CrowdStrike has been named a Leader in the IDC MarketScape: Worldwide SIEM 2026 Vendor Assessment. The recognition reflects the adoption of the CrowdStrike Falcon Next-Gen SIEM as organizations replace legacy systems to build an agentic SOC on the CrowdStrike Falcon platform. The company reported that Falcon Next-Gen SIEM has exceeded $600 million in ending ARR.

The IDC MarketScape assessment noted that for SIEM buyers, the breadth of native telemetry sources and the consolidation pitch are central. Many data feeds traditionally routed into a SIEM, including endpoint, identity, and cloud signals, originate inside the Falcon platform itself. This structural advantage allows organizations to ingest data without re-ingest fees and without external stitching, eliminating duplicate ingest costs.

Legacy SIEMs were built for a threat environment that no longer exists, forcing security teams to stitch together telemetry from disconnected sources. IDC found that 73 percent of organizations ingest less than 75 percent of the data needed to fully monitor their environments, creating blind spots where attackers operate. Falcon Next-Gen SIEM addresses this by leveraging data already living on the Falcon platform.

Strategic Acquisitions and AI Integration

In September 2025, CrowdStrike acquired Onum, a real-time data pipeline vendor, and integrated it as the data routing layer for Falcon Next-Gen SIEM. The platform utilizes Charlotte AI as a reasoning engine to triage alerts, correlate cross-domain telemetry, and automate investigation at machine speed. Charlotte AI provides generally available agents for detection triage, response, hunting, malware analysis, and exposure prioritization.

Licensing and Performance Metrics

CrowdStrike Falcon Flex licensing allows organizations to shift committed spend across Falcon modules over time. Customers describe the ingestion-based pricing model as transparent compared with credit-based alternatives. The following table outlines key performance indicators mentioned in the report:

Ajit Sancheti, GM of Falcon Next-Gen SIEM at CrowdStrike, stated that legacy SIEMs were built to record what happened, whereas Falcon Next-Gen SIEM is built to stop the adversary. The platform consolidates fragmented tooling, offering better economics, faster search, and autonomous response.

CrowdStrike Holdings has outperformed the market over the past 5 years by 9.9% on an annualized basis producing an average annual return of 21.68%. Currently, CrowdStrike Holdings has a market capitalization of $171.29 billion.

Investment Growth Analysis

If an investor had bought $1000 of CRWD stock 5 years ago, it would be worth $2662.36 today based on a price of $675.39 for CRWD at the time of writing.

CrowdStrike Holdings’s Performance Over Last 5 Years

The key insight to take from this article is to note how much of a difference compounded returns can make in your cash growth over a period of time.