What it does
CrowdStrike states that its AI-native Falcon platform is a cloud-native cybersecurity platform built around a single lightweight sensor and its Security Cloud. The sensor collects data from endpoints, cloud workloads, identities, and third-party sources, which the company says supports detection, investigation, response, and workflow automation. The filing says the company currently offers 33 cloud modules through a SaaS subscription model. These cover areas including endpoint and cloud workload security, managed security services, identity protection, next-generation SIEM and log management, data protection, IT operations management, threat intelligence, and security for generative AI and AI-driven systems.
Source: CrowdStrike Form 10-K for fiscal 2026, Item 1 — sec.gov
How it makes money
The company states that it primarily sells the Falcon platform through its sales and partner teams, using a network of channel partners. It describes Falcon as a SaaS subscription-based platform and says its go-to-market approach includes a land-and-expand sales strategy. In addition to the platform and cloud modules, the filing lists professional services, including incident response, forensic investigation and breach recovery; technical assessment and advisory services; SIEM consulting; platform deployment and operational services; and training and certifications. The segment table below provides the reported breakdown between subscription and professional-services cost of revenue.
| Product or service | Revenue, FY2026 | Share | Change on the year |
|---|---|---|---|
| Subscription cost of revenue | $4.6 billion | 94.9% | 21.4% |
| Professional services cost of revenue | $247.3 million | 5.14% | 28.7% |
Source: CrowdStrike Form 10-K for fiscal 2026, Item 1 — sec.gov
Customers and geography
The filing states that, as of January 31, 2026, CrowdStrike was trusted by more than 88,000 organizations worldwide, including its end customers and those of managed security service providers. It says sales historically focused on large organizations, with increased focus on small and medium-sized businesses through a trial-to-pay model. The company reports FY2026 United States revenue of $3.2 billion, or 66.8% of revenue; Europe, Middle East, and Africa revenue of $782.7 million, or 16.3%; Asia Pacific revenue of $495.7 million, or 10.3%; and other revenue of $317.0 million, or 6.59%.
| Region | Revenue, FY2026 | Share | Change on the year |
|---|---|---|---|
| United States | $3.2 billion | 66.8% | 19.9% |
| Europe, Middle East, and Africa | $782.7 million | 16.3% | 26.3% |
| Asia Pacific | $495.7 million | 10.3% | 23.2% |
| Other | $317.0 million | 6.59% | 27.4% |
Source: CrowdStrike Form 10-K for fiscal 2026, Item 1 — sec.gov
Competition
The filing says CrowdStrike primarily competes with established and emerging security product vendors. It identifies competitor categories rather than naming individual companies: legacy antivirus providers, alternative endpoint-security providers, network-security vendors, cloud-security vendors, identity-security vendors, professional service providers offering cybersecurity response services, and legacy SIEM vendors. The company states that it competes on factors including platform capabilities, threat identification and breach prevention, integrations, time to value, price and total cost of ownership, brand and trust, sales and channel relationships, support and services, and the ability to ingest and search first- and third-party data. The filing does not name individual competitors.
Source: CrowdStrike Form 10-K for fiscal 2026, Item 1 — sec.gov
Key risks
The filing’s risk-factor summary highlights risks including:
- The July 19 Incident has had, and is expected to continue to have, an adverse effect on the business, sales, customer and partner relations, reputation, results of operations, and financial condition.
- Product capabilities, including performance and reliability, compared with competitors’ offerings.
- The delivery, availability, and performance of the Falcon platform can be affected by cloud infrastructure providers, cyberattacks, software errors, improper deployment, and failures of redundancy or disaster-recovery arrangements.
- The ability to attract new and retain existing customers, including amid customer budgeting cycles, economic difficulties, channel-partner disruption, and changes in market needs.
- The ability to attract, retain, and motivate talented employees.
- Acquisitions or consolidation within the industry may result in more formidable competitors.
Source: CrowdStrike Form 10-K for fiscal 2026, Item 1A — sec.gov
People and operations
The company reported 10,698 employees in FY2026. Its filing says seasonal customer budget approvals affect its business: net new ARR generation is typically greater in the second half of the year, particularly the fourth quarter, than in the first half. It also states that operating margin is typically lower in the first half because of higher payroll-tax costs and annual sales and marketing events, which affects the timing of operating cash flow. The provided excerpts do not state information about the company’s facilities.
Source: CrowdStrike Form 10-K for fiscal 2026, Item 1 — sec.gov