CrowdStrike Holdings, Inc.
For the period ended Oct 31, 2025. Filed Dec 3, 2025.
View on SEC.govAbout this filing
A company's report for each of its first three quarters. The financial statements are not audited. It shows how the business has moved since the last annual report, and what management says changed.
Oct 31, 2025 · Filed Dec 3, 2025
What changed in Risk Factors?
Read the current filingPrevious report: 10-Q
Period ended 2025-07-31; filed 2025-08-28.
0001535527-25-000025
Item 1A. Risk FactorsCurrent report: 10-Q
Period ended 2025-10-31; filed 2025-12-03.
0001535527-25-000033
Item 1A. Risk FactorsThe baseline is this issuer’s latest earlier reporting period of the same form that was filed before the current report. A previous 10-Q is a different quarter, not a year-over-year comparison. Amendments are excluded.
Compared 354 previous paragraphs and 354 current paragraphs.
341 unchanged; 12 reworded; 1 added; 0 removed; 1 previous and 0 current paragraphs rearranged.
Tables are not compared: 0 previous and 0 current tables excluded. Dates, whitespace, punctuation and numbering changes are ignored; changes to financial figures remain significant.
A changed paragraph is not evidence that risk increased or decreased. An unchanged paragraph does not establish that risk stayed the same.
Added paragraphs (1)
Reworded paragraphs (12)
Previous wording
The July 19 Incident has harmed, and is expected to continue to harm, our business, sales, customer and partner relations, and our reputation. As a result of the incident, certain of our existing or prospective customers have elected to, and may in the future elect to, defer purchasing decisions relating to our products and services or not purchase our products and services at all. Customers have also decided, and may in the future decide, to terminate or not renew their agreements with us. The July 19 Incident has negatively impacted, and may in the future negatively impact, our existing or prospective partners’ ability or willingness to promote our products or services. Certain of our competitors have aggressively approached our current and prospective customers and partners to attempt to capitalize on the incident, and may continue to do so. Furthermore, we have agreed to, and expect to agree to in the future, provide incentives in connection with our commercial arrangements with our customers, including subscription period extensions, discounts or promotional modules. The July 19 Incident has received negative media coverage and harmed our reputation and brand. If we are unable to regain the trust of our current and prospective customers and partners, or if negative media coverage and publicity continues, whether directly or indirectly related to the July 19 Incident, our reputation and brand may suffer further, exacerbating the effects discussed herein. These factors may result in harm to our business, results of operations and financial condition.
Current wording
The July 19 Incident has harmed, and is expected to continue to harm, our business, sales, customer and partner relations, and our reputation. As a result of the July 19 Incident, certain of our existing or prospective customers have elected to, and may in the future elect to, defer purchasing decisions relating to our products and services or not purchase our products and services at all. Customers have also decided, and may in the future decide, to terminate or not renew their agreements with us. The July 19 Incident has negatively impacted, and may in the future negatively impact, our existing or prospective partners’ ability or willingness to promote our products or services. Certain of our competitors have aggressively approached our current and prospective customers and partners to attempt to capitalize on the July 19 Incident, and may continue to do so. Furthermore, we have agreed to, and expect to agree to in the future, provide incentives in connection with our commercial arrangements with our customers, including subscription period extensions, discounts or promotional modules. The July 19 Incident has received negative media coverage and harmed our reputation and brand. If we are unable to regain the trust of our current and prospective customers and partners, or if negative media coverage and publicity continues, whether directly or indirectly related to the July 19 Incident, our reputation and brand may suffer further, exacerbating the effects discussed herein. These factors may result in harm to our business, results of operations and financial condition.
Previous wording
Our revenue recognition is difficult to predict because of the length and unpredictability of the sales cycle for our Falcon platform. Customers often view the subscription to our Falcon platform as a significant strategic decision and, as a result, frequently require considerable time to evaluate, test and qualify our Falcon platform prior to entering into or expanding a relationship with us. Large enterprises and government entities in particular often undertake a significant evaluation process that further lengthens and adds uncertainty to our sales cycle. In addition, uncertain economic or geopolitical conditions, including in connection with changes in trade policies and tariffs, may lead to additional scrutiny of budgets by current and prospective customers, which has resulted in, for example, longer sales cycles for products and services, and may result in shifting demand for IT products and services, and slower adoption of new technologies. We have also experienced, and expect to continue to experience, longer sales cycles in connection with the July 19 Incident. We may also experience longer sales cycles as customers seek to consolidate on our Falcon platform and negotiate larger deals, including in connection with our flexible subscription offering.
Current wording
Our revenue recognition is difficult to predict because of the length and unpredictability of the sales cycle for our Falcon platform. Customers often view the subscription to our Falcon platform as a significant strategic decision and, as a result, frequently require considerable time to evaluate, test and qualify our Falcon platform prior to entering into or expanding a relationship with us. Large enterprises and government entities in particular often undertake a significant evaluation process that further lengthens and adds uncertainty to our sales cycle. In addition, uncertain economic or geopolitical conditions, including in connection with changes in trade policies and tariffs, may lead to additional scrutiny of budgets by current and prospective customers, which has resulted in, for example, longer sales cycles for products and services, and may result in shifting demand for IT products and services, and slower adoption of new technologies. We have also experienced, and may continue to experience, longer sales cycles in connection with the July 19 Incident. We may also experience longer sales cycles as customers seek to consolidate on our Falcon platform and negotiate larger deals, including in connection with our flexible subscription offering.
Previous wording
We derived approximately 30%, 32%, 32% and 33% of our total revenue from our international customers for fiscal 2023, fiscal 2024, fiscal 2025 and the six months ended July 31, 2025, respectively. We are continuing to adapt to and develop strategies to address international markets and our growth strategy includes expansion into target geographies, but there is no guarantee that such efforts will be successful. We expect that our international activities will continue to grow in the future, as we continue to pursue opportunities in international markets. These international operations will require significant management attention and financial resources and are subject to substantial risks, including:
Current wording
We derived approximately 30%, 32%, 32% and 33% of our total revenue from our international customers for fiscal 2023, fiscal 2024, fiscal 2025 and the nine months ended October 31, 2025, respectively. We are continuing to adapt to and develop strategies to address international markets and our growth strategy includes expansion into target geographies, but there is no guarantee that such efforts will be successful. We expect that our international activities will continue to grow in the future, as we continue to pursue opportunities in international markets. These international operations will require significant management attention and financial resources and are subject to substantial risks, including:
Previous wording
•government certification, software supply chain, or source code transparency requirements applicable to us or our products are constantly evolving and, in doing so, restrict our ability to sell to certain government customers until we have attained the new or revised certification or meet other applicable requirements, which we are not guaranteed to do. For example, although we are currently certified under the U.S. Federal Risk and Authorization Management Program, or FedRAMP, such certification is costly to maintain and if we lose our certification, it would restrict our ability to sell to government customers;
Current wording
•government certification, software supply chain, and source code transparency requirements applicable to us or our products are constantly evolving and, in doing so, restrict our ability to sell to certain government customers until we have attained the new or revised certification or meet other applicable requirements, which we are not guaranteed to do. For example, although we are currently certified under the U.S. Federal Risk and Authorization Management Program, or FedRAMP, such certification is costly to maintain and if we lose our certification, it would restrict our ability to sell to government customers;
Previous wording
We rely on a limited number of suppliers for several components of the equipment we use to operate our cloud platform and provide services to our customers. We generally purchase these components on a purchase order basis, and do not have long-term contracts guaranteeing supply. Our reliance on these suppliers exposes us to risks, including reduced control over production costs and constraints based on the then current availability, terms and pricing of these components. If we experience disruption or delay from our suppliers, we may not be able to obtain supplies or components from alternative suppliers on a timely basis or on terms that are favorable to us, if at all. The technology industry has experienced widespread component shortages and delivery delays, including as a result of geopolitical tensions (including actual or threatened changes in tariffs and trade restrictions), public health crises and natural disasters. While we have taken steps to mitigate our supply chain risk, supply chain disruptions and delays could nevertheless adversely impact our operations by, among other things, causing us to delay opening new data centers, delay increasing capacity or replacing defective equipment at existing data centers, and experience increased operating costs.
Current wording
We rely on a limited number of suppliers for several components of the equipment we use to operate our cloud platform and provide services to our customers. We generally purchase these components on a purchase order basis, and do not have long-term contracts guaranteeing supply. Our reliance on these suppliers exposes us to risks, including reduced control over production costs and constraints based on the then current availability, terms and pricing of these components. If we experience disruption or delay from our suppliers, we may not be able to obtain supplies or components from alternative suppliers on a timely basis or on terms that are favorable to us, if at all. Such risks may become more pronounced as we continue to scale our business. The technology industry has experienced widespread component shortages and delivery delays, including as a result of geopolitical tensions (including actual or threatened changes in tariffs and trade restrictions), public health crises and natural disasters. We may also experience component shortages and pricing increases from certain of our suppliers as a result of increased demand for such components. While we have taken steps to mitigate our supply chain risk, supply chain disruptions and delays could nevertheless adversely impact our operations by, among other things, causing us to delay opening new data centers, delay increasing capacity or replacing defective equipment at existing data centers, and experience increased operating costs.
Previous wording
In the United States, there are numerous federal, state and local data privacy and security laws, rules, and regulations governing the collection, sharing, use, retention, disclosure, security, transfer, storage and other processing of personal information, including federal and state data privacy and security laws, data breach notification laws, and data disposal laws. For example, at the federal level, we are subject to, among other laws and regulations, the rules and regulations promulgated under the authority of the Federal Trade Commission (which has the authority to regulate and enforce against unfair or deceptive acts or practices in or affecting commerce, including acts and practices with respect to data privacy and security), as well as the
Current wording
In the United States, there are numerous federal, state and local data privacy and security laws, rules, and regulations governing the collection, sharing, use, retention, disclosure, security, transfer, storage and other processing of personal information, including federal and state data privacy and security laws, data breach notification laws, and data disposal laws. For example, at the federal level, we are subject to, among other laws and regulations, the rules and regulations promulgated under the authority of the Federal Trade Commission (which has the authority to regulate and enforce against unfair or deceptive acts or practices in or affecting commerce, including acts and practices with respect to data privacy and security), as well as the Electronic Communication Privacy Act, the Computer Fraud and Abuse Act, the Health Insurance Portability and Accountability Act, and the Gramm Leach Bliley Act. The United States Congress also has considered, and in the future will likely consider, proposals from time to time for comprehensive federal data privacy and security legislation, to which we may become subject if passed.
Previous wording
We incorporate novel uses of AI technologies, including generative AI, into our products and operations, such as our Falcon platform. AI is complex and rapidly evolving, and we face significant competition from other companies who may incorporate AI into their products more quickly or more successfully than us, as well as an evolving regulatory landscape. The introduction of AI, and particularly generative AI, a relatively new and emerging technology in the early stages of commercial use, into new or existing products, and our operations, may result in new or enhanced governmental or regulatory scrutiny, litigation, confidentiality, ethical concerns, or other complications that could adversely affect our business, reputation, or financial results. For example, generative AI has been known to produce a false or “hallucinatory” interferences or output, and certain generative AI uses machine learning and predictive analytics, which may be flawed, insufficient, of poor quality, reflect unwanted forms of bias, or contain other errors or inadequacies, any of which may not be easily detectable. Our customers or others may rely on or use this flawed content to their detriment, which may expose us to brand or reputational harm, competitive harm, and/or legal liability. In addition, the use of AI by other companies has resulted in, and may in the future result in, data breaches and cybersecurity incidents that implicate the personal information of AI users. Further, the use of AI presents emerging ethical, social, legal and other issues, and if we enable or offer solutions that draw scrutiny or controversy due to perceived or actual risks or impacts on customers or on society as a whole, we may experience brand or reputational harm, competitive harm, delays in customer purchasing decisions and/or legal liability. Our continued incorporation of AI, including generative AI, into our products and operations requires us to expend significant resources. If such investments do not deliver anticipated benefits or are not otherwise successful, our business and results of operations may be harmed.
Current wording
We incorporate novel uses of AI technologies, including generative AI, into our products and operations, such as our Falcon platform. AI is complex and rapidly evolving, and we face significant competition from other companies who may incorporate AI into their products more quickly or more successfully than us, as well as an evolving regulatory landscape. The introduction of AI, and particularly generative AI, a relatively new and emerging technology in the early stages of commercial use, into new or existing products, and our operations, may result in new or enhanced governmental or regulatory scrutiny, litigation, confidentiality, ethical concerns, or other complications that could adversely affect our business, reputation, or financial results. For example, generative AI has been known to produce false or “hallucinatory” interferences or outputs, and certain generative AI uses machine learning and predictive analytics, which may be flawed, insufficient, of poor quality, reflect unwanted forms of bias, or contain other errors or inadequacies, any of which may not be easily detectable. Our customers or others may rely on or use this flawed content to their detriment, which may expose us to brand or reputational harm, competitive harm, and/or legal liability. In addition, the use of AI by other companies has resulted in, and may in the future result in, data breaches and cybersecurity incidents that implicate the personal information of AI users. Further, the use of AI presents emerging ethical, social, legal and other issues, and if we enable or offer solutions that draw scrutiny or controversy due to perceived or actual risks or impacts on customers or on society as a whole, we may experience brand or reputational harm, competitive harm, delays in customer purchasing decisions and/or legal liability. Our continued incorporation of AI, including generative AI, into our products and operations requires us to expend significant resources. If such investments do not deliver anticipated benefits or are not otherwise successful, our business and results of operations may be harmed.
Previous wording
Sales of a substantial number of shares of our common stock in the public market, particularly sales by our directors, executive officers and significant stockholders, or the perception that these sales could occur, could adversely affect the market price of our common stock. As of August 21, 2025, we had 250,955,140 shares of common stock outstanding.
Current wording
Sales of a substantial number of shares of our common stock in the public market, particularly sales by our directors, executive officers and significant stockholders, or the perception that these sales could occur, could adversely affect the market price of our common stock. As of November 25, 2025, we had 252,098,440 shares of common stock outstanding.
Previous wording
•increasing our vulnerability to adverse changes in general economic, industry and competitive conditions; and
Current wording
•increasing our vulnerability to adverse changes in general economic, industry and competitive conditions;
Previous wording
•exposing us to the risk of increased interest rates as certain of our borrowings, including borrowings under our revolving facility, are at variable rates of interest; and increasing our cost of borrowing.
Current wording
•exposing us to the risk of increased interest rates as certain of our borrowings, including borrowings under our revolving facility, are at variable rates of interest; and
Previous wording
We may not be able to generate sufficient cash to service all of our indebtedness, including the notes, and may be forced to take other actions to satisfy our obligations under our indebtedness, which may not be successful.
Current wording
We may not be able to generate sufficient cash to service all of our indebtedness, including the Senior Notes, and may be forced to take other actions to satisfy our obligations under our indebtedness, which may not be successful.
Previous wording
Our ability to make scheduled payments on or to refinance our debt obligations, including the Senior Notes, depends on our financial condition and results of operations, which in turn are subject to prevailing economic and competitive conditions and to certain financial, business and other factors beyond our control. We may not be able to maintain a level of cash flows from operating activities sufficient to permit us to pay the principal, premium, if any, and interest on our indebtedness, including the notes.
Current wording
Our ability to make scheduled payments on or to refinance our debt obligations, including the Senior Notes, depends on our financial condition and results of operations, which in turn are subject to prevailing economic and competitive conditions and to certain financial, business and other factors beyond our control. We may not be able to maintain a level of cash flows from operating activities sufficient to permit us to pay the principal, premium, if any, and interest on our indebtedness, including the Senior Notes.
Rearranged previous paragraphs (1)
Previous report — wording carried elsewhere
Electronic Communication Privacy Act, the Computer Fraud and Abuse Act, the Health Insurance Portability and Accountability Act, and the Gramm Leach Bliley Act. The United States Congress also has considered, is currently considering, and may in the future consider, various proposals for comprehensive federal data privacy and security legislation, to which we may become subject if passed.