CRWD surged 13.85%, not because of financial reports

NEXT PICK · Market Insights

CRWD surged 13.85%, not because of financial reports

Monday, September 14, 2026

A single call to "slow down AI" has pushed CRWD up to $241 billion

Today, CrowdStrike surged from a previous close of $206.74 to close at $235.38, surging 13.85% in a single day. Its intraday high reached $239.37, with trading volume 2.6 times the three-month daily average.

But on that day, the company neither issued financial reports nor announced any new contracts or acquisitions. What truly ignited the fire was the industry's public warning about the speed of AI development—Anthropic's CEO called on the entire AI sector to slow down, and the anxiety that "AI will launch attacks on its own" has shifted from sci-fi to a shared industry anxiety.

Funds immediately bought the cybersecurity stocks selling shovels, while CNBC's Jim Cramer immediately named CRWD a "must-buy." After Fal.Con 2026 sold out, multiple investment banks raised their ratings, pushing sentiment to a breaking point.

So the question is sharp

A company with a price-to-earnings ratio as high as 5,884 times and a stock price above the 200-day moving average (63.3%) saw its market value increase by over $20 billion just because of a single warning. Is this demand discounting in advance, or is it self-reinforcing sentiment?

Latest price $235.38 ▲ +13.85%

Sales-to-market ratio About 44.7 times higher ▲ The software industry hub is 10-15 times larger

Distance from the 200-day moving average +63.3% ▲ 50-day moving average $202.58

Once one agent is installed, more than twenty modules can no longer be removed

CrowdStrike sells a subscription-based cloud security foundation. Enterprises only need to install one lightweight proxy on each terminal, and the Falcon platform backs more than twenty security modules—endpoint protection, cloud workloads, identity management, data protection, AI workflow security—that can be enabled on demand.

For the second fiscal quarter ending July 31, 2026, the company reported total revenue of $1.47 billion, up 26% year-over-year, including $1.4 billion in subscription revenue, up 27% year-on-year, with subscriptions accounting for as much as 95%, making it an extremely clean recurring revenue business.

Annual Recurring Revenue (ARR) is even more evident in stickiness

As of the same time, ARR was $5.84 billion, up 25% year-over-year, while net new ARR for the quarter reached $332.8 million, a 51% year-over-year increase, setting a new single-quarter record for the company.

The first layer of the moat comes from migration costs. Large clients typically take 6 to 12 months to complete full deployment, with configuration strategies, API integration, automated scripts, and compliance reports all rebuilt around Falcon's data models, with a total migration cost estimated at $2 to 5 million.

The second layer comes from the data flywheel

The platform processes over 14 billion security incidents daily; the more customers, the more comprehensive the threat map, and the more accurate the detection, the more new customers benefit immediately. The third layer is the compliance threshold. Certifications like FedRAMP High typically take 18 to 36 months to obtain, directly blocking the entry point for government and defense orders.

So how do you remember this company? It's not a sharper lock, but an access control system for the entire building—changing locks takes an afternoon, replacing the master controls means shutting down for half a year, and that's the confidence behind its high prices.

In addition to a 5,884x P/E ratio, there is a 0.5% free cash flow yield

Based on a market cap of $241.01 billion and approximately $5.4 billion in revenue over the past twelve months, CRWD's price-to-sales ratio is about 44.7 times and nearly 47 times, while a reasonable range for the software infrastructure industry is generally considered to be 10 to 15 times price-to-sales and 5 to 10 times price-to-book ratio.

The price-to-earnings ratio completely loses its reference value

Earnings per share over the past twelve months were only $0.04, corresponding to 5,884 times. If the company uses its own FY2027 non-GAAP full-year earnings per share guidance of $1.25 to $1.26, the forward P/E ratio remains near 187 times.

So why does the market set this price? The answer lies in cash flow, not in the income statement. FY2026 full-year GAAP operating loss was $293.3 million, but net cash flow from operating activities was $1.61 billion and free cash flow $1.24 billion for the same period.

This huge gap comes from the subscription-based prepaid model

Customers pay for the full year at the beginning of the year, but revenue must be recognized monthly, while equity incentives and R&D expenses are credited to the statement on an accrual basis. Free cash flow in the first half of FY2027 reached $846 million, with $377.4 million in the second quarter, a year-on-year increase of 33%.

But from another perspective, $1.24 billion in free cash flow corresponds to $241 billion in market value, and the free cash flow yield is only about 0.5%—a whole order of magnitude lower than the risk-free rate. The cash flow quality is good, but valuations have already exhausted this good value over the next five to eight years.

As for today's 13.85%, it doesn't correspond to any new earnings disclosure, but rather a narrative repricing. Converting others' AI anxiety into your own orders, this account will ultimately be signed for by the actual numbers for the third quarter of FY2027.

The evidence of the breakout phase is not in revenue, but in the net new ARR of 333 million

Revenue growth cannot tell a story of acceleration

FY2026 saw full-year growth of 22% year-on-year, and FY2027 held steady at 26% for both the first and second quarters of FY2027. What really accelerated was the order caliber—net new ARR jumped from 220 million in the same period last year to $332.8 million, a 51% year-over-year increase.

A profit turning point is also taking shape. GAAP net loss for FY2026 was $162.5 million, while the first two quarters of FY2027 recorded GAAP net profits of $27.8 million and $5.3 million, respectively. In the second quarter, GAAP operating losses narrowed to $33.2 million, while non-GAAP operating profit was $371.6 million.

Falcon Flex's "sign up for quota, then free redemption module" commercial design has turned cross-selling into an escalator—related account ARR has surpassed $2.29 billion, more than doubling year-on-year, with 51% of customers using more than six modules.

The market still stands with this judgment

The stock price is 16.2% above the 50-day moving average and 63.3% above the 200-day moving average, showing a standard bullish alignment. But this level of divergence itself means that any guidance below expectations will not be gentle.

Microsoft bundled, Google acquired—how much bargaining power do independent security vendors still have?

Palo Alto Networks is the most positive platform-based competitor, with FY2026 revenue reaching about $10.5 billion and a 34% year-on-year increase in Q4. It continues to integrate full-stack through firewall channels and government-enterprise relations, but its price-to-sales ratio is only a fraction of CRWD's, giving the market a clear discount on "platform building through acquisitions."

Zscaler follows a zero-trust and secure access edge approach, with FY2026 revenue of $3.35 billion, up 25% year-on-year. Its growth rate is close to CRWD, but its end-side capabilities are weaker, and it's more about coexistence rather than replacement. SentinelOne's FY2026 revenue just surpassed $1 billion, up 22% year-on-year. Its technical reviews have a good reputation, but its platform is a step behind.

What truly keeps you awake are two competitors who don't rely on security to make money. Microsoft packaged Defender into the E5 license, making the marginal cost for companies already paying for Office and Azure nearly zero; Google Cloud Security now covers 90% of Fortune 100 enterprises, and after acquiring Wiz, its cloud security landscape quickly expanded.

CRWD's countermeasures are cross-platform and deep: supporting macOS, Linux, and multi-cloud heterogeneous environments, maintaining generational gaps in advanced threat hunting, and embedding security capabilities into the core enterprise AI workflow through alliances with Cognizant, Snowflake, and Fortanix.

For example, Microsoft sells "buy a house and get security doors," while CrowdStrike sells a professional security company. When budgets allow, the latter is obviously better, but when CIOs start cutting costs, the "enough is enough" door always sits on the paid list—this is the real competitor with a 45x price-to-sales ratio.

Penetration has just surpassed 10%, yet the ceiling is being raised again by AI

The global enterprise cybersecurity market is expected to reach about $172 billion in 2024. At a compound annual growth rate of 13% to 15%, it is projected to expand to $250 billion to $290 billion from 2027 to 2028, with ransomware, new compliance regulations, and increased cloud adoption rates forming the foundation.

Focusing on the five tracks covered by Falcon—endpoints, cloud workloads, identity, extended detection and response, and AI security—the market can be served is about $42 billion to $52 billion. Of this, endpoints are about $12 billion (up about 12% year-on-year), cloud security posture management is about $6 billion (up about 25%), and AI security is expected to reach $2 billion to $4 billion in 2024, but is expected to surpass $10 billion by 2027.

Compared to an ARR of $5.84 billion, CRWD's penetration rate is roughly between 11% and 14%. The company's full-year FY2027 revenue guidance is $5.99 billion to $6.01 billion, with ARR guidance of $6.60 billion to $6.61 billion.

If the compound annual revenue growth rate over the next three years remains between 22% and 28%, FY2029 revenue could reach the $9 billion milestone; If AI security demand exceeds expectations and growth exceeds 30%, the ceiling will be even higher; And once competition pushes growth back to 15% to 18%, the same story will need to be told with a different valuation multiple.

Orders, cash, and profit inflection points—all three lines are rising simultaneously

The bulls' confidence is not weak; it is built on several disclosed, cross-verifiable hard numbers:

▲ Bull Case

Valuation has borrowed the next five years, and the protagonist of the story is not present today

The logic of the bears also requires no imagination; it only needs to consider valuation multiples and risk exposure together:

▼ Bear Case

Before the next financial report, these matters will determine who is right or wrong

In the next two quarters, CRWD's stock price will be dominated by these time windows:

•	FY2027 Q3 financial report (expected by the end of November 2026): Guidance is revenue of $1.523 billion to $1.529 billion, with the most direct decision on whether it can exceed expectations
•	FY2027 full-year net new ARR of about $1.35 billion in fulfillment progress: validation window ends in fiscal year January 2027, with a neutral to bullish direction
•	The revenue contribution from AI security module commercialization is being disclosed separately for the first time: around Q4 2026, which is expected to be key to whether the narrative can be realized
•	Interim conclusion on the lawsuits and regulatory investigations related to the July 19, 2024 incident: The direction is expected to be bearish by the end of 2026

From the global blue screen to the four-to-one split, two years marked a complete emotional cycle

On July 19, 2024, a content update defect caused blue screens on about 8.5 million Windows devices, dubbed the "world's largest IT outage." The stock price plunged more than 10% in a single day, with a cumulative decline of about 37% over three weeks. Lawsuits and regulatory investigations remain ongoing.

The real turning point came in the following two fiscal years. FY2026 full-year revenue was $4.81 billion, up 22% year-over-year, with net new ARR surpassing $1 billion for the first time, and the market began to reprice it with "AI expanding the attack surface."

On June 3, 2026, the company announced a four-share split of 1, with trading starting after the split on July 2, and the stock price rising from about $770 before the split to about $193. Over the past twelve months, the cumulative return has reached 115.9%, and since the end of August, it has rebounded from the mid-$180 range all the way to today's closing price.

After reviewing, only one pattern kept coming true

CRWD's price-to-sales expansion phase always corresponds to the order acceleration phase, and after every big rise, it must rely on a better-than-expected earnings report to absorb its valuation—this time, the threshold has been raised even higher by today's strong bullish candlestick.

⚠️ Risk Notice • Valuations are extremely stretched, with a price-to-sales ratio of about 44.7 times; any slowdown in growth would trigger multiple contraction • Today's surge was driven by third-party comments, with no new company disclosures supporting the trend, raising the risk of sentiment retreating • Microsoft's bundling with Google and Wiz's integration continues to squeeze the pricing space for independent security vendors • The July 19, 2024 incident has ongoing litigation and regulatory investigations, and some liabilities have not yet been quantified • The stock price is above the 200-day moving average by 63.3%, indicating a significant increase in the probability of a short-term technical drawdown

🟡 Neutral Orders and cash flow are indeed accelerating, but today's gains are driven by sentiment rather than earnings, with odds being asymmetrical.

💬 Discussion Expensive, but so expensive that it's worth calculating. Its current real-time buy and sell positions can be viewed via CRWD on the official account.

Data source

•	Source: NextPick real-time market snapshot + CrowdStrike official earnings report and SEC filing + mainstream financial media public reports, data verification as of 2026-09-14.