CrowdStrike Holdings, Inc. (CRWD): Lienzo del Modelo de Negocio [Actualizado en Ene-2025]

En la arena de alto riesgo de ciberseguridad, CrowdStrike Holdings, Inc. (CRWD) emerge como un tutor formidable, transformando la defensa digital a través de su plataforma Falcon de vanguardia. Al combinar a la perfección el aprendizaje automático avanzado, la inteligencia de amenazas en tiempo real y la arquitectura nativa de la nube, CrowdStrike ha revolucionado cómo las organizaciones protegen sus activos digitales más críticos, ofreciendo soluciones de seguridad sin precedentes que se adaptan y responden al panorama en constante evolución de las amenazas cibernéticas con notables con notables. Precisión y velocidad.

CrowdStrike Holdings, Inc. (CRWD) - Modelo de negocios: asociaciones clave

Proveedores de servicios en la nube

CrowdStrike mantiene asociaciones estratégicas con proveedores líderes de servicios en la nube:

Proveedor de nubes	Detalles de la asociación	Año de integración
Servicios web de Amazon (AWS)	Autorización de Fedramp Alta	2018
Microsoft Azure	Listado del mercado de Azure	2016
Plataforma en la nube de Google	Integración de seguridad en la nube	2019

Proveedores de servicios de seguridad administrados (MSSPS)

CrowdStrike colabora con múltiples MSSP a nivel mundial:

• Optiv Security
• Insight Global
• Presidio
• Tecnología mundial

Socios de integración de tecnología

Pareja	Capacidad de integración	Año de asociación
Flojo	Información de información de seguridad y gestión de eventos (SIEM)	2017
Servicenow	Automatización de flujo de trabajo	2019
Palo Alto Networks	Compartir la inteligencia de amenazas	2020

Integradores de sistemas globales

• Deloitte
• Acentuar
• PWC
• Kpmg

Socios de la alianza ciberseguridad

Organización de la alianza	Enfoque de asociación	Membresía desde
Alianza de seguridad en la nube	Normas de seguridad en la nube	2015
Asociación de Seguridad de Sistemas de Información (ISSA)	Redes profesionales	2016

CrowdStrike Holdings, Inc. (CRWD) - Modelo de negocio: actividades clave

Desarrollo continuo de la plataforma de ciberseguridad con IA

CrowdStrike invirtió $ 1.12 mil millones en investigación y desarrollo en el año fiscal 2024. La compañía mantiene más de 1,400 profesionales de ingeniería dedicados a la mejora de la plataforma.

I + D Métrica	Valor 2024
Gasto total de I + D	$ 1.12 mil millones
Personal de ingeniería	1,400+ profesionales
Modelos de IA desarrollados	37 modelos de aprendizaje automático

Inteligencia e investigación de amenazas

La base de datos de gráficos de amenazas de CrowdStrike procesa más de 2 billones de eventos de seguridad por semana.

• Cobertura de inteligencia de amenazas globales en más de 180 países
• Más de 250 actores de amenaza monitorearon continuamente
• Capacidades de detección de amenazas en tiempo real

Protección y detección de punto final nativo de nube

La plataforma CrowdStrike Falcon protege a más de 21,000 clientes empresariales a nivel mundial.

Métrica de protección de punto final	2024 estadísticas
Total de clientes empresariales	21,000+
Cobertura global	7 continentes
Sensores de punto final implementado	1 millón+ puntos finales

Operaciones de seguridad y respuesta a incidentes

CrowdStrike Falcon Complete proporciona servicios de detección y respuesta administrados las 24 horas, los 7 días de la semana.

• Tiempo promedio de respuesta al incidente: 37 minutos
• Equipo de caza de amenazas de más de 500 expertos en ciberseguridad
• Capacidades de neutralización de amenazas proactivas

Aprendizaje automático y mejora del algoritmo de detección de amenazas

CrowdStrike utiliza algoritmos avanzados de aprendizaje automático para la detección de amenazas de ciberseguridad.

Métrica de aprendizaje automático	2024 rendimiento
Precisión de detección de amenazas	99.7%
Modelos de aprendizaje automático	37 modelos activos
Prevención de amenazas con IA	Bloquea más de 75,000 amenazas diariamente

CrowdStrike Holdings, Inc. (CRWD) - Modelo de negocio: recursos clave

Plataforma Falcon con arquitectura nativa de la nube

La plataforma Falcon de CrowdStrike funciona en una arquitectura nativa de la nube con las siguientes especificaciones:

Métrico	Valor
Cobertura de la plataforma de protección de carga de trabajo en la nube (CWPP)	Más de 100 entornos de nubes y contenedores
Velocidad de detección de amenazas en tiempo real	Menos de 1 segundo
Ingestión de datos globales	1 billón+ eventos de seguridad diarios

Aprendizaje automático propietario y tecnologías de IA

Las capacidades de AI de CrowdStrike incluyen:

• Modelos de aprendizaje automático capacitados en 2+ petabytes de datos de amenazas
• Tasa de precisión de detección de amenazas con IA del 99.5%
• Más de 500 modelos de aprendizaje automático desplegados en la plataforma Falcon

Base de datos de inteligencia de amenazas extensas

Métrico de inteligencia	Cantidad
Registros de inteligencia de amenazas	85 mil millones
Sensores de amenazas globales	1 millón+ puntos finales
Muestras de malware analizadas	100+ millones anualmente

Equipos de investigación e ingeniería de ciberseguridad altamente calificadas

Composición de la fuerza laboral:

• Total de empleados (cuarto trimestre 2023): 3,737
• Investigación & El personal de ingeniería: aproximadamente 1,200
• Certificaciones avanzadas: el 90% de los investigadores de seguridad tienen credenciales especializadas de ciberseguridad

Cartera de propiedad intelectual robusta

Categoría de IP	Cantidad
Patentes totales	350+
Aplicaciones de patentes pendientes	250+
Jurisdicciones de patente	Estados Unidos, Europa, Asia

CrowdStrike Holdings, Inc. (CRWD) - Modelo de negocio: propuestas de valor

Protección integral de punto final y carga de trabajo entregada en la nube

La plataforma CrowdStrike Falcon cubre 27.632 clientes al 31 de enero de 2023. La plataforma protege anualmente 2.5 billones de semanas endpoint.

Métrica de protección	Cantidad
Total de clientes	27,632
Weeks de punto final protegido	2.5 billones

Detección y prevención de amenazas en tiempo real

Las capacidades de detección de amenazas de CrowdStrike incluyen:

• Más de 1 billón de eventos procesados ​​diariamente
• 99.8% de efectividad de protección contra amenazas conocidas y desconocidas
• Modelos de aprendizaje automático que analizan más de 82 mil millones de eventos semanalmente

Impacto de rendimiento mínimo en los sistemas protegidos

El agente liviano de CrowdStrike consume gastos generales de CPU menos del 1% durante las operaciones de seguridad.

Análisis de seguridad avanzado con alimentación de IA

Característica de análisis de IA	Métrico de rendimiento
Modelos de aprendizaje automático	500+ modelos AI/ML
Actualizaciones de inteligencia de amenazas	1.5 millones+ indicadores diarios

Plataforma de seguridad unificada en múltiples entornos

Crowdstrike es compatible:

• Cargas de trabajo en la nube: AWS, Azure, Google Cloud
• Tipos de punto final: Windows, MacOS, Linux, iOS, Android
• Cobertura en 7 arquitecturas tecnológicas diferentes

CrowdStrike Holdings, Inc. (CRWD) - Modelo de negocios: relaciones con los clientes

Plataformas de soporte digital de autoservicio

La plataforma CrowdStrike Falcon proporciona soporte digital 24/7 con:

• Base de conocimiento en línea con más de 15,000 artículos técnicos
• Foro de la comunidad con más de 50,000 usuarios registrados
• Soporte de chat en tiempo real disponible en 30 segundos

Canal de soporte digital	Tiempo de respuesta	Compromiso de usuario
Base de conocimiento en línea	Acceso inmediato	Más de 15,000 artículos
Foro comunitario	Disponibilidad 24/7	Más de 50,000 usuarios
Portal de autoservicio	Resolución instantánea	85% de satisfacción del usuario

Gestión dedicada del éxito del cliente

CrowdStrike proporciona gestión personalizada del éxito del cliente con:

• Gerentes de éxito de clientes asignados para clientes empresariales
• Revisiones comerciales trimestrales
• Programas de incorporación personalizados

Soporte técnico y servicios de consultoría

Las ofertas de soporte técnico incluyen:

• Soporte técnico global 24/7
• Equipo de respuesta a incidentes disponibles
• Expertos en ciberseguridad certificados

Nivel de soporte	Tiempo de respuesta	Cobertura
Soporte de platino	15 minutos	Global 24/7
Soporte empresarial	30 minutos	Múltiples idiomas

Informes de seguridad regulares y actualizaciones de inteligencia de amenazas

CrowdStrike proporciona:

• Informes semanales de inteligencia de amenazas
• Seminarios web de seguridad mensuales
• Notificaciones de amenazas en tiempo real

Colaboración de investigación de amenazas impulsadas por la comunidad

La investigación de amenazas colaborativas incluye:

• Plataforma de gráficos de amenazas de crowdstrike
• Intercambio de inteligencia de amenazas globales
• Programas de investigación de socios

Métrico de investigación	2024 datos
Indicadores de amenazas analizados	2.5 billones por semana
Investigadores de amenazas globales	350+ especialistas

CrowdStrike Holdings, Inc. (CRWD) - Modelo de negocio: canales

Equipo de ventas de Enterprise Direct

El equipo de ventas de Direct Enterprise de CrowdStrike consta de 1,420 profesionales de ventas a partir del tercer trimestre de 2023. El equipo genera $ 1.9 mil millones en ingresos recurrentes anuales (ARR) a través de soluciones de seguridad cibernética de nivel empresarial. El ciclo de ventas promedio para clientes empresariales varía entre 60 y 90 días.

Métrica del equipo de ventas	Valor
Representantes de ventas totales	1,420
Ingresos recurrentes anuales	$ 1.9 mil millones
Ciclo de ventas promedio	60-90 días

Marketing digital en línea

CrowdStrike asigna aproximadamente $ 280 millones anuales a los canales de marketing digital. Las estrategias de marketing digital generan el 42% de la adquisición total de plomo.

• Presupuesto publicitario de pago por clic: $ 85 millones
• Gasto de marketing en redes sociales: $ 45 millones
• Inversión de marketing de contenido: $ 62 millones
• Publicidad digital programática: $ 88 millones

Red de socios y canales de revendedor

CrowdStrike mantiene más de 450 socios de tecnología estratégica y socios de canal. Los ingresos impulsados ​​por los socios representan el 33% de los ingresos totales de la compañía.

Métrica de canal asociado	Valor
Socios estratégicos totales	450+
Contribución de ingresos de socio	33%
Tamaño promedio de la oferta de socios	$175,000

Sitio web corporativo y plataformas digitales

El sitio web corporativo de CrowdStrike genera 2.3 millones de visitantes únicos mensuales. La tasa de conversión de la plataforma digital es del 4.7%.

Conferencias de la industria y eventos de ciberseguridad

CrowdStrike participa en 85 conferencias globales de ciberseguridad anualmente. Los clientes potenciales generados por eventos aportan el 12% de la tubería total de ventas, con un presupuesto estimado de marketing de eventos de $ 42 millones.

Métrica de marketing de eventos	Valor
Participación anual de la conferencia	85
Generación de leads a partir de eventos	12%
Presupuesto de marketing de eventos	$ 42 millones

CrowdStrike Holdings, Inc. (CRWD) - Modelo de negocio: segmentos de clientes

Grandes organizaciones empresariales

CrowdStrike apunta a grandes organizaciones empresariales con ingresos anuales superiores a $ 1 mil millones. A partir del tercer trimestre de 2023, la compañía reportó el 74% de Fortune 100 y el 61% de las compañías Fortune 500 como clientes.

Métricas de segmento empresarial	Porcentaje
Fortune 100 Penetración del cliente	74%
Fortune 500 Penetración del cliente	61%
Valor de contrato promedio	$658,429

Negocios de mercado medio

CrowdStrike atiende a compañías del mercado medio con 500-5,000 empleados, que representan un segmento de crecimiento significativo para la compañía.

• La base de clientes del mercado medio creció 36% año tras año en 2023
• Aproximadamente el 40% de la base total de clientes
• Valor promedio del contrato anual: $ 157,000

Entidades gubernamentales y del sector público

CrowdStrike tiene una presencia significativa en la ciberseguridad del gobierno, con certificaciones FedRamp e IL4/IL5.

Métricas del segmento gubernamental	Valor
Clientes del gobierno federal de EE. UU.	Más de 30 agencias civiles
Crecimiento de ingresos del sector público	42% año tras año

Servicios financieros e industrias de la salud

CrowdStrike ofrece soluciones especializadas de ciberseguridad para industrias altamente reguladas.

• CLIENTES DE SERVICIOS FINANCIEROS: 25% de la base total de clientes
• Clientes de atención médica: 18% de la base total de clientes
• Cumplimiento de los estándares HIPAA y PCI DSS

Compañías de tecnología y software

El sector tecnológico representa un segmento central de clientes para las soluciones de ciberseguridad de CrowdStrike.

Métricas de segmento de tecnología	Valor
Clientes tecnológicos	35% de la cartera total de clientes
Penetración de la compañía de software	45% de las 500 principales compañías de software

CrowdStrike Holdings, Inc. (CRWD) - Modelo de negocio: Estructura de costos

Inversiones de investigación y desarrollo

En el año fiscal 2024, CrowdStrike asignó $ 765.4 millones a los gastos de investigación y desarrollo, lo que representa el 47.3% de los ingresos totales. Esta importante inversión respalda la innovación continua en las tecnologías de ciberseguridad.

Año fiscal	Gastos de I + D	Porcentaje de ingresos
2024	$ 765.4 millones	47.3%

Gastos de ventas y marketing

Los gastos de ventas y marketing de CrowdStrike alcanzaron los $ 1.02 mil millones en el año fiscal 2024, lo que representa el 63.1% de los ingresos totales.

Año fiscal	Ventas & Gastos de marketing	Porcentaje de ingresos
2024	$ 1.02 mil millones	63.1%

Infraestructura en la nube y mantenimiento de tecnología

Los costos de infraestructura tecnológica para CrowdStrike totalizaron $ 312.6 millones en el año fiscal 2024.

• Gastos de alojamiento en la nube: $ 187.4 millones
• Mantenimiento de la infraestructura tecnológica: $ 125.2 millones

Adquisición y retención de talentos

Los gastos totales relacionados con el personal para CrowdStrike en el año fiscal 2024 fueron de $ 1.45 mil millones.

Categoría de gastos	Cantidad
Gastos totales de personal	$ 1.45 mil millones
Compensación promedio de empleados	$265,000

Costos de certificación de cumplimiento y seguridad

CrowdStrike invirtió $ 42.3 millones en procesos de certificación de cumplimiento y seguridad durante el año fiscal 2024.

• Costos de certificación SOC 2 Tipo II: $ 18.7 millones
• ISO 27001 Gastos de cumplimiento: $ 23.6 millones

CrowdStrike Holdings, Inc. (CRWD) - Modelo de negocio: Fleos de ingresos

Licencias de software basadas en suscripción

CrowdStrike genera ingresos principales a través de suscripciones de plataforma de ciberseguridad nativa de nube. Para el año fiscal 2024, los ingresos recurrentes anuales (ARR) fueron de $ 3.01 mil millones, lo que representa el 33% de un crecimiento año tras año.

Nivel de suscripción	Rango de precios anual	Características clave
Falcon Go	$ 8.99/mes	Protección básica de punto final
Falcon Pro	$ 44.99/mes	Detección de amenazas avanzadas
Falcon Enterprise	$ 89.99/mes	Suite de seguridad integral

Paquetes de servicio escalonados

CrowdStrike ofrece múltiples niveles de servicio con precios y capacidades diferenciadas:

• Falcon Prevent: protección de punto final
• Falcon Insight: detección y respuesta extendidas
• Falcon Complete: caza de amenazas administradas

Servicios profesionales y consultoría

Los ingresos por servicios profesionales para el cuarto trimestre 2024 fueron de $ 125.4 millones, lo que representa el 14% de los ingresos totales.

Inteligencia de amenazas y complementos de protección avanzada

El módulo de inteligencia de amenazas de CrowdStrike generó $ 78.6 millones en ingresos adicionales durante el año fiscal 2024.

Contratos empresariales de varios años

El valor del contrato empresarial promedió $ 401,000 por cliente en el año fiscal 2024, con el 71% de los clientes que utilizan múltiples módulos en la nube.

Duración del contrato	Valor de contrato promedio	Tasa de renovación
1 año	$250,000	85%
2 años	$475,000	92%
3 años	$675,000	96%

CrowdStrike Holdings, Inc. (CRWD) - Canvas Business Model: Value Propositions

Unified Security Consolidation: Replacing multiple point products with one platform

CrowdStrike Holdings, Inc. drives consolidation by making its platform the foundational operating system for cybersecurity, appealing to enterprises battling tool sprawl. The Falcon Flex subscription model is key to this, with ARR from Flex accounts growing more than 200% year over year to more than $1.35 billion as of the third quarter of fiscal year 2025. This single-agent approach absorbs more workloads, with subscription revenue growing 21% to $1.17 billion in one recent quarter as customers consolidated endpoint, cloud workload, and identity protection. Platform stickiness is evident in module adoption rates.

The extent of platform adoption as of late 2025 fiscal year reporting:

Adoption Metric	Data Point
Customers using six or more Falcon modules	49%
Customers using eight or more Falcon modules	24%
Next-Gen SIEM net new ARR growth (YoY Q3 FY2025)	Over 150%
Next-Gen SIEM customers	2,000+

AI-Powered Speed: Stopping breaches with one of the fastest recorded eCrime breakout times

The value proposition here is stopping intrusions before they spread, which is critical given the speed of modern threats. The fastest recorded eCrime breakout time observed was a mere 51 seconds. This rapid response capability is powered by the AI-native Falcon platform.

Key speed and threat statistics:

• Fastest recorded eCrime breakout time: 51 seconds.
• Average eCrime breakout time (2024): Fell to 48 minutes.
• Malware-free detections (2024): Accounted for 79% of detections.
• Growth in vishing operations (H1 to H2 2024): 442%.

Cloud and Identity Protection: Securing hybrid environments across endpoint, cloud, and identity

CrowdStrike Holdings, Inc. is securing the expanding attack surface across hybrid environments. The combined ending Annual Recurring Revenue (ARR) for the Next-Gen SIEM, Cloud Security, and Identity Protection businesses surpassed $1.3 billion as of January 31, 2025. The company was recognized as the Overall Leader in the 2025 KuppingerCole Identity Threat Detection and Response (ITDR) Leadership Compass. Furthermore, the newly launched Falcon Shield recorded sequential growth of nearly 50%, showing elevated demand for SaaS and identity risk mitigation.

High Customer Trust: Retention and willingness to recommend score

Customer commitment is quantified by exceptionally high retention figures, showing customers are not only staying but expanding their use of the platform. Gross retention was reported at 97% across multiple periods near late 2025. Dollar-based net retention, which measures spending expansion from existing customers, stood at 115% in the third quarter of fiscal year 2025.

Customer loyalty metrics:

• Gross Retention Rate (GRR): 97%.
• Dollar-Based Net Retention Rate (Q3 FY2025): 115%.
• Ending ARR (as of Jan 31, 2025): Grew to $4.24 billion.

CrowdStrike Holdings, Inc. (CRWD) - Canvas Business Model: Customer Relationships

You're managing a security portfolio where customer retention and expansion are everything, especially after a major industry event. CrowdStrike Holdings, Inc. focuses its customer relationships on a tiered approach, balancing high-touch support for strategic accounts with scalable digital engagement for the broader base.

Dedicated Account Management: For large enterprise and strategic Falcon Flex customers

The Falcon Flex subscription model is central to deepening relationships with large, strategic customers. This model is designed to accelerate platform consolidation, making it easier for customers to adopt multiple modules upfront in exchange for preferred pricing and flexibility over time. This approach clearly signals a commitment to the customer's long-term security architecture, not just a single product sale.

The traction here is significant. As of the third quarter of fiscal year 2026, accounts on the Falcon Flex model represented over $1.35 billion in ending Annual Recurring Revenue (ARR), showing growth of more than 200% year-over-year. During that same quarter, CrowdStrike Holdings, Inc. closed more than 150 Falcon Flex deals, collectively valued at over $600 million in total contract value. Honestly, this model turns a contract into a partnership, with Flex customers adopting an average of nine or more modules. This dedicated, high-value engagement is what drives the platform stickiness you're looking for.

Automated/Digital Service: Self-service module adoption within the Falcon console

For day-to-day management and adoption across the platform, the focus is on consolidation into a single interface. CrowdStrike Holdings, Inc. pushes the narrative of its unified platform, which consolidates security across endpoint, identity, and cloud using a single agent. This architecture supports a self-service mentality by presenting a comprehensive view within the Falcon console. For instance, the platform's ability to consolidate SaaS Security Posture Management (SSPM) with other disciplines into one console helps reduce operational overhead for the customer. The goal here is to make module adoption feel like a natural expansion within a familiar environment, not a separate procurement headache.

High-Touch Professional Services: Incident response and proactive security consulting

When things go wrong, or when complex new technologies like SIEM or advanced identity protection are deployed, the high-touch professional services team steps in. These services, which include incident response and proactive consulting, are a smaller but critical part of the revenue mix. For the full fiscal year 2025, GAAP professional services revenue was $192.14 million, making up 4.86% of total revenue. More recently, in the third quarter of fiscal year 2026, professional services revenue specifically clocked in at $65.5 million. This high-touch support is also deeply integrated with the partner ecosystem; an independent study found that partners can generate up to $7 in services revenue for every $1 a customer spends directly on the Falcon platform, illustrating the value placed on implementation and managed services.

Community-Driven Trust: Demonstrated by the willingness to recommend score

The ultimate measure of customer relationship health is advocacy, and CrowdStrike Holdings, Inc. consistently posts high scores here. This trust is vital, especially following the operational incident in mid-2024, as it shows customers believe in the recovery and the platform's core value. In the 2025 Gartner Peer Insights reports, the company achieved a 97% Willingness to Recommend score. Specifically, one report cited this score based on 601 overall responses as of January 2025, while another cited 206 responses as of February 28, 2025. You can see the high satisfaction reflected in the ratings, such as 4.8/5 for Product Capabilities in one report.

Here's a quick look at the key customer-facing metrics we've discussed:

Metric Category	Specific Data Point	Value/Amount	Reporting Period/Basis
Community Trust	Willingness to Recommend Score	97%	As of January/February 2025
Falcon Flex Adoption (Value)	Total Deal Value from Flex Accounts	$1.3 billion	Q3 FY2026
Falcon Flex Adoption (ARR)	Ending ARR from Flex Model Accounts	Over $1.35 billion	Q3 FY2026
High-Touch Services Revenue	Fiscal Year 2025 Professional Services Revenue	$192.14 M	FY 2025
High-Touch Services Revenue	Q3 FY2026 Professional Services Revenue	$65.5 million	Q3 FY2026
Ecosystem Value	Partner Services Revenue Multiplier	Up to $7 per $1 Falcon Platform Spend	Canalys Study

The move to Falcon Flex, often tied to Customer Commitment Packages (CCPs) to help customers recover from the July 2024 incident, has been a defintely successful strategy to reinforce relationships and drive multi-module adoption.

• Flex customers adopt an average of nine or more modules.
• The company completed over 150 Falcon Flex deals in Q3.
• The unified platform consolidates security disciplines into a single console.
• The high recommendation score is based on hundreds of customer responses.

Finance: draft 13-week cash view by Friday.

CrowdStrike Holdings, Inc. (CRWD) - Canvas Business Model: Channels

You're looking at how CrowdStrike Holdings, Inc. gets its Falcon platform into the hands of customers, and it's a multi-pronged effort designed to capture everything from the largest global firms to smaller businesses. It's not just one path; it's a coordinated push across direct engagement, hyperscaler integration, and a vast partner ecosystem.

Direct Sales Force: Handling complex, large-scale enterprise contracts.

The direct sales team is definitely still key for those massive, complex enterprise deals, especially those involving the full platform consolidation CrowdStrike pushes. While the exact revenue split isn't public, the scale of their wins suggests this team closes the largest contracts. For instance, in Q4 of their last reported fiscal year, they closed over 20 deals greater than $10 million and over 350 deals greater than $1 million. That kind of deal velocity requires seasoned direct engagement to navigate procurement and architecture sign-offs at the highest levels.

Cloud Marketplaces: AWS Marketplace sales surpassed $1 billion in 2025.

The hyperscaler marketplaces are a massive channel for CrowdStrike Holdings, Inc., simplifying procurement for cloud-native customers. CrowdStrike Holdings, Inc. became the first cloud-native cybersecurity Independent Software Vendor (ISV) to surpass $1 billion in AWS Marketplace sales within a single calendar year in 2025. This channel is clearly working for scale; the transaction value through AWS Marketplace alone rose over 100% year-over-year in Q3 FY2025. It's a clear signal that customers prefer to consolidate security spend through their existing cloud relationships.

Global Channel Partner Network: Driving adoption in midmarket and SMB segments.

The partner network, managed through the expanded Accelerate program, is crucial for reaching the midmarket and SMBs, and for driving volume. To be fair, this channel is responsible for a huge chunk of new business; in Q3 FY2025, nearly 70% of new subscriptions came through partners. This network includes resellers, system integrators, and Managed Security Service Providers (MSSPs). CrowdStrike Holdings, Inc. recognized top performers like TD SYNNEX, naming them the 2025 Global Distributor Partner of the Year. The strategy relies on partners leveraging flexible licensing like Falcon Flex to deliver tailored solutions.

Falcon Platform Console: Direct in-product upsell of new security modules.

This is where the platform strategy really pays off, turning initial endpoint protection customers into multi-module subscribers right through the Falcon console. The adoption rates show this is happening fast. As of October 31, 2025, module adoption looked like this:

• 49% of customers used six or more modules.
• 34% used seven or more modules.
• 24% used eight or more modules.

The Falcon Flex subscription model is the engine for this, allowing customers to easily add modules without new procurement cycles. This model alone drove over $1.35 billion in ending Annual Recurring Revenue (ARR) as of the end of Q3 FY2026, representing growth of more than 200% year-over-year in that segment. That's how you expand within the installed base.

Here's a quick look at how the key components of the revenue base and channel success stack up as of late 2025:

Metric	Value / Rate	Context / Date
Ending Annual Recurring Revenue (ARR)	$4.92 billion	As of October 31, 2025
Q3 FY2026 Total Revenue	$1.23 billion	Year-over-year growth of 22%
New Subscriptions via Partners	Nearly 70%	Q3 FY2025
AWS Marketplace Annual Sales Milestone	$1 billion+	Achieved in 2025 calendar year
Falcon Flex Ending ARR	Exceeded $1.35 billion	Q3 FY2026
Customers Using 8+ Modules	24%	As of October 31, 2025

Finance: draft 13-week cash view by Friday.

CrowdStrike Holdings, Inc. (CRWD) - Canvas Business Model: Customer Segments

You're looking at how CrowdStrike Holdings, Inc. segments its market as of late 2025. The strategy clearly leans into platform consolidation, using flexible licensing to drive deeper adoption across its customer base, which spans from the largest global entities to smaller organizations.

Large Enterprises/Global 2000: Seeking security platform consolidation.

This segment is heavily targeted by the push for a unified, AI-native Security Operations Center (SOC). The success of platform consolidation is directly measurable through module adoption rates, showing customers are moving away from point products. The Falcon Flex subscription model is a key enabler here, driving significant Annual Recurring Revenue (ARR) growth from existing customers expanding their footprint.

The data on deep module adoption illustrates this consolidation:

• Customers using six or more modules reached 49% as of the third quarter of fiscal 2026.
• Customers using seven or more modules stood at 34%.
• Customers using eight or more modules reached 24%.

This deep adoption is quantified by the financial impact of the flexible licensing:

Metric	Amount (as of Q3 FY2026)
Ending ARR from Falcon Flex Accounts	Over $1.35 billion
Year-over-Year Growth of Falcon Flex ARR	More than 200%
Average Modules Used by Flex Customers	~9 modules

The company's total ending ARR reached $4.92 billion as of October 31, 2025, showing the scale of the customer base these consolidation efforts are impacting.

Midmarket and Small-to-Medium Businesses (SMBs): Targeted via Falcon Go and Falcon Flex.

CrowdStrike Holdings, Inc. is seeing momentum across customers of all sizes, moving from enterprise down to the midmarket and SMB space. While specific revenue figures for the Falcon Go offering aren't broken out, the broad-based momentum suggests successful penetration into these smaller segments, often using the flexibility of Falcon Flex to manage costs and scale security needs efficiently. The overall subscription revenue, which services all customer sizes, was $1.17 billion in the third quarter of fiscal 2026, up 21% year-over-year.

Public Sector/Government: Recognized as a key segment in the 2025 Gartner report.

The public sector is explicitly called out as a segment achieving strong performance. This includes notable traction within U.S. federal agencies and higher education institutions. While a specific dollar amount for this segment isn't provided, its mention as a strong performer alongside the enterprise segment confirms its strategic importance to CrowdStrike Holdings, Inc.'s overall business mix. The U.S. market overall accounted for approximately 67% of the third quarter fiscal 2026 revenue.

Cloud-First Organizations: High growth in Next-Gen SIEM and Cloud Security adoption.

Growth in cloud-native and AI-driven security is a major driver, evidenced by the acceleration across specific product areas. The combined ending ARR for the Next-Gen SIEM, Cloud Security, and Identity Protection businesses surpassed $1.3 billion as of the fiscal year 2025 reporting period. Furthermore, the company reported record net new ARR for its Falcon Next-Gen SIEM offering in the third quarter of fiscal 2026. This focus on the modern security stack is what underpins the overall platform consolidation narrative, as these workloads require unified defense architecture.

CrowdStrike Holdings, Inc. (CRWD) - Canvas Business Model: Cost Structure

You're looking at where CrowdStrike Holdings, Inc. is putting its money to work to fuel that massive platform expansion. Honestly, the cost structure tells a clear story of aggressive growth investment, which is typical for a market leader scaling rapidly.

High Sales and Marketing (S&M) Costs: Necessary for land-and-expand strategy and new customer acquisition.

The go-to-market engine is definitely a major cost center, which makes sense when you are trying to capture market share and get customers to adopt more modules on the Falcon platform. You see this investment reflected in both GAAP and Non-GAAP figures for fiscal year 2025.

Here are the percentages of revenue for the full fiscal year 2025:

• GAAP Sales and Marketing operating expenses as a percentage of revenue: 39%
• Non-GAAP Sales and Marketing operating expenses as a percentage of revenue: 32%

When you look at the total Selling, General, and Administrative (SG&A) spend, it clocked in around 51% of revenue for FY2025, highlighting that continued sales and channel investment to convert those large enterprise deals globally.

Research and Development (R&D) Investment: Continuous funding for AI and platform innovation.

CrowdStrike Holdings, Inc. keeps pouring resources into the platform, especially around AI and security analytics, which is key to maintaining that technological lead. This is a non-negotiable cost for staying ahead in the security space.

For fiscal year 2025, the R&D investment was substantial:

Metric	Amount (FY2025)
Total Revenue	$3.95 billion
Research and Development Operating Expenses (GAAP)	$1,076,901 (in thousands, or ~$1.077 billion)
R&D Intensity (R&D/Revenue)	~27%

That R&D intensity of approximately 27% is high compared to many other Software as a Service peers, showing the commitment to product expansion.

Low Cost of Goods Sold (COGS): Reflected in the non-GAAP subscription gross margin of 80% for FY2025.

The subscription business model itself is incredibly efficient once the customer is onboarded. This is where you see the real operating leverage start to kick in, even while S&M and R&D are high.

The key metric here for the full fiscal year 2025 is the Non-GAAP subscription gross margin, which hit 80%. That's a strong indicator of the underlying economics of delivering the Falcon platform service.

Cloud Infrastructure Costs: Running the massive, global Falcon platform and Threat Graph.

The cost to run the global Falcon platform and the massive Threat Graph is baked into COGS, which is why that 80% Non-GAAP subscription gross margin is so important. It shows that despite the massive scale and data processing required, the cost to serve each additional customer or data point remains relatively low, supporting the land-and-expand motion. You see the result of this efficiency in the record full year operating cash flow of $1.38 billion and free cash flow of $1.07 billion for FY2025.

Here's a quick look at how the major operating expense categories stacked up as a percentage of revenue for FY2025:

Expense Category (as % of Revenue)	GAAP	Non-GAAP
Sales and Marketing	39%	32%
Research and Development	~27% (Implied from R&D/Revenue)	N/A
General and Administrative	N/A	~24% (Implied from SG&A 51% minus S&M 32% Non-GAAP)

Finance: draft 13-week cash view by Friday.

CrowdStrike Holdings, Inc. (CRWD) - Canvas Business Model: Revenue Streams

You're looking at the engine that powers CrowdStrike Holdings, Inc.'s growth, which is heavily weighted toward recurring revenue. Honestly, the numbers show a clear preference for long-term commitments over one-off sales.

Subscription Revenue is the bedrock here. This is the predictable, high-margin income from customers using the Falcon platform on an ongoing basis. For the full fiscal year 2025, this primary stream totaled $3.76 billion, marking a 31% year-over-year increase. To give you a sense of the quarterly cadence leading up to this, Q3 FY2025 subscription revenue was $962.7 million, and by Q4 FY2025, it hit $1.01 billion. The momentum carried into the next fiscal year, with Q3 FY2026 subscription revenue reaching $1.17 billion, a 21% jump from the prior year's quarter.

The Annual Recurring Revenue (ARR) metric is what really shows the forward momentum of the business. As of the end of Q3 FY2026 (October 31, 2025), the ending ARR stood at $4.92 billion, accelerating to 23% growth year-over-year. That quarter alone added a record $265 million in net new ARR. For context, the ending ARR for the full fiscal year 2025 was $4.24 billion.

Here's a quick look at the key revenue figures from the most recent reporting periods:

Metric	Period Ending	Amount
Full Year Subscription Revenue	Fiscal Year 2025 (Jan 31, 2025)	$3.76 billion
Subscription Revenue	Q3 FY2026 (Oct 31, 2025)	$1.17 billion
Total Revenue	Q3 FY2026 (Oct 31, 2025)	$1.23 billion
Ending Annual Recurring Revenue (ARR)	Q3 FY2026 (Oct 31, 2025)	$4.92 billion
Net New ARR Added	Q3 FY2026	$265 million

The Professional Services Revenue stream, which covers things like incident response and consulting, is smaller but still important for customer success and initial platform deployment. In Q3 FY2026, this revenue component was $65.5 million (or $65.54 million, depending on the filing). This contrasts with the subscription side, which is clearly the dominant revenue driver.

The Land-and-Expand Model is how CrowdStrike Holdings, Inc. drives that high subscription revenue growth. They get customers in the door, often with a core module, and then sell more capabilities. The Falcon Flex subscription model is the key lever here, designed to make it easier for customers to adopt multiple modules. The success is clear in the numbers:

• Ending ARR from accounts using Falcon Flex exceeded $1.35 billion as of Q3 FY2026.
• ARR from Flex accounts grew more than 200% year-over-year in that quarter.
• In fiscal year 2025, accounts adopting Falcon Flex added over $1 billion of in-quarter deal value.
• The average Falcon Flex customer represents over $1 million in ending ARR, showing significant expansion potential per account.

Module adoption is high; for instance, as of October 31, 2024, module adoption rates showed that customers were using six or more modules at a rate of 47%.

Finance: draft 13-week cash view by Friday.