Crowdstrike – Is it Really Worth 27x Sales and 140x Earnings?
Evaluating the fundamentals behind one of cybersecurity’s priciest stocks.
Last Tuesday, CrowdStrike released its third-quarter results and managed to just about please investors, myself included, with shares trading flat to down slightly in the following sessions. The company roughly matched consensus estimates, which, in itself, is often not nearly enough to please investors, given the sheer premium shares are at – it generally demands a beat-and-raise…
However, CrowdStrike’s underlying metrics were brilliant. And this is increasingly where the investor and Wall Street focus is. Under the hood, Crowdstrike sees strong demand and traction, healthy business and industry dynamics, and strong module adoption, leading to accelerating growth and an improving long-term outlook.
This business is really best-in-class, and its results show it, even as the headline numbers, against high expectations, don’t quite reflect it.
I mean, in most cases, paying over 20x sales and 100x earnings for low-twenties revenue growth doesn’t make any sense, but CrowdStrike manages to consistently earn these kinds of multiples, and that isn’t without reason – judging it this superficially misses the entire narrative.
Simply, the headline numbers don’t tell the entire story; it’s the underlying numbers, sheer product quality, brilliant position, and long-term runway fueled by secular trends that investors should value accordingly.
For those not entirely familiar with the business, I wrote a more comprehensive introduction of the company and my thesis in my last post, but it all pretty much comes down to this:
CrowdStrike is winning one of the strongest secular trends in technology: the shift to cloud-native, AI-driven cybersecurity. As threats grow more advanced and enterprises modernize their infrastructure, security has become a mission-critical, non-discretionary spend, one that will compound at double-digit rates for years, if not decades, to come.
CrowdStrike stands at the center of that curve. Its Falcon platform, built on a single lightweight agent and a cloud-native backend, delivers best-in-class protection across endpoints, identities, workloads, and more. Every customer adds telemetry that strengthens the platform’s AI models, creating one of the most powerful data network effects in software.
It has simply become the gold standard in next-gen cybersecurity.
The result is a business with exceptional durability: mid-to-high-20s revenue growth, elite margins, consistent market share gains, and consistently strong net retention. In a market defined by scale, speed, and data, CrowdStrike remains the clear leader, with a very bright future and strong growth prospects.
Yet, is it still worth this massive price tag, or is it time to exit this stock with too much optimism and forward growth priced in? Ultimately, no single business is worth any price tag – price always matters!
Let’s delve into the details!
Welcome to InvestInsights — an independent equity research publication rooted in long-term, buy-and-hold investing, publishing actionable stock/equity research reports weekly!
📈 You’re reading my latest [FREE] stock analysis. If you like this analysis, make sure to like & subscribe to receive much more like this!
If you’d like full portfolio access (16% CAGR since 2022) & additional exclusive analyses, consider becoming a paid subscriber!
CrowdStrike delivers a very strong Q3
Jumping right into the Q3 results, CrowdStrike delivered another record quarter and accelerated growth across most metrics, as guided, with YoY comparables and business dynamics improving.
CrowdStrike reported a total Q3 revenue of $1.23 billion, up 22% YoY and beating consensus estimates by $10 million. Most crucially, these numbers reflect a further acceleration in growth compared to prior quarters, after growth decelerated rapidly in every quarter from Q1 2023 through Q1 2026.
That slowdown was driven largely by a tougher macro environment, elongated enterprise deal cycles, and a broad pullback in discretionary security spending, especially among larger customers consolidating vendors and scrutinizing budgets. Even best-in-class platforms like Falcon weren’t immune, and growth naturally compressed as the post-pandemic demand surge normalized.
Positively, growth is now accelerating again, hitting 22% YoY growth in Q3, as CrowdStrike sees improving dynamics across the entire business.
Additionally, that slight bit of cyclicality (though more a mix of conditions) we saw in recent years is unlikely to recur any time soon, as industry dynamics are shifting. Simply put, as more and more infrastructure becomes digital and AI gets integrated across every bit of IT, cybersecurity is becoming an increasingly non-discretionary spend for businesses of any size. This is how management put it:
“CrowdStrike is mission-critical in today’s agentic society. No matter how the market swings, geopolitical tensions evolve, or what technologies are in vogue, our digital society mandates cybersecurity as a necessity. And now more than ever, synonymous with that, CrowdStrike is a necessity.”
This shift to cybersecurity becoming a necessity was inevitable.
Anyway, back to the Q3 results, CrowdStrike reported a very strong Q3 net new ARR of $265 million, which is a Q3 record high and up 73% YoY, beating management’s expectations by over 10 percentage points.
This is a critical indicator of demand, and it looks really good. You see, net new ARR captures only the fresh subscription growth added in the quarter, from new logos and, importantly, existing customers expanding onto more Falcon modules. It is the cleanest read on current buying behavior, whereas ending ARR includes the entire multi-billion-dollar base built up over the years. That base is now so large that even record quarterly additions show up as only mid-twenties growth in the total ARR figure.
In other words, demand growth is accelerating sharply, even if the percentage growth in the installed base naturally appears more muted at this scale.
The current demand CrowdStrike is seeing, fueled by both customer additions and, likely, mostly by module adoption, is looking very promising.
This resulted in an ending ARR of $4.92 billion, up 23% YoY and accelerating sharply from prior quarters, driven by strongly improving demand reflected in net new ARR. CrowdStrike is simply seeing a significant improvement in demand, as cybersecurity demand grows amid the recent digitalization push and budget tightness eases.
An important driver of this uptick in ARR and likely much better module adoptions continues to be CrowdStrike’s Falcon Flex subscription. Here is how I explained the format last time out:
“Falcon Flex is CrowdStrike’s flexible subscription model that lets customers commit to a pre-negotiated spend and then allocate credits across modules as their needs evolve. A $1 million annual contract, for example, can be spread across any part of the portfolio, with modules added or adjusted over time without renegotiations or legal overhead.
The model benefits both sides: CrowdStrike secures committed contract value, while customers gain the agility to adapt to changing security needs.”
As of the end of Q3, Falcon Flex has $1.35 billion in ending ARR, up 200% YoY, driven by both growing adoption of the format and rapidly rising average contract value, thanks to its brilliant format – it continues to drive higher platform utilization, accelerating module adoption, and higher retention.
The reasoning for this is simple: the format makes it much easier for customers to adopt more modules and adapt to their security needs. And as these customers find the value in the Falcon platform and its many modules, they rapidly scale.
This is best reflected in the “re-flex” activity. What are “re-flexes”? Once a customer uses its full contract capacity, so say it fully uses its $1 million in contract value, it can choose to re-flex, which is a bit like renewing your contract to a larger size mid-period to match growing needs.
In Q3, the number of re-flexes, so Flex customers growing their contract for a new 3-5 year period, was up 100% sequentially to over 200, with over 10 customers more than tripling their initial contract value. This shows that Flex customers rapidly and significantly increase their contract value as they experience Falcon’s quality.
In fact, 10% of Flex customers have already re-flexed, and this happens well before the end date of the initial deal, with the average re-flex occurring after just 5 months! Meanwhile, today, Flex utilization is high at 75%, meaning 75% of capacity is already allocated, and the average Flex customer sits at nine modules, much higher than the average CrowdStrike customer.
This way, Flex is driving significant growth and is rapidly becoming the standard for customers of every size!
Apart from Flex, CrowdStrike reported broad-based momentum across customers of all sizes and in all industries, ranging from corporate to public and federal. For modules, growth was especially impressive across cloud, Next-Gen Identity, Next-Gen SIEM, and endpoint.
In next-gen SIEM, in particular, CrowdStrike is seeing excellent traction. For reference, CrowdStrike’s next-gen SIEM is its modern replacement for traditional SIEM tools, which are slow, expensive, and hard to scale. Instead of forcing customers to ship all their logs into a separate system, Falcon already collects and enriches that data in real time, then analyzes it with AI. CrowdStrike layers fast search, investigation, and automation on top of this unified data stream, allowing threats to be detected and resolved far faster and at a much lower cost than traditional SIEM software.
LogScale further strengthens this by enabling large-scale log ingestion and search to be extremely fast and cost-effective, all within a single platform. Together, this turns Falcon into a true end-to-end security operations platform, unifying endpoint, identity, cloud, logs, and threat intelligence in one place and giving security teams real-time visibility rather than after-the-fact alerts.
Falcon’s next-gen SIEM had a record net-new ARR quarter in Q3, as it is increasingly well-positioned to compete with SIEMs from hyperscalers and firewall vendors, thanks to its superior approach and growing scale, especially as IT stacks modernize.
As a result, Falcon’s SIEM is rapidly gaining market share.
A big news item on this front was AWS selecting Falcon Next-Gen SIEM as the default SIEM for all its customers, giving CrowdStrike access to loads of additional data to train its models.
Apart from SIEM, another Q3 highlight was accelerating growth in endpoint protection, which is notable since this is already CrowdStrike’s largest module and its earliest product. The difference maker today is AI, which is increasingly pushing IT to the edge. As more employees use AI services and chatbots, endpoint risks increase, requiring more advanced security and driving renewed interest in endpoints, where CrowdStrike is the undisputed leader.
Growth accelerating in such a “mature” product is a very promising sign.
All in all, it was a solid quarter for CrowdStrike, performing in line with my expectations and showing strong demand and healthy underlying trends!
On that note, let’s move to the P&L.
CrowdStrike reported a Q3 gross margin of 78%, helped by a subscription gross margin of 81%, up marginally YoY. Total GAAP operating expenses in Q3 were $996 million, up 23% YoY, growing roughly in line with revenue. This was primarily driven by higher G&A costs, up 32% YoY, and R&D expenses, up 26% YoY, offset by milder sales and marketing growth of 18%.
Ultimately, this resulted in non-GAAP operating income of $265 million, reflecting a 21.6% operating margin, exceeding guidance and up 230 bps YoY, as non-GAAP expense growth lagged revenue growth. The outperformance was driven by accelerating top-line growth, a mild gross margin improvement, and tight cost management.
However, the GAAP operating margin was negative at -6%, similar to last year, as this incorporates stock-based compensation, which remains very high.
Notably, Q3 SBC was up 36% YoY, well outpacing revenue growth and putting pressure on the GAAP operating and net income margin. This lifted SBC as a percentage of revenue to 23.8%, up 150 bps YoY, which I am not too pleased with. Yes, this is down from over 24% in the prior two quarters, but it is still too high for my taste, as it dilutes shareholders and shows no signs of moderation.
This is a significant negative that investors should keep in mind, even as it should moderate somewhat over the next year or two.
Finally, non-GAAP EPS was $0.96, beating consensus estimates by $0.02. And Q3 FCF was $296 million, reflecting a 24.1% FCF margin, up 150 bps YoY.
This means the company maintains its Rule of 40 status.
Additionally, this strong FCF enabled CrowdStrike to maintain a pristine balance sheet, with $4.8 billion in cash and under $1 billion in debt. This leaves CrowdStrike in pristine financial health.
With that, let’s jump to the outlook!
Want more out of your subscription? Even more content like this weekly? Consider InvestInsights PRO — $7.50/month ($70/annually)
PRO gets you:
A guaranteed minimum of 6-8 stock analyses every month (of which at least 3-4 are paid-exclusive).
Full insight into my own portfolio, including allocation, transactions, watchlist, and performance (16% annualized return since January 2022).
Instant transaction alerts anytime I buy or sell any shares (Fully transparent).
An overview of all my target prices and ratings (available online, updated weekly).
Access to the InvestInsights Hub, containing all of the above in a single online sheet, updated constantly!
Outlook & Valuation
As always, let’s start with guidance. During the earnings call, management’s tone was bullish, with strong conviction in its growth trajectory and confidence that growth will accelerate in 2026.
Starting with Q4, management now guides quarterly revenue in the range of $1.290 billion to $1.300 billion, reflecting year-over-year growth of 22% to 23%, up slightly from Q3. Additionally, it expects to report EPS of approximately $1.09 to $1.11 and a FCF margin of 27%, reflecting a significant uptick in margins despite continued headwinds from incident-related costs.
Furthermore, driven by strong Q3 performance and promising momentum, CrowdStrike marginally raised its fiscal FY26 guidance. Management now guides FY26 revenue to be in the range of $4.797 billion to $4.807 billion, reflecting 21% to 22% YoY growth and ahead of the $4.78 billion consensus.
This Q4 revenue guidance reflects low- to mid-teens sequential net-new ARR growth, bringing FY26 ending ARR growth to 23% YoY. This also means the second-half ARR will jump 50% YoY, well ahead of the earlier-expected 40%.
Additionally, FY26 EPS is expected to be in the range of $3.70 to $3.72, also ahead of a $3.68 consensus, and the FY26 FCF margin is expected to be around 25%.
Looking ahead to fiscal year 2027 or calendar year 2026, management expects net new ARR growth to accelerate to over 20% YoY, up from 17% in 2026, suggesting second-half momentum will persist into next year and that the business will maintain excellent traction.
Aside from healthy growth, management also anticipates a significant improvement in margins, guiding to a non-GAAP operating margin of over 24%, driven by optimizations, economies of scale, and the strategic use of AI. Also, the FCF margin should grow by over 500 bps YoY to over 30%, which is looking much better again!
Looking longer-term, the outlook for CrowdStrike also remains brilliant. Management sees its TAM grow from $140 billion in 2026 to $300 billion by 2030, growing at a 21% CAGR, as the industry benefits from massive secular drivers.
Currently, businesses of all sizes are slowly integrating AI into their IT stacks and moving to the cloud, while larger enterprises are already investing heavily in AI agents to improve workforce productivity and achieve speed, scale, and cost benefits. This shift is driving significant changes in the cybersecurity landscape.
For one, AI is rapidly expanding the attack surface. More digital, more cloud-based, more use of AI, it all opens up businesses to cyber threats. And the move to agentic AI gives this a massive boost, as every single agent expands the attack surface, necessitating protection.
On top of that, AI also makes cybercrime more available than ever. To quote CrowdStrike management, “Now just as anyone can use AI to vibe code and become a software engineer, anyone can now also vibe hack, becoming a sophisticated adversary with AI.”
These factors translate into compounding demand for cybersecurity in the decade ahead; there is no way around it. And CrowdStrike is there to benefit from a technological shift that will last decades.
Focusing even more on CrowdStrike, I am quite confident it will continue to keep gaining market share in this rapidly growing industry as well, being the gold standard in next-gen cybersecurity, and with the industry slowly consolidating.
Let’s not forget that the cybersecurity industry is still extremely fragmented, with many small and legacy players. Eventual consolidation will bring this down, as a single platform approach is becoming increasingly important and effective. As a result, CrowdStrike’s SAM will grow even faster than its TAM.
In the end, CrowdStrike’s market share today, driven by industry dynamics, is still very small, with a massive runway ahead. It still sees below 40% global 2000 penetration, below 2% in the public sector, and below 1% in SMB’s. This leaves it with loads of room to acquire new logos.
Additionally, this expected consolidation action also creates opportunities in its existing customer base, as adoption of Falcon modules should grow. For reference, CrowdStrike still captures only $4.7 billion in ARR from a $25.2 billion total opportunity in its existing base.
In other words, if CrowdStrike were able to capture the entire security portfolio of current customers, its revenue would 5x, which should tell you something about the opportunity ahead.
So, CrowdStrike still has a mega runway across both its growth engines – customer acquisition and cross-selling.
Incorporating these dynamics, CrowdStrike is confident it will achieve at least $10 billion in ARR by fiscal 2031, suggesting a 19% CAGR, which seems rather cautious to me. Honestly, I can easily see it grow at a mid-twenties CAGR, if not higher.
Furthermore, management sees this number growing to over $20 billion by fiscal 2036, suggesting a 15% CAGR in the first half of the next decade, reflecting the long runway of growth, thanks mostly to agentic AI.
One way or another, the outlook is brilliant!
Also, outside of this blinding top-line growth, management also sees room for considerable margin expansion through the end of the decade. Here are its fiscal FY29 margin targets.
An 82-85% gross margin.
A 28-32% operating margin.
A 34-38% FCF margin.
So, what do all these numbers mean for my own projections?
Following these Q3 results, management’s upbeat guidance, and the recent CrowdStrike event, I am raising both my short- and medium-term estimates very slightly. I now anticipate fiscal 2026 revenue growth of just under 22% and EPS growth to remain negative.
For the years ahead, I anticipate slowly accelerating growth, driven by Falcon Flex success and a strong demand environment, with little risk of economic disruption. Mid-twenties growth toward the end of the decade seems likely.
Meanwhile, as guided by management, there is considerable room for margin expansion from slightly depressed levels in fiscal FY26, which should allow for rapid earnings and FCF growth through the end of the decade, likely sitting around a low-thirties CAGR.
You can find my full projections below!
That brings us to valuation, where the CrowdStrike thesis gets way more complicated: the company consistently trades at a massive premium to peers and the cybersecurity sector. This is no different today, with the company trading at mind-boggling multiples.
At a current share price of $513, CrowdStrike trades at 138x this year’s earnings, 105x next year’s, about 27x sales, and 72x next year’s free cash flow. There’s no way around it: these are extremely rich multiples, even for a category leader. CrowdStrike has never been cheap, and if you look only at conventional valuation lenses, it arguably looks untouchable – a business priced for perfection, with no room for error.
But here’s where things get more nuanced. CrowdStrike has earned this premium for years, not because investors are ignoring valuation discipline (at least not entirely), but because the company continues to pair elite fundamentals with one of the longest, cleanest, and most durable growth runways in all of software. The market is not simply paying for 20–25% top-line growth today; it is paying for a compounder with years, likely over a decade, of high growth, operating leverage, and cash generation ahead.
This is important because traditional valuation frameworks often struggle with businesses that (1) expand margins dramatically over time, (2) have recurring revenue flywheels that strengthen with scale, and (3) operate in markets that themselves compound at 15–20% annually. On all three counts, CrowdStrike checks the box.
When you combine persistent mid-twenties growth, rising net new ARR momentum, improving unit economics, expanding operating and FCF margins, and a TAM expected to double by 2030, CrowdStrike’s premium begins to look less like exuberance and more like a rational pricing of a scarce asset. Very few software companies deliver this blend of scale, durability, and structural tailwinds. Even fewer turn that into sustained 30%+ FCF margin potential by the end of the decade.
Of course, that does not make CrowdStrike “cheap.” Far from it. The valuation embeds a clear expectation that execution will remain nearly flawless and that the company will continue to dominate next-gen security as the industry consolidates. Any stumble, whether competitive, macro, or operational, would quickly compress the multiple.
Said differently: CrowdStrike is expensive, but not irrationally so. So, what should be made of today’s price and multiples?
Personally, despite the important narrative and often misunderstood dynamic explained above, I don’t find the risk-reward compelling right now. While the business might deserve such a multiple today, it doesn’t leave any margin for error, gives no downside protection, and caps upside.
For reference, even if I assume an 80x fiscal FY28 exit multiple (earnings), I end up with a $522 per share target, reflecting practically flat returns through January 2028. And honestly, I am just not willing to pay more than 80x for earnings two years ahead, no matter how good the business.
Therefore, I will argue that CrowdStrike shares aren’t attractive right now. I have been trimming my position in recent months at prices just above today’s. I still maintain a small position, but if shares trade higher, I will trim further.
At what price would shares become compelling? I would say much closer to $400, ideally below it.
Rating: Hold - Accumulate below $400
FY27 Target Price: $522
Implied CAGR from the current price: 0%
Please leave a like if you enjoyed this post and found it valuable!
Solid discipline. Trimming above current levels and eyeing sub~$400 for real accumulation is spot-on, especially after today's drop down to ~$487.
The Owner Earnings view still holds: real cash profit to owners yields ~13.9% on EV (as of this morning's data), but the P/OE north of 120x leaves basically zero margin of safety. Crowdstrike's dominant, no question, but at these multiples you're paying for flawless execution forever in a sector where one headline risk flips sentiment fast.
Agree, maintain current positions, add heavy only on a meaningful pullback. Respect the patience.
the positive thing about things priced to perfection is that in real life nothing is perfect.
all you need is another global outage, like the one in july 2024, and you can buy the dip :)