Partners
← Earnings Calls
01
02
03
04 05 06
Tone
AI
A1 A2 A3 A4
CRWD
FY2026 Q3
Raised
CrowdStrike Holdings, Inc. earnings call
Buzzberg read
AWS made Falcon Next-Gen SIEM default in Security Hub
CrowdStrike reported exceptional Q3 FY26 results, with net new ARR up 73% YoY and ending ARR accelerating to 23% growth, all while maintaining profitability. Management highlighted strong momentum across its platform, especially in Next-Gen SIEM and cloud security, and raised its full-year revenue guidance. Record Q3 net new ARR of $265 million, beating expectations by over 10%, and ending ARR of $4.92 billion.
Buzzberg read AWS made Falcon Next-Gen SIEM default in Security Hub CrowdStrike reported exceptional Q3 FY26 results, with net new ARR up 73% YoY and ending ARR accelerating to 23% growth, all while maintaining profitability. Management highlighted strong momentum across its platform, especially in Next-Gen SIEM and cloud security, and raised its full-year revenue guidance. Record Q3 net new ARR of $265 million, beating expectations by over 10%, and ending ARR of $4.92 billion. Read full analysisCollapse analysis
CrowdStrike reported exceptional Q3 FY26 results, with net new ARR up 73% YoY and ending ARR accelerating to 23% growth, all while maintaining profitability. Management highlighted strong momentum across its platform, especially in Next-Gen SIEM and cloud security, and raised its full-year revenue guidance. Record Q3 net new ARR of $265 million, beating expectations by over 10%, and ending ARR of $4.92 billion.
- Revenue grew 22% YoY to $1.23 billion, exceeding guidance.
- Raised FY26 revenue guidance to $4.797-4.807 billion.
- Strong platform adoption with Falcon Flex becoming the standard, driving consolidation and expansion.
Revenue$1.2342BReported
EPS$0.24Reported
Gross margin75.06%Reported
Operating margin-5.63%Reported
6 grounded callouts
What matters now
The highest-signal changes from the call.
AI
AI called largest opportunity and demand driver yet
Guidance
FY27 net-new-ARR growth maintained at least 20%
Show 3 more callouts
Monetization
Falcon Flex is becoming the standard licensing model
Growth
Legacy SIEM replacement is a multi-year displacement journey
Channel
Kroll chooses Falcon in near-eight-figure endpoint migration
Reported period
Actuals
| Metric | Reported | Change |
|---|---|---|
| Revenue | $1.2342B | Reported |
| EPS | $0.24 | Reported |
| Gross margin | 75.06% | Reported |
| Operating margin | -5.63% | Reported |
| Free cash flow | $0.2974B | Reported |
| Capex | $0.1002B | Reported |
Forward-looking
Forward guidance
| Metric | Period | Range | Midpoint | Status |
|---|---|---|---|---|
| Revenue | FY2027 | $4.797B–$4.807B | $4.802B | Raised |
AI, capex & demand read
Management read
Bullish
Executives repeatedly described the quarter as record-breaking, said 'Acceleration is back,' and expressed 'strong conviction' in Q4 and FY27 with AI framed as a generational opportunity.
Management AI read
Management framed AI as the primary demand driver: agentic AI expands the attack surface, and CrowdStrike positions its single Falcon platform as the armor and intelligence layer for AI adoption. They highlighted AI-driven momentum across endpoint, cloud, identity, and Next-Gen SIEM, with monetization aided by Falcon Flex and AWS distribution.
all 6 named companies below
Companiesreturns since call
Customers
ANDURIL
Customers
George Kurtz
The reference to 'Jensen Wong' is likely a garbled reference to Jensen Huang of NVIDIA, but the mention of 'NVIDIA GTC' and 'work with NVIDIA' implies a partnership, which for a private company like Anduril is not clear.
Evidence
“Jensen Wong summed up our market position best, saying, quote, I can't imagine a better defender than CrowdStrike, end quote, on the stage at NVIDIA GTC in Washington, D.C. The transformative work we're doing with NVIDIA is representative”
Partners
Partners
George Kurtz
AWS's selection of CrowdStrike's Next-Gen SIM as the default for all customers validates CrowdStrike's tech and provides a massive product-led growth channel, which could increase AWS's security data integration and customer stickiness.
Evidence
“AWS selected Falcon Next Gen SIM as the default SIM for all their customers offered in their Security Hub console.”
Partners
George Kurtz
The partnership expands F5's security capabilities for its hardware appliances, potentially increasing its value proposition and locking in CrowdStrike protection for its install base, a positive for F5's product stickiness.
Evidence
“F5 asked us to partner with them to further secure their BIG-IP hardware and virtual appliances. We rapidly deployed our sensor on BIG-IP, which they certified, and F5 took the opportunity to purchase Falcon and Overwatch licensing for”
Partners
George Kurtz
Accenture's role as a launch partner with AWS for CrowdStrike's Next-Gen SIM creates a significant services opportunity for Accenture and strengthens its relationship with both tech giants.
Evidence
“Accenture is our launch partner with AWS, helping AWS customers leave their legacy SIEM for Falcon Next-Gen SIEM on AWS.”
EY
Partners
George Kurtz
EY standardizing its SIEM practice on Falcon is a major endorsement of CrowdStrike's next-gen SIEM, and its migration of multiple accounts will drive significant revenue for CrowdStrike.
Evidence
“EY took a bold step to standardize their SIM practice on Falcon in a large seven-figure transaction. EY is migrating accounts for which they own and operate multiple legacy SIM technologies, consolidating on CrowdStrike.”
Competitors
Competitors
George Kurtz
CrowdStrike's Next-Gen SIM displacing legacy SIEMs (Splunk) is becoming a major growth driver, with customers consolidating on its platform for lower costs and better outcomes. — The SIEM market is undergoing a paradigm shift, with CrowdStrike's innovative platform displacing established players like Splunk in large enterprise deals.
Evidence
“With our acquisition of Onum, this financial institution was able to eliminate their existing streaming pipeline point product as well as migrate off Splunk.”
External signals
Supply-chain alpha · 4returns since call
CrowdStrike's Next-Gen SIM displacing legacy SIEMs (Splunk) is becoming a major growth driver, with customers consolidating on its platform for lower costs and better outcomes.
Evidence
“Large European bank renewed their more than 500,000 workload EDR deployment, adding NextGen SIM, Onum, and Charlotte in a large eight-figure expansion deal. With our acquisition of Onum, this financial institution was able to eliminate the…”
The F5 partnership opens a new insertion point for CrowdStrike's endpoint agent on network appliances, expanding its TAM beyond traditional endpoints.
Falcon Flex is becoming the licensing standard, but it embeds a dynamic where customers can easily increase spending ('Reflex') which could improve long-term revenue per customer, contrary to typical ELA models.
The CrowdStrike-F5 partnership creates a 'Trojan horse' strategy to land new customers through securing network appliances, with a goal of expanding into full-fledged platform deals.
Methodology & coverage
Management-only analysis. All 6 validated company mentions are shown. Reported actuals and forward guidance are kept separate. Public evidence is limited to eight short attributed quotes. AI-generated analysis can be incomplete or wrong; verify important claims against the original source.