CRWD
Q4 FY2026 Earnings: Record Quarter Confirms Thesis, All Signals Unchanged
CrowdStrike delivered record net new ARR of $330.7M (+47% YoY on clean base), first GAAP net income of $38.7M, and $5.23B in cash. FY2027 guidance of 22-23% revenue growth meets the required CAGR. All 9 signals confirmed -- a COMPETITIVE_POSITION upgrade to DOMINANT was considered and reversed after Bullet Hole validation. DOJ/SEC silence extends to 11 months. Forward P/S compressed to ~17.2x from ~20x.
Read the full analysis"CrowdStrike just delivered record $331M net new ARR, its first GAAP profit, and $5.23B in cash -- while the DOJ/SEC investigation into its ARR metric enters month 11 of silence. At ~17x P/S with guidance meeting the required CAGR, is the regulatory risk the only thing left to worry about?"
CrowdStrike is the leading cloud-native cybersecurity platform with $5.25B ARR growing 24%, 74,000+ customers, and 81% subscription gross margins. Q4 FY2026 delivered record results: $331M net new ARR (+47% YoY on a clean base), first GAAP net income ($38.7M), and $376M FCF (29% margin). FY2027 guidance of 22-23% revenue growth meets the valuation's required CAGR. A joint DOJ/SEC investigation into revenue recognition and ARR reporting remains unresolved after 11 months of silence.
Executive Summary
Cross-lens roll-up assessment
Q4 FY2026 delivered CrowdStrike's strongest quarter across all financial metrics -- record $331M net new ARR (+47% YoY on a clean base), first GAAP net income ($38.7M), $5.23B cash, and FY2027 guidance meeting the required 22-23% CAGR. All 9 signals confirmed unchanged. The COMPETITIVE_POSITION upgrade to DOMINANT was considered but reversed after validation: Flex lock-in is compelling but not yet renewal-tested, and NRR at 115% is inconsistent with DOMINANT. Forward multiples compressed to ~17x P/S and ~81x P/E as earnings grew into a flat stock. The DOJ/SEC investigation enters its 11th month of silence -- increasingly the sole concentrated risk in what is otherwise a thesis-confirming trajectory.
HIGHER_SCRUTINY because: (1) the core business fundamentals are genuinely strong across multiple independent lenses, but (2) a joint DOJ/SEC investigation into the company's primary operating metric (ARR) creates a binary risk that could cascade through 5-6 signals simultaneously, and (3) the DEMANDING valuation leaves minimal margin for any single assumption to fail. Not AVOID because the fortress balance sheet ensures survival and the competitive position is well-evidenced. Not PROCEED_WITH_CAUTION because the investigation targets the core metric, not a peripheral concern, and its resolution is binary, time-uncertain, and consequential enough to affect the majority of signals.
Key Takeaways
- •COMPETITIVE_POSITION is DEFENSIBLE (E3, HIGH confidence) -- Single-agent Falcon platform creates compounding switching costs. 97% gross dollar retention confirmed through full post-outage renewal cycle. 50% of customers at 6+ modules. Falcon Flex ($1.69B ending ARR, 1,600 customers, 23% Reflex rate with 26% ARR lift) demonstrates unprecedented platform lock-in. Trending toward DOMINANT but Flex not yet renewal-tested and NRR at 115% inconsistent with DOMINANT classification.
- •REVENUE_DURABILITY is DURABLE (E2, HIGH confidence) -- 95% subscription revenue with ratable recognition, 97% gross retention, 74,000+ customers with no concentration. Record net new ARR of $330.7M (+47% YoY against clean base). FY2027 guidance of 22-23% revenue growth meets required CAGR. CCP accounts retain above company average, validating outage recovery.
- •FUNDING_FRAGILITY is STABLE (E2, HIGH confidence) -- $5.23B cash, $1.24B annual FCF (record), net cash positive, no binding covenants. First GAAP net income ($38.7M). FY2027 FCF margin guided at 30%+. Even severe compound stress scenarios leave cash above $4.5B.
- •ACCOUNTING_INTEGRITY is CONCERNING (E2, MEDIUM confidence) -- Active DOJ/SEC inquiry specifically targeting revenue recognition and ARR reporting. $1.2B in annual non-GAAP adjustments create up to 10x GAAP/non-GAAP divergence. PSU compensation linked to the ARR metric under investigation. M&A-specific accounting is clean (PwC audit, no goodwill impairments).
- •REGULATORY_EXPOSURE is ELEVATED (E3, HIGH confidence) -- Investigation expanded beyond original $32M Carahsoft/IRS deal to HHS and DOE contracts. DOJ involvement signals potential criminal dimension. Internal employee concerns documented. Delayed disclosure (Jan 2025 knowledge, Jun 2025 disclosure).
- •NARRATIVE_REALITY_GAP is DIVERGING (E2, HIGH confidence) -- Q4 record NNA on clean base narrows the gap, and Charlotte AI 'tripled ARR' provides directional AI monetization. But NRR plateaued at 115% (not recovering toward 120%), AI revenue still dollar-unquantified, and DOJ/SEC silence extends to 11 months. Narrative advances in lockstep with business improvement, maintaining an approximately constant lead.
Key Tensions
- •Operationally Excellent Business vs. Federal Investigation Into Core Metric -- the fundamentals (97% retention, record ARR, fortress balance sheet) are validated by every lens, but the DOJ/SEC investigation targets ARR itself -- the metric that drives everything else. If the metric is unreliable, most signal assessments shift simultaneously.
- •Compressing Valuation vs. Still-Unresolved Binary Outcome -- forward multiples compressed to ~17x P/S and ~81x P/E as earnings grew into a flat stock. FY2027 guidance meets the 22-23% CAGR requirement and margins are expanding. The 'simultaneous achievement' test is being met on growth and margins, but NRR (115%), AI quantification, and DOJ/SEC resolution remain open.
- •MIXED Governance vs. Massive Retained Stake -- CEO retains an $800M+ position providing an alignment floor, but $309M charitable trust monetization, CFO selling 2x vest, and zero insider purchases in 5+ years create genuine ambiguity about alignment depth.
Moat Mapper
Is the advantage durable?
Key Metrics
Key FindingsClick to expand details
Signal AssessmentsClick for full context
| Signal | Scale | Assessment | Evidence |
|---|---|---|---|
Competitive Position | — | DEFENSIBLE | 3Triangulated |
Model Debates
Cross-Lens Insights
Where Lenses Agree
- Fortress balance sheet unanimously confirmed: $5.23B cash, $1.24B annual FCF (record), first GAAP net income -- no plausible stress scenario threatens capital structure
- Revenue structural durability validated: 95% subscription, ratable recognition, 97% GDR, 74K+ customers with no concentration
- DOJ/SEC investigation is the central uncertainty: every lens that encounters it flags it as a monitoring trigger, with scope expansion increasing severity
- July 2024 outage paradoxically validated structural lock-in rather than destroying it: 97% GDR held, ARR reaccelerated
- Platform consolidation strategy validated by Humio integration success ($430M+ ARR SIEM from ~$400M acquisition)
- ✓GOVERNANCE_ALIGNMENT assessed as MIXED by both independent lenses examining insider behavior from different analytical angles
- ✓NRR compression (120% to 112% to 115%) is a genuine concern obscured by favorable headline metrics
- ✓AI narrative intensity (15+ 'agentic' mentions, Charlotte AI) exceeds evidence base with zero quantified revenue
Where Lenses Differ
ACCOUNTING_INTEGRITY
Both assessments are correct within their scope. Consolidation Calibrator evaluates M&A accounting specifically and finds it clean. Fugazi Filter evaluates broad accounting integrity and must incorporate the DOJ/SEC investigation.
REGULATORY_EXPOSURE
Gravy Gauge evaluates structural regulatory dependency (none). Regulatory Reader evaluates company-specific investigation risk (elevated and expanding).
CAPITAL_DEPLOYMENT
Both lenses see the same facts but weight different dimensions: M&A strategy (disciplined) vs. total capital allocation including SBC (mixed).
REVENUE_DURABILITY
Revenue is structurally DURABLE in the absence of adverse regulatory outcomes. CONDITIONAL is a scenario-dependent downgrade contingent on enforcement action.
The following publicly available documents were collected and extracted into a structured fact dossier that powered this analysis.
SEC Filing
- Annual Report (10-K) -- FY2025 (Jan 31, 2025)
- Quarterly Report (10-Q) -- Q3 FY2026 (Oct 31, 2025)
- Quarterly Report (10-Q) -- Q2 FY2026 (Jul 31, 2025)
- Quarterly Report (10-Q) -- Q1 FY2026 (Apr 30, 2025)
- Quarterly Report (10-Q) -- Q3 FY2025 (Oct 31, 2024)
- Current Report (8-K) -- Q3 FY2026 Earnings (Dec 2, 2025)
- Current Report (8-K) -- Q2 FY2026 Earnings (Aug 27, 2025)
- Current Report (8-K) -- Q1 FY2026 Earnings (Jun 3, 2025)
- Current Report (8-K) -- Q4 FY2025 Earnings (Mar 4, 2025)
- Proxy Statement (DEF 14A) -- May 6, 2025
- SC 13G/A -- Vanguard, T. Rowe Price, BlackRock
- Form 4 Insider Transactions -- 20 filings (Dec 2025 - Feb 2026)
- Form 144 Proposed Sales -- 10 filings (Dec 2025 - Feb 2026)
Earnings Transcript
- Q3 FY2026 Earnings Call Transcript (Dec 2, 2025)
- Q2 FY2026 Earnings Call Transcript (Aug 27, 2025)
- Q1 FY2026 Earnings Call Transcript (Jun 3, 2025)
- Q4 FY2025 Earnings Call Transcript (Mar 4, 2025)
Research Document
- July 2024 Outage Root Cause Analysis -- CrowdStrike Blog
- Litigation Summary -- CourtListener (Delta, Securities Class Action, 4 cases)
Web Source
- Google Trends Analysis -- 5 search terms tracked