CrowdStrike (CRWD) at 45 Times Sales: What Net New ARR Justifies
Net new annual recurring revenue of $333 million, up 51% from a year earlier, and a one-day stock move of +20.5%: that was CrowdStrike‘s fiscal second quarter, reported on 2026-08-26. The shares now trade around $237.65, only 5.1% below the 52-week high of $250 and up 177% from the low of $86. The July 2024 outage that supposedly threatened the company is, on this evidence, a closed chapter.
That is where my interest in the outage ends, because the useful question today is a different one. The customers stayed, the growth came back faster, and the stock has recovered. So what does a market value of $243.3 billion require from here? My view: the business quality is not in doubt, the price already assumes several more years of 25% growth or better, and the margin for error is thin enough that I would want to see the ARR growth rate hold before calling it fairly priced.
What the second quarter contained
The second-quarter fiscal 2027 release, filed as an exhibit to CrowdStrike‘s 8-K on SEC EDGAR reported record net new ARR of about $333 million, roughly 51% higher than a year earlier and well above the company’s own guidance range of $284 million to $286 million. Total ARR rose 25% to about $5.84 billion. Falcon Flex, the subscription that lets a customer draw on modules from a common pool, ended the quarter above $2.29 billion of ARR, up 101%, which by the coverage I checked is about 39% of the total. Management raised its full-year net new ARR growth outlook by 630 basis points to 34% at the midpoint, and coverage of that filing puts the full-year net new ARR target at $1.350 billion to $1.359 billion.
Two things stand out. First, net new ARR is the growth in the annual contract base, and it is lumpy, so a quarter 16% above guidance is a strong data point but not a trend by itself. Second, the fast growth is concentrated in Flex. When more than a third of your ARR sits in one packaging model that just doubled, you should ask how much of it is customers buying new capability and how much is customers consolidating spending they already had. The release does not settle that, and I do not think anyone outside the company can.
The reported revenue side matches the story. Database figures show fiscal 2026 revenue of $4.8 billion, up 22% from $4.0 billion, and the latest quarter came in at $1.5 billion, up 26% year over year, an annualized run rate of about $5.9 billion. Note that revenue growth (26% in the quarter) trails ARR growth of 51% for net new ARR, which is normal, since ARR leads recognized revenue.
The outage, from a customer’s chair
A bad content update to the Falcon sensor in July 2024 crashed Windows machines at a scale that Microsoft estimated at roughly 8.5 million devices, with flights and hospitals disrupted. The expectation at the time was that a security vendor cannot survive causing the failure it sells protection against.
Why did it survive? My reasoning is about switching cost, not loyalty. Endpoint security agents sit deep in a customer’s machines and are tied into monitoring, response procedures and staff training. Replacing one means running two systems in parallel for months, and during that overlap the customer is more exposed than before. Most security teams look at that and decide to demand concessions and stay. I read the rebound in net new ARR as consistent with that story. I have no verified retention percentage to quote for the latest quarter, and I would distrust any post that quotes one without a source.
The cost of staying was paid elsewhere. Vendors typically offer credits and extended terms to keep angry customers, and rivals use the incident in sales pitches. The gross margin is one place to look for that: it was 74.7% in the latest fiscal year against 74.9% the year before, essentially flat. So the outage does not show up as damage to the unit economics of the product. If there was a cost, it appears in the income statement lower down: operating margin of -6% and net margin of -3%, both still negative on a GAAP basis.
Working out what the price assumes
Start with the raw multiples. Price to sales is about 44.7 today, against a five-year average of 25.3, and the forward figure is 36.3. Trailing P/E is 6253.9, which is a number I would ignore because trailing EPS of $0.04 is close to zero and any ratio built on it explodes. Forward EPS of $0.17 gives 1372.5 times, no more useful. For a company like this, the only sensible earnings measure is free cash flow, and I did not pull a verified figure for this post, so I stay with sales and ARR.
Now the arithmetic. Market value of $243.3 billion divided by ARR of $5.84 billion is about 42 times ARR. To see what that means, take a five-year growth path for ARR and apply different exit multiples. This is my own arithmetic, not a forecast.
| ARR growth per year | ARR in five years | Value at 10x ARR | Value at 15x ARR | Value at 20x ARR |
|---|---|---|---|---|
| 20% | about $14.5 billion | about $145 billion | about $218 billion | about $290 billion |
| 25% | about $17.8 billion | about $178 billion | about $267 billion | about $356 billion |
| 30% | about $21.7 billion | about $217 billion | about $325 billion | about $434 billion |
Read it this way. If ARR grows 25% a year and the market in five years pays 15 times ARR, the company is worth about $267 billion, only around 10% above today’s $243.3 billion. That is roughly 2% a year of price appreciation, before considering dilution from stock compensation. To earn a decent return on a purchase at this price, you need either growth of 30% or more for five years, or a multiple at exit that stays above 15 times ARR, or both. A holder who bought at today’s price and got 25% growth and a 10 times multiple would lose money.
That is the uncomfortable part. Software multiples fell hard in earlier cycles, and 10 times ARR is not a crash scenario for a maturing security vendor. I made a similar argument for a different type of expensive stock in my note on what a P/E of 35 requires: the price can be right and still leave no room for a mistake.
No cushion, no matter how good the quarter was.
What the market is telling us
The analysts are more optimistic than the arithmetic. Of 35 analysts in the data, 86% rate the stock a buy. The average target is $250, only 5% above the current price, with a range from $210 to $425. I find the spread more informative than the average: a high target 79% above the price and a low target -12% below it means even the professionals disagree by a factor of two. Short interest sits at 2.4% of shares, which is low and says nobody is loudly betting against the stock.
The stock’s move after the last report, +20.5%, compares with an average earnings-day move of 7.5% in the data. So the reaction was nearly three times the usual size. I treat that as a measure of how much the market had priced in a weak outcome beforehand, and it does not tell me what happens next. Big positive gaps are followed by anything: continuation, a slow fade, or a sideways quarter.
Where the platform push could fail
The company’s strategy is to sell more modules to the same customer, and the Flex model is the delivery mechanism. Bundling works when customers are happy to consolidate vendors. It works less well when a buyer worries about concentration, which is a fair thing to worry about after an outage that showed what one vendor’s mistake can do. That tension is the most interesting risk in my view. The same July 2024 event that customers forgave might, in a procurement committee, argue for splitting security across two vendors rather than one.
Competition is the other risk. Microsoft, discussed in my earlier post on its valuation, bundles security into enterprise agreements, and a buyer who already pays for that bundle has a reason to push back on a large Flex commitment. I have no verified market-share data for this post, so I will not put a number on it.
Uncertainty I will state plainly: I do not know how much of the 101% Flex growth is new spending, and I do not know the company’s cash flow margin in the latest quarter from a source I checked. If Flex growth were mostly conversion of existing contracts, the forward growth rate would be lower than the headline suggests, and the table above would tilt toward the 20% row.
The ARR line I will check next
The number I would watch is net new ARR growth in the next report. Guidance implies roughly $1.35 billion of net new ARR for the full fiscal year. If quarterly net new ARR stays above about $300 million and total ARR growth stays at or above 25%, the 25% row of the table remains realistic and the price is at least coherent. If ARR growth slips toward 20%, the 20% row applies, and I would expect the multiple to compress.
I would not buy at 42 times ARR on the strength of one record quarter, however good it was. I would wait for a second one, or for a price that leaves room for 10 times ARR to be a sensible exit. What would prove me wrong: net new ARR growth above 40% for three more quarters, which would push me toward the 30% row and make today’s price look cheap in hindsight.
Analysis and opinion only, not investment advice. Figures come from CrowdStrike’s second-quarter fiscal 2027 release, its 8-K exhibit and its 10-Q filings on SEC EDGAR, and crowdstrike.com; valuation multiples are approximate and were checked on September 22, 2026.