CrowdStrike Holdings, Inc. Due Diligence

Run due diligence on CrowdStrike Holdings, Inc.: check compliance and get alerts when suppliers or ownership change.

United States · owned by Independent (United States) · crowdstrike.com · 17 vendors

CrowdStrike is a global cybersecurity leader that provides an AI-native, cloud-native platform (Falcon) for protecting endpoints, cloud workloads, identities, and data. The company specializes in stopping breaches through threat intelligence, next-generation antivirus, endpoint detection and response (EDR), and managed security services. CrowdStrike is publicly traded on NASDAQ (CRWD) and serves organizations across industries worldwide.

Resilience scores

Technology vendors

Services catalogue

20 services in catalogue across 5 categories; runs on 17 sub-vendors.

Insights

Last updated 2026-09-13 · revision 18

17 direct vendors, 212 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Compliance

4 in-scope frameworks identified; showing 3.

SOC 2 (source) — No public evidence

Evidence: https://crowdstrike.com

HIPAA (source) — No public evidence

Evidence: https://crowdstrike.com

GDPR (source) — No public evidence

Evidence: https://crowdstrike.com, https://ir.crowdstrike.com/

Financials

Three-year financials

Financial Resilience Score: 7/10

CrowdStrike demonstrates strong top-line growth momentum with revenues expanding from $1.45B in FY2022 to $3.06B in FY2024, reflecting a compound annual growth rate exceeding 45%. The company operates in the high-demand cybersecurity sector, benefiting from secular tailwinds around cloud security, endpoint protection, and threat intelligence. Its subscription-based, cloud-native Falcon platform generates highly recurring revenue, providing strong revenue visibility and customer retention metrics (gross retention rates consistently above 97%). Despite robust revenue growth, CrowdStrike has historically operated at an operating loss (GAAP basis), though losses have been narrowing significantly — from -$535.7M in FY2022 to -$89.0M in FY2024 — indicating improving operational leverage. The company generates positive free cash flow on a non-GAAP basis, which is a meaningful indicator of underlying business health. A balance sheet with approximately $3.44B in equity and substantial cash reserves further supports financial resilience. Key risks include continued GAAP unprofitability, high customer acquisition costs, and intense competition from established players such as Microsoft, Palo Alto Networks, and SentinelOne. The July 2024 global IT outage caused by a faulty CrowdStrike sensor update introduced reputational and legal risk, with potential customer churn and litigation costs that could weigh on near-term financials. Overall, CrowdStrike's resilience is underpinned by its market leadership in cloud-native endpoint security, strong ARR growth, and improving unit economics, but is tempered by ongoing GAAP losses, execution risk, and the aftermath of the 2024 outage incident.

Key strengths: Subscription-based recurring revenue model with >97% gross retention rate, Rapid revenue growth (35-66% annually over three years), Improving operating leverage with narrowing GAAP operating losses, Positive non-GAAP free cash flow generation, Strong balance sheet with ~$3.44B in equity and significant cash reserves, Market leadership in cloud-native endpoint and extended detection & response (XDR), Expanding platform with 20+ modules driving upsell and cross-sell

Risk factors: Continued GAAP operating losses and path to sustained profitability uncertain, July 2024 global IT outage causing reputational damage, customer churn risk, and litigation exposure, Intense competition from Microsoft, Palo Alto Networks, SentinelOne, and others, High customer acquisition and R&D costs pressuring margins, Macroeconomic headwinds potentially slowing enterprise security spending, Concentration risk in endpoint/cloud security market segment

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report