CrowdStrike (CRWD)

Executive Summary & Action Plan

Verdict

SELL (Reduce, highest conviction in this sweep) — A genuinely recovering franchise at an indefensible price: the reverse-DCF requires SBC-adjusted cash flow to exceed total revenue by year ten, which is arithmetically impossible. Even forgiving stock compensation entirely and granting the richest security multiple on the tape, no framework reaches $187 — and the Street's own mean target agrees, sitting below the price.

Price $187.18 | Market cap $190.6B | Target $102 | Upside -45.5% IWANNAVY Fair Value · price as of 2026-07-11 close (4-for-1 split-adjusted) · Street consensus $183.81 (reference; n=49, BELOW spot, 71.7% dispersion) — the dispersion is the tell: analysts disagree on terminal SBC economics, so the mean averages incompatible models

Abstract

CrowdStrike's post-outage recovery is real: record Q1 net-new ARR ($255.8M, +32%), Falcon Flex nearly doubling to $1.9B with re-Flex cohorts expanding 26–51%, module adoption deepening, a raised FY27 net-new-ARR guide, and record FCF ($468.5M, 34% margin). The price has left the business behind. Correcting the data pipeline's FCF figure against filings, true TTM plain FCF is $1.43B (not $1.93B), putting the stock at 130.6x EV/FCF — and SBC of $1.15B (22.5% of revenue, intensity still rising) consumes nearly all of it, leaving ~$284M of owner earnings against a $187B enterprise value. Falcon AIDR's ">250%" growth is sequential, off a base too small to disclose. Our $102 fair value is the log-median of an SBC-expensed DCF ($39), a cohort-top 45x forward FCF grant ($102), and the richest security comp rate applied to CRWD's growth ($147) — even the friendliest lens sits 21% below spot. Rating: SELL/reduce; the ~9/2 Fal.Con-week print carries a four-condition bar, and three straight beats have already been faded.

Action Plan

Three consecutive beat-and-raise prints were greeted with flat-to-down sessions — the multiple is the resistance. Reduce now and into Black Hat/Fal.Con strength; re-entry ladder starts at $147 and builds at $102.

• New-money R/R: negative — spot exceeds bull FV ($147) by 27% | Prob-weighted 12M return −46.6% (Bull 25% × −21.5% + Base 45% × −45.5% + Bear 30% × −69.0%) | Confidence: Medium-High on direction, Medium on magnitude

---

Last Four Quarters

Fiscal quarters (FYE January). Revenue compounding cleanly ($1.17B → $1.39B) with gross margin ~75–76%. GAAP operating margin crossed zero in Q4 FY26 (+1.1% — first positive quarter of the recovery) then dipped back to −2.2%: composition, not deterioration — Q1's annual-vest SBC step-up (record $297.7M) plus SGNL acquisition costs; non-GAAP OM actually expanded to 23.5%. FCF margin reached 34% (Q1 collections seasonality).

GAP verification (−5.66% on the 7/10 session): sector-wide security de-rate on no company news (ZS −5.3%, PANW −3.7% while the Nasdaq rose) — profit-taking after a ~60–70% YTD run, post-split positioning, and a routine CEO 10b5-1 sale feeding the narrative.

---

Revenue & Profit Mix

Subscription is ~95% of revenue. ARR mix: the >$2.0B cloud + identity + next-gen SIEM block is ~37% of ARR (CRWD stopped breaking these out individually — a disclosure tell worth watching); core endpoint/XDR and services carry the rest. FY27 Q1 per the 6/3 release.

---

Business Lines

• Core endpoint/XDR + managed services (~64% of ARR (E)): Category leader, single-agent land motion. Must know — Microsoft folds Defender P2 + Security Copilot agents into E5 with July 2026 price changes; the threat is price, not efficacy, and Flex accounting would mask endpoint-specific deceleration.
• Cloud security (CNAPP, inside the $2B block): Must know — the sharpest front since Google closed Wiz: AI Threat Defense (Gemini+Wiz+Mandiant, 5/27) knocked the sector −3.4% in a day.
• Identity + AI-agent identity (SGNL ~$740M, largest-ever deal): Continuous Identity for AI Agents launched 6/15. Must know — this is the $740M counter to PANW's $25B CyberArk bet; greenfield TAM (Gartner's 8:1 governance gap) but ~$0 of disclosed ARR today.
• Next-gen SIEM (>$600M ARR) + AI security (AIDR): Must know — AIDR grew >250% sequentially off an undisclosed base with a >$50M Q2 pipeline (<1% of ARR); the circulating "+250% YoY" framing is wrong. A hard AI-ARR dollar figure at Fal.Con is the single most catalytic disclosure on the calendar.

---

IWANNAVY Fair Value

Log-median lands at $102. The construction is deliberately generous — the EV/FCF leg forgives SBC entirely and grants the top multiple in our book (45x); the EV/S leg grants the richest security comp rate (FTNT's 1.05x/pt) on CRWD's superior growth — and still no lens reaches $187. The SBC-expensed DCF ($39) is what the cash flows alone support; M&A comps cap the ceiling (CyberArk taken out at ~19x sales, Wiz 26.7x, vs CRWD's 31.5x forward).

• Thesis breaker (for the SELL): a ~9/2 print clearing all four bars — net-new ARR ~$300M+, a second FY27 raise, a dollar-quantified AIDR/AI-security ARR base, GAAP OM back positive — plus the market actually paying for it (unlike the last three prints) would force the multiple question open; agent-identity (SGNL) landing real ARR is the second-act evidence.

---

Catalysts & Risks

---

References

• CrowdStrike Q1 FY27 results — ARR $5.51B, record NNARR, FY27 guide raised, 4-for-1 split (IR, 2026-06-03) · Q1 FY27 10-Q (SEC) — SBC $297.7M, FCF $470.7M
• Benzinga — 7/10 sector de-rate, no company news (2026-07-10) · Investing.com — UBS PT $235 (2026-07-07) · Investing.com — CEO 10b5-1 sale (2026-07-08)
• CrowdStrike — Continuous Identity for AI Agents (2026-06-15) · CNBC — SGNL acquisition ~$740M (2026-01-08) · Google Cloud — AI Threat Defense launch (2026-05-27)