CrowdStrike Holdings, Inc. Q2 FY2027 earnings call

• AI Security Inflection: The 'Mythos' moment has transitioned into sustained acceleration, driven by the realization that AI adoption creates significant cyber risks from rogue agents.
• Falcon Flex Strategy: The 'Flex First' go-to-market motion is driving platform consolidation. Over 935 new Flex accounts were added, with customers seeing >40% ARR uplift upon conversion and 53% uplift after reflexing twice.
• Product Expansion: AIDR is surging as enterprises seek visibility into AI usage. Next-Gen SIEM is becoming the SOC operating system due to its friction-free deployment of first-party data.
• Ecosystem Growth: Project Quiltworks has mobilized over 25 partners, generating nearly $400 million in pipeline. GSI business grew nearly 50% year-over-year.
• Marketplace Success: Record transaction volume through hyperscaler marketplaces (AWS, Google, Microsoft), exceeding $600 million in deal value in Q2 alone.

Total revenue reached $1.47 billion, up 26% year-over-year. Subscription revenue was $1.40 billion (up 27%), and professional services were a record $71 million. Ending ARR grew to $5.84 billion (up >25%). Key product segment performances include: Endpoint business accelerating for the fourth consecutive quarter; AI Detection and Response (AIDR) ending ARR nearly tripled versus Q1; Next-Gen SIEM ending ARR surpassed $695 million; Identity business ending ARR grew 34% to over $585 million; Cloud security ending ARR exceeded $905 million (up >29%); Exposure Management accelerated sequentially. Falcon Flex ending ARR surpassed $2.29 billion, growing 101% year-over-year.

• FY27 Net New ARR Guidance Raised: Management raised full-year net new ARR guidance to $1.355 billion at the midpoint, representing an increase of approximately $116 million (1,150 basis points) from the initial outlook.
• FY27 Revenue Guidance: Expected total revenue is $5.991 to $6.011 billion, up 25% year-over-year.
• Q3 FY27 Outlook: Net new ARR expected to be $343–$347 million. Total revenue expected to be $1.523–$1.529 billion.
• Profitability Metrics: Non-GAAP operating income expected to be $373–$376 million for Q3. Full-year non-GAAP net income per share expected to be $1.25–$1.26.
• Free Cash Flow: Expect Q3 free cash flow margin of 27.5% and full-year margin of at least 30%.
• XM Cyber Acquisition: Assets are expected to close in H2 FY27 but will not contribute ARR or revenue to FY27 guidance.

• Rogue AI Agents: Autonomous agents are proving capable of going rogue, swarming to attack, altering permissions, and causing organizational compromise.
• Vulnerability Patching Lag: The speed of AI-generated exploits has outpaced traditional patching windows, making real-time exposure management critical.
• Shadow AI: Unsanctioned AI usage on endpoints creates significant data leakage and identity compromise risks.
• Legacy Technology Obsolescence: Legacy endpoint detection and vulnerability management products are failing to address agentic threats, creating displacement opportunities but also highlighting the risk of outdated infrastructure.

Q: What are the key drivers behind the upside in Q2 following the 'Mythos' moment? / A: George Kurtz attributed the strength to the urgent need for protecting AI adoption, specifically citing phenomenal growth in AIDR, cloud, identity, next-gen SIEM, and endpoint security. He emphasized that companies cannot keep up with patching vulnerabilities fast enough due to autonomous agents, driving demand for CrowdStrike's real-time exposure management and runtime protection capabilities.