CrowdStrike is a cloud-native cybersecurity company delivering endpoint protection, threat intelligence, and incident response through its AI-powered Falcon platform. It protects organizations from breaches, ransomware, and nation-state attacks across endpoints, cloud workloads, identity, and data.
A reasoned read from public sources. Each point links to its source.
CrowdStrike is one of the rare cases where the moat evidence is genuinely strong: 97% gross retention through a catastrophic outage is not a marketing claim — it is revealed preference from enterprise security buyers who had every reason and political cover to leave. The platform economics are real: 50% of customers on six-plus modules, 115% net retention, and $1B+ net new ARR in a single year. The risk is not whether the business is good — it clearly is — but whether the stock price already prices in a decade of flawless execution. For an engineer evaluating the company as an employer, the mission is durable (cyber threats are not going away), the technical problems are genuinely hard (AI-native detection at trillion-event scale), and the team has domain depth. The outage history is a real reputational overhang but also evidence that the company can survive its worst day.12345
CrowdStrike operates in a cybersecurity TAM that has surged fivefold since its IPO to $116B by 2025, with management projecting it to double again by 2028–2029 at >20% CAGR, and some analysts citing a $300B market by 2030. The threat environment is structurally expanding — Microsoft reported 600 million cyberattacks daily in 2024 — which creates durable, non-discretionary demand. CrowdStrike's current $5.25B ARR against a $116B+ TAM implies it has captured only ~4–5% of addressable spend, leaving substantial runway even as a market leader.2678
The Falcon platform is a cloud-native, single-agent architecture spanning ~25–28 interoperable modules covering EDR, XDR, Next-Gen SIEM, identity protection, and cloud workload security — enabling customers to consolidate away from legacy point solutions. The platform processes over a trillion security events per day, creating data network effects that compound with scale. Falcon Flex, a consumption-based licensing model, grew ARR over 120% YoY to $1.69B, demonstrating that the packaging innovation is accelerating platform adoption. CrowdStrike was named a Leader in the 2026 Gartner Magic Quadrant for Endpoint Protection, and 50% of customers now use six or more modules.9103128
CEO and founder George Kurtz brings 30+ years of security experience, including prior roles as CTO and EVP of Enterprise at McAfee (a $2.5B company) and founder of Foundstone — a rare combination of deep domain expertise and serial entrepreneurship. President Michael Sentonas is a 20+ year cybersecurity veteran who has been with CrowdStrike since 2016 and oversees product, engineering, sales, and marketing. The executive bench includes dedicated leaders for counter-adversary operations, human resources, and go-to-market, suggesting institutional depth beyond the founder.411121314
FY2026 results are exceptional by any measure: $5.25B ending ARR (+24% YoY), record $1.01B net new ARR (first pure-play cybersecurity company to exceed $1B in a single year), net new ARR growth of 47% YoY, Q4 revenue of $1.31B (+23% YoY), positive GAAP net income, and record operating and free cash flow ($376M FCF, 29% margin). The 115% dollar-based net retention rate and 97% gross retention — maintained through the catastrophic July 2024 global outage — are among the strongest retention metrics in enterprise software. Falcon Flex ARR of $1.69B grew 120%+ YoY, and 60% of high-ARR customers use multiple modules.15161758218
CrowdStrike faces credible competition from SentinelOne, Microsoft Defender for Endpoint, Palo Alto Networks Cortex XDR, Fortinet FortiEDR, and Wiz in cloud security. Microsoft is the most dangerous long-term threat given its ability to bundle Defender into existing enterprise agreements at near-zero marginal cost. SentinelOne is rated the top alternative by both Gartner Peer Insights and TechRepublic, offering competitive AI-driven detection at a lower price point. CrowdStrike's pricing premium gives competitors clear negotiation leverage, and trust recovery from the July 2024 outage remains incomplete in enterprise evaluations. However, the 97% gross retention post-outage suggests switching costs are real and durable.19202122231
CrowdStrike has built one of the most defensible moats in enterprise software: a data network effect from trillions of daily security events, a single-agent architecture that creates deep workflow integration, and 97% gross retention even after a catastrophic global outage. The Falcon Flex model is converting endpoint dominance into a claim on the entire security operations budget — SIEM, identity, cloud — with 50% of customers already on six-plus modules. At $5.25B ARR with a $116B+ TAM and a $20B ARR target by 2036, the compounding math is compelling if execution holds.212283
The July 2024 global outage — which crashed 8.5 million Windows devices, disrupted airlines and emergency services, and triggered lawsuits with Delta Air Lines — exposed a systemic risk: CrowdStrike's kernel-level agent is a single point of failure for enterprise infrastructure. Trust recovery is described as incomplete in enterprise evaluations as of Q1 2026. Microsoft can bundle Defender at near-zero cost into existing enterprise agreements, and SentinelOne offers competitive detection at a lower price point, giving both clear leverage in competitive deals. The stock trades at a high forward multiple (cited at 105x forward P/E), meaning any execution miss — margin compression, adoption slowdown, or another reliability incident — could trigger a sharp re-rating.20221437
CrowdStrike must sustain 20%+ ARR growth while expanding into SIEM, identity, and cloud security — categories where it is not yet the default winner — to justify its valuation and reach the $20B ARR target by 2036. Falcon Flex must continue converting single-module customers into multi-module platform deals, with the 50% six-module adoption rate needing to climb toward 70%+. The AI arms race dynamic must favor defenders: CrowdStrike's trillion-event-per-day data advantage must translate into detection superiority that adversaries cannot replicate cheaply. Finally, Microsoft's bundling strategy must fail to commoditize the EDR category, which requires CrowdStrike to keep demonstrating measurably better outcomes than Defender.232278
If you are a senior engineer who wants to work on genuinely hard, high-stakes technical problems at scale — AI-native threat detection processing a trillion events per day, kernel-level agent reliability, multi-module platform architecture — CrowdStrike is one of the most technically serious cybersecurity employers in the world. The mission is durable and the company is not going away. The honest tradeoff: this is a $147B market-cap public company, so equity upside is incremental, not transformational. You are not getting early-stage lottery-ticket options. The outage history is a real cultural data point — it means the engineering culture has been stress-tested publicly and the company survived, but it also means reliability and change management are areas of known organizational debt. If you want to work on AI security at scale with a proven team and a real moat, this is a strong choice. If you want equity that could 10x, look elsewhere.311424
CrowdStrike is a cloud-native cybersecurity company delivering endpoint protection, threat intelligence, and incident response through its AI-powered Falcon platform. It protects organizations from breaches, ransomware, and nation-state attacks across endpoints, cloud workloads, identity, and data.
Founded in 2011 by George Kurtz (CEO, former CTO of McAfee), Dmitri Alperovitch, and Gregg Marston. They believed the traditional antivirus approach was broken and built a cloud-native platform that uses behavioral AI to stop breaches in real time. The company became famous for investigating the 2016 DNC hack and attributing it to Russian intelligence.
CrowdStrike surpassed $5.25 billion in annual recurring revenue in fiscal 2026, with total revenue of $4.81 billion (up 22% YoY). The company became the fastest pure-play cybersecurity software company to reach this ARR milestone.
CrowdStrike announced it is acquiring identity management startup SGNL for approximately $740 million. The acquisition extends Falcon's cloud security capabilities to better manage human and AI identity access requests.
CrowdStrike announced general availability of Falcon AI Detection and Response, securing the new AI attack surface with unified AI prompt-layer protection. The product detects and responds to threats targeting AI systems and LLM pipelines.
CrowdStrike was named AWS 2025 Global Security Partner of the Year and Global Marketplace Partner of the Year, recognizing deep integration between Falcon and AWS infrastructure including Next-Gen SIEM and cloud security offerings.
CrowdStrike announced an Agentic Security Workforce of seven AI agents to assist SOC analysts across triage, investigation, and response workflows.
CrowdStrike reported Q2 FY2026 (quarter ended July 31, 2025) ending ARR of $4.66B, up 20% YoY.
CrowdStrike reported Q1 FY2026 (quarter ended April 30, 2025) ending ARR of $4.44B, up 22% YoY, as customers continued to consolidate on the Falcon platform post-outage.
CrowdStrike introduced Charlotte AI AgentWorks, an ecosystem and tooling for building secure AI agents that operate across the Falcon platform.
CrowdStrike reported Q4 FY2025 (quarter ended Jan 31, 2025) total revenue of $1.06B (+25% YoY) with subscription revenue of $1.01B (+27%). Ending ARR reached $4.24B, up 23% YoY.
Per FY2025 10-K, CrowdStrike employee count grew from 7,273 (Jan 2023) to 10,118 as of January 31, 2025.
Co-Founder & CEO
Previously CTO at McAfee
George Kurtz co-founded CrowdStrike in 2011 after serving as CTO of McAfee. He believed the traditional AV model was fundamentally broken and built a cloud-native, AI-powered platform to stop breaches. Under his leadership CrowdStrike IPO'd in 2019 and grew to $4B+ ARR.
Co-Founder & CEO
Previously Worldwide CTO at McAfee
Co-Founder
Previously VP Threat Research at McAfee
Dmitri Alperovitch co-founded CrowdStrike in 2011, serving as CTO until 2020. A renowned threat intelligence expert, he led the investigations into state-sponsored cyberattacks including the 2016 DNC hack attributed to Russian intelligence. He later founded Silverado Policy Accelerator.
Co-Founder & former CTO
Previously VP of Threat Research at McAfee
Co-Founder & CFO
Gregg Marston co-founded CrowdStrike in 2011 and served as CFO, helping build the financial foundation of the company from its early $25M seed from Warburg Pincus through its 2019 IPO.
Co-Founder & former CFO
Previously CFO at Foundstone
$812M raised total
Petitioner on record
CROWDSTRIKE INC · SUNNYVALE, CA
FY 2025
See full record