CrowdStrike's Falcon platform runs a lightweight agent on every laptop, server and cloud workload a customer has. The agent streams security telemetry to CrowdStrike's cloud, where it is analysed to detect and stop attacks. Customers start with endpoint protection and add modules on the same agent: identity protection, cloud security, security information and event management (SIEM), threat intelligence and managed detection.

Revenue in FY2026 (year ending January 2026) was $4.81B, up 21.7%.

The single agent and single data platform make each new module cheap to deploy, which drives the cross-selling. Threat intelligence improves with every customer's data. Switching endpoint vendors is a disruptive project touching every machine, so customers rarely do it on price.

The July 2024 faulty update that crashed millions of Windows machines was the moat's stress test. Retention largely held, but competitors (Microsoft Defender, Palo Alto Networks, SentinelOne) used it, and CrowdStrike paid in customer concessions.

Gross margin near 75% and free cash flow of $1.3B in FY2026. But stock pay was $1.1B, so owner earnings (free cash flow minus stock pay) were only about $0.2B, and the GAAP operating margin was -6%. The diluted share count rose 2.4% in FY2026.

The business generates cash; it hands most of it to employees in shares. Net cash of $4.5B gives a strong balance sheet.

CrowdStrike can keep compounding revenue near 20% as security consolidates onto fewer platforms. The investment case depends on stock pay falling as a share of revenue so that the cash flow belongs to owners.

We are watching: the business is excellent, the owner economics are not there yet.

• Stock pay staying near a quarter of revenue.
• Platform competition from Microsoft (bundled with its enterprise agreements) and Palo Alto Networks.
• Another operational incident of the July 2024 kind.

• Owner earnings turning meaningfully positive and growing (a reason to own).
• Net new annual recurring revenue declining for several quarters.
• Customer losses to bundled platforms.