Customer churn from the July 2024 outage has been negligible, but at 80x earnings and 15x revenue, CrowdStrike is priced for perfection again.
In "CrowdStrike's Risks Are Still Unpriced After the Recovery," we argued that the July 2024 global outage left residual risks — customer churn, litigation liability, and reputational damage — that the stock's rapid recovery was not pricing in. The shares had bounced from $218 to $310 within months of an incident that knocked out 8.5 million Windows devices worldwide.
Eight months later, we were partially wrong. Customer churn has been minimal. But we were right about the risk repricing — it just came from a different direction.
The customer retention data has been remarkably strong. CrowdStrike's net retention rate held above 115% through the post-outage quarters, and the company disclosed that fewer than 1% of customers downgraded or cancelled contracts citing the outage. The platform consolidation thesis — customers buying more modules, not fewer — remained intact.
What we underestimated was the legal exposure. Delta Air Lines filed a $500 million lawsuit against CrowdStrike in October 2024, and the class action consolidated in Texas federal court has grown to represent an estimated $2-3 billion in claimed damages. The stock has digested most of this, but the litigation tail extends through 2027 at minimum.
TickerXray Report
Get the complete CrowdStrike report with all 12 quantitative models, AI-generated investment thesis, and real-time data.
CrowdStrike now trades at approximately 80x trailing earnings and 15x forward revenue. The cybersecurity TAM is enormous — $100 billion+ by most estimates — and CrowdStrike is gaining share. None of that is in dispute.
The problem is that the stock has rallied past $380, putting it back above its pre-outage highs. At these levels, the valuation assumes revenue growth of 25%+ annually for the next three years AND operating margin expansion to 30%+. Both are achievable. But the margin of safety for any execution stumble is essentially zero.
Historically, cybersecurity stocks that have traded above 15x forward revenue have delivered negative returns over the subsequent 12 months roughly 60% of the time. Palo Alto Networks in early 2021 and Fortinet in late 2022 are the relevant precedents — both corrected 25-35% from similar valuation levels before finding floors.
Annual recurring revenue hit $4.24 billion in Q4 FY2026, growing 28% year-over-year. Module adoption continues to expand — customers with 5+ modules now represent 68% of the base, up from 60% a year ago. Free cash flow margins remain excellent at 32%, generating over $1.4 billion annually.
The concern is not the business quality. It is the price being paid for that quality. At $57 billion market cap, CrowdStrike is valued at approximately 13.5x ARR. The median cybersecurity company trades at 7-8x. The premium is justified by CrowdStrike's growth rate and platform breadth — but it compresses quickly if growth decelerates to 20%.
Our previous thesis flagged outage-related churn as the primary risk. That risk has largely dissipated. The updated risk is simpler: valuation. At 80x earnings and 15x revenue, CrowdStrike is priced for flawless execution in a sector where disruption cycles are measured in months, not years.
We remain cautious above $380. A correction to $280-300 — roughly 11x forward revenue — would bring the risk-reward back into balance. The business is genuinely excellent. The price is the problem.
Full forensic analysis of CrowdStrike
+ 6 more models included
150,000+ stocks covered
Global coverage across 60+ exchanges. Every report includes all 12 quantitative models and AI analysis.
View plansEvery report runs 12 quantitative models and generates an AI investment thesis. From Piotroski scores to manipulation detection -- get the full picture in seconds.
12 forensic models
Piotroski, Altman, Beneish, DuPont & more
AI investment thesis
Synthesized outlook on every stock
Manipulation detection
Spot red flags before they hit the news
150,000+ tickers
Global coverage across 60+ exchanges
Expected return
Forward return projections for every stock
Real-time data
Live prices, insider trades, news sentiment
Free accounts get 1 report per month. Pro gets unlimited.
CrowdStrike at $96 billion market cap versus Cloudflare at $59 billion — both are growing revenue at 25%+, both are unprofitable on a GAAP basis, and both claim to be the platform that wins cybersecurity. One is overvalued.
The stock has recovered to near all-time highs, but $1-3B in potential litigation liability and Microsoft's kernel access restrictions create downside risk the market isn't pricing at 60x forward earnings.
With $4 billion in ARR, 78% gross margins, 120%+ net retention, and 75% of customers on 5+ modules, CrowdStrike is winning the cybersecurity platform consolidation war.