CrowdStrike (CRWD)
Sells Falcon subscriptions securing endpoints, identities, clouds, data, security operations, and enterprise AI.
Something off on this page? Send us feedback.
Nearly all of CrowdStrike is recurring access to Falcon, one cloud-based security system that starts with a small program on each customer's computers. It is growing outward into cloud systems, security data, identities and artificial-intelligence software while managed experts fill staffing gaps. The whole model depends on that common program staying reliable: one bad update can reach many customers at once.
Item facts: FY2026 · year ended Jan 31, 2026, from filings, earnings calls and company pages.
Judgment weights, not filed revenue
The band summarizes business focus and direction. ~ marks estimates.
9 in detail · 15 more below
CrowdStrike Endpoint Security
Falcon's first and largest job is guarding employee computers and servers. Its small installed program opens the door to other tools, but the July 2024 update failure showed why reliability matters.
Competes with Microsoft Defender for Endpoint (Microsoft) · Singularity Endpoint (SentinelOne)
In plain English
A small Falcon program sits on each laptop or server and watches for behavior that looks like an attack. Think of it as one building guard who also keeps the visitor book: the same lookout can spot trouble and supply clues to every other Falcon tool.
Companies and governments pay for each protected machine, usually for one to three years. Adding machines or more kinds of protection raises the bill, while keeping the same installed program makes additional tools easier to adopt. That convenience only works if updates remain safe across many different computer systems.
Falcon Flex
A multiyear spending pool customers can move among eligible Falcon tools. By July 2026, CrowdStrike's total signed order book stood at $10.7 billion; the test is whether Flex customers deploy what they reserve and renew the arrangement.
Competes with Microsoft 365 E5 security bundle (Microsoft) · Software NGFW Credits (Palo Alto Networks)
In plain English
One prepaid tab, many choices. A customer promises to spend a set amount over several years, then can turn different Falcon tools on or swap eligible tools as its needs change.
CrowdStrike gets a larger, longer commitment and customers avoid negotiating a fresh purchase every time they add protection. The money still comes from the underlying tools rather than from Flex itself. Every one of the ten largest deals in the July 2026 quarter used the program, showing how central this buying format has become.
CrowdStrike Falcon Cloud Security
Protection for software built and run on rented online computers. By July 2026, its yearly subscription value was growing more than 29%; continued expansion of cloud and AI systems is the watchpoint.
Competes with Wiz Platform (Wiz) · Microsoft Defender for Cloud (Microsoft)
In plain English
Picture a business renting an enormous computer room it never physically visits. Falcon Cloud Security checks what is being built there, how it is configured and what happens after it starts running, so one weak setting or attacked program is easier to find.
Cloud engineering and security teams pay recurring fees to cover those rented computers, containers—small packaged pieces of software—and applications. More cloud use creates more things to protect. Sales can also pass through online cloud stores, letting customers use money they already promised to their cloud provider.
CrowdStrike Falcon Next-Gen SIEM
A searchable home for security records. By July 2026, its yearly subscription value was growing more than 60%; winning depends on moving customers from older systems without letting data-storage costs swell.
Competes with Microsoft Sentinel (Microsoft) · Cortex XSIAM (Palo Alto Networks)
In plain English
Every computer system leaves a running diary of what happened. This product gathers those diaries from Falcon and other tools, stores them and helps a security team search for the sequence that reveals an attack.
Customers pay to bring in and keep large amounts of data, then investigate it from one place. CrowdStrike wins when a company replaces an older record-search system or adds Falcon beside it. The economics depend on connecting many data sources and searching them quickly without storage and processing costs eating the value of the sale.
CrowdStrike Falcon Next-Gen Identity Security
Protection for the digital identities used by people, services and machines. By July 2026, its yearly subscription value was growing more than 33%; machine and AI-assistant access broadens the job.
Competes with Identity Threat Protection with Okta AI (Okta) · Defender for Identity / Entra ID Protection (Microsoft)
In plain English
A password is only one way through a digital door. Stolen employee accounts, powerful service accounts and automatic assistants can all be used to enter places they should not, so Falcon watches how each identity behaves and can cut off risky access.
Identity and security teams subscribe because one stolen login can cross many systems. CrowdStrike connects company lists of users and online applications, then applies checks continuously rather than only at sign-in. More non-human accounts create more doors to police, but the product must work across a customer's mismatched collection of systems.
CrowdStrike Falcon Exposure Management
Inventories technology, finds weak spots and ranks the ones attackers can realistically reach. The next step is folding in pending XM Cyber tools for tracing attack paths and safely practicing attacks.
Competes with Tenable One (Tenable) · Enterprise TruRisk / VMDR (Qualys)
In plain English
Before fixing every crack, a company needs to know which walls exist and which cracks lead somewhere important. Exposure Management lists devices and software, finds weaknesses, maps possible routes through them and pushes the most dangerous repairs to the front.
Security and information-technology teams subscribe to replace scattered scanning tools and shorten an otherwise endless repair list. Its value rises as a company accumulates more technology, but useful rankings depend on discovering the whole estate and knowing which weaknesses attackers are actually using.
Falcon AI Detection and Response / Falcon Guardian
A very small, early business for finding company AI use and stopping attacks on AI applications and automatic assistants. Interest is accelerating from a tiny base; the watchpoint is whether announced demand becomes a meaningful paid line.
Competes with Cisco AI Defense (Cisco) · Wiz AI Security (Wiz)
In plain English
Companies are letting software assistants read files, make choices and take actions. Falcon AI Detection and Response finds where that software is being used and watches for attacks on it; Falcon Guardian extends the check to assistants acting on an employee computer.
Businesses using AI that creates content pay to see unofficial use and control what models, applications and assistants do. The product arrived late in FY2026 after CrowdStrike bought Pangea, so its contribution was still small. Fast recent growth therefore starts from a tiny base, and sales dollars remain undisclosed.
Falcon Complete Next-Gen MDR
Around-the-clock monitoring and response for customers without enough security staff. A Kroll program targets more than 500,000 protected computers; delivery must scale without thinning the human expertise customers are buying.
Competes with Defender Experts for XDR (Microsoft) · Unit 42 MDR (Palo Alto Networks)
In plain English
Some customers want the alarm system and the people watching it. Falcon Complete adds CrowdStrike specialists who monitor warnings, hunt for hidden attackers, investigate trouble and respond across computers, cloud systems, identities and security records.
Enterprises and security-service firms pay a recurring fee because hiring and staffing their own round-the-clock team is difficult. Human judgment makes this more than software, while Falcon's shared data helps each specialist cover more ground. Growth depends on having enough skilled people, reliable access and permission to act quickly when an attack begins.
Professional Services
Hands-on breach response, investigation, setup and training produced $247.3 million in FY2026 and grew by nearly a third. It is small and people-heavy, but emergency work can introduce customers to subscriptions that guard them afterward.
Competes with Mandiant Incident Response (Google Cloud) · Unit 42 Incident Response (Palo Alto Networks)
In plain English
This is the fire brigade rather than the alarm. When an organization is breached, CrowdStrike specialists can trace what happened, contain the damage, study malicious software and preserve evidence; they also help customers install tools and train staff.
Buyers pay for hours, a fixed project or ongoing access to experts. More incidents and more service hours lifted FY2026 revenue, but people limit how efficiently the work scales. Its strategic job is larger than its sales share: helping a frightened customer through an attack can lead to a lasting Falcon subscription once the immediate emergency is over.
CrowdStrike Endpoint SecurityFalcon's first and largest job is guarding employee computers and servers. Its small installed program opens the door to other tools, but the July 2024 update failure showed why reliability matters.Falcon's first and largest job is guarding employee computers and servers. Its small installed program opens the door to other tools, but the July 2024 update failure showed why reliability matters.
In plain English
A small Falcon program sits on each laptop or server and watches for behavior that looks like an attack. Think of it as one building guard who also keeps the visitor book: the same lookout can spot trouble and supply clues to every other Falcon tool.
Companies and governments pay for each protected machine, usually for one to three years. Adding machines or more kinds of protection raises the bill, while keeping the same installed program makes additional tools easier to adopt. That convenience only works if updates remain safe across many different computer systems.
Competes with Microsoft Defender for Endpoint (Microsoft) · Singularity Endpoint (SentinelOne)
Falcon FlexA multiyear spending pool customers can move among eligible Falcon tools. By July 2026, CrowdStrike's total signed order book stood at $10.7 billion; the test is whether Flex customers deploy what they reserve and renew the arrangement.A multiyear spending pool customers can move among eligible Falcon tools. By July 2026, CrowdStrike's total signed order book stood at $10.7 billion; the test is whether Flex customers deploy what they reserve and renew the arrangement.
In plain English
One prepaid tab, many choices. A customer promises to spend a set amount over several years, then can turn different Falcon tools on or swap eligible tools as its needs change.
CrowdStrike gets a larger, longer commitment and customers avoid negotiating a fresh purchase every time they add protection. The money still comes from the underlying tools rather than from Flex itself. Every one of the ten largest deals in the July 2026 quarter used the program, showing how central this buying format has become.
Competes with Microsoft 365 E5 security bundle (Microsoft) · Software NGFW Credits (Palo Alto Networks)
CrowdStrike Falcon Cloud SecurityProtection for software built and run on rented online computers. By July 2026, its yearly subscription value was growing more than 29%; continued expansion of cloud and AI systems is the watchpoint.Protection for software built and run on rented online computers. By July 2026, its yearly subscription value was growing more than 29%; continued expansion of cloud and AI systems is the watchpoint.
In plain English
Picture a business renting an enormous computer room it never physically visits. Falcon Cloud Security checks what is being built there, how it is configured and what happens after it starts running, so one weak setting or attacked program is easier to find.
Cloud engineering and security teams pay recurring fees to cover those rented computers, containers—small packaged pieces of software—and applications. More cloud use creates more things to protect. Sales can also pass through online cloud stores, letting customers use money they already promised to their cloud provider.
Competes with Wiz Platform (Wiz) · Microsoft Defender for Cloud (Microsoft)
CrowdStrike Falcon Next-Gen SIEMA searchable home for security records. By July 2026, its yearly subscription value was growing more than 60%; winning depends on moving customers from older systems without letting data-storage costs swell.A searchable home for security records. By July 2026, its yearly subscription value was growing more than 60%; winning depends on moving customers from older systems without letting data-storage costs swell.
In plain English
Every computer system leaves a running diary of what happened. This product gathers those diaries from Falcon and other tools, stores them and helps a security team search for the sequence that reveals an attack.
Customers pay to bring in and keep large amounts of data, then investigate it from one place. CrowdStrike wins when a company replaces an older record-search system or adds Falcon beside it. The economics depend on connecting many data sources and searching them quickly without storage and processing costs eating the value of the sale.
Competes with Microsoft Sentinel (Microsoft) · Cortex XSIAM (Palo Alto Networks)
CrowdStrike Falcon Next-Gen Identity SecurityProtection for the digital identities used by people, services and machines. By July 2026, its yearly subscription value was growing more than 33%; machine and AI-assistant access broadens the job.Protection for the digital identities used by people, services and machines. By July 2026, its yearly subscription value was growing more than 33%; machine and AI-assistant access broadens the job.
In plain English
A password is only one way through a digital door. Stolen employee accounts, powerful service accounts and automatic assistants can all be used to enter places they should not, so Falcon watches how each identity behaves and can cut off risky access.
Identity and security teams subscribe because one stolen login can cross many systems. CrowdStrike connects company lists of users and online applications, then applies checks continuously rather than only at sign-in. More non-human accounts create more doors to police, but the product must work across a customer's mismatched collection of systems.
Competes with Identity Threat Protection with Okta AI (Okta) · Defender for Identity / Entra ID Protection (Microsoft)
CrowdStrike Falcon Exposure ManagementInventories technology, finds weak spots and ranks the ones attackers can realistically reach. The next step is folding in pending XM Cyber tools for tracing attack paths and safely practicing attacks.Inventories technology, finds weak spots and ranks the ones attackers can realistically reach. The next step is folding in pending XM Cyber tools for tracing attack paths and safely practicing attacks.
In plain English
Before fixing every crack, a company needs to know which walls exist and which cracks lead somewhere important. Exposure Management lists devices and software, finds weaknesses, maps possible routes through them and pushes the most dangerous repairs to the front.
Security and information-technology teams subscribe to replace scattered scanning tools and shorten an otherwise endless repair list. Its value rises as a company accumulates more technology, but useful rankings depend on discovering the whole estate and knowing which weaknesses attackers are actually using.
Competes with Tenable One (Tenable) · Enterprise TruRisk / VMDR (Qualys)
Falcon AI Detection and Response / Falcon GuardianA very small, early business for finding company AI use and stopping attacks on AI applications and automatic assistants. Interest is accelerating from a tiny base; the watchpoint is whether announced demand becomes a meaningful paid line.A very small, early business for finding company AI use and stopping attacks on AI applications and automatic assistants. Interest is accelerating from a tiny base; the watchpoint is whether announced demand becomes a meaningful paid line.
In plain English
Companies are letting software assistants read files, make choices and take actions. Falcon AI Detection and Response finds where that software is being used and watches for attacks on it; Falcon Guardian extends the check to assistants acting on an employee computer.
Businesses using AI that creates content pay to see unofficial use and control what models, applications and assistants do. The product arrived late in FY2026 after CrowdStrike bought Pangea, so its contribution was still small. Fast recent growth therefore starts from a tiny base, and sales dollars remain undisclosed.
Competes with Cisco AI Defense (Cisco) · Wiz AI Security (Wiz)
Falcon Complete Next-Gen MDRAround-the-clock monitoring and response for customers without enough security staff. A Kroll program targets more than 500,000 protected computers; delivery must scale without thinning the human expertise customers are buying.Around-the-clock monitoring and response for customers without enough security staff. A Kroll program targets more than 500,000 protected computers; delivery must scale without thinning the human expertise customers are buying.
In plain English
Some customers want the alarm system and the people watching it. Falcon Complete adds CrowdStrike specialists who monitor warnings, hunt for hidden attackers, investigate trouble and respond across computers, cloud systems, identities and security records.
Enterprises and security-service firms pay a recurring fee because hiring and staffing their own round-the-clock team is difficult. Human judgment makes this more than software, while Falcon's shared data helps each specialist cover more ground. Growth depends on having enough skilled people, reliable access and permission to act quickly when an attack begins.
Competes with Defender Experts for XDR (Microsoft) · Unit 42 MDR (Palo Alto Networks)
Professional ServicesHands-on breach response, investigation, setup and training produced $247.3 million in FY2026 and grew by nearly a third. It is small and people-heavy, but emergency work can introduce customers to subscriptions that guard them afterward.Hands-on breach response, investigation, setup and training produced $247.3 million in FY2026 and grew by nearly a third. It is small and people-heavy, but emergency work can introduce customers to subscriptions that guard them afterward.
In plain English
This is the fire brigade rather than the alarm. When an organization is breached, CrowdStrike specialists can trace what happened, contain the damage, study malicious software and preserve evidence; they also help customers install tools and train staff.
Buyers pay for hours, a fixed project or ongoing access to experts. More incidents and more service hours lifted FY2026 revenue, but people limit how efficiently the work scales. Its strategic job is larger than its sales share: helping a frightened customer through an attack can lead to a lasting Falcon subscription once the immediate emergency is over.
Competes with Mandiant Incident Response (Google Cloud) · Unit 42 Incident Response (Palo Alto Networks)
Named in filings, launches and programs
- Falcon Data ProtectionProduct lineFinds sensitive information and controls how it moves across employee computers and cloud systems.
- Charlotte AI AgentWorksPlatformA kit for customers and partners to build automatic security assistants using Falcon data and actions.
- Falcon for ITProduct lineGives technology teams a computer inventory plus tools to search devices and fix problems remotely.
- Counter Adversary Operations / Falcon Adversary OverWatchServiceHuman threat hunters and attacker research strengthen Falcon Complete and the wider platform.
- Falcon ShieldProductChecks the security settings of online business software and now contributes to the identity-security family.
- Falcon Onum and Falcon LogScaleProduct lineRoutes, stores and searches the streams of computer records that power Falcon's security-data product.
- Falcon FoundryEcosystemLets customers and partners assemble their own Falcon applications with little hand-written code.
- CrowdStrike MarketplaceEcosystemA catalog where customers find partner connections and applications that work with Falcon.
- Project QuiltWorks / Falcon IQEcosystem · RampingA partner system for assessing and fixing technology risk, introduced as Falcon IQ in August 2026.
- SafeMind / Cyber Superintelligence LabProduct · AnnouncedNew research effort aimed at building advanced AI models specifically for cybersecurity.
- CrowdStrike Agentic Identity ProviderProduct · AnnouncedPlanned identity and permission controls for automatic AI assistants.
- XM Cyber technology assetsProduct · AnnouncedPending technology purchase intended to add attack-route pictures and safe practice attacks to Exposure Management.
- Kroll Falcon Complete for Service Providers programCustomer programA multiyear managed-security migration designed to protect more than half a million customer computers.
- Optiv channel programCustomer programA large reseller partnership that has passed $2 billion of lifetime contract value, not customer revenue.
- GuidePoint Security channel programCustomer programA reseller partnership that has passed $1 billion of cumulative CrowdStrike sales.
Falcon Data ProtectionProduct line
Finds sensitive information and controls how it moves across employee computers and cloud systems.
Charlotte AI AgentWorksPlatform
A kit for customers and partners to build automatic security assistants using Falcon data and actions.
Falcon for ITProduct line
Gives technology teams a computer inventory plus tools to search devices and fix problems remotely.
Counter Adversary Operations / Falcon Adversary OverWatchService
Human threat hunters and attacker research strengthen Falcon Complete and the wider platform.
Falcon ShieldProduct
Checks the security settings of online business software and now contributes to the identity-security family.
Falcon Onum and Falcon LogScaleProduct line
Routes, stores and searches the streams of computer records that power Falcon's security-data product.
Falcon FoundryEcosystem
Lets customers and partners assemble their own Falcon applications with little hand-written code.
CrowdStrike MarketplaceEcosystem
A catalog where customers find partner connections and applications that work with Falcon.
Project QuiltWorks / Falcon IQEcosystem · Ramping
A partner system for assessing and fixing technology risk, introduced as Falcon IQ in August 2026.
SafeMind / Cyber Superintelligence LabProduct · Announced
New research effort aimed at building advanced AI models specifically for cybersecurity.
CrowdStrike Agentic Identity ProviderProduct · Announced
Planned identity and permission controls for automatic AI assistants.
XM Cyber technology assetsProduct · Announced
Pending technology purchase intended to add attack-route pictures and safe practice attacks to Exposure Management.
Kroll Falcon Complete for Service Providers programCustomer program
A multiyear managed-security migration designed to protect more than half a million customer computers.
Optiv channel programCustomer program
A large reseller partnership that has passed $2 billion of lifetime contract value, not customer revenue.
GuidePoint Security channel programCustomer program
A reseller partnership that has passed $1 billion of cumulative CrowdStrike sales.