WIDE MOAT STOCKS & COMPETITIVE ADVANTAGES

Checking

 

CrowdStrike Holdings, Inc. CRWD

NasdaqInfrastructure softwareFinancials to Jul 31, 2026 · Updated Oct 9, 2026

On Stock Analysis · affiliate link
CRWD financials
Moat score
68
ROIC
-10.6%
P/E
>500
Incl. −$30M one-offs
EV/EBIT
–
Incl. −$45M one-offs
FCF yield
0.6%
Dividend yield
0.0%
Market cap
$269.9B

Moat ranks

Score rankTied #264 of 396
Durabilitymedium
Market structureCompetitive
Pricing powermoderate

Balance sheet

7/31/26
$BJan 31Jul 31
Cash5.25.0
Securities0.00.0
Restricted cash0.10.2
Debt0.70.7
Net cash4.54.3
Equity4.45.1
Leverage
Debt / EBITDA
3.74×
Debt / equity
0.15×
Leases (7/31/26)
$74M
Capital
Diluted shares
1,044M
Book value / share
$4.88
Price / book
52.9×
Net cash / share
$4.09
Market cap
$269.9B
Enterprise value
$265.6B

Per-share record

Fiscal years and TTM
Scale
−$2$0$2$4$6'17'18'19'20'21'22'23'24'254.80'265.17TTM
Revenue per shareCash flow per share

Key indicators

Latest: Q2 '27
IndicatorLatestVs year agoLast 8 quarters
Revenue growth25.8%+4.6 pts
Operating margin-2.3%+6.8 pts
FCF margin25.6%+1.2 pts
Capex / revenue10.5%+6.4 pts
Annual recurring revenue$5.8B+25%
Customers using 6 or more modules51.0%+3.0 pts
Customers using 7 or more modules35.0%+2.0 pts
Customers using 8 or more modules26.0%+3.0 pts
ARR from Falcon Flex accounts≥$2.3B–

Margins and growth from reported quarters; company KPIs as reported in results releases.

About CRWD

CrowdStrike sells the Falcon cybersecurity platform for endpoints, cloud workloads, identities, data and security operations. Subscriptions supplied about 95% of FY2026 revenue; incident response and other professional services supplied the rest.

Revenue mix
Falcon Platform Subscriptions 94.9%Professional Services (Incident Response & Proactive Services) 5.1%
  • Data Network Effects

    Falcon shares attack telemetry across customers, which can improve detection rules and speed the response to new threats.

  • Suite Bundling

    A common sensor and data model let customers buy more security functions without deploying separate systems.

  • Switching Costs General

    Replacing Falcon requires new sensors, detection rules and incident-response workflows across deployed endpoints.

Timeline
  1. Oct 8, 2026

    CrowdStrike joined Anthropic's Critical Infrastructure Defense Program, gaining frontier-model research and engineering support for protecting industrial and public-service systems. Eleven founding partners share the program, including rival security vendors and consultancies; participation has no disclosed paid revenue. Source: https://www.crowdstrike.com/en-us/blog/crowdstrike-anthropic-critical-infrastructure-defense-program/

  2. Oct 7, 2026

    CrowdStrike and CyberCert partnered to link Falcon with SMB security certification in Australia and New Zealand, adding a channel to smaller businesses; customer uptake and paid revenue are not disclosed. Source: https://www.crowdstrike.com/en-us/press-releases/crowdstrike-cybercert-partner-to-advance-cybersecurity-for-smbs-across-australia-and-new-zealand/

  3. Sep 29, 2026

    Falcon became available through the OpenAI Marketplace, letting eligible customers use existing commitments to buy security and easing access to enterprise budgets.

  4. Sep 15, 2026

    CrowdStrike published a high-severity Windows sensor vulnerability affecting Office macro removal and provided fixes. It reported no known exploitation in the wild. Customers must install the fixes, reinforcing the need to test protection and reliability together. Sources: https://www.crowdstrike.com/en-us/security-advisories/cve-2026-40058/ and https://www.cve.org/CVERecord?id=CVE-2026-40058

  5. Sep 14, 2026

    Airline passengers asked the Supreme Court to review dismissal of their outage claims; the October 16 response deadline extends one legal uncertainty. Source: https://www.supremecourt.gov/docket/docketfiles/html/public/26-355.html

Financial record

Fiscal year2017201820192020202120222023202420252026TTMTrendChange 2017–26
Per share ($)
Revenue0.330.711.390.811.001.602.403.144.044.805.17+34.6%/yr
Cash flow-0.33-0.35-0.130.170.410.631.011.201.411.611.93–
Earnings-0.58-0.81-0.78-0.24-0.11-0.26-0.200.07-0.02-0.160.04–
Free cash flow-0.41-0.53-0.370.020.340.490.720.951.091.241.46–
Capex0.080.180.240.150.070.150.290.240.320.370.47+18.6%/yr
Dividends0.000.000.000.000.000.000.000.000.000.000.00–
Book value-1.53-2.21-2.721.251.001.131.572.363.354.424.88–
Diluted shares (M)1591681795928719099339759791,0021,044+22.7%/yr
Totals ($B)
Revenue0.10.10.20.50.91.52.23.14.04.85.4+65.1%/yr
Operating income-0.1-0.1-0.1-0.1-0.1-0.1-0.2-0.0-0.1-0.3-0.1–
Net income-0.1-0.1-0.1-0.1-0.1-0.2-0.20.1-0.0-0.20.0–
Free cash flow-0.1-0.1-0.10.00.30.40.70.91.11.21.5–
Buybacks0.00.00.00.00.00.00.00.00.00.00.2–
Dividends0.00.00.00.00.00.00.00.00.00.00.0–
Net cash–0.00.20.91.21.32.02.73.64.54.3–
Margins & returns (%)
Gross margin35.554.165.170.673.773.673.275.275.074.775.2+39.1 pts
Operating margin-171.7-110.7-54.8-30.3-10.6-9.8-8.5-0.6-2.9-6.1-2.5+165.6 pts
Net margin-173.2-114.1-56.1-29.5-10.6-16.2-8.22.4-0.4-3.40.8+169.8 pts
FCF margin-122.6-74.5-26.32.633.530.430.130.427.025.828.2+148.4 pts
ROIC––––––––––-10.6––
Return on equity–––-19.1-10.6-22.9-12.53.1-0.5-3.70.9–
R&D % of revenue74.249.633.827.024.525.627.125.527.228.829.0-45.4 pts
Stock pay % of revenue3.810.48.216.617.121.423.521.221.822.823.1+19.0 pts
Capex % of revenue24.025.117.118.27.39.211.97.87.97.79.2-16.3 pts

Change uses 2017 and 2026 only: compound annual growth for amounts, points for margins and returns, and the change in amount for net cash. A dash means no 2017 base. Trend shows the fiscal years.

TTM = four quarters to Jul 31, 2026. Per-share values use diluted weighted shares.ROIC = operating income × (1 − 33.8% tax rate, the company's own over three fiscal years excluding one-offs) ÷ (equity + debt − cash and current securities). Returns show a dash when their base is negative or under 10% of revenue. Free cash flow = operating cash flow − capex. Debt is all borrowings; net cash counts long-term securities and excludes leases.

Moat

Moat scorecard

Moat score68
Strength
Confidence
Structure
Competitive
Durability
medium
Trajectory
stable
Pricing power
moderate
Segments
  • Falcon Platform Subscriptions94.9%
    3 claims
  • Professional Services (Incident Response & Proactive Services)5.1%
    No moat

Moat claims

Applies to
Falcon Platform Subscriptions
Confidence
Durability
medium
Trajectory
stableas of Jul 31, 2026
Why it holds

Falcon shares attack telemetry across customers, which can improve detection rules and speed the response to new threats. The FY2026 filing describes trillions of events each week. This is a plausible learning advantage, but public data does not isolate the benefit of additional data from product design and analyst work; Microsoft also has a large telemetry base.

Why stable

July 2026 ARR reached $5.84 billion, expanding the customer footprint, but public evidence does not isolate a rising detection advantage from additional telemetry.

Indicators
  • Annual recurring revenue$5.8B+25%
  • Daily security events processed≥4,000.00B
  • Modern endpoint security market share17.7%
Risks
  • Competitors with huge footprints (notably Microsoft) can generate comparable telemetry
  • Privacy/regulatory changes reduce data collection or sharing
  • Model commoditization reduces incremental advantage from more data

Profile change log

  1. Oct 9, 2026 · analyst revision

    The customer-retention evidence now includes the proxy's 97% gross retention in all four FY2026 quarters, quarterly net-retention history, and more than 630 customers making another Falcon Flex commitment. The debate and both end markets identify shared access to frontier AI as a competitive limit. Moat strengths and the professional-services assessment are unchanged.

  2. Oct 9, 2026 · business change

    CrowdStrike joined Anthropic's Critical Infrastructure Defense Program, gaining frontier-model research and engineering support for protecting industrial and public-service systems. Eleven founding partners share the program, including rival security vendors and consultancies; participation has no disclosed paid revenue. Source: https://www.crowdstrike.com/en-us/blog/crowdstrike-anthropic-critical-infrastructure-defense-program/

  3. Oct 8, 2026 · business change

    CrowdStrike and CyberCert partnered to link Falcon with SMB security certification in Australia and New Zealand, adding a channel to smaller businesses; customer uptake and paid revenue are not disclosed. Source: https://www.crowdstrike.com/en-us/press-releases/crowdstrike-cybercert-partner-to-advance-cybersecurity-for-smbs-across-australia-and-new-zealand/

  4. Oct 8, 2026 · analyst revision

    The incident-response market lists PwC once, after removing a duplicate entry; the competitive assessment and services moat status are unchanged.

  5. Oct 8, 2026 · analyst revision

    The Seraphic remeasurement gain is corrected from after-tax to non-operating because it is reported before tax; the $15.5 million parent-attributable amount and unknown tax effect are stated separately. The profit debate now also identifies Q2 outage-cost recoveries.

  6. Oct 8, 2026 · analyst revision

    FY2022 tax restructuring changes from the rounded $57.2 million to the reported $57.236 million. The $49.883 million FY2025 foreign-transaction tax charge now covers the full fiscal year because its annual source does not report a quarterly allocation. The currency assessment now reflects the July 2026 cost hedges.

  7. Oct 8, 2026 · business change

    Airline passengers asked the Supreme Court to review dismissal of their outage claims; the October 16 response deadline extends one legal uncertainty. Source: https://www.supremecourt.gov/docket/docketfiles/html/public/26-355.html

  8. Oct 8, 2026 · business change

    CrowdStrike completed its purchase of XM Cyber technology assets, adding attack-path and exposure-management technology and issuing 2,118,022 shares. Source: https://www.sec.gov/Archives/edgar/data/1535527/000110465926107123/tm2625079-1_s3asr.htm

  9. Oct 8, 2026 · business change

    DOJ prosecutors closed the customer-deal accounting probe without further action, according to Bloomberg reporting on September 25. The SEC outcome was unknown, and this does not settle outage litigation. Source: https://ca.finance.yahoo.com/news/us-justice-department-closes-investigation-171512426.html

  10. Oct 8, 2026 · business change

    The Fifth Circuit denied rehearing of the airline-passenger outage case, leaving dismissal in place at that court. Source: https://www.sec.gov/Archives/edgar/data/1535527/000153552726000031/crwd-20260731.htm

  11. Oct 8, 2026 · analyst revision

    The incident-response leader list adds PwC from the same IDC worldwide study. Its customer feedback shows the benefit of installed Falcon telemetry and the risk of delayed final reports; the existing services moat assessment is unchanged.

  12. Oct 8, 2026 · analyst revision

    The May 20 ruling is corrected from securities litigation to airline-passenger claims. The current legal debate now includes the September Supreme Court petition and separates reported DOJ customer-deal closure from unresolved SEC and outage matters.

  13. Oct 8, 2026 · business change

    CrowdStrike introduced an identity provider for AI agents, extending Falcon into registration and short-lived authorization of autonomous software identities.

  14. Oct 8, 2026 · business change

    Falcon became available through the OpenAI Marketplace, letting eligible customers use existing commitments to buy security and easing access to enterprise budgets.

  15. Oct 8, 2026 · business change

    CrowdStrike reported $5.84 billion of ARR and raised FY2027 net new ARR growth guidance to 34% at the midpoint, supporting a wider suite-adoption trajectory.

  16. Oct 8, 2026 · business change

    CrowdStrike effected a four-for-one stock split, changing per-share presentation without changing business earnings.

  17. Oct 8, 2026 · business change

    The Fifth Circuit affirmed dismissal of airline passengers' outage claims, reducing one route for customer-related damages. This ruling concerns passengers, rather than the separate securities litigation. Source: https://www.sec.gov/Archives/edgar/data/1535527/000153552726000031/crwd-20260731.htm

  18. Oct 8, 2026 · business change

    CrowdStrike raised its share-repurchase authorization by $500 million to $1.5 billion, allowing more cash to offset dilution or return to shareholders.

  19. Oct 8, 2026 · business change

    CrowdStrike bought SGNL for $627.9 million cash net of acquired cash plus replacement awards, adding continuous authorization for human and AI identities.

  20. Oct 8, 2026 · business change

    CrowdStrike bought the remaining 90.6% of Seraphic for $327.5 million cash net of acquired cash plus replacement awards, adding browser runtime protection and creating a $15.5 million gain attributable to CrowdStrike.

  21. Oct 8, 2026 · business change

    CrowdStrike announced a workforce plan affecting about 500 roles; final FY2026 charges were $44.8 million, adding near-term cost to its efficiency effort.

  22. Oct 8, 2026 · business change

    A faulty Falcon content update crashed customer Windows systems, damaging trust and causing concessions, litigation and remediation costs.

  23. Oct 8, 2026 · analyst revision

    Three moat trajectories, operating-KPI histories, management, investor debate and two sourced end-market profiles now explain adoption, competition, macro sensitivity and reported-profit distortions.

  24. Oct 8, 2026 · analyst revision

    Telemetry claim strength falls from 5 to 3, confidence from 4 to 3 and durability from durable to medium because public scale evidence does not establish a dominant detection advantage. Professional services are now verified as having no separate moat, based on hourly competition, current service economics and several IDC worldwide leaders.

  25. Oct 8, 2026 · analyst revision

    Subscription and services weights now use FY2026 revenue instead of one quarter. The old 17.7% endpoint share is shown only as a dated KPI; it does not cover the entire Falcon suite. Industry, sector and profile timestamps stay unchanged.

  26. Oct 8, 2026 · business change

    CrowdStrike published a high-severity Windows sensor vulnerability affecting Office macro removal and provided fixes. It reported no known exploitation in the wild. Customers must install the fixes, reinforcing the need to test protection and reliability together. Sources: https://www.crowdstrike.com/en-us/security-advisories/cve-2026-40058/ and https://www.cve.org/CVERecord?id=CVE-2026-40058

  27. Oct 8, 2026 · business change

    CrowdStrike appointed former Splunk Security product chief AJ Shipley as Chief Product Officer, putting product expansion and AI security under new leadership. Source: https://www.crowdstrike.com/en-us/press-releases/crowdstrike-appoints-aj-shipley-as-chief-product-officer/

  28. Oct 8, 2026 · analyst revision

    The telemetry claim now cites the October daily-event evidence alongside the annual filing. The security-software market and investor debate add the patched September Windows sensor flaw; the existing moat strengths, services assessment and profile timestamps are unchanged.

  29. Oct 8, 2026 · analyst revision

    FY2025 first-through-third-quarter gross profit, operating income and parent earnings are restored from the revised annual-report quarterly table. Pretax income uses consolidated earnings plus reported tax. The $0.466 million FY2026 third-quarter workforce charge stays in collection notes because it is too small for a separate profit adjustment.

Industry & peers

Peer map

0%10%20%30%40%50%60708090100Moat scoreIndustry medianCRWDMSFTGOOGL

Hover a point for its values; click a peer to compare. Dashed lines: industry medians.

Global security software

As of Oct 9, 2026
CompetitiveMedium cyclicalityUSD 121B in 2026

Worldwide spending on security software for enterprises and consumers, including endpoint, identity, cloud, application and data protection and security analytics. Excludes network-security hardware and separate consulting or incident-response services; this is broader than Falcon's enterprise platform.

  1. Microsoft
  2. Cisco
  3. CrowdStrike
  4. Okta
2024 leaders, no comparable shares · Gartner Worldwide Security Software Market Share 2024
StocksMoatGross m.Op. m.
CRWD6875.2%-2.5%
Industry median78467.9%32.1%
Sector median777564.9%23.6%
All stocks median3987652.9%19.6%

Moat medians cover every stock. Margin medians count only stocks with collected numbers and need at least three.

Drivers & risks

Demand drivers
  • More cloud workloads, remote access and AI agents expand the assets and identities that need protection.
  • Faster attacks and board-level responsibility support recurring security budgets even when other technology spending slows.
  • Customers seek fewer consoles and better shared incident context, supporting suite consolidation and cross-selling.
  • Regulation and sovereign hosting requirements can increase demand for documented controls and local delivery.
Risks
  • Microsoft and other large platforms can bundle security into broader commitments, reducing stand-alone pricing and sales opportunities.
  • High rates, weak growth and constrained IT headcount can delay new projects and encourage discounts, despite recurring renewal demand.
  • Cloud processing, storage and specialist wages raise costs; rapid telemetry growth can require capex and long-term infrastructure commitments.
  • Product failures and privacy rules can weaken trust, restrict data sharing and create liability or re-engineering costs.
  • AI brings demand but also faster feature imitation and more capable attackers. Rival vendors share access to frontier models, so a durable advantage needs better security outcomes, deployment and customer context.

Bulls & bears

Key question · as of Oct 9, 2026

Can Falcon turn broader customer adoption into durable operating profit while keeping customer trust and avoiding reliance on discounts or accounting changes?

Arguments

3 forFaded: weakening or settled6 against

What to watch

  1. 1Net new ARR, dollar-based net retention and renewal incentives
  2. 2Adoption of six and eight modules, and ARR from Falcon Flex accounts
  3. 3GAAP operating income, stock compensation, capex and outage-related costs

Next check: The airline-passenger Supreme Court petition has a response due October 16, 2026. At Q3 FY2027 results for the quarter ending October 31, watch retention, commission expense, Delta litigation and the SEC inquiry. The results date is not confirmed.

Sources: company filings and dated sources collected for Find My Moat; market cap as of Oct 8, 2026. Not investment advice.

Cite or reuse this data

Free to reuse, commercially too, with a credit link. See the data license.

Moat Score 68/100 by <a href="https://www.findmymoat.com/stocks/XNAS:CRWD">Find My Moat</a> (as of September 2026)

Request update

Spot something outdated? Send a quick note and source so we can refresh this profile.

Curation & Accuracy

This directory blends AI‑assisted discovery with human curation. Entries are reviewed, edited, and organized with the goal of expanding coverage and sharpening quality over time. Your feedback helps steer improvements (because no single human can capture everything all at once).

Details change. Pricing, features, and availability may be incomplete or out of date. Treat listings as a starting point and verify on the provider’s site before making decisions. If you spot an error or a gap, send a quick note and I’ll adjust.