8-K: CrowdStrike Q3 FY26 Soars on AI, Record ARR & Cash Flow

CrowdStrike reported record third-quarter fiscal year 2026 results, driven by strong Annual Recurring Revenue growth, record cash flow, and strategic AI-driven partnerships.

Summary

• CrowdStrike reported Q3 FY26 total revenue of $1.23 billion, a 22% increase year-over-year, compared to $1.01 billion in Q3 FY25.
• Annual Recurring Revenue (ARR) grew 23% year-over-year to $4.92 billion as of October 31, 2025, with net new ARR of $265 million, accelerating to 73% year-over-year growth.
• The company achieved record cash flow from operations of $398 million and record Q3 free cash flow of $296 million.
• Non-GAAP income from operations reached a record $264.6 million, and non-GAAP net income attributable to CrowdStrike was a record $245.4 million, or $0.96 per diluted share.
• CrowdStrike raised its fiscal year 2026 guidance, expecting total revenue between $4,796.6 million and $4,806.6 million.
• The Falcon Flex subscription model now accounts for over $1.35 billion in ending ARR, growing more than 200% year-over-year.
• Strategic highlights include the acquisition of Pangea, FedRAMP High Authorization for Charlotte AI, and significant partnerships with AWS, EY, CoreWeave, Kroll, KPMG, BT, and NVIDIA.

Sentiment

Score: 9

Explanation: The filing indicates exceptionally strong financial performance with record metrics across revenue, ARR, and cash flow, coupled with significant strategic advancements in AI security and key industry partnerships. The raised full-year guidance and positive outlook for future ARR growth further reinforce a highly positive sentiment, despite increased GAAP losses.

Positives

• Total revenue increased 22% year-over-year to $1.23 billion.
• Annual Recurring Revenue (ARR) grew 23% year-over-year to $4.92 billion as of October 31, 2025.
• Net new ARR accelerated to 73% year-over-year growth, reaching a record $265 million for Q3 FY26.
• Record cash flow from operations of $398 million.
• Record Q3 free cash flow of $296 million.
• Non-GAAP income from operations was a record $264.6 million, up from $200.7 million in Q3 FY25.
• Non-GAAP net income attributable to CrowdStrike was a record $245.4 million, or $0.96 per diluted share, up from $190.9 million and $0.76 respectively in Q3 FY25.
• Ending ARR from the Falcon Flex subscription model exceeded $1.35 billion, growing over 200% year-over-year.
• Module adoption rates continue to grow, with 49% of customers adopting six or more modules, 34% adopting seven or more, and 24% adopting eight or more as of October 31, 2025.
• Raised fiscal year 2026 guidance for total revenue, non-GAAP income from operations, and non-GAAP net income.
• Increased second half fiscal year 2026 net new ARR growth expectations to at least 50% year-over-year.
• Acquired Pangea, a leader in AI security.
• Charlotte AI achieved Federal Risk and Authorization Management Program (FedRAMP) High Authorization.
• Formed marquee partnerships with AWS, EY, CoreWeave, Kroll, KPMG, BT, and NVIDIA, validating market leadership and driving growth.
• Received AWS Global Marketplace Partner of the Year and Global Security Partner of the Year awards.
• Recognized as a Visionary in the 2025 Gartner Magic Quadrant for Security Information and Event Management (SIEM) report.
• Named an Innovation and Growth Leader in the 2025 Frost Radar: Cloud Workload Protection Platforms report, scoring highest on the Innovation Index.
• Named the overall Leader in the 2025 Frost Radar for SaaS Security Posture Management report for the second consecutive time, ranked highest in growth and innovation.
• Recognized as a Leader in The Forrester Wave: Managed Detection And Response Services In Europe, Q3 2025 report.
• Named the Overall Leader and a Leader in Innovation in the 2025 KuppingerCole Identity Threat Detection and Response (ITDR) Leadership Compass.

Negatives

• GAAP loss from operations increased to $69.4 million from $55.7 million in Q3 FY25.
• GAAP net loss attributable to CrowdStrike increased to $34.0 million from $16.8 million in Q3 FY25.
• GAAP net loss per share attributable to CrowdStrike, diluted, increased to $0.14 from $0.07 in Q3 FY25.
• Costs associated with the July 19 Incident and related matters, net, were $26.173 million for Q3 FY26 and $101.556 million for the nine months ended October 31, 2025.

Risks

• Risks associated with the content configuration update CrowdStrike released on July 19, 2024, for its Falcon sensor that resulted in system crashes for certain Windows systems (the July 19 Incident).
• The risk that the strategic plan could negatively affect business operations.
• Risks associated with managing rapid growth.
• Ability to identify and effectively implement necessary changes to address execution challenges.
• Risks associated with new products and subscription and support offerings, including the risk of defects, errors, or vulnerabilities.
• CrowdStrike's ability to respond to an intensely competitive market.
• Length and unpredictability of sales cycles.
• CrowdStrike's ability to attract new and retain existing customers.
• CrowdStrike's ability to complete and successfully integrate acquisitions.
• The failure to timely develop and achieve market acceptance of new products and subscriptions as well as existing products and subscriptions and support.
• CrowdStrike's ability to collaborate and integrate its products with offerings from other parties to deliver benefits to customers.
• Industry trends and rapidly evolving technological developments in the market for security products and subscription and support offerings.
• General market, political, economic, and business conditions, including those related to a deterioration in macroeconomic conditions, inflation, geopolitical uncertainty and conflicts, public health crises, and volatility in the banking and financial services sector.

Future Outlook

CrowdStrike is raising its fiscal year 2026 guidance, with expected total revenue between $4,796.6 million and $4,806.6 million, non-GAAP income from operations between $1,036.1 million and $1,040.1 million, and non-GAAP net income per share (diluted) between $3.70 and $3.72. For Q4 FY26, total revenue is projected to be $1,290.0 $1,300.0 million. The company has also increased its second half fiscal year 2026 net new ARR growth expectations to at least 50% year-over-year and remains confident in delivering 20% net new ARR growth for fiscal year 2027 from its increased fiscal year 2026 expectations.

Management Comments

• George Kurtz, CrowdStrike's Founder and CEO, stated: "CrowdStrike is the enabler of secure AI transformation with the right architecture, the right products, and the right execution."
• Kurtz also noted: "Q3 was one of our best quarters in company history: we achieved record Q3 net new ARR of $265 million, accelerating to 73% year-over-year growth, and ending ARR of $4.92 billion, which accelerated to 23% growth year-over-year."
• Kurtz emphasized: "Our single platform strategy coupled with the Falcon Flex subscription model unlocks consolidation, positioning CrowdStrike as the operating system of cybersecurity."
• Burt Podbere, CrowdStrike's CFO, commented: "We delivered outstanding third quarter results, exceeding expectations across all guided metrics."
• Podbere highlighted: "Total revenue growth accelerated to 22% year-over-year, and we delivered record cash flow from operations of $398 million and record Q3 free cash flow of $296 million."
• Podbere added: "We are capitalizing on the AI-driven demand environment as customers consolidate on the Falcon platform, driving our pipeline to an all-time high."
• Podbere concluded: "Given this momentum, we are raising our fiscal year 2026 guidance. Additionally, we have increased our second half fiscal year 2026 net new ARR growth expectations to at least 50% year-over-year and remain confident in delivering 20% net new ARR growth for fiscal year 2027 from our increased fiscal year 2026 expectations."

Industry Context

CrowdStrike's strong performance and strategic initiatives, particularly around AI and platform consolidation, align with and capitalize on major industry trends. The company positions itself as a key enabler of secure AI transformation, leveraging its cloud-native Falcon platform to address evolving cyber threats. The acceleration in ARR growth across endpoint, cloud security, next-gen identity, and SIEM reflects a broader industry shift towards integrated, AI-powered cybersecurity solutions and customer demand for platform consolidation to reduce complexity and cost.

Comparison to Industry Standards

• AWS selected CrowdStrike as the first cybersecurity partner to deliver an integrated SIEM through an enhanced version of SaaS Quick Launch in AWS Marketplace, demonstrating a leading position in cloud security integration.
• Awarded AWS's Global Marketplace Partner of the Year and Global Security Partner of the Year, indicating strong partnership and market penetration within the AWS ecosystem.
• Collaborated with NVIDIA to bring always-on, continuously learning AI agents for cybersecurity to the edge through Charlotte AI AgentWorks, NVIDIA Nemotron open models, NVIDIA NeMo Data Designer synthetic data, NVIDIA NeMo Agent Toolkit, and NVIDIA NIM microservices, showcasing leadership in AI-driven security innovation.
• Announced innovations with Amazon Web Services (AWS), Intel, Meta, NVIDIA, and Salesforce to secure the future of enterprise AI, positioning CrowdStrike at the forefront of AI security.
• EY US selected Falcon Next-Gen SIEM as the foundational platform powering its global cybersecurity managed services, validating the platform's enterprise-grade capabilities and market trust.
• Kroll standardized on CrowdStrike, upleveling its MDR with Falcon Complete for Service Providers, highlighting the strength of CrowdStrike's managed detection and response offerings.
• KPMG is expanding its cybersecurity services with the CrowdStrike Falcon platform, including integrating Falcon Next-Gen SIEM into its professional service offerings, further cementing its position with major consulting firms.
• Partnered with BT to launch BT Business Antivirus Detect and Respond, a new cybersecurity service powered by Falcon Go, expanding reach into the business segment.
• Recognized as a Visionary in the 2025 Gartner Magic Quadrant for Security Information and Event Management (SIEM) report, indicating strong vision and market understanding.
• Named an Innovation and Growth Leader in the 2025 Frost Radar: Cloud Workload Protection Platforms report, scoring the highest of all vendors on the Innovation Index, demonstrating superior innovation in CWPP.
• Named the overall Leader in the 2025 Frost Radar for SaaS Security Posture Management (SSPM) report for the second consecutive time, ranked the highest of all vendors in growth and innovation, showcasing market dominance in SSPM.
• Recognized as a Leader in The Forrester Wave: Managed Detection And Response Services In Europe, Q3 2025 report, affirming strong MDR capabilities in a key region.
• Named the Overall Leader and a Leader in Innovation in the 2025 KuppingerCole Identity Threat Detection and Response (ITDR) Leadership Compass, highlighting leadership in identity security.

Legal Proceedings

• Costs associated with the July 19, 2024 Incident and related matters, net, were $26.173 million for the third quarter of fiscal 2026 and $101.556 million for the nine months ended October 31, 2025, indicating ongoing financial impact from the incident.

Stakeholder Impact

• Shareholders are likely to benefit from the strong financial performance, raised guidance, and positive future outlook, potentially leading to increased share value.
• Customers benefit from new and enhanced offerings, including AI innovations and expanded security modules, as well as the consolidation benefits of the Falcon platform.
• Employees may see increased opportunities for growth and development within a rapidly expanding and innovative company.
• Partners (e.g., AWS, EY, CoreWeave, Kroll, KPMG, BT, NVIDIA) benefit from strengthened collaborations and expanded market reach through integrated solutions and joint initiatives.
• Creditors may view the company as a stronger credit risk due to robust cash flow generation and a healthy cash balance of $4.80 billion.

Next Steps

• CrowdStrike will host a conference call for analysts and investors on December 2, 2025, to discuss the earnings results and outlook.
• The company expects continued growth, with confidence in delivering 20% net new ARR growth for fiscal year 2027 from its increased fiscal year 2026 expectations.
• Continued focus on capitalizing on the AI-driven demand environment and customer consolidation on the Falcon platform.

Key Dates

Recommendation

CrowdStrike's Q3 FY26 results demonstrate exceptional financial and operational strength, significantly exceeding expectations across key metrics like revenue, ARR, and free cash flow. The acceleration in net new ARR growth, coupled with raised full-year guidance and a confident outlook for FY27, signals robust business momentum. Strategic advancements in AI security, successful acquisitions, and marquee partnerships further solidify its market leadership and competitive advantage. Despite increased GAAP losses, the underlying non-GAAP profitability and cash generation are very strong. The company is well-positioned to capitalize on the growing demand for AI-driven cybersecurity and platform consolidation, making it a compelling 'strong buy' for investors.

Keywords

Cybersecurity, AI, Cloud Security, Endpoint Protection, SIEM, Annual Recurring Revenue, Falcon Platform, SaaS, FedRAMP, Managed Detection and Response, Identity Threat Detection and Response