Cybersecurity leader CrowdStrike (NASDAQ:CRWD) delivered the kind of quarter investors had been demanding — and then raised the bar again. Revenue, adjusted earnings and annual recurring revenue (ARR) beat expectations, net new ARR accelerated sharply, and management raised its full-year outlook.
The result was an after-hours share price jump of roughly 9%, despite the stock already having soared more than 60% in 2026.
CrowdStrike investor relations
| CrowdStrike (NASDAQ:CRWD) | Price: $206.92 (~+9% after-hours) | Market cap: ~$210bn |
For UK retail investors, the key question is therefore no longer simply whether CrowdStrike is benefiting from AI. The evidence increasingly says it is.
The harder question is how much of that AI-security opportunity is already reflected in a very demanding valuation.
The headline numbers
| CrowdStrike Q2 FY2027 | Actual | Consensus / prior | YoY |
| Revenue | $1.47bn | $1.44bn | +26% |
| Subscription revenue | $1.40bn | — | +27% |
| Adjusted EPS | $0.31 | $0.29 | +35% |
| Ending ARR | $5.84bn | ~$5.79bn | +25% |
| Net new ARR | $333m | ~$285–310m | +51% |
| Non-GAAP operating income | $372m | — | +46% |
| Free cash flow | $377m | — | +33% |
| FCF margin | 26% | — | — |
The most important number is arguably not revenue or EPS but $332.8m of net new ARR. That was a record and represented 51% year-on-year growth. Management’s previous Q2 guidance had implied considerably less.
The company also reported record free cash flow of $377m and $5.01bn of cash.
CEO George Kurtz called it ‘the best quarter in CrowdStrike’s history’, while CFO Burt Podbere pointed to a record Q3 sales pipeline as one reason for raising the outlook again.
Why did the shares jump?
The immediate share-price reaction tells us what investors were looking for.
CrowdStrike closed Wednesday at $189.18 and jumped by more than 9% after the results. The move was particularly notable because the shares had already rallied strongly in 2026 and investors had entered the results with elevated expectations.
In other words, this was not simply a case of ‘good results = higher share price’.
The market had been asking whether the much-discussed AI cybersecurity inflection point would translate into measurable customer spending.
Q2 provided an increasingly convincing answer.
Net new ARR accelerated to 51%, while management raised its FY2027 net-new ARR growth expectation to 34%, from an initial forecast of 22.5%.
That is a huge change in the trajectory investors are being asked to value.
Falcon Flex is becoming increasingly important
One of the less headline-grabbing but potentially more important developments was Falcon Flex.
Flex allows customers to purchase a pool of CrowdStrike capacity that can then be deployed across different modules. It is effectively a mechanism for CrowdStrike to make platform consolidation easier.
Ending ARR from customers using Flex exceeded $2.29bn, up 101% year on year.
More than 935 Flex accounts were added during Q2. Customers moving from standard subscriptions to Flex generated average ARR uplift of more than 40%, while customers that had re-Flexed at least twice were generating average ARR 53% above their original Flex starting point.
This matters because CrowdStrike is trying to evolve from an endpoint security vendor into a broader cybersecurity operating platform.
Subscription customers are increasingly adopting multiple modules: 51% now use six or more modules, 35% use seven or more and 26% use eight or more.
That creates a potentially powerful flywheel:
More modules → greater customer dependency → higher retention → more cross-selling → rising ARR per customer.
The AI opportunity is broader than ‘AI security’
This is where the CrowdStrike story becomes particularly interesting.
AI creates cybersecurity demand in two directions.
First, AI expands the attack surface.
Enterprises are deploying more AI models, AI agents, cloud workloads and automated systems. Those systems create additional identities, permissions, data flows and potential attack vectors.
Second, AI makes cyberattacks more powerful.
Agents can potentially automate reconnaissance, vulnerability exploitation, credential theft and other malicious activity at a scale that traditional security architectures were not designed to handle.
CrowdStrike’s strategy is therefore to sit between the enterprise and this expanding attack surface.
The company now has 33 cloud modules spanning endpoint, cloud security, identity, SIEM, threat intelligence, data protection and generative-AI cybersecurity.
Kurtz argued on the earnings call that ‘AI is driving more cyber attacks’ while simultaneously driving more cybersecurity spending.
He also described AI agents as ‘human and machine risk multipliers’ because they can have continuous access to data and systems with limited human oversight.
The new AI-security stack
| AI trend | Cybersecurity problem | CrowdStrike opportunity |
| AI agents | Non-human identities and permissions | Continuous Identity |
| Generative AI | Data leakage / malicious prompts | AI Detection & Response |
| Cloud AI workloads | Expanded attack surface | Cloud Security |
| AI-generated attacks | Faster threat execution | Falcon endpoint/XDR |
| Rapid software deployment | More vulnerabilities | Exposure Management |
| Huge security data volumes | Alert overload | Next-Gen SIEM |
| Enterprise AI adoption | Governance and visibility | Falcon platform |
CrowdStrike has also launched Continuous Identity for AI Agents, expanded AI Detection and Response across AI gateway partners, and deepened its AWS collaboration around AI and cloud security.
This is why the company increasingly describes Falcon as an ‘Agentic Security Platform’ rather than simply an endpoint product.
The key analyst question: is ‘Mythos moment’ sustainable?
This was arguably the most important question on the earnings call.
Barclays analyst Saket Kalia asked Kurtz what had happened in the months since the so-called ‘Mythos moment’ — the point at which the emergence of increasingly capable AI models made enterprises recognise that AI adoption itself requires new security investment.
Kurtz’s response was unequivocal: AI agents had gone beyond frontier labs and were becoming a mainstream enterprise issue.
He said the resulting demand was a ‘sustained tailwind’, adding that he expected more examples of ‘agents gone wild’ and that CrowdStrike would be there to protect customers.
The significance is that management is no longer describing AI security as a future product category.
It is arguing that the spending cycle has already begun.
That claim is supported by the ARR acceleration.
But valuation remains the elephant in the room
This is where UK investors need to exercise discipline.
CrowdStrike is an exceptional growth company — but it is not an inexpensive stock.
Before the latest results, Yahoo Finance showed CrowdStrike trading at around 151x forward earnings, while its trailing PE was not meaningful because GAAP earnings remained very low.
Other market-data estimates have placed the stock at well above 100 times forward EBITDA.
That creates an important distinction:
CrowdStrike can deliver excellent business results and still produce disappointing investment returns if the valuation multiple contracts.
At the post-results price around $205–210, the market capitalisation is roughly $210bn on a split-adjusted basis. Against FY2027 revenue guidance of roughly $6bn, that implies a forward price-to-sales ratio of around 36x.
That is a premium valuation by almost any conventional software measure.
| Metric | FY2027 guidance / indication |
| Revenue | $5.99–6.01bn |
| ARR | $6.60–6.61bn |
| Net new ARR | $1.35–1.36bn |
| Adjusted net income | $1.30–1.31bn |
| Adjusted EPS | $1.25–1.26 |
| FCF margin | ≥30% |
CrowdStrike’s full-year revenue guidance was raised from $5.91–5.96bn to $5.991–6.011bn.
At a $205 share price, the current-year adjusted PE based on the company’s guidance is therefore still around 160–165x.
That tells you what the market is assuming: sustained high growth and significant future margin expansion.
Wall Street’s response
Analyst sentiment remains strongly positive.
Jefferies raised its target to $240 following the results, citing the strength of the ARR performance and the higher outlook. Mizuho subsequently lifted its target to $250 from $240 while maintaining an Outperform rating.
Before the results, Barclays had already raised its target to $235, JPMorgan to $235, Mizuho to $240 and RBC to $256.
The pre-results debate was revealing. Jefferies analyst Joseph Gallo argued that near-term share performance would depend on whether FY2027 ARR guidance provided evidence of further acceleration.
CrowdStrike has now delivered that acceleration.
The bigger debate is therefore shifting from ‘Can CrowdStrike beat?’ to ‘How long can this growth rate persist?’
What could go wrong?
1. The valuation leaves little room for disappointment
This is the clearest risk.
If revenue growth falls towards the high teens or low 20s while the market begins valuing CrowdStrike like a mature software company, the shares could suffer even if the underlying business continues growing.
2. AI security could become highly competitive
CrowdStrike is competing not only with specialist cybersecurity companies such as Palo Alto Networks, SentinelOne and Zscaler, but also with Microsoft and other hyperscalers with enormous AI and cloud resources.
The competitive advantage must therefore come from platform breadth, threat intelligence, data and execution — not simply having an ‘AI security’ label.
3. The Mythos effect must translate into recurring revenue
Management has made a powerful argument that AI creates a structural increase in cybersecurity spending.
Investors now need to see that continue in subsequent quarters.
The Q2 result is encouraging. But one quarter does not prove a decade-long secular growth cycle.
4. Stock-based compensation
CrowdStrike’s adjusted profitability and free cash flow are impressive, but UK investors should continue to monitor stock-based compensation and dilution alongside non-GAAP earnings.
The recent four-for-one stock split changes the quoted share price, not the underlying economics of the business.
Bull vs bear case
| 🐂 Bull case | 🐻 Bear case |
| AI creates a structurally larger cyberattack surface | AI spending fails to translate into sustained security budgets |
| Net new ARR is accelerating dramatically | Current valuation assumes years of strong execution |
| Falcon Flex increases platform penetration | Microsoft and Palo Alto intensify competition |
| 33+ modules create cross-selling opportunity | Platform complexity could increase execution risk |
| AI Detection & Response opens a new market | New AI-security products may take time to monetise |
| FCF margin already above 25% | Multiple compression could overwhelm earnings growth |
| ARR guidance has been repeatedly raised | Growth could normalise after the initial AI/security surge |
| Strong cash position supports investment and acquisitions | High expectations mean even small misses could punish shares |
Investor verdict
The business case has strengthened materially as it delivered the kind of quarter investors had been demanding and raised the bar again. The valuation case remains much harder.
Q2 FY2027 provides perhaps the clearest evidence yet that CrowdStrike is benefiting from AI rather than being threatened by it.
The combination of 26% revenue growth, 51% net-new ARR growth, accelerating ARR, record Falcon Flex adoption and a 630-basis-point increase in full-year net-new ARR growth guidance is difficult to dismiss.
More importantly, CrowdStrike is evolving.
It began as an endpoint-security disruptor. It is increasingly positioning Falcon as a broader security platform spanning endpoint, identity, cloud, SIEM, exposure management and AI-agent security.
That could make CrowdStrike one of the more important ‘picks and shovels’ investments in the AI ecosystem: not an AI model maker, GPU supplier or hyperscaler, but a company providing infrastructure required to make enterprise AI deployment safer.
Small Language Models: AI winners beyond the datacentre?
For a UK investor using a Stocks & Shares ISA or SIPP, the attraction is therefore clear: exposure to the AI-security spending cycle without having to pick which AI model ultimately wins.
But there is a catch.
At roughly 160x FY2027 adjusted earnings on the post-results share price, investors are already paying for a significant amount of future success.
Bottom line: CrowdStrike’s fundamentals are increasingly deserving of a premium valuation, but the shares are priced for sustained execution rather than merely good results. Existing investors have a strong fundamental story; new investors may want to consider staged buying rather than chasing a double-digit earnings jump.
The crucial numbers to watch next are net new ARR, Falcon Flex growth, AI Detection & Response adoption and free-cash-flow margins.
If those continue accelerating, the valuation can potentially grow into itself.
If they don’t, the eye-watering multiple is likely to become the story.
You might also like:
