CrowdStrike sells subscriptions to its Falcon platform, a cloud-based security system that watches over computers, cloud systems, and employee identities to stop hackers before they cause damage. Customers pay a recurring fee based on how many devices they protect and how many security modules they add on. The more modules a customer uses, the more they pay, and the harder it becomes to switch to a competitor. Subscription fees made up 95% of total revenue in fiscal 2026, with the remaining 5% coming from professional services like incident response. The diagram below traces where the money goes.
How CrowdStrike Makes Money
flowchart LR
A["Enterprise Customers
Across All Segments"] -->|"Subscribe to Modules"| B["Falcon Platform
Subscription Revenue
4.6B USD"]
B --> C["Unified Data Collection
via Single Lightweight Sensor"]
C --> D["Security Cloud
AI Training & Intelligence"]
D --> E["Detection & Response
Accuracy Improves"]
E --> F["Network Effect
More Customers Benefit"]
F --> A
B --> G["Professional Services
0.2B USD"]
G --> H["Managed Detection Response
Falcon Complete OverWatch"]
H --> A
E --> I["Cross-Sell Additional
33 Cloud Modules"]
I --> B
B --> J["Operating Cash Flow
1.6B USD"]
J --> K["R&D Investment
New Modules & AI"]
K --> D
Five years of financials tell a consistent story about scale and cash generation. Revenue grew from $1.5 billion in fiscal 2022 to $4.8 billion in fiscal 2026. Operating cash flow followed the same path, rising from $0.6 billion to $1.6 billion over the same period. Gross margin held steady in a tight band, sitting at roughly 73% to 75% each year. That kind of stability means the cost of delivering the product does not balloon as the customer base grows, which is an important signal for a subscription business.
CrowdStrike Annual Revenue (Fiscal 2022 to 2026)
Revenue in billions of US dollars. Source: XBRL financials.
The cash picture is strong, but the profit picture is more complicated. CrowdStrike earned a net profit of $72.2 million in fiscal 2024, then swung to a net loss of $15.2 million in fiscal 2025 and a deeper net loss of $162.5 million in fiscal 2026. The company has an accumulated deficit of $1.3 billion as of January 31, 2026. The losses come not from a shrinking business but from heavy spending on sales, marketing, and research. Still, losses are losses, and the path to consistent profitability is not yet clear.
What Is Annual Recurring Revenue?
Annual Recurring Revenue, or ARR, is the total value of active subscriptions if you added them all up for one year. It is a key number for subscription businesses because it shows how much predictable income is already locked in. A rising ARR means customers are renewing and expanding. A falling ARR is an early warning sign of trouble.
Customer demand, measured by ARR, grew 24% in fiscal 2026 to reach $5.3 billion. That means the subscription pipeline is still expanding even after the major software incident in July 2024. The dollar-based net retention rate, which tracks whether existing customers spend more or less than they did a year ago, came in at 115%. A number above 100% means existing customers, on average, are spending more each year, not less.
$5.3B
Annual Recurring Revenue as of January 31, 2026, up 24% year over year
2024
crisis
The July 19 Software Crash
On July 19, 2024, a faulty Falcon sensor update crashed roughly 8.5 million Windows computers worldwide, disrupting airlines, hospitals, banks, and government services. CrowdStrike responded by creating the Falcon Flex program, offering customers extra modules, discounts, and flexible payment terms. Falcon Flex grew to over $3.2 billion in value by late 2025, suggesting most customers chose to stay. But the incident triggered multiple lawsuits, government inquiries, and ongoing legal costs that the company says will continue into future periods.
The July 19 incident created risks that go beyond reputation. The company now faces securities litigation, consumer class actions, and derivative claims against its officers and directors. Legal and professional services costs linked to the incident pushed general and administrative expenses up 39% in fiscal 2026 compared to fiscal 2025, with $82.4 million of that increase directly tied to the crash. Insurance may not cover all of these costs, and the company has said it cannot yet estimate the full financial exposure.
What Is a Net Retention Rate?
A dollar-based net retention rate measures whether existing customers are spending more or less than they did a year ago. A rate of 115% means that for every $100 a group of customers spent last year, those same customers are now spending $115. It captures renewals, expansions, cancellations, and contract reductions all in one number.
Beyond the legal risks, the business faces structural threats worth naming directly. First, the entire Falcon platform runs on Amazon Web Services and company-operated data centers. If AWS experiences a major outage or ends its agreement with CrowdStrike, customers could lose access to the platform entirely. Second, customers typically sign contracts lasting one to three years. That means churn from the July 2024 incident may not show up in the numbers until those contracts come up for renewal. The company itself has warned that sales cycles are now longer and that some customers have deferred purchases or refused to renew.
$1.3B
Accumulated deficit as of January 31, 2026, even as operating cash flow reached $1.6 billion
There is also a financial tension inside the numbers. Free cash flow reached $1.1 billion in fiscal 2025 and $1.3 billion in fiscal 2026, which looks healthy. But a large share of that cash is collected upfront from customers who prepay their subscriptions. As of January 31, 2026, deferred revenue, meaning money collected but not yet recognized as revenue, stood at $4.8 billion. That cash is real, but it represents a future obligation to keep delivering the service. If customers cancel before their contracts end, some of that cash may have to be returned or credited.
Twenty-five of the fifty US states have standardized on CrowdStrike's platform at the enterprise level, according to the company's 10-K. Government contracts tend to be sticky, but they also come with compliance requirements and political exposure that private-sector contracts do not.
$72.2M profit
Fiscal 2024 Net Income
$162.5M loss
Fiscal 2026 Net Loss
CrowdStrike returned to losses after fiscal 2024 profitability, driven by rising expenses and costs tied to the July 19 incident.
The Bet
CrowdStrike's financial logic assumes that the July 19 crash was a one-time operational failure and not evidence of a deeper reliability problem. If customers continue to renew and expand at current rates, the $5.3 billion ARR base compounds into sustained revenue growth that eventually outpaces the spending needed to acquire and retain customers. But if the crash permanently damaged trust with a meaningful portion of the customer base, the wave of contract renewals coming over the next one to three years could reveal churn that the current metrics have not yet captured. The cash engine looks strong today precisely because customers paid upfront before some of them decided to reconsider.
Open question
CrowdStrike's revenue is growing, its cash flow is real, and most customers appear to have stayed after the July 2024 crash. But the legal costs are ongoing, the net loss widened in fiscal 2026, and contract renewals from the crash period have not all come due yet. When those renewals arrive over the next one to three years, will the retention rate hold at 115%, or will the true cost of July 19 finally show up in the numbers?
Compiled · 10-K · FY2026
Product Defect and Reputational Harm
On July 19, 2024, a faulty software update for the Falcon sensor caused Windows computers to crash. This incident has resulted in major costs, lost customers, contract cancellations, and ongoing lawsuits including securities litigation and class actions. The company expects continued negative effects on sales, customer relationships, and reputation.
Legal Liability from July 19 Incident
The company faces multiple lawsuits related to the July 19 Incident, including securities litigation, derivative claims against officers and directors, and consumer class actions. Governmental authorities have made inquiries and may impose penalties or consent decrees. Insurance may not cover all costs and liabilities, creating potential material financial exposure.
Financial Performance Deterioration
The company reported net losses of $162.5 million in fiscal 2026 and $15.2 million in fiscal 2025, after profitability of $72.2 million in fiscal 2024. With an accumulated deficit of $1.3 billion as of January 31, 2026, and ongoing July 19 Incident costs and customer commitment packages extending revenue recognition, sustained profitability is uncertain.
Customer Retention and Renewal Risk
Customers may not renew subscriptions or purchase additional cloud modules when contracts expire, typically in one to three years. The July 19 Incident has caused some customers to defer purchases, terminate contracts, or refuse renewals. Customer retention depends on satisfaction, pricing, and economic conditions, and any decline directly harms future revenue.
Dependence on Cloud Infrastructure Providers
The Falcon platform relies on Amazon Web Services and company-operated colocation data centers. Service disruptions, outages, or termination of contracts by these providers could prevent customers from accessing the platform, damage the company's reputation, and cause customer losses. The company has low control over many infrastructure risks.
10-K Item 1A · Risk Factors
