CrowdStrike Posts Record Quarter as AI Security Fears Flip Into Demand

Quick Facts

• CrowdStrike posted record Q2 FY2027 revenue of $1.47 billion, up 26% year-over-year, with net new ARR of $332.8 million — a 51% increase from a year ago.
• Annual recurring revenue reached $5.84 billion, and the company raised its full-year ARR growth outlook by 630 basis points to 34%.
• Falcon Flex ARR surpassed $2.29 billion, growing 101% year-over-year, as 935 new Flex accounts were added in the quarter alone.

When Anthropic’s Claude Mythos model demonstrated it could identify software vulnerabilities in minutes rather than days, cybersecurity stocks collapsed. CrowdStrike fell 7% in the first selloff, then dropped another 8% in a second wave. Investors feared AI-driven threat discovery would make traditional security tools obsolete.

That fear proved short-lived. CrowdStrike turned the Mythos moment into a sales catalyst, positioning itself as the company that secures AI where it actually runs. The market moved with it.

“Q2 was the best quarter in CrowdStrike’s history,” said CEO George Kurtz on the August 26 earnings call. “The Mythos moment translated into mass-market acceptance that AI adoption needs security, and that’s CrowdStrike.”

Total revenue reached $1.47 billion for the quarter ending July 31, compared to $1.17 billion in the same period a year ago. Subscription revenue grew 27% to $1.40 billion. The company reported $530.3 million in operating cash flow, up from $332.8 million a year earlier, and held $5.01 billion in cash.

CrowdStrike lifted its full-year revenue outlook to between $5.99 billion and $6.01 billion. CFO Burt Podbere said the record Q3 pipeline drove the guidance raise, pushing the FY2027 ARR growth rate from an initial target of roughly 27.7% to 34% — a 1,150 basis point swing from where the year started.

The company joined Project Glasswing as a founding member after Mythos went public. The arrangement splits responsibility clearly: Anthropic builds the AI model; CrowdStrike secures the environments where that model executes. CrowdStrike brought sensor-level visibility across enterprise endpoints, processing a trillion events per day across more than 280 tracked adversary groups.

The Falcon platform now spans 33 modules across 10 control points, including endpoint, cloud, identity, next-gen SIEM, and AI security. Cloud security ARR has crossed $905 million. Next-gen SIEM stands at $695 million. Identity security sits at $585 million. Together, those three segments exceed $2.18 billion in ARR and are growing above 39% year-over-year.

That math matters for founders evaluating vendor consolidation. Those three product lines alone represent roughly 37% of CrowdStrike’s total ARR. The company is no longer an endpoint security vendor that happens to offer adjacent products — it is running multiple scaled businesses inside a single platform.

Falcon Flex, the company’s platform licensing model, is the mechanism driving that consolidation. Flex ARR surpassed $2.29 billion and grew 101% year-over-year. CrowdStrike added 935 Flex accounts in Q2 alone, and Podbere confirmed those accounts are generating larger, longer-term deals.

Kurtz said the company’s top 10 deals by value in the quarter all came from Flex accounts. The structure lets customers commit to the platform, then activate modules as needed — reducing procurement friction while locking in spending.

CrowdStrike estimates its total available market at $149 billion in calendar 2026, growing to $325 billion by 2030. The company has set a public target of $20 billion in ending ARR by fiscal 2036, up from $5.84 billion today. Whether that target holds depends on how fast enterprise AI deployment accelerates — and whether security spending scales with it.

For software executives watching security budgets, the trend is clear. The AI threat surface is expanding faster than most security teams anticipated, and consolidation around platforms with broad visibility is winning deals over point solutions.

Read more: CrowdStrike’s post-Mythos surge: Moat, momentum and the blast-radius test