Q3 2025 Summary
Published Feb 7, 2025, 7:58 PM UTC- CrowdStrike's Charlotte AI is delivering significant efficiency gains, transforming SOC operations by automating tasks and reducing the time to create situational reports from 4 days to 1 hour.
- Strong growth in Next-Gen SIEM, with customers choosing CrowdStrike over legacy providers due to greater efficiency, speed, scalability, and cost advantages. This presents a tremendous opportunity in the short, medium, and long term.
- Customers are impressed with the performance and outcomes provided by CrowdStrike's integrated platform, leading to increased adoption and competitive wins against legacy providers.
- CrowdStrike may be lagging in addressing the latest AI trends, as the analyst noted that the topic of agentic AI was not mentioned in the CEO's prepared remarks.
- Reliance on external technologies for internal efficiencies, as the CEO stated they leverage partner technologies like Salesforce and ServiceNow, which could indicate a dependence on third-party solutions rather than internal innovation.
- Limited impact of Charlotte AI's capabilities, with the CEO providing only one example where a customer's situational report creation time was reduced from 4 days to 1 hour, possibly suggesting that widespread significant benefits are not yet evident.
Metric | YoY Change | Reason |
---|---|---|
Total Revenue | +29% from $786.014M to $1,010.178M | Strong subscription growth and successful upselling of additional modules drove overall revenue. Land-and-expand strategies and increased demand for cybersecurity solutions contributed to higher ARR and topline performance. |
Subscription Revenue | +31% from $733.463M to $962.735M | New customer additions and expanded module adoption among existing clients fueled subscription revenue growth. These factors reflect the effectiveness of CrowdStrike’s platform approach and sustained market interest in comprehensive security offerings. |
Professional Services | -10% from $52.551M to $47.443M | The decrease is linked to shifts in customer usage from professional services toward more self-service capabilities or partner-led engagements. In addition, slower growth in service hours reduced professional services revenue compared to the prior period. |
United States | +27% from $537.88M to $683.476M | Driven by robust enterprise spending and vendor consolidation trends in North America. Increased platform adoption, particularly among large enterprises, boosted U.S. revenue despite ongoing competitive pressures. |
EMEA | +35% from $119.16M to $160.574M | Continued expansion efforts in Europe, coupled with strong demand for cloud-based security, led to higher deals and larger deployments. Regional regulatory pushes and increased cybersecurity awareness also contributed to above-average growth. |
Asia Pacific | +26% from $81.46M to $102.837M | Broader market penetration and deeper sales partnerships helped grow APAC revenue. Heightened cybersecurity needs, especially in Japan and Southeast Asia, drove additional adoption of endpoint and cloud modules, sustaining regional momentum. |
Net Income | -163% from $26.669M to -$16.822M | Despite strong revenue, increased operating expenses (including product development, personnel, and stock-based compensation) and ongoing investments in the platform led to a net loss. The company expects margins to improve long-term as it further scales and leverages operational efficiencies. |
Metric | Period | Previous Guidance | Current Guidance | Change |
---|---|---|---|---|
Total Revenue | FY 2025 | $3,890.0M to $3,902.2M (27–28% YoY) | $3,923.8M to $3,930.5M (28–29% YoY) | raised |
Non-GAAP Income from Operations | FY 2025 | $774.7M to $783.9M | $804.4M to $809.4M | raised |
Non-GAAP Net Income Attributable to CRWD | FY 2025 | $908.8M to $980.0M | $937.5M to $942.6M | lowered |
Diluted Non-GAAP Net Income Per Share | FY 2025 | $3.61 to $3.65 | $3.74 to $3.76 | raised |
Total Revenue | Q4 2025 | no prior guidance | $1,028.7M to $1,035.4M (22% YoY) | no prior guidance |
Non-GAAP Income from Operations | Q4 2025 | no prior guidance | $184.0M to $189.0M | no prior guidance |
Non-GAAP Net Income Attributable to CRWD | Q4 2025 | no prior guidance | $210.9M to $215.8M | no prior guidance |
Diluted Non-GAAP Net Income Per Share | Q4 2025 | no prior guidance | $0.84 to $0.86 | no prior guidance |
Metric | Period | Guidance | Actual | Performance |
---|---|---|---|---|
Total Revenue | Q3 2025 | $979.2 million to $984.7 million | $1,010.178 million | Beat |
Topic | Previous Mentions | Current Period | Trend |
---|---|---|---|
Falcon Flex adoption and longer deal durations | Consistently emphasized as a key driver of platform adoption and larger deals in Q2 (>$700M in total deal value) ; Q1 (>$500M in deal value) ; Q4 (multiyear deals, expansions). | Accelerating adoption with over 150 deals in Q3 and longer deal durations contributing to RPO growth. Average Flex subscriptions are multiples larger than typical deals. | Consistent focus on accelerated adoption and longer terms |
Strong demand for cybersecurity solutions | Q2: Urgency due to intensifying threats, over 245 adversary groups tracked ; Q1: Broad-based demand, up 33% in ARR ; Q4: Record pipeline, deals with 8+ modules doubled. | Heightened threat environment and platform consolidation are fueling demand; healthcare and SMB segments showing record quarters. | Ongoing strong demand across segments |
Resilient net new ARR performance and the $10B ARR goal | Q2: Achieved $218M in net new ARR, reiterated $10B by FY31. Q1: $212M net new ARR, confidence in hitting $10B. Q4: $282M net new ARR, roadmap to $10B. | Net new ARR of $153M with ending ARR >$4B; reaffirmed $10B ARR target by FY31. | Remains central to long-term outlook |
Customer commitment packages (CCPs) and associated discounts | Introduced in Q2 with $60M impact forecast for 2H FY25 ; not mentioned in Q1 or Q4. | CCPs caused a $25M impact on net new ARR in Q3 and are estimated to affect Q4 by $30M; most value was additional modules or Flex dollars, limiting revenue impact. | New in Q2, continued incentive strategy in Q3 |
Extended sales cycles and increased customer scrutiny | Q2: Longer approval processes stated, including CEO/Board-level sign-offs. Q1: No mention. Q4: Acknowledged continued deal scrutiny environment. | Sales cycles extended by ~15% in enterprise accounts post-July 19 incident; additional approval layers likely persist into Q4. | Heightened after incident |
Muted upsell rates and potential contraction | First noted in Q2: Temporarily higher contraction and muted upsell from CCPs. Q1 and Q4: No mention. | Muted upsell and potential contraction tied to CCP incentives, affecting Q3 net new ARR by $25M and expecting $30M in Q4. | Noted from Q2 onward, partly due to CCPs |
Visibility into near-term results | Q2: Visibility less than typical post-incident. Q1: Strong pipeline for Q2, prudent approach. Q4: Macro backdrop remains challenging, guiding cautiously. | Limited near-term visibility due to delayed pipeline generation and CCP usage; maintaining caution for Q4. | Ongoing caution given multiple headwinds |
Hypergrowth modules (identity, cloud, SIEM) | Q2: Surpassed $1B combined in ARR, robust expansion. Q1: Doubling deals involving these modules, identity/AI focus. Q4: Triple-digit growth in next-gen SIEM, identity, and cloud. | Continued strong growth; integration of acquisitions (e.g., Adaptive Shield) to broaden cloud coverage. Notable wins with 8-figure expansions. | Continued strong traction across all periods |
Platform consolidation strategies | Q2: Organizations seeking to simplify and consolidate, Falcon platform spans 28 modules. Q1: Emphasis on cost-saving consolidation. Q4: Single-agent approach displacing point solutions. | Falcon Flex central to consolidation; customers adopting multiple modules in a single transaction, driving larger deal sizes. | Consistently core to CrowdStrike’s positioning |
Acquisition of Flow Security | Q2: No mention. Q1: Flow Security closed, runtime DSPM enhancing data protection. Q4: Introduced runtime data security solution for cloud, large DLP disruption opportunity. | Briefly noted as part of broader cloud security strategy with other acquisitions (e.g., Adaptive Shield). | Integration continuing into cloud portfolio |
July 19 incident influencing pipeline generation and sales cycles | Q2: Incident led to delayed pipeline (few weeks) and $60M shift in deals. Q1, Q4: No mention. | Caused delays in outbound pipeline and ~15% longer sales cycles in Q3; factoring into Q4 guidance. | Significant headwind in Q2 & Q3 |
Momentum in the public sector | Q2: Good momentum expected in federal Q3. Q1: Seeing federal budget opportunities, Next-Gen SIEM adoption. Q4: No mention. | No mention for Q3 2025. | Mentioned in Q2 and Q1 only |
Increased stock-based compensation (SBC) expenses | Q1: CFO clarified SBC in terms of ~3% dilution. No mention in Q2 or Q4. | No mention in Q3 2025. | No repeated mention beyond Q1 |
Pricing pressures on individual product components | Q1: Discussed platform bundling focus rather than individual components. Q4: Emphasized value over price and “TCO” benefits. | No mention in Q3 2025. | Occasionally discussed, no updates in Q3 |
Long-term partnerships with Dell and Pax8 | Q4: Highlighted $50M in total deal value with Dell, early Pax8 success for SMB. No mentions in Q1 or Q2. | No mention in Q3 2025. | Only noted in Q4 |
-
Q4 ARR and Revenue Expectations
Q: Will Q4 net new ARR be stronger than Q3?
A: Burt Podbere explained that although Q4 is usually their biggest quarter with many renewals, they remain cautious due to ongoing impacts from the July 19 incident. Factors such as delayed outbound pipeline activities, extended sales cycles, and limited visibility contribute to their cautious outlook. They are maintaining an estimated impact of approximately $30 million to both net new ARR and subscription revenue in Q4 from customer commitment packages. -
Falcon Flex Adoption and Impact
Q: How is Falcon Flex affecting deal sizes and future ARR?
A: Falcon Flex is ahead of expectations, with over 150 deals representing more than $1.3 billion in total deal value. The average Falcon Flex subscription is multiples larger than typical contracts, with customers adopting more than 9 modules on average. This has led to slightly longer deal durations and increased platform stickiness, encouraging reacceleration in the back half of next year. -
Customer Retention Post-Outage
Q: Are you seeing churn after the July 19 outage?
A: George Kurtz stated they haven't seen significant churn among larger customers. Conversations have reinforced recognition of CrowdStrike's superior technology and how they handled the outage, turning it into a customer trust-building opportunity. While there may be some churn in the very small MSP space, overall customer engagements are encouraging. -
Next-Gen SIEM Opportunity
Q: What are you seeing in the Next-Gen SIEM market?
A: George Kurtz highlighted that customers are embracing their Next-Gen SIEM due to greater efficiencies, speed, scalability, and cost differences compared to legacy products. By integrating workflows within the Falcon platform and leveraging Charlotte AI, they can deliver immediate outcomes. This represents a tremendous opportunity in a huge market, and they are expanding their ecosystem accordingly. -
ARR and Revenue Divergence
Q: Why is ARR and revenue coupling diverging temporarily?
A: Burt Podbere explained that customer commitment packages offering extended time lead to a more immediate impact on ARR than revenue, causing a temporary divergence. Revenue recognition will lag as a result, but this effect is expected to be temporary. -
RPO Growth Implications
Q: How should we view strong RPO bookings growth?
A: Burt Podbere noted that the accelerated RPO growth reflects longer deal durations and customers engaging more deeply with CrowdStrike over extended periods. This growth is driven by customer commitment packages and CrowdStrike Financial Services, which bodes well for future revenue recognition and ARR growth. -
Agentic AI with Charlotte AI
Q: How is CrowdStrike utilizing agentic AI?
A: George Kurtz described Charlotte AI as more than a copilot; it's designed to perform work on behalf of customers, transforming Security Operations Centers. For example, tasks that previously took four days now take one hour, showcasing significant efficiency gains through the agentic nature of Charlotte AI. -
Security Spending Outlook
Q: How do you gauge security spending next year?
A: George Kurtz believes the security environment is worsening, with increased e-crime and ransomware. Customers continue to seek the best products, platform consolidation, and operational cost reductions. He is encouraged by the forward-looking environment and expects companies to spend on top technologies due to threats and regulatory pressures. -
Falcon Flex Impact on Retention
Q: Does Falcon Flex improve customer retention?
A: George Kurtz confirmed that Falcon Flex makes the platform stickier as customers adopt more modules, making it increasingly difficult to leave. Customers are adopting modules faster, allowing CrowdStrike to upsell and top up Falcon Flex pools, enhancing confidence in reacceleration next year. -
Average Deal Term for Falcon Flex
Q: What is the average deal duration for Falcon Flex?
A: Burt Podbere mentioned they didn't provide specific numbers but are seeing deals being slightly longer, which is exciting and contributes to longer customer relationships.