CrowdStrike delivered record fiscal second-quarter 2027 recurring-revenue growth as adoption of its Falcon Flex consumption model accelerated, cash generation reached new highs, and management substantially increased its full-year growth outlook.
Net new annual recurring revenue reached about $333 million during the quarter, up 51% year over year and a quarterly record for the cybersecurity company.
Total ARR increased 25% year over year to $5.84 billion, giving CrowdStrike a growing base of recurring subscription revenue as customers continue consolidating security workloads onto its Falcon platform.
An even faster-growing metric was ARR associated with customers that have adopted Falcon Flex.
Ending ARR from Falcon Flex accounts exceeded $2.29 billion, increasing 101% year-over-year.
That means Flex-associated ARR now represents roughly 39% of CrowdStrike’s overall $5.84 billion ARR base, highlighting how quickly the purchasing model has become an important part of the company’s growth strategy.
Falcon Flex is designed to give customers greater flexibility in how they purchase and deploy CrowdStrike’s security capabilities.
Instead of requiring organizations to commit immediately to individual security modules, the model allows customers to establish broader spending commitments and then deploy additional Falcon capabilities as their requirements evolve.
For CrowdStrike, the approach can make it easier for customers to consolidate more security functions onto the Falcon platform over time.
The rapid growth in ARR associated with Falcon Flex customers suggests that the strategy is increasing engagement with larger organizations and creating opportunities for CrowdStrike to expand its footprint after the initial customer commitment.
Revenue increased 26% year-over-year to $1.47 billion during the quarter.
Subscription revenue increased 27% to $1.40 billion, meaning subscriptions continued to account for the overwhelming majority of CrowdStrike’s overall business.
That recurring revenue profile gives the company significant visibility into future sales while allowing additional module adoption and customer expansion to build on an already substantial installed base.
CrowdStrike also improved subscription gross margins despite continued investment in product development and platform expansion.
GAAP subscription gross margin increased to 78% from 77% a year earlier.
Non-GAAP subscription gross margin increased to 81% from 80%.
Even a one-percentage-point improvement can be meaningful at CrowdStrike’s scale because subscription revenue now exceeds $1.4 billion per quarter.
The higher margins indicate that the company is generating greater gross profit from its expanding subscription base while maintaining the infrastructure required to deliver cloud-based cybersecurity services globally.
Profitability also improved substantially further down the income statement.
CrowdStrike’s GAAP operating loss narrowed to $33.2 million from $105.5 million in the prior-year period.
That represents an improvement of more than $72 million year-over-year and shows that operating expenses are growing more slowly than the company’s revenue base.
The combination of 26% revenue growth, expanding subscription margins and a sharply reduced operating loss demonstrates increasing operating leverage within the business.
Cash generation was another major highlight.
Operating cash flow reached approximately $530 million, a quarterly record.
Free cash flow totaled approximately $377 million.
The strong cash generation gives CrowdStrike substantial resources to continue investing in product development, artificial intelligence, go-to-market expansion and other strategic initiatives without relying heavily on outside capital.
Free cash flow is particularly important for a subscription software company because it provides another measure of the economic value being generated from recurring customer contracts.
CrowdStrike’s ability to produce $377 million of free cash flow in a single quarter while continuing to grow ARR at a 25% rate illustrates the combination of growth and cash generation management is seeking to maintain.
The record $333 million of net new ARR was particularly important because it measures the amount of recurring revenue added during the quarter beyond the company’s existing installed base.
Net new ARR increased significantly faster than total ARR, rising 51% year-over-year compared with 25% growth in overall ARR.
That acceleration suggests CrowdStrike entered the second half of its fiscal year with stronger underlying recurring-revenue momentum.
Management responded by substantially raising its fiscal 2027 outlook for net new ARR growth.
CrowdStrike increased its full-year net new ARR growth expectation by 630 basis points to approximately 34% at the midpoint.
A 630-basis-point increase represents a significant revision to the company’s previous expectations and indicates that management sees the second-quarter strength extending beyond a single period.
The higher outlook is supported by what CrowdStrike described as a record third-quarter pipeline.
Management also pointed to increasing demand for security around artificial intelligence systems as another potential driver of durable growth.
AI is creating multiple opportunities for cybersecurity vendors.
Organizations deploying generative AI, autonomous agents and other AI-based systems are creating new identities, applications and data flows that must be secured.
Companies also need to protect the underlying cloud infrastructure, endpoints and workloads supporting those systems.
At the same time, attackers are increasingly using AI to automate or improve their own activity, raising the pressure on security teams to adopt more sophisticated defensive technologies.
CrowdStrike is positioning the Falcon platform as infrastructure capable of addressing these requirements within a unified security architecture.
The company has historically expanded beyond endpoint protection into additional cybersecurity categories, allowing customers to deploy more modules through the same cloud-native platform.
Falcon Flex could accelerate that platform-consolidation strategy because customers adopting the model can more easily shift their committed spending toward additional CrowdStrike capabilities.
That is particularly relevant for large enterprises seeking to reduce the number of separate cybersecurity vendors and tools they operate.
Security organizations frequently manage dozens of individual products, which can increase costs and create integration challenges.
A platform approach allows customers to consolidate multiple functions around common data, agents and security infrastructure.
For CrowdStrike, consolidation increases the number of potential products it can sell into an existing account.
The $2.29 billion of ARR now associated with Falcon Flex accounts provides a substantial base for that expansion strategy.
With Flex-related ARR growing 101%, the metric is increasing at more than four times the growth rate of CrowdStrike’s overall ARR base.
If that adoption continues, Falcon Flex could represent an increasingly large portion of the company’s recurring revenue over time.
The model may also strengthen customer retention because organizations that consolidate multiple security workflows onto Falcon become more deeply integrated with CrowdStrike’s technology.
The quarter therefore reflected improvement across several important financial and operating metrics simultaneously.
CrowdStrike added a record $333 million of net new ARR, increased total ARR to $5.84 billion and grew revenue to $1.47 billion.
Falcon Flex-associated ARR surpassed $2.29 billion, subscription margins expanded, the GAAP operating loss narrowed substantially and free cash flow reached approximately $377 million.
Those results gave management enough confidence to materially increase its full-year net new ARR growth outlook.
The combination of stronger customer acquisition, expanding existing relationships and rapid Falcon Flex adoption provides CrowdStrike with multiple potential sources of continued recurring-revenue growth.
Meanwhile, the improvement in operating margins and cash generation indicates that the company is becoming more financially efficient as it scales.
CrowdStrike’s growing exposure to AI-related security demand could add another layer to that opportunity.
As enterprises deploy more AI applications and autonomous systems, they will need to secure the users, machines, data and infrastructure interacting with those technologies.
CrowdStrike expects that need to increase the importance of cybersecurity platforms capable of operating across multiple layers of an organization’s technology environment.
The fiscal second quarter therefore represented more than another period of strong top-line growth.
The record net new ARR, 101% increase in Falcon Flex-associated ARR and higher full-year outlook indicate that CrowdStrike’s underlying recurring-revenue momentum accelerated during the quarter.
With $5.84 billion of total ARR, record operating cash flow and a record third-quarter pipeline, the company enters the remainder of fiscal 2027 with a larger recurring revenue base, improving profitability and growing demand for both platform consolidation and AI security.
KEY QUOTES:
“Q2 was the best quarter in CrowdStrike’s history.”
George Kurtz, Founder and Chief Executive Officer of CrowdStrike
