CRWDCrowdStrike Holdings, Inc.

“our Next-Gen SIEM business, where we delivered a record quarter. Our Next-Gen SIEM business grew over 75% year-over-year, delivering ending ARR of more than $585 million. Next-Gen SIEM has proven itself a scaled market disruptor where our performance and cost advantages set us apart from legacy competitors. At the same time, our launch of agentic security workflows is powering the cybersecurity operating system of the future.”

“Falcon Shield ending ARR grew more than 300% year-over-year, more than 5x since our acquisition of Adaptive Shield, as customers protect the rapidly growing agentic SaaS attack surface. Our ability to secure both human and agentic identities wherever they exist is rapidly turning CrowdStrike into our customers' identity secure control play.”

“Falcon is a vertically integrated net data creator and third-party data aggregator. We generate real-time data that no one else has from customer environments and our world-class threat intelligence. What frontier AI labs cannot do, we've been doing for over a decade, cyber reinforced learning from human feedback or RLHF at scale. Our MDR analysts, threat hunters and incident responders produce expert label data as a byproduct of operations. These labels don't come from Internet text. They come from stopping real breaches in real time. Threat Graph correlates more than 1 trillion security events per day across approximately 2 trillion vertices, analyzing 15-plus petabytes of data, structured, queryable, security signals at scale no one can replicate.”

“our recently launched AIDR offering. In just a short time, AIDR has become one of our most in-demand products, growing more than 5x versus last quarter despite having only been available for a few weeks. AI adoption is moving faster than can be controlled, and our AIDR offering gives customers immediate visibility into their employees' usage of AI tools, including the specific models being used as well as detections into potentially malicious or noncompliant usage. Bringing model scanning, visibility, guardrails and detections to AI usage positions CrowdStrike as a catalyst for enterprise AI adoption.”

“our endpoint business accelerated for the second consecutive quarter. The endpoint is rapidly becoming the epicenter of AI usage driven by the growth of technologies ranging from MCP servers to coding tools to localized LLMs. AI is the fastest growing attack surface on the endpoint. As of Q4, our sensors detected more than 1,800 distinct AI applications running on enterprise devices, representing nearly 160 million unique application instances across our customer base.”

“a major enterprise data platform company who deployed Falcon Cloud Security in an 8-figure total deal value Flex. After extensive testing, this account ripped out their existing provider for our runtime protection-first approach, realizing the integrated benefits of CSPM, CIEM, CDR, and OverWatch threat hunting, which resulted in a 90% reduction in mean time to detect and respond for their cloud environment.”

“Coming back to Charlotte, our agentic SOC workforce built from multiple models allowing us to optimize from the latest and greatest LLMs. We couple industry innovation with our own AI expertise, training and models from security's richest data source, Falcon adversary, threat and security analyst training data. We saw Charlotte usage soar more than 6x year-over-year as ARR more than tripled.”

“A thematic win was in a leading cloud software provider in an 8-figure re-Flex transaction. The re-Flex expanded the adoption of next-gen SIEM and Charlotte. Their 30-day use of Charlotte tells a compelling story, achieving a 3x faster mean time to respond, using the power of our domain-specific AI, Charlotte accelerates, streamlines and democratizes security outcomes.”

“A key win in the quarter was with a Fortune 500 retailer highlighting our strength and momentum in the next-gen SIEM space. In a 7-figure deal, we replaced a legacy SIEM and its attached point product data pipeline. Falcon's fully native data pipeline and an expected 80% faster query performance was a game changer in helping this customer build out their agentic SOC.”

“we're still in the early innings, but we continue to ramp in protecting AI and it's happening today in terms of ARR growth. And we're obviously blown away of what we've seen with Pangea and AIDR. It was up 5x quarter-over-quarter from when we acquired the company.”

“we win because Falcon is purpose built for securing AI at every layer. The layers of the new AI stack are the attack surface of the future, and Falcon can secure all of them. AI must be secured at every level, including: one, GPU foundation, partnering with NVIDIA, AMD, Intel and others to secure AI at the source; two, hardware and infrastructure OEMs, securing AI factories such as Dell, HPE and Super Micro; and novel AI operating systems such as VAST Data; three, neoclouds and hyperscalers, securing where AI happens in the cloud across AWS, OCI, GCP, Azure and inference disruptors such as CoreWeave, Nebius and Crusoe; four, token factories, securing the use of frontier model creators like Anthropic, OpenAI and Google Gemini; and five, AI applications and in agents securing AI native software and the agentic workforce.”

“CrowdStrike is an AI adoption accelerator. Our customers are safely and securely using more than 1,800 distinct AI applications on their endpoints, which would not be possible without CrowdStrike. Second, AI use necessitates AI security. Every enterprise deploying AI needs an independent protection layer for visibility, compliance and enforcement. As AI adoption grows, CrowdStrike becomes even more of a necessity to these organizations. And third, our data moat creates a structural advantage. Delivering cybersecurity at scale requires more than a prompt. It requires expert label telemetry from our global sensors, MDR analysts and elite incident responders. It is a structural advantage no LLM provider can replicate.”

“We recently closed the acquisition of SGNL.ai. This is S-G-N-L, bringing the power of 0 standing privilege for all identities to the Falcon platform. With SGNL.ai, CrowdStrike is delivering high fidelity, content-driven, real-time authorization to the market, enabling our customers to rapidly reduce their identity attack surface even as they rapidly expand the number of identities within their organization.”

“our recent acquisition of Seraphic turns any browser into a secure enterprise browser without impacting user behavior. The browser has become the front door for AI applications, and Seraphic meets human and nonhuman users where they are and where they're going, agentic browsers for real-time visibility and protection.”

“we protect endpoints and cloud workloads. You have to look at those in totality, but now we have the opportunity to protect AI agents, and industry stats is that each knowledge worker will have 90 AI agents. So even if the mix moves around, we have a massive opportunity to protect AI agents.”

“We leverage Nemotron with NVIDIA. It's an unbelievable time to be in tech, and you're going to have agents talk to agents and our agents talking to customer agents that are inside their network.”

“we're a net data creator, right? We have telemetry that we create from our agents and from other parts of our platform that is unique. We put it into various data stores, including next-gen SIEM and our Threat Graph. And we're able to understand the threats in real time with real-time prevention. That's vastly different than what the LLM providers and frontier models do. Now certainly, we leverage the frontier models. We have our own small language models. We have our own curated data.”

“we certainly leverage technology like that, but we've built our own bespoke models depending on the module and trained in a certain way, with the vertical expertise to get the right outcome. Here's what you have to remember, is that what customers want is real-time prevention. You have to be in line. You have to be able to get the data in milliseconds, and you have to make a decision. That's not the case with an LLM.”

“AI is a tailwind for us. And I mean I take a simple approach, is will we have more AI in the next year or 2 or 5 years. And for me, the answer is absolutely yes. And if that AI is being deployed with AI agents, you're going to need protection. You're going to need something like AIDR. You're going to need identity security. You're going to need browser security. You're going to need compliance around this.”

“when you think about endpoint acceleration, it's a simple answer, AI. We've talked about it, and we're showing it in the results. And I mean one of the biggest things you look at -- OpenClaw comes out. Our customers immediately are looking at all of our technologies to be able to identify it, put controls around it and make sure that they can leverage these technologies in an efficient and compliant way.”

“CrowdStrike's AI innovation is setting new adoption standards on the journey to delivering security AGI. Charlotte is our flagship agent, and now we have 10 other agents representing specific security skills and roles within security teams. Between Charlotte and our other agents, we can already see the mobilization of security's agentic workforce working hand in hand with human security professionals.”

“The AI revolution represents a new and generational growth opportunity for CrowdStrike as accelerating AI adoption necessitates security built for this next era of technology. As AI adoption accelerates, combined with our record Q1 pipeline and continued platform consolidation momentum, we have strong conviction to once again raise our FY '27 ARR outlook.”

“That's really the front door now for how people are interacting with AI models and LLMs and the various technologies that are out there as well as how threats get into the environment. So you combine that with our agent and the ability to have protection across any browser, not just ask an organization to switch their browser.”

“we see the same thing happening what I call AI hyperscalers, being able to actually partner with these hyperscalers leveraging AI and their LLMs, and also being able to leverage the technology to provide better outcomes within the platform of record for our customers, which is Falcon.”

“Frontier models can augment security, summarize alerts, draft queries, speed up triage. That's extremely valuable, but stopping breaches requires sensors, real-time telemetry, continuous expert validation and enforcement, a closed-loop system, not a text model.”

“what we also are open to is having an open model. We have customers that create their own agents that leverage our technologies, that leverage our MCP services. And this is part of having an open platform, which is why our customers love CrowdStrike.”

“we believe that EDR will be a similar opportunity -- sorry, AIDR will be a similar opportunity to EDR in the coming years, driven by compliance and the need to accelerate protecting AI.”

“endpoint. That accelerated for the second straight quarter on the heels of AI-driven demand.”

“From CrowdStrike's founding, we've been building AI innovation for cybersecurity, yet the pace of AI innovation is broadly misunderstood. Novel discoveries are often interpreted as the death knells of existing categories. The market is questioning enterprise software's role in an agentic world. It's in moments like these where opportunity is created. In the same way that we anticipated the cloud revolution, we pioneered and built for the agentic revolution.”

“CrowdStrike is thriving in this AI revolution. We are not only leveraging AI within the entire platform, but our platform also helps organizations use AI security, and that's the key. And then I think we're still benefiting from the consolidation tailwinds.”

“AI is driving elevated demand for the Falcon platform and is a key accelerant for our business. At the same time, AI is weaponizing adversaries to attack with increased speed, sophistication and precision.”

“The fundamental tailwinds, platform consolidation, AI proliferation and Flex adoption are continuing to gain momentum.”

“CrowdStrike is durable, mission-critical infrastructure for both securing AI and accelerating global AI adoption.”