Company Description
CrowdStrike Holdings, Inc. (NASDAQ: CRWD) is a global cybersecurity company that focuses on protecting critical areas of enterprise risk, including endpoints and cloud workloads, identity, and data. The company delivers its capabilities through the CrowdStrike Falcon® platform, a cloud-native security platform that uses the CrowdStrike Security Cloud and artificial intelligence to help organizations detect, prevent, and respond to cyber threats across their IT environments.
CrowdStrike is described as a cloud-based cybersecurity leader whose platform is purpose-built in the cloud with a single lightweight-agent architecture. According to the company’s disclosures, this architecture is designed to support rapid and scalable deployment, high performance, and reduced complexity for customers. The Falcon platform leverages real-time indicators of attack, threat intelligence, evolving adversary tradecraft, and enriched telemetry from across enterprise systems to provide what the company characterizes as hyper-accurate detections, automated protection and remediation, elite threat hunting, and prioritized observability of vulnerabilities.
The company’s business centers on its Falcon platform, which has been described as a cloud-native platform for protecting endpoints and cloud workloads, identity, and data. Earlier descriptions also note that CrowdStrike specializes in security areas such as endpoint, cloud workload, identity, and security operations, with the Falcon platform providing a single interface for enterprises to monitor and respond to security threats affecting their infrastructure. CrowdStrike states that this platform approach supports consolidation of multiple security capabilities into a unified system.
CrowdStrike has emphasized its role in what it calls the AI era of cybersecurity. The company highlights the use of “world-class AI” within the CrowdStrike Security Cloud and across the Falcon platform to analyze signals from endpoints, cloud environments, identities, and applications. In various company communications, CrowdStrike describes how its platform correlates identity, asset, and threat intelligence across endpoint, cloud, and software-as-a-service (SaaS) environments to support continuous, risk-aware authorization and threat detection at scale.
Core Platform and Technology Focus
The Falcon platform is repeatedly described as cloud-native and built around a single lightweight agent deployed on customer endpoints and workloads. This agent collects telemetry that is processed in the CrowdStrike Security Cloud, where AI and threat intelligence are applied. The company states that this design supports:
- Rapid and scalable deployment across customer environments
- High levels of protection and performance
- Reduced operational complexity
- Faster time-to-value for customers adopting the platform
CrowdStrike communications also describe the Falcon platform as supporting automated protection and remediation, along with elite threat hunting and prioritized observability of vulnerabilities. These capabilities are presented as part of a unified platform that can address threats moving across identity, endpoint, and cloud domains.
Key Security Domains
Across its public materials, CrowdStrike highlights several major security domains that its platform addresses:
- Endpoint and Cloud Workloads: The company describes its platform as protecting endpoints and cloud workloads, building on its origins in endpoint detection and response (EDR) and expanding into broader cloud security.
- Identity Security: CrowdStrike refers to Next-Gen Identity Security and Falcon Next-Gen Identity Security, which it positions as securing the identity lifecycle, including initial access prevention, privileged access management, identity threat detection and response, SaaS identity security, and protection for what it calls agentic identities.
- Data Protection: Company communications reference Falcon Data Protection and describe the platform as protecting data as a core area of enterprise risk.
- Security Operations: CrowdStrike describes the Falcon platform as supporting security operations, including detection, investigation, and response, and as an operating foundation for managed detection and response services through partners.
AI and Agentic Security
CrowdStrike places particular emphasis on AI-driven security and what it calls the agentic era. The company has announced offerings such as Falcon AI Detection and Response (AIDR), described as extending the Falcon platform to secure the AI prompt and agent interaction layer. In its materials, CrowdStrike characterizes the AI interaction layer—where prompts, responses, and AI agent actions occur—as a new attack surface and presents Falcon AIDR as providing unified, real-time protection across AI development workflows and workforce AI usage.
The company also refers to agentic AI and an Agentic Security Workforce, and has discussed collaborations that bring always-on, continuously learning AI agents for cybersecurity to customer environments. These initiatives are presented as part of CrowdStrike’s broader goal of securing AI workloads, agents, infrastructure, and data.
Identity and Browser Security Initiatives
In its public announcements, CrowdStrike has described plans to expand its platform into continuous identity and browser security. It has announced definitive agreements to acquire SGNL, a company described as a leader in Continuous Identity, and Seraphic Security, described as a leader in browser runtime security. CrowdStrike states that integrating SGNL is intended to support continuous, real-time access control and dynamic authorization across SaaS and hyperscaler cloud access layers, while integrating Seraphic’s browser-native protection is intended to extend the Falcon platform’s coverage to browser sessions on managed and unmanaged devices.
In these communications, CrowdStrike describes a strategy to unify endpoint telemetry, browser telemetry, and continuous identity authorization to form what it calls Next-Gen Identity Security. The company characterizes this as a way to protect interactions from endpoints through browser sessions into the cloud, and to address risks associated with human and non-human identities, including AI agents.
Partnerships and Ecosystem
CrowdStrike regularly highlights partnerships with major technology and cloud providers. Company materials describe collaborations with organizations such as Amazon Web Services (AWS), NVIDIA, HPE, and others. For example, CrowdStrike has noted that AWS recognized the company with multiple partner awards and that its Falcon platform is available through AWS Marketplace. It has also described participation in joint accelerator programs with AWS and NVIDIA focused on AI-driven cloud security innovation.
The company has announced that HPE selected CrowdStrike for the HPE Unleash AI partner program, integrating the Falcon platform with HPE Private Cloud AI, which is described as a turnkey AI factory co-developed with NVIDIA. CrowdStrike communications also reference collaborations with other firms in areas such as managed detection and response, cyber recovery, and observability.
Testing, Recognition, and Evaluations
In public statements, CrowdStrike has discussed results from independent evaluations and industry research. For example, the company has stated that in a MITRE ATT&CK Enterprise Evaluation, the Falcon platform achieved 100% detection and 100% protection with no false positives in a scenario that emulated attacks moving across identity, endpoint, and cloud. CrowdStrike has also cited recognition in industry analyst reports, including being named in research covering security information and event management (SIEM), cloud workload protection platforms, SaaS security posture management, managed detection and response services, and identity threat detection and response.
Corporate and Capital Markets Information
CrowdStrike Holdings, Inc. is listed on The Nasdaq Stock Market LLC under the symbol CRWD. The company has stated in its filings that its Class A common stock is registered pursuant to Section 12(b) of the Securities Exchange Act of 1934. CrowdStrike communications describe the company as a global cybersecurity leader and note that it was founded in 2011 and went public in 2019, according to earlier descriptions.
The company is based in Austin, Texas, as indicated in its SEC filings, which list Austin, Texas as the location of its principal executive offices. CrowdStrike uses channels such as its investor relations site, SEC filings, press releases, conference calls, webcasts, social media, and its blog to communicate information about its business, offerings, and financial performance.
Business Model and Revenue Characteristics
CrowdStrike describes itself as a subscription-based software company in its financial communications. The company reports subscription revenue and annual recurring revenue (ARR) as key metrics in its earnings releases. It highlights adoption of multiple Falcon modules among its customer base and references subscription models such as Falcon Flex. These disclosures indicate that a significant portion of the company’s business is based on recurring subscription arrangements for access to the Falcon platform and its modules.
In its financial reports, CrowdStrike discusses metrics such as total revenue, subscription revenue, ARR, cash flow from operations, and free cash flow, along with non-GAAP measures such as non-GAAP income from operations and non-GAAP net income. The company provides reconciliations and explanations of these measures in its earnings materials and SEC filings.
Role in the Cybersecurity and AI Landscape
Across its public statements, CrowdStrike positions itself at the intersection of cybersecurity, cloud computing, and AI. The company emphasizes its focus on securing hybrid and multi-cloud environments, SaaS applications, and modern identity systems, alongside traditional endpoints. It presents the Falcon platform as a unified security platform that can address threats spanning endpoints, cloud workloads, identities, and data, and as a foundation for partners and customers building managed detection and response services and AI-driven security capabilities.
According to its communications, CrowdStrike’s strategy includes expanding its platform with capabilities such as Next-Gen Identity Security, data protection, next-generation SIEM, AI detection and response for the AI interaction layer, and integrations with major cloud and infrastructure providers. The company summarizes its mission with the phrase “We stop breaches.”