CrowdStrike’s share price has roughly doubled over the past year, but the rally is not simply an AI-security narrative.
The strongest explanation is recurring revenue acceleration.
Fiscal Q2 2027 net new annual recurring revenue reached a record $333 million, up 51% year over year.
Ending ARR reached $5.84 billion, up 25%.
Management described the quarter as the best in the company’s history and raised full-year net new ARR growth expectations.
That is a fundamental change.
The key mechanism is Falcon Flex.
Instead of purchasing individual security modules one at a time, customers commit a broader spending pool across CrowdStrike’s platform.
That makes it easier to add products over time.
Ending ARR from accounts using Falcon Flex exceeded $2.29 billion, up 101% year over year.
That means a substantial portion of CrowdStrike’s recurring revenue is now tied to customers who can expand across the platform.
The source also highlights “re-flex” behavior.
Customers can use their original commitments faster than expected and return to increase them.
That is valuable because expansion inside an existing account is generally cheaper than winning a new customer from scratch.
New logo growth still matters, but installed-base expansion can improve durability.
The newer product areas are also becoming meaningful.
Cloud security, next-generation SIEM and identity products together represent a large recurring-revenue base.
AI detection and response adds another potential growth engine as enterprises begin deploying autonomous agents.
The risk is valuation.
A company can have excellent fundamentals and still be a poor investment at the wrong price.
CrowdStrike’s market value implies that investors expect years of strong growth and improving profitability.
That creates asymmetry.
If net new ARR keeps accelerating, the premium can be justified.
If growth slows to a more normal software rate, the multiple can compress quickly.
GAAP profitability also remains relatively thin compared with the valuation.
Free cash flow is much stronger, which supports the bull case.
Fiscal Q2 free cash flow reached $377 million.
That shows the business can generate substantial cash even while GAAP operating income remains pressured by stock-based compensation and other costs.
The long-term opportunity is large because security spending is increasingly strategic.
AI expands the number of identities, applications and automated workflows that need protection.
CrowdStrike’s platform breadth positions it well.
Customer concentration is relatively low compared with hardware vendors, which makes CrowdStrike’s recurring-revenue model attractive. Thousands of enterprises renew subscriptions, reducing dependence on any single account.
Falcon Flex can improve that diversification further by broadening product usage inside many customers.
The 2024 outage remains an important risk reminder. Security vendors are deeply embedded in customer infrastructure, so operational failures can damage trust quickly. CrowdStrike’s subsequent retention and ARR acceleration suggest the franchise recovered, but platform centrality creates responsibility as well as pricing power.
Stock-based compensation is another variable investors should monitor. Free cash flow can look excellent while per-share economics are diluted if share issuance remains high.
The cleanest long-term metric is therefore free cash flow per diluted share alongside ARR growth. If both rise, the premium valuation becomes easier to justify.
International expansion can provide another growth lever. Large global enterprises need consistent endpoint, cloud and identity protection across jurisdictions. CrowdStrike can scale the same cloud-native architecture internationally, although data-residency and sovereign-security requirements may require local adaptations. That opportunity can extend the runway beyond the current U.S. installed base.
The competitive benchmark should also include Microsoft, which can bundle security across cloud and productivity contracts. CrowdStrike’s premium depends on customers believing its independent platform delivers better outcomes. That makes win rates against bundled alternatives and expansion inside large enterprises important indicators to follow.
One additional indicator is the mix between new-logo ARR and expansion ARR. A healthy platform should win new customers while also increasing spend inside the installed base. CrowdStrike’s recent results show strength in both, which is more durable than relying on one channel. If either side weakens materially, the premium valuation becomes harder to defend.
BTI’s bottom line: CrowdStrike doubled because recurring revenue accelerated, not simply because investors discovered an AI theme. Falcon Flex is the most important indicator of whether that momentum lasts. The business is performing exceptionally well; the stock price now requires that performance to remain exceptional.