Cloud-native cybersecurity leader, Falcon platform operator, and the company behind the largest IT outage in history.
CrowdStrike Holdings, Inc. is an American cybersecurity technology company founded in 2011 by George Kurtz, Dmitri Alperovitch, and Gregg Marston. The company went public on the Nasdaq in June 2019 and joined the S&P 500 index in June 2024.
CrowdStrike provides cloud-delivered endpoint security, threat intelligence, and incident response services. Its flagship product, the CrowdStrike Falcon platform, is deployed across thousands of organizations worldwide, including Fortune 500 companies and government agencies.
The company has been involved in investigating high-profile cyberattacks, including the 2014 Sony Pictures hack, the 2015–16 DNC cyberattacks, and the 2016 DNC email leak. CrowdStrike has also tracked Chinese state-sponsored groups like PLA Unit 61486 and Russia-linked Energetic Bear.
CrowdStrike Falcon is the company's cloud-native endpoint detection and response (EDR) platform, first launched in June 2013. It operates at the kernel level on endpoint devices, providing real-time threat detection, prevention, and response.
In February 2026, CrowdStrike announced the Falcon platform is now available on the Microsoft Marketplace, deepening its enterprise distribution channel. The company also partnered with VAST Data for AI lifecycle security.
CrowdStrike reported its FY2026 Q4 and full-year results on March 3, 2026. The company has demonstrated strong revenue growth while navigating the fallout from the July 2024 outage.
| Year | Revenue | Notes |
|---|---|---|
| 2017 | ~$100M | Unicorn valuation ($1B+) |
| 2019 | ~$250M | IPO year (Nasdaq) |
| FY2024 | ~$3.06B | Pre-outage fiscal year |
| FY2025 | $3.95B | +29% YoY despite outage |
| FY2026 | TBD | Q4 reported March 3, 2026 |
On July 19, 2024, CrowdStrike distributed a faulty configuration update for its Falcon sensor software running on Windows PCs and servers. The result was the largest IT outage in history.
The faulty update was pushed at 04:09 UTC and reverted at 05:27 UTC — just 78 minutes. However, because affected machines required manual intervention (booting into Safe Mode and deleting the faulty file), recovery took days to weeks for many organizations. macOS and Linux systems were unaffected, though a similar issue had impacted CrowdStrike's Linux distributions in April 2024.
The July 2024 outage triggered a wave of litigation and regulatory scrutiny. The most high-profile case involves Delta Air Lines, which suffered massive operational disruption and sought damages from CrowdStrike.
Delta Air Lines was one of the hardest-hit organizations, with thousands of flight cancellations over multiple days following the outage. Delta filed a lawsuit against CrowdStrike seeking hundreds of millions of dollars in damages, alleging that the faulty update caused catastrophic operational failures and significant financial losses.
CrowdStrike operates in a fiercely competitive cybersecurity market. The July 2024 outage gave competitors an opportunity to poach customers, though CrowdStrike's platform depth and brand have limited churn.
| Competitor | Focus | Threat Level |
|---|---|---|
| Palo Alto Networks (PANW) | Platform consolidation, SASE, XDR | 🔴 High |
| SentinelOne (S) | AI-native EDR/XDR | 🟠Medium-High |
| Microsoft Defender | Bundled security, enterprise lock-in | 🔴 High |
| Fortinet (FTNT) | Network security, SASE convergence | 🟡 Medium |
| Zscaler (ZS) | Zero-trust cloud security | 🟡 Medium |
| Trellix (private) | Legacy EDR, McAfee/FireEye rebrand | 🟢 Low |
George Kurtz has led CrowdStrike since its founding in 2011. Previously, he served as CTO at McAfee and is a recognized authority in cybersecurity. Kurtz personally addressed the July 2024 outage within hours and later testified before Congress. His leadership through the crisis has been a focal point for investor confidence.
Post-outage sentiment toward CrowdStrike has been a complex recovery story. The stock initially fell ~30% but has shown resilience as the company demonstrated limited customer churn and continued ARR growth.
The July 2024 incident remains the defining controversy. It exposed systemic risks in cybersecurity software supply chains: a single vendor's kernel-level update crashed 8.5 million systems worldwide. Regulators and enterprises are now questioning whether security vendors should have such deep OS access without staged rollout controls.
In April 2024 — three months before the Windows outage — CrowdStrike's Linux distributions experienced a similar issue, which went largely unnoticed. This suggests the company had warning signs of quality assurance gaps that were not adequately addressed.
CrowdStrike's role in attributing the 2016 DNC hack to Russian intelligence became politically charged, with critics questioning the company's independence. While the intelligence community corroborated CrowdStrike's findings, the episode made the company a recurring subject in political discourse.
As of 2024, CrowdStrike has active lobbying efforts in Washington, D.C., reflecting its growing dependence on government contracts and regulatory outcomes.
Our proprietary composite assessment across four pillars, each scored 0–100.
CrowdStrike's recovery from the largest IT outage in history has been remarkably resilient, but the company trades at a premium that demands continued execution. Legal resolution and a clean FY2027 outlook will be critical catalysts.
Last Updated: March 22, 2026
CrowdStrike built the best endpoint security platform in the business, and then the July 2024 global outage reminded the world that "best" doesn't mean "bulletproof." Taking down 8.5 million Windows machines with a single faulty update was the kind of catastrophic failure that should kill a cybersecurity company. That it didn't kill CrowdStrike speaks to how deeply embedded the Falcon platform is in enterprise IT.
The recovery has been faster than skeptics expected. Most customers stayed because switching cybersecurity vendors mid-contract is expensive, risky, and time-consuming. The platform is genuinely excellent — the question was never about technology, it was about process and quality control. CrowdStrike has since overhauled its update mechanisms, but the trust deficit lingers.
Cybersecurity spending only goes up, and CrowdStrike is well-positioned in the hottest segments: cloud security, identity protection, and AI-powered threat detection. But the outage will follow the company for years, and every future incident will be judged more harshly. The moat is real, the growth is real, but so is the reputational baggage.