Crowdsstrike Holdings, Inc. (CRWD): Business Model Canvas [Jan-2025 Mis à jour]

Dans l'arène à enjeux élevés de la cybersécurité, Crowdsstrike Holdings, Inc. (CRWD) émerge comme un formidable gardien, transformant la défense numérique par sa plate-forme Falcon à pointe alimentée par AI. En mélangeant parfaitement l'apprentissage automatique avancé, l'intelligence des menaces en temps réel et l'architecture native du cloud, CrowdStrike a révolutionné comment les organisations protègent leurs actifs numériques les plus critiques, offrant des solutions de sécurité sans précédent qui s'adaptent et réagissent au paysage en constante évolution des cyber-menaces avec remarquable avec remarquable précision et vitesse.

Crowdsstrike Holdings, Inc. (CRWD) - Modèle commercial: partenariats clés

Fournisseurs de services cloud

Crowdsstrike maintient des partenariats stratégiques avec les principaux fournisseurs de services cloud:

Fournisseur de cloud	Détails du partenariat	Année d'intégration
Amazon Web Services (AWS)	Autorisation élevée de Fedramp	2018
Microsoft Azure	Liste Azure Marketplace	2016
Google Cloud Platform	Intégration de sécurité du cloud	2019

Fournisseurs de services de sécurité gérés (MSSP)

Crowdsstrike collabore avec plusieurs MSSP dans le monde:

• Sécurité Optiv
• Insight Global
• Présidio
• Technologie du monde entier

Partenaires d'intégration technologique

Partenaire	Capacité d'intégration	Année de partenariat
Sabot	Intégration des informations de sécurité et de la gestion des événements (SIEM)	2017
Serviron	Automatisation du workflow	2019
Réseaux palo alto	Partage d'intelligence des menaces	2020

Intégrateurs de systèmes mondiaux

• Deloitte
• Accentuation
• Pwc
• Kpmg

Cybersecurity Alliance Partners

Organisation d'alliance	Focus de partenariat	Adhésion depuis
Cloud Security Alliance	Normes de sécurité du cloud	2015
Association de sécurité des systèmes d'information (ISSA)	Réseautage professionnel	2016

Crowdsstrike Holdings, Inc. (CRWD) - Modèle d'entreprise: Activités clés

Développement continu de la plate-forme de cybersécurité alimentée par l'IA

Crowdsstrike a investi 1,12 milliard de dollars dans la recherche et le développement au cours de l'exercice 2024. La société maintient plus de 1 400 professionnels de l'ingénierie dédiés à l'amélioration des plateformes.

Métrique de R&D	Valeur 2024
Dépenses totales de R&D	1,12 milliard de dollars
Personnel d'ingénierie	1 400+ professionnels
Modèles d'IA développés	37 modèles d'apprentissage automatique

Intelligence et recherche sur les menaces

La base de données de graphiques de menace de Crowdstrike traite plus de 2 billions d'événements de sécurité par semaine.

• Couverture mondiale des renseignements sur les menaces dans plus de 180 pays
• Plus de 250 acteurs de menace surveillés continuellement
• Capacités de détection des menaces en temps réel

Protection et détection de point final-native du nuage

La plate-forme Crowdsstrike Falcon protège 21 000 clients d'entreprise dans le monde.

Métrique de protection des points de terminaison	2024 statistiques
Total des clients d'entreprise	21,000+
Couverture mondiale	7 continents
Capteurs de point de terminaison déployés	1 million + points de terminaison

Opérations de sécurité et réponse aux incidents

CrowdStrike Falcon Complete fournit des services de détection et de réponse gérés 24/7.

• Temps de réponse moyen des incidents: 37 minutes
• Équipe de chasse aux menaces de plus de 500 experts en cybersécurité
• Capacités de neutralisation des menaces proactives

Algorithme d'apprentissage automatique et de menace Amélioration

Crowdsstrike utilise des algorithmes avancés d'apprentissage automatique pour la détection des menaces de cybersécurité.

Métrique d'apprentissage automatique	2024 performance
Précision de détection des menaces	99.7%
Modèles d'apprentissage automatique	37 modèles actifs
Prévention des menaces alimentées par l'IA	Bloque plus de 75 000 menaces par jour

Crowdsstrike Holdings, Inc. (CRWD) - Modèle d'entreprise: Ressources clés

Plateforme Falcon avec architecture notable du cloud

La plate-forme Falcon de CrowdStrike fonctionne sur une architecture de cloud-native avec les spécifications suivantes:

Métrique	Valeur
Couverture de plate-forme de protection de la charge de travail cloud (CWPP)	100+ environnements de nuages ​​et de conteneurs
Vitesse de détection de menace en temps réel	Moins de 1 seconde
Ingestion de données globale	1 billion + événements de sécurité par jour

Apprentissage automatique et technologies de l'IA

Les capacités de l'IA de Crowdstrike comprennent:

• Modèles d'apprentissage automatique formés sur 2+ pétaoctets de données de menace
• Taux de précision de détection des menaces alimentés par AI de 99,5%
• Plus de 500 modèles d'apprentissage automatique déployés sur la plate-forme Falcon

Base de données de renseignement sur les menaces

Métrique de l'intelligence	Quantité
Records d'intelligence des menaces	85 milliards
Capteurs de menace mondiale	1 million + points de terminaison
Échantillons de logiciels de malveillance analysés	Plus de 100 millions par an

Équipes de recherche et d'ingénierie hautement qualifiées en cybersécurité

Composition de la main-d'œuvre:

• Total des employés (Q4 2023): 3 737
• Recherche & Effectif d'ingénierie: environ 1 200
• Certifications avancées: 90% des chercheurs en sécurité détiennent des références de cybersécurité spécialisées

Portfolio de propriété intellectuelle robuste

Catégorie IP	Quantité
Total des brevets	350+
Demandes de brevet en instance	250+
Juridictions de brevet	États-Unis, Europe, Asie

Crowdsstrike Holdings, Inc. (CRWD) - Modèle d'entreprise: propositions de valeur

Protection complète du point final et de la charge de travail livrée par le cloud

La plate-forme Crowdsstrike Falcon couvre 27 632 clients au 31 janvier 2023. La plate-forme protège 2,5 billions de points de terminaison par an.

Métrique de protection	Quantité
Total des clients	27,632
Point de terminaison protégé	2,5 billions

Détection et prévention des menaces en temps réel

Les capacités de détection des menaces de Crowdsstrike comprennent:

• Plus de 1 billion d'événements traités quotidiennement
• 99,8% de l'efficacité de la protection contre les menaces connues et inconnues
• Modèles d'apprentissage automatique qui analysent plus de 82 milliards d'événements chaque semaine

Impact minimal des performances sur les systèmes protégés

L'agent léger de CrowdStrike consomme moins de 1% des frais généraux de processeur pendant les opérations de sécurité.

Analyse de sécurité avancée sur l'IA

Fonction d'analyse AI	Métrique de performance
Modèles d'apprentissage automatique	500+ modèles AI / ML
Mises à jour de l'intelligence des menaces	1,5 million + indicateurs par jour

Plate-forme de sécurité unifiée dans plusieurs environnements

Crowdsstrike supporte:

• Cloud Workloads: AWS, Azure, Google Cloud
• Types de points de terminaison: Windows, MacOS, Linux, iOS, Android
• Couverture sur 7 architectures technologiques différentes

Crowdsstrike Holdings, Inc. (CRWD) - Modèle d'entreprise: relations avec les clients

Plates-formes de support numérique en libre-service

La plate-forme Crowdsstrike Falcon fournit un support numérique 24/7 avec:

• Base de connaissances en ligne avec plus de 15 000 articles techniques
• Forum communautaire avec plus de 50 000 utilisateurs enregistrés
• Support de chat en temps réel disponible dans les 30 secondes

Canal de support numérique	Temps de réponse	Engagement des utilisateurs
Base de connaissances en ligne	Accès immédiat	Plus de 15 000 articles
Forum communautaire	Disponibilité 24/7	Plus de 50 000 utilisateurs
Portail en libre-service	Résolution instantanée	85% de satisfaction des utilisateurs

Gestion de réussite client dédiée

CrowdStrike fournit une gestion personnalisée de la réussite des clients:

• Les gestionnaires de réussite de la clientèle attribués pour les clients d'entreprise
• Avis sur les entreprises trimestrielles
• Programmes d'intégration personnalisés

Services de support technique et de conseil

Les offres de support technique comprennent:

• Support technique mondial 24/7
• Équipe de réponse aux incidents disponible
• Experts en cybersécurité certifiés

Niveau de soutien	Temps de réponse	Couverture
Support de platine	15 minutes	Global 24/7
Assistance d'entreprise	30 minutes	Plusieurs langues

Briefings de sécurité réguliers et mises à jour de renseignement sur les menaces

Crowdsstrike fournit:

• Rapports hebdomadaires du renseignement des menaces
• Webinaires de sécurité mensuels
• Notifications de menace en temps réel

Collaboration de recherche sur les menaces axée sur la communauté

La recherche sur les menaces collaboratives comprend:

• Plate-forme graphique de menace Crowdsstrike
• Partage mondial de l'intelligence des menaces
• Programmes de recherche partenaires

Métrique de recherche	2024 données
Indicateurs de menace analysés	2,5 billions de billions par semaine
Chercheurs à menace mondiale	350+ spécialistes

Crowdsstrike Holdings, Inc. (CRWD) - Modèle d'entreprise: canaux

Équipe de vente directe d'entreprise

L'équipe de vente directe de Crowdsstrike est composée de 1 420 professionnels des ventes au troisième trimestre 2023. L'équipe génère 1,9 milliard de dollars de revenus récurrents annuels (ARR) par le biais de solutions de cybersécurité au niveau de l'entreprise. Le cycle de vente moyen pour les clients des entreprises varie entre 60 et 90 jours.

Métrique de l'équipe de vente	Valeur
Représentants des ventes totales	1,420
Revenus récurrents annuels	1,9 milliard de dollars
Cycle de vente moyen	60-90 jours

Marketing numérique en ligne

Crowdstrike alloue environ 280 millions de dollars par an aux canaux de marketing numériques. Les stratégies de marketing numérique génèrent 42% de l'acquisition totale de plomb.

• Budget publicitaire de paiement par clic: 85 millions de dollars
• Dépenses de marketing des médias sociaux: 45 millions de dollars
• Investissement en marketing de contenu: 62 millions de dollars
• Publicité numérique programmatique: 88 millions de dollars

Réseau partenaire et canaux de revendeur

CrowdStrike maintient plus de 450 partenaires technologiques stratégiques et des partenaires de canaux. Les revenus axés sur les partenaires représentent 33% du total des revenus de l'entreprise.

Métrique du canal partenaire	Valeur
Partenaires stratégiques totaux	450+
Contribution des revenus des partenaires	33%
Taille moyenne de l'accord de partenaire	$175,000

Site Web d'entreprise et plateformes numériques

Le site Web d'entreprise de Crowdstrike génère 2,3 millions de visiteurs uniques mensuels. Le taux de conversion de la plate-forme numérique s'élève à 4,7%.

Conférences de l'industrie et événements de cybersécurité

Crowdsstrike participe à 85 conférences mondiales de cybersécurité chaque année. Les pistes générées par des événements contribuent 12% du pipeline de ventes totales, avec un budget de marketing d'événement estimé de 42 millions de dollars.

Métrique marketing de l'événement	Valeur
Participation annuelle de la conférence	85
Génération de leads à partir d'événements	12%
Budget marketing événementiel	42 millions de dollars

Crowdsstrike Holdings, Inc. (CRWD) - Modèle d'entreprise: segments de clientèle

Grandes organisations d'entreprise

CrowdStrike cible les grandes organisations d'entreprise avec des revenus annuels dépassant 1 milliard de dollars. Au troisième trimestre 2023, la société a déclaré 74% des entreprises du Fortune 100 et 61% des entreprises du Fortune 500 en tant que clients.

Métriques du segment d'entreprise	Pourcentage
Fortune 100 Pénétration du client	74%
Fortune 500 Pénétration du client	61%
Valeur du contrat moyen	$658,429

Entreprises intermédiaires

Crowdsstrike dessert des sociétés de marché intermédiaire avec 500 à 5 000 employés, représentant un segment de croissance important pour l'entreprise.

• La clientèle du marché intermédiaire a augmenté de 36% en glissement annuel en 2023
• Environ 40% de la clientèle totale
• Valeur du contrat annuel moyen: 157 000 $

Entités du gouvernement et du secteur public

CrowdStrike a une présence significative dans la cybersécurité du gouvernement, avec les certifications Fedramp et IL4 / IL5.

Métriques du segment du gouvernement	Valeur
Clients du gouvernement fédéral américain	Plus de 30 agences civiles
Croissance des revenus du secteur public	42% d'une année à l'autre

Industries des services financiers et des soins de santé

Crowdsstrike fournit des solutions de cybersécurité spécialisées pour les industries hautement réglementées.

• Clients des services financiers: 25% de la clientèle totale
• Clients de santé: 18% de la clientèle totale
• Conformité aux normes HIPAA et PCI DSS

Technologie et sociétés de logiciels

Le secteur de la technologie représente un segment de clientèle de base pour les solutions de cybersécurité de Crowdsstrike.

Métriques du segment de la technologie	Valeur
Clients technologiques	35% du portefeuille total des clients
Pénétration des entreprises de logiciels	45% des 500 meilleures sociétés de logiciels

Crowdsstrike Holdings, Inc. (CRWD) - Modèle d'entreprise: Structure des coûts

Investissements de recherche et développement

Au cours de l'exercice 2024, CrowdStrike a alloué 765,4 millions de dollars aux frais de recherche et de développement, représentant 47,3% des revenus totaux. Cet investissement important soutient l'innovation continue dans les technologies de cybersécurité.

Exercice fiscal	Dépenses de R&D	Pourcentage de revenus
2024	765,4 millions de dollars	47.3%

Dépenses de vente et de marketing

Les dépenses de vente et de marketing de Crowdstrike ont atteint 1,02 milliard de dollars au cours de l'exercice 2024, représentant 63,1% des revenus totaux.

Exercice fiscal	Ventes & Frais de marketing	Pourcentage de revenus
2024	1,02 milliard de dollars	63.1%

Infrastructure cloud et maintenance technologique

Les coûts d'infrastructure technologique pour CrowdStrike ont totalisé 312,6 millions de dollars au cours de l'exercice 2024.

• Dépenses d'hébergement cloud: 187,4 millions de dollars
• Maintenance des infrastructures technologiques: 125,2 millions de dollars

Acquisition et rétention de talents

Les dépenses totales liées au personnel pour Crowdstrike au cours de l'exercice 2024 étaient de 1,45 milliard de dollars.

Catégorie de dépenses	Montant
Total des dépenses du personnel	1,45 milliard de dollars
Compensation moyenne des employés	$265,000

Coûts de certification de conformité et de sécurité

Crowdsstrike a investi 42,3 millions de dollars dans les processus de certification de conformité et de sécurité au cours de l'exercice 2024.

• Coûts de certification SOC 2 Type II: 18,7 millions de dollars
• Frais de conformité ISO 27001: 23,6 millions de dollars

Crowdsstrike Holdings, Inc. (CRWD) - Modèle d'entreprise: Strots de revenus

Licence de logiciel basé sur l'abonnement

CrowdStrike génère des revenus primaires grâce à des abonnements à la plate-forme de cybersécurité native du cloud. Pour l'exercice 2024, les revenus récurrents annuels (ARR) étaient de 3,01 milliards de dollars, ce qui représente une croissance de 33% sur toute l'année.

Niveau d'abonnement	Fourchette de prix annuelle	Caractéristiques clés
Falcon Go	8,99 $ / mois	Protection de point de terminaison de base
Falcon Pro	44,99 $ / mois	Détection avancée des menaces
Falcon Enterprise	89,99 $ / mois	Suite de sécurité complète

Forfaits de service à plusieurs niveaux

CrowdStrike propose plusieurs niveaux de service avec des prix et des capacités différenciés:

• Falcon empêche: protection des points de terminaison
• Falcon Insight: détection et réponse prolongées
• Falcon complet: chasse à la menace gérée

Services professionnels et conseil

Les revenus des services professionnels pour le quatrième trimestre 2024 étaient de 125,4 millions de dollars, ce qui représente 14% des revenus totaux.

Intelligence des menaces et compléments de protection avancée

Le module de renseignement sur les menaces de Crowdstrike a généré 78,6 millions de dollars de revenus supplémentaires au cours de l'exercice 2024.

Contrats d'entreprise pluriannuels

La valeur du contrat d'entreprise était en moyenne de 401 000 $ par client au cours de l'exercice 2024, avec 71% des clients utilisant plusieurs modules de cloud.

Durée du contrat	Valeur du contrat moyen	Taux de renouvellement
1 an	$250,000	85%
2 ans	$475,000	92%
3 ans	$675,000	96%

CrowdStrike Holdings, Inc. (CRWD) - Canvas Business Model: Value Propositions

Unified Security Consolidation: Replacing multiple point products with one platform

CrowdStrike Holdings, Inc. drives consolidation by making its platform the foundational operating system for cybersecurity, appealing to enterprises battling tool sprawl. The Falcon Flex subscription model is key to this, with ARR from Flex accounts growing more than 200% year over year to more than $1.35 billion as of the third quarter of fiscal year 2025. This single-agent approach absorbs more workloads, with subscription revenue growing 21% to $1.17 billion in one recent quarter as customers consolidated endpoint, cloud workload, and identity protection. Platform stickiness is evident in module adoption rates.

The extent of platform adoption as of late 2025 fiscal year reporting:

Adoption Metric	Data Point
Customers using six or more Falcon modules	49%
Customers using eight or more Falcon modules	24%
Next-Gen SIEM net new ARR growth (YoY Q3 FY2025)	Over 150%
Next-Gen SIEM customers	2,000+

AI-Powered Speed: Stopping breaches with one of the fastest recorded eCrime breakout times

The value proposition here is stopping intrusions before they spread, which is critical given the speed of modern threats. The fastest recorded eCrime breakout time observed was a mere 51 seconds. This rapid response capability is powered by the AI-native Falcon platform.

Key speed and threat statistics:

• Fastest recorded eCrime breakout time: 51 seconds.
• Average eCrime breakout time (2024): Fell to 48 minutes.
• Malware-free detections (2024): Accounted for 79% of detections.
• Growth in vishing operations (H1 to H2 2024): 442%.

Cloud and Identity Protection: Securing hybrid environments across endpoint, cloud, and identity

CrowdStrike Holdings, Inc. is securing the expanding attack surface across hybrid environments. The combined ending Annual Recurring Revenue (ARR) for the Next-Gen SIEM, Cloud Security, and Identity Protection businesses surpassed $1.3 billion as of January 31, 2025. The company was recognized as the Overall Leader in the 2025 KuppingerCole Identity Threat Detection and Response (ITDR) Leadership Compass. Furthermore, the newly launched Falcon Shield recorded sequential growth of nearly 50%, showing elevated demand for SaaS and identity risk mitigation.

High Customer Trust: Retention and willingness to recommend score

Customer commitment is quantified by exceptionally high retention figures, showing customers are not only staying but expanding their use of the platform. Gross retention was reported at 97% across multiple periods near late 2025. Dollar-based net retention, which measures spending expansion from existing customers, stood at 115% in the third quarter of fiscal year 2025.

Customer loyalty metrics:

• Gross Retention Rate (GRR): 97%.
• Dollar-Based Net Retention Rate (Q3 FY2025): 115%.
• Ending ARR (as of Jan 31, 2025): Grew to $4.24 billion.

CrowdStrike Holdings, Inc. (CRWD) - Canvas Business Model: Customer Relationships

You're managing a security portfolio where customer retention and expansion are everything, especially after a major industry event. CrowdStrike Holdings, Inc. focuses its customer relationships on a tiered approach, balancing high-touch support for strategic accounts with scalable digital engagement for the broader base.

Dedicated Account Management: For large enterprise and strategic Falcon Flex customers

The Falcon Flex subscription model is central to deepening relationships with large, strategic customers. This model is designed to accelerate platform consolidation, making it easier for customers to adopt multiple modules upfront in exchange for preferred pricing and flexibility over time. This approach clearly signals a commitment to the customer's long-term security architecture, not just a single product sale.

The traction here is significant. As of the third quarter of fiscal year 2026, accounts on the Falcon Flex model represented over $1.35 billion in ending Annual Recurring Revenue (ARR), showing growth of more than 200% year-over-year. During that same quarter, CrowdStrike Holdings, Inc. closed more than 150 Falcon Flex deals, collectively valued at over $600 million in total contract value. Honestly, this model turns a contract into a partnership, with Flex customers adopting an average of nine or more modules. This dedicated, high-value engagement is what drives the platform stickiness you're looking for.

Automated/Digital Service: Self-service module adoption within the Falcon console

For day-to-day management and adoption across the platform, the focus is on consolidation into a single interface. CrowdStrike Holdings, Inc. pushes the narrative of its unified platform, which consolidates security across endpoint, identity, and cloud using a single agent. This architecture supports a self-service mentality by presenting a comprehensive view within the Falcon console. For instance, the platform's ability to consolidate SaaS Security Posture Management (SSPM) with other disciplines into one console helps reduce operational overhead for the customer. The goal here is to make module adoption feel like a natural expansion within a familiar environment, not a separate procurement headache.

High-Touch Professional Services: Incident response and proactive security consulting

When things go wrong, or when complex new technologies like SIEM or advanced identity protection are deployed, the high-touch professional services team steps in. These services, which include incident response and proactive consulting, are a smaller but critical part of the revenue mix. For the full fiscal year 2025, GAAP professional services revenue was $192.14 million, making up 4.86% of total revenue. More recently, in the third quarter of fiscal year 2026, professional services revenue specifically clocked in at $65.5 million. This high-touch support is also deeply integrated with the partner ecosystem; an independent study found that partners can generate up to $7 in services revenue for every $1 a customer spends directly on the Falcon platform, illustrating the value placed on implementation and managed services.

Community-Driven Trust: Demonstrated by the willingness to recommend score

The ultimate measure of customer relationship health is advocacy, and CrowdStrike Holdings, Inc. consistently posts high scores here. This trust is vital, especially following the operational incident in mid-2024, as it shows customers believe in the recovery and the platform's core value. In the 2025 Gartner Peer Insights reports, the company achieved a 97% Willingness to Recommend score. Specifically, one report cited this score based on 601 overall responses as of January 2025, while another cited 206 responses as of February 28, 2025. You can see the high satisfaction reflected in the ratings, such as 4.8/5 for Product Capabilities in one report.

Here's a quick look at the key customer-facing metrics we've discussed:

Metric Category	Specific Data Point	Value/Amount	Reporting Period/Basis
Community Trust	Willingness to Recommend Score	97%	As of January/February 2025
Falcon Flex Adoption (Value)	Total Deal Value from Flex Accounts	$1.3 billion	Q3 FY2026
Falcon Flex Adoption (ARR)	Ending ARR from Flex Model Accounts	Over $1.35 billion	Q3 FY2026
High-Touch Services Revenue	Fiscal Year 2025 Professional Services Revenue	$192.14 M	FY 2025
High-Touch Services Revenue	Q3 FY2026 Professional Services Revenue	$65.5 million	Q3 FY2026
Ecosystem Value	Partner Services Revenue Multiplier	Up to $7 per $1 Falcon Platform Spend	Canalys Study

The move to Falcon Flex, often tied to Customer Commitment Packages (CCPs) to help customers recover from the July 2024 incident, has been a defintely successful strategy to reinforce relationships and drive multi-module adoption.

• Flex customers adopt an average of nine or more modules.
• The company completed over 150 Falcon Flex deals in Q3.
• The unified platform consolidates security disciplines into a single console.
• The high recommendation score is based on hundreds of customer responses.

Finance: draft 13-week cash view by Friday.

CrowdStrike Holdings, Inc. (CRWD) - Canvas Business Model: Channels

You're looking at how CrowdStrike Holdings, Inc. gets its Falcon platform into the hands of customers, and it's a multi-pronged effort designed to capture everything from the largest global firms to smaller businesses. It's not just one path; it's a coordinated push across direct engagement, hyperscaler integration, and a vast partner ecosystem.

Direct Sales Force: Handling complex, large-scale enterprise contracts.

The direct sales team is definitely still key for those massive, complex enterprise deals, especially those involving the full platform consolidation CrowdStrike pushes. While the exact revenue split isn't public, the scale of their wins suggests this team closes the largest contracts. For instance, in Q4 of their last reported fiscal year, they closed over 20 deals greater than $10 million and over 350 deals greater than $1 million. That kind of deal velocity requires seasoned direct engagement to navigate procurement and architecture sign-offs at the highest levels.

Cloud Marketplaces: AWS Marketplace sales surpassed $1 billion in 2025.

The hyperscaler marketplaces are a massive channel for CrowdStrike Holdings, Inc., simplifying procurement for cloud-native customers. CrowdStrike Holdings, Inc. became the first cloud-native cybersecurity Independent Software Vendor (ISV) to surpass $1 billion in AWS Marketplace sales within a single calendar year in 2025. This channel is clearly working for scale; the transaction value through AWS Marketplace alone rose over 100% year-over-year in Q3 FY2025. It's a clear signal that customers prefer to consolidate security spend through their existing cloud relationships.

Global Channel Partner Network: Driving adoption in midmarket and SMB segments.

The partner network, managed through the expanded Accelerate program, is crucial for reaching the midmarket and SMBs, and for driving volume. To be fair, this channel is responsible for a huge chunk of new business; in Q3 FY2025, nearly 70% of new subscriptions came through partners. This network includes resellers, system integrators, and Managed Security Service Providers (MSSPs). CrowdStrike Holdings, Inc. recognized top performers like TD SYNNEX, naming them the 2025 Global Distributor Partner of the Year. The strategy relies on partners leveraging flexible licensing like Falcon Flex to deliver tailored solutions.

Falcon Platform Console: Direct in-product upsell of new security modules.

This is where the platform strategy really pays off, turning initial endpoint protection customers into multi-module subscribers right through the Falcon console. The adoption rates show this is happening fast. As of October 31, 2025, module adoption looked like this:

• 49% of customers used six or more modules.
• 34% used seven or more modules.
• 24% used eight or more modules.

The Falcon Flex subscription model is the engine for this, allowing customers to easily add modules without new procurement cycles. This model alone drove over $1.35 billion in ending Annual Recurring Revenue (ARR) as of the end of Q3 FY2026, representing growth of more than 200% year-over-year in that segment. That's how you expand within the installed base.

Here's a quick look at how the key components of the revenue base and channel success stack up as of late 2025:

Metric	Value / Rate	Context / Date
Ending Annual Recurring Revenue (ARR)	$4.92 billion	As of October 31, 2025
Q3 FY2026 Total Revenue	$1.23 billion	Year-over-year growth of 22%
New Subscriptions via Partners	Nearly 70%	Q3 FY2025
AWS Marketplace Annual Sales Milestone	$1 billion+	Achieved in 2025 calendar year
Falcon Flex Ending ARR	Exceeded $1.35 billion	Q3 FY2026
Customers Using 8+ Modules	24%	As of October 31, 2025

Finance: draft 13-week cash view by Friday.

CrowdStrike Holdings, Inc. (CRWD) - Canvas Business Model: Customer Segments

You're looking at how CrowdStrike Holdings, Inc. segments its market as of late 2025. The strategy clearly leans into platform consolidation, using flexible licensing to drive deeper adoption across its customer base, which spans from the largest global entities to smaller organizations.

Large Enterprises/Global 2000: Seeking security platform consolidation.

This segment is heavily targeted by the push for a unified, AI-native Security Operations Center (SOC). The success of platform consolidation is directly measurable through module adoption rates, showing customers are moving away from point products. The Falcon Flex subscription model is a key enabler here, driving significant Annual Recurring Revenue (ARR) growth from existing customers expanding their footprint.

The data on deep module adoption illustrates this consolidation:

• Customers using six or more modules reached 49% as of the third quarter of fiscal 2026.
• Customers using seven or more modules stood at 34%.
• Customers using eight or more modules reached 24%.

This deep adoption is quantified by the financial impact of the flexible licensing:

Metric	Amount (as of Q3 FY2026)
Ending ARR from Falcon Flex Accounts	Over $1.35 billion
Year-over-Year Growth of Falcon Flex ARR	More than 200%
Average Modules Used by Flex Customers	~9 modules

The company's total ending ARR reached $4.92 billion as of October 31, 2025, showing the scale of the customer base these consolidation efforts are impacting.

Midmarket and Small-to-Medium Businesses (SMBs): Targeted via Falcon Go and Falcon Flex.

CrowdStrike Holdings, Inc. is seeing momentum across customers of all sizes, moving from enterprise down to the midmarket and SMB space. While specific revenue figures for the Falcon Go offering aren't broken out, the broad-based momentum suggests successful penetration into these smaller segments, often using the flexibility of Falcon Flex to manage costs and scale security needs efficiently. The overall subscription revenue, which services all customer sizes, was $1.17 billion in the third quarter of fiscal 2026, up 21% year-over-year.

Public Sector/Government: Recognized as a key segment in the 2025 Gartner report.

The public sector is explicitly called out as a segment achieving strong performance. This includes notable traction within U.S. federal agencies and higher education institutions. While a specific dollar amount for this segment isn't provided, its mention as a strong performer alongside the enterprise segment confirms its strategic importance to CrowdStrike Holdings, Inc.'s overall business mix. The U.S. market overall accounted for approximately 67% of the third quarter fiscal 2026 revenue.

Cloud-First Organizations: High growth in Next-Gen SIEM and Cloud Security adoption.

Growth in cloud-native and AI-driven security is a major driver, evidenced by the acceleration across specific product areas. The combined ending ARR for the Next-Gen SIEM, Cloud Security, and Identity Protection businesses surpassed $1.3 billion as of the fiscal year 2025 reporting period. Furthermore, the company reported record net new ARR for its Falcon Next-Gen SIEM offering in the third quarter of fiscal 2026. This focus on the modern security stack is what underpins the overall platform consolidation narrative, as these workloads require unified defense architecture.

CrowdStrike Holdings, Inc. (CRWD) - Canvas Business Model: Cost Structure

You're looking at where CrowdStrike Holdings, Inc. is putting its money to work to fuel that massive platform expansion. Honestly, the cost structure tells a clear story of aggressive growth investment, which is typical for a market leader scaling rapidly.

High Sales and Marketing (S&M) Costs: Necessary for land-and-expand strategy and new customer acquisition.

The go-to-market engine is definitely a major cost center, which makes sense when you are trying to capture market share and get customers to adopt more modules on the Falcon platform. You see this investment reflected in both GAAP and Non-GAAP figures for fiscal year 2025.

Here are the percentages of revenue for the full fiscal year 2025:

• GAAP Sales and Marketing operating expenses as a percentage of revenue: 39%
• Non-GAAP Sales and Marketing operating expenses as a percentage of revenue: 32%

When you look at the total Selling, General, and Administrative (SG&A) spend, it clocked in around 51% of revenue for FY2025, highlighting that continued sales and channel investment to convert those large enterprise deals globally.

Research and Development (R&D) Investment: Continuous funding for AI and platform innovation.

CrowdStrike Holdings, Inc. keeps pouring resources into the platform, especially around AI and security analytics, which is key to maintaining that technological lead. This is a non-negotiable cost for staying ahead in the security space.

For fiscal year 2025, the R&D investment was substantial:

Metric	Amount (FY2025)
Total Revenue	$3.95 billion
Research and Development Operating Expenses (GAAP)	$1,076,901 (in thousands, or ~$1.077 billion)
R&D Intensity (R&D/Revenue)	~27%

That R&D intensity of approximately 27% is high compared to many other Software as a Service peers, showing the commitment to product expansion.

Low Cost of Goods Sold (COGS): Reflected in the non-GAAP subscription gross margin of 80% for FY2025.

The subscription business model itself is incredibly efficient once the customer is onboarded. This is where you see the real operating leverage start to kick in, even while S&M and R&D are high.

The key metric here for the full fiscal year 2025 is the Non-GAAP subscription gross margin, which hit 80%. That's a strong indicator of the underlying economics of delivering the Falcon platform service.

Cloud Infrastructure Costs: Running the massive, global Falcon platform and Threat Graph.

The cost to run the global Falcon platform and the massive Threat Graph is baked into COGS, which is why that 80% Non-GAAP subscription gross margin is so important. It shows that despite the massive scale and data processing required, the cost to serve each additional customer or data point remains relatively low, supporting the land-and-expand motion. You see the result of this efficiency in the record full year operating cash flow of $1.38 billion and free cash flow of $1.07 billion for FY2025.

Here's a quick look at how the major operating expense categories stacked up as a percentage of revenue for FY2025:

Expense Category (as % of Revenue)	GAAP	Non-GAAP
Sales and Marketing	39%	32%
Research and Development	~27% (Implied from R&D/Revenue)	N/A
General and Administrative	N/A	~24% (Implied from SG&A 51% minus S&M 32% Non-GAAP)

Finance: draft 13-week cash view by Friday.

CrowdStrike Holdings, Inc. (CRWD) - Canvas Business Model: Revenue Streams

You're looking at the engine that powers CrowdStrike Holdings, Inc.'s growth, which is heavily weighted toward recurring revenue. Honestly, the numbers show a clear preference for long-term commitments over one-off sales.

Subscription Revenue is the bedrock here. This is the predictable, high-margin income from customers using the Falcon platform on an ongoing basis. For the full fiscal year 2025, this primary stream totaled $3.76 billion, marking a 31% year-over-year increase. To give you a sense of the quarterly cadence leading up to this, Q3 FY2025 subscription revenue was $962.7 million, and by Q4 FY2025, it hit $1.01 billion. The momentum carried into the next fiscal year, with Q3 FY2026 subscription revenue reaching $1.17 billion, a 21% jump from the prior year's quarter.

The Annual Recurring Revenue (ARR) metric is what really shows the forward momentum of the business. As of the end of Q3 FY2026 (October 31, 2025), the ending ARR stood at $4.92 billion, accelerating to 23% growth year-over-year. That quarter alone added a record $265 million in net new ARR. For context, the ending ARR for the full fiscal year 2025 was $4.24 billion.

Here's a quick look at the key revenue figures from the most recent reporting periods:

Metric	Period Ending	Amount
Full Year Subscription Revenue	Fiscal Year 2025 (Jan 31, 2025)	$3.76 billion
Subscription Revenue	Q3 FY2026 (Oct 31, 2025)	$1.17 billion
Total Revenue	Q3 FY2026 (Oct 31, 2025)	$1.23 billion
Ending Annual Recurring Revenue (ARR)	Q3 FY2026 (Oct 31, 2025)	$4.92 billion
Net New ARR Added	Q3 FY2026	$265 million

The Professional Services Revenue stream, which covers things like incident response and consulting, is smaller but still important for customer success and initial platform deployment. In Q3 FY2026, this revenue component was $65.5 million (or $65.54 million, depending on the filing). This contrasts with the subscription side, which is clearly the dominant revenue driver.

The Land-and-Expand Model is how CrowdStrike Holdings, Inc. drives that high subscription revenue growth. They get customers in the door, often with a core module, and then sell more capabilities. The Falcon Flex subscription model is the key lever here, designed to make it easier for customers to adopt multiple modules. The success is clear in the numbers:

• Ending ARR from accounts using Falcon Flex exceeded $1.35 billion as of Q3 FY2026.
• ARR from Flex accounts grew more than 200% year-over-year in that quarter.
• In fiscal year 2025, accounts adopting Falcon Flex added over $1 billion of in-quarter deal value.
• The average Falcon Flex customer represents over $1 million in ending ARR, showing significant expansion potential per account.

Module adoption is high; for instance, as of October 31, 2024, module adoption rates showed that customers were using six or more modules at a rate of 47%.

Finance: draft 13-week cash view by Friday.