Investigate / CRWD
Understand CrowdStrike Holdings, Inc.
Can CrowdStrike keep expanding customer spending across modules while managing reputational and competitive pressures disclosed in its risk factors?
Snapshot reviewed 2026-10-02. Source published 2026-08-27. No account needed.
AI-assisted synthesis of selected public filings, checked against the cited excerpts. Not a complete analysis.
This is a research starting point, not a buy/sell recommendation or a current valuation. New developments after these sources are not incorporated automatically.
Your research workspace / CRWD
Ask better questions. Keep the evidence.
Explore the available sources for CrowdStrike Holdings, Inc., then keep what deserves another look.
01 Investor activity
Who reports owning CRWD?
2 tracked reported owners. Disclosures are delayed and may describe different quarters—not live holdings or stated motives.
Inspect all owners, reported changes and filing dates →02 Business evidence
Reported evidence
What does the company do?
CrowdStrike charges for Falcon subscriptions by measures such as endpoints, identities, users or ingestion, and also provides incident-response and proactive professional services.
Latticework interpretation
What could support the case?
If customers start with a few modules and add more over time, the land-and-expand approach could deepen platform usage across security domains.
Latticework interpretation
What could break the case?
The July Incident has adversely affected CrowdStrike; if those effects persist, sales, customer relationships, reputation and operating results could remain under pressure.
03 Questions to investigate
Open saved takeaways →Read the full company brief
1. Understand the business
CrowdStrike charges for Falcon subscriptions by measures such as endpoints, identities, users or ingestion, and also provides incident-response and proactive professional services.
Source: Latest filing · business description ↗2. What the reported results show
Latest source: 10-Q, reporting period ended 2026-07-31. Selected reported US-GAAP/USD comparisons. The period and basis of each measure are shown separately; year-to-date cash flow is not a quarterly figure. Missing comparisons are collection gaps, not evidence that a company has no revenue or earnings.
| Measure | Current | Prior year |
|---|---|---|
| Operating income ↗Quarter: 2026-05-01–2026-07-31; prior 2025-05-01–2025-07-31Both values reported in the current filing. | −$33.232m | −$105.457m |
| Net income ↗Quarter: 2026-05-01–2026-07-31; prior 2025-05-01–2025-07-31Both values reported in the current filing. | $5.306m | −$70.153m |
| Operating cash flow ↗Six months (year to date): 2026-02-01–2026-07-31; prior 2025-02-01–2025-07-31Both values reported in the current filing. Operating cash flow is not free cash flow or a standalone solvency assessment; inspect the full statement. | $1,121.205m | $716.939m |
Comparison caveat: Current net income includes tax benefits related to stock-based awards; the year-to-date tax result also reflects deferred-tax assets from recent acquisitions. These differ from operating profit.
10-Q · latest checked financial statements and discussion ↗3. The investment debate
Latticework interpretation of the reported results—not the stated motives of any investor.
What could support the case
If customers start with a few modules and add more over time, the land-and-expand approach could deepen platform usage across security domains.
Supporting filing ↗The strongest caution
The July Incident has adversely affected CrowdStrike; if those effects persist, sales, customer relationships, reputation and operating results could remain under pressure.
Caution evidence ↗An interesting business is not necessarily an attractive investment at today's price. Price, dilution, financing terms and a valuation range still need investigation.
Inspect the evidence behind both sides ↗4. Three questions worth investigating
Use these to guide your research, not as conclusions that have already been proved.
Is customer expansion across modules occurring?
Starting evidence: The land-and-expand strategy lets customers start with any number of modules and add capabilities over time.
Investigate next: Review disclosures on module adoption, customer counts and renewal behavior to see whether customers actually add modules.
Read the supporting filing ↗How is Falcon Flex used?
Starting evidence: Falcon Flex lets customers commit to a broader platform investment upfront and draw down across multiple products over time.
Investigate next: Look for details on how commitments convert into recognized revenue and whether customers shift spend between domains.
Read the supporting filing ↗How durable is demand for cloud-delivered security?
Starting evidence: Many organizations have not abandoned on-premise legacy products, so customer adoption rates and demand for cloud-based solutions are difficult to predict.
Investigate next: Examine management commentary on new customer acquisition, competition and sales cycle length for signs of changing adoption.
Read the supporting filing ↗5. Decide what to do next
Worth another look? Save this company and return to the evidence. Writing a private view is optional. You do not need to decide whether to invest today.
Save is on this device. Recording a private view requires sign-in and an explicit save. Neither action subscribes you to email or automatically evaluates your thesis.