• CrowdStrike reported Q2 FY2027 revenue of $1.47 billion, beating estimates by 2.3%, with adjusted EPS of $0.31.
• Net new ARR hit $332.8 million — up 51% year over year — marking the company's strongest booking quarter ever.
• Full-year revenue guidance raised to $5.99–$6.01 billion, with net new ARR growth lifted 630 basis points to 34%.
• Falcon Flex ARR doubled to $2.29 billion, signaling large enterprises are consolidating their security stacks onto CrowdStrike.
• Stock jumped over 11% after hours, extending CrowdStrike's earnings beat streak to nine consecutive quarters.

CrowdStrike just reported the best quarter in its history, and it wasn’t even close. Revenue hit $1.47 billion (up 26% year over year), net new ARR surged to $332.8 million (up 51%), and CEO George Kurtz used a phrase you don’t hear often in earnings calls: “the Mythos moment.” Here’s what happened, why AI is driving it, and whether the stock has room to keep running.

The Numbers: Nine Straight Beats

Let’s start with what Wall Street cared about most:

CrowdStrike also reached GAAP profitability for the first time at the quarterly level — $5.3 million in net income versus a $70.2 million loss in the same quarter last year. That’s a milestone. It means the growth engine is generating enough margin to cover stock-based compensation and other GAAP charges that have historically kept the company in the red.

The company raised its full-year revenue guidance to $5.99–$6.01 billion and lifted its net new ARR growth target by 630 basis points to 34% at the midpoint. That kind of guidance raise isn’t cautious optimism — it’s confidence built on a pipeline that’s already converting.

The ‘Mythos Moment’ Explained

“Mythos” isn’t just a marketing term. It refers to the wave of AI-powered cyberattacks that have emerged throughout 2026, which have simultaneously terrified CISOs and opened their budgets. Kurtz’s argument is straightforward: as companies adopt AI agents, large language models, and automated workflows, the attack surface expands dramatically, and legacy security tools can’t keep up.

CrowdStrike’s answer is the Falcon platform, which now monitors and protects not just human users and endpoints, but also AI agents, machine identities, and the data pipelines that feed them. The company launched Continuous Identity for AI Agents this quarter — a product that extends risk-aware authorization across human, machine, and agent identities.

This is where the revenue acceleration is coming from. Organizations aren’t just buying endpoint protection anymore. They’re buying the whole platform because AI adoption forces them to secure things they never had to worry about before: which AI agent can access which database, who approved that agent’s permissions, and what happens if an attacker compromises the model.

The broader cybersecurity industry is seeing the same pattern. Palo Alto Networks reported its best quarter ever in June. Okta just beat estimates by a wide margin. The AI security cycle isn’t a single-stock story — it’s a sector rotation.

Falcon Flex: The Platform Consolidation Signal

The most telling metric in CrowdStrike’s report is Falcon Flex ARR, which doubled to $2.29 billion with 101% growth. Falcon Flex is CrowdStrike’s consumption-based licensing model that lets large enterprises deploy any module across the Falcon platform without renegotiating contracts.

Why does this matter? Because it means CrowdStrike’s biggest customers are not just renewing — they’re expanding. A customer that started with endpoint detection is now adding cloud workload protection, identity threat detection, and AI agent security without friction. That’s the platform consolidation play that every cybersecurity company talks about, and CrowdStrike is the one actually pulling it off at scale.

The acquisition of XM Cyber’s attack-path visualization technology and the expanded Project QuiltWorks partnership with AWS reinforce the same strategy: make Falcon the single platform where enterprises manage all their security data, including AI-specific threats that didn’t exist two years ago.

Stock Reaction and What Comes Next

CrowdStrike stock jumped over 11% in after-hours trading following the report, pushing toward the $500 range. The company now trades at roughly 27–29x forward sales, which is expensive by any traditional metric — but the growth rates justify the premium relative to the broader software sector.

The question for investors is whether the Mythos-driven spending cycle has legs beyond 2026. Our read: it does. AI agent deployment is accelerating, not slowing. Every AI agent that accesses enterprise data creates another identity to protect, another access point to monitor, and another potential vector for attack. CrowdStrike built the platform to handle this before most competitors realized it was a market.

The risk is valuation. At 29x forward sales, any miss — or even a “meet” — could trigger a sharp pullback. The July AI stock selloff showed how quickly momentum can reverse when sentiment shifts. But on fundamentals, CrowdStrike’s Q2 was as clean as enterprise software earnings get.

What We Think

We’re past the point where cybersecurity is a “nice to have” budget line. The Mythos moment Kurtz talks about isn’t hypothetical — state-sponsored groups, ransomware operators, and automated phishing campaigns are all using AI to scale their attacks. That creates a structural demand floor for companies like CrowdStrike that can actually stop those attacks.

The record ARR, the GAAP profitability, the platform consolidation — this is what it looks like when a cybersecurity company transitions from high-growth bet to durable franchise. Whether the stock is cheap at these levels is a different conversation. But the business underneath it? It’s never been stronger.

FAQs

What does ARR mean in CrowdStrike’s earnings?

ARR stands for Annual Recurring Revenue — the total value of all active subscription contracts annualized. CrowdStrike’s ARR hit $5.84 billion in Q2 FY2027, meaning that’s how much revenue it would generate over the next 12 months if no customers added, canceled, or changed their subscriptions. It’s the key metric for subscription-based cybersecurity companies.

What is the Mythos moment in cybersecurity?

“Mythos” describes the industry-wide realization that AI adoption creates new security risks at a scale legacy tools can’t address. CrowdStrike CEO George Kurtz used the term to describe how AI-powered threats — from deepfake phishing to autonomous attack agents — are driving enterprises to consolidate security spending onto platforms that can handle AI-specific risks.

How does CrowdStrike compare to Palo Alto Networks?

Both reported record quarters in 2026. CrowdStrike leads in endpoint and identity security, while Palo Alto Networks dominates network security and SASE. CrowdStrike’s net new ARR growth (51%) outpaced Palo Alto’s, but Palo Alto has higher total revenue. Most large enterprises use products from both vendors.

Is CrowdStrike stock overvalued at 29x forward sales?

At nearly 30x forward sales, CrowdStrike trades at a premium to the software sector average (~8-10x). That premium is supported by 26% revenue growth, 51% ARR acceleration, and GAAP profitability — metrics few software companies at this scale can match. Whether it’s “overvalued” depends on whether you believe AI-driven security spending will sustain multi-year growth above 20%.

Did CrowdStrike fully recover from the July 2024 outage?

Yes. The Q2 FY2027 results represent CrowdStrike’s strongest quarter ever, with net new ARR surpassing pre-outage levels. Customer retention stayed above 97%, and the company’s nine consecutive earnings beats suggest the outage had no lasting impact on enterprise trust or spending.