CrowdStrike's fiscal second quarter was not just a beat — it was, in the words of CEO George Kurtz, 'our very best quarter in company history.' The cybersecurity giant posted a record $333 million in net new annual recurring revenue, up 51% year-over-year and exceeding the top end of its guidance by more than $45 million, as enterprises raced to secure their AI deployments against what Kurtz described as 'agents going rogue.'
The numbers tell a story of broad-based acceleration that extended well beyond a single product line. Ending ARR reached $5.84 billion, up 25% year-over-year, with growth accelerating for the fourth consecutive quarter. Total revenue hit $1.47 billion, up 26% — the fifth straight quarter of sequential acceleration. Non-GAAP operating income jumped 46% to a record $372 million, and free cash flow came in at $377 million, or 26% of revenue.
Kurtz opened the call by linking the quarter's results directly to the AI inflection point the company has been flagging since the spring. 'When we last spoke, we were just weeks after what we called the Mythos moment,' he said. 'Inflection has become acceleration.'
That acceleration was most visible in Falcon Flex, the company's flexible subscription model that lets customers draw down credits across the Falcon platform. Flex has become the commercial engine of CrowdStrike's platform consolidation strategy. In Q2, Flex accounts added more than $2.29 billion in ending ARR — a 101% year-over-year jump — and contributed 34% of total net new ARR. Customrs converting from standard subscriptions to Flex saw an average ending ARR uplift of more than 40%; those who re-Flexed at least twice saw cumulative uplift of 53% from their initial Flex starting point.
'This quarter, we kicked Falcon Flex activity into high gear with our Flex first go-to-market strategy,' Kurtz said. 'Our top 10 deals by deal value were each Flexes.'
The Flex momentum underscores a broader strategic shift: CrowdStrike is no longer selling point products, but positioning itself as 'cybersecurity's infrastructure layer for AI adoption.' The product portfolio is expanding in lockstep with the AI attack surface.
AI Detection and Response (AI DR) was the quarter's most explosive new category. Kurtz said ending ARR 'nearly tripled versus Q1,' with adoption driven by enterprises that need visibility into AI usage and data exfiltration prevention. He framed AI DR as a separate, incremental module — not a substitute for EDR — and suggested the long-term opportunity could eclipse the company's flagship endpoint business.
'If we believe that AI is in its early days and is only going to get better and more powerful, combined with the autonomous nature of these attacks, it is absolutely something that every company is going to need,' Kurtz said. 'I think the AI DR business can be bigger than the EDR business, just given the pure number of agents which each person will have.'
That prediction carries weight given the threat landscape Kurtz described. He said the company has observed more than 400% growth in Claude usage and more than 100% growth in custom agent usage on customer endpoints in recent months. 'The agent of today is both a friend and foe,' he said, adding that agents are 'proving capable of data theft, permission alteration, and full-on command and control at scale.'
Guidance Raise: 'More Than Our Q2 Outperformance'
CFO Burt Podbere delivered a guidance increase that he framed as a signal of durable demand rather than a one-time beat. The company raised its full-year net new ARR outlook to $1.350 billion to $1.359 billion, representing 34% year-over-year growth at the midpoint — up 630 basis points from prior guidance and 1,150 basis points from the initial FY2027 outlook.
'That means we moved our FY 2027 annual ARR growth rate from 27.7% at the end of last quarter to 34% this quarter,' Podbere said. 'The magnitude of this increase reflects more than our Q2 outperformance.'
Revenue guidance for the full year now stands at $5.991 billion to $6.011 billion, while non-GAAP EPS is guided to $1.25 to $1.26. Free cash flow margin is expected to remain at least 30% for the full year.
One notable item: the pending acquisition of XM Cyber's technology assets, expected to close in the second half of FY2027, is not included in any ARR or revenue guidance. Podbere flagged this explicitly on the call.
Geographic and Segment Mix
CrowdStrike's geographic split remained consistent with its historical pattern, with the U.S. contributing roughly 65% of revenue and international markets about 35%. Podbere noted that international revenue growth accelerated for the fifth consecutive quarter, with broad-based strength across major regions.
The company's own SEC filing shows the U.S. business generated $0.91 billion of the $1.39 billion total in the preceding quarter (period ending April 30, 2026), or 65.94% of revenue. EMEA contributed 16.98%, Asia Pacific 10.55%, and other countries 6.52%. The Q2 split of 65% U.S. and 35% international represents a slight shift, with international's share ticking up as overseas markets adopt AI security at a faster clip.
On the product side, subscription revenue continued to dominate, reaching $1.40 billion in Q2 (95.2% of total). But professional services hit an all-time record of $71 million, driven by AI readiness assessments and incident response work that Kurtz said creates 'incremental demand' for software cross-sell opportunities.
Analysts Probe Durability, Pricing, and Competition
The Q&A session revealed both analyst enthusiasm and pointed questions about whether the AI security boom can last — and whether frontier AI labs themselves could become competitors.
J.P. Morgan's Brian Essex pressed on durability, asking how much visibility the company has into next year. Kurtz argued that security concerns are actually holding customers back from deploying AI: 'They want to deploy more AI, but they are being held back because of security compliance, privacy, data protection type issues.' Podbere cited the record Q3 pipeline as quantitative evidence.
RBC's Matt Hedberg raised the competitive question directly: what happens if frontier labs release their own security solutions? Kurtz leaned on CrowdStrike's data advantage, accumulated over 15 years. 'We are net data creators,' he said. 'We have data that just is not available outside of the CrowdStrike walls.'
On pricing, UBS's Roger Boyd asked whether customers are requesting token-based pricing for AI security. Kurtz confirmed that CrowdStrike already offers token-based pricing for AI DR, with customers able to buy supplemental token packs through Falcon Flex if they exceed their allocation. 'It is not runaway cost for customers,' he said. 'They can define it, they can budget for it.'
Raymond James's Adam Tindle asked the most fundamental product question: is AI DR incremental to EDR, or a substitute? 'It is separate and incremental,' Kurtz said firmly. 'It's another module, and it's priced separately.' The advantage, he added, is that AI DR uses the same agent already deployed on the endpoint, eliminating the friction of rolling out new software.
That frictionless deployment model is central to the company's competitive positioning. Morgan Stanley's Meta Marshall asked whether next-gen SIEM adoption is happening differently now than a year ago, with customers moving more data up front. Kurtz noted that every CrowdStrike customer is already 'next-gen SIEM enabled' because first-party data is already in the platform — a structural advantage he described as 'better, faster, and more value for the money.'
The Endpoint Engine Keeps Accelerating
Even as new products grabbed attention, the company's core endpoint business accelerated for the fourth consecutive quarter. Jefferies' Joseph Gallo asked how much runway remains in what is perceived as a mature market. Kurtz's answer: about half the market is still using legacy antivirus.
'Legacy AV and legacy providers are not really going to have the capabilities to identify rogue AI agents, shadow AI, and be able to protect against it,' he said. That dynamic is driving net new logo wins from legacy providers alongside cross-selling into the existing base.
The company also highlighted notable wins that underscore the breadth of demand. A major American power provider selected next-gen SIEM in an eight-figure Flex deal; a mega technology conglomerate chose Falcon Cloud Security for AI cloud and lab protection; a frontier lab signed an eight-figure ARR deal to secure its data center infrastructure; and a European automotive manufacturer consolidated next-gen EDR, legacy SIEM, and legacy vulnerability management into a single eight-figure Falcon Flex deployment.
QuiltWorks and the Partner Ecosystem
CrowdStrike's partner-led motion, Project QuiltWorks, generated nearly $400 million in total contract value pipeline from more than 25 partners. Kurtz called it 'a home run,' describing how partners use the CrowdStrike platform to identify vulnerabilities and drive remediation, which then creates platform pull-through.
The GSI business grew nearly 50% year-over-year, and cloud marketplace transactions exceeded $600 million in deal value, up more than 30%. The Microsoft Marketplace relationship, which opened a new addressable market, produced immediate wins including a new Australian healthcare logo and an American manufacturing firm expanding from services to the full Falcon platform.
Fal.Con Looms
Kurtz closed the call with a forward-looking signal: next week's Fal.Con conference in Las Vegas, which sold out in early August, will be the company's largest pipeline generation event of the year. Dr. Bartley Richardson, previously at NVIDIA, has joined as Chief AI and Autonomous Systems Officer, with new AI security innovations set to be unveiled.
For a company that just delivered what management called its best quarter ever — and raised guidance by more than $100 million since the start of the year — the message to investors was clear: the AI security cycle is just beginning, and CrowdStrike intends to define it.
Once added, BigGo Finance appears first in Google Search Top Stories, so you get the broadest, most up-to-the-minute, and most comprehensive global financial news first.