“We started the fiscal year with record Q1 large deal and MSSP momentum alongside sustained 97% gross retention and consistently strong net retention as the market consolidates on Falcon as its cybersecurity platform of choice for the agentic AI era,” said George Kurtz, Founder and CEO. “The scale of Falcon Flex demand and the pace of innovation across AI, next-gen SIEM, cloud, identity, and exposure management advances us towards $10 billion in ending ARR. Today’s announced share repurchase reflects our confidence in CrowdStrike’s future and unwavering mission of stopping breaches.”

Commenting on the company’s financial results, Burt Podbere, CrowdStrike’s chief financial officer, added, “We achieved net new ARR and bottom-line results ahead of our expectations and generated record cash flow from operations. Our conviction in net new ARR re-acceleration and margin expansion in the second half of fiscal year 2026 is reinforced by Falcon Flex deal momentum and early Falcon Flex expansions, strong competitive win rates and robust pipeline for the second half of fiscal year 2026.”

First Quarter Fiscal 2026 Financial Highlights

• Revenue: Total revenue was $1.10 billion, a 20% increase, compared to $921.0 million in the first quarter of fiscal 2025. Subscription revenue was $1.05 billion, a 20% increase, compared to $872.2 million in the first quarter of fiscal 2025.
• Annual Recurring Revenue (ARR) grew 22% year-over-year to $4.44 billion as of April 30, 2025, of which $193.8 million was net new ARR added in the quarter.
• Subscription Gross Margin: GAAP subscription gross margin was 77%, compared to 78% in the first quarter of fiscal 2025. Non-GAAP subscription gross margin was 80%, compared to 81% in the first quarter of fiscal 2025.
• Income/Loss from Operations: GAAP loss from operations was $124.7 million, compared to GAAP income from operations of $6.9 million in the first quarter of fiscal 2025. Non-GAAP income from operations was $201.1 million, compared to $213.3 million in the first quarter of fiscal 2025.
• Net Income/Loss Attributable to CrowdStrike: GAAP net loss attributable to CrowdStrike was $110.2 million, compared to GAAP net income attributable to CrowdStrike of $42.8 million in the first quarter of fiscal 2025. GAAP net loss per share attributable to CrowdStrike, diluted, was $0.44, compared to GAAP net income per share attributable to CrowdStrike, diluted, of $0.17 in the first quarter of fiscal 2025. Non-GAAP net income attributable to CrowdStrike was $184.7 million, compared to $196.8 million in the first quarter of fiscal 2025. Non-GAAP net income attributable to CrowdStrike per share, diluted, was $0.73, compared to $0.79 in the first quarter of fiscal 2025.
• Cash Flow: Net cash generated from operations was a record $384.1 million, compared to $383.2 million in the first quarter of fiscal 2025. Free cash flow was $279.4 million, compared to $322.5 million in the first quarter of fiscal 2025.
• Cash and Cash Equivalents grew to a record $4.61 billion as of April 30, 2025.

Share Repurchase Authorization

CrowdStrike’s board of directors approved a share repurchase program of up to $1 billion of CrowdStrike’s common stock. The authorization gives CrowdStrike flexibility to repurchase shares of its common stock opportunistically, depending on market prices and other factors. Repurchases may be made from time to time using a variety of methods, including open market purchases, privately negotiated transactions, 10b5-1 trading plans and other means. The timing, manner, price and amount of any repurchases will be determined by CrowdStrike in its discretion and will depend on a variety of factors, including legal requirements, market prices and economic and market conditions.

Recent Highlights

• CrowdStrike’s module adoption rates were 48%, 32%, and 22% for six or more, seven or more, and eight or more modules, respectively, as of April 30, 20251.
• Announced the general availability of Falcon Privileged Access, a new module within Falcon Identity Protection.
• Unveiled Charlotte AI Agentic Response and Charlotte AI Agentic Workflows, marking a leap forward in modern SOC operations.
• Announced new innovations, including AI Model Scanning and detection of Shadow AI, to secure every area of cloud risk and groundbreaking agentic AI innovations built on NVIDIA AI software, setting a new standard for AI-powered cybersecurity.
• Delivered the first and only solution to bring managed threat hunting to third-party data, Falcon Adversary OverWatch Next-Gen SIEM.
• Revealed new Falcon Data Protection innovations, enabling security teams to protect sensitive data across endpoints, cloud environments and GenAI and SaaS applications to prevent exfiltration by insiders and identity-based attackers.
• Introduced new CrowdStrike Falcon Exposure Management innovations, accelerating cybersecurity consolidation by eliminating outdated vulnerability management tools and extending AI-powered risk prioritization to network assets.
• Announced a collaboration with Microsoft (Nasdaq: MSFT) to bring clarity and coordination to how cyber threat actors are identified and tracked across security vendors to accelerate cyber defenders’ response against today’s and tomorrow’s most sophisticated adversaries.
• Launched the new Services Partner Program, empowering global system integrators (GSIs), managed service providers (MSPs) and managed security service providers (MSSPs) to accelerate CrowdStrike Falcon Next-Gen SIEM adoption.
• Received the 2025 Google Cloud Security Partner of the Year Award for Workload Security, and expanded partnership with Google Cloud to enable end-to-end security for AI innovation – from code to cloud – with CrowdStrike Falcon Cloud Security.
• Recognized as Optiv’s 2024 Partner of the Year.
• Achieved Federal Risk and Authorization Management Program (FedRAMP) High Authorization, FedRAMP’s most rigorous security compliance standard.
• Named a Leader and Fast Mover in the 2025 GigaOm Radar Report for XDR2.
• Named a Leader and Out Performer in the 2025 GigaOm Radar Report for Identity Threat Detection and Response (ITDR)3.
• Recognized as an innovation and growth Leader in the inaugural 2025 Frost Radar™: Cloud and Application Runtime Security4, scoring highest of all vendors on the Innovation Index.

Financial Outlook

CrowdStrike is providing the following guidance for the fiscal second quarter of fiscal 2026 (ending July 31, 2025) and guidance for fiscal year 2026 (ending January 31, 2026).

Guidance for non-GAAP financial measures excludes stock-based compensation expense and related employer payroll taxes, amortization expense of acquired intangible assets (including purchased patents), amortization of debt issuance costs and discount, mark-to-market adjustments on deferred compensation liabilities, legal reserve and settlement charges or benefits, costs (recoveries) associated with the July 19 Incident and related matters, net, strategic plan related charges5, losses (gains) and other income from strategic investments, acquisition-related expenses (credits), net, and losses (gains) from deferred compensation assets, and is adjusted for its long-term non-GAAP effective tax rate. The company has not provided the most directly comparable GAAP measures because certain items are out of the company’s control or cannot be reasonably predicted. Accordingly, a reconciliation for non-GAAP income from operations, non-GAAP net income attributable to CrowdStrike, and non-GAAP net income per share attributable to CrowdStrike common stockholders is not available without unreasonable effort.

These statements are forward-looking and actual results may differ materially as a result of many factors. Refer to the Forward-Looking Statements safe harbor below for information on the factors that could cause the company’s actual results to differ materially from these forward-looking statements.

Conference Call Information

CrowdStrike will host a conference call for analysts and investors to discuss its earnings results for the first quarter of fiscal 2026 and outlook for its fiscal second quarter and fiscal year 2026 today at 2:00 p.m. Pacific time (5:00 p.m. Eastern time). A recorded webcast of the event will also be available for one year on the CrowdStrike Investor Relations website ir.crowdstrike.com.

Forward-Looking Statements

This press release contains forward-looking statements that involve risks and uncertainties, including statements regarding CrowdStrike’s future growth, and future financial and operating performance, including CrowdStrike’s financial outlook for the second quarter fiscal 2026, and fiscal year 2026, and beyond. There are a significant number of factors that could cause actual results to differ materially from statements made in this press release, including: risks associated with the content configuration update CrowdStrike released on July 19, 2024 for its Falcon sensor that resulted in system crashes for certain Windows systems (the “July 19 Incident”); whether and under what conditions CrowdStrike decides to execute on its stock repurchase program; the risk that the strategic plan could negatively affect CrowdStrike’s business operations; risks associated with managing CrowdStrike’s rapid growth; CrowdStrike’s ability to identify and effectively implement necessary changes to address execution challenges; risks associated with new products and subscription and support offerings, including the risk of defects, errors, or vulnerabilities; CrowdStrike’s ability to respond to an intensely competitive market; length and unpredictability of sales cycles; CrowdStrike’s ability to attract new and retain existing customers; CrowdStrike’s ability to successfully integrate acquisitions; the failure to timely develop and achieve market acceptance of new products and subscriptions as well as existing products and subscriptions and support; CrowdStrike’s ability to collaborate and integrate its products with offerings from other parties to deliver benefits to customers; industry trends; rapidly evolving technological developments in the market for security products and subscription and support offerings; and general market, political, economic, and business conditions, including those related to a deterioration in macroeconomic conditions, inflation, geopolitical uncertainty and conflicts, public health crises, and volatility in the banking and financial services sector.

Additional risks and uncertainties that could affect CrowdStrike’s financial results are included in the filings CrowdStrike makes with the Securities and Exchange Commission (“SEC”) from time to time, particularly under the captions “Risk Factors” and “Management’s Discussion and Analysis of Financial Condition and Results of Operations,” including CrowdStrike’s most recently filed Annual Report on Form 10-K, most recently filed Quarterly Report on Form 10-Q, and subsequent filings.

Actual outcomes and results may differ materially from those contemplated by these forward-looking statements as a result of such risks and uncertainties. All forward-looking statements in this press release are based on information available to CrowdStrike as of the date hereof, and CrowdStrike does not assume any obligation to update the forward-looking statements provided to reflect events that occur or circumstances that exist after the date on which they were made.

Use of Non-GAAP Financial Information

CrowdStrike believes that the presentation of non-GAAP financial information provides important supplemental information to management and investors regarding financial and business trends relating to CrowdStrike’s financial condition and results of operations. Effective February 1, 2025, CrowdStrike is using a long-term projected non-GAAP tax rate of 22.5% and presenting employer payroll taxes related to employee stock-based award transactions as part of stock-based compensation expense. For further information regarding these changes and non-GAAP measures, including the reconciliation of these non-GAAP financial measures to their most directly comparable GAAP financial measures, please refer to the financial tables below, as well as the “Explanation of Non-GAAP Financial Measures” and “Change in Non-GAAP Measures Presentation” sections of this press release.

Channels for Disclosure of Information

CrowdStrike intends to announce material information to the public through the CrowdStrike Investor Relations website ir.crowdstrike.com, SEC filings, press releases, public conference calls, and public webcasts. CrowdStrike uses these channels, as well as social media and its blog, to communicate with its investors, customers, and the public about the company, its offerings, and other issues. It is possible that the information CrowdStrike posts on social media and its blog could be deemed to be material information. As such, CrowdStrike encourages investors, the media, and others to follow the channels listed above, including the social media channels listed on CrowdStrike’s investor relations website, and to review the information disclosed through such channels. Any updates to the list of disclosure channels through which CrowdStrike will announce information will be posted on the investor relations page on CrowdStrike’s website.

References and Definitions

1. Module adoption rates are calculated by taking the total number of customers with six or more, seven or more, and eight or more modules, respectively, divided by the total number of subscription customers (excluding Falcon Go customers). Falcon Go customers are defined as customers who have subscribed with the Falcon Go bundle, a package designed for organizations with 100 endpoints or less.
2. GigaOm Radar: Extended Detection and Response (XDR) v4, 22 April 2025
3. GigaOm Radar: Identity Threat Detection and Response (ITDR) v2, 22 May 2025
4. Frost Radar™: Cloud/Application Runtime Security, 2025
5. CrowdStrike announced a strategic plan on May 6, 2025. Substantially all of the remainder of charges in connection with the strategic plan will be incurred in the second quarter of fiscal 2026. Refer to the Form 8-K filed on May 7, 2025 for additional information.

About CrowdStrike Holdings

CrowdStrike (Nasdaq: CRWD), a global cybersecurity leader, has redefined modern security with the world’s most advanced cloud-native platform for protecting critical areas of enterprise risk – endpoints and cloud workloads, identity, and data.

Powered by the CrowdStrike Security Cloud and world-class AI, the CrowdStrike Falcon® platform leverages real-time indicators of attack, threat intelligence, evolving adversary tradecraft, and enriched telemetry from across the enterprise to deliver hyper-accurate detections, automated protection and remediation, elite threat hunting, and prioritized observability of vulnerabilities.

Purpose-built in the cloud with a single lightweight-agent architecture, the Falcon platform delivers rapid and scalable deployment, superior protection and performance, reduced complexity, and immediate time-to-value.

CrowdStrike: We stop breaches.

For more information, please visit: ir.crowdstrike.com

© 2025 CrowdStrike, Inc. All rights reserved. CrowdStrike and CrowdStrike Falcon are marks owned by CrowdStrike, Inc. and are registered in the United States and other countries. CrowdStrike owns other trademarks and service marks and may use the brands of third parties to identify their products and services.