Crowdstrike Thoughts, Version 2
This will be short and sweet: This was obviously a blow-out quarter! And this is a blow-out company! It’s my highest confidence position and my largest.
In thinking about this I realize that I was being too flip, and was assuming that everyone was at the same place that I was with Crowdstrike. Here is some more information:
Crowdstrike is a security company built entirely on the cloud and that started out securing endpoints, but now is expanding into many other aspects of security, and seems to be heading towards being the dominant security company. A key advantage it has is its AI. When it detects an attempt at an intrusion ins one of its customer clients it instantly flags and stops that intrusion in that customer, but at the same time stops that intrusion from occuring in each and every one of its customers pretty much instantly. That’s a Wow! feature.
I read about FireEye’s security breach a couple of days ago. I looked at a five year graph and see that FireEye’s stock price is almost exactly still where it was five years ago. It’s never gone much above and never much below. Same market cap. And I wonder why any responsible company would still rely on a static old-line security company like FireEye, when there are companies like Crowdstrike around.
At any rate, here are some results from their recent quarter:
Total revenue was up 86%
Subscription revenue was up 87%
Annual Recurring Revenue (ARR) was up 81% and is more than four times this quarter’s subscription revenue.
Adj Subscription Gross Margin was 78%, up from 76%, and an all-time high.
Adj operating income was $19 million, up from a LOSS of $17 million.
Adj net income was $19 million, up from a loss of $13 million.
Adj EPS was 8 cents, up from a loss of 7 cents yoy.
Op cash flow was $89 million, up from $39 million.
Free cash flow was $76 million, up from $7 million !!!
Cash was $1.06 billion.
Recent Highlights
Added 1,186 new subscription customers in the quarter, including 64 from the acquisition of Preempt Security, for 8,416 total subscription customers, who were up 85% yoy.
The percent of customers that have adopted four, five, or six more modules, were up to 61%, 44%, and 22%, respectively.
Acquired Preempt, a leading provider of Zero Trust and conditional access technology for real-time access control and threat prevention.
Announced multiple new modules and capabilities, including Falcon Horizon, Falcon Forensics, Falcon X Recon, and Falcon Zero Trust Assessment (ZTA).
Announced an alliance with EY to transform cyber risk management capabilities. The new alliance will help enterprises identify, prevent and respond to cyber threats.
Joined the ServiceNow Service Graph Connector Program.
Expanded support for Amazon Web Services.
Conference Call
Our virtual user conference had 6x the customers and prospects attending compared with our in-person event last year.
Our ability to rapidly introduce new modules, and drive adoption among both new and existing customers, is core to our competitive moat. Let me expand on this point in more detail. The very nature of our cloud native architecture powered by Threat Graph enables our ability to innovate and bring new modules to market that customers actually adopt.
Threat Graph is unique to CrowdStrike and differentiates us from others in the market. All the data we collect is stored in one place, the Threat Graph. This is very different from other vendors, including upstarts that silo their data, limiting their ability to scale in the customer’s environment. To be clear, a vendor with an on-prem solution is unable to replicate our Threat Graph capabilities, which allows us to deepen our competitive moat.
Our massive data lake within Threat Graph grows and gets smarter by the minute, which also differentiates our managed detection services, providing visibility across all our customers. Threat Graph processes over 4 trillion high fidelity signals per week. Additionally, with the recent acquisition of Preempt Security, we will have access to a new set of user behaviors to drive new use cases such as preventing insider threats. Preempt has had a fantastic reception. It’s been a home run.
With one data store, the data can be analyzed almost instantaneously across our entire customer base providing real-time protection and community immunity and better training data for our AI algorithms. While others in the market like to claim like-for-like features on slides, customers know the difference and as a result CrowdStrike is rapidly expanding its leadership. In the last nine months alone, close to 3,000 net new subscription customers have chosen Falcon.
We announced three new modules, including Falcon Horizon for proactive management of cloud security posture, Falcon X Recon for increased situational awareness of dark web threats, and Falcon Forensics, which automates the analysis for incident response investigations. Falcon now has 16 modules. Customers are able to quickly try and adopt new Falcon modules without deploying any new infrastructure or agents, making the process frictionless.
Last quarter, we joined forces with Okta to help customers adopt a modern, identity-centric Zero Trust security ecosystem. This quarter, we are thrilled to announce that Okta is now a CrowdStrike customer as well, and we are excited by this opportunity to deepen our relationship. Target was another new customer.
About 72% of revenue was derived from U.S. customers, 14% from Europe, Middle East, and Africa markets, 9% from Asia Pacific, and 5% from other markets.
Adj operating expenses were 68% of revenue improved from 85% of revenue last year, although we continued investing aggressively in our business.
Operating margin improved 21 points yoy to reach +8.1%.
I think we have a huge, huge runway ahead of us and we think we’re ahead of the curve and we think we’re ahead of everybody else in what we can offer, and it’s still early days and we just see a tremendous amount of opportunity.
It’s across the board, it’s not just enterprise, it’s not just mid-market, it’s not just SMB, it is across all of them because the technology works and we’re saving companies lots of money and delivering lots of value.
The majority of the deals are all partner-led. As a channel first company, just about all the deals go through the channel in some fashion. So when we think about EY, we’re really excited because they’re just so embedded in large enterprises, they are so trusted and to have our technology as part of the solution worldwide is really a great win for us and them and the customer.
Crowdstrike is participating in the launch of Professional Services in AWS Marketplace. AWS customers can purchase cloud and IT hygiene readiness assessments and pen testing exercises from CrowdStrike Services in AWS Marketplace that will enhance the security of their cloud initiatives and improve the state of their IT environment in support of their digital transformation.
Saul: Maybe this helps explain why I said that: This was obviously a blow-out quarter! And this is a blow-out company! It’s my highest confidence position and my largest.
I hope that this was better,
Saul