What changed in this filing

/stocks — the workspaceLOADING

Item 1. Business

2025-03-10 compared with 2024-03-07 · 113 added, 130 removed, 423 unchanged (36% of the section changed)

Founded in 2011, CrowdStrike reinvented cybersecurity for the cloud era and transformed the way cybersecurity is delivered and experienced by customers.

Founded in 2011, CrowdStrike reinvented cybersecurity for the cloud and artificial intelligence (“AI”) era and transformed the way cybersecurity is delivered and experienced by customers.

When we started CrowdStrike, cyberattackers had an asymmetric advantage over legacy cybersecurity products that could not keep pace with rapid changes in adversary tactics.

We took a fundamentally different approach to solve this problem with the AI-native CrowdStrike Falcon XDR platform – the first, true, cloud-native platform built with artificial intelligence (“AI”) at the core, capable of harnessing vast amounts of security and enterprise data to deliver highly modular solutions through a single lightweight agent.

We took a fundamentally different approach to solve this problem with the AI-native CrowdStrike Falcon cybersecurity platform – the first, true, cloud-native platform built with AI at the core, capable of harnessing vast amounts of security and enterprise data to deliver highly modular solutions through a single lightweight agent.

The CrowdStrike Falcon platform is designed to be the definitive platform for cybersecurity consolidation, purpose-built to stop breaches.

1 unchanged sentence

We use this to train our AI to detect and prevent threats and drive workflow automation to give security teams machine speed advantage to stop adversaries.

By consolidating and replacing legacy point products and fragmented platforms across key areas of security and IT, the Falcon platform delivers a unified, modern approach that increases capability while reducing complexity and cost – all while stopping breaches.

By consolidating and replacing legacy point products and fragmented platforms across key areas of security and IT, the Falcon platform delivers a unified, modern approach that increases capabilities, reduces complexity, and lowers costs – all while stopping breaches.

We believe our approach has defined a new category called the Security Cloud, which has the power to transform the cybersecurity industry the same way the cloud has transformed the customer relationship management, human resources, and service management industries.

4 unchanged sentences

This approach has made CrowdStrike an industry leader in protection across endpoints, cloud workloads, identity and data (capable of protecting workloads across on-premise, virtualized, and cloud-based environments running on a variety of endpoints such as desktops, laptops, servers, virtual machines, cloud workloads, cloud containers, mobile, and IoT devices) and enables us to rapidly scale this best in class protection across new and emerging areas of enterprise risk.

Today, we offer 27 cloud modules on our Falcon platform via a SaaS subscription-based model that spans multiple large markets, including corporate endpoint and cloud workload security, managed security services, security and vulnerability management, IT operations management, identity protection, next-generation SIEM and log management, threat intelligence services, data protection, Security Orchestration, Automation and Response (“SOAR”) and AI powered workflow automation, and securing generative AI workloads.

Today, we offer 29 cloud modules on our Falcon platform via a SaaS subscription-based model that spans multiple large markets, including corporate endpoint and cloud workload security, managed security services, security and vulnerability management, IT operations management, identity protection, next-generation security information and event management (“SIEM”) and log management, threat intelligence services, data protection, SaaS security posture management, Security Orchestration, Automation and Response (“SOAR”) and AI powered workflow automation, and securing generative AI workloads.

Our Falcon platform is composed of tightly integrated, proprietary technologies that enable us to deliver superior protection and performance, while reducing complexity for our customers.

71 unchanged sentences

This does not prevent fileless attacks from exploiting legitimate whitelisted applications, compromising the integrity of the whitelisting product.

• The Limitations of Legacy SIEMs :

Originally designed years or even decades ago for a vastly different cybersecurity landscape, legacy SIEM solutions struggle to meet the demands of modern security operations.

These systems lack the scalability to handle today’s data volumes and adversary speed, while escalating costs make centralized data collection and retention increasingly difficult.

Poor scalability contributes to siloed, disjointed SOC architectures, forcing analysts to manually correlate data across multiple consoles, diverting time and resources from threat detection and response.

Complex onboarding processes further delay time-to-value, requiring significant effort to integrate new data sources.

As a result, legacy SIEMs hinder operational efficiency, limit visibility, and increase the risk of data breaches.

Built for This Moment and the Future

7 unchanged sentences

As more high fidelity data is fed into our Security Cloud, our AI models continue to train and improve, increasing the overall efficacy of the Falcon platform.

This unique data layer is powered and turned into action by three complementary graph databases (Threat Graph, Asset Graph, and Intel Graph) to put threats, adversaries, and assets into the context needed to make the rapid, informed decisions that stop breaches.

This unique data layer is powered and turned into action by three complementary graph databases (Threat Graph, Intel Graph, and Asset Graph) to put threats, adversaries, and assets into the context needed to make the rapid, informed decisions that stop breaches.

• Driving AI Innovation and Security :

We are a pioneer in leveraging AI to transform cybersecurity, combining AI for cybersecurity with cybersecurity for AI.

The Falcon platform’s AI-native architecture uses advanced models and the power of the Security Cloud to detect and stop breaches, while innovations like Charlotte AI represent a significant advancement in agentic AI—delivering autonomous security decisions within customer-defined guardrails to triage detections, reduce noise, and accelerate response.

Charlotte AI, powered by high-fidelity data and continual training, reduces routine investigation workloads, bridging critical skills gaps for stretched teams.

As AI continues to evolve, CrowdStrike is driving the next generation of AI-powered agentic cybersecurity—enabling AI to act independently while ensuring human oversight and control.

Beyond delivering AI-driven protection, we also secure the AI systems organizations depend on, helping customers safeguard generative AI applications, protect sensitive data, and mitigate the risks posed by AI misconfigurations and vulnerabilities.

By advancing AI innovation and security, we empower organizations to stay ahead of adversaries, increase operational efficiency, and securely embrace the AI-driven future.

• High Efficacy, Low False Positives :

The vast telemetry of the Security Cloud and the best practices employed in continually training our AI models results in industry-leading efficacy rates and low false positives.

The vast telemetry of the Security Cloud and the best practices employed in continually training our AI models results in exceptionally high efficacy rates and low false positives, delivering proven performance in real-world scenarios.

• Consolidation of Siloed Products :

Integrating and maintaining numerous security products creates blind spots that attackers can exploit, is costly to maintain and negatively impacts user performance.

Our cloud-native platform approach gives customers a unified approach to address their most critical areas of risk seamlessly.

We empower customers to rapidly deploy and scale industry leading technologies across endpoint detection and response (“EDR”) and Extended Detection and Response (“XDR”), Identity Threat Protection, Threat Intelligence, Exposure Management, Cloud Security, Application Security Posture Management, Next-Generation SIEM and Modern Log Management, and IT Automation from a single platform.

Integrating and maintaining numerous security products creates blind spots that attackers can exploit, increases costs, and negatively impacts both end-user system performance and the experience of the security analyst.

Our cloud-native platform gives customers a unified approach to address their most critical areas of risk seamlessly.

We empower customers to rapidly deploy and scale industry leading technologies across Endpoint Security, Identity Protection, Cloud Security, Next-Gen SIEM and Modern Log Management, Data Protection, Exposure Management, IT Automation, ITSecOps and Risk, Threat Intelligence, and SaaS Security Posture Management from a single platform.

• Reducing Agent Bloat :

8 unchanged sentences

• Elite Security Teams as a Force Multiplier :

As adversaries continue to employ sophisticated malwareless attacks that exploit user credentials and identities, automation and autonomous security are no longer sufficient on their own.

Adversaries are relentlessly innovating new forms of sophisticated attacks, bypassing traditional malware to exploit user credentials and identities.

In this evolving landscape, automation and autonomous security are no longer sufficient on their own.

Stopping today’s sophisticated attacks requires a combination of powerful automation and elite threat hunting.

Falcon Complete provides a comprehensive monitoring, management, response, and remediation solution to our customers and is designed to bring enterprise level security to companies that may lack enterprise level resources.

CrowdStrike Falcon OverWatch, part of CrowdStrike Counter Adversary Operations, combines world-class human intelligence from our elite security experts with the power of the Falcon platform.

24 unchanged sentences

our lightweight agent and our Security Cloud.

Our cloud-delivered modules integrate seamlessly within the Falcon platform to provide customers with a unified set of cloud-delivered technologies across EDR and XDR, Identity Threat Detection and Response Protection, Threat Intelligence, Exposure ManagementITSecOps and Risk, Cloud Security, Application Security Posture Management, IT Automation, as well as Next-Generation SIEM and Modern Log Management.

Our cloud-delivered modules integrate seamlessly within the Falcon platform to provide customers with a unified set of cloud-delivered technologies across Endpoint Security, Identity Protection, Cloud Security, Next-Gen SIEM and Modern Log Management, Data Protection, Exposure Management, IT Automation, ITSecOps and Risk, Threat Intelligence, and SaaS Security Posture Management.

The Falcon platform also encompasses recently acquired technologies where integration may be ongoing.

We can rapidly and cost effectively develop and deliver additional cloud modules on our Falcon platform without the need for additional agents, and are expanding options for our new customers to test modules on a trial basis as well as offering in-application trials for existing customers.

Our expanding set of open APIs and the Foundry app development platform will allow customers and partners to build their own capabilities on top of the Falcon platform.

Our expanding set of open APIs and the Foundry app development platform allow customers and partners to build their own capabilities on top of the Falcon platform.

Unifying data from our modules and customers into a single cloud infrastructure gives us significant advantages in developing and delivering innovative AI capabilities to detect and prevent threats, as well as improving user productivity and efficiency through cutting-edge generative AI systems such as our Charlotte AI module.

CrowdStrike Falcon Platform:

Our Cloud Delivered Modules

Our cloud delivered modules integrate seamlessly with the Falcon platform and our single agent to provide functionality in the endpoint security, security and IT operations (including vulnerability management), and threat intelligence markets.

Today, our modules include:

Unified Security Across Major Categories

Our cloud-native Falcon platform integrates seamlessly with our single lightweight agent to deliver robust functionality across key areas of cybersecurity and IT operations.

The Falcon platform delivers 29 cloud modules, enabling customers to address their most critical areas of risk with speed, confidence, and visibility through one unified platform.

Key areas of focus include:

Endpoint Security :

The Falcon platform offers next-generation antivirus, endpoint detection and response (“EDR”) and extended detection and response (“XDR”) to defend against malware, fileless attacks, and advanced threats.

With cross-domain telemetry and unified incident management, we enable organizations to detect, investigate, and respond to threats across the security stack efficiently and effectively.

Cloud Security :

• Falcon Cloud Workload Protection—Cloud Runtime Protection.

Falcon Cloud Workload Protection provides comprehensive breach protection at run-time for workload and container events and instance metadata, enabling faster and more accurate detection, response, threat hunting and investigation, and enabling customers to run and deploy secure applications with speed and confidence.

• Falcon Horizon—Cloud Security Posture Management .

Falcon Horizon delivers unified visibility, threat detection, and continuous monitoring and compliance for multi-cloud environments.

Falcon Horizon automates the process to detect cloud related misconfigurations, vulnerabilities, and identity-based risks, providing step-by-step remediation and giving developers guardrails to avoid costly mistakes.

Horizon also integrates with modern continuous integration/continuous delivery developer pipelines, with capabilities such as infrastructure as code scanning and container image assessment to shift secure design further left.

• Bionic, a CrowdStrike company—Application Security Posture Management.

Through our acquisition of Bionic, a pioneer of ASPM, we have further extended our capabilities in securing and providing cloud native applications.

Bionic gives security teams and developers visibility to their cloud applications, including interactions between cloud and on-premise microservices, third party dependencies, data flows, APIs and Software Bill of Materials— all without requiring access to source code.

This information empowers teams with an understanding of their risk landscape in the cloud, and is used together with Cloud Security Posture Management data to enhance context and prioritize remediation of misconfigurations.

Endpoint Security and XDR

• Falcon Prevent—Next-Generation Antivirus .

Falcon Prevent provides next-generation antivirus capabilities to customers, delivering comprehensive protection to defend customers against both malware and fileless attacks.

• Falcon Insight XDR—Endpoint Detection and Response .

With industry-leading EDR at its core, Falcon Insight XDR synthesizes cross-domain telemetry and activates extended triage and response capabilities with one unified, threat-centric incident workbench to unlock cross-domain detections, investigations and responses across the security stack.

• Falcon Insight XDR for IoT—Endpoint Detection and Response for Extended Internet of Things (XIoT) devices .

Falcon Insight XDR for IoT brings CrowdStrike’s renowned protection, detection and response to IoT, OT, medical devices, Industrial IoT, and connected devices across the enterprise.

• Falcon Device Control—Device Control .

Falcon Device Control provides administrators with a high degree of visibility and granular control of USB peripheral devices.

• Falcon Firewall Management—Host Firewall Management .

Falcon Firewall Management provides centralized management of the firewall capabilities native to the host operating system, allowing customers to create, enforce, and maintain host firewall policies.

• Falcon Data Protection—Data Loss Prevention .

Falcon Data Protection stops adversaries and malicious insiders from stealing sensitive information with automated policy enforcement that follows content, even as it moves across files.

CrowdStrike provides robust cloud security solutions to protect workloads, containers, and applications in real time.

Our offerings include runtime protection, cloud security posture management, application security posture management and more to secure multi-cloud environments and enhance the resilience of cloud-native applications.

By integrating seamlessly into developer workflows, we empower teams to shift security left and mitigate vulnerabilities before deployment.

Exposure Management :

• Falcon Exposure Management—Exposure Management .

Falcon Exposure Management unifies real-time security and IT data sets from Falcon Discover (Asset, Account and App Discovery), Falcon Spotlight (Vulnerability Management), and Falcon Surface (External Attack Surface Management), as well as CrowdStrike’s renowned threat intelligence, endpoint, and XDR telemetry, to predict attack paths and guide risk mitigation actions that stop breaches before they happen.

• Falcon Discover—IT Hygiene and IoT .

Falcon Discover identifies managed, unmanaged, and rogue systems as well as applications and their usage in our customers’ networks, and monitors the use of privileged user accounts anywhere in a customer’s environments.

The module also enables use cases outside of security, such as application license management, Amazon Web Services (“AWS”) spend analysis, and asset inventorying.

New enhancements in Falcon Discover for IoT minimize risk for IoT/OT devices with comprehensive asset visibility, monitoring, and security hygiene.

• Falcon Spotlight—Vulnerability Management .

Falcon Spotlight identifies vulnerabilities in real time that exist across our customer endpoints.

The module does not depend on scanning systems for vulnerabilities, a process that can often take days or weeks for an enterprise, and instead leverages data already collected by our agent to provide instant and accurate real-time visibility into an enterprise’s vulnerability exposure.

• Falcon Surface—External Attack Surface Management .

Falcon Surface allows customers to discover and map all internet-facing assets to shut down potential exposures with guided mitigation plans to reduce the attack surface and organizational risk.

• Falcon Forensics—Forensic Data for Analysis of Cybersecurity Incidents .

Based on years of incident response experience and forensics investigative services from CrowdStrike’s leading services team, Falcon Forensics streamlines the collection of point-in-time and historic forensic triage data for robust analysis of cybersecurity incidents, threat hunting as well as enabling responders to quickly identify relevant evidence of an intrusion with preset dashboards, allowing for rapid investigation, triage and remediation.

• Falcon FileVantage—File Integrity Monitoring .

Falcon FileVantage reduces compliance complexity by building in the services an additional agent would normally provide, including being able to monitor any file or registry key for changes on the protected systems.

This in turn provides alerts and reports to help meet various compliance requirements imposed by the Payment Card Industry, the Center for Internet Security Controls, and Sarbanes-Oxley.

Managed Services

• Falcon Complete—Turnkey Security Solution .

Falcon Complete provides comprehensive monitoring, management, response, and remediation solutions to our customers and is designed to bring enterprise level security to companies that may lack enterprise level resources.

Falcon Complete offers a growing number of managed services that extend across Falcon platform modules, including Falcon Cloud Workload Protection Complete, Falcon Identity Threat Protection Complete, and Falcon Complete LogScale, augmenting core Falcon Complete Managed Detection and Response capabilities with managed cloud workload protection, identity threat protection, threat hunting, Log management and Next-Gen SIEM.

Falcon Complete is backed by an underwritten limited warranty policy for breaches.

CrowdStrike’s exposure management solutions unify data from multiple sources, including IT hygiene, vulnerability management, and external attack surface management.

These capabilities allow organizations to predict attack paths, prioritize remediation efforts, and proactively reduce their risk exposure.

Real-time insights and guided actions empower customers to address vulnerabilities before they can be exploited.

Managed Services Subscription :

Falcon Complete Next-Gen Managed Detection and Response (“MDR”) delivers a comprehensive managed security service subscription that combines 24/7 expert monitoring, investigation, response, and remediation to stop breaches across the entire attack lifecycle.

Delivered by CrowdStrike’s team of security experts and powered by the AI-native Falcon platform, it combines industry-leading endpoint protection and extends managed protection across cloud security, identity protection, asset visibility, and Next-Gen SIEM, with 24/7 managed threat hunting from Falcon Adversary OverWatch for a full-stack MDR service.

Falcon Complete Next-Gen MDR is also backed by an underwritten limited warranty policy, underscoring our commitment to breach protection and customer confidence.

Counter Adversary Operations :

• Falcon OverWatch—Threat Hunting .

Falcon OverWatch is a threat hunting solution that consists of an elite team of dedicated security experts who work with the power of Threat Graph to proactively hunt on telemetry collected in the platform 24/7/365 to identify novel threats and attacks that might otherwise go unnoticed by security teams and the tools they use to monitor and detect advancing new threats in support of our customers.

• Falcon Intelligence—Threat Intelligence .

Falcon Intelligence integrates threat intelligence into endpoint protection and provides automated analysis of detected threats to provide insight into the capabilities, motivation and attribution of attacks.

In addition to the standard Falcon Intelligence offering, we also offer premium options that include global threat research and reporting from our team of intelligence analysts.

• Falcon Search Engine—Malware Search .

Falcon Search Engine enables customers to search in real time for malware collected in our Falcon platform and indexed by our proprietary binary data indexing technology.

• Falcon Sandbox—Malware Analysis .

Falcon Sandbox allows our customers to analyze unknown files for malicious behavior by detonating them safely in virtual machines.

• Falcon Intelligence Recon—Situational Awareness .

Falcon Intelligence Recon allows our customers to identify and mitigate digital risks on the hidden areas of the clear, deep and dark web.

These risks include, but are not limited to, digital fraud, data theft exposure, social media impersonations.

CrowdStrike’s Counter Adversary Operations include proactive threat hunting and intelligence capabilities.

These solutions leverage the insights of elite security experts and the power of Threat Graph to identify and mitigate advanced threats, providing customers with actionable intelligence to strengthen their defenses.

Identity Protection :

• Falcon Identity Threat Protection—Identity Threat Detection and Response .

Falcon Identity Threat Protection stops identity-based attacks with real-time threat prevention and IT policy enforcement using identity, behavioral and risk analytics.

• Falcon Identity Threat Detection—Identity Threat Detection and Response .

Falcon Identity Threat Detection provides visibility for identity-based attacks and anomalies, comparing live traffic against behavior baselines and rules to detect attacks and lateral movement.

Identity protection solutions from CrowdStrike safeguard against identity-based attacks with real-time detection, behavioral analytics, and policy enforcement.

These capabilities provide visibility into anomalies and lateral movement, enabling organizations to defend their most critical assets.

Next-Generation SIEM and Log Management :

• Falcon LogScale Next-Gen SIEM—Security Information & Event Management, Log Management .

Falcon LogScale Next-Gen SIEM is a complete SOC platform designed to stop breaches with AI-native detection, investigation and response, as well as delivering high-performance log management for any data source.

IT Automation

• Falcon for IT—IT Automation .

Falcon for IT converges security and IT operations with a single agent and unified platform.

Teams can use native generative AI workflows to get complete visibility into any asset to understand the asset’s state and take quick actions across the Enterprise to rapidly resolve issues.

CrowdStrike’s Next-Gen SIEM and log management solutions deliver AI-driven detection, investigation, and response capabilities, alongside high-performance log management for any data source.

This comprehensive approach enhances security operations and enables organizations to respond to threats with speed and precision.

Generative AI :

• Charlotte AI—Generative AI .

Charlotte AI is a conversational assistant for security operations that can turn hours of work into minutes or seconds by harnessing the power of generative AI and natural language processing to help security analysts make faster, more accurate decisions with simple, plain language questions.

Innovations like Charlotte AI leverage generative AI and natural language processing to automate time-intensive tasks, enabling security analysts to work more efficiently.

Charlotte AI transforms hours of routine investigation into minutes, addressing critical skills gaps and enhancing operational efficiency.

Powered by the Falcon platform’s unique data advantage, Charlotte continues to evolve, delivering time savings and workflow automation to meet the demands of modern security operations.

IT Automation :

Falcon for IT converges security and IT operations, providing visibility into enterprise assets and enabling rapid resolution of issues.

With generative AI workflows and automation capabilities, Falcon for IT empowers organizations to streamline IT processes, resolve operational challenges quickly, and maintain a secure and efficient infrastructure.

SaaS Security :

Adaptive Shield, a CrowdStrike company, delivers continuous monitoring and proactive risk mitigation for business-critical SaaS applications.

With context and visibility, organizations can address risks from users, devices, and non-human identities.

Data Protection :

Falcon Data Protection prevents data theft by combining content with context, providing real-time visibility into sensitive data movement across endpoints, web applications, cloud drives, and USB storage devices.

This modern approach empowers organizations to secure enterprise data without disrupting productivity, addressing the unique risks of the GenAI era.

Application Development :

• Falcon Foundry —Application Development .

The Falcon Foundry no-code application development platform allows customers to quickly create their own apps to solve custom security and IT use-cases with full access to CrowdStrike’s data, threat intelligence, automation, and cloud-scale infrastructure.

5 unchanged sentences

Given the limitations of existing legacy and other endpoint security products, many organizations are replacing their existing legacy and other endpoint security products with our Falcon platform.

We grew our subscription customer base by 5,981 customers from 23,019 at January 31, 2023, to 29,000 at January 31, 2024, representing a 26% increase.

We will continue to invest in customer acquisition programs, including our channel partnerships and new programs, like our free trial program of Falcon Prevent that is easily downloaded from our website and AWS Marketplace.

25 unchanged sentences

As a result, the Cybersecurity and Infrastructure Security Agency has leveraged a significant investment in our platform to support modernization efforts within the Federal Civilian Executive Branch.

Further evidence of our progress into these critical markets is demonstrated by virtue of fact that 25 of the 50 U.S.

Further evidence of our progress into these critical markets is demonstrated by virtue of the fact that 25 of the 50 U.S.

states have standardized on CrowdStrike’s platform at the enterprise level.

5 unchanged sentences

We designed our architecture to be open, interoperable, and highly extensible.

We launched the CrowdStrike Store, the first open cloud-based application PaaS for cybersecurity, which allows customers to purchase CrowdStrike products and provides an ecosystem of trusted partners and applications for our customers to choose from.

We launched the CrowdStrike Marketplace, the first open cloud-based application PaaS for cybersecurity, which allows customers to purchase CrowdStrike products and provides an ecosystem of trusted partners and applications for our customers to choose from.

We plan to continue investing in the CrowdStrike Store to empower our partners by making it easier to build applications and to enable our customers to more easily discover, try, and purchase additional cloud modules from both trusted partners and us.

We have experienced significant growth, with revenue increasing from $2.2 billion in fiscal 2023 to $3.1 billion in fiscal 2024, representing year-over-year growth of 36%, and from $1.5 billion in fiscal 2022 to $2.2 billion in fiscal 2023, representing year-over-year growth of 54%.

Subscription revenue grew from $2.1 billion in fiscal 2023 to $2.9 billion in fiscal 2024, a 36% increase, and from $1.4 billion in fiscal 2022 to $2.1 billion in fiscal 2023, a 55% increase.

Our Annual Recurring Revenue (“ARR”) has grown from $2.6 billion as of January 31, 2023 to $3.4 billion as of January 31, 2024, a 34% increase, and from $1.7 billion as of January 31, 2022 to $2.6 billion as of January 31, 2023, a 48% increase.

We had net income of $89.3 million in fiscal 2024, and net losses of $183.2 million and $234.8 million in fiscal 2023 and fiscal 2022, respectively.

We have designed an innovative architecture from the ground up to overcome the limitations of existing security products and deliver cloud-based solutions.

50 unchanged sentences

technical assessment and strategic advisory services;

as well as training to assist organizations that have experienced a breach or who are assessing their security posture and ability to respond to breaches.

Next-Gen SEIM consulting;

platform deployment and operational services;

as well as training and certifications to assist organizations that have experienced a breach or who are assessing their security posture and ability to respond to breaches.

• Incident Response, Forensics, and Recovery Services.

Our incident response services typically begin by deploying our lightweight agent to a customer’s endpoints or cloud workloads to provide comprehensive visibility in order to determine if an attacker is currently in the environment, what assets have been compromised, and how much damage has been done.

Our incident response services typically begin by deploying our lightweight agent to a customer’s endpoints or cloud workloads to provide visibility in order to determine if an attacker is currently in the environment, what assets have been compromised, and how much damage has been done.

In addition to enriching the response team’s understanding of the attack, the full suite of Falcon platform’s next-gen prevention capabilities, cloud security, exposure management, and identity protection offerings can also be leveraged to help to slow down and prevent an active attacker from moving at-will throughout a compromised customer’s environment, increasing the risk and potential damage to the customer.

6 unchanged sentences

We also advise customers on readiness and preparation through the execution of table-top exercises, live fire exercises, red team/blue team assessments, and advanced adversary emulation exercises.

These services are designed to evaluate our customers’ security profile so they can identify areas of vulnerability, secure their network, and improve their response if their defenses are breached.

We have also added AI red-teaming to help organizations understand where these models can have risk, where they can be exploited and where to take corrective security actions.

All of these services are designed to evaluate our customers’ security profile so they can identify areas of vulnerability, secure their network, and improve their response if their defenses are breached.

Our services also align to executive and board level cybersecurity training and awareness, including by helping public companies more confidently comply with public disclosure requirements relating to assessing, identifying and managing material cybersecurity risks, and reporting material cyber incidents.

Our programs are designed to help organizations effectively achieve cybersecurity risk reduction objectives and to maximize investments.

• NextGen SIEM Professional Services.

Our NG-SIEM professional services offer a comprehensive suite of deployment packages and ongoing support options designed to help organizations seamlessly implement and optimize the Falcon NG-SIEM platform.

Our Essentials, Advanced, and Premium Deployment Packages provide standardized implementations that prioritize data ingestion aligned with critical use cases from the MITRE ATT&CK framework, ensuring maximum impact in detecting and responding to threats.

For customers requiring deeper, hands-on expertise, we offer Resident Engineer Services in flexible durations of 3, 6, or 12 months supporting both NG-SIEM as well as LogScale.

These experts embed directly with customer teams to provide tailored guidance, ongoing optimization, and support for evolving security needs.

Our services are designed to accelerate time-to-value, enhance security posture, and ensure the long-term success of SIEM deployments within any organization.

• Platform Deployment and Operational Services.

Our deployment and operational services are designed to help customers maximize the value of their investment in the CrowdStrike Falcon platform.

These services provide seamless deployment of Falcon modules across endpoint, cloud, identity, Next-Gen SIEM and many other modules ensuring rapid time-to-value and alignment to CrowdStrike’s recommended security configurations to prevent breaches.

Our integration services focus on enabling customers to align Falcon modules with their existing security ecosystems, leveraging our APIs and Falcon Fusion SOAR automation for improved operational efficiency.

Additionally, our operational services provide tailored guidance and best practices to optimize platform performance, streamline workflows, and address specific cybersecurity challenges.

The goal of these services are to empower organizations to fully operationalize CrowdStrike’s solutions, enhance security posture, and achieve measurable outcomes in cyber risk reduction with the Falcon platform.

• CrowdStrike University Training and Certification.

We offer training and certification services to customers and partners on CrowdStrike technologies and cybersecurity topics to facilitate the adoption of CrowdStrike and to broaden and deepen their skills.

1 unchanged sentence

CrowdStrike currently offers proctored exam certifications through industry leading training partner Pearson Vue for its CrowdStrike Certified Falcon Administrator, CrowdStrike Certified Falcon Responder, CrowdStrike Certified Falcon Hunter, CrowdStrike Certified Cloud Specialist, and CrowdStrike Certified Identity Specialist programs.

We provide comprehensive training and certification programs to empower customers and partners with the knowledge and skills needed to maximize the value of CrowdStrike technologies and strengthen their cybersecurity expertise.

CrowdStrike University provides a centralized, online platform for accessing a wide range of training options including on-demand e-learning, instructor-led training, and certification preparation.

Our offerings are designed to accommodate varying levels of proficiency from foundational concepts to advanced skills in threat detection, incident response, cloud security, intelligence and other proactive security operations aligned to the Falcon platform.

Our CrowdStrike Certified Falcon Administrator, Responder, Hunter, Cloud Specialist, and Identity Specialist certifications validate the skillsets of our customers and partners to ensure they are properly equipped to operate the Falcon platform.

Our training offerings provide a structured learning path to accelerate CrowdStrike adoption, drive operational success, and equip professionals with validated expertise in modern cybersecurity practices.

Some of the world’s largest enterprises, government organizations, and high-profile brands trust us to protect their business.

As of January 31, 2024, we had 29,000 subscription customers worldwide.

As of January 31, 2025, we are trusted by more than 74,000 organizations, including our end customers and those of our Managed Security Service Providers (“MSSP”), worldwide.

Historically, we and our channel partners have primarily sold to large organizations, but have increasingly focused on selling to small and medium-sized businesses, particularly through our trial-to-pay model.

11 unchanged sentences

We also engage in paid media, web marketing, industry and trade conferences (including our annual Fal.Con conference), analyst engagements, whitepaper development, demand generation via digital and web, and targeted displacement campaigns.

We employ a wide range of digital programs, including search engine marketing, online and social media initiatives, and content syndication to increase traffic to our website and encourage prospective customers to sign up for a

free trial of the Falcon platform.

Additionally, we engage in joint marketing activities with our channel and technology alliance partners.

Partnership Ecosystem

We work with a number of technology alliance partners to design go-to-market strategies that combine our platform with products or services provided by our technology alliance partners.

We operate a partner-first go-to-market strategy to land new logos and expand in existing accounts.

We partner with a diverse set of partners.

We work with a wide array of go-to-market partners in our technology alliance partners to design go-to-market strategies that combine our platform with products or services provided by our technology alliance partners.

These partner integrations deliver more secure solutions and an improved end user experience to their customers.

28 unchanged sentences

• professional service providers who offer cybersecurity response services;

• legacy SIEM vendors who offer a range of log management and security capabilities.

We compete on the basis of a number of factors, including but not limited to our:

6 unchanged sentences

• customer support, incident response, and proactive services;

• ability to rapidly ingest and search both first and third-party data.

Although certain of our competitors enjoy greater resources, recognition, deeper customer relationships, larger existing customer bases, or more mature intellectual property portfolios, we believe that we compete favorably with respect to these factors and that we are well positioned as a leading provider of endpoint and workload security solutions.

15 unchanged sentences

We enter into both single and multi-year subscription contracts for our solutions.

We generally invoice our customers at contract signing prior to commencement of subscription period.

Until such time as these amounts are invoiced, they are not recorded in deferred revenue or elsewhere in our consolidated financial statements, and are considered by us to be backlog.

We generally invoice our subscription customers at the beginning of the subscription term, or in some instances, such as in multi-year arrangements, in installments.

Until we have the contractual right to invoice, these contract amounts are classified as backlog.

They are not recorded in deferred revenue or elsewhere in our consolidated financial statements.

As of January 31, 2025, we had backlog of approximately $2.8 billion.

18 unchanged sentences

We have created a high-performance talent model that pinpoints the top traits and qualities we look for in talent and that may already exist within the organization, then consistently use that model to develop interview questions, screen candidates, and make hiring decisions.

We continue to market to and recruit technical talent in diverse communities by engaging as a high-level sponsor or partner of professional conferences and organizations such as Grace Hopper, Women in Cyber Security, AfroTech, American Corporate Partners, American Indian Science and Engineering Society, Out in Tech, and others.

To attract high performers, we have a team dedicated to building and promoting our employer brand focused on creating a strong employer value proposition:

CrowdStrike has always been a mission-focused organization.

We hire and develop people based on their merits and alignment to our mission of stopping breaches.

Our work requires us to consider problems from all angles.

We believe that an open, collaborative environment strengthens our ability to build strong teams, serve our customers and drive innovation.

To attract high performers, we have a team dedicated to building and promoting our employer brand focused on creating a strong employer value proposition, which includes:

• Competitive pay and benefits

6 unchanged sentences

We invest resources to develop the talent needed to remain a leader in cybersecurity.

We deliver numerous training opportunities, provide rotational assignment opportunities, have expanded our focus on continuous learning and development, and implemented new methodologies to manage performance, provide feedback, and develop talent.

We deliver numerous training opportunities, provide rotational assignment opportunities, have expanded our focus on continuous learning and development, and ensure we manage performance, provide feedback, and develop talent.

Distributed Workforce

7 unchanged sentences

We continue to find ways to bring our employees together to build community and camaraderie.

Diversity, Equity, and Inclusion

A diverse, equitable, and inclusive culture fuels creative excellence and innovation, helping people achieve their best work.

We continue to strive to advance our efforts to build an equitable workplace and formally establish it as part of CrowdStrike’s mission and organization.

We strive to create an environment where everyone feels seen, heard, and empowered to succeed.

Through employee resource groups, internal training and development programs, allyship training, speaker series, and networking opportunities, we are empowered to come together to create a workplace that reflects the diverse communities around us.

Setting a diverse workforce up for success requires a commitment to the practices of inclusion in everything we do.

What a practice of inclusion means to us is that we are creating an environment and providing tools that help our people understand how to actively involve every employee’s ideas, knowledge, perspectives, approaches, and styles and how to engage all of our people via a mindful approach to organizational design and experiences that feels accessible and relevant to everyone.

Employee Resource Groups

Employee Resource Groups are an integral component of our commitment to foster community, promote a sense of belonging, facilitate organizational change, and drive a greater understanding of the diversity of perspectives we have across CrowdStrike.

In addition to the Embracing Equity majority ally group, we have nine official Employee Resource Groups and Affiliate Groups, and we anticipate additional groups in the future:

• Women of CrowdStrike

• Veterans of CrowdStrike

• Pride Team (LGBTQ)

• Green Team (Sustainability)

• Team BELIEVE (Black employees)

• AbilityStrikers (Cognitive and physical disabilities)

• Communidad (Latine and Hispanic employees)

• Embracing Equity

• Mazel (Jewish community)

Our Employee Resource Groups are employee led, self-directed, voluntary groups that align with our organizational mission, values, and goals that offer opportunities for groups to network, recommend business initiatives and process improvements, increase organizational awareness and allyship, and create opportunities for talent development.

Employees who join an Employee Resource Group can:

• Network and build community with people with similar interests, life circumstances or backgrounds.

• Serve as champions for inclusion and belonging at CrowdStrike and help identify opportunities for us to become more inclusive.

• Identify initiatives and best practices throughout the organization and make recommendations to the business to help spark and facilitate change.

Our People and Core Values

At CrowdStrike, we embrace the mantra of “One Team.

One Fight.” Our global team is passionate about working together toward our mission to stop breaches, knowing they will be fully included, supported and valued along the way.

We are Fanatical About the Customer, Relentlessly Focused on Innovation and believe that our Limitless Passion drives Unlimited Potential for every CrowdStriker.

Our Core Values sum up our culture.

We provide the support and resources needed to enable people to do their best work.

Information about our Executive Officers

37 unchanged sentences

Since November 2021, Mr.

Henry has served as a director of ShoulderUp Technology Acquisition Corp., a blank check company that completed its initial public offering in November 2021.

Henry also serves on the board of directors of CLEAR, a biometric travel document verification company, and Global Cyber Alliance, a nonprofit organization dedicated to making the Internet a safer place by reducing cyber risk.

Henry has served as a director of ShoulderUp Technology Acquisition Corp., a blank check company that completed its initial public offering in

November 2021.

Henry also serves on the board of directors of CLEAR, a technology identity company, and served on the board of Global Cyber Alliance, a nonprofit organization dedicated to reducing cyber risk, from 2015 to December 2024.

Additionally, Mr.

25 unchanged sentences

Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.

What changed 10-K

Item 1. Business