Written by: Rita
On September 4, Bank of America Securities released a report on the CrowdStrike Fal.Con 2026 conference. CrowdStrike’s annual attendance reached approximately 10,000 people, setting a new record. CrowdStrike unveiled new AI security products, including Falcon Guardian, SafeMind, Superintelligence Lab, and Agentic Identity, and advanced its long-term ARR targets by one year each. The FY30 target is now $10 billion, and the FY35 target is $20 billion. The FY28 nnARR growth expectation has been raised to over 20%.
CrowdStrike believes AI has become the new frontier in security. The company’s runtime capabilities across endpoints and cloud workloads position it as a leader in the agent era of security. Falcon Flex remains the commercial engine, with total contract value nearing $2.3 billion, a 101% year-over-year increase. Average ARR uplift for Flex customers after upgrade has risen to 40%. Bank of America has raised its profit forecast, targeting a FY28 FCF margin of at least 32.5%.
Long-term ARR targets accelerated by one year each
CrowdStrike has accelerated its $10 billion ARR target from FY31 to FY30 and its $20 billion target from FY36 to FY35. Management expects FY28 nnARR growth of more than 20%, based on a median FY27 nnARR of $1.355 billion, implying FY28 nnARR of at least approximately $1.626 billion, significantly above the market consensus of $1.537 billion.
Management confidence stems from recent execution results. Q2 nnARR reached $333 million, a 51% year-over-year increase. Falcon Flex adoption continues to grow, and AI security opportunities are expanding. The FY28 FCF margin target is at least 32.5%, with capital expenditures as a percentage of revenue rising to 11%–12%.
The product portfolio is fully transitioning to AI.
Falcon Guardian is the most anticipated new product at this conference. It detects and responds to agent-based attacks at inference speed by leveraging CrowdStrike’s runtime sensor data and threat intelligence. Guardian can be activated immediately on existing sensor deployments without requiring additional installation.
SafeMind is another standout feature. Sold through a "token pack" model, customers drive incremental ARR by committing to and expanding their purchases via Flex. Enhanced capabilities in Superintelligence Lab, Agentic Identity, and Agentic SOC further enrich the product portfolio.
CrowdStrike's core premise is that AI is shifting cybersecurity from the era of nation-states to the "agent era." Attack capabilities that previously required nation-state resources are now accessible to low-skill adversaries through AI. Agent-based attacks operate at the speed of seconds, with extremely low cost and minimal expertise required. Defending against this environment demands an integrated security architecture covering runtime, identity, cloud, data, and response—and AI must operate at the speed of reasoning.
CrowdStrike’s strategic advantage lies in integrating endpoint and workload telemetry, identity context, threat intelligence, and automated response on a single platform. Management emphasized at Investor Day that the AI security market will be larger than the endpoint security market, with an adoption curve steeper than that of cloud security. Bank of America expects Guardian to offer significant upsell potential to its existing customer base in FY27 and FY28.
Falcon Flex is a commercialization engine.
Falcon Flex operates on a commitment model, distinct from a consumption model. After an initial commitment, customers can dynamically activate additional modules without renegotiating the full contract. The total Flex contract value is approximately $2.3 billion, representing a 101% year-over-year increase, with 935 new Flex opportunities added in the latest quarter.
Flex is expanding beyond large enterprises to a broader customer base. The proportion of enterprise customers decreased from 61% in Q2 26 to 50%, while non-enterprise customers rose to 50%. The share of non-Flex contracts is expected to continue declining as the company transitions toward a "Flex-first" model.
After switching from Non-Flex to Flex, the average ARR increase has risen from 34% last year to 40%. Bank of America believes that the combination of product breadth, pre-integrated technology, and simplified procurement helps shorten the adoption cycle and converts AI innovation into incremental ARR.
Improved profit potential
Bank of America raises its earnings forecast for CrowdStrike. The FY28 FCF margin target is at least 32.5%, up from previous expectations, with capital expenditures as a percentage of revenue increasing to 11%–12%. Bank of America’s price target is $230, based on an FY27 EV/sales multiple of approximately 32x. This valuation premium is supported by CrowdStrike’s strong competitive position in endpoint security and its long-term growth opportunities across cloud security, log management, and identity protection, compared to high-growth SaaS peers trading at 13x to 19x.
Downside risks include investor sensitivity to high valuations, lower-than-expected adoption of new products, slowed customer expansion, security vulnerability risks, and intensified competition from established suppliers and next-generation vendors.
Disclaimer
This article is a compilation and interpretation by Chaoxiang Research of a third-party brokerage research report (Bank of America Securities, September 4, 2026), combined with publicly available market information. The ratings, price targets, earnings forecasts, and related judgments cited herein reflect the views of the brokerage’s analysts and represent the position of their respective institution only; they do not reflect the views of Chaoxiang Research nor constitute any investment advice.
The market carries risks; make decisions independently. This article should not be used as a basis for buying or selling any securities.