- CrowdStrike’s Q2 FY2027 revenue rose 26% year-over-year to $1.47 billion, with net new ARR hitting a record $333 million, up 51% year-over-year, sending the stock up 20.5% on August 27, 2026.
- CrowdStrike’s AIDR ending ARR nearly tripled quarter-over-quarter, as enterprises confronting AI-enabled attacks redirect security budgets toward AI-native detection platforms.
- CrowdStrike’s Spring 2026 Falcon release extended AIDR coverage to agentic AI and shadow AI risks, including prompt injection and desktop AI app monitoring, across endpoints, SaaS and cloud environments.
On August 27, 2026, CrowdStrike reported what CEO George Kurtz called “the best quarter in CrowdStrike’s history”, $1.47 billion in revenue, a record $333 million in net new ARR and AIDR ending ARR that nearly tripled from the prior quarter. Behind those numbers is a structural shift in enterprise buying: AI is now on both sides of every attack, and security budgets are beginning to reflect that.
A Record Quarter
CrowdStrike Holdings (Nasdaq: CRWD) posted total revenue of $1.47 billion for its fiscal second quarter of 2027, which ended July 31, 2026, a 26% increase year-over-year and ahead of Wall Street’s consensus estimate of $1.44 billion. ARR climbed 25% year-over-year to $5.84 billion. Net new ARR of $333 million was up 51% year-over-year and set a quarterly record.
Kurtz, on the earnings call, said: “AI is driving more cyber attacks. AI is driving more cyber spending.” The near-tripling of the AIDR metric in a single quarter is the most concrete signal in the results that enterprise buyers are treating AI-native detection as a distinct purchasing category, not an add-on to existing contracts.
AI on Both Sides
The World Economic Forum has identified AI-related vulnerabilities as one of the fastest-growing categories of cyber risk, and enterprise spending is tracking the threat. The average cost of a data breach has reached record highs in recent years, with industry reports citing figures approaching $5 million per incident. Organisations deploying AI-native detection tools have reported detecting breaches roughly 51 days faster than those without, according to those reports, though overall losses remain elevated as attack volume grows. As AI capabilities spread across enterprise stacks the attack surface is expanding faster than most legacy controls were designed to handle.
New Attack Surfaces in the AI Stack
AI deployments introduce attack surfaces that traditional security controls were not built to address: prompt injection, data leakage from model interactions and shadow AI tools that create blind spots across the environment. CrowdStrike’s Spring 2026 Falcon release extended AIDR to cover these vectors. Falcon AIDR now integrates with the Falcon sensor to reach beyond the browser to desktop AI applications, giving security teams visibility into prompt content and enabling detection of prompt attacks and data exfiltration in real time.
CrowdStrike is also building an open gateway with partners including Google Cloud Databricks and Microsoft Azure, framing the Falcon platform as an “AI security control plane” that consolidates visibility across AI traffic flows and models. The Spring 2026 release also added coverage for agentic AI risks and desktop AI app monitoring, extending the AIDR scope across endpoints, SaaS and cloud workloads. Where LLM-specific vulnerabilities continue to resist current detection methods the breadth of that coverage matters.
Budget Pressure and the CISO Mandate
Gartner’s most recent forecast (June 2026) puts global cybersecurity spend at $248.9 billion for 2026, up nearly 13% year-over-year, with “securing AI” now tracked as its own fast-growing budget category for the first time. Board-level visibility into AI risk is pushing decisions that would previously have sat with security operations teams up to the CISO and beyond. CISOs are navigating a crowded market: incumbent vendors bolting AI features onto existing products, and AI-native startups competing on detection specificity. CrowdStrike’s Q2 results suggest that, at least for one quarter, the AI-native argument is winning on net new ARR.
