CrowdStrike Holdings Inc (NASDAQ: CRWD) reported record net new annual recurring revenue for the second quarter of fiscal year 2027. The company raised its full-year outlook, citing accelerating demand across its Falcon platform driven by growing awareness of AI-related risks.

CEO George Kurtz emphasized that security is becoming a prerequisite for enterprise AI adoption. He stated that every customer CrowdStrike engages with is concerned about "agentic threats," referring to risks posed by autonomous AI systems.

AI Security as a Growth Driver

Kurtz described the demand for securing autonomous software agents as a "sustainable tailwind" for the business. He noted that while enterprises want to deploy more AI, they are often held back by security, compliance, privacy, and data protection issues.

The company framed AI security not just as a feature but as an entirely new category of enterprise security. Kurtz argued that as AI becomes more powerful, companies will need new ways to secure autonomous agents acting on their behalf, rather than just human users.

He added that CrowdStrike has already "seen agents go wild" and "seen them break out of the Frontier labs." This observation underscores management's view that the durability of this momentum is strong, with Kurtz stating, "I think when you look at the durability, it's, in my opinion, it is absolutely there."

What the Numbers Show

The divergence between strong operational execution and management’s strategic pivot is notable. While the company posted record net new annual recurring revenue, the primary narrative focus shifted from traditional endpoint protection to AI Detection and Response (AIDR). Kurtz suggested that the AIDR business could eventually become larger than the core Endpoint Detection and Response (EDR) business, indicating a significant concentration of future growth expectations in this emerging segment.

Long-Term Opportunity

CrowdStrike views the rise of agentic AI as a structural spending tailwind. Kurtz reiterated that each employee could ultimately work alongside dozens of AI agents, necessitating dedicated security controls. This shift suggests that cybersecurity vendors may benefit from non-discretionary IT spending as businesses move AI agents from experimentation into production.

For investors, the key takeaway is that AI security demand is being driven by necessity rather than discretionary IT spending. If enterprises increasingly view agentic AI as too risky to deploy without dedicated security controls, cybersecurity vendors could benefit from a structural spending tailwind that extends well beyond today's AI adoption cycle.

CrowdStrike Holdings Inc (NASDAQ: CRWD) shares surged as much as 18% on Thursday, marking one of the biggest single-day gains in the company's history, after reporting record second-quarter fiscal 2027 results.

The cybersecurity firm posted revenue of $1.47 billion, a 26% year-over-year increase, beating the consensus estimate of $1.44 billion. The strong performance was driven by accelerating demand for AI security solutions and its Falcon platform. CEO George Kurtz described the landscape as an "arms race," noting that "AI is driving more cyber attacks" and consequently "more cyber spending."

Financial Performance

Subscription revenue grew 27% to $1.4 billion. Professional services revenue hit a record $71 million, reflecting increased demand for AI readiness and incident response services. Non-GAAP operating income rose 46% to a record $372 million, or 25% of revenue. Free cash flow reached $377.4 million, up 33% year-over-year.

Non-GAAP gross margin expanded to 79%, up approximately 110 basis points from the prior year. Subscription gross margin specifically rose to 81%, supported by cloud optimization efforts. The company ended the quarter with $5.01 billion in cash and equivalents.

What the Numbers Show

Operating leverage is intensifying as CrowdStrike scales. While revenue grew 26%, non-GAAP operating income surged 46% to $372 million. This divergence highlights how gross margin expansion (up 110 bps to 79%) and operational efficiency are driving profitability faster than top-line growth. Additionally, subscription revenue constitutes 95% of total revenue, underscoring the stability of the recurring model despite the rapid expansion in professional services.

Analyst Reaction and Target Raises

The earnings beat triggered a wave of analyst optimism, with eleven Wall Street firms raising their price targets on Thursday. The consensus rating across 34 analysts is Buy, comprising one strong buy, 25 buys, and eight holds.

RBC Capital raised its target to $260 from $256. UBS, Rosenblatt, Scotiabank, and Needham moved their targets to $250. DA Davidson raised its target to $245, while Morgan Stanley lifted its target to $238. Keybanc and BTIG also raised targets to $245. Evercore ISI raised its target to $210, and Bernstein raised its target to $119.

Guggenheim analyst John DiFucci stated, "They did what they said they would and more." StoneX analyst Yi Fu Lee noted that "The Mythos moment has evolved from a conceptual AI Security opportunity into a tangible monetization engine." Scotiabank analyst Patrick Colville called it a "new golden age of cybersecurity," highlighting accelerating endpoint security growth.

Guidance and Outlook

CrowdStrike raised its fiscal 2027 net new ARR growth guidance to 34% at the midpoint, an increase of 1,150 basis points from its initial outlook. Full-year revenue guidance was upgraded to $5.99 billion–$6.01 billion, up from the previous range of $5.92 billion–$5.96 billion. Analysts had expected $5.93 billion.

The company lifted its adjusted earnings forecast to between $1.25 and $1.26 per share from $1.22 to $1.24. Wall Street expected $1.23 per share. For the third quarter, the company expects revenue between $1.52 billion and $1.53 billion, above the $1.52 billion estimate. It projected adjusted earnings of 31 cents per share, in line with expectations.

Third-quarter annual recurring revenue (ARR) is expected to be $6.18 billion to $6.19 billion, representing 26% growth. Net new ARR is expected to range from $343 million to $347 million. The company maintained its forecast for a full-year free cash flow margin of at least 30%. The acquisition of XM Cyber’s technology assets is expected to close in the second half of fiscal 2027, with no fiscal 2027 revenue or ARR contribution included in the current outlook.

Rogue AI Agents Drive Demand

Speaking during the earnings call, CEO George Kurtz described AI agents increasingly operating outside their intended boundaries, capable of stealing data, altering permissions, and taking full control of systems at scale. He characterized today’s AI agents as both "friend and foe," driving productivity gains while functioning as risk multipliers with constant access to data and limited judgment.

This urgency is directly impacting CrowdStrike’s AI Detection and Response product, whose annual recurring revenue nearly tripled compared to the prior quarter. Kurtz pointed to a 400% surge in Claude usage and more than 100% growth in custom AI agent deployments across its client base. He predicted that this category will eventually outpace CrowdStrike’s core endpoint business as the ratio of AI agents per employee continues to climb.

Cantor Fitzgerald analyst Jonathan Ruykhaver highlighted Project QuiltWorks as a key advantage, expecting it to boost sales across multiple security products. Project QuiltWorks now includes more than 25 partners and has generated a combined contract-value pipeline of nearly $400 million. Deal value through the cloud marketplaces of Amazon.com Inc (NASDAQ: AMZN), Alphabet Inc (NASDAQ: GOOGL), and Microsoft Corp (NASDAQ: MSFT) exceeded $600 million, up more than 30%.

Despite the positive sentiment, Cathie Wood’s ARK Invest sold 14,339 shares through its ARK Next Generation Internet ETF, worth about $2.7 million.