With $4 billion in ARR, 78% gross margins, 120%+ net retention, and 75% of customers on 5+ modules, CrowdStrike is winning the cybersecurity platform consolidation war.
CrowdStrike's Falcon platform isn't just an endpoint security product anymore. It's a cybersecurity operating system — a single-agent architecture that now spans 28 modules covering identity protection, cloud security, log management, and IT operations. The company's annual recurring revenue crossed $4 billion in fiscal 2025, growing 30%+ while the rest of enterprise software decelerated.
The thesis is straightforward: CrowdStrike is winning the platform consolidation war in cybersecurity. Enterprises are tired of managing 30-50 point security products. Falcon replaces a dozen of them with a single agent, a single console, and a single data lake. That consolidation dynamic — which we first identified in our coverage two years ago when CrowdStrike crossed the $2 billion ARR threshold — is now accelerating.
CrowdStrike's architecture creates a compounding advantage that's difficult to replicate. Every Falcon module installed on an endpoint generates threat telemetry data. That data feeds CrowdStrike's AI models, which improve detection accuracy, which drives more module adoption, which generates more data. It's a textbook flywheel.
The numbers prove it's working. Customers using 5+ modules grew from 60% to over 75% of the base in the past two years. Customers using 7+ modules — the true platform consolidators — now represent over 35% of ARR. Each additional module adds roughly $2-3 in ARR per endpoint with near-zero incremental cost, which is why gross margins have expanded from 73% to 78% as the platform scales.
The July 2024 outage — the Falcon content update that caused global IT disruptions — was supposed to be the existential risk event. CrowdStrike's stock dropped 40%. And yet, customer churn remained below 2% in the following two quarters. That retention rate through a crisis is perhaps the strongest evidence of the platform's stickiness. Enterprises didn't leave because switching costs are enormous and because no alternative offers the same breadth.
Amazon's advertising business followed this identical trajectory — becoming the profit engine while everyone obsessed over the core product. CrowdStrike's platform expansion is doing the same, turning a security vendor into an IT infrastructure company.
TickerXray Report
Get the complete CrowdStrike report with all 12 quantitative models, AI-generated investment thesis, and real-time data.
At roughly $90 billion in market capitalisation and a forward PE of 70x, CrowdStrike isn't cheap. The trailing PE is meaningless given the company only recently turned profitable. The better metric is EV/revenue, which sits at roughly 23x — expensive by any traditional measure.
But traditional measures miss the unit economics. CrowdStrike's net dollar retention rate exceeds 120%, meaning existing customers grow their spending by 20%+ annually without any new logo additions. The gross margin of 78% is software-grade. Free cash flow margin is running at 30%+, generating over $1 billion annually. For a company growing 30% with 78% gross margins and 30% FCF margins, the comparable valuation set isn't cybersecurity peers — it's Salesforce, ServiceNow, and the best enterprise platform companies in their high-growth phases.
Salesforce at the same revenue scale ($4 billion ARR) traded at 15-18x forward revenue. CrowdStrike trades at roughly 20x. The premium reflects faster growth and better margins, but there's a case that the premium has gotten too generous. The risk is paying 70x forward earnings for 30% growth in a macro environment that could slow enterprise IT spending.
CrowdStrike is building a generational cybersecurity platform. The flywheel is spinning, the retention rates are extraordinary, and the TAM expansion from endpoint security into broader IT operations is just beginning. At 70x forward earnings, we acknowledge the stock prices in a lot of good news — but for a company with 30% growth, 78% gross margins, and 120%+ net retention, we think the premium is justified on a 3-year view. Fair value on a 2027 basis sits at $450-480, assuming revenue growth sustains at 25%+ and operating margins expand to 25%. We're buyers on any pullback to $320-340 and holders at current levels.
Full forensic analysis of CrowdStrike
+ 6 more models included
150,000+ stocks covered
Global coverage across 60+ exchanges. Every report includes all 12 quantitative models and AI analysis.
View plansEvery report runs 12 quantitative models and generates an AI investment thesis. From Piotroski scores to manipulation detection -- get the full picture in seconds.
12 forensic models
Piotroski, Altman, Beneish, DuPont & more
AI investment thesis
Synthesized outlook on every stock
Manipulation detection
Spot red flags before they hit the news
150,000+ tickers
Global coverage across 60+ exchanges
Expected return
Forward return projections for every stock
Real-time data
Live prices, insider trades, news sentiment
Free accounts get 1 report per month. Pro gets unlimited.
CrowdStrike at $96 billion market cap versus Cloudflare at $59 billion — both are growing revenue at 25%+, both are unprofitable on a GAAP basis, and both claim to be the platform that wins cybersecurity. One is overvalued.
Customer churn from the July 2024 outage has been negligible, but at 80x earnings and 15x revenue, CrowdStrike is priced for perfection again.
The stock has recovered to near all-time highs, but $1-3B in potential litigation liability and Microsoft's kernel access restrictions create downside risk the market isn't pricing at 60x forward earnings.