1, research and development rose from 24.5 to 28.8, general and administrative stood at 13.9 at both ends and stock compensation rose from 17.1 to 22.8; the GAAP operating margin went from -10.6% to -6.1%, its best -0.6% in FY2024.
sourceFY2026 Form 10-K, year ended 31 January 2026primaryFY2023 Form 10-K, year ended 31 January 2023primary
against this
- FY2026's operating line carries July 19 Incident costs and the Strategic Plan's restructuring, which the company removes (C09), so the latest year flatters the deterioration from FY2024.
- Capital spending moved between 5.8 and 10.5 cents per sales dollar with no trend, so the cost of growth is in people and share awards rather than equipment.
C10facthigh confidence
Stock-based compensation and related employer payroll taxes were $399.0M in Q2 FY2027, 27.1% of revenue, up 44.2% year on year against revenue up 25.8% - twelve times the GAAP operating loss.
against this
- Three acquisitions closed inside twelve months and each converted the target's unvested equity into CrowdStrike awards, so part of the increase is acquisition consideration recognised over a service period rather than ordinary pay inflation.
- The share price roughly doubled over the year, which raises the accounting cost of awards granted at the higher price without the company handing over more shares.
The last report (26 Aug)
Quarter ended July 2026, filed figures.
26%
Sales growth
against the same quarter a year earlier
6.2%
Growth from the quarter before
against 6.1% the quarter before that
-2¢
Operating profit
per dollar of sales
On the surface the second quarter of fiscal 2027, to 31 July 2026, was a clean win. Revenue grew 25.8%, new subscription value added in the quarter was a record, 51% above a year earlier, and the loss on the official accounts shrank from $105.5M to $33.2M.
Underneath, the improvement mostly was not the business. Take out last year's outage and restructuring charges, which simply fell away, and the operating loss widened 52%. Half the margin gain the company highlighted came from spreading sales commissions over five years instead of four.
What it did to the thesisIt supported the demand half of the case, with record new subscription business. It also confirmed the Unattractive view: the better profit came mostly from last year's charges falling away and from spreading commissions over a longer period, not from the business earning more.
The quarter in detail
Sales growth from the previous quarter, filed figures. The company has restated its own history, so a quarter either side of the restatement may describe a different business; n/c marks one that does not compare.
Earnings per share $0.31 against $0.29 expected; $0.01 as filed, the gap being what the company adds back.
The evidence under this - 6 claims
C07facthigh confidence
Revenue was $1,470.9M in Q2 FY2027, up 25.8% on Q2 FY2026, with the year-on-year rate rising for four straight quarters from 22.2%.
C06factmedium confidence
Annual recurring revenue was $5,841.4M at 31 July 2026, up 25% year on year, of which $332.8M was added in the quarter - a record, and 51% more than the quarter a year earlier.
sourceQ2 FY2027 Form 10-Q, quarter ended 31 July 2026primaryQ2 FY2027 results release, Exhibit 99.1 to the Form 8-K of…primary
against this
- The Department of Justice and the Securities and Exchange Commission have requested information relating to the company's recognition of revenue and reporting of annual recurring revenue for transactions with certain customers.
- Annual recurring revenue is defined by the company, computed by the company and audited by nobody. It assumes every contract expiring in the next twelve months renews on its existing terms.
C08facthigh confidence
The GAAP loss from operations was $33.2M in Q2 FY2027 against $105.5M in Q2 FY2026, and the GAAP operating margin improved from -9.0% to -2.3%.
C09estimatehigh confidence
Excluding the July 19 Incident line and the restructuring - the two items the company itself removes and which fell to nothing this year - the operating loss widened from $31.4M to $47.8M, 52% wider, while revenue grew 25.8%.
derivedTaken from the company's own GAAP-to-non-GAAP table in the Q2 FY2027 release. Q2 FY2026 GAAP loss of $105.457M plus the $35.656M July 19 add-back plus the $38.384M Strategic Plan charge gives $31.417M. Q2 FY2027 GAAP loss of $33.232M less the $14.528M July 19 recovery gives $47.760M. Both reconcile to the printed non-GAAP figures of $254.952M and $371.649M.
against this
- Legal and remediation costs from a real incident are a real cost, and a company that has stopped incurring them is genuinely better off. On the company's stated measure the improvement is not cosmetic.
- The Strategic Plan cut 5% of the workforce and was completed by 31 July 2026, so its charges were always going to lapse; the saving it bought sits in the ongoing cost base rather than in the add-back line.
C11facthigh confidence
In February 2026 the company extended the period over which it writes off sales commissions from four years to five, cutting commission expense by $25.5M in Q2 FY2027 and $53.4M in the half.
C12estimatehigh confidence
That commission change is 1.74 of the 3.46 percentage points of non-GAAP operating margin expansion the company reported - half of it.
derivedNon-GAAP operating income of $371.649M on revenue of $1,470.897M is 25.27%; $254.952M on $1,168.952M is 21.81%; the gap is 3.46 points. Removing the disclosed $25.5M benefit gives $346.149M, or 23.53%, an expansion of 1.72 points. The difference, 1.74 points, is the change in estimate.
against this
- Lengthening the period of benefit is a defensible response to customers signing longer contracts, which is exactly what Falcon Flex does, so the change may describe the business rather than dress it.
- The benefit recurs for as long as the balance amortises, so it is not a single-quarter item that reverses; it is a permanent step in the reported cost base rather than a one-off.
What management did with the money
It bought back $175.6M of stock in the half, none of it in the latest quarter, and the share count still rose 2.0% in a year. It spent $1.09B in cash buying three companies in twelve months.
Insiders in 2026Q3: 9 purchases and 721 sales, from their Form 4 filings.
The evidence under this - 3 claims
C15facthigh confidence
The company repurchased $175.6M of stock in the half and none at all in Q2 FY2027; $1.3B of a $1.5B authorisation was unused at 31 July 2026.
C16facthigh confidence
Basic weighted-average shares rose from 999.6 million to 1,019.4 million, up 2.0% year on year, after a four-for-one split.
C34facthigh confidence
The company paid $1,092.7M in cash for SGNL, Pangea and Onum inside twelve months, of which $1,004.1M was recorded as goodwill, and has agreed to buy XM Cyber's technology assets for $145.0M in cash and shares plus further shares.
The price, and where we disagree
In short. Priced for perfection. A good business, but the price assumes the cash left for owners grows strongly for a decade, while the cost of shares handed to staff grows faster than sales.
Share price
$244.57
close,
Price for each $1 of spare cash
153.1
rivals' middle 136.1
Spare cash as a share of the price
0.7%
its 6-year normal 1.1%
The shares doubled in a year while the typical security company we follow rose 42%. The whole group rose, Palo Alto Networks by 79%, but buyers chased this one hardest.
The next results, due around 1 December, test whether the profit turn is real: whether staff share costs fall as a share of revenue, and whether the loss narrows without a one-off doing the work. Management's own forecast already implies new subscription growth slowing from 51% to 29% to 31%.
The evidence under this - 4 claims
C61facthigh confidence
The shares returned 100.0% over the 252 sessions to 15 October 2026 against a median of 41.9% across the ten other members of this repo's cybersecurity theme; Palo Alto Networks returned 79.1%.
against this
The theme had seven priced members at the first pass and ten now, so part of the narrower gap is a different comparison set rather than the group catching up.
C10facthigh confidence
Stock-based compensation and related employer payroll taxes were $399.0M in Q2 FY2027, 27.1% of revenue, up 44.2% year on year against revenue up 25.8% - twelve times the GAAP operating loss.
against this
- Three acquisitions closed inside twelve months and each converted the target's unvested equity into CrowdStrike awards, so part of the increase is acquisition consideration recognised over a service period rather than ordinary pay inflation.
- The share price roughly doubled over the year, which raises the accounting cost of awards granted at the higher price without the company handing over more shares.
C08facthigh confidence
The GAAP loss from operations was $33.2M in Q2 FY2027 against $105.5M in Q2 FY2026, and the GAAP operating margin improved from -9.0% to -2.3%.
C49estimatemedium confidence
The raised FY2027 guide implies second-half growth in newly added subscription value of 27.9% to 29.4%, against the 51% just delivered; management's own Q3 guide is 29% to 31%.
derivedFull-year net new annual recurring revenue guided to $1,350M-$1,359M less the $588.6M added in the first half leaves $761.4M-$770.4M for the second, against $595.2M in the second half of FY2026 (the $1,010M full year less $414.8M in the first half). The Q3 range of 29% to 31% is management's own statement on the call.
against this
- The company has raised this guide twice already this year and beaten it every quarter, so a conservative second half is the pattern rather than a forecast of deceleration.
- The comparative hardens: the second half of FY2026 was itself a recovery half, so a lower growth rate on a bigger base is not the same as slowing demand.
How we read the multiple
Buyers pay about $250B for CrowdStrike, about 46 times a year's sales, against 39 times when we first wrote.
Cash tells it more sharply. In the half-year to July:
- The business made $845.9M of spare cash.
- It handed staff $674.6M of shares, a cost owners bear by owning less or paying for buybacks.
- Counting that cost, a buyer pays about $730 for each $1 owners keep a year, against $600 when we first wrote.
- And that staff share cost grew 44.2%, against sales growth of 25.8%.
Against its own history. Far dearer than its own normal, while the cash owners keep has not improved to match. The gap is the market paying for growth still to come.
The evidence under this - 4 claims
C17facthigh confidence
At the 15 October 2026 close of $244.57 the market value is about $250.4B on the 1,023.9 million shares the latest 10-Q cover reports - 46.4 times the $5,396.1M of revenue reported over the last four quarters, against a six-year median of 23.9 times.
sourceResearch pack, refreshed at the 2026-10-16 review and frozen…secondaryQ2 FY2027 Form 10-Q, quarter ended 31 July 2026primaryQ2 FY2027 results release, Exhibit 99.1 to the Form 8-K of…primary
- 2026-09-28editedre-struck at the 2026-09-25 close of $252.13 (from $206.74) on the daily review's maintenance route -- drift +22.0%, past the 12% trigger. Trailing revenue unchanged since no new quarter has printed.
- 2026-10-16editedrefreshed at the owner-requested review of 2026-10-16: re-struck at the 2026-10-15 close of $244.57 (from $252.13), with the market value now taken from the 10-Q cover share count of 1,023.9M rather than the vendor figure. Trailing revenue unchanged; no new quarter has printed.
C14estimatehigh confidence
Free cash flow in the six months to 31 July 2026 was $845.9M on the company's own definition, and stock-based compensation over the same period was $674.6M, leaving $171.3M.
sourceQ2 FY2027 results release, Exhibit 99.1 to the Form 8-K of…primaryQ1 FY2027 results release, Exhibit 99.1 to the Form 8-K of 3…primary
against this
- Subtracting stock compensation from free cash flow assumes every share issued must be bought back. The company is growing, and a growing company can carry a rising share count without value per share falling if revenue per share rises faster.
- Free cash flow is flattered the other way too: customers pay upfront, so deferred revenue rose $83.3M in the half and part of the cash is next year's revenue collected early.
C18estimatemedium confidence
Annualising the half-year figure, buyers now pay about $730 for each $1 of yearly cash the business keeps after the shares it hands to staff.
derivedMarket value of about $250,400M (the 2026-10-15 close of $244.57 times the 1,023.9 million shares on the 10-Q cover) against $171.3M of free cash flow after stock compensation in the six months to 31 July 2026, doubled to $342.6M for a year, is about 731 times. On the company's own FY2027 guidance the answer is dearer still: free cash flow of at least 30% of a $6,001M revenue midpoint is about $1,800M, less stock compensation at the Q2 run rate of about $1,508M, leaving roughly $293M, or about 855 times.
against this
- The second half is seasonally the stronger one, so doubling the first half understates the year; the company guides free cash flow to at least 30% of revenue for the full year.
- Stock compensation as a share of revenue falls mechanically as a software company matures, and Palo Alto Networks - one of the two filed peers - reached a positive operating margin on the same path.
- 2026-09-28editedre-struck at the 2026-09-25 close of $252.13 on the daily review's maintenance route -- drift +22.0%, past the 12% trigger. Free cash flow after stock compensation unchanged since no new quarter has printed.
- 2026-10-16editedrefreshed at the owner-requested review of 2026-10-16: re-struck at the 2026-10-15 close; the basis still carried the market value of the first pass ($210,515M, about 614 times) under a claim saying $750, and now states the figure the claim uses.
C10facthigh confidence
Stock-based compensation and related employer payroll taxes were $399.0M in Q2 FY2027, 27.1% of revenue, up 44.2% year on year against revenue up 25.8% - twelve times the GAAP operating loss.
against this
- Three acquisitions closed inside twelve months and each converted the target's unvested equity into CrowdStrike awards, so part of the increase is acquisition consideration recognised over a service period rather than ordinary pay inflation.
- The share price roughly doubled over the year, which raises the accounting cost of awards granted at the higher price without the company handing over more shares.
Priced against its rivals
The competitors its own annual report names, each confirmed against the rival's filing. Measured on price for each $1 of spare cash, cheapest first:
| Ticker | Company | price for each $1 of spare cash |
|---|---|---|
| PANW | Palo Alto Networks | 70.9× |
| CRWD | CrowdStrike Holdings | 153.1× |
| S | SentinelOne | 201.3× |
The middle of the other 2 is 136.1. CrowdStrike Holdings, Inc. is 2nd cheapest of 3.
Rivals' figures come from a data provider, so read the spread of the group rather than any single pair.
On cash as usually counted it sits between its filed rivals, but that count ignores shares handed to staff, the cost this case turns on.
Also checked and set aside: Fortinet (a substitute, not the same product); Zscaler (a substitute, not the same product).
Private or foreign rivals that cannot be priced: Trellix, Trend Micro Incorporated, Sophos Group Plc, Wiz, Inc.
Where we disagree with the market
The market believes
An artificial-intelligence security story whose profits are already proven by a 25% operating margin and record cash flow.
We believe
The business is good, but the profit turn is mostly cosmetic: last year's charges leaving, and commissions written off more slowly.
Demand really is accelerating, and the company leads with the flattering numbers; the table that undoes them sits in the filings. Ten analysts asked questions on the August call, and not one asked about staff share costs, the official loss or the commission change.
We would be wrong if staff share costs start falling as a share of revenue while growth holds, and the official accounts show a profit no one-off explains.
What analysts say, and the evidence
Analysts positive
74%
of 54, 1 Oct
Four months earlier
78%
of 55, 1 Jun
The evidence under this - 6 claims
C13facthigh confidence
Non-GAAP operating income was $371.6M in Q2 FY2027, a 25% margin, and stock compensation is the largest single item bridging it to the GAAP loss.
C41facthigh confidence
Ten analysts asked questions on the Q2 FY2027 call; every question was about product or artificial-intelligence demand and none touched stock compensation, the GAAP loss, the purchase commitments, the commission change or the regulatory requests.
C09estimatehigh confidence
Excluding the July 19 Incident line and the restructuring - the two items the company itself removes and which fell to nothing this year - the operating loss widened from $31.4M to $47.8M, 52% wider, while revenue grew 25.8%.
derivedTaken from the company's own GAAP-to-non-GAAP table in the Q2 FY2027 release. Q2 FY2026 GAAP loss of $105.457M plus the $35.656M July 19 add-back plus the $38.384M Strategic Plan charge gives $31.417M. Q2 FY2027 GAAP loss of $33.232M less the $14.528M July 19 recovery gives $47.760M. Both reconcile to the printed non-GAAP figures of $254.952M and $371.649M.
against this
- Legal and remediation costs from a real incident are a real cost, and a company that has stopped incurring them is genuinely better off. On the company's stated measure the improvement is not cosmetic.
- The Strategic Plan cut 5% of the workforce and was completed by 31 July 2026, so its charges were always going to lapse; the saving it bought sits in the ongoing cost base rather than in the add-back line.
C11facthigh confidence
In February 2026 the company extended the period over which it writes off sales commissions from four years to five, cutting commission expense by $25.5M in Q2 FY2027 and $53.4M in the half.
C10facthigh confidence
Stock-based compensation and related employer payroll taxes were $399.0M in Q2 FY2027, 27.1% of revenue, up 44.2% year on year against revenue up 25.8% - twelve times the GAAP operating loss.
against this
- Three acquisitions closed inside twelve months and each converted the target's unvested equity into CrowdStrike awards, so part of the increase is acquisition consideration recognised over a service period rather than ordinary pay inflation.
- The share price roughly doubled over the year, which raises the accounting cost of awards granted at the higher price without the company handing over more shares.
C08facthigh confidence
The GAAP loss from operations was $33.2M in Q2 FY2027 against $105.5M in Q2 FY2026, and the GAAP operating margin improved from -9.0% to -2.3%.
What could go wrong, and how we would know
The risks
- Regulators asking questions. The Justice Department and the Securities and Exchange Commission have asked how it recognises revenue and reports subscription value, the figure the whole valuation runs on.
- Microsoft's bundle. Endpoint protection comes inside a security bundle many buyers already pay Microsoft for.
- The July 2024 outage. Delta Air Lines' suit over the crash survived in part and is in discovery, seeking unspecified damages including punitive ones.
- Discounts coming due. Management expects the packages offered after the outage to keep causing customers to shrink contracts and upgrade less.
- Large spending promises. Promises to buy from suppliers total about $7.0B, running to fiscal 2034, against $5.0B of cash.
The evidence under this - 5 claims
C27facthigh confidence
The Department of Justice and the Securities and Exchange Commission have requested information relating to the company's recognition of revenue and reporting of annual recurring revenue for transactions with certain customers, and the July 19 Incident.
against this
- The requests have been disclosed in the same words for several quarters with no enforcement action, no accrual and no restatement, and the company says it is cooperating.
- Requests for information are not charges. The company records no liability because it cannot estimate one, which is the ordinary treatment for an inquiry at this stage.
C23factmedium confidence
Microsoft's published list price for the Defender Suite, which includes endpoint security alongside email, identity and software-as-a-service protection, is $12.00 per user per month paid yearly.
C28facthigh confidence
Delta Air Lines' suit over the July 19 Incident survived a motion to dismiss in part and is in discovery, seeking unspecified damages including punitive damages.
C30management claimmedium confidence
Customer commitment packages offered after the July 19 Incident have resulted, and management expects will continue to result, in increased contraction and lower upsell values through longer subscription terms.
against this
- Dollar-based net and gross retention both improved sequentially in the quarter, and net new annual recurring revenue was a record, so the drag has not shown up in the metrics it is said to affect.
- The sentence has been carried unchanged in the filings for several quarters and may be standing risk-factor language rather than a live expectation.
C31facthigh confidence
Non-cancelable purchase commitments were $4,141.5M at 31 July 2026, and the company committed to a further $2.9B running to fiscal 2034 after the quarter ended - about $7.0B against $5.0B of cash.
against this
- These are data-centre capacity and technology commitments against a business already generating over $1.1B of operating cash a half, and revenue is contracted three years out through a $10.7B order book.
- Committing to cloud capacity ahead of demand is what buys the gross margin: subscription gross margin rose to 78% on GAAP and management targets 82% to 85% by fiscal 2029.
What we still do not know
- What exactly the Justice Department and the SEC are asking, and about which customers.
- Why sales commissions waiting to be written off are growing faster than revenue: 34.3% against 25.8%.
- Whether staff share costs will ever stop outgrowing the business. Management publishes no target for them and said nothing about them on the call.
The evidence under this - 4 claims
C27facthigh confidence
The Department of Justice and the Securities and Exchange Commission have requested information relating to the company's recognition of revenue and reporting of annual recurring revenue for transactions with certain customers, and the July 19 Incident.
against this
- The requests have been disclosed in the same words for several quarters with no enforcement action, no accrual and no restatement, and the company says it is cooperating.
- Requests for information are not charges. The company records no liability because it cannot estimate one, which is the ordinary treatment for an inquiry at this stage.
C39facthigh confidence
Capitalised sales commissions grew 34.3% to $1,194.6M while revenue grew 25.8%, with the non-current portion up 55.8%.
C10facthigh confidence
Stock-based compensation and related employer payroll taxes were $399.0M in Q2 FY2027, 27.1% of revenue, up 44.2% year on year against revenue up 25.8% - twelve times the GAAP operating loss.
against this
- Three acquisitions closed inside twelve months and each converted the target's unvested equity into CrowdStrike awards, so part of the increase is acquisition consideration recognised over a service period rather than ordinary pay inflation.
- The share price roughly doubled over the year, which raises the accounting cost of awards granted at the higher price without the company handing over more shares.
C41facthigh confidence
Ten analysts asked questions on the Q2 FY2027 call; every question was about product or artificial-intelligence demand and none touched stock compensation, the GAAP loss, the purchase commitments, the commission change or the regulatory requests.
What would change our view
- Unattractive→AttractiveThe stock cost stops eating the cash, at a price that reflects it
It needs all of:
- ○Staff share costs fall below 20% of revenue while revenue still grows faster than 20%.checked at the next results, due by 1 Dec
- ○Free cash left after staff share costs passes $1B in a fiscal year, against $342.6M a year now.checked at the next results, due by 1 Dec
- ○The shares fall to about 24 times a year's sales, their own six-year middle.about $125.97 today, 48% below the last close
- Reopens the researchThe regulatory question is answered
It needs:
- ○The Justice Department and SEC questions about how subscription value is reported are settled, or their scope disclosed.checked at the next results, due by 1 Dec
We would also be wrong if
- The official accounts show a full year of profit with no one-off item doing the work.
- New subscription value grows above 40% for four quarters running.
What is coming
- 1 December 2026 Q3 FY2027 results: Whether stock compensation falls below a quarter of revenue while newly added subscription value holds near the 29% guide, and whether the GAAP operating line nears profit without a one-off.
Every dated event ahead
- 1 December 2026 Q3 FY2027 results: Whether stock compensation falls below a quarter of revenue while newly added subscription value holds near the 29% guide, and whether the GAAP operating line nears profit without a one-off.
- January 2027 XM Cyber technology-asset acquisition closes: How many further shares the closing fixes, and whether a fifth deal in eighteen months again buys engineers and goodwill rather than revenue.
- March 2027 Q4 FY2027 results and the FY2027 10-K: A full year of stock pay against revenue, the year's net retention, and any change in the DOJ and SEC requests or the Delta suit.
- May 2027 2027 proxy statement: Whether the bonus or the PSUs start paying on a measure that counts stock compensation, and how far insider ownership has fallen after this year's sales.
Since we wrote this
Written
14 Sep
Price the thesis read
$244.57
15 Oct
- 16 OctThesis reviewPrice and market data refreshed; view held at UnattractiveOwner asked for a refresh. No print or filing since September; the shares are 3% lower and still cost about $730 for each $1 of cash left after share awards.
- 5 OctThesis reviewThe long case now sits under the verdictAfter the five-name pilot, the owner asked for the long case on every thesis.
- 4 OctThesis reviewOwner's checklist: revenue streams, cost of growth, management, catalystsThe owner's checklist found the method silent on who runs the company, what growth costs, where the money comes from and what is dated ahead; this pass fills those four blocks from the proxy and filings.
- 28 SepPrice movePrice re-struck, +22.0%; view heldNo print, filing or confirmed development since the thesis. The cash left after share awards now costs about $750 per $1 rather than $600 on the same quarter.
- 26 SepThesis reviewCash kept after share awards corrected to $342.6M a year; view heldThe prose quoted $351M a year, from the company's second free cash flow figure; the ledger uses $171.3M for the half. About $600 of price per $1 kept either way.
- 14 SepThesis writtenUnattractive, medium convictionWritten three weeks after results showing record demand and a shrinking loss, most of which came from absent charges and an accounting change rather than the business.
Also checked 3 times with nothing new to act on.
Sources 20
Where this came from
Sources - 20
Every claim above cites one of these, or states the reasoning that derived it. The quote is frozen at the date it was read: a link can rot, and an agent fetch returns a reading of a page rather than the page. Backs counts the whole claim ledger, so it can name a claim this page does not surface.
- S01primarycompany filing2026-08-27the statements; the stock split note; the revision of prior-period stock-compensation timing; the change in the commission period of benefit; annual recurring revenue; remaining performance obligations; the DOJ and SEC requests; the Delta suit; purchase commitments and the $2.9B committed after quarter end; financing receivables; concentration; the buyback authorisation; the Strategic Plan; the acquisitionsbacksC01C02C03C06C11C15C46C17C27C28C29C30C31C32C34C51C53C37C38C39C50C54C60
- S02primarycompany filing2026-08-26the GAAP to non-GAAP reconciliation line by line, the stock-compensation total, the cash flow statement, the share counts, the buyback, and FY2027 guidancebacksC04C06C07C08C10C13C14C15C16C17C19
- S03primarytranscript2026-08-26management's framing of operating leverage; the Falcon Flex, next-gen SIEM, identity and cloud figures that appear in no filing; the statement that XM Cyber brings no revenue; and ten analyst questions, none of which touched the cost structure
it is still using the same agent If you want to enable AIDR, again, that is a license entitlement. it is part of our friction-free deployment. Again, why is FalconFlex so successful? Immediate time to value, and you do not have to roll out yet another agent.
backsC02C35C52C41 - S04primarycompany filing2026-03-05the business description, the seven competitor classes and no company named, the dollar-based net retention table, and the FY2026 annual figuresbacksC01C05C26C36C55C58C59
- S05primarycompany filing2026-03-03the FY2026 full-year GAAP and non-GAAP figures, and the stated goal of $20 billion of ending annual recurring revenue in FY2036backsC20
- S06secondaryvendor data2026-09-14Research pack, frozen beside this thesiscontent/CRWD/research-pack.jsonprice and market value, the 252-day return, the analyst panel and its history, the price-target drift, the insider window and its base rate, short interest, the filed competitor cohort, headcount and revenue per employee, and theme co-movementbacksC07C32C43C36
- S07primaryindustry data2025-06-26the platform owner's own statement that endpoint security is being moved out of the Windows kernel, and that CrowdStrike is one of the partners in the private preview
This means security products like anti-virus and endpoint protection solutions can run in user mode just as apps do.
backsC22 - S08primaryindustry data2026-09-14the platform's name and its stated purpose, from Microsoft rather than from coverage of it
Windows Endpoint Security Platform (WESP) enables Windows protection and security solutions to run outside the kernel
backsC22 - S09primaryindustry data2026-09-14the list price of the bundle a buyer weighs Falcon against, which no filing carries, and the price factor in the prize
Microsoft Defender Suite $12.00 user/month, paid yearly (Annual subscription-auto renews)
backsC23 - S10primarycompany filing2026-03-19a direct rival's own description of the same one-agent architecture, and its Competition section naming CrowdStrike firstbacksC24
- S11primarycompany filing2026-09-10Palo Alto Networks FY2026 Form 10-K, year ended 31 July 2026 Palo Alto Networksa rival's own Competition section naming CrowdStrike among independent security vendors, and the second member of the filed cohortbacksC25
- S12primarycompany filing2026-07-29Microsoft 365 Commercial seat growth of 6% in fiscal 2026 - the closest public rate for the enterprise seat base - and confirmation that Microsoft discloses no security revenue lineread, but no claim rests on it
- S13primarygovernment data2026-08-01All Employees, Total Nonfarm (PAYEMS) - U.S. Bureau of Labor Statistics, via FRED U.S. Bureau of Labor Statisticsthe countable base for the prize - the number of people employed in the United States, measured by the statistical agency rather than by a security vendor
All Employees, Total Nonfarm; 2026-08-01; 159075.0; Thousands of Persons, Seasonally Adjusted
read, but no claim rests on it - S14primarycompany filing2026-06-22the charter amendment behind the four-for-one stock splitbacksC46
- S15tertiarynews2025-12-11the reason the independent benchmark CrowdStrike scores best on no longer contains the three rivals that matter. Tertiary and used only as counter-evidence - MITRE's own results pages were not opened, and that is recorded
Major companies such as Microsoft, Palo Alto Networks, and SentinelOne withdrew from the evaluations this year, stating that the MITRE program requires a resource-intensive commitment
backsC40 - S16primarycompany filing2026-06-03the Q1 FY2027 free cash flow of $468.5M used in the half-year figure, the four-for-one split announcement, and the first FY2027 guidance raise - to 27.7% growth in newly added subscription value, the base the Q2 raise of 630 basis points is measured frombacksC14
- S17primarycompany filing2026-05-05beneficial ownership at 3 April 2026, the FY2026 annual cash incentive's metrics and payout, the PSU metrics and payout, the CEO's relative-return PSUs, and the directors' tenurebacksC55C56C57
- S18primarycompany filing2023-03-09the FY2021 to FY2023 income statements behind the five-year cost lines, read through the frozen numbers cardbacksC58C59
- S19secondaryvendor data2026-10-16Research pack, refreshed at the 2026-10-16 review and frozen at content/CRWD/research-pack.json (2026-10-15 close)content/CRWD/research-pack.jsonthe 2026-10-15 close, the analyst panel and its history, the price-target drift, the insider window, FINRA short interest at the 30 September settlement, and the cybersecurity theme's 252-session returnsbacksC17C42C47C48C61
- S20primarygovernment data2026-09-01All Employees, Total Nonfarm (PAYEMS), September 2026 print - U.S. Bureau of Labor Statistics, via FRED U.S. Bureau of Labor Statisticsthe September 2026 count of people employed in the United States, the base the prize is built on
All Employees, Total Nonfarm; 2026-09-01; 159044.0; Thousands of Persons, Seasonally Adjusted
backsC45