CrowdStrike Holdings Q4 FY26 earnings call CRWD

AI is driving elevated demand for the Falcon platform and is a key accelerant for CrowdStrike's business. The company sees the AI revolution creating two distinct groups of software companies: those existentially vulnerable and those that will thrive. CrowdStrike positions itself in the latter, as a mission-critical, trusted infrastructure technology necessary for global continuity with deep IP, producing novel, fresh, and proprietary data that fuels agentic business outcomes.

CrowdStrike's Falcon platform is a vertically integrated net data creator and third-party data aggregator, generating unique real-time data from customer environments and world-class threat intelligence. Threat Graph correlates over 1 trillion security events per day across approximately 2 trillion vertices, analyzing 15+ petabytes of structured, queryable security signals at a scale no one can replicate. This proprietary data, combined with expert-labeled data from MDR analysts and incident responders, creates a structural flywheel and network effect that ensures superior outcomes in stopping breaches.

Falcon is purpose-built for securing AI at every layer of the new AI stack, which represents the attack surface of the future. This includes securing GPU foundations (partnering with NVIDIA, AMD, Intel), hardware and infrastructure OEMs (Dell, HPE, Super Micro), neoclouds and hyperscalers (AWS, OCI, GCP, Azure), token factories (Anthropic, OpenAI, Google Gemini), and AI applications/agents. CrowdStrike secures nearly all of these companies themselves, positioning it as a key player in securing the world's AI future.

The revolutionary Falcon Flex subscription model has been a smashing success, with over 1,600 customers adopting it and adding more than 350 Flex customers in Q4. The average Flex customer's ending ARR is greater than $1 million. More than 380 Flex accounts have already re-Flexed, representing over 23% of the Flex customer base, up from 5% in Q1, with an average ARR lift of 26% within 7 months. Nearly 100 customers have re-Flexed multiple times, showing an additional 48% ARR lift from their initial Flex subscription, demonstrating strong platform adoption and expansion.

CrowdStrike recently closed the acquisitions of SGNL.ai and Seraphic, enhancing its identity and endpoint security offerings. SGNL.ai brings zero standing privilege for all identities to the Falcon platform, enabling high-fidelity, real-time authorization to rapidly reduce identity attack surface. Seraphic turns any browser into a secure enterprise browser, addressing the browser as the front door for AI applications and providing real-time visibility and protection for human and nonhuman users. These acquisitions are expected to contribute $5 million to $8 million of acquired net new ARR in Q1 FY27.

CrowdStrike's partner go-to-market strategy delivered beyond expectations, with growing practices across major consulting firms like EY, Accenture, and Deloitte, focused on next-gen SIEM migrations. The MSSP business grew from sub-$100 million to over $1.3 billion in 3 years. The company transacted nearly $1.5 billion of total contract value on the AWS marketplace, growing nearly 50% YoY, and is now open for business on the Microsoft marketplace, allowing customers to use Azure consumption commitment dollars on Falcon, reflecting a significant evolution in strategic partnerships.