CrowdStrike
CrowdStrike sells cloud-based endpoint and cloud security software via its Falcon platform.
On the record
Checkpoint: Q2 FY2027 earnings, testing billings momentum after Q1 miss and post-split rally
The call
CrowdStrike keeps growing through Microsoft's bundling pressure on the strength of data no AI lab can copy, while its ~40x revenue valuation leaves little room for a billings stumble.
CrowdStrike sells software that protects company computers and networks from cyberattacks. It is hard to replace because it collects unique information from millions of devices around the world, combines many security tools into one platform, and has special approval from governments. Microsoft offers similar protection built into its Office products, and while Microsoft is huge and has tried for years, CrowdStrike keeps growing anyway. The biggest question is whether Microsoft will eventually convince more companies to switch to Microsoft's version instead, or whether CrowdStrike's better technology and trusted reputation will keep customers loyal.
Why
01
AI pressure: None apparent. AI labs like Anthropic and OpenAI can't replicate CrowdStrike's endpoint telemetry; AI runs on top of Falcon's data, not around it. Could AI do the core job? Unlikely.
02
Bigger players: Microsoft (Defender, Sentinel, Entra bundled into M365 E5). Microsoft bundles security into M365 for years without visibly taking CrowdStrike's share, but pricing pressure in mid-market deals persists. Could a giant copy it? Probably.
03
What protects it. Proprietary telemetry from a massive installed base plus deep multi-module lock-in across endpoint, cloud, identity and SIEM.
What would change this call
CrowdStrike's net-new ARR growth in Defender-competitive deals falls below 15% for two straight quarters. Would show Microsoft's bundling is finally converting into real share loss.
Falcon Flex churn or ARR-per-customer declines two quarters in a row. Would show existing customers shrinking spend, weakening the upsell moat.
Q2 FY2027 billings growth versus the Q1 FY2027 miss that triggered a 9.2% stock drop. Would show whether the billings slowdown is a trend or a one-quarter blip.
Falcon Flex churn or ARR-per-customer declines two quarters in a row. Would show existing customers shrinking spend, weakening the upsell moat.
Q2 FY2027 billings growth versus the Q1 FY2027 miss that triggered a 9.2% stock drop. Would show whether the billings slowdown is a trend or a one-quarter blip.
Key numbers
- FY2026 revenue $4.81B, up 25.6% YoY
- Q1 FY2027 ARR reached $5.51 billion
- Stock fell 9.2% on billings miss despite revenue beat
Named risks
- Microsoft Defender bundling into M365 E5 could erode mid-market share over time.
- Delta Air Lines $500M+ lawsuit over July 2024 Falcon outage remains active.
- Stock trades at ~40x revenue, vulnerable to billings misses as seen with 9.2% drop on 2026-06-03.
- A second major outage within 24 months of the 2024 incident could materially damage customer trust.
- Growth narrative heavily dependent on continued AI-driven cybersecurity demand.
Rivals, as read in July 2026
| Rival | Direction | Evidence |
|---|---|---|
| Microsoft | contesting | Defender/Sentinel bundled in M365 E5 for years but no visible share taken as of Q1 FY2027 (2026-06-03) |
| SentinelOne | contesting | CrowdStrike revenue ~5x SentinelOne's ($1.4B vs $277M quarterly, as of 2026-06-03) |
| Palo Alto Networks | contesting | Cortex XDR/XSIAM cited as broader-platform rival in 2026 competitor analyses |
| Fortinet | contesting | FortiEDR listed among direct competitors in 2026 EDR/XDR market comparisons |
Questions people ask
- Is CrowdStrike profitable in 2026?
- Mixed: CrowdStrike posted a full FY2026 (ended Jan 31, 2026) net loss of roughly $162 million, but its fiscal Q1 2027 quarter (ended April 30, 2026) swung to GAAP net income of $27.8 million and free cash flow of $468.5 million at a 34% margin.
- Could Microsoft Defender replace CrowdStrike?
- Not visibly so far. Microsoft has bundled Defender/Sentinel/Entra into M365 E5 for years, but CrowdStrike still grew revenue 25.6% YoY to $1.39 billion in the quarter ended April 30, 2026, showing no clear share loss to the bundle.
- Could AI replace CrowdStrike's product?
- No credible path yet: CrowdStrike's value rests on proprietary kernel-level sensor telemetry across millions of endpoints that frontier AI labs cannot replicate. The company uses AI (Charlotte AI, Agentic MDR, launched March 2026) atop that data, not as a substitute for it.
- Is CrowdStrike laying people off in 2026?
- CrowdStrike cut about 500 roles (5% of staff) in May 2025 as part of an AI-driven operating model pivot toward a $10B ARR target, taking $36-53 million in charges, yet headcount still grew to 10,698 employees by FY2026 year-end (Jan 31, 2026).
- Who is CrowdStrike's biggest competitor?
- SentinelOne is the most-cited direct rival but is roughly 5x smaller by revenue (CrowdStrike's ~$1.4 billion Q1 FY2027 vs SentinelOne's ~$277 million, as of June 3, 2026). Microsoft Defender/Sentinel is the larger structural threat via M365 bundling.
- Is CrowdStrike stock overvalued?
- It trades at roughly 40x revenue with a market cap of about $191.3 billion as of July 13, 2026. Shares fell 9.2% after a Q1 FY2027 billings miss on June 3, 2026, then rallied 61.4% over the following month, showing high volatility around growth expectations.
Timeline
- 2026-07-16Agreed to acquire XM Cyber IP and expand Schwarz Digits/STACKIT sovereign-cloud partnership in Europe
- 2026-07-02Began trading split-adjusted after 4-for-1 stock split
- 2026-06-16Launched Falcon Next-Gen SIEM extending to third-party EDR including Microsoft Defender
- 2026-06-15DOT closed investigation into Delta's 2024 outage response with no penalties
- 2026-06-15Launched Continuous Identity for AI Agents
- 2026-06-03Reported fiscal Q1 2027 revenue of $1.39B, up 25.6% YoY, ARR of $5.51B
- 2026-03-16Unveiled Secure-by-Design AI Blueprint with NVIDIA at GTC
- 2026-01Acquired identity firm SGNL (~$740-750M) and browser-security startup Seraphic (~$420M)
- 2025-09Acquired real-time data-pipeline vendor Onum for ~$290M
- 2025-05-08Announced layoffs of ~500 roles (5% of staff) tied to AI-driven operating model pivot
Head to head
Revision history
21 July 2026
First assessed. Hard to displace. The text above is fixed as of this date and is not edited afterwards.
In the same band
Sources
- CrowdStrike Holdings, Inc.
- CrowdStrike (CRWD) Q1 2027 Earnings Transcript (2026-06-03)
- CrowdStrike Market Cap 2019-2026 (2026-07-12)
- CRWD Q1 CY2026 Sales Beat Estimates But Stock Drops (2026-06-03)
- Unpacking Q1 Earnings (2026-07-15)
- Is SentinelOne the Next CrowdStrike? (2026-07-14)
- CrowdStrike to lay off 5% of staff, reaffirms forecasts (2025-05-07)
- CrowdStrike cuts 500 jobs in AI pivot, but flags risks (2025-05-08)
- CrowdStrike To Boost Identity Security For AI Agents With SGNL Acquisition
- CrowdStrike and Schwarz Digits Expand Strategic Partnership (2026-07-16)
- CrowdStrike NVIDIA Unveil Secure-by-Design AI Blueprint for AI Agents (2026-03-16)
- CrowdStrike Unveils Continuous Identity for AI Agents (2026-06-15)