CrowdStrike Reports Second Quarter Fiscal Year 2027 Financial Results

• Delivers record net new ARR of $333 million, accelerates growth to 51% year-over-year
• Increases FY27 net new ARR growth guidance by 630 basis points to 34% year-over-year growth at the midpoint
• Exceeds $2.29 billion in ending ARR from accounts that have adopted Falcon Flex, accelerates growth to 101% year-over-year
• Generates Q2 record cash flow from operations of $530 million and Q2 record free cash flow of $377 million

AUSTIN, Texas--(BUSINESS WIRE)--CrowdStrike Holdings, Inc. (Nasdaq: CRWD), today announced financial results for the second quarter fiscal year 2027, ended July 31, 2026.

"Q2 was the best quarter in CrowdStrike's history," said George Kurtz, CrowdStrike’s Founder and Chief Executive Officer. "Delivering record Falcon Flex results, record net new ARR, and accelerating growth—the Falcon is soaring. We're raising our full year fiscal 2027 net new ARR growth outlook by 630 basis points. The Mythos moment translated into mass-market acceptance that AI adoption needs security, and that's CrowdStrike. Every enterprise will run on AI, and securing it is the largest market opportunity in our history."

Commenting on the company's financial results, Burt Podbere, CrowdStrike's Chief Financial Officer, added, "Q2 was a record-breaking quarter. We achieved record net new ARR of $333 million alongside record net new ARR from new logos, increased dollar-based gross and net retention rates, and Q2 record cash flow from operations and free cash flow. Given our strong Q2 results and record Q3 pipeline, we are raising our full-year fiscal 2027 net new ARR growth outlook to 34% at the midpoint, positioning us for continued durable, profitable growth."

Second Quarter Fiscal 2027 Financial Highlights

• Revenue: Total revenue was $1.47 billion, a 26% increase, compared to $1.17 billion in the second quarter of fiscal 2026. Subscription revenue was $1.40 billion, a 27% increase, compared to $1.10 billion in the second quarter of fiscal 2026.
• Annual Recurring Revenue (ARR) grew 25% year-over-year to $5.84 billion as of July 31, 2026, of which $332.8 million was net new ARR added in the quarter.
• Subscription Gross Margin: GAAP subscription gross margin was 78%, compared to 77% in the second quarter of fiscal 2026. Non-GAAP subscription gross margin was 81%, compared to 80% in the second quarter of fiscal 2026.
• Income/Loss from Operations: GAAP loss from operations was $33.2 million, compared to $105.5 million in the second quarter of fiscal 2026. Non-GAAP income from operations was $371.6 million, compared to $255.0 million in the second quarter of fiscal 2026.
• Net Income/Loss Attributable to CrowdStrike: GAAP net income attributable to CrowdStrike was $5.3 million, compared to a loss of $70.2 million in the second quarter of fiscal 2026. GAAP net income per share attributable to CrowdStrike common stockholders, diluted, was $0.01, compared to a loss of $0.07 in the second quarter of fiscal 2026. Non-GAAP net income attributable to CrowdStrike was $322.9 million, compared to $237.4 million in the second quarter of fiscal 2026. Non-GAAP net income per share attributable to CrowdStrike common stockholders, diluted, was $0.31, compared to $0.23 in the second quarter of fiscal 2026.
• Cash Flow: Net cash generated from operations was $530.3 million, compared to $332.8 million in the second quarter of fiscal 2026. Free cash flow was $377.4 million, compared to $283.6 million in the second quarter of fiscal 2026.
• Cash and Cash Equivalents grew to $5.01 billion as of July 31, 2026.

Recent Highlights

• CrowdStrike’s module adoption rates for subscription customers grew to 51%, 35%, and 26% for six or more, seven or more, and eight or more modules, respectively, as of July 31, 2026.
• Unveiled Continuous Identity for AI Agents, extending risk-aware authorization across human, non-human, and AI agent identities.
• Introduced new AI, cloud, and Next-Gen SIEM innovations in collaboration with Amazon Web Services (AWS) to help organizations securely build, deploy, and operate AI applications and cloud workloads.
• Released the CrowdStrike 2026 Technology Threat Landscape Report.
• Released the CrowdStrike 2026 Threat Hunting Report, revealing that AI is now embedded across modern adversary operations.
• Extended CrowdStrike Falcon AI Detection and Response (AIDR) across leading AI gateway partners, including Databricks, Google Cloud, JetStream Security, Kong, LiteLLM, Maxim AI, Microsoft Azure, and TrueFoundry.
• Expanded Project QuiltWorks, extending the coalition with AWS to the cloud infrastructure layer and broadening support for SMBs to help them secure frontier AI risks.
• Announced a strategic collaboration with Cerebras Systems, combining the industry’s leading AI-native security platform with breakneck AI inference for enterprises deploying AI at scale.
• Expanded strategic partnership with Schwarz Digits, launching a multi-year roadmap to bring the AI-native Falcon® platform to European enterprises, and agreeing to acquire the technology assets of XM Cyber, a Schwarz Digits company that provides advanced attack path visualization and offensive simulation technologies.
• Joined the OpenID Foundation as a Sustaining Corporate Member and IDPro, contributing to open standards to accelerate the shift to continuous, risk-aware identity security.
• Recognized as a Leader in The Forrester Wave™: Extended Detection and Response Platforms, Q2 2026 report¹.
• Named a Leader in the 2026 IDC MarketScape: Worldwide SIEM Vendor Assessment².
• Named a Leader in the 2026 IDC MarketScape: Worldwide MDR/MXDR for the Enterprise Vendor Assessment³.
• Announced CrowdStrike’s leadership across multiple Frost & Sullivan reports, with CrowdStrike named Frost & Sullivan’s 2026 Global Enabling Technology Leader in Zero Trust Browser Security⁴ and the Growth and Innovation Leader in the 2026 Frost Radar™: Cloud and Application Runtime Security⁵.

Financial Outlook

CrowdStrike is providing the following guidance for the third quarter of fiscal 2027 (ending October 31, 2026) and increasing its guidance for fiscal year 2027 (ending January 31, 2027).

Guidance for non-GAAP financial measures excludes stock-based compensation expense and related employer payroll taxes, amortization of acquired intangible assets (including purchased patents), acquisition-related expenses (credits), net, amortization of debt issuance costs and discount, mark-to-market adjustments on deferred compensation liabilities, legal reserve and settlement charges or benefits, costs (recoveries) associated with the July 19 Incident and related matters, net, strategic plan related charges (benefits), net, losses (gains) and other expense (income) from strategic investments, and losses (gains) on deferred compensation assets, and is adjusted for its long-term non-GAAP effective tax rate. The company has not provided the most directly comparable GAAP measures because certain items are out of the company's control or cannot be reasonably predicted. Accordingly, a reconciliation for non-GAAP income from operations, non-GAAP net income attributable to CrowdStrike, and non-GAAP net income per share attributable to CrowdStrike common stockholders, diluted, is not available without unreasonable effort.

These statements are forward-looking and actual results may differ materially as a result of many factors. Refer to the Forward-Looking Statements safe harbor below for information on the factors that could cause the company's actual results to differ materially from these forward-looking statements.

Conference Call Information

CrowdStrike will host a conference call for analysts and investors to discuss its earnings results for the second quarter of fiscal 2027 and outlook for its fiscal third quarter and fiscal year 2027 today at 2:00 p.m. Pacific time (5:00 p.m. Eastern time). A recorded webcast of the event will also be available for one year on the CrowdStrike Investor Relations website ir.crowdstrike.com.

Forward-Looking Statements

This press release contains forward-looking statements that involve risks and uncertainties, including statements regarding CrowdStrike’s future growth and future financial and operating performance, including CrowdStrike’s financial outlook for the third quarter fiscal 2027, fiscal year 2027, and beyond; product developments; strategic partnerships; and anticipated tax rate. There are a significant number of factors that could cause actual results to differ materially from statements made in this press release, including: risks associated with the content configuration update CrowdStrike released on July 19, 2024 for its Falcon sensor that resulted in system crashes for certain Windows systems (the “July 19 Incident”); risks associated with managing CrowdStrike’s rapid growth; CrowdStrike’s ability to identify and effectively implement necessary changes to address execution challenges; risks associated with new or existing products and services, including the risk of defects, errors, or vulnerabilities; CrowdStrike's ability to respond to an intensely competitive and rapidly evolving market; length and unpredictability of sales cycles; CrowdStrike’s ability to attract new and retain existing customers; CrowdStrike’s ability to complete and successfully integrate acquisitions; the failure to timely develop and achieve market acceptance of new or existing products and services; CrowdStrike’s ability to collaborate and integrate its products with offerings from other parties to deliver benefits to customers; industry trends; rapidly evolving technological developments in the market for security products and services; and general market, political, economic, and business conditions, including those related to a deterioration in macroeconomic conditions, inflation, geopolitical uncertainty and conflicts, public health crises and volatility in the banking and financial services sector.

Additional risks and uncertainties that could affect CrowdStrike’s financial results are included in the filings CrowdStrike makes with the Securities and Exchange Commission (“SEC”) from time to time, particularly under the captions “Risk Factors” and “Management’s Discussion and Analysis of Financial Condition and Results of Operations,” including CrowdStrike’s most recently filed Annual Report on Form 10-K, most recently filed Quarterly Report on Form 10-Q, and subsequent filings.

Actual outcomes and results may differ materially from those contemplated by these forward-looking statements as a result of such risks and uncertainties. All forward-looking statements in this press release are based on information available to CrowdStrike as of the date hereof, and CrowdStrike does not assume any obligation to update the forward-looking statements provided to reflect events that occur or circumstances that exist after the date on which they were made.

Use of Non-GAAP Financial Information

CrowdStrike believes that the presentation of non-GAAP financial information provides important supplemental information to management and investors regarding financial and business trends relating to CrowdStrike’s financial condition and results of operations. For further information regarding these non-GAAP measures, including the reconciliation of these non-GAAP financial measures to their most directly comparable GAAP financial measures, please refer to the financial tables below, as well as the “Explanation of Non-GAAP Financial Measures” and “Change in Non-GAAP Measures Presentation” sections of this press release.

Channels for Disclosure of Information

CrowdStrike intends to announce material information to the public through the CrowdStrike Investor Relations website ir.crowdstrike.com, SEC filings, press releases, public conference calls, and public webcasts. CrowdStrike uses these channels, as well as social media and its blog, to communicate with its investors, customers, and the public about the company, its offerings, and other issues. It is possible that the information CrowdStrike posts on social media and its blog could be deemed to be material information. As such, CrowdStrike encourages investors, the media, and others to follow the channels listed above, including the social media channels listed on CrowdStrike’s investor relations website, and to review the information disclosed through such channels. Any updates to the list of disclosure channels through which CrowdStrike will announce information will be posted on the investor relations page on CrowdStrike’s website.

Reports Referenced and Disclaimers

1. The Forrester Wave™: Extended Detection and Response Platforms, Q2 2026
   Forrester does not endorse any company, product, brand, or service included in its research publications and does not advise any person to select the products or services of any company or brand based on the ratings included in such publications. Information is based on the best available resources. Opinions reflect judgment at the time and are subject to change. This report is part of a broader collection of Forrester resources, including interactive models, frameworks, tools, data, and access to analyst guidance. For more information, read about Forrester’s objectivity at forrester.com/about-us/objectivity.
2. IDC MarketScape: Worldwide SIEM 2026 Vendor Assessment, (doc #US54126826, June 2026)
3. IDC MarketScape: Worldwide MDR/MXDR for the Enterprise 2026 Vendor Assessment, (doc #US5479242, August 2026)
4. Frost & Sullivan’s 2026 Global Enabling Technology Leader in Zero Trust Browser Security
5. Frost Radar™: Cloud and Application Runtime Security, 2026

About CrowdStrike Holdings

CrowdStrike (Nasdaq: CRWD), a global cybersecurity leader, has redefined modern security with the world’s most advanced cloud-native platform for protecting critical areas of enterprise risk – endpoints and cloud workloads, identity, and data.

Powered by the CrowdStrike Security Cloud and world-class AI, the CrowdStrike Falcon® platform leverages real-time indicators of attack, threat intelligence, evolving adversary tradecraft, and enriched telemetry from across the enterprise to deliver hyper-accurate detections, automated protection and remediation, elite threat hunting, and prioritized observability of vulnerabilities.

Purpose-built in the cloud with a single lightweight-agent architecture, the Falcon platform delivers rapid and scalable deployment, superior protection and performance, reduced complexity, and immediate time-to-value.

CrowdStrike: We stop breaches.

For more information, please visit: ir.crowdstrike.com

© 2026 CrowdStrike, Inc. All rights reserved. CrowdStrike and CrowdStrike Falcon are marks owned by CrowdStrike, Inc. and are registered in the United States and other countries. CrowdStrike owns other trademarks and service marks and may use the brands of third parties to identify their products and services.

Investor Relations Contact
CrowdStrike Holdings, Inc.
Andrew Nowinski
investors@crowdstrike.com

Press Contact
CrowdStrike Holdings, Inc.
Jake Schuster
press@crowdstrike.com