CrowdStrike Holdings, Inc. (CRWD) FY2026 10-K and Q2 FY2027 10-Q Summary

Business

From the fiscal 2026 Form 10-K (accession 0001535527-26-000010), Item 1, supplemented by the Q2 fiscal 2027 Form 10-Q (accession 0001535527-26-000031).

CrowdStrike was formed on November 7, 2011 and is a holding company headquartered in Austin, Texas whose operations are conducted through subsidiaries, principally CrowdStrike, Inc. It sells cybersecurity through the CrowdStrike Falcon platform, an AI-native, cloud-delivered platform that the company describes as purpose-built to stop breaches and, more recently, as built for the "agentic" era.

How the platform works. Falcon rests on two proprietary pieces: a single lightweight sensor installed on each endpoint and cloud workload, and a cloud back end the company calls the Security Cloud, or AI Security Cloud. The sensor collects data once, from endpoints, cloud workloads, identities and third-party sources, and that data is reused across multiple security functions. The Enterprise Graph unifies the company's graph technologies into a single intelligence layer: Threat Graph (correlates and analyzes cybersecurity events to prevent threats in real time), Intel Graph (adversary and threat-intelligence relationships, mapped to the MITRE ATT&CK framework) and Asset Graph (relationships and risk among devices, users, accounts, applications and cloud workloads). Management's stated advantage is a network effect, more customer data trains better models, which improves efficacy for all customers.

What it sells. Falcon delivered 32 cloud modules as of January 31, 2026 and 33 as of the 10-K filing, spanning:

• Endpoint security, next-generation antivirus, EDR and XDR.
• Cloud security, runtime protection, cloud and application security posture management for multi-cloud environments.
• Exposure management, IT hygiene, vulnerability management and external attack surface management, with attack-path prediction.
• Managed detection and response, Falcon Complete Next-Gen MDR, a 24/7 managed service backed by an underwritten limited warranty.
• Counter Adversary Operations, including Falcon OverWatch managed threat hunting and threat intelligence.
• Identity protection, real-time detection, behavioral analytics and policy enforcement against identity-based attacks.
• Next-Gen SIEM and modern log management.
• Generative and agentic AI, Charlotte AI, which triages detections and automates investigation within customer-defined guardrails.
• Securing AI, AI Detection and Response (AIDR), covering employee AI use, agents, models and Model Context Protocol servers, with prompt-injection analysis and automatic redaction of sensitive data.
• IT automation (Falcon for IT), SaaS security posture management (Adaptive Shield) and the Falcon Foundry no-code application development platform.

Alongside subscriptions, CrowdStrike sells professional services: incident response, forensics and breach recovery; proactive consulting and assessments (including AI red-teaming); platform deployment, operational and resident services; and CrowdStrike University training and certification. Management treats professional services primarily as a lead generator for subscriptions, incident response customers frequently convert to subscription customers.

How it makes money. Subscriptions are sold through a partner-first model, a direct sales team segmented by customer size, supported by resellers, MSSPs, MSPs, system integrators, distributors and cloud marketplaces (AWS, Google and Microsoft). Contracts generally run one to three years, are usually invoiced at the beginning of the term (or in installments in multi-year arrangements), and revenue is recognized ratably, so a substantial portion of reported revenue in any period comes from previously booked deferred revenue. Pricing is per unit of measure most relevant to each product: per-endpoint, per-identity, per-cloud-sensor, per-user, per-device and per-gigabyte of daily ingestion. Professional services are generally billed on a time-and-materials basis; fixed-fee contracts are immaterial. The 10-Q highlights Falcon Flex, an enterprise licensing model under which a customer commits to a broader platform investment upfront and draws it down across products over time, shifting spend across security domains as priorities change.

Subscription revenue was 95% of total revenue in each of fiscal 2026 and fiscal 2025 and 95% in the second quarter of fiscal 2027; professional services accounted for the remainder. CrowdStrike operates as a single operating and reportable segment, with the Chief Executive Officer as chief operating decision maker measuring performance on consolidated net income (loss).

Growth strategy and customer base. The strategy is land-and-expand: replace legacy and point endpoint products, then expand to more endpoints and cross-sell modules, aided by free and in-application trials. Dollar-based net retention was 115% as of January 31, 2026. The company reports more than 88,000 organizations (including end customers of its MSSPs) as of January 31, 2026, and says no single end customer is material to the business. The U.S. public sector is a stated priority, FedRAMP authorizations, a Department of Defense Impact Level 5 provisional authorization, deployment in AWS GovCloud, inclusion on the Department of Homeland Security's Continuous Diagnostics and Mitigation Approved Products List, and 25 of the 50 U.S. states standardized on the platform at enterprise level. International revenue grew from $1,270.7 million in fiscal 2025 to $1,595.4 million in fiscal 2026, a 26% increase. In the second quarter of fiscal 2027, the United States produced 65% of revenue, EMEA 18%, Asia-Pacific 11% and other regions 6%; no country other than the United States exceeded 10% of revenue.

Infrastructure and people. CrowdStrike operates co-location data centers in the United States and Europe alongside third-party facilities. Headcount was 10,698 full-time employees at January 31, 2026 and 11,706 at July 31, 2026. The workforce is deliberately distributed and hybrid; no U.S. employees are unionized.

Strategic investments. The company manages and consolidates two venture vehicles, CrowdStrike Falcon Fund LLC (formed July 2019, up to $10.0 million committed) and Falcon Fund II LLC (formed December 2021, up to $50.0 million committed), each matched by entities associated with Accel, which holds the other 50% of the sharing percentage. The funds invest in minority equity and convertible debt of private companies relevant to the platform; each has a ten-year duration extendable by three years.

Risk factors

Condensed from the fiscal 2026 Form 10-K (accession 0001535527-26-000010), Item 1A, with litigation status updated from the Q2 fiscal 2027 Form 10-Q (accession 0001535527-26-000031), Note 11. The 10-Q restates the same risk factors, substantively unchanged.

The July 19 Incident is the company's own named lead risk. On July 19, 2024 a content configuration update for the Falcon sensor caused system crashes on certain Windows systems. CrowdStrike states the incident has harmed, and is expected to continue to harm, its business, sales, customer and partner relations and reputation: some existing and prospective customers deferred or abandoned purchases or declined to renew; competitors approached its customers and partners to capitalize on the incident; and the company has agreed, and expects to continue to agree, to incentives including subscription-period extensions, discounts and promotional modules. Management says it has maintained high dollar-based gross retention but has seen delays in creating sales opportunities and longer sales cycles, and that because contracts typically run more than a year, churn may surface in later periods. Customer commitment packages have caused, and are expected to continue to cause, increased contraction from elongated subscription terms and lower upsell values. Investments in software resiliency, testing and customer controls may not prove effective.

The direct financial cost is disclosed and bounded so far: expenses net of insurance receivable were $60.1 million in fiscal 2025 and $117.7 million in fiscal 2026, leaving an accrued balance of $15.5 million at January 31, 2026; a further $3.6 million was incurred in the six months ended July 31, 2026, leaving $13.1 million accrued. Settlement offers made to certain customers are described as immaterial and entirely offset by insurance recoveries.

Incident-related litigation and inquiries. Much of the docket has resolved in the company's favor:

• The securities class action filed July 30, 2024 in the Western District of Texas was dismissed on January 12, 2026; plaintiffs declined to amend, final judgment was entered January 28, 2026, and no appeal was filed.
• The consolidated airline-passenger class actions were dismissed June 18, 2025; the Fifth Circuit affirmed on May 20, 2026 and denied rehearing on June 15, 2026.
• The various shareholder derivative suits in the Western District of Texas and the Delaware Court of Chancery were ordered dismissed on March 18, April 7 and April 16, 2026.
• The complaint Delta Air Lines filed October 25, 2024 in Georgia state court, alleging computer trespass, breach of contract, fraud by omission, strict-liability product defect, gross negligence and unfair business practices, seeking unspecified compensatory and punitive damages, survived dismissal in part on May 16, 2025 and remains in discovery.

Separately, CrowdStrike has received requests for information from the U.S. Department of Justice and the SEC relating to its recognition of revenue and reporting of ARR for transactions with certain customers, the July 19 Incident and related matters, and is cooperating. Other customers, third parties and governmental authorities have asserted claims or made inquiries. The company says a loss is reasonably possible but that neither the amount nor a range can be estimated, and that unfavorable developments could materially affect results.

Financial and operating risks.

• History of losses. Accumulated deficit was $1.3 billion at January 31, 2026 and $1.2 billion at July 31, 2026; profitability has been achieved only in certain periods and may not be sustained.
• Growth management, hiring and integrating large numbers of employees, scaling data centers and infrastructure, and improving financial and compliance systems.
• Dependence on new customer acquisition, renewals and module cross-sell; long and unpredictable sales cycles; and the lag inherent in ratable revenue recognition, which delays the appearance of both downturns and upturns in new business.
• Results may fluctuate for many reasons, among them customer budget cycles, incentive and contract mix, competitive developments, litigation and regulatory costs, foreign exchange, and the continuing effects of the July 19 Incident.

Competition and product risk. Competitors span legacy antivirus vendors, alternative endpoint providers, network security vendors extending into endpoint and cloud, cloud security specialists, identity security vendors, cybersecurity services firms and legacy SIEM vendors, and industry consolidation may produce more formidable rivals. Pricing pressure could compress gross margin. Real or perceived defects, errors or vulnerabilities, or a failure of the platform to detect an attack, would damage the brand; and as adoption widens, adversaries may specifically target CrowdStrike's own systems. Platform availability depends on data center and internet infrastructure, redundancy and disaster-recovery arrangements, and some customer contracts carry service-level commitments whose breach would require service credits.

People and organization. The business depends on key technical, sales and management personnel, the 10-K singles out changes involving Mr. Kurtz as a factor that could move the stock, on the ability to attract and retain qualified staff in a competitive market, on expanding and training the direct sales force, and on maintaining company culture at scale.

Government, international and macro exposure. Sales to government organizations are unpredictable and subject to budgetary and contracting policy changes. International expansion brings contract enforcement and collection difficulty, higher costs, regulatory and tariff changes, IP protection uncertainty, repatriation and double-taxation issues, and staffing challenges. Nearly all sales contracts are denominated in U.S. dollars while a portion of operating expenses is not: a hypothetical 10% adverse move in the dollar would have increased operating loss by approximately $138.8 million in fiscal 2026 (versus $108.3 million in fiscal 2025). In the second quarter of fiscal 2027 the company began entering foreign currency forward contracts, with a maximum maturity of three months, designated as cash flow hedges.

Intellectual property, legal and regulatory. The company relies on trademarks, patents, copyrights, trade secrets and license agreements and may be unable to police unauthorized use; infringement claims by others could be costly and it must indemnify customers and channel partners against such claims. It licenses third-party technology and incorporates open source software, whose license terms, some untested in U.S. courts, could require source code disclosure or restrict distribution. It must comply with evolving data privacy and security regimes including the GDPR, the CCPA as amended by the CPRA, and cross-border transfer rules, plus export controls and economic sanctions, the FCPA and the U.K. Bribery Act. Its use of AI, including generative AI in products and operations, is itself flagged as a source of liability and of unpredictable future regulation.

Internal control, acquisitions and tax. The 10-K warns that controls may become inadequate as the business changes and that acquired companies may lack an adequate control environment, context worth holding alongside the stock-compensation revision described below. Acquisitions and strategic investments may be hard to identify and integrate, may divert management, may dilute stockholders and may fail to deliver anticipated benefits, and diligence may miss liabilities. Intercompany arrangements across jurisdictions expose the company to additional tax assessments; the One Big Beautiful Bill Act was enacted July 4, 2025 and OECD proposals continue to develop; and the ability to use net operating loss carryforwards and other tax attributes may be limited. Unrecognized tax benefits classified as long-term liabilities were $47.3 million at January 31, 2026 and $51.8 million at July 31, 2026.

Indebtedness and the common stock. CrowdStrike had $750.0 million of principal outstanding at January 31, 2026 (Senior Notes issued in January 2021, due in fiscal 2030, guaranteed by CrowdStrike, Inc. and CrowdStrike Financial Services, Inc.), which limits financing flexibility and is subject to indenture covenants with exceptions and qualifications. The stock may be volatile for reasons unrelated to operating performance, including new information about the July 19 Incident and the amount or frequency of buybacks; the share repurchase program may not create stockholder value; sales of substantial amounts of stock, including issuances for acquisitions or financings, could dilute holders. No cash dividends have ever been declared and none are anticipated. Charter and bylaw provisions, a classified board with three-year staggered terms, blank-check preferred stock, board-only vacancy filling, no action by written consent, restricted ability to call special meetings, a two-thirds supermajority for certain charter amendments, advance notice requirements, together with Delaware law could deter a change of control, and the bylaws designate the Delaware Court of Chancery (and, for Securities Act claims, federal district courts) as exclusive forums for specified disputes.

Management's discussion and analysis, fiscal 2026

From the fiscal 2026 Form 10-K (accession 0001535527-26-000010), Item 7. Fiscal 2025 and fiscal 2024 comparatives are as revised for the stock-compensation error; share and per-share amounts in the 10-K are stated before the July 2026 split.

Revenue. Total revenue rose $858.4 million, or 22%, to $4,812.0 million. Subscription revenue increased $803.2 million, or 21%, to $4,564.7 million, driven by new customers and by additional sensors and modules sold to existing customers. Professional services revenue increased $55.2 million, or 29%, to $247.3 million on higher service hours.

Gross profit. Total cost of revenue increased $228.8 million, or 23%, to $1,218.9 million. Subscription cost of revenue rose $181.3 million, or 22%, mainly from cloud hosting and related services (+$46.4 million), employee-related expenses (+$43.1 million on a 16% increase in average headcount), depreciation of data center equipment (+$33.4 million), amortization of internal-use software (+$24.9 million), stock-based compensation (+$18.1 million) and allocated overhead (+$16.8 million). Professional services cost of revenue rose $47.4 million, or 30%, chiefly on consulting expense (+$18.7 million) and employee-related expenses (+$15.5 million on 12% higher average headcount). Gross profit was $3,593.1 million. Total gross margin held at 75% and subscription gross margin at 78%; professional services gross margin slipped one point to 18% on higher consulting and stock-based compensation costs.

Operating expenses. Sales and marketing rose 20% to $1,831.3 million (employee-related +$168.4 million on 12% higher average headcount, stock-based compensation +$48.2 million, marketing programs +$29.2 million). Research and development rose 29% to $1,384.8 million (employee-related +$116.8 million on a 20% increase in average headcount, stock-based compensation +$94.0 million, cloud hosting +$46.4 million). General and administrative rose 39% to $670.3 million, the single largest driver being $82.4 million of additional expense associated with the July 19 Incident and related matters, followed by stock-based compensation (+$52.4 million), consulting (+$16.4 million) and $12.5 million of Strategic Plan charges. Operating expenses reached 81% of revenue against 78% in fiscal 2025, and loss from operations widened to 6% of revenue from 3%. Net loss for the year was $161.2 million.

Key metrics. ARR grew 24% year over year to $5.25 billion at January 31, 2026, of which $1.0 billion was net new ARR added during the year (fiscal 2025: $4.24 billion of ARR, $806.7 million net new). Dollar-based net retention was 115%.

Liquidity. Primary sources of liquidity were $5.2 billion of cash and cash equivalents at January 31, 2026 plus cash from operations. Deferred revenue was $4.8 billion, of which $3.4 billion was current. Management states it cannot reasonably estimate losses from July 19 Incident proceedings, but expects cash on hand plus operating cash flow to cover working capital and capital expenditure needs for at least twelve months.

Operating cash flow was $1.6 billion, arising from a $161.2 million net loss adjusted for $1.8 billion of non-cash charges, $1.1 billion of stock-based compensation, $449.4 million of deferred contract acquisition cost amortization, $250.2 million of depreciation and amortization, less a $59.3 million outflow from working capital, itself dominated by a $703.7 million increase in deferred contract acquisition costs, a $232.5 million increase in receivables and a $206.2 million increase in prepaid expenses, partly offset by a $1.0 billion increase in deferred revenue. Investing used $764.5 million: $382.3 million for the Onum and Pangea acquisitions net of cash acquired, $302.1 million of property and equipment, and $68.8 million of capitalized internal-use software and website development. Financing provided $132.5 million, mostly $125.8 million of employee stock purchase plan proceeds.

Commitments. Non-cancelable purchase commitments with terms beyond twelve months totaled $2.8 billion at January 31, 2026 (fiscal 2027 $600.2 million, fiscal 2028 $661.0 million, fiscal 2029 $627.6 million, fiscal 2030 $517.3 million, fiscal 2031 $206.9 million, thereafter $157.4 million). Real estate obligations were $16.9 million due within twelve months and $65.8 million thereafter. The $750.0 million of Senior Notes due fiscal 2030 carry $22.5 million of interest due within twelve months and $56.3 million thereafter. Non-cancelable unfunded loan commitments under customer financing arrangements were approximately $89.9 million. The revolving credit facility expired in January 2026.

Change in accounting estimate. In February 2026 the company concluded that the period of benefit for commissions earned on initial contracts and upsells should increase from four years to five, effective in fiscal 2027, and estimated the change would improve fiscal 2027 income (loss) from operations by $85.0 million to $95.0 million.

Revision of prior periods. In the fourth quarter of fiscal 2026 CrowdStrike identified an immaterial error in the timing of stock-based compensation expense on certain awards granted in fiscal 2022 and fiscal 2023. It concluded the error was not material to previously issued statements, but that correcting the cumulative effect as an out-of-period adjustment in fiscal 2026 would have been material, hence the revision. The $29.3 million cumulative impact for fiscal 2022 and 2023 was recorded as an adjustment to accumulated deficit and additional paid-in capital at February 1, 2023. For fiscal 2025 the effect was $4.0 million, reducing net loss from $16.6 million as previously reported to $12.6 million as revised (net loss attributable to CrowdStrike from $19.3 million to $15.2 million). For fiscal 2024 the effect ran the other way, reducing net income from $90.6 million to $73.4 million (attributable net income from $89.3 million to $72.2 million, or $0.30 per basic and diluted share as revised, before the July 2026 split). There was no impact on any cash flow statement category and none on total stockholders' equity. Management concluded that disclosure controls and internal control over financial reporting were effective as of January 31, 2026, and the auditor's report on internal control is included in the 10-K.

Current quarter, second quarter of fiscal 2027 (ended July 31, 2026)

From the Form 10-Q for the quarter ended July 31, 2026 (accession 0001535527-26-000031). Prior-year comparatives are as revised for the stock-compensation error; all share and per-share amounts are adjusted for the four-for-one split.

Revenue. Total revenue increased $301.9 million, or 26%, to $1,470.9 million. Subscription revenue rose $297.3 million, or 27%, to $1,400.3 million on new customers plus additional sensors and modules sold to existing customers; professional services revenue rose $4.6 million, or 7%, to $70.6 million on higher service hours. For the six months, total revenue was $2,856.5 million, up 26%, with subscription revenue of $2,721.1 million (up 26%) and professional services of $135.4 million (up 14%).

Margins. Cost of revenue rose 21% to $374.0 million; total gross margin improved a point to 75%. Subscription gross margin improved a point to 78%, which management attributes to hiring efficiencies. Professional services gross margin fell five points to 10%, reflecting higher employee-related costs against a prior-year quarter that carried Strategic Plan credits, plus higher stock-based compensation, partly offset by lower consulting expense.

Operating expenses and profitability. Sales and marketing rose 14% to $510.0 million, 35% of revenue, down from 38%, with stock-based compensation up $22.6 million and employee-related expenses up $17.7 million on 10% higher average headcount, offset by the absence of $8.7 million of prior-year Strategic Plan charges. Research and development rose 30% to $444.2 million (30% of revenue), driven by stock-based compensation up $48.5 million, employee-related expenses up $40.1 million on a 17% increase in average headcount, and cloud hosting up $12.5 million. General and administrative was essentially flat at $176.0 million, falling to 12% of revenue from 15%, as lower July 19 Incident costs and lower Strategic Plan charges offset higher stock-based compensation. Total operating expenses fell to 77% of revenue from 83%, narrowing loss from operations to 2% of revenue from 9%. Net income attributable to CrowdStrike for the quarter was $5.3 million, or $0.01 per diluted share, a GAAP-positive quarter against a loss of $70.2 million, or $0.07 per diluted share, in the prior-year quarter, helped by the $25.5 million reduction in sales commission expense from the extended commission benefit period and by the absence of the $38.4 million of Strategic Plan charges carried in the year-ago quarter. Net income attributable to CrowdStrike for the six months was $33.1 million, against a $174.4 million loss a year earlier.

Below the operating line, six-month other income (expense), net swung to $34.6 million from a $6.6 million expense, chiefly on $36.4 million more in realized gains on strategic investments, which includes the remeasurement of the previously held interest in Seraphic to a fair value of $38.1 million, a $15.5 million realized gain net of $15.5 million attributable to non-controlling interests. Six-month interest income fell 12% to $84.4 million on lower market rates, and interest expense fell 10% to $12.2 million with no further amortization of issuance costs on the revolving facility that expired in January 2026. Income taxes moved from a $27.1 million six-month provision to an $8.3 million benefit, reflecting deferred tax asset realization tied to recent acquisitions, excess tax benefits on stock awards and interim-period tax methodology.

Key metrics and backlog. ARR was $5.84 billion at July 31, 2026, up 25% year over year. Net new ARR was $332.8 million for the quarter and $588.6 million for the six months, against $221.1 million and $414.8 million a year earlier. Dollar-based net retention improved sequentially as of July 31, 2026; management cautions it can fluctuate with large contracts, with incentives granted, and with under-utilization of subscriptions, including under the flexible subscription offering, which can lead customers to renew with shorter terms, fewer modules or smaller values. Remaining performance obligations were $10.7 billion at July 31, 2026, of which approximately 46% is expected to be recognized within twelve months and most of the non-current balance over the following 13 to 36 months. Backlog, amounts not yet invoiced and therefore outside deferred revenue, was approximately $5.9 billion; management notes it does not use backlog as an internal metric. Deferred revenue ended at $4,842.2 million, of which $3.5 billion was current. The company also flags seasonality: net new ARR generation is typically weighted to the second half and particularly the fourth quarter, while operating margin is typically lower in the first half on payroll-tax step-ups and annual sales and marketing events.

Accounting-estimate benefit. The extension of the commission benefit period from four years to five, effective in fiscal 2027, reduced sales commission expense by $25.5 million in the quarter and $53.4 million in the six months.

Cash flow and capital. Operating cash flow for the six months was $1,121.2 million, up from $716.9 million, on net income of $51.3 million plus $1.0 billion of non-cash charges (including $674.6 million of stock-based compensation, $207.1 million of deferred contract acquisition cost amortization and $157.6 million of depreciation and amortization) and a $37.1 million working capital inflow helped by a $324.2 million decrease in receivables. For the quarter alone, operating cash flow was $530.3 million and free cash flow was $377.4 million; because the 10-Q's cash flow statement presents six-month columns only, and does not publish free cash flow at all, those two figures come from CrowdStrike's second-quarter fiscal 2027 earnings release, furnished as Exhibit 99.1 to the Form 8-K of August 26, 2026 (accession 0001535527-26-000029). For the six months, investing used $1,145.6 million, dominated by $881.4 million paid for business acquisitions net of cash acquired (Seraphic and SGNL), $222.0 million of property and equipment and $49.1 million of capitalized internal-use software. Financing used $111.9 million: $175.6 million of share repurchases and $24.6 million of distributions to non-controlling interests, against $86.6 million of employee stock purchase plan proceeds. Cash and cash equivalents stood at $5.0 billion at July 31, 2026 and accumulated deficit at $1.2 billion.

Under the repurchase program, authorized at $1.0 billion in June 2025 and increased by $500.0 million on April 6, 2026, CrowdStrike bought back 1.9 million shares for $175.6 million during the six months, none of it in the second quarter, leaving $1.3 billion of authorization available at July 31, 2026.

Commitments. Non-cancelable purchase commitments with terms beyond twelve months grew to $4.1 billion at July 31, 2026 from $2.8 billion at January 31, 2026, with $1.24 billion of that scheduled beyond fiscal 2031. Real estate obligations were $22.8 million due within twelve months and $59.9 million thereafter, and unfunded loan commitments under customer financing arrangements were approximately $69.7 million.

Pending acquisition, XM Cyber Ltd. In July 2026, within the quarter, the company signed a definitive agreement to acquire the technology assets of XM Cyber Ltd., a Schwarz Digits company known for attack path visualization and offensive simulation. At closing CrowdStrike expects to pay $145.0 million in a combination of cash and Class A common stock, plus additional Class A shares in an amount to be determined on the closing date. The transaction is expected to close in the second half of fiscal 2027, subject to customary closing conditions and regulatory requirements, and had not closed as of the filing. It is disclosed in Note 11, "Commitments and Contingencies," of the Form 10-Q.

Other items. The Strategic Plan announced May 6, 2025, a reduction of roughly 500 roles, or 5% of the global workforce, was complete as of July 31, 2026, with no charges in fiscal 2027 (the prior-year quarter carried $38.4 million) and no remaining liability. The revision of the stock-compensation error reduced the previously reported second-quarter fiscal 2026 net loss attributable to CrowdStrike from $77.7 million to $70.2 million, and the six-month figure from $187.9 million to $174.4 million; additional paid-in capital and accumulated deficit at July 31, 2025 each moved by $29.0 million, with no change to total stockholders' equity. Management concluded disclosure controls and internal control over financial reporting were effective as of July 31, 2026, with no material changes during the period.

Subsequent events

The Form 10-Q for the quarter ended July 31, 2026 (accession 0001535527-26-000031) carries no standalone subsequent-events note; post-period developments are disclosed within Note 11, "Commitments and Contingencies," and repeated in Item 2.

• Additional purchase commitments of $2.9 billion. Subsequent to July 31, 2026, CrowdStrike committed to a further $2.9 billion of non-cancelable purchase obligations spanning fiscal 2027 through fiscal 2034. These are excluded from the $4.1 billion commitment table as of July 31, 2026 and will appear in it in future periods, an increase of roughly 70% over the disclosed balance.

For completeness, the fiscal 2026 Form 10-K (accession 0001535527-26-000010) reported in its own subsequent-events note that between February 1 and March 4, 2026 the company repurchased 143,801 shares of Class A common stock at an average price of $351.97 per share, figures stated before the July 2026 four-for-one split, for $50.6 million, leaving approximately $949.4 million of repurchase authorization at that date, and that its agreements to acquire SGNL.AI, Inc. and Seraphic Algorithms Ltd. closed on February 20, 2026 and February 3, 2026 respectively. Both transactions are reported as completed business combinations in the July 31, 2026 Form 10-Q.