AI
← Earnings Calls
01
02
03
04 05 06
Tone
AI
Capex
A1 A2 A3 A4
CRWD
FY2026 Q4
Improving
CrowdStrike Holdings, Inc. earnings call
Buzzberg read
AI is driving Falcon demand and acting as a key accelerant
CrowdStrike reported a blowout Q4 FY26, with net new ARR up 47% YoY and strong momentum across all product lines. Management's forward guidance is markedly optimistic on FY27, driven by AI security demand, successful Falcon Flex adoption, and a new Microsoft marketplace partnership. Q4 net new ARR was $330.7M, up 47% YoY, an all-time record.
Buzzberg read AI is driving Falcon demand and acting as a key accelerant CrowdStrike reported a blowout Q4 FY26, with net new ARR up 47% YoY and strong momentum across all product lines. Management's forward guidance is markedly optimistic on FY27, driven by AI security demand, successful Falcon Flex adoption, and a new Microsoft marketplace partnership. Q4 net new ARR was $330.7M, up 47% YoY, an all-time record. Read full analysisCollapse analysis
CrowdStrike reported a blowout Q4 FY26, with net new ARR up 47% YoY and strong momentum across all product lines. Management's forward guidance is markedly optimistic on FY27, driven by AI security demand, successful Falcon Flex adoption, and a new Microsoft marketplace partnership. Q4 net new ARR was $330.7M, up 47% YoY, an all-time record.
- Falcon Flex is a massive success, with 1,600+ customers and $1.69B ARR, driving a 'reflex' expansion loop.
- Management raised FY27 ARR outlook, signaling confidence in sustained >20% net new ARR growth.
- Microsoft Marketplace partnership is a major distribution win, allowing customers to use Azure commitments on CrowdStrike.
Revenue$1.3054B+6% QoQ
EPS$0.28+17% QoQ
Gross margin76.12%Reported
Operating margin1.06%Reported
6 grounded callouts
What matters now
The highest-signal changes from the call.
Go-to-market
Falcon Flex is now the go-to-market model
Partnerships
Microsoft Marketplace opens Azure consumption commitments to CrowdStrike
Show 3 more callouts
Demand
Record Q1 pipeline grew 49% year over year
AI
AIDR demand surging 5x in just a few weeks
Capex
FY27 capex guided to 7-8% of revenue
Reported period
Actuals
| Metric | Reported | Change |
|---|---|---|
| Revenue | $1.3054B | +6% QoQ |
| EPS | $0.28 | +17% QoQ |
| Gross margin | 76.12% | Reported |
| Operating margin | 1.06% | Reported |
| Free cash flow | $0.3764B | +27% QoQ |
| Capex | $0.1215B | Reported |
Forward-looking
Forward guidance
| Metric | Period | Range | Midpoint | Status |
|---|---|---|---|---|
| EPS | FY2027 | $4.78–$4.90 | $4.84 | Guided |
| EPS | FY2027 Q1 | $1.06–$1.07 | $1.06 | Guided |
| Free cash flow | FY2027 | 30% | 30% | Guided |
| Revenue | FY2027 | $5.868B–$5.928B | $5.898B | Guided |
| Revenue | FY2027 Q1 | $1.36B–$1.364B | $1.362B | Guided |
AI, capex & demand read
Management read
Bullish
Management repeatedly emphasizes record results, demand acceleration, AI as a structural tailwind, and raises FY27 ARR guidance with clear conviction.
Management AI read
Management says AI is driving elevated demand for Falcon and is a key accelerant, while AI-enabled attacks are broadening the attack surface. They are monetizing through AI-specific products (AIDR, agents, browser/identity security) and argue their proprietary data and telemetry moat cannot be replicated by frontier LLM providers.
Investment and capacity
FY27 capex is expected to be 7–8% of revenue, weighted more to the first half of the year. The CFO also highlighted cloud optimization as a driver of record gross margins, with recent acquisitions adding integration-related opex.
all 24 named companies below
Companiesreturns since call
Customers
Customers
George Kirch
CrowdStrike positions itself as the security provider for frontier AI labs, securing their token factories and internal operations.
Evidence
“token factories, securing the use of frontier model creators like Anthropic, OpenAI, and Google Gemini”
Customers
George Kirch
AI-focused neoclouds are a new customer segment for CrowdStrike's cloud security products.
Evidence
“neoclouds and hyperscalers, securing where AI happens in the cloud across AWS, OCI, GCP, Azure, and inference disruptors such as CoreWeave, Nebius, and Caruso.”
Vast
Customers
George Kirch
CrowdStrike is extending security to new AI-focused data infrastructure companies.
Evidence
“novel AI operating systems such as Vast Data”
Partners
Partners
George Kirch
AWS marketplace is a major distribution channel for CrowdStrike, driving $1.5B in TCV; partnership is complementary, not competitive.
Evidence
“we transact billions through these platforms and they're a great partner”
Partners
George Kirch
Partnership with NVIDIA on AI models (Numotron) is part of CrowdStrike's strategy to secure the AI stack.
Evidence
“We leverage Numotron with Nvidia.”
Partners
George Kirch
CrowdStrike is partnered with OEMs to secure the hardware layer of the AI ecosystem.
Evidence
“hardware and infrastructure OEMs, securing AI factories such as Dell, HPE, and Supermicro”
Partners
George Kirch
CrowdStrike collaborates with GPU manufacturers to secure the foundational hardware layer of AI.
Evidence
“GPU foundation, partnering with NVIDIA, AMD, Intel, and others to secure AI at the source.”
Partners
System integrators are building practices around CrowdStrike, indicating strong partner-driven demand.
George Kirch
KROLL
PAX8
NINJAONE
Partners
MSSP partners like Kroll are a key growth channel, bringing CrowdStrike's platform to a broader market.
George Kirch
Partners
Oracle Cloud Infrastructure (OCI) is a partner and customer for CrowdStrike's cloud security offerings.
George Kirch
Partners
Microsoft Marketplace availability and the use of Azure consumption commitments for CrowdStrike products is a significant, underappreciated sales channel expansion. — This could shift a portion of security spending from Azure native security to CrowdStrike, impacting Microsoft's security product sales.
George KirchSupply chain
Supply chain
CrowdStrike's next-gen SIEM business ($585M ARR) is growing >75% YoY, taking share from legacy SIEM players through decisive performance wins. — This reinforces the secular decline of legacy on-prem SIEM vendors as cloud-native platforms with AI-driven analytics dominate the SOC.
George Kirch
Supply chain
CrowdStrike's acquisition of Signal AI adds zero-standing privilege technology, directly targeting the growing non-human identity attack surface, which is a major risk area for enterprises adopting AI agents. — This intensifies competition in the identity security market, placing pressure on pure-play identity vendors to innovate or consolidate.
George Kirch
Supply chain
A 'major enterprise software player' expanded from a low six-figure threat intelligence deal to a $86M total Flex contract using 25 modules, showing the power of the Flex platform to drive massive land-and-expand motions. — This highlights a customer win with an enterprise software company, potentially displacing a competitor's spend, and demonstrates the success of CrowdStrike's platform consolidation strategy.
George KirchExternal signals
Supply-chain alpha · 4returns since call
Microsoft Marketplace availability and the use of Azure consumption commitments for CrowdStrike products is a significant, underappreciated sales channel expansion.
CrowdStrike's next-gen SIEM business ($585M ARR) is growing >75% YoY, taking share from legacy SIEM players through decisive performance wins.
CrowdStrike's acquisition of Signal AI adds zero-standing privilege technology, directly targeting the growing non-human identity attack surface, which is a major risk area for enterprises adopting AI agents.
A 'major enterprise software player' expanded from a low six-figure threat intelligence deal to a $86M total Flex contract using 25 modules, showing the power of the Flex platform to drive massive land-and-expand motions.
Methodology & coverage
Management-only analysis. All 24 validated company mentions are shown. Reported actuals and forward guidance are kept separate. Public evidence is limited to eight short attributed quotes. AI-generated analysis can be incomplete or wrong; verify important claims against the original source.