Position · Core / Quality Compounders
CrowdStrike Holdings Inc (CRWD)
Compare vs. competitors: Palo Alto Networks vs. Fortinet vs. CrowdStrike →
Read the full fiscal Q1 2027 earnings report →
Subscribe to CRWD updates (RSS) →
Download full 3-statement model (.xlsx) →
Thesis StatementCrowdStrike's single-agent Falcon platform expands into new security modules faster than most peers can cross-sell, evidenced by record net-new ARR this quarter.
Note on the price level
CrowdStrike's share price reflects an apparent roughly 4:1 stock split relative to older historical levels. If external sources show meaningfully higher historical prices, that's the pre-split basis — not an inconsistency in the numbers here.
Core Thesis
CrowdStrike's Falcon platform covers endpoint protection, cloud workload security, identity protection, and security operations as a single-agent subscription platform, with newer modules growing even faster than the core endpoint business — one of the...
Financial Metrics
- Market Cap$787B
- P/E (TTM)N/A — not meaningful; trailing EPS is negative
- EPS (TTM)-$0.04
- Div. Yield0.00%
- Price$193.98
Bear Case
Growth decelerates faster than expected as the law of large numbers catches up, competition from platform consolidators intensifies, and a rich multiple with little margin for error means any growth disappointment could compress the stock sharply.
Investment Thesis
- The Thesis
- CrowdStrike's Falcon platform covers endpoint protection, cloud workload security, identity protection, and security operations as a single-agent subscription platform, with newer modules growing even faster than the core endpoint business — one of the fastest-growing large-scale cybersecurity vendors on the market.
- The Catalyst
- Continued fast growth in Falcon's newer modules (cloud workload security, identity protection) outpacing the already-mature endpoint business, extending the single-agent land-and-expand motion into new categories.
- The Risk
- Growth could decelerate faster than expected as the law of large numbers catches up, and a rich multiple with little margin for error means any growth disappointment could compress the stock sharply.
- The Connection
- The third leg alongside PANW and FTNT in my cybersecurity platform-consolidation theme, and the fastest-growing of the three.
Pre-Mortem Thesis Invalidation Parameters
Codified in advance, before any of these have happened, so a future decision to hold or exit isn't rationalized in the moment. If a condition below is met, the thesis as written is invalidated and the position gets re-underwritten from scratch — not automatically sold, but automatically questioned.
| Metric / Event | Automatic Review Trigger |
|---|---|
| Net New ARR Growth | Decelerates for 3 consecutive quarters versus the prior-year comparable. |
| Dollar-Based Net Retention | Drops below 115% for 2 consecutive quarters. |
| Market cap | $787B |
|---|---|
| P/E ratio (TTM) | N/A — not meaningful; trailing EPS is negative |
| EPS (TTM) | -$0.04 |
| Dividend yield | 0.00% |
| Shares outstanding | N/A — not provided |
| Sector | Services-Prepackaged Software |
| EBITDAEarnings Before Interest, Taxes, Depreciation, and Amortization — a measure of operating profitability before financing and accounting decisions. EV/EBITDA compares a company's full value (including debt) to this figure, often used to compare companies with different capital structures. | EV/EBITDA 568.40x (small EBITDA base) |
| PEG ratioPrice/Earnings-to-Growth: the P/E ratio divided by expected earnings growth. Below 1.0 is often read as cheap relative to growth; above suggests the market is pricing in a lot of future growth already. Different providers use different growth-rate assumptions, so figures vary by source. | 6.09 |
| Capex | $302.1M (FY26) |
Valuation Logic
With trailing EPS still slightly negative on a GAAP basis, the market values CrowdStrike on ARR growth and net-retention multiples rather than P/E; this quarter showed record ARR growth still isn't guaranteed to satisfy elevated expectations.
About the business
CrowdStrike is a cloud-native cybersecurity company built around its Falcon platform, covering endpoint protection, cloud workload security, identity protection, and security operations, sold as a single-agent subscription platform rather than a bundle of separate products.
Why I own it
CrowdStrike's single-agent, cloud-native architecture has made it one of the fastest-growing large-scale cybersecurity vendors, and it's a third leg alongside PANW and FTNT in how I've built out cybersecurity exposure across the book. It's up over 110% on cost and trading near its 52-week high, and it carries a rich valuation typical of category-leading growth software — that's the honest tradeoff of owning the fastest grower in the group.
Risk/Reward Profile
| Bull Case | Bear Case |
|---|---|
| CrowdStrike keeps taking share in endpoint security while its newer modules (cloud security, identity) grow even faster, net revenue retention stays strong as customers consolidate more security spend onto the Falcon platform, and growth stays fast enough to grow into today's rich multiple. | Growth decelerates faster than expected as the law of large numbers catches up, competition from platform consolidators intensifies, and a rich multiple with little margin for error means any growth disappointment could compress the stock sharply. |
Download this position's data
Fundamentals, scenario matrix, and risk/reward table — exported exactly as published on this page, no reformatting.