CrowdStrike Holdings 10-Q 2025-10-31
Filed 2025-12-03. 8 sections, 441K characters. Original on sec.gov · Markdown · JSON
Cover and table of contents
UNITED STATES
SECURITIES AND EXCHANGE COMMISSION
WASHINGTON, D.C. 20549
___________________________________________________________________________________________________
FORM 10-Q
___________________________________________________________________________________________________
(Mark One)
| ☑ | QUARTERLY REPORT PURSUANT TO SECTION 13 OR 15(d) OF THE SECURITIES EXCHANGE ACT OF 1934 |
For the quarterly period ended October 31, 2025
OR
| ☐ | TRANSITION REPORT PURSUANT TO SECTION 13 OR 15(d) OF THE SECURITIES EXCHANGE ACT OF 1934 |
For the transition period from to
Commission File Number: 001-38933
___________________________________________________________________________________________________
CROWDSTRIKE HOLDINGS, INC.
(Exact Name of Registrant as Specified in Its Charter)
___________________________________________________________________________________________________
| Delaware | 45-3788918 | |||||||||||||||||||||||||
| (State or other jurisdiction of incorporation or organization) | (I.R.S. Employer Identification Number) |
206 E. 9th Street, Suite 1400, Austin, Texas 78701
(Address of principal executive offices)
__________________________________________________________________________________________________
Registrant’s telephone number, including area code: (888) 512-8906
Securities registered pursuant to Section 12(b) of the Act:
| Title of each class | Trading symbol(s) | Name of each exchange on which registered | ||||||
| Class A common stock, par value $0.0005 per share | CRWD | The Nasdaq Stock Market LLC | ||||||
| (Nasdaq Global Select Market) |
Indicate by check mark whether the registrant (1) has filed all reports required to be filed by Section 13 or 15(d) of the Securities Exchange Act of 1934 during the preceding 12 months (or for such shorter period that the registrant was required to file such reports), and (2) has been subject to such filing requirements for the past 90 days. Yes ☑ No ☐
Indicate by check mark whether the registrant has submitted electronically every interactive Data File required to be submitted pursuant to Rule 405 of Regulation S-T (§232.405 of this chapter) during the preceding 12 months (or for such shorter period that the registrant was required to submit and post such files) Yes ☑ No ☐
Indicate by check mark whether the registrant is a large accelerated filer, an accelerated filer, a non-accelerated filer, a smaller reporting company, or an emerging growth company. See the definitions of “large accelerated filer,” “accelerated filer,” “smaller reporting company” and “emerging growth company” in Rule 12b-2 of the Exchange Act.
| Large Accelerated Filer | ☑ | Accelerated Filer | ☐ | ||||||||
| Non-accelerated Filer | ☐ | Smaller reporting company | ☐ | ||||||||
| Emerging growth company | ☐ |
If an emerging growth company, indicate by check mark if the registrant has elected not to use the extended transition period for complying with any new or revised financial accounting standards provided pursuant to Section 13(a) of the Exchange Act. ☐
Indicate by check mark whether the registrant is a shell company (as defined in Rule 12b-2 of the Exchange Act). Yes ☐ No ☑
As of November 25, 2025, the number of shares of the registrant’s common stock outstanding was 252,098,440.
CROWDSTRIKE HOLDINGS, INC.
TABLE OF CONTENTS
SPECIAL NOTE REGARDING FORWARD-LOOKING STATEMENTS
This Quarterly Report on Form 10-Q contains forward-looking statements within the meaning of the Securities Act of 1933, as amended (the “Securities Act”), the Securities Exchange Act of 1934, as amended (the “Exchange Act”), and the Private Securities Litigation Reform Act of 1995. All statements contained in this Quarterly Report on Form 10-Q other than statements of historical fact, including statements regarding our future operating results and financial position, our business strategy and plans and our objectives for future operations, are forward-looking statements. The words “believe,” “may,” “will,” “potentially,” “estimate,” “continue,” “anticipate,” “intend,” “could,” “would,” “project,” “plan,” “expect” and similar expressions that convey uncertainty of future events or outcomes are intended to identify forward-looking statements.
These forward-looking statements include, but are not limited to, statements concerning the following:
-
our future financial performance, including our expectations regarding our revenue, cost of revenue, gross profit or gross margin, operating expenses (including changes in sales and marketing, research and development, and general and administrative expenses), and our ability to achieve, and maintain, future profitability;
-
market acceptance of our cloud platform;
-
the effects of increased competition in our markets and our ability to compete effectively;
-
our ability to maintain the security and availability of our cloud platform;
-
our ability to maintain and expand our customer base, including by attracting new customers;
-
our ability to develop new solutions, or enhancements to our existing solutions, and bring them to market in a timely manner;
-
anticipated trends, growth rates and challenges in our business and in the markets in which we operate;
-
our business plan and our ability to effectively manage our growth and associated investments;
-
beliefs and objectives for future operations;
-
our relationships with third parties, including channel partners and technology alliance partners;
-
our ability to maintain, protect and enhance our intellectual property rights;
-
our ability to successfully defend litigation brought against us and respond to government investigations and inquiries;
-
our ability to successfully expand in our existing markets and into new markets;
-
sufficiency of cash and cash equivalents, cash flow from operations, and our revolving credit facility to meet cash needs for at least the next 12 months;
-
anticipated developments relating to our valuation allowances for our deferred tax assets;
-
our ability to expand internationally;
-
our ability to comply with laws and regulations that currently apply or become applicable to our business both in the United States and internationally;
-
our ability to develop, maintain, and improve our internal control over financial reporting;
-
macroeconomic factors, including inflation and instability in the global credit and financial markets;
-
our ability to successfully close and integrate acquisitions to contribute to our growth objectives;
-
the attraction and retention of qualified employees and key personnel;
-
the July 19 Incident (as defined below), including potential or anticipated developments, our remediation and other efforts in connection with the incident, the outcome of lawsuits, claims and inquiries related to the incident, our customer commitment packages, and the effect on our customer and partner relationships and our business, results of operations and financial condition; and
-
the expected benefits of the Plan (as defined below).
These statements are based on our current plans, estimates and projections in light of information currently available to us. These forward-looking statements may be affected by risks, uncertainties and other factors discussed elsewhere in this Quarterly Report on Form 10-Q, including under “Risk Factors.” Furthermore, new risks and uncertainties emerge from time to time, and it is impossible for us to predict all risks and uncertainties or how they may affect us. If any of these risks or uncertainties materialize, our business, revenue and financial results could be harmed, and the trading price of our Class A common stock could decline. Forward-looking statements made in this Quarterly Report on Form 10-Q speak only as of the date on which such statements are made, and we undertake no obligation to update them in light of new information or future events, except as required by law.
We intend to announce material information to the public through the CrowdStrike Investor Relations website ir.crowdstrike.com, SEC filings, press releases, public conference calls, and public webcasts. We use these channels, as well as social media and our blog, to communicate with our investors, customers, and the public about our company, our offerings, and other issues. It is possible that the information we post on social media and our blog could be deemed to be material information. As such, we encourage investors, the media, and others to follow the channels listed above, including the social media channels listed on our investor relations website, and to review the information disclosed through such channels. Any updates to the list of disclosure channels through which we will announce information will be posted on the investor relations page on our website.
Summary of Risk Factors
Our business is subject to numerous risks and uncertainties, any one of which could materially adversely affect our business, results of operations, financial condition, and growth prospects. Below is a summary of some of these risks. This summary is not complete, and should be read together with the entire section titled “Risk Factors” in this Quarterly Report on Form 10-Q, as well as the other information in this Quarterly Report on Form 10-Q and the other filings that we make with the SEC.
-
The July 19 Incident has had, and is expected to continue to have, an adverse effect on our business, sales, customer and partner relations, reputation, results of operations and financial condition.
-
We have experienced rapid growth in recent periods, and if we do not manage our future growth, our business and results of operations will be adversely affected.
-
We have a history of losses, and while we have achieved profitability in certain periods, including fiscal 2024, we may not be able to achieve or sustain profitability in the future.
-
If organizations do not adopt cloud-based SaaS-delivered endpoint security solutions, our ability to grow our business and results of operations may be adversely affected.
-
If we are unable to successfully enhance our existing products and services and introduce new products and services in response to rapid technological changes and market developments as well as evolving security threats, our competitive position and prospects will be harmed.
-
If we are unable to attract new customers, our future results of operations could be harmed.
-
If our customers do not renew their subscriptions for our products and add additional cloud modules to their subscriptions, our future results of operations could be harmed.
-
Our sales cycles can be long and unpredictable, and our sales efforts require considerable time and expense.
-
We face intense competition and could lose market share to our competitors, which could adversely affect our business, financial condition, and results of operations.
-
If our solutions fail or are perceived to fail to detect or prevent incidents or have or are perceived to have defects, errors, or vulnerabilities, our brand and reputation would be harmed, which would adversely affect our business and results of operations.
-
As a cybersecurity provider, we have been, and expect to continue to be, a target of cyberattacks. If our or our service providers’ internal networks, systems, or data are or are perceived to have been compromised, our reputation may be damaged and our financial results may be negatively affected.
-
We rely on third-party data centers, such as Amazon Web Services, and our own colocation data centers to host and operate our Falcon platform, and any disruption of or interference with our use of these facilities may negatively affect our ability to maintain the performance and reliability of our Falcon platform, which could cause our business to suffer.
-
We rely on our key technical, sales and management personnel to grow our business, and the loss of one or more key employees could harm our business.
-
If we are unable to attract and retain qualified personnel, our business could be harmed.
-
Our results of operations may fluctuate significantly, which could make our future results difficult to predict and could cause our results of operations to fall below expectations.
-
If we are not able to maintain and enhance our CrowdStrike and Falcon brands and our reputation as a provider of high-efficacy security solutions, our business and results of operations may be adversely affected.
-
Claims by others that we infringe their proprietary technology or other intellectual property rights could result in significant costs and substantially harm our business, financial condition, results of operations, and prospects.
-
We are required to comply with stringent, complex and evolving laws, rules, regulations and standards in many jurisdictions, as well as contractual obligations, relating to data privacy and security. Any actual or perceived failure to comply with these requirements could have a material adverse effect on our business.
-
Failure to comply with laws and regulations applicable to our business could subject us to fines and penalties and could also cause us to lose customers or negatively impact our ability to contract with customers, including those in the public sector.
-
We are currently, and may in the future become, involved in litigation that may adversely affect us.
-
We have in the past experienced, and may in the future experience, warranty claims, product returns, and claims related to product liability and product defects from real or perceived defects in our solutions or their misuse by our customers or third parties and indemnity provisions in various agreements potentially expose us to substantial liability for intellectual property infringement and other losses.
-
Future acquisitions, strategic investments, partnerships, or alliances could be difficult to identify and integrate, divert the attention of key management personnel, disrupt our business, dilute stockholder value and adversely affect our business, financial condition and results of operations.
PART I. FINANCIAL INFORMATION
Item 1. FINANCIAL STATEMENTS
CrowdStrike Holdings, Inc.
Condensed Consolidated Balance Sheets
(in thousands, except per share data)
(unaudited)
| October 31, | January 31, | ||||||||||
| 2025 | 2025 | ||||||||||
| Assets | |||||||||||
| Current assets: | |||||||||||
| Cash and cash equivalents | $ | 4,801,083 | $ | 4,323,295 | |||||||
| Accounts receivable, net of allowance for credit losses of $2.7 million and $2.8 million as of October 31, 2025 and January 31, 2025, respectively | 1,013,116 | 1,128,564 | |||||||||
| Deferred contract acquisition costs, current | 398,708 | 347,042 | |||||||||
| Prepaid expenses and other current assets | 306,375 | 314,444 | |||||||||
| Total current assets | 6,519,282 | 6,113,345 | |||||||||
| Strategic investments | 81,332 | 72,544 | |||||||||
| Property and equipment, net | 926,963 | 788,640 | |||||||||
| Operating lease right-of-use assets | 67,359 | 42,763 | |||||||||
| Deferred contract acquisition costs, noncurrent | 556,221 | 500,908 | |||||||||
| Goodwill | 1,352,927 | 912,805 | |||||||||
| Intangible assets, net | 144,405 | 133,114 | |||||||||
| Other long-term assets | 316,858 | 137,459 | |||||||||
| Total assets | $ | 9,965,347 | $ | 8,701,578 | |||||||
| Liabilities and Stockholders’ Equity | |||||||||||
| Current liabilities: | |||||||||||
| Accounts payable | $ | 131,596 | $ | 130,887 | |||||||
| Accrued expenses | 190,009 | 191,349 | |||||||||
| Accrued payroll and benefits | 357,653 | 319,243 | |||||||||
| Operating lease liabilities, current | 15,929 | 13,811 | |||||||||
| Deferred revenue | 2,851,488 | 2,733,005 | |||||||||
| Other current liabilities | 53,220 | 72,755 | |||||||||
| Total current liabilities | 3,599,895 | 3,461,050 | |||||||||
| Long-term debt | 745,099 | 743,983 | |||||||||
| Deferred revenue, noncurrent | 1,211,762 | 995,672 | |||||||||
| Operating lease liabilities, noncurrent | 57,018 | 31,107 | |||||||||
| Other liabilities, noncurrent | 292,556 | 150,849 | |||||||||
| Total liabilities | 5,906,330 | 5,382,661 | |||||||||
| Commitments and contingencies (Note 10) | |||||||||||
| Stockholders’ Equity | |||||||||||
| Preferred stock, $0.0005 par value; 100,000 shares authorized as of October 31, 2025 and January 31, 2025; no shares issued and outstanding as of October 31, 2025 and January 31, 2025. | — | — | |||||||||
| Class A common stock, $0.0005 par value; 2,000,000 shares authorized as of October 31, 2025 and January 31, 2025; 252,078 shares and 247,872 shares issued and outstanding as of October 31, 2025 and January 31, 2025, respectively; Class B common stock, $0.0005 par value; 92,364 shares authorized as of October 31, 2025 and January 31, 2025; 0 shares issued and outstanding as of October 31, 2025 and January 31, 2025. | 126 | 124 | |||||||||
| Additional paid-in capital | 5,314,820 | 4,367,070 | |||||||||
| Accumulated deficit | (1,299,986) | (1,078,107) | |||||||||
| Accumulated other comprehensive income (loss) | 1,537 | (9,593) | |||||||||
| Total CrowdStrike Holdings, Inc. stockholders’ equity | 4,016,497 | 3,279,494 | |||||||||
| Non-controlling interest | 42,520 | 39,423 | |||||||||
| Total stockholders’ equity | 4,059,017 | 3,318,917 | |||||||||
| Total liabilities and stockholders’ equity | $ | 9,965,347 | $ | 8,701,578 |
The accompanying notes are an integral part of these condensed consolidated financial statements.
CrowdStrike Holdings, Inc.
Condensed Consolidated Statements of Operations
(in thousands, except per share data)
(unaudited)
| Three Months Ended October 31, | Nine Months Ended October 31, | ||||||||||||||||||||||||||||||||||
| 2025 | 2024 | 2025 | 2024 | ||||||||||||||||||||||||||||||||
| Revenue | |||||||||||||||||||||||||||||||||||
| Subscription | $ | 1,168,705 | $ | 962,735 | $ | 3,322,418 | $ | 2,753,164 | |||||||||||||||||||||||||||
| Professional services | 65,539 | 47,443 | 184,212 | 141,922 | |||||||||||||||||||||||||||||||
| Total revenue | 1,234,244 | 1,010,178 | 3,506,630 | 2,895,086 | |||||||||||||||||||||||||||||||
| Cost of revenue | |||||||||||||||||||||||||||||||||||
| Subscription | 257,915 | 216,301 | 753,929 | 605,868 | |||||||||||||||||||||||||||||||
| Professional services | 49,890 | 38,786 | 153,302 | 111,623 | |||||||||||||||||||||||||||||||
| Total cost of revenue | 307,805 | 255,087 | 907,231 | 717,491 | |||||||||||||||||||||||||||||||
| Gross profit | 926,439 | 755,091 | 2,599,399 | 2,177,595 | |||||||||||||||||||||||||||||||
| Operating expenses | |||||||||||||||||||||||||||||||||||
| Sales and marketing | 481,032 | 408,267 | 1,367,673 | 1,113,852 | |||||||||||||||||||||||||||||||
| Research and development | 347,564 | 275,602 | 1,028,361 | 761,759 | |||||||||||||||||||||||||||||||
| General and administrative | 167,286 | 126,945 | 510,443 | 337,113 | |||||||||||||||||||||||||||||||
| Total operating expenses | 995,882 | 810,814 | 2,906,477 | 2,212,724 | |||||||||||||||||||||||||||||||
| Loss from operations | (69,443) | (55,723) | (307,078) | (35,129) | |||||||||||||||||||||||||||||||
| Interest expense | (6,931) | (6,587) | (20,469) | (19,647) |
Showing the first 8K of 148K characters. Open the full section
Item 2. MANAGEMENT’S DISCUSSION AND ANALYSIS OF FINANCIAL CONDITION AND RESULTS OF OPERATIONS
The following discussion and analysis of our financial condition and results of operations should be read in conjunction with the condensed consolidated financial statements and related notes thereto included elsewhere in this Quarterly Report on Form 10-Q and our Annual Report on Form 10-K for the year ended January 31, 2025, filed with the SEC. Some of the information contained in this discussion and analysis or set forth elsewhere in this Quarterly Report on Form 10-Q, including information with respect to our plans and strategy for our business, includes forward-looking statements that involve risks and uncertainties as described under the heading Special Note Regarding Forward-Looking Statements following the Table of Contents of this Quarterly Report on Form 10-Q. You should review the disclosure under Part II, Item 1A, “Risk Factors” in this Quarterly Report on Form 10-Q for a discussion of important factors that could cause actual results to differ materially from the results described in or implied by the forward-looking statements contained in the following discussion and analysis.
Overview
Founded in 2011, we reinvented cybersecurity for the cloud era and transformed the way cybersecurity is delivered and experienced by customers. When we started CrowdStrike, cyberattackers had an asymmetric advantage over legacy cybersecurity products that could not keep pace with the rapid changes in adversary tactics. We took a fundamentally different approach to solve this problem with the AI-native CrowdStrike Falcon platform – the first, true cloud-native unified platform built with artificial intelligence (“AI”) at the core, capable of harnessing vast amounts of security and enterprise data to deliver highly modular solutions through a single lightweight agent.
We believe our approach has defined a new category called the Security Cloud, which has transformed the cybersecurity industry the same way the cloud has transformed the customer relationship management, human resources, and service management industries. Using cloud-scale AI, our Security Cloud enriches and correlates trillions of cybersecurity events per week with indicators of attack, threat intelligence, and enterprise data (including data from across endpoints, workloads, identities, DevOps, IT assets, and configurations) to create actionable data, identify shifts in adversary tactics, and automatically prevent threats in real-time across our customer base. The more data that is fed into our Falcon platform, the more intelligent our Security Cloud becomes, and the more our customers benefit, creating a powerful network effect that increases the overall value we provide.
Our Go-To-Market Strategy
We sell subscriptions to our Falcon platform and cloud modules to organizations across multiple industries. We primarily sell subscriptions to our Falcon platform and cloud modules through our direct sales team that leverages our network of channel partners. Our direct sales team is comprised of field sales and inside sales professionals who are segmented by a customer’s number of endpoints.
We have a low friction land-and-expand sales strategy. When customers deploy our Falcon platform, they can start with any number of cloud modules and easily add additional cloud modules. Once customers experience the benefits of our Falcon platform, they often expand their adoption over time by adding more endpoints or purchasing additional modules. We also use our sales team to identify current customers who may be interested in free trials of additional cloud modules, which serves as a powerful driver of our land-and-expand model. By segmenting our sales teams, we can deploy a low-touch sales model that efficiently identifies prospective customers.
We began as a solution for large enterprises, but the flexibility and scalability of our Falcon platform has enabled us to seamlessly offer our solution to customers of any size. We have expanded our sales focus to include any sized organization without the need to modify our Falcon platform for small and medium sized businesses.
A substantial majority of our customers purchase subscriptions with a term over one year. Our subscriptions are generally priced on a per-endpoint and per-module basis. We recognize revenue from our subscriptions ratably over the term of the subscription. We also generate revenue from our incident response and proactive professional services, which are generally priced on a time and materials basis. We view our professional services business primarily as an opportunity to cross-sell subscriptions to our Falcon platform and cloud modules.
Certain Factors Affecting Our Performance
Adoption of Our Solutions. We believe our future success depends in large part on the growth in the market for cloud-based SaaS-delivered endpoint security solutions. Many organizations have not yet abandoned the on-premise legacy products in which they have invested substantial personnel and financial resources to design and maintain. As a result, it is difficult to predict customer adoption rates and demand for our cloud-based solutions.
New Customer Acquisition. Our future growth depends in large part on our ability to acquire new customers. If our efforts to attract new customers are not successful, our revenue and rate of revenue growth may decline. We believe that our go-to-market strategy and the flexibility and scalability of our Falcon platform allow us to rapidly expand our customer base. Our incident response and proactive services also help drive new customer acquisitions, as many of these professional services customers subsequently purchase subscriptions to our Falcon platform. Many organizations have not yet adopted cloud-based security solutions, and since our Falcon platform has offerings for organizations of all sizes, worldwide, and across industries, we believe this presents a significant opportunity for growth.
Maintain Customer Retention and Increase Sales. Our ability to increase revenue depends in large part on our ability to retain our existing customers and increase the size of their subscriptions. We focus on increasing sales to our existing customers by expanding their deployments to more endpoints and selling additional cloud modules for increased functionality. Over time we have transitioned our platform from a single offering into highly-integrated offerings of multiple cloud modules.
Invest in Growth. We believe that our market opportunity is large and requires us to continue to invest significantly in sales and marketing efforts to further grow our customer base, both domestically and internationally. Our open cloud architecture and single data model have allowed us to rapidly build and deploy new cloud modules, and we expect to continue investing in those efforts to further enhance our technology platform and product functionality. In addition to our ongoing investment in research and development, we may also pursue acquisitions of businesses, technologies, and assets that complement and expand the functionality of our Falcon platform, add to our technology or security expertise, or bolster our leadership position by gaining access to new customers or markets. Furthermore, we expect our general and administrative expenses to increase in dollar amount for the foreseeable future given the additional expenses for accounting, compliance, and investor relations as we grow.
July 19 Incident. On July 19, 2024, we released a content configuration update for our Falcon sensor that resulted in system crashes for certain Windows systems (the “July 19 Incident”). As a result of the July 19 Incident, we are subject to lawsuits, claims and inquiries as described in Note 10, “Commitments and Contingencies,” to our condensed consolidated financial statements in Part I, Item 1 of this Quarterly Report on Form 10-Q. We have incurred, and expect to continue to incur, significant legal and profession
Showing the first 8K of 83K characters. Open the full section
Item 3. QUANTITATIVE AND QUALITATIVE DISCLOSURES ABOUT MARKET RISK
There have been no material changes to our market risks during the three and nine months ended October 31, 2025 compared to our disclosures in Part II, Item 7A of our Annual Report on Form 10-K for the fiscal year ended January 31, 2025.
Item 4. CONTROLS AND PROCEDURES
Evaluation of Disclosure Controls and Procedures
We maintain “disclosure controls and procedures,” as defined in Rule 13a–15(e) and Rule 15d–15(e) under the Exchange Act that are designed to provide reasonable assurance that information required to be disclosed by us in the reports that we file or submit under the Exchange Act is recorded, processed, summarized and reported, within the time periods specified in the SEC’s rules and forms. Disclosure controls and procedures include, without limitation, controls and procedures designed to provide reasonable assurance that information required to be disclosed by us in the reports that we file or submit under the Exchange Act is accumulated and communicated to our management, including our Chief Executive Officer and Chief Financial Officer, as appropriate to allow timely decisions regarding required disclosure.
Our management, with the participation of our Chief Executive Officer and Chief Financial Officer, has evaluated the effectiveness of our disclosure controls and procedures as of October 31, 2025. Based on such evaluation of our disclosure controls and procedures as of October 31, 2025, our Chief Executive Officer and Chief Financial Officer concluded that, as of such date, our disclosure controls and procedures were effective at the reasonable assurance level.
Changes in Internal Control Over Financial Reporting
There was no change in our internal control over financial reporting identified in connection with the evaluation required by Rule 13a-15(d) and Rule 15d-15(d) of the Exchange Act that occurred during the period covered by this Quarterly Report on Form 10-Q that has materially affected, or is reasonably likely to materially affect, our internal control over financial reporting.
Inherent Limitations on Effectiveness of Controls
Our management, including our Chief Executive Officer and Chief Financial Officer, believes that our disclosure controls and procedures are designed to provide reasonable assurance of achieving their objectives and are effective at the reasonable assurance level. However, our management does not expect that our disclosure controls and procedures will prevent or detect all errors and all fraud. A control system, no matter how well conceived and operated, can provide only reasonable, not absolute, assurance that the objectives of the control system are met. Further, the design of a control system must reflect the fact that there are resource constraints, and the benefits of controls must be considered relative to their costs. Because of the inherent limitations in all control systems, no evaluation of controls can provide absolute assurance that all control issues and instances of fraud, if any, have been detected. These inherent limitations include the realities that judgments in decision making can be faulty, and that breakdowns can occur because of a simple error or mistake. Additionally, controls can be circumvented by the individual acts of some persons, by collusion of two or more people or by management override of the controls. The design of any system of controls also is based in part upon certain assumptions about the likelihood of future events, and there can be no assurance that any design will succeed in achieving its stated goals under all potential future conditions; over time, controls may become inadequate because of changes in conditions, or the degree of compliance with policies or procedures may deteriorate. Because of the inherent limitations in a cost-effective control system, misstatements due to error or fraud may occur and not be detected.
PART II. OTHER INFORMATION
ITEM 1. LEGAL PROCEEDINGS
We are currently a party to, and may from time to time in the future be involved in, various litigation matters and subject to claims that arise in the ordinary course of business, including claims asserted by third parties in the form of letters and other communications. For information regarding legal proceedings and other claims asserted against us, including in relation to the July 19 Incident, see Note 10, “Commitments and Contingencies,” to our condensed consolidated financial statements in Part I, Item 1 of this Quarterly Report on Form 10-Q.
For any claims for which we believe a liability is both probable and reasonably estimable, we record a liability in the period in which we make this determination. Other than as disclosed in Note 10, there is no pending or threatened legal proceeding to which we are a party that, in our opinion, is likely to have a material adverse effect on our business and our condensed consolidated financial statements; however, the results of legal proceedings and claims are inherently unpredictable. Regardless of the outcome, litigation can have an adverse impact on our business because of defense and settlement costs, diversion of management resources, and other factors. In addition, the expense of litigation and the timing of this expense from period to period are difficult to estimate, subject to change and could adversely affect our condensed consolidated financial statements.
Item 1A. RISK FACTORS
A description of the risks and uncertainties associated with our business is set forth below. You should carefully consider the risks and uncertainties described below, as well as the other information in this Quarterly Report on Form 10-Q, including our condensed consolidated financial statements and the related notes and “Management’s Discussion and Analysis of Financial Condition and Results of Operations.” The occurrence of any of the events or developments described below, or of additional risks and uncertainties not presently known to us or that we currently deem immaterial, could materially and adversely affect our business, results of operations, financial condition and growth prospects. In such an event, the market price of our Class A common stock, or “common stock,” could decline, and you could lose all or part of your investment.
Risks Related to Our Business and Industry
The July 19 Incident has had, and is expected to continue to have, an adverse effect on our business, sales, customer and partner relations, reputation, results of operations and financial condition.
On July 19, 2024, we released a content configuration update for our Falcon sensor that resulted in system crashes for certain Windows systems (the “July 19 Incident”). We have incurred, and expect to continue to incur, significant costs and expenses related to the incident, including in connection with remediation efforts, customer and partner relations, measures taken to address the damage to our reputation, and other measures taken in response to the incident. Our management and other personnel have devoted, and may continue to devote, significant time and resources to address the impacts of the July 19 Incident. We also have hired, and in the future may hire, additional personnel to assist with our ongoing efforts. Any real or perceived failure, by us or the third-party service providers we engage, to remediate and respond to the July 19 Incident could adversely impact our business. While we are investing in enhancements to software resiliency, testing and customer controls following the July 19 Incident, we cannot guarantee that such enhancements will be effective, or that our products do not have or will not have defects, errors, or vulnerabilities.
The July 19 Incident has harmed, and is expected to continue to harm, our business, sales, customer and partner relations, and our reputation. As a result of the July 19 Incident, certain of our existing or prospective customers have elected to, and may in the future elect to, defer purchasing decisions relating to our products and services or not purchase our products and services at all. Customers have also decided, and may in the future decide, to terminate or not renew their agreements with us. The July 19 Incident has negatively impacted, and may in the future negatively impact, our existing or prospective partners’ ability or willingness to promote our products or services. Certain of our competitors have aggressively approached our current and prospective customers and partners to attempt to capitalize on the July 19 Incident, and may continue to do so. Furthermore, we have agreed to, and expect to agree to in the future, provide incentives in connection with our commercial arrangements with our customers, including subscription period extensions, discounts or promotional modules. The July 19 Incident has received negative media coverage and harmed our reputation and brand. If we are unable to regain the trust of our current and prospective customers and partners, or if negative media coverage and publicity continues, whether directly or indirectly related to the July 19 Incident, our reputation and brand may suffer further, exacerbating the effects discussed herein. These factors may result in harm to our business, results of operations and financial condition.
We are party to a number of legal proceedings relating to the July 19 Incident, such as lawsuits filed by or on behalf of third parties, including securities litigation brought on behalf of certain purchasers of our common stock, derivative litigation asserting claims against certain officers and directors, and putative class actions brought by individual consumers. We have also received inquiries from governmental authorities and other third parties, and governmental authorities may seek to impose undertakings, injunctive relief, consent decrees or other penalties, which could, among other things, materially increase our expenses or otherwise require us to alter how we operate our business. Third parties, including governmental authorities, may take certain actions in response to the July 19 Incident that may negatively impact our business and operations and may result in additional costs and expenses relating to compliance, product development or other matters. Some customers and other third parties claiming to have been impacted by the incident have asserted claims against us or otherwise communicated their intent to seek indemnification or compensation from us. Additional claims may also be asserted by or on behalf of customers, customers’ insurers, partners, stockholders or others seeking monetary damages or other relief. These lawsuits, claims and inquiries are resulting, and are expected to result in the future, in the incurrence of significant costs and expenses, the diversion of management’s attention from the operation of our business and other negative impacts on our business and operations.
While we maintain insurance policies that may cover certain costs, claims and liabilities in connection with the July 19 Incident, we expect that our insurance coverage will not cover all costs, claims and liabilities actually incurred, and we cannot be certain that our insurance will continue to be available to us on commercially reasonable terms, or at all, or that any insurer will not deny coverage as to any future claim. The successful assertion of one or more large claims against us that exceed available insurance coverage, or the occurrence of changes in our insurance policies, including premium increases or the imposition of large deductible or co-insurance requirements, could have a material adverse effect on our business, including our financial condition, results of operations and reputation.
We have experienced rapid growth in recent periods, and if we do not manage our future growth, our business and results of operations will be adversely affected.
We have experienced rapid revenue growth in recent periods and we expect to continue to invest broadly across our organization to support our growth. Although we have experienced rapid growth historically, we may not sustain our current growth rates and our investments to support our growth may not be successful. The growth and expansion of our business will require us to invest significant financial and operational resources and the continuous dedication of our management team. Our future success will depend in part on our ability to manage our growth effectively, which will require us to, among other things:
-
effectively attract, integrate, and retain a large number of new employees, particularly members of our sales and marketing and research and development teams;
-
further improve our Falcon platform, including our cloud modules, and IT infrastructure, including expanding and optimizing our data centers, to support our business needs;
-
enhance our information and communication systems to ensure that our employees and offices around the world are well coordinated and can effectively communicate with each other and our growing base of channel partners and customers; and
-
improve our financial, management, and compliance systems and controls.
If we fail to achieve these objectives effectively, our ability to manage our expected growth, ensure uninterrupted operation of our Falcon platform and key business systems, and comply with the rules and regulations applicable to our
Showing the first 8K of 179K characters. Open the full section
Item 5. OTHER INFORMATION
Not applicable.
Item 6. EXHIBITS
We have filed the exhibits listed on the accompanying Exhibit Index, which is incorporated herein by reference.
Index to Exhibits
| † | Indicates management contract or compensatory plan, contract or agreement. | |||||||
| * | The certifications furnished in Exhibit 32.1 hereto are deemed to accompany this Quarterly Report on Form 10-Q and will not be deemed “filed” or purposes of Section 18 of the Securities Exchange Act of 1934, as amended, and are not to be incorporated by reference into any of CrowdStrike Holdings, Inc.’s filings under the Securities Act of 1933, as amended, irrespective of any general incorporation language contained in such filing. |
SIGNATURES
Pursuant to the requirements of the Securities Exchange Act of 1934, the Registrant has duly caused this report to be signed on its behalf by the undersigned, thereunto duly authorized on the day of December 2, 2025.
| CROWDSTRIKE HOLDINGS, INC. | ||||||||
| By: | /s/ Burt W. Podbere | |||||||
| Burt W. Podbere Chief Financial Officer (Principal Financial Officer) | ||||||||
| By: | /s/ Anurag Saha | |||||||
| Anurag Saha Chief Accounting Officer (Principal Accounting Officer) |