Okta and CrowdStrike Beat Earnings Estimates and Raise Guidance as AI Drives Cybersecurity Demand
2026/08/28 15:35:00
Okta and CrowdStrike delivered stronger-than-expected quarterly results as enterprise cybersecurity spending remained resilient and artificial intelligence created new security challenges for businesses. Both companies beat Wall Street expectations for their latest quarters and raised their full-year outlooks, sending their shares sharply higher and reinforcing investor confidence in cybersecurity as a potential beneficiary of the AI boom.
The results also highlight an important shift in the broader software market. While investors have questioned whether AI agents could replace parts of traditional enterprise software, cybersecurity may face the opposite effect. More AI applications, autonomous agents, cloud workloads, and machine identities can create more systems that need to be authenticated, monitored, and protected. The latest earnings from Okta and CrowdStrike therefore offer more than a snapshot of two companies: they provide an early look at whether AI could help create a new cybersecurity spending cycle.
Okta and CrowdStrike Earnings Beat Wall Street Expectations
Okta and CrowdStrike both reported fiscal second-quarter 2027 results on August 26, 2026, covering the period ended July 31. Okta generated revenue of $805 million, up 11% year over year, while subscription revenue increased 12% to $793 million. Non-GAAP diluted earnings reached $1.05 per share. The company also reported remaining performance obligations, or RPO, of $4.858 billion, up 17%, while current RPO increased 14% to $2.585 billion. Free cash flow climbed to $227 million from $162 million a year earlier.
CrowdStrike continued to grow considerably faster. Total revenue rose 26% year over year to $1.47 billion, while subscription revenue increased 27% to $1.40 billion. Annual recurring revenue, or ARR, reached $5.84 billion, up 25%, and the company added roughly $333 million of net new ARR during the quarter. CrowdStrike also generated a record $377 million in quarterly free cash flow and reported non-GAAP diluted earnings of $0.31 per share.
| Metric | Okta | CrowdStrike |
| Q2 Revenue | $805M | $1.47B |
| YoY Revenue Growth | 11% | 26% |
| Subscription Revenue Growth | 12% | 27% |
| Adjusted EPS | $1.05 | $0.31 |
| Key Forward Metric | cRPO +14% | ARR +25% |
| Q2 Free Cash Flow | $227M | $377M |
The immediate numbers were strong, but the most important takeaway was not simply that both companies exceeded quarterly expectations. Investors focused on signs that future demand was improving as well, particularly because both management teams increased their full-year outlooks.
Why Both Companies Raised Their Full-Year Guidance
Okta now expects fiscal 2027 revenue of $3.216 billion to $3.226 billion, representing growth of roughly 10% to 11%. The company also raised its non-GAAP diluted EPS outlook to between $3.90 and $3.94 and expects free cash flow of $910 million to $930 million, equivalent to a margin of approximately 28% to 29%. For the third quarter, management expects revenue of $813 million to $817 million and cRPO of $2.590 billion to $2.600 billion.
CrowdStrike also increased its annual forecast. The cybersecurity company now expects fiscal 2027 revenue of approximately $5.99 billion to $6.01 billion and ending ARR of roughly $6.60 billion to $6.61 billion. More notably, management raised its full-year net new ARR growth expectation by 630 basis points to approximately 34% at the midpoint. That revision followed what CrowdStrike described as a record quarterly pipeline and record net new ARR performance.
The guidance upgrades matter because they suggest the second-quarter strength was not viewed by management as a temporary spike. Both companies are effectively signaling that enterprise customers continue to prioritize security spending even as CIOs scrutinize software budgets and experiment with AI-driven automation. For investors, that makes the forward indicators—ARR, cRPO, contract expansion, and free cash flow—at least as important as the headline earnings beats.
CrowdStrike’s Growth Is Accelerating Again
CrowdStrike's second-quarter performance stands out because several of its key growth indicators accelerated rather than simply remaining stable. Net new ARR reached approximately $333 million, representing 51% year-over-year growth. Ending ARR increased to $5.84 billion, while customer adoption of multiple Falcon modules also continued to deepen. By the end of July, 51% of subscription customers had adopted six or more modules, 35% used seven or more, and 26% used at least eight.
Falcon Flex is another particularly important indicator. ARR from accounts that adopted Falcon Flex exceeded $2.29 billion and increased 101% year over year. The significance extends beyond the headline growth rate. CrowdStrike is encouraging customers to consolidate more security functions—including endpoint protection, cloud security, identity, SIEM, threat intelligence, and AI-related security—onto the Falcon platform rather than buying disconnected tools from multiple vendors. Greater module adoption can increase customer spending while making CrowdStrike more deeply embedded in enterprise security architectures.
That platform strategy helps explain why ARR is so closely watched. Revenue shows what CrowdStrike recognized during a particular quarter, while ARR provides a clearer view of the recurring subscription base supporting future growth. If customers continue expanding across additional Falcon modules, the company can potentially grow both through new customer acquisition and through greater spending by existing customers.
Why Okta Stock Surged Even Faster
CrowdStrike reported the stronger growth rate, but Okta produced an even more dramatic stock reaction. Okta shares jumped 28.6% on August 27 and closed at $172.91 after investors responded to stronger-than-expected results and improved forward indicators. CrowdStrike, meanwhile, gained about 20.5% during the session.
The difference largely reflects expectations. Investors had already become accustomed to CrowdStrike producing growth rates well above those of mature software businesses. Okta entered the earnings report with a different question surrounding the stock: whether its slowdown was stabilizing and whether bookings momentum could improve. The latest quarter provided encouraging evidence. cRPO rose 14%, RPO increased 17%, subscription revenue grew 12%, and quarterly free cash flow expanded to $227 million from $162 million a year earlier.
In that context, Okta did not need to suddenly become a 25% growth company to generate a major re-rating. The more important signal was that forward contract growth was outpacing current revenue growth while profitability and cash generation remained strong. In other words, investors were not pricing in a return to hypergrowth; they were reconsidering whether Okta's growth deceleration may be approaching a more stable phase.
AI Is Creating a New Cybersecurity Problem
At the same time, AI infrastructure itself needs protection. Enterprises are deploying models across cloud environments, internal applications, customer-service systems, development workflows, databases, and autonomous agent platforms. Every new connection can create an additional attack surface. Sensitive enterprise data may move between models and applications, while AI agents may be granted permission to access internal resources or execute actions without constant human involvement.
The result is a structural cybersecurity challenge: AI can potentially make attackers more capable while simultaneously increasing the number of assets defenders must protect. That creates a straightforward commercial logic for security companies. More AI workloads can mean more endpoints, identities, permissions, cloud resources, and sensitive data flows requiring protection. If enterprise AI adoption continues expanding, cybersecurity budgets may rise alongside it rather than being displaced by it.
CrowdStrike Is Betting on AI Security
CrowdStrike is positioning the Falcon platform as infrastructure for securing the AI era rather than treating AI security as a completely separate market. The company has extended its AI Detection and Response capabilities across multiple AI gateway partners and introduced additional AI, cloud, and Next-Gen SIEM security functions. It has also launched Continuous Identity for AI Agents, expanding authorization controls across human, machine, and agent identities.
This fits naturally into CrowdStrike's existing platform model. An enterprise running more AI applications may need to secure the devices employees use, the cloud workloads hosting models, the identities connecting to systems, the data passing through those environments, and the security operations platforms responsible for identifying threats. Rather than selling one isolated “AI security” product, CrowdStrike can potentially monetize AI adoption by increasing the number of Falcon modules customers use.
CEO George Kurtz has described securing AI as one of the largest opportunities in CrowdStrike's history. Management's optimism should naturally be treated as a company view rather than a guaranteed industry outcome, but the latest ARR data provide some evidence that platform expansion is translating into measurable commercial results. Record net new ARR and rapid Falcon Flex growth suggest customers are already consolidating more security functions onto the platform.
Okta Sees AI Agents as a New Identity Market
Okta's opportunity is different. Its core business revolves around identity: determining who or what is requesting access to a system, authenticating that identity, and controlling what it can do once access is granted. AI agents introduce a potentially significant new category of identity because autonomous software may increasingly perform tasks that were once carried out directly by employees.
Consider an AI agent used by a sales department. It might need permission to access Salesforce, internal email, customer records, cloud storage, calendars, and analytics systems. A finance agent might interact with accounting software or internal databases. If organizations deploy thousands of these agents, they need mechanisms to establish which agents are legitimate, what data they can access, how long permissions should remain active, and how those permissions can be revoked when risk changes.
Okta is positioning itself around exactly this problem. CEO Todd McKinnon said in the latest earnings release that every AI agent requires a trusted identity and clear controls over its access and actions. The company wants to help customers discover agents, secure their connections, govern their behavior, and respond when something goes wrong. However, investors should distinguish future opportunity from current financial impact. Okta's latest results were still primarily driven by momentum in its core workforce and customer identity businesses and newer products such as Identity Governance. AI agent identity is an emerging opportunity rather than the dominant source of current revenue growth.
Okta vs. CrowdStrike: Two Different AI Security Opportunities
Okta and CrowdStrike are sometimes grouped together as cybersecurity stocks, but their AI opportunities are not identical. CrowdStrike is primarily trying to protect infrastructure, endpoints, cloud environments, data, security operations, and increasingly AI workloads themselves. Okta is more focused on identity and authorization—deciding whether human, machine, or AI identities should be allowed to access specific resources.
| Area | Okta | CrowdStrike |
| Core Market | Identity security | Cybersecurity platform |
| Main AI Opportunity | AI agent identity and access | AI workload, endpoint and threat protection |
| Key Growth Metric | cRPO / RPO | ARR / Net New ARR |
| Current AI Stage | Earlier-stage opportunity | More integrated with existing platform |
| Core Question | Can AI agents expand identity demand? | Can AI accelerate platform adoption? |
This distinction is important because simultaneous strength at both companies may indicate that AI is expanding multiple layers of the cybersecurity market. Businesses do not only need to protect an AI model from attack. They also need to manage who can interact with it, what autonomous agents can access, where data travels, and how suspicious behavior can be identified across increasingly complicated enterprise environments.
Why Cybersecurity Stocks Are Winning From the AI Boom
The broader software industry has faced a difficult question in 2026: could AI agents reduce the value of traditional applications by automating workflows that previously required multiple software seats? Those fears contributed to significant volatility in software stocks earlier in the year. The S&P 500 Software and Services Index fell more than 33% from its October 2025 peak through April 2026 as investors reassessed which business models could be disrupted by AI.
Cybersecurity presents a different equation. Even if AI reduces demand for certain traditional software interfaces, organizations are unlikely to become less concerned about protecting valuable data and critical infrastructure. More autonomous agents create more non-human identities. More AI workloads create more cloud attack surfaces. More powerful AI tools can potentially increase the efficiency of malicious actors. At the same time, complicated IT environments can encourage enterprises to consolidate security products into fewer integrated platforms.
This is why cybersecurity may emerge as one of the more defensive areas of enterprise software during the AI transition. The industry's opportunity is not based on AI merely being fashionable. It depends on a more durable premise: increasingly automated digital systems still require authentication, authorization, monitoring, threat detection, and incident response. As AI makes enterprise technology more capable, security may become more important rather than less.
What Could Go Wrong With the AI Cybersecurity Story?
The strongest risk is that investors price in AI-related revenue before the business is large enough to justify those expectations. Okta is a good example. AI agent security has significant theoretical potential, but the company's current financial growth remains driven mostly by traditional workforce identity, customer identity, governance, and related security products. A large future market does not automatically translate into rapid near-term revenue.
Valuation is another concern. Okta's nearly 29% one-day rally and CrowdStrike's roughly 20% gain show how aggressively investors responded to the latest results. Higher stock prices raise the performance bar for future quarters. If ARR, cRPO, customer expansion, margins, or guidance later fall short of increasingly optimistic assumptions, these stocks could experience sharp volatility even if their underlying businesses remain healthy. Software stocks have already demonstrated this pattern during 2026, with AI enthusiasm and AI disruption fears producing unusually large swings.
Competition also remains intense. Microsoft, Palo Alto Networks, Zscaler, Cloudflare, and other security providers are developing AI-enabled protection and platform strategies of their own. A growing market can support multiple winners, but it also encourages rivals to invest aggressively. The key long-term question is therefore not simply whether AI security spending increases, but which companies can convert that spending into durable customer retention, recurring revenue, and attractive margins.
What Investors Should Watch Next
For CrowdStrike, net new ARR will remain one of the most important indicators. The latest quarter's 51% increase sets a high benchmark, and investors will want evidence that customers continue adopting multiple modules and expanding Falcon Flex relationships. Ending ARR, module adoption, retention, and free cash flow will help show whether today's momentum is sustainable rather than concentrated in a few unusually strong quarters.
For Okta, cRPO may be more informative than headline revenue growth. Because cRPO represents subscription backlog expected to be recognized over the next 12 months, sustained growth above the current revenue rate could signal improving forward momentum. Investors should also watch whether Okta begins providing more measurable information about AI agent adoption and whether identity governance continues expanding within large enterprise customers.
Across both businesses, the critical test will be whether AI demand progresses from corporate experimentation to measurable financial contribution. The number of times management mentions artificial intelligence on an earnings call matters far less than whether AI adoption ultimately produces higher ARR, stronger RPO, larger customer contracts, improved retention, and continued free cash flow growth.
Can AI Start a New Cybersecurity Growth Cycle?
The latest results from Okta and CrowdStrike provide encouraging evidence that cybersecurity remains a priority as enterprises expand their use of AI. CrowdStrike's record net new ARR, rapid Falcon Flex growth, and higher full-year guidance show that security platform consolidation is already producing meaningful recurring revenue. Okta's acceleration in cRPO and improving cash generation suggest its core identity business is stabilizing while AI agents could create an additional long-term market.
It is still too early to declare that AI has created a permanent cybersecurity supercycle. Many AI security products remain young, competition is increasing, and some of the industry's future opportunity has already been reflected in higher stock valuations. Yet the underlying logic is increasingly difficult to ignore: AI introduces new capabilities, but it also introduces new identities, connections, permissions, workloads, and attack surfaces that must be secured.
For cybersecurity companies, that could make AI less of a disruption threat and more of a structural demand driver. Okta and CrowdStrike's latest earnings suggest that investors are beginning to price in exactly that possibility.
FAQs
Is Okta a Direct Competitor to CrowdStrike?
Not primarily. Okta specializes in identity and access management, while CrowdStrike operates a broader cybersecurity platform covering endpoint protection, cloud security, threat detection, identity protection, SIEM, and related services. Their offerings increasingly overlap in areas such as identity security, but they address different core parts of the enterprise security stack.
What Does ARR Mean in Cybersecurity Earnings?
ARR stands for annual recurring revenue. It estimates the annualized value of recurring subscription contracts and is commonly used to evaluate SaaS and cybersecurity companies. For CrowdStrike, ARR helps investors understand how large its recurring subscription base has become and whether new customer contracts and account expansions are accelerating or slowing.
What Is cRPO and Why Does It Matter for Okta?
Current remaining performance obligations represent contracted subscription revenue that a company expects to recognize during roughly the next 12 months. Because cRPO looks forward rather than backward, investors often use it alongside revenue to assess near-term business momentum. Okta reported cRPO of $2.585 billion in its fiscal second quarter, up 14% year over year.
Does CrowdStrike Compete With Microsoft in Cybersecurity?
Yes, in several areas. Microsoft offers products such as Defender and Sentinel that compete across endpoint security, cloud protection, identity, and security operations. CrowdStrike differentiates itself through the Falcon platform and its independent security ecosystem, while some large enterprises may use products from both vendors rather than relying exclusively on one provider.
Can AI Agents Operate Without Human Identities?
AI agents do not necessarily need conventional employee accounts, but they still require credentials, permissions, and authorization to interact with enterprise systems. That makes them a form of non-human identity. As organizations deploy more autonomous agents, controlling what each agent can access and what actions it can perform may become an increasingly important part of identity security.
When Will Okta and CrowdStrike Report Earnings Again?
Both companies report on a quarterly fiscal schedule, but investors should rely on their official investor-relations calendars for confirmed dates. In their next earnings reports, the most important indicators will likely include CrowdStrike's net new ARR and Falcon platform adoption, Okta's cRPO growth, progress in AI-related security products, and any further changes to full-year guidance.
🔥 KuCoin Offers A More Stable Option in A Volatile Market
If you worry about the frequent ups and downs in the market, and pursue a more stable option to earn money passively, KuCoin is the right place to come:
Simple Earn: Deposit and withdraw tokens anytime, earning stable returns.
Kucoin Earn: Earn stable profits with professional asset management.
Hold to Earn: Earn rewards by holding assets in Funding, Trading, Margin, Futures, Mining, and Unified Accounts.
Staking: Unlock the earning potential of on-chain assets.
Advanced Investments: Advanced Investments offer a variety of structured products to help your money grow in any market.
Shark Fin: Principal Protection and Guaranteed Gains
Dual Investment: Buy low and sell high with transparent return calculations.
Snowball: High yields, with price protection.
Discount Buy: Buy crypto at discount prices.
KCS Loyalty: Level up to enjoy exclusive perks by staking ≥ 1 KCS.
KuCoin Wealth: Discover future value and begin your smart investing journey.
KCS Benefits: Hold and stake KCS to access benefits across the platform.
KCS Staking 2.0: Participate in KCS on-chain governance to earn yield.
Disclaimer: This content is for informational purposes only and does not constitute investment advice. Cryptocurrency investments carry risk. Please do your own research (DYOR).