CrowdStrike (CRWD) Q4 2025: $224M Net New ARR Fuels AI-Native Platform Growth and $6B Contract Value
CrowdStrike’s Q4 2025 results highlight accelerating adoption of its AI-native Falcon platform, driven by strong module expansion and strategic Falcon Flex subscription deals. The company’s record $6 billion total contract value (TCV) and $1 billion in AWS Marketplace sales underscore robust ecosystem momentum. Guidance signals confidence in net new ARR reacceleration and margin expansion in the second half of fiscal 2026.
Summary
- Platform Consolidation Momentum: Falcon Flex subscription model accelerates multi-module adoption and customer commitment.
- AI Security Leadership: Falcon platform and Charlotte AI analyst drive operational efficiency and competitive differentiation.
- Robust Ecosystem and Channel Growth: AWS Marketplace and global system integrators catalyze large deal flow and market penetration.
Business Overview
CrowdStrike is a leading cybersecurity software company specializing in cloud-native endpoint protection, cloud security, identity protection, and next-generation security information management (SIM). It generates revenue primarily through subscription services delivered via its Falcon platform, which integrates multiple security modules into a single AI-powered platform. Major segments include endpoint security, cloud security, identity protection, and emerging exposure management solutions.
Performance Analysis
CrowdStrike closed fiscal 2025 with $4.24 billion in ending annual recurring revenue (ARR), reflecting 23% year-over-year growth, fueled by $224 million in net new ARR in Q4 alone. Total revenue for the quarter reached $1.06 billion, a 25% increase year-over-year, with subscription revenue surpassing $1 billion for the first time, growing 27% year-over-year. The company’s subscription gross margin remained steady at 80% non-GAAP, underscoring operational efficiency despite ongoing investments.
Operating income expanded 2% year-over-year to $217 million non-GAAP in Q4, driven by disciplined spending focused on innovation and platform resiliency. Free cash flow reached a record $1.07 billion for the full year, representing 27% of revenue. The company’s GAAP results reflected a loss attributed to acquisition-related tax expenses and one-time incident costs, but non-GAAP net income per share rose 10% year-over-year to $1.03 in Q4.
- Subscription Expansion: Module adoption accelerated with 67% of customers now using five or more modules, driven by Falcon Flex.
- Contract Value Growth: Total contract value reached $6 billion in FY25, up 40% year-over-year, highlighting strong customer commitment.
- Channel and Marketplace Leverage: Exceeding $1 billion in AWS Marketplace sales in calendar 2024, positioning CrowdStrike as a cloud procurement leader.
The quarter reflects a successful rebound from mid-year challenges, with strong customer retention at 97% gross retention and robust demand for emerging AI-native security solutions. The company’s strategic investments in AI and platform innovation position it well for sustained growth.
Executive Commentary
"Delivering $224 million of net new ARR, which brings our ending ARR to $4.24 billion, places us firmly on the flight path to our $10 billion ending ARR goal. Our Falcon platform has never been more market competitive, whether that's winning new logos or in third-party analyst research. We find ourselves placed at the epicenter of a rapidly evolving demand environment."
George Kurtz, Chief Executive Officer and Founder
"The strength of our results demonstrates the power of our business model and sales execution, highlighted by our record total contract value reaching $6 billion in FY25 with growth accelerating to 40% year over year. We expect net new ARR re-acceleration as well as operating margin and free cash flow margin expansion in the second half of FY26."
Bert Podbear, Chief Financial Officer
Strategic Positioning
1. Falcon Flex Subscription Model as a Growth Catalyst
Falcon Flex, CrowdStrike's flexible subscription licensing model, enables customers to adopt multiple security modules seamlessly with volume-based discounts. This model has driven significant upsell, with Falcon Flex deal value soaring to $2.5 billion, an 80% quarterly increase. Customers are consuming their flex pools ahead of schedule, accelerating platform adoption and deepening strategic relationships. This approach reduces sales friction and enables long-term, multi-module consolidation on the Falcon platform.
2. AI-Native Platform Leadership with Charlotte AI
CrowdStrike’s AI-powered security operations center (SOC) analyst, Charlotte AI, exemplifies the company’s agentic AI capabilities, automating threat detection and triage. Customers report substantial time savings, with Charlotte reducing manual analysis from 20-30 minutes to seconds. This innovation enhances operational efficiency and strengthens CrowdStrike’s competitive moat in AI-driven cybersecurity, positioning Falcon as the AI-native SOC platform of choice.
3. Expanding Cloud Security and Identity Protection Segments
Cloud security ARR exceeded $600 million, growing over 45% year-over-year, driven by Falcon’s frictionless cloud workload protection. Identity protection ARR surpassed $370 million, fueled by the acquisition of Adaptive Shield (now Falcon Shield) and strong demand amid escalating identity-based attacks. These segments, combined with next-gen SIM at $330 million ARR, represent over $1.3 billion in ARR and nearly 50% growth year-over-year, underscoring CrowdStrike’s expanding footprint in high-growth cybersecurity markets.
4. Exposure Management Disrupting Legacy Markets
CrowdStrike’s exposure management offering integrates vulnerability and attack surface management, enabling customers to replace legacy vulnerability tools. Early wins across diverse industries demonstrate strong market traction. The solution leverages agent-based and network scanning capabilities, fully integrated with Falcon’s AI and workflow infrastructure, enhancing security posture and module attach rates within Falcon Flex deals.
5. Ecosystem and Channel Expansion Driving Scale
CrowdStrike’s partner-first strategy is validated by 60% of new business sourced through partners, including global system integrators (GSIs) and managed security service providers (MSSPs). The company’s AWS Marketplace sales surpassed $1 billion in 2024, and Google Cloud Marketplace deals exceeded $150 million in the first year of partnership. These channels accelerate deal velocity, increase deal sizes, and provide a scalable route to market, particularly for emerging products like next-gen SIM.
Key Considerations
CrowdStrike’s Q4 performance signals a strategic inflection point driven by AI innovation and platform consolidation. Key considerations for investors include:
- Customer Commitment Package Impact: The CCP program accelerated platform adoption but will phase out, potentially leading to net new ARR reacceleration as discounts expire and contracts renew.
- Module Attach and Upsell Potential: With 67% of customers using five or more modules, the cross-sell opportunity within an expanding customer base remains significant.
- AI as a Differentiator: The agentic AI capabilities embedded in Falcon and Charlotte AI strengthen CrowdStrike’s competitive positioning in an evolving threat landscape.
- Margin Trajectory Influenced by Investments: Operating margin guidance reflects upfront investments in innovation, marketing, and platform resiliency, with expectations for margin expansion in H2 FY26.
- Channel and Marketplace Leverage: Continued growth in cloud marketplaces and partner ecosystems is critical to scaling new customer acquisition and accelerating deal cycles.
Risks
CrowdStrike faces risks including potential fluctuations in net new ARR due to timing of contract renewals and the expiration of customer commitment packages. Competitive pressures in cloud security and identity protection markets could intensify, while ongoing investments in AI and platform resiliency carry execution risk. Macroeconomic uncertainties and geopolitical tensions influencing cybersecurity demand also represent external risks to growth and margins.
Forward Outlook
For Q1 FY26, CrowdStrike guided total revenue between $1.10 billion and $1.11 billion, implying approximately 20% year-over-year growth. Non-GAAP operating income is expected between $173 million and $180 million, with non-GAAP net income attributable to CrowdStrike in the range of $162 million to $168 million. Diluted non-GAAP EPS guidance is $0.64 to $0.66.
For full-year FY26, the company projects total revenue between $4.74 billion and $4.81 billion, reflecting 20% to 22% growth. Non-GAAP operating income is expected between $944 million and $985 million, with non-GAAP net income attributable to CrowdStrike between $851 million and $883 million. Non-GAAP EPS is guided at $3.33 to $3.45.
- Management anticipates net new ARR reacceleration and operating margin expansion in the back half of FY26.
- Investments in AI, marketing, and platform resiliency are expected to deliver returns by H2 FY26, supporting margin and free cash flow improvements.
Takeaways
CrowdStrike’s Q4 2025 results confirm its successful transition to an AI-powered, multi-module security platform with strong customer engagement and ecosystem leverage. The Falcon Flex subscription model is a key strategic enabler, accelerating module adoption and deepening customer relationships. The company’s leadership in cloud security, identity protection, and next-gen SIM positions it to capitalize on growing cybersecurity demands driven by AI and digital transformation.
- Platform Expansion Drives Durable Growth: Falcon Flex and multi-module adoption demonstrate scalable, sticky customer relationships underpinning ARR growth.
- AI Innovation as a Competitive Moat: Charlotte AI and agentic AI capabilities enhance operational efficiency and differentiate Falcon in a crowded market.
- Channel and Marketplace Momentum: AWS Marketplace sales and GSI partnerships validate scalable go-to-market channels critical for future growth acceleration.
Conclusion
CrowdStrike’s Q4 and full-year 2025 performance reflect a resilient, innovation-led cybersecurity leader executing on its AI-native platform strategy. With record contract value, accelerating module adoption, and expanding ecosystem reach, the company is well positioned for sustained growth and margin expansion as it advances toward its $10 billion ARR target.
Industry Read-Through
CrowdStrike’s results underscore broader industry trends favoring integrated, AI-powered cybersecurity platforms over fragmented point solutions. The acceleration of cloud security and identity protection adoption signals growing enterprise prioritization of comprehensive, cloud-native defenses. The success of cloud marketplaces as procurement channels highlights a shift in enterprise buying patterns, which other cybersecurity vendors must adapt to. Additionally, CrowdStrike’s emphasis on agentic AI capabilities reflects a competitive imperative for security vendors to embed automation and intelligence deeply into their offerings to meet evolving threat landscapes efficiently.