CrowdStrike Q4 2025 Earnings Call Transcript

There are 12 speakers on the call.

Operator

Hello, and welcome to Crowdstrike's Fourth Quarter and Fiscal Year twenty twenty five Financial Results Conference Call. At this time, all participants are in a listen only mode. After the speakers' presentation, we will conduct a question and answer session. Please be advised that today's conference is being recorded. I would now like to hand the call over to Maria Riley, Vice President of Investor Relations.

Operator

Maria, please go ahead.

Speaker 1

Good afternoon, and thank you for your participation today. With me on the call are George Kurtz, Chief Executive Officer and Founder of CrowdStrike, and Bert Podbear, Chief Financial Officer. Before we get started, I would like to note that certain statements made during this conference call that are not historical facts, including those regarding our future plans, objectives, growth, including projections and expected performance, including our outlook for the first quarter and fiscal year twenty twenty six and any assumptions for fiscal periods beyond that are forward looking statements within the meaning of the Private Securities Litigation Reform Act of 1995. These forward looking statements represent our outlook only as of the date of this call. While we believe any forward looking statements we make are reasonable, actual results could differ materially because the statements are based on current expectations and are subject to risks and uncertainties.

Speaker 1

We do not undertake and expressly disclaim any obligation to update or alter our forward looking statements, whether as a result of new information, future events or otherwise. Further information on these and other factors that could affect the company's financial results is included in the filings we make with the SEC from time

Operator

to

Speaker 1

time, including the section titled Risk Factors in the company's quarterly and annual reports. Additionally, unless otherwise stated, excluding revenue, all financial measures disclosed on this call will be non GAAP. A discussion of why we use non GAAP financial measures and a reconciliation schedule showing GAAP versus non GAAP results is currently available in our earnings press release, which may be found on our investor relations website at ir.crowdstrike.com or on our form eight k filed with the SEC today. With that, I will now turn the call over to George.

Speaker 2

Thank you, Maria, and thank you all for joining us today for our q four twenty twenty five earnings call. I'm extremely proud of the engagement we've had with customers, partners, prospects in the market navigating a year that tested CrowdStrike. Q four showcases the fruits of our labors, giving me strong conviction in our AI native single platform, excellent execution, and accelerating market opportunity. Q four and f y twenty twenty five highlights include q four net new ARR of $224,000,000 well ahead of our expectations, closing FY twenty twenty five at $4,240,000,000 and ending ARR. FY twenty five ending ARR for cloud security, identity protection, and next gen SIM of over $1,300,000,000 growing nearly 50% year over year.

Speaker 2

Gross dollar retention of 97% as customers remain firmly committed to the Falcon platform, q four free cash flow of $240,000,000 and for the full year, we delivered free cash flow of $1,070,000,000 or 27% of revenue, setting a new record and for the first time exceeding $1,000,000,000 in annual free cash flow. CrowdStrike is the first cybersecurity ISV to cross $1,000,000,000 in deal value on AWS Marketplace in a single calendar year, setting a new standard for ecosystem execution. And record and accelerating FY twenty five total contract value of $6,000,000,000 the first and only pure play software cybersecurity company reported to achieve this metric, which increased 40% year on year, showcasing the scale and commitment of customers' long term cybersecurity consolidation on the Falcon platform. Everyone loves a comeback story, and that's exactly what we've started experiencing in q four as we've closed out the year. The results tell our story.

Speaker 2

One, we've never been closer to our customers and partners with market leading customer satisfaction levels. Two, we're playing best in class defense as well as offense with our Falcon Flex subscription model. And three, our innovation engine hasn't missed a beat. The Falcon platform has never been more market competitive, whether that's winning new logos or third party analyst research. We find ourselves placed at the epicenter of a rapidly evolving demand environment.

Speaker 2

A new administration, a new wave of technology, and a new threat landscape necessitate all businesses to evolve their cybersecurity products. I'd like to share AI specific trends on the broader demand environment and how these trends relate to CrowdStrike. First, AI experimentation is just starting to evolve into AI outcomes. Second, we're in the midst of a rapidly accelerating geopolitical AI arms race. And third, winning the AI war requires the very best data and battle tested innovation engine.

Speaker 2

Commenting on the shift from AI experimentation to AI outcomes, we're still in the early but rapidly evolving innings of the AI revolution. Businesses and governments across the globe are looking for their AI investments to yield both improved efficiencies and novel outputs. At CrowdStrike, we're requiring every team and function to leverage the power of AI. We expect these investments to play critical top and bottom line roles on our path to $10,000,000,000 in ARR. In the broader market, businesses are equally grappling with how to secure their environments in this AI age.

Speaker 2

Here's my take on what this means. First, more AI everywhere means more data, more access, and more processes, services, and products requiring cybersecurity. The locales of AI adoption are either in cloud workloads or data centers or even on edge devices, all of which we are market leaders in securing with AI native technology that stops the breach. Second, more access to more third party and in house agentic applications and services requires rethinking identity and data protection. Who is accessing data and where is it traveling matters more now than ever before.

Speaker 2

And third, securing AI starts a broader enterprise data discussion. I'm seeing CISOs, CIOs, and CEOs going to the drawing board to reinvent their technology stack with AI powered platforms of record for their next decade and beyond. And for security, it's even more pressing. For our customers, Falcon has quickly become their AI native SOC. Charlotte, our generative AI security analyst, is a SOC analyst's best friend and already driving tangible AI outcomes.

Speaker 2

Charlotte AI detection triage accelerates SOC operations and threat response times. Across more than 100 q four Charlotte AI deals, customers are seeing outcomes, sharing feedback like what we've received from a European financial services firm, which stated, Charlotte AI has been very useful for us. It's done summarization of activity on host and users in ten to fifteen seconds, which would have taken us twenty to thirty minutes to do manually. Returning to my second point on the geopolitical AI arms race, our threat intelligence practice sees nation state cyber craft proliferation at all time new highs. A new wave of nationalism and threat actors is creating adversary stockpiling akin to the Cold War era.

Speaker 2

In our recently released annual global threat report, we exposed China Nexus adversaries escalating state sponsored cyber operations by 150% with targeted attacks in financial services, media, manufacturing, and industrial sectors soaring up to 300%. And with tools such as DeepSeek making AI access easier and cheaper, the pace and prevalence of adversarial AI adoption is only accelerating. It is in this intensifying threat landscape that CrowdStrike and our threat intelligence expertise shines. Q four was our largest threat intelligence quarter in company history. Governments and enterprises increasingly turn to CrowdStrike, especially in a competitive environment where m and a activity has subsumed many existing threat intelligence vendors, where the market's leading threat intelligence authority discovering and naming the adversaries to unite cyber defenders in stopping them.

Speaker 2

The democratization of destruction, AI in the hands of more adversaries, intensifies the market need for CrowdStrike. And lastly, my third point, CrowdStrike is manufacturing the instruments to win the AI war. We have the innovation engine and the security data to fuel it. Finally, in this AI fueled demand environment, the point product vendors and those that have failed to deliver open and native single platforms increasingly fall short. CrowdStrike is cybersecurity's AI native SOC.

Speaker 2

Our greatest asset is our role as the creator of cybersecurity's richest data. We've curated this dataset with millions of Falcon Complete Analyst annotations, making threat data contextualized and actionable. No one else has this. Our data is liquid gold for creating new agentic models for continuously improving protection. Falcon is purpose built to win the AI war with market leading protection As the first call for organizations large and small to stop the breach, we see where others fall short.

Speaker 2

We saw an uptick in incident response engagements in q four. Thematically, these organizations were using a next gen EDR vendors technology where we saw one of our strongest competitive displacement quarters in a logistics software vendor, a national packaging and marketing firm, and security software provider to name a few. Falcon's efficacy and rapid ease of deployment is why Crouchrike is the first call to stop the breach. We've also innovated in devising the most effective model for customers to adopt the Falcon platform, FalconFlex. FalconFlex is a subscription model that enables customers to adopt the modules they want across their subscription term.

Speaker 2

This model deeply resonates with prospects and customers as well as our ecosystem partners. Following the summer's incident, we worked with impacted customers to offer them customer commitment packages, CCPs, largely in the form of additional product and Falcon Flex subscriptions. The CCP program was a FalconFlex accelerant. In q three, we shared accounts that adopted the FalconFlex model representing more than 1,300,000,000 of total deal value. In q four alone, we added over a billion dollars of total account flex deal value.

Speaker 2

With accounts that adopted FalconFlex soaring to $2,500,000,000 in total deal value, growing 80% quarter over quarter and growing more than 10 times year over year. Our ability to close FalconFlex deals at size and scale shows customers' long term commitment to CrowdStrike and was a key contributor to our TCV acceleration. This commitment is supported by action, deploying more Falcon modules and consolidating on the platform. With more than 60% of FalconFlex deal value already deployed by customers to date, we are pleased with the deployment stats. FalconFlex is a game changer, accelerating module adoption and making it easier and faster than ever before to consolidate on Falcon.

Speaker 2

With the summer now several quarters behind us, we're ending our customer commitment package program. The CCP program was an excellent proactive measure, which not only built our relationship with impacted customers, but also resulted in significant platform adoption. This uptake gives me confidence in our second half net new ARR reacceleration as products are deployed, one time discounts drop off, and contracts are upsized and renewed. And one of the biggest beneficiaries of Falcon Flex is the accelerated adoption of our rapidly emerging platform solutions. In the past, we've discussed three core solutions, cloud, identity, and next gen SIM.

Speaker 2

This quarter, I'd also like to provide an update on our exposure management business, which is displacing legacy vulnerability management products and has swiftly become a meaningful contributor to the business with line of sight to $300,000,000 in ARR. Starting with cloud, our cloud security business delivered a strong q '4 growing more than 45% with ending ARR more than $600,000,000. The cloud is central to the AI revolution providing the core infrastructure to enable enterprises to harness the power of AI across their businesses. Cloud security has never been more important. We're seeing two core trends emerge in the cloud security market.

Speaker 2

First, the core mechanism for protecting the cloud is runtime protection where CrowdStrike is uniquely positioned to deliver the best and most comprehensive workload protection in the industry. We are the cloud runtime security vendor. While others are trying to catch up, CrowdStrike has delivered frictionless CWP for years battle tested to stop cloud breaches. And second, the market for cloud security is rapidly consolidating with customers looking for an integrated end to end platform where the sum of the parts is greater than the individual pieces. This is the promise on which Falcon Cloud Security delivers.

Speaker 2

By securing the entirety of the AI infrastructure from workload to LLM, CrowdStrike is enabling enterprises to harness the power of AI securely. A key win in the quarter was an 8 figure Falcon Flex transaction for a major global financial services holding company where we displaced a network security vendor's multiplatform cloud offering. CrowdStrike Financial Services made it even easier to go all in with Falcon committing to a large multiyear deal. Too many consoles got in the way of seamless SOC operations. Falcon Cloud Security was far easier to manage in a single console and provided all the right security controls to stop cloud breaches.

Speaker 2

Moving on to our identity business, which grew to more than $370,000,000 in ending ARR. Our identity business continues to benefit from several key trends, including the rapidly growing identity attack surface. In addition, our vision for the recently acquired Adaptive Shield business, now called FalconShield, secures identities everywhere, whether on premises, in SaaS applications, or within hyperscaler infrastructure. A key identity win was a large state university hospital system that consolidated on Falcon in a 7 figure deal. The CISO secured independent budget for Falcon because of the operational superiority of our identity protection module.

Speaker 2

Specifically, this university had enough of a competitor's identity protection bolt on product that produced too many false positives. Moving on to our next gen SIM business, which grew more than 115% year over year, finishing the year at more than 330,000,000 in ending ARR. Next gen SIM is rapidly breaking out as a foundational cornerstone of the integrated Falcon platform, offering unmatched speed, scalability, and cost efficiency compared to legacy SIMs. We believe the coupling of next gen SIM alongside our native first party data and the agentic power of Charlotte AI gives CrowdStrike a unique advantage to continue leading the AI security revolution. This is why CrowdStrike is uniquely delivering the AI SOC of the future today.

Speaker 2

A key seven figure next gen SIM win from the quarter was a major US airline, which also ranks as one of the top of global airlines by passengers carried. This airline selected Krauschweig to replace legacy AV in the fall and then turned to us to replace their legacy QRadar SIM. Falcon Next Gen SIMs' ease of use, incident workbench, and ease of data ingestion prevailed over a network security vendor and hyperscaler SIM. In total, our cloud identity and next gen SIEM businesses represent more than $1,300,000,000 in ending ARR, growing nearly 50% year over year. While each of these businesses can stand on their own, it's the combination of these technologies when delivered together alongside the broader Falcon platform that continues to propel CrowdStrike forward as the only true single platform on the market today.

Speaker 2

And finally, for the first time, I'm excited to discuss our exposure management business, which has quickly become a market disruptor. CrowdStrike exposure management offers both native vulnerability management for devices and applications coupled with integrated attack surface management. This enables features like attack path analysis and dramatically improved vulnerability prioritization. Our customers are already replacing legacy vulnerability management products at scale. Exposure management wins are easy module attaches to Falcon Flex deals, and we're closing them with regularity as we consolidate out legacy vulnerability management vendors.

Speaker 2

Representative wins include a large digital radio station, a multinational shipping line, and a large health care provider in Asia Pacific. Cybersecurity's leading partners see CrowdStrike as a generational opportunity. Our ecosystem is a key growth lever on our $10,000,000,000 ARR journey, already returning significant dividends. From a deal origination standpoint, partners source 60% of our new business in the fiscal year, validating our partner first strategy and ecosystem investments. In particular, NextGen SIM has attracted the interest of the GSI community given their experience configuring the SIMs of yesterday and the market opportunity to displace these legacy products.

Speaker 2

In addition, the Falcon Flex subscription model fits the GSI selling motion with incentives for customer flex utilization. Our GSI business neared the billion dollar milestone in f y twenty five, growing north of 40% year over year. Leading GSIs like Accenture, Deloitte HCL, Wipro, NTT, TCS, Infosys, and Cognizant are investing in their Falcon Services practice, and I expect us to see continued growth from these partners this fiscal year. Our MSSP go to market continues to expand at hyper growth pace, addressing the needs of small to medium businesses who want their cybersecurity program fully managed. MSSP contributed nearly 15% of our new business in f y twenty five, signifying a route to market which has quickly grown and scaled over the past two years.

Speaker 2

All of our go to market partners benefit from our deep investment and strategic focus on cloud marketplaces. We recently announced being the first cybersecurity ISV to achieve more than 1,000,000,000 in sales on the AWS Marketplace in one calendar year. We also had a noteworthy year with Google Marketplace, where in our first year of partnership, we did over $150,000,000 in deal value out of the gate. We have aligned our partner ecosystem around hyperscaler marketplaces where we see larger deal sizes and faster deal cycle times. In closing, we are cybersecurity's AI native agentic platform that stops the breach.

Speaker 2

Our innovation engine enables us to be a consolidating force for secure AI transformation. Our platform wins. Seven modules are each now individually over $300,000,000 in ending ARR, demonstrating the power of our innovation in driving record adoption and Falcon's multi act platform opportunity that continues to drive growth. And our go to market execution momentum is unprecedented. Businesses are speaking with their wallets, investing in CrowdStrike to secure their futures.

Speaker 2

Today, including our end customers and those of our MSSPs, CrowdStrike is trusted by more than 74,000 organizations as their cybersecurity platform of choice, growing more than 30% year over year. And in q four alone, we've closed new records in every total deal value segment, over 20 deals greater than $10,000,000, over three fifty deals greater than $1,000,000, over 2,300 deals greater than $100,000, and that was all in q four. The data tells me that customers trust CrowdStrike, partners trust CrowdStrike, and the market trust CrowdStrike. I open with everyone loving a good comeback story. Ours was forged by the trust of our customers, the dedication of our team, and the loyalty of our partners.

Speaker 2

For that, I am truly grateful. One thing is certain, in our AI evolving world, cybersecurity will be an increasingly essential ingredient for life in the AI era. And now more than ever, the world needs CrowdStrike. I'll now turn the call over to Bert Podbear, CrowdStrike's CFO.

Speaker 3

Thank you, George, and good afternoon, everyone. As a quick reminder, unless otherwise noted, all numbers except revenue mentioned during my remarks today are non GAAP. CrowdStrike delivered a strong fourth quarter and finish to the year, achieving results above our stated expectations across all guided metrics and demonstrating our ability to adapt to unexpected challenges and emerge stronger. Several key areas from our performance and outlook demonstrate the strength and resilience of our business, including, first, the strength of our results demonstrates the power of our business model and sales execution highlighted by our record total contract value reaching $6,000,000,000 in FY twenty twenty five with growth accelerating to 40% year over year. Second, the successful completion of our Customer Commitment Program, which accelerated platform adoption and deepened customer relationships.

Speaker 3

Our success is demonstrated by FalconFlex customers adding over $1,000,000,000 in Q4 account value and our strong gross retention rate of 97%. And third, as we look ahead, our visibility is improving. We expect net new ARR reacceleration as well as operating margin and free cash flow margin expansion in the second half of FY twenty twenty six. We believe this momentum will set the stage for further acceleration in FY twenty twenty seven over FY 2026 and position us well to achieve our long term targets. For the full fiscal year, we achieved 2329% ending ARR and total revenue growth, respectively.

Speaker 3

Operating income grew 27% year over year to reach a record $837,700,000 or 21% of revenue. Net income attributable to CrowdStrike and EPS grew 3127%, respectively, to reach a record $987,600,000 or $3.93 per diluted share. Free cash flow grew 14% year over year to reach a record $1,070,000,000 or 27% of revenue. For the fourth quarter, we achieved net new ARR of $224,000,000 and ending ARR grew 23% over last year to reach $4,240,000,000 Our fourth quarter results showcase the success of our go to market and single platform strategies. Falcon Flex momentum is increasing, accelerating platform adoption and our strong sales execution positions us to extend our market leadership with the AI native Falcon platform.

Speaker 3

Additionally, we entered the new fiscal year with a healthy pipeline as we continued to see robust demand for both prospective and existing customers. In Q4, we completed our very successful customer commitment program. We estimate that the ARR value of customer commitment packages provided in Q4 was approximately $56,000,000 bringing the estimated value for the fiscal year to approximately $80,000,000 While this exceeded our expectations in Q4 as we concluded the program, the majority of deals that closed with customer commitment packages in the quarter included additional product or flex dollars rather than extended time and professional services. We view this as a positive for the business as it demonstrates customers' trust in our long term partnership and importantly, drives bigger deals and increased levels of platform adoption as customers further consolidate onto the Falcon platform. And as George stated, the success of the program combined with the strong uptake of Falcon Flex gives us confidence in future net new ARR reacceleration as products are deployed, one time discounts expire, and contracts are upsized and renewed.

Speaker 3

This dynamic also limited the impact on Q4 revenue, which was de minimis and well below our $30,000,000 expectation contributing to our strong revenue beat for the quarter. As mentioned earlier, we are seeing substantial increases in Falcon platform adoption, accelerated by our Falcon Flex subscription model. In Q4, subscription customers with six, seven and eight or more modules grew to 48%, thirty two % and twenty one % of subscription customers, respectively. Notably, customers with five or more modules reached an all time high of 67% and on average, new customers are landing with at least five modules. Given this new heightened level of platform adoption on a broad scale, we will discontinue the five or more metric.

Speaker 3

Our Falcon Flex program fueled an acceleration in platform adoption in FY twenty twenty five. With Falcon Flex customers adopting more than nine modules on average, Flex is our future. Additionally, in Q3 of FY twenty twenty five, we announced the launch of CrowdStrike Financial Services, or CFS, and have already closed deals worth over $140,000,000 through the program in FY twenty twenty five. CFS enhances our customers' ability to do larger and longer term deals with us, further enabling future platform adoption and strategic Falcon Flex deals. As our growing module adoption demonstrates, customers are purchasing the Falcon platform for strategic, long term single platform standardization and increasingly leveraging FalconFlex as the vehicle for these purchases.

Speaker 3

In addition to accelerating module adoption, our strong customer relationships underpin our exceptional customer retention. Gross retention in Q4 remained high at 97%, and our dollar based net retention rate was 112%, reflecting the impact of customer commitment packages. Given the size and scale of our business, we're very pleased with our net retention. Moving to the P and L. Total revenue grew 25% over Q4 of last year to reach $1,060,000,000 ahead of our expectations.

Speaker 3

Subscription revenue reached a new milestone of over $1,000,000,000 in quarterly revenue, growing 27 year over year to $1,010,000,000 while professional services revenue was $50,200,000 Total gross margin was 78% and subscription gross margin was over 80% of revenue, both in line with last year's Q4 performance. Total non GAAP operating expenses in the fourth quarter were $607,800,000 compared to $448,100,000 in the prior year. In Q4, we continued our disciplined approach to investing, prioritizing investments in platform innovation and resiliency. Our customer first mindset is central to our approach to innovation and the driving force behind the success of our single platform strategy and industry leading retention rates. In the fourth quarter, non GAAP operating income grew to $217,300,000 and operating margin was 21%, well ahead of our guidance.

Speaker 3

Our investments in AI are driving significant internal efficiencies, enabling our teams to focus on high value activities across the business. In Q4, we saw strong employee adoption of AI capabilities with average reported time savings per employee of over one full workday a month, equating to more than 24,000 work weeks saved if annualized across our entire workforce. We are also leveraging AI to automate key sales processes and streamline reporting and workflow. By automating the hours of manual work involved in these tasks, we can deliver new efficiencies in the business while continuing to execute on growth initiatives. GAAP net loss attributable to CrowdStrike was $92,300,000 and included $49,900,000 of tax expenses related to acquisitions and $21,000,000 of incident related expenses with the remaining loss related to the ongoing impact of one time programs for employees and one time incentives for the sales team.

Speaker 3

Non GAAP net income attributable to CrowdStrike grew 10% over Q4 of last year to $261,000,000 or $1.03 on a diluted per share basis, well ahead of our guidance. Cash and cash equivalents grew to $4,320,000,000 Free cash flow was $239,800,000 or 23% of revenue. Incident related expenses impacted Q4 free cash flow by approximately $22,000,000 The $93,000,000 in deals financed through CrowdStrike Financial Services in Q4 had a de minimis impact to the quarter's free cash flow as expected. Moving to our outlook and modeling notes. The fundamentals of our business remain strong and we remain committed to our long term target model.

Speaker 3

We are encouraged by, first, best in class customer retention rates and the success of our concluded customer commitment program second, continued strong and rapid adoption of Falcon Flex, which is accelerating module adoption rates, helping drive deeper strategic relationships with our customers and positioning us for long term growth and third, a robust demand environment across multiple large and growing markets, including next gen SIM, where we are in the early stages of disrupting a large legacy market and newer markets, such as a Gentek AI for cybersecurity where our unique data advantage positions us as the natural innovation and category leader. Visibility is improving as we move further from the sun. While we do not guide to net new ARR, our assumptions include a typical Q4 to Q1 seasonal decline of approximately 21% to 23% quarter over quarter. The net new ARR acceleration we expect in the second half of FY 'twenty six sets the foundation for further acceleration in FY 'twenty seven over FY 'twenty six as we scale the business to our goal of $10,000,000,000 of ending ARR by FY 'thirty one. It also sets the stage for operating and free cash flow margin improvement in the back half of the year, particularly in Q4.

Speaker 3

Our operating margin guidance reflects the upfront investments we're making in key areas of the business, which we expect to yield clear ROI by the back half of FY 2026, fueling our growth and innovation. The high end of our guidance implies a fiscal year twenty twenty six non GAAP operating margin of approximately 21% and we plan to return to GAAP profitability in Q4. Looking beyond this year, we plan to deliver 23% non GAAP operating margin in FY 2027 as we quickly ramp to our target non GAAP operating model by fiscal twenty twenty nine, which includes a free cash flow margin target between 3438%. Please note, in Q1 of FY twenty twenty six, we expect cash impacts of approximately $73,000,000 for outage related costs, including incremental sales compensation as well as $43,000,000 due to the impact of flexible payment terms provided under customer commitment packages for deals closed in the back half of FY 2025. We expect to exit fiscal year twenty twenty six with Q4 free cash flow margin at approximately 27% and to return to 30% or more free cash flow margin on an annual basis in FY 2027.

Speaker 3

Moving to our guidance. For the first quarter of FY twenty twenty six, we expect total revenue to be in the range of $1,100,600,000 to $1,106,400,000 reflecting a year over year growth rate of approximately 20%. We expect non GAAP income from operations to be in the range of $173,100,000 to $180,000,000 and non GAAP net income attributable to CrowdStrike to be in the range of $162,100,000 million dollars to $167,500,000 We expect diluted non GAAP net income per share attributable to Krauschweig to be approximately $0.64 to $0.66 utilizing a weighted average share count of approximately $254,000,000 shares on a diluted basis and a 22.5% non GAAP effective tax rate, which is a $0.19 impact to EPS at the midpoint. For the full fiscal year 2026, we currently expect total revenue to be in the range of $4,743,500,000 to $4,805,500,000 reflecting growth rate of 20% to 22% over the prior fiscal year. Non GAAP income from operations is expected to be between $944,200,000 and $985,100,000 We expect fiscal twenty twenty six non GAAP net income attributable to CrowdStrike to be between $851,200,000 and $883,000,000 Utilizing approximately two fifty six million weighted average shares on a diluted basis and a 22.5% non GAAP effective tax rate, which is a $0.98 impact to EPS at the midpoint, we expect non GAAP net income per share attributable to CrowdStrike to be in the range of $3.33 to $3.45 Please refer to our earnings release and earnings presentation for additional details regarding our changes in presentation of non GAAP measures related to tax and presentation and additional modeling notes.

Speaker 3

George and I will now take your questions.

Speaker 1

Operator, we are now ready for questions.

Operator

Thank you. If you would like to ask a question, please click on the raise hand button, which can be found on the bar on the bottom of the Zoom window. You may remove yourself from the queue at any time by lowering your hand. Our first question will come from Saket Kalia with Barclays. Please unmute your line.

Speaker 4

Okay, great. Hey, good afternoon, folks. Thanks for taking my question here and nice finish to the year.

Speaker 5

Thank you, Saket.

Speaker 4

Sure. George, maybe for you. We heard on the call that FalconFlex is the future. I was wondering if you could just talk a little bit about how FalconFlex is driving better value for customers, And and any examples you have of maybe how current customers are growing their existing spending with CrowdStrike through Falcon Flex?

Speaker 5

Sure. Thanks, Zach. And, as we've talked about for some time, FalconFlex was really born out of customer demand, wanting to consolidate more with CrowdStrike and wanted to create a flexible way to procure more modules. So when we think about FalconFlex, again, it opens the entire product catalog up to our customers and then they can add new modules without necessarily going through a procurement cycle. They commit, the more they commit, the better the discounts and they can basically use that very seamlessly in their environment.

Speaker 5

So, let me just give you one example. Last quarter, we had a large transportation company where we consolidated three vendors, cloud, SIM and multiple endpoint vendors, and we moved them to a flex. And in this particular case, large enterprise, we increased the ARR by 67%. And that's just one of many examples that we've seen. And in general, what we're finding is that customers are, as we go through the demand plan, they're ahead of schedule in their demand plan in consuming the Flex, which is, which is a great stat for us, and we we call out some of those, in the earning script.

Speaker 5

So, excited about Falcon Flex, and it's our really market leading way to engage with customers as we go forward.

Speaker 1

We are ready for our next question.

Operator

Our next question will come from Brian Essex with JPMorgan. Please unmute your line.

Speaker 6

Okay. Hopefully, you can hear me. Thank you for taking the question. I guess I want to talk about emerging products. And if I look at the growth rate, it seems as though cloud and identity decelerated a faster rate than log scale.

Speaker 6

Is that a function of the incentives and how customers may have spent it in cloud and identity as opposed to log scale, which may have more ingestion costs associated with it? Just maybe if you could give a little bit of color on how your customers are consuming those so you understand the sustainability of those those emerging segments. Thank you.

Speaker 5

Yeah. Good question. So, I just recently, as you you may have seen in our threat report, we talked about identity and how critical it is to customers. Since 2019, as an example, 40% of the attacks were identity based or non malware based. And, in the current report, 79% are non malware based.

Speaker 5

A lot of it is around identity. So what we've seen as part of the CCP package is that identity and cloud have been a big driver of what people have been taking, because they know it's so critical for their protection going forward. So, you know, when we look at that and as we talked about the back half of the year, CCP sort of elements will be burning off. And obviously, it's a it's a great opportunity to be able to renew, what they're already using and, how we're already protecting them. So we view it as a net positive in, seeding the customer base.

Speaker 1

And we're ready for our next question, please.

Operator

Our next question will come from Gabriela Borges with Goldman Sachs. Please unmute your line. Hi. Good afternoon. Thank you.

Operator

Bert, I wanted to ask you a little bit about how you thought about guidance for the year because we had the pause in the external demand gen around the July timeframe. We had the enterprise sales cycles pushing out by, I think you said, 15%. Maybe just talk us through how did you think about the puts and takes to the back half of the year as some of those dynamics reverse? And then to Brian's earlier question, you also have the CCP contracts renewing. Maybe just walk us through how you thought about some of those dynamics.

Operator

Thank you.

Speaker 3

Yeah, sure, Gabriela. Thanks for that. So, you know, I think George touched on some of it already with respect to the CCP programs, the one time incentives with respect to those. Coming due in the back half of next year gives us confidence that we're going to be able to have take advantage of the opportunity to upsell our customers. They're already using it.

Speaker 3

They're already loving it. It's going to be easy for them to renew. And of course, as we continue to think about new products that we're coming to market with, it's a great discussion to have. We've already gone through, as George said, the demand plan. We're ahead of the demand plan in terms of where customers are at in terms of drawing down from their Flex pools.

Speaker 3

So, this gets us excitement about our ability to actually go and have that reacceleration in the back half. And I think that it really talks to not only the emerging products that we've had great success in, but even the rest of our products. We have 29 modules to sell to our customers. We have this opportunity to upsell them to take out costs and show the value of CrowdStrike. That's why we get excited about the reacceleration of net new ARR in the back half.

Speaker 1

And we'll move to our next question, please.

Operator

Our next question will come from Tal Liani with BofA. One moment please. Tal, your line is now open. Please feel free to unmute.

Speaker 7

There you go. Thank you. I have two questions, so I'll choose one. Contribution from existing customers. If I look at your GRR and NRR and I calculate contribution from existing customers versus new customers, your performance on new customers is very consistent.

Speaker 7

You're growing between 10% to 11% a year from new customers. But the growth from existing customers had gone down, which means there are some there is a decline in the growth in upselling to existing customers. So you started the year with Q1 at 21% growth coming from existing customers and you ended the year with 15% and every quarter it goes down. Can you talk about your ability to take NRR back up, which is the function of sales to existing customers or upsell to existing customers? Thanks.

Speaker 3

Sure, Tal. Thanks. So, there's a few dynamics that are impacting, obviously, dollar based advertising. Obviously, our CCP had an impact. But remember, you know, DVR is a noisy metric for us.

Speaker 3

You know, as you know, we don't manage to it. In any given quarter, we can land bigger, longer deals, which does put pressure on our dollar based on retention. George talked about what Flex does to that environment. Flex gives us the opportunity to enter into larger, longer deals, which could impact, DB and R, but that's a good thing for us. We want customers to engage with us with bigger deals, longer deals.

Speaker 3

That's exciting. Conversely, we now have a bigger base to sell into. We have this opportunity to to go after more logos. So, you know, in any given quarter, we're going to get different dynamics and different pressures. But I think the good news is we've got a lot of room with respect to new logos, and we've got this ever expanding base where we can sell into an upsell and cross sell.

Speaker 3

So that's how I that's how we look at that dynamic.

Speaker 1

And we are ready for the next question.

Operator

Our next question will come from Joel Fishbein with Truist Securities. Please go ahead.

Speaker 6

Thanks for taking the question. Hey, George. Thanks for the color around AI and AI strategy in Charlotte. Would just love to get a little bit more color around pricing and competitive environment around the AI security. That'd be really helpful.

Speaker 5

Thank you. So, yeah, I mean, when you look at Charlotte AI and what we've been able to do from an agentic, AI perspective, we talked about some of the efficiencies in terms of hours saved. We've talked about taking a level one analyst turning it into a level three. And with Falcon Flex, we have a lot of attach of Charlotte, in these deals, and we continue, to in, wired into our workflows, which is a key part of being Agentic. So I think overall, we're getting feedback from customers.

Speaker 5

They like it. They're using it. And, one of the interesting facts that has come out since we released this is that we certainly geared it towards that level one analyst, but we're actually finding that the level three analysts are using it even more because they they understand how to prompt it and and get information out of it. So overall, it's, I think been, very encouraging, the uptake, and, certainly, it continues, to perform and save our customers a tremendous amount of time and effort. So, we'll have updates on Charlotte, but, you know, full steam ahead.

Speaker 5

And as you and I have talked about in the past, you know, it's still early innings in this, in this agentic world, and, we continue to lead the way.

Speaker 1

And we're ready for the next question.

Operator

Our next question will come from Matt Hedberg with RBC. Please unmute your line.

Speaker 4

Great. Thanks for taking my questions, guys. George, for you, you know, exposure management is near and dear to your heart. And I could you could sense the enthusiasm with some of your early wins. I'm just curious to put a finer point on that.

Speaker 4

Are we talking about full, like, network endpoint replacements there? I just just want to make sure that I understand, like, the comp the composition of your platform versus some of the pure plays.

Speaker 5

Yes, we are. When we look at our technology there, whether it's exposure management, vulnerability management is an element of exposure management. We've done some acquisitions. We've had some capabilities for a while, particularly on the agent side. And, we have released the ability to actually scan over the network, which was a missing element that we didn't have in the past.

Speaker 5

So, that really allows for fuller replacements in a competitive environment. And, you know, our customers have been asking for it. We focused on the agent first. Of course, that's where we, you know, where our strength is. And now with the ability to scan, it really has unlocked the potential to replace a lot of the competitive products in that market.

Speaker 5

So we remain excited. It's fully integrated. It leverages, you know, the full base of data that we have in our AI and workflow infrastructure, and we'll continue to to give you updates on it because, we think it's a real added element to the repertoire of the modules that we have, and we're we're proud to tell you about the success.

Speaker 1

And we're ready for the next question.

Operator

Our next question will come from Andrew Nowinski with Wells Fargo. Please go ahead.

Speaker 8

Great. Thank you, and congrats on a really strong recovery quarter here. I'd like to just dig a little bit deeper on your net new ARR. If If you could just clarify how much the Adaptive Shield acquisition contributed this quarter in Q4? And then if you add back the $56,000,000 you talked about in CCP, it looks like net new ARR was still down about 1% year over year, but gross retention was unchanged.

Speaker 8

So it doesn't look like churn increased at all. I'm just I'm wondering if you think customers might still be holding back on spending as a reason why net new is still down 1%. Thanks.

Speaker 3

Hey, Andrew. So, let me take the churning contraction question first. So, basically, for us, what we saw for CCP, any churning contraction with respect to CCP was really de minimis. There was not much there at

Speaker 6

all.

Speaker 3

And with respect to churn and contraction overall, it was really in line with what we've been seeing. There's been no anomalous behavior with respect to churn and contraction. So we're actually really excited about where we're headed with respect to net new ARR, and certainly with the reacceleration in the back half. You know, with respect to with respect to, Adaptive Shields, it was a very small number with respect to ARR. So it's a diminos from our perspective.

Speaker 3

But when you think about the opportunity, that's a very different story, and I'll turn it over to George to talk about the opportunity with the Appetit Shield.

Speaker 5

Yeah. This is one where our customers are really excited. The day it was announced, all of our flex customers asked when they can have it. And twenty days later, it was part of their rate card. So we've seen an amazing adoption of it in the early days here.

Speaker 5

Obviously, we'll continue to give you updates, but it's a fantastic technology and something that's really needed in the environment today.

Speaker 1

And we're ready for our next question.

Operator

Our next question will come from the line of Fatima Boolani with Citi. Please go ahead.

Speaker 9

Good afternoon. Thank you for taking my question. George, you referenced the staggering in period deal value that you have contracted for, for FalconFlex specifically. I specifically wanted to ask you about the FalconFlex dollars that you have given in kind to some of your CCP customers. And I wanted to get an understanding of how quickly they're burning through those in kind flex dollars that you've given them, such that it is triggering earlier renewal, earlier upsell events, and if that was a contributing factor to how robust the, in quarter deal value was for Falcon Flex.

Speaker 9

Thank you.

Speaker 5

Sure. Well, what we've seen, as we've moved to FalconFlex and and certainly CCP is just leveraging the the licensing model of FalconFlex to to, provide some value back to our customers. But as Bert and I have talked about the back half of the year, we certainly, you know, look towards that as where those Falcon Flex CCP dollars would burn off. A lot of our sellers now, again, are focused not on just selling new modules, but demand planning with our customers. And, we're seeing the demand plans be ahead of schedule.

Speaker 5

Right? So that's a good thing. And, obviously, the more they consume within a shorter period of time, the better for us. And and, obviously, we wanna be there to provide value in any of the modules we have or, you know, some of the newer ones, like Shield. So any any other comments on that, Bert?

Speaker 3

Yeah. Look, I I think, you know, we have this great opportunity in front of us. I think, remember, the one thing that really gives us more excitement about the back half that George was referring to is we still have a lot of customers to talk about Flex with. Right? We have a subset that we've already dealt with, but we've got a, you know, a whole lot more, that we can go after that are still, you know, coming up for renewal or, you know, talking to them about their demand plan.

Speaker 3

So we're excited about that that opportunity that's in front of us.

Speaker 1

And we'll take our next question.

Operator

Our next question will come from Greg Moskowitz with Mizuho. Please go ahead.

Speaker 10

Okay. Thank you very much for taking the question. George, exceeding a billion dollars in sales through AWS Marketplace in a twelve month period, I mean, that's really stunning. And I'm not sure everyone remembers that you only eclipsed a billion in lifetime sales on AWS in October of twenty twenty three. So clearly, the growth rate that you're showing here is still very high.

Speaker 10

But, you know, given that we're running into the law of larger numbers, it would just be helpful to get your perspective on the growth outlook for CrowdStrike on AWS Marketplace over the next two to three years. Thanks.

Speaker 5

Well, sir, certainly, you remember it. So thanks for calling that out. And, AWS has been a tremendous partner for us. Not only do we work with them, but we work with our other partner network in conjunction with them. Right?

Speaker 5

So it's important to make sure that we've got all the partners, you know, moving in the right direction. I only see it going up. I mean, it is the way customers want to consume and you have to look at the cloud environments and hyperscalers right now, the larger enterprises are committing more into these marketplaces and cloud providers. And the beauty of the marketplace is that customers can use those dollars to burn down and procure CrowdStrike. So we only see opportunity in this marketplace, and we see it certainly outside of The U.

Speaker 5

S. A lot of it has been focused in North America, but I think the rest of the world really opens up particularly when you look at some of the cloud environments, in different nations and sovereign data requirements and things of that nature. So we're very optimistic, with our partner and not only AWS. Right? You you we talked about, GCP and others, that have been fantastic routes to market.

Speaker 5

I think it is really one of the future ways that customers will continue to procure through CrowdStrike.

Speaker 1

And we're ready for our next question.

Operator

Our next question will come from Joseph Gallo with Jefferies. Please go ahead.

Speaker 4

Hey, guys. Thanks for the question. It was awesome to see the $600,000,000 of cloud ARR growing 45%. Can you just talk through that competitive landscape? Has that stabilized?

Speaker 4

You know, one of your biggest cloud competitors noted on their earnings call that customers are gravitating towards workload protection and agent architecture. Is that something that you're seeing as well? And then, you know, given your strength and workload protection, when, if ever, you expect customers to consolidate on a cloud solution? Thanks.

Speaker 5

Yeah. I I think that's absolutely right. When you look at, the market, and you've got CSPM and you got work workload protection, I mean, CSPM is a great technology, but it's it's more of a reporting and compliance as opposed to stopping the breach. So if customers are looking to stop the breach, you're going to need a workload protection. And of course, that is our DNA.

Speaker 5

We've been working on that for the better part of a decade and it's very well refined. And we've earned a trusted spot in running in the most critical infrastructure on these workloads. So we continue to see consolidation in these areas. We certainly have expanded our CNAV capabilities across, you know, whether it's CSPM or ASPM or DSPM, etcetera, lots of PMs in there. But we have all of those and we are routinely consolidating customer spend in that area.

Speaker 5

So we're excited about, the $600,000,000 milestone and the success that we're having in the cloud environments with our customers.

Speaker 1

Great. And we're ready for our last question, please.

Operator

Our last question will come from Patrick Colville with Scotiabank. Please go ahead.

Speaker 11

All right, guys. Thank you so much for taking my question. And I guess I want to ask about the bottom line. We haven't had any questions on the bottom line. So, you know, guiding to 20% operating profit margin in fiscal twenty six, I guess, can you just talk us through the puts and takes there?

Speaker 11

You know, is that because of the kind of drag on the first half before the reacceleration in the back half? And then did you soft guide, but to 23% op margins in fiscal twenty seven? So I guess a snapback from from from from next year.

Speaker 3

Yeah. Thanks, Patrick. So, let me start with the other one. We had a very successful CCT program and our profitability guidance reflects some of the sales and marketing costs of FY '25 CCT packages amortized over the entire year. So, that's going to impact our margin.

Speaker 3

We also have some one time upfront investments in key areas of the business that we need to bolster our increasing scale. Some of those could be related to the fact that we are fully reigniting our marketing initiatives post the outage. We've got innovation across high growth and emerging products across areas, including cloud security, identity protection, next gen SIM and AI. We also have ramping investments in our internal use of AI tools. We feel that we can get significant savings in the out periods by the investments that we're going to make today.

Speaker 3

We also have increased in our investments and our platform resiliency, which we believe will be a competitive advantage for us when we're going up against some of our competitors with respect to our you know, being the best in not only the best in class in terms of security, but the resilience behind that as well. And then finally, I want to end by saying we expect operating margin and free cash flow margin to expand in the second half of FY twenty twenty six.

Speaker 1

Thank you all for joining. Please, I just wanted to make one reminder to please refer to our earnings presentation, which is posted on our investor relations website. And for additional modeling notes as well as the details on the changes in presentation of non GAAP measures. With that, I'll turn the call over to George for closing remarks.

Speaker 5

Thank all of you for your time today. We appreciate your continued support and look forward to seeing you at our upcoming investor events. Have a great day.

Earnings Conference Call
CrowdStrike Q4 2025
00:00 / 00:00