Crowdstrike Holdings, Inc. (CRWD): Modelo de negócios Canvas [Jan-2025 Atualizado]

Na arena de segurança cibernética, a Crowdstrike Holdings, Inc. (CRWD) surge como um guardião formidável, transformando a defesa digital por meio de sua plataforma Falcon de ponta de IA. Ao misturar perfeitamente o aprendizado avançado de máquina, a inteligência de ameaças em tempo real e a arquitetura nativa em nuvem, o crowdstrike revolucionou como as organizações protegem seus ativos digitais mais críticos, oferecendo soluções de segurança sem precedentes que se adaptam e respondem ao cenário em constante evolução das ameaças cibernéticas com notável precisão e velocidade.

Crowdstrike Holdings, Inc. (CRWD) - Modelo de negócios: Parcerias -chave

Provedores de serviços em nuvem

Crowdstrike mantém parcerias estratégicas com os principais provedores de serviços em nuvem:

Provedor de nuvem	Detalhes da parceria	Ano de integração
Amazon Web Services (AWS)	Fedramp Alta autorização	2018
Microsoft Azure	Listagem do mercado do Azure	2016
Plataforma do Google Cloud	Integração de segurança em nuvem	2019

Provedores de serviços de segurança gerenciados (MSSPs)

Crowdstrike colabora com vários MSSPs globalmente:

• Segurança Optiv
• Insight Global
• Presídio
• Tecnologia mundial

Parceiros de integração de tecnologia

Parceiro	Capacidade de integração	Ano de parceria
Splunk	Integração de informações de segurança e gerenciamento de eventos (SIEM)	2017
ServiceNow	Automação do fluxo de trabalho	2019
Redes Palo Alto	Compartilhamento de inteligência de ameaças	2020

Integradores de sistemas globais

• Deloitte
• Accenture
• Pwc
• Kpmg

Parceiros da Aliança de Segurança Cibernética

Organização da Aliança	Foco em parceria	Associação desde então
Aliança de segurança em nuvem	Padrões de segurança em nuvem	2015
Associação de Segurança de Sistemas de Informação (ISSA)	Networking profissional	2016

Crowdstrike Holdings, Inc. (CRWD) - Modelo de negócios: Atividades -chave

Desenvolvimento contínuo da plataforma de segurança cibernética movida a IA

Crowdstrike investiu US $ 1,12 bilhão em pesquisa e desenvolvimento no ano fiscal de 2024. A empresa mantém mais de 1.400 profissionais de engenharia dedicados ao aprimoramento da plataforma.

Métrica de P&D	2024 Valor
Gastos totais de P&D	US $ 1,12 bilhão
Equipe de engenharia	1.400+ profissionais
Modelos de IA desenvolvidos	37 modelos de aprendizado de máquina

Inteligência e pesquisa de ameaças

O banco de dados de gráficos de ameaças da CrowdStrike processa mais de 2 trilhões de eventos de segurança por semana.

• Cobertura global de inteligência de ameaças em mais de 180 países
• Mais de 250 atores de ameaças monitoraram continuamente
• Capacidades de detecção de ameaças em tempo real

Proteção e detecção de pontos finais nativos da nuvem

A plataforma Falcon Crowdstrike protege mais de 21.000 clientes corporativos em todo o mundo.

Métrica de proteção de terminais	2024 Estatísticas
Total de clientes corporativos	21,000+
Cobertura global	7 continentes
Sensores de endpoint implantados	1 milhão de pontos de extremidade

Operações de segurança e resposta a incidentes

O CrowdStrike Falcon Complete fornece serviços de detecção e resposta gerenciados 24 horas por dia, 7 dias por semana.

• Tempo médio de resposta a incidentes: 37 minutos
• Equipe de caça de ameaças de mais de 500 especialistas em segurança cibernética
• Capacidades proativas de neutralização de ameaças

Aprendizado de máquina e aprimoramento do algoritmo de detecção de ameaças

O crowdstrike utiliza algoritmos avançados de aprendizado de máquina para detecção de ameaças de segurança cibernética.

Métrica de aprendizado de máquina	2024 Performance
Precisão da detecção de ameaças	99.7%
Modelos de aprendizado de máquina	37 modelos ativos
Prevenção de ameaças a IA	Bloqueia mais de 75.000 ameaças diariamente

Crowdstrike Holdings, Inc. (CRWD) - Modelo de negócios: Recursos -chave

Plataforma Falcon com arquitetura nativa em nuvem

A plataforma Falcon da Crowdstrike opera em uma arquitetura nativa em nuvem com as seguintes especificações:

Métrica	Valor
Cobertura da plataforma de proteção de carga de trabalho em nuvem (CWPP)	Mais de 100 ambientes de nuvem e contêineres
Velocidade de detecção de ameaças em tempo real	Menos de 1 segundo
Ingestão de dados globais	1 trilhão+ eventos de segurança diariamente

Aprendizado de máquina proprietário e tecnologias de IA

Os recursos de IA da Crowdstrike incluem:

• Modelos de aprendizado de máquina treinados em mais de 2 petabytes de dados de ameaças
• Taxa de precisão de detecção de ameaças a IA de 99,5%
• Mais de 500 modelos de aprendizado de máquina implantados na plataforma Falcon

Extenso banco de dados de inteligência de ameaças

Métrica de inteligência	Quantidade
Ameaças registros de inteligência	85 mais de bilhões
Sensores de ameaças globais	1 milhão de pontos de extremidade
Amostras de malware analisadas	Mais de 100 milhões anualmente

Equipes de pesquisa e engenharia altamente qualificadas de segurança cibernética

Composição da força de trabalho:

• Total de funcionários (Q4 2023): 3.737
• Pesquisar & Funcionário de engenharia: aproximadamente 1.200
• Certificações avançadas: 90% dos pesquisadores de segurança possuem credenciais especializadas de segurança cibernética

Portfólio de propriedade intelectual robusta

Categoria IP	Quantidade
Total de patentes	350+
Aplicações de patentes pendentes	250+
Jurisdições de patentes	Estados Unidos, Europa, Ásia

Crowdstrike Holdings, Inc. (CRWD) - Modelo de negócios: proposições de valor

Proteção abrangente de endpoint e carga de trabalho entregue na nuvem e carga de trabalho

A plataforma Falcon Crowdstrike abrange 27.632 clientes em 31 de janeiro de 2023. A plataforma protege 2,5 trilhões de pontos finais anualmente.

Métrica de proteção	Quantidade
Total de clientes	27,632
Termin-weeks protegidos	2,5 trilhões

Detecção e prevenção de ameaças em tempo real

Os recursos de detecção de ameaças da Crowdstrike incluem:

• Mais de 1 trilhão de eventos processados ​​diariamente
• 99,8% de eficácia de proteção contra ameaças conhecidas e desconhecidas
• Modelos de aprendizado de máquina que analisam 82 bilhões de eventos semanalmente

Impacto mínimo de desempenho nos sistemas protegidos

O agente leve da CrowdStrike consome menos de 1% de sobrecarga da CPU durante as operações de segurança.

Analítica de segurança avançada de IA

Recurso de análise de IA	Métrica de desempenho
Modelos de aprendizado de máquina	500+ modelos AI/ML
Atualizações de inteligência de ameaças	1,5 milhão+ indicadores diariamente

Plataforma de segurança unificada em vários ambientes

Crowdstrike suporta:

• Cargas de trabalho em nuvem: AWS, Azure, Google Cloud
• Tipos de terminais: Windows, MacOS, Linux, iOS, Android
• Cobertura em 7 arquiteturas de tecnologia diferentes

Crowdstrike Holdings, Inc. (CRWD) - Modelo de negócios: Relacionamentos do cliente

Plataformas de suporte digital de autoatendimento

A plataforma Falcon Crowdstrike fornece suporte digital 24/7 com:

• Base de conhecimento on -line com mais de 15.000 artigos técnicos
• Fórum Comunitário com mais de 50.000 usuários registrados
• Suporte de bate-papo em tempo real disponível em 30 segundos

Canal de suporte digital	Tempo de resposta	Engajamento do usuário
Base de conhecimento online	Acesso imediato	Mais de 15.000 artigos
Fórum comunitário	Disponibilidade 24/7	Mais de 50.000 usuários
Portal de autoatendimento	Resolução instantânea	85% de satisfação do usuário

Gerenciamento dedicado ao sucesso do cliente

Crowdstrike fornece gerenciamento personalizado de sucesso do cliente com:

• Gerentes de sucesso do cliente atribuídos para clientes corporativos
• Revisões de negócios trimestrais
• Programas de integração personalizados

Serviços técnicos de suporte e consultoria

As ofertas de suporte técnico incluem:

• Suporte técnico global 24/7
• Equipe de resposta a incidentes disponível
• Especialistas em cibersegurança certificados

Nível de suporte	Tempo de resposta	Cobertura
Suporte de platina	15 minutos	Global 24/7
Suporte corporativo	30 minutos	Vários idiomas

Batins de segurança regulares e atualizações de inteligência de ameaças

Crowdstrike fornece:

• Relatórios semanais de inteligência de ameaças
• Webinars mensais de segurança
• Notificações de ameaças em tempo real

Colaboração de pesquisa de ameaças orientada pela comunidade

A pesquisa de ameaças colaborativas inclui:

• Plataforma de gráfico de ameaças de crowdstrike
• Compartilhamento global de inteligência de ameaças
• Programas de pesquisa de parceiros

Métrica de pesquisa	2024 dados
Indicadores de ameaça analisados	2,5 trilhões por semana
Pesquisadores de ameaças globais	350 mais de especialistas

Crowdstrike Holdings, Inc. (CRWD) - Modelo de negócios: Canais

Equipe de vendas da empresa direta

A equipe de vendas corporativas direta da CrowdStrike consiste em 1.420 profissionais de vendas a partir do terceiro trimestre de 2023. A equipe gera US $ 1,9 bilhão em receita recorrente anual (ARR) através de soluções de segurança cibernética em nível corporativo. O ciclo médio de vendas para clientes corporativos varia entre 60 e 90 dias.

Métrica da equipe de vendas	Valor
Total de representantes de vendas	1,420
Receita recorrente anual	US $ 1,9 bilhão
Ciclo médio de vendas	60-90 dias

Marketing Digital Online

Crowdstrike aloca aproximadamente US $ 280 milhões anualmente para canais de marketing digital. As estratégias de marketing digital geram 42% da aquisição total de chumbo.

• Orçamento de publicidade paga por clique: US $ 85 milhões
• Gastes de marketing de mídia social: US $ 45 milhões
• Investimento de marketing de conteúdo: US $ 62 milhões
• Publicidade digital programática: US $ 88 milhões

Canais de rede de parceiros e revendedores

Crowdstrike mantém mais de 450 parceiros de tecnologia estratégica e parceiros de canal. A receita orientada por parceiro representa 33% da receita total da empresa.

Métrica de canal de parceiros	Valor
Total de parceiros estratégicos	450+
Contribuição da receita do parceiro	33%
Tamanho médio de negócios do parceiro	$175,000

Site corporativo e plataformas digitais

O site corporativo da CrowdStrike gera 2,3 milhões de visitantes únicos mensais. A taxa de conversão da plataforma digital é de 4,7%.

Conferências da indústria e eventos de segurança cibernética

Crowdstrike participa de 85 conferências globais de segurança cibernética anualmente. Os leads gerados por eventos contribuem com 12% do total de vendas, com um orçamento estimado de marketing de eventos de US $ 42 milhões.

Métrica de marketing de eventos	Valor
Participação anual da conferência	85
Geração de leads a partir de eventos	12%
Orçamento de marketing de eventos	US $ 42 milhões

Crowdstrike Holdings, Inc. (CRWD) - Modelo de negócios: segmentos de clientes

Grandes organizações empresariais

A CrowdStrike tem como alvo grandes organizações corporativas com receitas anuais superiores a US $ 1 bilhão. A partir do terceiro trimestre de 2023, a empresa registrou 74% da fortuna 100 e 61% das empresas da Fortune 500 como clientes.

Métricas do segmento corporativo	Percentagem
Penetração do cliente da Fortuna 100	74%
Penetração de clientes da Fortuna 500	61%
Valor médio do contrato	$658,429

Negócios no meio do mercado

A CrowdStrike atende empresas intermediárias com 500 a 5.000 funcionários, representando um segmento de crescimento significativo para a empresa.

• A base de clientes do mercado intermediário cresceu 36% ano a ano em 2023
• Aproximadamente 40% da base total de clientes
• Valor médio anual do contrato: US $ 157.000

Entidades do governo e do setor público

Crowdstrike tem presença significativa na segurança cibernética do governo, com certificações FedRamp e IL4/IL5.

Métricas do segmento do governo	Valor
Clientes do governo federal dos EUA	Mais de 30 agências civis
Crescimento da receita do setor público	42% ano a ano

Serviços financeiros e indústrias de saúde

O CrowdStrike fornece soluções especializadas de segurança cibernética para indústrias altamente regulamentadas.

• Clientes de serviços financeiros: 25% da base total de clientes
• Clientes de saúde: 18% da base total de clientes
• Conformidade com os padrões HIPAA e PCI DSS

Empresas de tecnologia e software

O setor de tecnologia representa um segmento de cliente principal para as soluções de segurança cibernética da CrowdStrike.

Métricas de segmento de tecnologia	Valor
Clientes de tecnologia	35% do portfólio total de clientes
Penetração da empresa de software	45% das 500 principais empresas de software

Crowdstrike Holdings, Inc. (CRWD) - Modelo de negócios: estrutura de custos

Investimentos de pesquisa e desenvolvimento

No ano fiscal de 2024, Crowdstrike alocou US $ 765,4 milhões às despesas de pesquisa e desenvolvimento, representando 47,3% da receita total. Esse investimento significativo suporta inovação contínua em tecnologias de segurança cibernética.

Ano fiscal	Despesas de P&D	Porcentagem de receita
2024	US $ 765,4 milhões	47.3%

Despesas de vendas e marketing

As despesas de vendas e marketing da CrowdStrike atingiram US $ 1,02 bilhão no ano fiscal de 2024, representando 63,1% da receita total.

Ano fiscal	Vendas & Despesas de marketing	Porcentagem de receita
2024	US $ 1,02 bilhão	63.1%

Infraestrutura em nuvem e manutenção de tecnologia

Os custos de infraestrutura de tecnologia para crowdstrike totalizaram US $ 312,6 milhões no ano fiscal de 2024.

• Despesas de hospedagem em nuvem: US $ 187,4 milhões
• Manutenção da infraestrutura tecnológica: US $ 125,2 milhões

Aquisição e retenção de talentos

O total de despesas relacionadas ao pessoal para crowdstrike no ano fiscal de 2024 foi de US $ 1,45 bilhão.

Categoria de despesa	Quantia
Total de despesas de pessoal	US $ 1,45 bilhão
Compensação média dos funcionários	$265,000

Custos de conformidade e certificação de segurança

Crowdstrike investiu US $ 42,3 milhões em processos de conformidade e certificação de segurança durante o ano fiscal de 2024.

• SoC 2 Certificação Tipo II Custos: US $ 18,7 milhões
• ISO 27001 Despesas de conformidade: US $ 23,6 milhões

Crowdstrike Holdings, Inc. (CRWD) - Modelo de negócios: fluxos de receita

Licenciamento de software baseado em assinatura

O crowdstrike gera receita primária por meio de assinaturas de plataforma de segurança cibernética em nuvem. Para o ano fiscal de 2024, a receita recorrente anual (ARR) foi de US $ 3,01 bilhões, representando 33% de crescimento ano a ano.

Camada de assinatura	Faixa de preço anual	Principais recursos
Falcon vai	US $ 8,99/mês	Proteção básica do terminal
Falcon Pro	US $ 44,99/mês	Detecção avançada de ameaças
Falcon Enterprise	US $ 89,99/mês	Suíte de segurança abrangente

Pacotes de serviço em camadas

Crowdstrike oferece várias camadas de serviço com preços e recursos diferenciados:

• Falcon Prevent: Proteção do endpoint
• Falcon Insight: Detecção e resposta estendidas
• Falcon completo: caça de ameaças gerenciadas

Serviços profissionais e consultoria

A receita de serviços profissionais para o quarto trimestre 2024 foi de US $ 125,4 milhões, representando 14% da receita total.

Inteligência de ameaças e complementos de proteção avançada

O módulo de inteligência de ameaças da Crowdstrike gerou US $ 78,6 milhões em receita adicional durante o ano fiscal de 2024.

Contratos empresariais de vários anos

O valor do contrato corporativo teve uma média de US $ 401.000 por cliente no ano fiscal de 2024, com 71% dos clientes utilizando vários módulos em nuvem.

Duração do contrato	Valor médio do contrato	Taxa de renovação
1 ano	$250,000	85%
2 anos	$475,000	92%
3 anos	$675,000	96%

CrowdStrike Holdings, Inc. (CRWD) - Canvas Business Model: Value Propositions

Unified Security Consolidation: Replacing multiple point products with one platform

CrowdStrike Holdings, Inc. drives consolidation by making its platform the foundational operating system for cybersecurity, appealing to enterprises battling tool sprawl. The Falcon Flex subscription model is key to this, with ARR from Flex accounts growing more than 200% year over year to more than $1.35 billion as of the third quarter of fiscal year 2025. This single-agent approach absorbs more workloads, with subscription revenue growing 21% to $1.17 billion in one recent quarter as customers consolidated endpoint, cloud workload, and identity protection. Platform stickiness is evident in module adoption rates.

The extent of platform adoption as of late 2025 fiscal year reporting:

Adoption Metric	Data Point
Customers using six or more Falcon modules	49%
Customers using eight or more Falcon modules	24%
Next-Gen SIEM net new ARR growth (YoY Q3 FY2025)	Over 150%
Next-Gen SIEM customers	2,000+

AI-Powered Speed: Stopping breaches with one of the fastest recorded eCrime breakout times

The value proposition here is stopping intrusions before they spread, which is critical given the speed of modern threats. The fastest recorded eCrime breakout time observed was a mere 51 seconds. This rapid response capability is powered by the AI-native Falcon platform.

Key speed and threat statistics:

• Fastest recorded eCrime breakout time: 51 seconds.
• Average eCrime breakout time (2024): Fell to 48 minutes.
• Malware-free detections (2024): Accounted for 79% of detections.
• Growth in vishing operations (H1 to H2 2024): 442%.

Cloud and Identity Protection: Securing hybrid environments across endpoint, cloud, and identity

CrowdStrike Holdings, Inc. is securing the expanding attack surface across hybrid environments. The combined ending Annual Recurring Revenue (ARR) for the Next-Gen SIEM, Cloud Security, and Identity Protection businesses surpassed $1.3 billion as of January 31, 2025. The company was recognized as the Overall Leader in the 2025 KuppingerCole Identity Threat Detection and Response (ITDR) Leadership Compass. Furthermore, the newly launched Falcon Shield recorded sequential growth of nearly 50%, showing elevated demand for SaaS and identity risk mitigation.

High Customer Trust: Retention and willingness to recommend score

Customer commitment is quantified by exceptionally high retention figures, showing customers are not only staying but expanding their use of the platform. Gross retention was reported at 97% across multiple periods near late 2025. Dollar-based net retention, which measures spending expansion from existing customers, stood at 115% in the third quarter of fiscal year 2025.

Customer loyalty metrics:

• Gross Retention Rate (GRR): 97%.
• Dollar-Based Net Retention Rate (Q3 FY2025): 115%.
• Ending ARR (as of Jan 31, 2025): Grew to $4.24 billion.

CrowdStrike Holdings, Inc. (CRWD) - Canvas Business Model: Customer Relationships

You're managing a security portfolio where customer retention and expansion are everything, especially after a major industry event. CrowdStrike Holdings, Inc. focuses its customer relationships on a tiered approach, balancing high-touch support for strategic accounts with scalable digital engagement for the broader base.

Dedicated Account Management: For large enterprise and strategic Falcon Flex customers

The Falcon Flex subscription model is central to deepening relationships with large, strategic customers. This model is designed to accelerate platform consolidation, making it easier for customers to adopt multiple modules upfront in exchange for preferred pricing and flexibility over time. This approach clearly signals a commitment to the customer's long-term security architecture, not just a single product sale.

The traction here is significant. As of the third quarter of fiscal year 2026, accounts on the Falcon Flex model represented over $1.35 billion in ending Annual Recurring Revenue (ARR), showing growth of more than 200% year-over-year. During that same quarter, CrowdStrike Holdings, Inc. closed more than 150 Falcon Flex deals, collectively valued at over $600 million in total contract value. Honestly, this model turns a contract into a partnership, with Flex customers adopting an average of nine or more modules. This dedicated, high-value engagement is what drives the platform stickiness you're looking for.

Automated/Digital Service: Self-service module adoption within the Falcon console

For day-to-day management and adoption across the platform, the focus is on consolidation into a single interface. CrowdStrike Holdings, Inc. pushes the narrative of its unified platform, which consolidates security across endpoint, identity, and cloud using a single agent. This architecture supports a self-service mentality by presenting a comprehensive view within the Falcon console. For instance, the platform's ability to consolidate SaaS Security Posture Management (SSPM) with other disciplines into one console helps reduce operational overhead for the customer. The goal here is to make module adoption feel like a natural expansion within a familiar environment, not a separate procurement headache.

High-Touch Professional Services: Incident response and proactive security consulting

When things go wrong, or when complex new technologies like SIEM or advanced identity protection are deployed, the high-touch professional services team steps in. These services, which include incident response and proactive consulting, are a smaller but critical part of the revenue mix. For the full fiscal year 2025, GAAP professional services revenue was $192.14 million, making up 4.86% of total revenue. More recently, in the third quarter of fiscal year 2026, professional services revenue specifically clocked in at $65.5 million. This high-touch support is also deeply integrated with the partner ecosystem; an independent study found that partners can generate up to $7 in services revenue for every $1 a customer spends directly on the Falcon platform, illustrating the value placed on implementation and managed services.

Community-Driven Trust: Demonstrated by the willingness to recommend score

The ultimate measure of customer relationship health is advocacy, and CrowdStrike Holdings, Inc. consistently posts high scores here. This trust is vital, especially following the operational incident in mid-2024, as it shows customers believe in the recovery and the platform's core value. In the 2025 Gartner Peer Insights reports, the company achieved a 97% Willingness to Recommend score. Specifically, one report cited this score based on 601 overall responses as of January 2025, while another cited 206 responses as of February 28, 2025. You can see the high satisfaction reflected in the ratings, such as 4.8/5 for Product Capabilities in one report.

Here's a quick look at the key customer-facing metrics we've discussed:

Metric Category	Specific Data Point	Value/Amount	Reporting Period/Basis
Community Trust	Willingness to Recommend Score	97%	As of January/February 2025
Falcon Flex Adoption (Value)	Total Deal Value from Flex Accounts	$1.3 billion	Q3 FY2026
Falcon Flex Adoption (ARR)	Ending ARR from Flex Model Accounts	Over $1.35 billion	Q3 FY2026
High-Touch Services Revenue	Fiscal Year 2025 Professional Services Revenue	$192.14 M	FY 2025
High-Touch Services Revenue	Q3 FY2026 Professional Services Revenue	$65.5 million	Q3 FY2026
Ecosystem Value	Partner Services Revenue Multiplier	Up to $7 per $1 Falcon Platform Spend	Canalys Study

The move to Falcon Flex, often tied to Customer Commitment Packages (CCPs) to help customers recover from the July 2024 incident, has been a defintely successful strategy to reinforce relationships and drive multi-module adoption.

• Flex customers adopt an average of nine or more modules.
• The company completed over 150 Falcon Flex deals in Q3.
• The unified platform consolidates security disciplines into a single console.
• The high recommendation score is based on hundreds of customer responses.

Finance: draft 13-week cash view by Friday.

CrowdStrike Holdings, Inc. (CRWD) - Canvas Business Model: Channels

You're looking at how CrowdStrike Holdings, Inc. gets its Falcon platform into the hands of customers, and it's a multi-pronged effort designed to capture everything from the largest global firms to smaller businesses. It's not just one path; it's a coordinated push across direct engagement, hyperscaler integration, and a vast partner ecosystem.

Direct Sales Force: Handling complex, large-scale enterprise contracts.

The direct sales team is definitely still key for those massive, complex enterprise deals, especially those involving the full platform consolidation CrowdStrike pushes. While the exact revenue split isn't public, the scale of their wins suggests this team closes the largest contracts. For instance, in Q4 of their last reported fiscal year, they closed over 20 deals greater than $10 million and over 350 deals greater than $1 million. That kind of deal velocity requires seasoned direct engagement to navigate procurement and architecture sign-offs at the highest levels.

Cloud Marketplaces: AWS Marketplace sales surpassed $1 billion in 2025.

The hyperscaler marketplaces are a massive channel for CrowdStrike Holdings, Inc., simplifying procurement for cloud-native customers. CrowdStrike Holdings, Inc. became the first cloud-native cybersecurity Independent Software Vendor (ISV) to surpass $1 billion in AWS Marketplace sales within a single calendar year in 2025. This channel is clearly working for scale; the transaction value through AWS Marketplace alone rose over 100% year-over-year in Q3 FY2025. It's a clear signal that customers prefer to consolidate security spend through their existing cloud relationships.

Global Channel Partner Network: Driving adoption in midmarket and SMB segments.

The partner network, managed through the expanded Accelerate program, is crucial for reaching the midmarket and SMBs, and for driving volume. To be fair, this channel is responsible for a huge chunk of new business; in Q3 FY2025, nearly 70% of new subscriptions came through partners. This network includes resellers, system integrators, and Managed Security Service Providers (MSSPs). CrowdStrike Holdings, Inc. recognized top performers like TD SYNNEX, naming them the 2025 Global Distributor Partner of the Year. The strategy relies on partners leveraging flexible licensing like Falcon Flex to deliver tailored solutions.

Falcon Platform Console: Direct in-product upsell of new security modules.

This is where the platform strategy really pays off, turning initial endpoint protection customers into multi-module subscribers right through the Falcon console. The adoption rates show this is happening fast. As of October 31, 2025, module adoption looked like this:

• 49% of customers used six or more modules.
• 34% used seven or more modules.
• 24% used eight or more modules.

The Falcon Flex subscription model is the engine for this, allowing customers to easily add modules without new procurement cycles. This model alone drove over $1.35 billion in ending Annual Recurring Revenue (ARR) as of the end of Q3 FY2026, representing growth of more than 200% year-over-year in that segment. That's how you expand within the installed base.

Here's a quick look at how the key components of the revenue base and channel success stack up as of late 2025:

Metric	Value / Rate	Context / Date
Ending Annual Recurring Revenue (ARR)	$4.92 billion	As of October 31, 2025
Q3 FY2026 Total Revenue	$1.23 billion	Year-over-year growth of 22%
New Subscriptions via Partners	Nearly 70%	Q3 FY2025
AWS Marketplace Annual Sales Milestone	$1 billion+	Achieved in 2025 calendar year
Falcon Flex Ending ARR	Exceeded $1.35 billion	Q3 FY2026
Customers Using 8+ Modules	24%	As of October 31, 2025

Finance: draft 13-week cash view by Friday.

CrowdStrike Holdings, Inc. (CRWD) - Canvas Business Model: Customer Segments

You're looking at how CrowdStrike Holdings, Inc. segments its market as of late 2025. The strategy clearly leans into platform consolidation, using flexible licensing to drive deeper adoption across its customer base, which spans from the largest global entities to smaller organizations.

Large Enterprises/Global 2000: Seeking security platform consolidation.

This segment is heavily targeted by the push for a unified, AI-native Security Operations Center (SOC). The success of platform consolidation is directly measurable through module adoption rates, showing customers are moving away from point products. The Falcon Flex subscription model is a key enabler here, driving significant Annual Recurring Revenue (ARR) growth from existing customers expanding their footprint.

The data on deep module adoption illustrates this consolidation:

• Customers using six or more modules reached 49% as of the third quarter of fiscal 2026.
• Customers using seven or more modules stood at 34%.
• Customers using eight or more modules reached 24%.

This deep adoption is quantified by the financial impact of the flexible licensing:

Metric	Amount (as of Q3 FY2026)
Ending ARR from Falcon Flex Accounts	Over $1.35 billion
Year-over-Year Growth of Falcon Flex ARR	More than 200%
Average Modules Used by Flex Customers	~9 modules

The company's total ending ARR reached $4.92 billion as of October 31, 2025, showing the scale of the customer base these consolidation efforts are impacting.

Midmarket and Small-to-Medium Businesses (SMBs): Targeted via Falcon Go and Falcon Flex.

CrowdStrike Holdings, Inc. is seeing momentum across customers of all sizes, moving from enterprise down to the midmarket and SMB space. While specific revenue figures for the Falcon Go offering aren't broken out, the broad-based momentum suggests successful penetration into these smaller segments, often using the flexibility of Falcon Flex to manage costs and scale security needs efficiently. The overall subscription revenue, which services all customer sizes, was $1.17 billion in the third quarter of fiscal 2026, up 21% year-over-year.

Public Sector/Government: Recognized as a key segment in the 2025 Gartner report.

The public sector is explicitly called out as a segment achieving strong performance. This includes notable traction within U.S. federal agencies and higher education institutions. While a specific dollar amount for this segment isn't provided, its mention as a strong performer alongside the enterprise segment confirms its strategic importance to CrowdStrike Holdings, Inc.'s overall business mix. The U.S. market overall accounted for approximately 67% of the third quarter fiscal 2026 revenue.

Cloud-First Organizations: High growth in Next-Gen SIEM and Cloud Security adoption.

Growth in cloud-native and AI-driven security is a major driver, evidenced by the acceleration across specific product areas. The combined ending ARR for the Next-Gen SIEM, Cloud Security, and Identity Protection businesses surpassed $1.3 billion as of the fiscal year 2025 reporting period. Furthermore, the company reported record net new ARR for its Falcon Next-Gen SIEM offering in the third quarter of fiscal 2026. This focus on the modern security stack is what underpins the overall platform consolidation narrative, as these workloads require unified defense architecture.

CrowdStrike Holdings, Inc. (CRWD) - Canvas Business Model: Cost Structure

You're looking at where CrowdStrike Holdings, Inc. is putting its money to work to fuel that massive platform expansion. Honestly, the cost structure tells a clear story of aggressive growth investment, which is typical for a market leader scaling rapidly.

High Sales and Marketing (S&M) Costs: Necessary for land-and-expand strategy and new customer acquisition.

The go-to-market engine is definitely a major cost center, which makes sense when you are trying to capture market share and get customers to adopt more modules on the Falcon platform. You see this investment reflected in both GAAP and Non-GAAP figures for fiscal year 2025.

Here are the percentages of revenue for the full fiscal year 2025:

• GAAP Sales and Marketing operating expenses as a percentage of revenue: 39%
• Non-GAAP Sales and Marketing operating expenses as a percentage of revenue: 32%

When you look at the total Selling, General, and Administrative (SG&A) spend, it clocked in around 51% of revenue for FY2025, highlighting that continued sales and channel investment to convert those large enterprise deals globally.

Research and Development (R&D) Investment: Continuous funding for AI and platform innovation.

CrowdStrike Holdings, Inc. keeps pouring resources into the platform, especially around AI and security analytics, which is key to maintaining that technological lead. This is a non-negotiable cost for staying ahead in the security space.

For fiscal year 2025, the R&D investment was substantial:

Metric	Amount (FY2025)
Total Revenue	$3.95 billion
Research and Development Operating Expenses (GAAP)	$1,076,901 (in thousands, or ~$1.077 billion)
R&D Intensity (R&D/Revenue)	~27%

That R&D intensity of approximately 27% is high compared to many other Software as a Service peers, showing the commitment to product expansion.

Low Cost of Goods Sold (COGS): Reflected in the non-GAAP subscription gross margin of 80% for FY2025.

The subscription business model itself is incredibly efficient once the customer is onboarded. This is where you see the real operating leverage start to kick in, even while S&M and R&D are high.

The key metric here for the full fiscal year 2025 is the Non-GAAP subscription gross margin, which hit 80%. That's a strong indicator of the underlying economics of delivering the Falcon platform service.

Cloud Infrastructure Costs: Running the massive, global Falcon platform and Threat Graph.

The cost to run the global Falcon platform and the massive Threat Graph is baked into COGS, which is why that 80% Non-GAAP subscription gross margin is so important. It shows that despite the massive scale and data processing required, the cost to serve each additional customer or data point remains relatively low, supporting the land-and-expand motion. You see the result of this efficiency in the record full year operating cash flow of $1.38 billion and free cash flow of $1.07 billion for FY2025.

Here's a quick look at how the major operating expense categories stacked up as a percentage of revenue for FY2025:

Expense Category (as % of Revenue)	GAAP	Non-GAAP
Sales and Marketing	39%	32%
Research and Development	~27% (Implied from R&D/Revenue)	N/A
General and Administrative	N/A	~24% (Implied from SG&A 51% minus S&M 32% Non-GAAP)

Finance: draft 13-week cash view by Friday.

CrowdStrike Holdings, Inc. (CRWD) - Canvas Business Model: Revenue Streams

You're looking at the engine that powers CrowdStrike Holdings, Inc.'s growth, which is heavily weighted toward recurring revenue. Honestly, the numbers show a clear preference for long-term commitments over one-off sales.

Subscription Revenue is the bedrock here. This is the predictable, high-margin income from customers using the Falcon platform on an ongoing basis. For the full fiscal year 2025, this primary stream totaled $3.76 billion, marking a 31% year-over-year increase. To give you a sense of the quarterly cadence leading up to this, Q3 FY2025 subscription revenue was $962.7 million, and by Q4 FY2025, it hit $1.01 billion. The momentum carried into the next fiscal year, with Q3 FY2026 subscription revenue reaching $1.17 billion, a 21% jump from the prior year's quarter.

The Annual Recurring Revenue (ARR) metric is what really shows the forward momentum of the business. As of the end of Q3 FY2026 (October 31, 2025), the ending ARR stood at $4.92 billion, accelerating to 23% growth year-over-year. That quarter alone added a record $265 million in net new ARR. For context, the ending ARR for the full fiscal year 2025 was $4.24 billion.

Here's a quick look at the key revenue figures from the most recent reporting periods:

Metric	Period Ending	Amount
Full Year Subscription Revenue	Fiscal Year 2025 (Jan 31, 2025)	$3.76 billion
Subscription Revenue	Q3 FY2026 (Oct 31, 2025)	$1.17 billion
Total Revenue	Q3 FY2026 (Oct 31, 2025)	$1.23 billion
Ending Annual Recurring Revenue (ARR)	Q3 FY2026 (Oct 31, 2025)	$4.92 billion
Net New ARR Added	Q3 FY2026	$265 million

The Professional Services Revenue stream, which covers things like incident response and consulting, is smaller but still important for customer success and initial platform deployment. In Q3 FY2026, this revenue component was $65.5 million (or $65.54 million, depending on the filing). This contrasts with the subscription side, which is clearly the dominant revenue driver.

The Land-and-Expand Model is how CrowdStrike Holdings, Inc. drives that high subscription revenue growth. They get customers in the door, often with a core module, and then sell more capabilities. The Falcon Flex subscription model is the key lever here, designed to make it easier for customers to adopt multiple modules. The success is clear in the numbers:

• Ending ARR from accounts using Falcon Flex exceeded $1.35 billion as of Q3 FY2026.
• ARR from Flex accounts grew more than 200% year-over-year in that quarter.
• In fiscal year 2025, accounts adopting Falcon Flex added over $1 billion of in-quarter deal value.
• The average Falcon Flex customer represents over $1 million in ending ARR, showing significant expansion potential per account.

Module adoption is high; for instance, as of October 31, 2024, module adoption rates showed that customers were using six or more modules at a rate of 47%.

Finance: draft 13-week cash view by Friday.