CrowdStrike Sped Up Three Quarters Running. Its Peers Re-Rated Faster Than They Grew.
Hypothesis Opus 5 · Research Opus 5 · Writing Opus 5 · Prompt v1.5
Three of the largest listed security-software companies have risen together since May, and the market has treated them as one trade. Their income statements say they are not. CrowdStrike's revenue growth accelerated for a third straight quarter, to 25.6%, and its gross margin widened 150 basis points to 75.3% — gross profit grew faster than sales. Cloudflare grew faster still, 35.9%, but its cost of revenue rose 52.7% and its reported gross margin slipped to 71.8%. Palo Alto Networks has published nothing since April, when acquisitions supplied roughly a fifth of its recurring-revenue growth.
Priced against trailing gross profit, the divergence is sharper: since late May Palo Alto's multiple rose 37% on gross profit that did not change at all, Cloudflare's 27%, CrowdStrike's 9%. The run broke on 13 August, when 30-year Treasury yields hit a 19-year high. CrowdStrike reports on 26 August.
| Ticker | Company | Segment | Trend · 13mo | 30D | 1Y |
|---|---|---|---|---|---|
| The subject · what this brief is about | |||||
CRWD | CrowdStrike | Cybersecurity & Threat Protection | ⚠️ Emerging Bear | +5.6% | −54.4% |
NET | Cloudflare | Network & Application Delivery | 🌱 Emerging Bull | +11.0% | +49.4% |
PANW | Palo Alto Networks | Cybersecurity & Threat Protection | 🌱 Emerging Bull | +12.2% | +92.5% |
| Compared against · context, not the story | |||||
ZS | Zscaler | AI & Data Intelligence | 🔴 Cont. Bear | +19.9% | −33.3% |
OKTA | Okta | Identity & Access Management | 🌱 Emerging Bull | −0.8% | +46.8% |
FTNT | Fortinet | Network Security Appliances | 🌱 Emerging Bull | +2.4% | +91.8% |
QLYS | Qualys | Cybersecurity & Threat Protection | 🌱 Emerging Bull | +36.1% | +35.3% |
S | SentinelOne | Cybersecurity & Threat Protection | 🌱 Emerging Bull | +15.5% | +24.9% |
TENB | Tenable | Cybersecurity & Threat Protection | 🌱 Emerging Bull | +9.6% | +12.1% |
CHKP | Check Point Software Technologies | Cybersecurity & Threat Protection | 🔴 Cont. Bear | +3.6% | −31.4% |
AKAM | Akamai Technologies | Network & Application Delivery | 🟢 Cont. Bull | −1.2% | +42.2% |
DDOG | Datadog | Data & Analytics Platforms | 🟢 Cont. Bull | −6.1% | +79.6% |
DOCN | DigitalOcean | Cloud Infrastructure & Platforms | 🟢 Cont. Bull | −0.2% | +256.3% |
12-month price & trend
| Ticker | Mkt cap | P/E | P/E fwd | P/S | P/S fwd | P/GP | P/GP fwd | EV/EBITDA | FCF yld |
|---|---|---|---|---|---|---|---|---|---|
CRWD | $195.5B | n/m | 155.9x | 38.4x | 32.9x | 51.1x | 43.8x | 572.8x | 0.7% |
NET | $104.0B | n/m | 232.5x | 41.4x | 36.3x | 57.0x | 50.0x | — | 0.4% |
PANW | $291.7B | 300.7x | 87.2x | 27.5x | 21.1x | 38.2x | 29.3x | 127.9x | 1.5% |
| Ticker | Mkt cap | P/E | P/E fwd | P/S | P/S fwd | P/GP | P/GP fwd | EV/EBITDA | FCF yld |
|---|---|---|---|---|---|---|---|---|---|
ZS | $29.7B | n/m | 40.1x | 9.4x | 7.6x | 12.2x | 9.9x | 251.1x | 3.2% |
OKTA | $23.5B | 100.9x | 36.7x | 7.8x | 7.3x | 10.1x | 9.5x | 64.2x | 3.8% |
FTNT | $117.4B | 55.9x | 46.8x | 15.6x | 14.5x | 19.4x | 18.1x | 39.7x | 2.7% |
| Ticker | Mkt cap | P/E | P/E fwd | P/S | P/S fwd | P/GP | P/GP fwd | EV/EBITDA | FCF yld |
|---|---|---|---|---|---|---|---|---|---|
QLYS | $3.2B | 15.9x | 11.9x | 4.6x | 4.4x | 5.6x | 5.3x | 11.4x | 9.2% |
S | $7.2B | n/m | 61.3x | 6.9x | 6.0x | 9.3x | 8.1x | n/m | 0.6% |
TENB | $2.4B | n/m | 11.0x | 2.3x | 2.2x | 3.0x | 2.8x | 23.3x | 11.1% |
| Ticker | Mkt cap | P/E | P/E fwd | P/S | P/S fwd | P/GP | P/GP fwd | EV/EBITDA | FCF yld |
|---|---|---|---|---|---|---|---|---|---|
CHKP | $12.9B | 12.3x | 11.9x | 4.7x | 4.6x | 5.5x | 5.4x | 14.3x | 10.1% |
AKAM | $16.1B | 38.9x | 16.4x | 3.7x | 3.6x | 6.6x | 6.3x | 18.6x | 3.9% |
DDOG | $83.9B | 473.9x | 93.2x | 21.1x | 18.8x | 26.6x | 23.6x | 321.8x | 1.4% |
| Ticker | Mkt cap | P/E | P/E fwd | P/S | P/S fwd | P/GP | P/GP fwd | EV/EBITDA | FCF yld |
|---|---|---|---|---|---|---|---|---|---|
DOCN | $13.5B | 45.9x | 79.6x | 13.4x | 11.5x | 23.4x | 20.1x | 38.1x | 0.1% |
Consensus projections
| Ticker | FY2026E | FY2027E | FY2028E | |
|---|---|---|---|---|
CRWD | Revenue | +22.2% | +23.7% | +21.8% |
| EPS | −1.2% | +32.6% | +26.5% | |
NET | Revenue | +33.7% | +28.7% | +27.5% |
| EPS | +38.0% | +32.5% | +35.3% | |
PANW | Revenue | +24.3% | +21.2% | +14.2% |
| EPS | +15.3% | +8.8% | +17.7% | |
ZS | Revenue | +25.2% | +16.9% | +16.7% |
| EPS | +29.0% | +11.2% | +17.6% | |
OKTA | Revenue | +12.0% | +10.0% | +9.5% |
| EPS | +24.3% | +11.7% | +10.9% | |
FTNT | Revenue | +19.8% | +11.3% | +10.9% |
| EPS | +27.0% | +9.4% | +13.3% | |
QLYS | Revenue | +8.6% | +7.0% | +6.6% |
| EPS | +8.6% | +9.2% | +5.3% | |
S | Revenue | +22.4% | +19.9% | +17.6% |
| EPS | +723.4% | +83.7% | +43.0% | |
TENB | Revenue | +8.4% | +7.1% | +6.9% |
| EPS | +27.0% | +10.5% | +10.1% | |
CHKP | Revenue | +3.2% | +6.0% | +5.6% |
| EPS | −7.5% | +9.6% | +9.1% | |
AKAM | Revenue | +7.2% | +12.8% | +10.8% |
| EPS | −4.7% | +6.1% | +13.9% | |
DDOG | Revenue | +31.7% | +22.3% | +22.9% |
| EPS | +25.3% | +17.0% | +22.2% | |
DOCN | Revenue | +31.2% | +53.5% | +43.7% |
| EPS | −29.0% | +23.2% | +60.4% |
Forward fiscal years only. Blank means no analyst coverage for that year.
A dated test, four days out
CrowdStrike, which sells endpoint, identity and cloud-workload protection as subscriptions through its Falcon platform, reports quarterly results after the close on Wednesday, 26 August. It is the only one of the three largest listed security-software companies with numbers due this week. Palo Alto Networks follows on 1 September; Cloudflare last reported on 6 August.
The business heading into that print is speeding up, which is rare at this size. April-quarter revenue was $1.386bn, up 25.6% — a third consecutive quarter of faster growth, from 21.3% four quarters earlier. Gross margin widened 150 basis points to 75.3%, so gross profit grew 28.1%, ahead of sales. Annual recurring revenue (ARR) ended at $5.51bn, up 24%, with a record first-quarter addition of $255.8m in net new ARR, up 32%. Free cash flow reached $468m, and management raised full-year net new ARR growth guidance by 520 basis points at the midpoint.
The price history was misleading
Anyone scanning CrowdStrike's summer chart saw what looked like a wipeout: about $701 in late June, roughly $186 days later. That was a four-for-one stock split, approved on 3 June and effective 2 July. Adjusted, the shares are up about 98% since 20 February and 61% since early May. CrowdStrike participated fully in the security advance; only the unadjusted series suggests otherwise.
Where the re-rating outran the earnings
All three are loss-making under generally accepted accounting principles (GAAP), so price against gross profit is the lens that survives the comparison. Measured that way, since 22 May Palo Alto went from 27.8 to 38.2 times trailing gross profit — a 37% increase on gross profit that did not change at all, because it has reported nothing since April. Cloudflare went from 44.9 to 57.0 times, up 27%, while its gross-profit dollars grew 6.8%. CrowdStrike went from 47.0 to 51.1 times, up 9%, on gross-profit dollars up 6.4%. One of the three re-rated roughly in line with what it earned.
Cloudflare, which routes and filters traffic for websites from its own global network, has the loudest demand story: revenue up 35.9% to $696.1m, the fastest in two years, dollar-based net retention of 120%, and 4,698 customers spending over $100,000 a year, up 27%. But cost of revenue grew 52.7% as network capacity landed in cost of goods, pulling GAAP gross margin to 71.8% from 74.9%. Management says more than half the traffic on its network is now AI agents rather than people. None of that appears as a disclosed product revenue line; the crawler tolls and payment gateways are announced, not itemized.
Palo Alto, the firewall vendor now bundling security subscriptions around its hardware, reported next-generation security ARR of $8.1bn, up 60% — but $1.6bn of that arrived with CyberArk and Chronosphere. Gross margin fell to 67.6% from 72.9%, and the quarter carried a GAAP operating loss of $183m.
The bond market ended the run, not the customers
All seven of the big security names peaked in the same session, 13 August. Then the 30-year Treasury yield printed above 5.33%, its highest in 19 years, on 18–19 August. Cloudflare fell 15.7% into the 20 August trough and CrowdStrike 15.6%, against 8.9% at Fortinet and 7.0% at Zscaler. The losses sorted by multiple, not by security demand. The partial bounce on 21 August followed the Treasury Department saying it would at least double its debt-buyback size.
What has to print
Sell-side previews put the bar for Wednesday at roughly $292m of net new ARR, more than 3% above CrowdStrike's own guidance. The durable part of the case is consolidation: gross retention near 97%, with endpoint, identity, cloud workload and security-analytics modules sold onto one agent, which is how CrowdStrike takes budget from single-product vendors. The durable threat is Microsoft, which bundles competing security into licences enterprises already buy. Consensus already assumes revenue growth of 23.7% this fiscal year — the acceleration is in the price before it is in the release.
The setup
Where it stands — CrowdStrike's growth and margins improved into a print due 26 August, on a multiple that rose less than its peers' since May.
Would confirm — Net new ARR above $292m with gross margin holding at or above 75%.
Would invalidate — Net new ARR below the roughly $255m added a year ago, or a sequential gross-margin decline.
Watch next — Fiscal second-quarter results after the close on 26 August; Palo Alto's fiscal fourth quarter on 1 September.
Valuation — 51.1x trailing gross profit and 43.8x forward, against 47.0x in late May; 38.4x trailing sales.








































































































