Executive Summary

CrowdStrike delivered 22% revenue growth to $4.8 billion and 24% ARR growth to $5.3 billion, but swung from near-breakeven to a $162.5 million net loss due to significant costs and operational disruption from the July 19 software update incident that crashed Windows systems globally.

What happened

CrowdStrike reported fiscal 2026 results marked by continued strong topline momentum alongside a significant profitability setback. Total revenue reached $4.8 billion, up 22%, with subscription revenue representing 95% of the total and growing 21%. The company added $1.0 billion in net new ARR during the year, ending with $5.3 billion in ARR, a 24% increase. Dollar-based net retention expanded to 115%, indicating existing customers increased their spend despite operational challenges. However, the company swung to a $162.5 million net loss compared to a $15.2 million loss in fiscal 2025 and $72.2 million in net income in fiscal 2024. Operating loss expanded to $293.3 million from $116.4 million. The deterioration was primarily driven by the July 19, 2024 incident, in which a content configuration update for the Falcon sensor caused system crashes for certain Windows systems. This event resulted in $82.4 million of incremental legal and professional services expenses in general and administrative costs. The company also incurred charges of $41.8 million related to a strategic restructuring plan. Sales and marketing expenses rose 20% to $1.8 billion while research and development increased 29% to $1.4 billion. Gross margin held steady at 75%. Operating cash flow grew 17% to $1.6 billion. The company ended the year with $5.2 billion in cash and cash equivalents, providing substantial liquidity to navigate ongoing incident-related obligations. Customer commitment packages introduced following the incident included discounting, additional modules, professional services, flexible payment terms, and subscription period extensions, which elongated revenue recognition timelines.

Why it matters for investors

The results illustrate CrowdStrike's dual reality: a fundamentally strong and growing cloud security franchise facing significant near-term headwinds from a major operational failure. The 22% revenue growth and 24% ARR expansion demonstrate resilient demand for the Falcon platform and ongoing success in landing new customers and expanding within existing accounts. The 115% net retention rate suggests customers continue to derive value and increase their investment despite the July 19 incident. However, the swing from profitability in fiscal 2024 to a $162.5 million loss in fiscal 2026 signals material operational and financial disruption. The incident has introduced multiple drags on the business model: elongated sales cycles as prospects delay purchasing decisions, incremental costs from customer commitment packages that extend subscription terms and reduce near-term recognized revenue, ongoing legal and professional service fees, and potential for future customer churn as contracts come up for renewal. Management disclosed delays in creating sales opportunities and noted that customer churn impact may materialize in future periods given typical multi-year contract terms. The company faces uncertainty around the ultimate financial impact of lawsuits, claims, and governmental inquiries. At the same time, CrowdStrike maintains strong operational execution in core areas: subscription gross margin held at 78%, operating cash flow grew to $1.6 billion, and the company continues investing heavily in R&D (up 29%) to enhance platform resilience and expand capabilities. The $5.2 billion cash position provides a cushion to absorb incident-related costs while maintaining growth investments. The trajectory from here will depend on the company's ability to restore customer confidence, manage legal and regulatory outcomes, and demonstrate improved software quality controls without sacrificing the innovation velocity that drove its market leadership.

Bullish points

  • Annual Recurring Revenue grew 24% to $5.3 billion with $1.0 billion in net new ARR added during the year, demonstrating continued strong demand for the cloud-native Falcon platform despite operational challenges.

  • Dollar-based net retention rate improved to 115% from 112%, indicating existing customers are expanding their deployments with additional endpoints and cloud modules, validating the platform's value proposition.

  • Operating cash flow increased 17% to $1.6 billion, showing the underlying business model continues to generate strong cash despite profitability pressures, and the company ended with $5.2 billion in cash for strategic flexibility.

  • Subscription gross margin held steady at 78%, indicating the core economics of the SaaS delivery model remain robust even as the company scales and manages incident-related disruptions.

Bearish points

  • Net loss widened significantly to $162.5 million from $15.2 million in the prior year, reversing fiscal 2024's profitability, primarily due to $82.4 million in incremental legal and professional services expenses related to the July 19 Incident and ongoing litigation and regulatory inquiries.

  • The July 19 Incident caused system crashes for Windows systems globally and has resulted in delayed sales cycles, elongated customer purchasing decisions, and customer commitment packages that include discounts and subscription extensions, which negatively impact revenue recognition and may lead to future customer churn as contracts renew.

  • Operating loss expanded to $293.3 million from $116.4 million as operating expenses grew faster than revenue, with sales and marketing up 20%, R&D up 29%, and G&A up 39%, indicating deteriorating operating leverage.

  • Management disclosed that certain customers have deferred purchases, terminated contracts, or chosen not to renew following the July 19 Incident, and competitors have aggressively pursued CrowdStrike's customer base, creating heightened competitive pressure and reputational risk that may persist for multiple quarters.

Key highlights

CrowdStrike generated $4.8 billion in total revenue, up 22% year-over-year, with subscription revenue of $4.6 billion representing 95% of the total and growing 21%. The company added $1.0 billion in net new ARR during fiscal 2026, ending with $5.3 billion in ARR, a 24% increase. Dollar-based net retention improved to 115% from 112%, reflecting expansion within the existing customer base. However, profitability deteriorated sharply: the company swung to a $162.5 million net loss compared to a $15.2 million loss in fiscal 2025 and $72.2 million profit in fiscal 2024. Operating loss expanded to $293.3 million from $116.4 million. The primary driver was the July 19, 2024 incident in which a content configuration update for the Falcon sensor caused system crashes for Windows systems, leading to $82.4 million in incremental legal and professional services expenses, ongoing litigation, regulatory inquiries, and operational disruption including elongated sales cycles and customer commitment packages featuring discounts and extended subscription terms. Despite these challenges, the company maintained a 75% gross margin and generated $1.6 billion in operating cash flow. Management increased research and development spending by 29% to enhance software resiliency, testing, and customer controls. The company ended with $5.2 billion in cash and cash equivalents, providing liquidity to navigate incident-related obligations. Two significant acquisitions were completed post-period: SGNL.AI for $627.9 million in cash (closed February 2026) and Seraphic for $327.4 million in cash (closed February 2026). Management noted uncertainty around the ultimate financial impact of the July 19 Incident, including potential for delayed customer churn, ongoing legal exposure, and sustained pressure on customer acquisition and expansion metrics.

Management commentary

Management stated the July 19 Incident has had, and is expected to continue to have, an adverse effect on the business, sales, customer and partner relations, reputation, results of operations, and financial condition. The company disclosed it has incurred, and expects to continue to incur, significant costs and expenses related to the incident. Certain existing or prospective customers have deferred or decided against purchases and terminated or chosen not to renew contracts, and others may take similar actions in the future. Management noted competitors have aggressively approached current and prospective customers to attempt to capitalize on the incident. The company has agreed to provide incentives in connection with commercial arrangements, including subscription period extensions, discounts, or promotional modules. Management acknowledged these factors may result in harm to business, results of operations, and financial condition. The company is investing in enhancements to software resiliency, testing, and customer controls following the incident but cannot guarantee such enhancements will be effective. Management emphasized it is party to legal proceedings relating to the incident, including securities litigation, derivative litigation, and putative class actions, and has received inquiries from governmental authorities. The company maintains insurance policies that may cover certain costs and claims but expects coverage will not cover all costs, claims, and liabilities actually incurred. On the operational side, management highlighted the company expects to continue investing broadly across the organization to support growth, including increasing the sales force, expanding research and development, and enhancing infrastructure. Management disclosed a change in accounting estimate effective fiscal 2027 that will increase the amortization period for deferred contract acquisition costs from four to five years, expected to improve operating income by $85 million to $95 million in fiscal 2027.

What to watch next

Investors should monitor:

  • Impact of the July 19 Incident on customer retention and churn rates as existing contracts come up for renewal in future periods, particularly given typical multi-year subscription terms that may delay the full effect on revenue and dollar-based net retention.

  • Progression of legal proceedings, governmental inquiries, and potential settlements or penalties related to the July 19 Incident, which could result in significant additional costs beyond the $82.4 million already incurred in fiscal 2026.

  • Sales cycle trends and new customer acquisition metrics to assess whether elongated purchasing timelines and competitive pressure from rivals capitalizing on the incident stabilize or worsen in coming quarters.

  • Effectiveness of customer commitment packages and whether extended subscription terms and discounting materially impact revenue recognition rates and annual contract value trends going forward.

This summary is based solely on excerpts from the company's Form 10-K filing.