# CrowdStrike (CRWD) Financial Model Free Excel 3-statement financial model and company analysis for CrowdStrike. - Canonical: https://finamodel.com/companies/crowdstrike - Industry: Cybersecurity - Downloadable model: Yes - Excel download: https://finamodel.com/company-models/CRWD.xlsx ## Model Purpose This model projects CrowdStrike's Annual Recurring Revenue (ARR) growth, cash flow generation, and non-GAAP profitability to determine an equity valuation for a standalone investor, focusing heavily on the pace of module adoption and the financial impact of customer retention following the July 2024 global IT outage. ## Company Overview CrowdStrike Holdings, Inc. is a leading cybersecurity company that provides cloud-native endpoint, cloud workload, identity, and data protection through its Falcon platform. The company operates a Software-as-a-Service (SaaS) business model, deploying a single lightweight agent architecture to collect telemetry and deliver security modules. Business segments include: - Subscription Revenue (approximately 94-95% of total revenue) - Professional Services Revenue (approximately 5-6% of total revenue, primarily incident response and proactive services) Key geographies include the United States (approximately 68% of revenue) and International markets (approximately 32% of revenue). The business model is highly asset-light and subscription-based, generating significant deferred revenue and upfront cash flow. CrowdStrike holds a dominant competitive position in endpoint security, competing primarily with Microsoft, Palo Alto Networks, and SentinelOne. A major recent event was the July 19, 2024 "Channel File 291" incident, which caused widespread global IT outages, resulting in near-term customer commitment incentives, legal scrutiny, and increased operational costs, though gross retention remained remarkably resilient at over 97%. ## Revenue Deep Dive ### Subscription Revenue - **Segment name:** Subscription - **Revenue driver formula:** Beginning ARR + Net New ARR (New Logo ARR + Expansion ARR - Churned ARR) = Ending ARR. Subscription Revenue is the recognised portion of ARR over the period. - **Historical growth rate:** 31% YoY in FY25 (reaching $3.76 billion total revenue), with Ending ARR growing 23% YoY to $4.24 billion. - **Key growth levers and headwinds:** Module adoption (e.g., LogScale, Identity Protection, and Cloud Security surpassing $1 billion in combined ARR), international expansion, and vendor consolidation. Headwinds include the financial impact of customer commitment packages issued after the July 2024 outage (estimated at $30 million per quarter in late FY25) and macroeconomic scrutiny on IT budgets. - **Pricing dynamics:** Contractual, typically billed annually in advance. Pricing scales by the number of endpoints and the number of Falcon modules adopted. - **Revenue recognition notes:** Recognised ratably over the contract term. Billed but unrecognised revenue sits in Deferred Revenue. - **Seasonality:** Q4 (ending January 31) is historically the strongest quarter for Net New ARR generation due to enterprise IT budget cycles and year-end sales incentives. ### Professional Services Revenue - **Segment name:** Professional Services - **Revenue driver formula:** Billable Hours x Average Hourly Rate, or Fixed Fee Contract Milestones. - **Historical growth rate:** 15-25% YoY, intentionally growing slower than subscription revenue. - **Key growth levers and headwinds:** Incident response engagements act as a lead generation tool for the Falcon platform. The primary headwind is capacity constraints and the strategic choice to use partners (like Mandiant or EY) rather than building a massive internal consulting arm. - **Pricing dynamics:** Spot pricing for emergency incident response, contractual for proactive retainers. - **Revenue recognition notes:** Recognised as services are delivered or milestones are achieved. - **Seasonality:** Less predictable, driven by the timing of major global cyber breaches. ## Cost Structure ### Variable Costs / COGS - **Line-by-line breakdown:** Cloud infrastructure costs (AWS, GCP), data centre co-location, amortisation of capitalised internal-use software, customer support personnel, and professional services delivery costs. - **Gross margin range:** GAAP total gross margin ranges from 74% to 76%. Non-GAAP subscription gross margin is highly stable at 80% (achieved in both FY24 and FY25). - **Key input costs and commodity exposures:** Cloud computing and storage costs are the primary inputs. - **How COGS scales with revenue:** High operating leverage. As the customer base grows, the cost of the multi-tenant cloud architecture scales sub-linearly, though massive data ingestion from modules like LogScale requires ongoing infrastructure optimisation. ### Operating Expenses - **R&D:** Typically 18-22% of revenue on a GAAP basis. It covers software engineering, threat intelligence (OverWatch), and data science teams. CrowdStrike capitalises a portion of internal-use software development costs. - **SG&A:** Sales and Marketing (S&M) is the largest expense, historically 35-40% of revenue on a GAAP basis, driven by sales commissions and marketing events. General and Administrative (G&A) runs at 7-9% of revenue. Both are heavily headcount-driven. - **Depreciation & Amortisation:** Relatively low (2-4% of revenue), split between tangible assets (servers) and amortisation of acquired intangibles and capitalised software. - **Stock-Based Compensation:** Extremely material, running at 20-24% of revenue. This is a critical adjustment between GAAP and non-GAAP metrics. - **Restructuring / one-time charges:** Historically rare, but FY25 included specific legal and remediation costs related to the July 2024 outage. ### Margin Profile - **Gross margin:** 75% GAAP, 78% non-GAAP. - **Operating margin:** GAAP operating margin is near breakeven to slightly negative (GAAP loss from operations was $120.4 million in FY25). Non-GAAP operating margin has expanded significantly, reaching 22-24% in FY25. - **Free Cash Flow margin:** 28-30% (FCF was $1.07 billion on $3.76 billion revenue in FY25). - **Margin trend:** Expanding non-GAAP margins due to economies of scale in cloud infrastructure and S&M leverage, though GAAP margins remain depressed by high stock-based compensation. ## Balance Sheet Structure - **Total assets:** Approximately $7.5 to $8.5 billion. - **Key asset categories:** Cash and cash equivalents, short-term investments, accounts receivable, deferred commissions, and goodwill. - **Goodwill & intangibles:** Approximately 10-15% of total assets, stemming from bolt-on acquisitions like Humio, Preempt, Reposify, and Bionic. - **Working capital profile:** - **Days Sales Outstanding (DSO):** 65-75 days. - **Days Inventory Outstanding (DIO):** Not applicable (SaaS business). - **Days Payable Outstanding (DPO):** 30-45 days. - **Net working capital as % of revenue:** Deeply negative. - **Is working capital positive or negative?** Negative. CrowdStrike collects cash upfront for annual subscriptions but recognises revenue over 12 months, creating a massive deferred revenue liability that funds growth. - **PP&E:** Minimal (under 5% of assets), consisting mostly of leasehold improvements and specific data centre equipment. - **Right-of-use assets / operating leases:** Material but manageable, representing office spaces globally. ## Capital Expenditure & Investment - **Capex as % of revenue:** 3-5% (historically low). - **Maintenance capex vs. growth capex:** Primarily growth capex, focused on data centre expansion and capitalised software for new module development. - **Major capex programmes underway or planned:** Ongoing investments in AI infrastructure (Charlotte AI) and global data centre footprint expansion. - **Capitalised software / development costs:** Material. The company capitalises certain costs related to the development of its Falcon platform, which are amortised over 2-3 years. - **M&A pattern:** Bolt-on acquirer. CrowdStrike buys small, niche technology companies to integrate into the Falcon platform rather than pursuing transformational, large-scale M&A. - **Typical acquisition multiple paid:** High revenue multiples (often 10x-20x ARR) for early-stage tech, though absolute dollar amounts are usually under $400 million per deal. ## Debt & Capital Structure - **Total debt:** Approximately $740 million in long-term debt (senior unsecured notes). Net debt is deeply negative due to over $4.0 billion in cash and short-term investments. - **Debt/EBITDA ratio:** Near zero on a net basis. Gross debt to non-GAAP EBITDA is well under 1.0x. - **Credit rating:** Investment grade (e.g., S&P BBB- or equivalent). - **Key debt instruments:** $740 million of 3.000% senior notes due 2029. The company also maintains an undrawn revolving credit facility. - **Maturity profile:** The primary notes mature in 2029, leaving no near-term refinancing risk. - **Interest rate profile:** Fixed rate on the senior notes. - **Covenants:** Standard investment-grade incurrence covenants; no restrictive financial maintenance covenants. - **Share repurchase programme:** The company has historically not been a major repurchaser, prioritising cash for M&A and organic growth, though they may offset dilution from stock-based compensation opportunistically. - **Dividend policy:** No dividend. 0% payout ratio. ## Cash Flow Characteristics - **Operating cash flow conversion:** Highly efficient. OCF was $1.38 billion in FY25. - **Free cash flow margin:** 28-30% of revenue ($1.07 billion FCF in FY25). - **Major non-cash items that bridge net income to OCF:** Stock-based compensation (the largest add-back), depreciation and amortisation, and amortisation of deferred contract acquisition costs. - **Working capital cash flow impact:** Massive source of cash. The increase in deferred revenue from growing ARR provides hundreds of millions in operating cash flow annually. - **Capex intensity:** Very low, typically under 5% of revenue. - **Cash tax rate vs. GAAP effective tax rate:** Cash taxes are minimal due to historical net operating losses (NOLs) and tax deductions from stock-based compensation. The company uses a projected long-term non-GAAP tax rate of 22.5% for reporting purposes starting in FY26. ## Sheet Structure 1. **Assumptions:** Hardcoded inputs for ARR growth, retention rates, margins, working capital days, and macroeconomic drivers. 2. **ARR Roll-Forward:** Beginning ARR, Net New ARR, Churn, and Ending ARR. This is the most critical sheet for a SaaS model. 3. **Revenue Build:** Conversion of ARR to Subscription Revenue, plus Professional Services revenue build. 4. **Income Statement:** GAAP and Non-GAAP views, mirroring the 10-K. Segments include Subscription Revenue, Professional Services Revenue, Subscription COGS, Professional Services COGS, S&M, R&D, and G&A. 5. **Stock-Based Compensation:** Schedule projecting SBC by department to bridge GAAP to Non-GAAP operating income. 6. **Balance Sheet:** Assets (Cash, AR, Deferred Commissions, PP&E, Goodwill) and Liabilities (Accounts Payable, Accrued Expenses, Deferred Revenue, Long-Term Debt). 7. **Working Capital:** Schedules for AR, AP, Deferred Revenue, and Deferred Commissions based on days outstanding and revenue growth. 8. **Cash Flow Statement:** Operating, Investing, and Financing cash flows. Must explicitly link Deferred Revenue changes to OCF. 9. **Debt Schedule:** Interest expense calculation and debt maturity tracking for the 2029 senior notes. 10. **DCF Valuation:** Unlevered free cash flow build, WACC calculation, terminal value, and implied share price. ## Key Financial Relationships 1. `Ending ARR = Beginning ARR + Net New ARR` 2. `Subscription Revenue = (Beginning ARR + Ending ARR) / 2 * Conversion Factor` (or modelled via deferred revenue waterfall). 3. `Total Revenue = Subscription Revenue + Professional Services Revenue` 4. `Subscription Gross Profit = Subscription Revenue - Subscription COGS` 5. `Non-GAAP Subscription Gross Margin = Subscription Gross Profit / Subscription Revenue` (Targeting 80%). 6. `Deferred Revenue Ending Balance = Deferred Revenue Beginning Balance + Billings - Recognised Revenue` 7. `Billings = Total Revenue + Change in Deferred Revenue` 8. `Free Cash Flow = Operating Cash Flow - Capital Expenditures - Capitalised Software Costs` 9. `Non-GAAP Operating Income = GAAP Operating Income + Stock-Based Compensation + Amortisation of Acquired Intangibles + Acquisition-Related Expenses` 10. `S&M Expense = Total Revenue x S&M % of Revenue` (Projected to decline as a % of revenue due to operating leverage). 11. `Interest Expense = Long-Term Debt Balance x 3.000%` 12. `Rule of 40 Metric = Total Revenue YoY Growth Rate + Free Cash Flow Margin` (CrowdStrike historically operates above the Rule of 60). ## Cross-Sheet Dependencies - The **ARR Roll-Forward** sheet dictates the **Revenue Build**, which feeds the top line of the **Income Statement**. - The **Revenue Build** drives the **Working Capital** sheet (specifically Accounts Receivable and Deferred Revenue). - The **Working Capital** sheet feeds the changes in assets and liabilities on the **Cash Flow Statement**. - The **Cash Flow Statement** determines the ending cash balance on the **Balance Sheet**. - The **Debt Schedule** calculates interest expense, which feeds the **Income Statement**, while the debt balance sits on the **Balance Sheet**. - Potential circularity exists between the **Debt Schedule** (interest expense), **Income Statement** (net income), **Cash Flow Statement** (cash balance), and **Debt Schedule** (interest income on cash balances). A circuit breaker toggle must be included. ## Sign Convention - Revenue, Assets, and Equity are entered as positive numbers. - Expenses (COGS, Opex, Interest, Taxes) are entered as positive numbers and subtracted in subtotals. - On the Cash Flow Statement, cash inflows are positive, and cash outflows (including Capex and debt repayment) are negative. - Contra-asset and contra-liability accounts should be explicitly labelled and entered as positive numbers, then subtracted in the relevant formulas. ## Things Most Likely to Go Wrong - **Ignoring the July 2024 Outage Impact:** The model must account for the $30 million quarterly revenue headwind in late FY25 and early FY26 due to customer commitment incentives. - **Misunderstanding Deferred Revenue:** Failing to link ARR growth to deferred revenue increases will severely understate Operating Cash Flow. - **GAAP vs. Non-GAAP Confusion:** Stock-based compensation runs at over 20% of revenue. Valuing the company on GAAP earnings will yield nonsensical results; the model must explicitly bridge to Non-GAAP metrics. - **Capitalised Software Costs:** CrowdStrike capitalises significant internal-use software costs. If these are excluded from Free Cash Flow calculations, FCF will be artificially inflated. - **Deferred Commissions:** SaaS companies defer sales commissions and amortise them over the expected customer life (typically 3-5 years). The model must track the deferred commission asset separately from standard prepaid expenses. - **Share Count Dilution:** High SBC means the fully diluted share count grows steadily. The model must project share count inflation (typically 1-2% annually) to accurately calculate per-share valuation metrics. - **Tax Rate Transition:** Starting in FY26, CrowdStrike uses a long-term projected non-GAAP tax rate of 22.5%. Using the historical near-zero cash tax rate in perpetuity will overvalue the business. - **Module Adoption Limits:** Assuming Net New ARR grows linearly forever ignores market saturation. The model must taper growth as the company penetrates its Total Addressable Market (TAM). ## Validation Checks - "Non-GAAP Subscription Gross Margin should remain stable at approximately 80%; flag if it deviates outside the 78-82% band." - "Free Cash Flow margin should be in the 28-33% range; flag if it drops below 25%." - "Rule of 40 check: Revenue Growth % + FCF Margin % should exceed 50% in the near term." - "Deferred Revenue balance should be roughly 60-70% of Ending ARR." - "Stock-Based Compensation should be between 18-24% of total revenue." - "Balance sheet must balance: Total Assets = Total Liabilities + Equity in every period." - "Debt/EBITDA should remain below 2.0x (currently near zero)." - "Professional Services revenue should not exceed 10% of total revenue." ## Key Assumptions (Default Values) | Assumption | Default Value | Unit | Rationale | |---|---|---|---| | FY26 ARR YoY Growth | 20.0 | % | Deceleration from FY25 (23%) due to scale and outage-related sales cycle elongation. | | Subscription Revenue as % of Total | 94.5 | % | Consistent with FY24 and FY25 actuals. | | Non-GAAP Subscription Gross Margin | 80.0 | % | Management target, achieved consistently in FY24 and FY25. | | Professional Services Gross Margin | 35.0 | % | Historical average for the services segment. | | S&M Expense (Non-GAAP) as % of Rev | 32.0 | % | Reflects operating leverage improvement from historical 35%+. | | R&D Expense (Non-GAAP) as % of Rev | 16.0 | % | Steady state investment in platform innovation. | | G&A Expense (Non-GAAP) as % of Rev | 6.0 | % | Economies of scale as the company grows. | | Stock-Based Compensation as % of Rev | 21.0 | % | Historical average, required to retain top engineering talent. | | Days Sales Outstanding (DSO) | 70 | Days | Based on historical AR and revenue trends. | | Capex & Cap. Software as % of Rev | 4.0 | % | Historical average for data centre and software investments. | | Non-GAAP Effective Tax Rate | 22.5 | % | Management's stated long-term projected rate starting FY26. | | Annual Share Count Dilution | 1.5 | % | Historical creep due to equity vesting. | | WACC / Discount Rate | 9.5 | % | Standard for high-growth, large-cap enterprise software. | | Terminal FCF Growth Rate | 3.5 | % | Long-term GDP plus structural cybersecurity tailwinds. | ## Data Sources & Benchmarks - **Filings:** SEC EDGAR (Form 10-K, 10-Q, 8-K) and the CrowdStrike Investor Relations website (ir.crowdstrike.com). - **Key Peers for Benchmarking:** Palo Alto Networks (PANW), SentinelOne (S), Microsoft (MSFT - Security division), Zscaler (ZS), and Cloudflare (NET). - **Industry Data Sources:** Gartner Magic Quadrant for Endpoint Protection Platforms, IDC Market Share reports for Corporate Endpoint Security. - **Consensus Estimates:** Bloomberg, FactSet, or Quartr for forward-looking ARR and EPS estimates. - **Proprietary Data:** Channel check reports on VAR (Value Added Reseller) sentiment post-July 2024 outage. ## Sources - CrowdStrike Q4 and Full Year Fiscal 2025 Press Release (March 4, 2025). Available at: https://ir.crowdstrike.com/ - CrowdStrike Form 10-K for Fiscal Year 2025 (Filed March 10, 2025). - Quartr API Earnings Summaries for CrowdStrike Q2 FY25 (August 2024). - VP Bank Research Report on CrowdStrike Q1 FY25 Results (June 2024). --- ## Frequently asked questions ### What does CrowdStrike do? CrowdStrike Holdings, Inc. is a leading cybersecurity company that provides cloud-native endpoint, cloud workload, identity, and data protection through its Falcon platform. It operates a Software-as-a-Service (SaaS) business model, deploying a single lightweight agent architecture to collect telemetry and deliver security modules. ### How does CrowdStrike generate revenue? CrowdStrike primarily generates revenue through subscriptions, which account for approximately 94-95% of its total revenue. The remaining 5-6% comes from professional services, including incident response and proactive services. ### What are the key assumptions for CrowdStrike's financial model? A financial model for CrowdStrike heavily focuses on Annual Recurring Revenue (ARR) growth and the pace of module adoption by customers. It also considers the financial impact of customer retention, especially following the July 2024 global IT outage. ### How does CrowdStrike's working capital profile impact its financials? CrowdStrike has a deeply negative net working capital as a percentage of revenue. This is because the company collects cash upfront for annual subscriptions but recognizes revenue over 12 months, creating a massive deferred revenue liability that funds growth. ### What is CrowdStrike's capital expenditure strategy? CrowdStrike maintains a historically low capital expenditure, typically 3-5% of revenue, primarily focused on growth capex. These investments are directed towards AI infrastructure like Charlotte AI and expanding its global data center footprint. ### Can I download an Excel financial model for CrowdStrike? No, an Excel financial model for CrowdStrike is not available for download. This model is designed to project ARR growth, cash flow generation, and non-GAAP profitability for a standalone investor. [Interactive forecast calculator](https://finamodel.com/companies/crowdstrike/forecast)