CrowdStrike Holdings, Inc.
For the period ended Apr 30, 2026. Filed Jun 4, 2026.
View on SEC.govAbout this filing
A company's report for each of its first three quarters. The financial statements are not audited. It shows how the business has moved since the last annual report, and what management says changed.
Apr 30, 2026 · Filed Jun 4, 2026
What changed in Risk Factors?
Read the current filingPrevious report: 10-Q
Period ended 2025-10-31; filed 2025-12-03.
0001535527-25-000033
Item 1A. Risk FactorsCurrent report: 10-Q
Period ended 2026-04-30; filed 2026-06-04.
0001535527-26-000025
Item 1A. Risk FactorsThe baseline is this issuer’s latest earlier reporting period of the same form that was filed before the current report. A previous 10-Q is a different quarter, not a year-over-year comparison. Amendments are excluded.
Compared 354 previous paragraphs and 340 current paragraphs.
314 unchanged; 25 reworded; 1 added; 14 removed; 1 previous and 0 current paragraphs rearranged.
Tables are not compared: 0 previous and 0 current tables excluded. Dates, whitespace, punctuation and numbering changes are ignored; changes to financial figures remain significant.
A changed paragraph is not evidence that risk increased or decreased. An unchanged paragraph does not establish that risk stayed the same.
Added paragraphs (1)
Current report
Governmental authorities, certain investors, and other stakeholders continue to focus on, set and revise, expectations relating to corporate responsibility matters, both in the United States and internationally. Such expectations are evolving and may be contradictory. Our actions, undertakings and decisions in connection with corporate responsibility and/or sustainability-related initiatives, goals, or commitments, including whether to pursue them, and/or the extent to which we achieve them, may be challenged and could harm our reputation, adversely impact our ability to attract and retain employees or customers and expose us to increased scrutiny from investors, governmental authorities and others, or subject us to liability. Additionally, compliance with current or future legal requirements or stakeholder expectations regarding corporate responsibility and/or sustainability matters, including disclosure and reporting obligations, may result in increased costs and legal and operational risks. For example, the proliferation of regulations and guidance addressing corporate responsibility topics at various government levels has required and may continue to require significant effort and resources, and our efforts may not ensure compliance with evolving standards. Any such damage to our reputation, adverse impact to our ability to attract and retain employees or customers, increased scrutiny, exposure to liability and increased compliance costs may adversely impact our business, financial condition, or results of operations.
Removed paragraphs (14)
Previous report
•exposing us to the risk of increased interest rates as certain of our borrowings, including borrowings under our revolving facility, are at variable rates of interest; and
Previous report
Further, our credit agreement contains provisions that restrict our ability to dispose of assets and use the proceeds from any such disposition. We may not be able to consummate those dispositions or to obtain the proceeds that we could realize from them and these proceeds may not be adequate to meet any debt service obligations then due. These alternative measures may not be successful and may not permit us to meet our scheduled debt service obligations.
Previous report
In addition, the restrictive covenants in the credit agreement governing our revolving facility require us to maintain specified financial ratios and satisfy other financial condition tests. Our ability to meet those financial ratios and tests can be affected by events beyond our control, and we may not be able to meet them. These restrictive covenants could adversely affect our ability to:
Previous report
•make strategic acquisitions or investments or enter into joint ventures;
Previous report
•withstand a future downturn in our business, the industry or the economy in general;
Previous report
•engage in business activities, including future opportunities, that may be in our best interest; and
Previous report
•plan for or react to market conditions or otherwise execute our business strategies.
Previous report
These restrictions may affect our ability to expand our business, which could have a material adverse effect on our business, financial condition and results of operations.
Previous report
Our revolving facility and the indenture that governs our Senior Notes contain cross-default provisions that could result in the acceleration of all of our indebtedness.
Previous report
A breach of the covenants under our revolving facility or the indenture that governs our Senior Notes could result in an event of default under the applicable indebtedness. Such a default may allow the creditors to accelerate the related indebtedness and may result in the acceleration of any other indebtedness to which a cross-acceleration or cross-default provision applies. In addition, an event of default under the credit agreement governing our revolving facility would permit the lenders under our revolving facility to terminate all commitments to extend further credit under that facility. Furthermore, if we were unable to repay amounts due and payable under our revolving facility, those lenders could proceed against the collateral granted to them to secure that indebtedness. In the event our lenders or noteholders accelerate the repayment of our borrowings, we and our guarantors may not have sufficient assets to repay that indebtedness. Additionally, we may not be able to borrow money from other lenders to enable us to refinance our indebtedness.
Previous report
In addition, under Sections 382 and 383 of the Internal Revenue Code, if a corporation undergoes an “ownership change,” generally defined as a greater than 50% change (by value) in ownership by “5 percent shareholders” over a rolling three-year period, the corporation’s ability to use its pre-change net operating loss carryovers and other pre-change tax attributes, such as R&D credits, to offset its post-change income or taxes may be limited. We may experience ownership changes in the future as a result of shifts in our stock ownership. As a result, if we earn net taxable income, our ability to use our pre-change net operating loss carryforwards to offset U.S. federal taxable income may be subject to limitations, which could potentially result in increased future tax liability to us.
Previous report
Regulators, certain investors, and other stakeholders have focused on and set, and in the future may continue to focus on, set and revise, expectations relating to environmental, social and governance (“ESG”) matters, both in the United States and internationally. We have undertaken and expect to continue to undertake certain ESG-related initiatives, goals and commitments, which we have communicated on our website, in our SEC filings and elsewhere. These initiatives, goals, or commitments could be difficult to achieve and have in the past been, and may in the future be, costly to implement. We could fail to achieve, or be perceived to fail to achieve, our ESG-related initiatives, goals, or commitments. In addition, we could be criticized for the timing, scope or nature of these initiatives, goals, or commitments, or for any revisions to them. Stakeholders could also challenge the accuracy, adequacy, or completeness of our ESG-related disclosures. Our actual or perceived failure to achieve some or all of our ESG-related initiatives, goals, or commitments or maintain ESG practices that meet evolving stakeholder expectations or regulatory requirements could harm our reputation, adversely impact our ability to attract and retain employees or customers and expose us to increased scrutiny from ESG-focused investors, regulatory authorities and others, or subject us to liability. Damage to our reputation or reduced demand for our products may adversely impact our business, financial condition, or results of operations.
Reworded paragraphs (25)
Previous wording
The July 19 Incident has harmed, and is expected to continue to harm, our business, sales, customer and partner relations, and our reputation. As a result of the July 19 Incident, certain of our existing or prospective customers have elected to, and may in the future elect to, defer purchasing decisions relating to our products and services or not purchase our products and services at all. Customers have also decided, and may in the future decide, to terminate or not renew their agreements with us. The July 19 Incident has negatively impacted, and may in the future negatively impact, our existing or prospective partners’ ability or willingness to promote our products or services. Certain of our competitors have aggressively approached our current and prospective customers and partners to attempt to capitalize on the July 19 Incident, and may continue to do so. Furthermore, we have agreed to, and expect to agree to in the future, provide incentives in connection with our commercial arrangements with our customers, including subscription period extensions, discounts or promotional modules. The July 19 Incident has received negative media coverage and harmed our reputation and brand. If we are unable to regain the trust of our current and prospective customers and partners, or if negative media coverage and publicity continues, whether directly or indirectly related to the July 19 Incident, our reputation and brand may suffer further, exacerbating the effects discussed herein. These factors may result in harm to our business, results of operations and financial condition.
Current wording
On July 19, 2024, we released a content configuration update for our Falcon sensor that resulted in system crashes for certain Windows systems (the “July 19 Incident”). We have incurred, and expect to continue to incur, significant costs and expenses related to the incident. The July 19 Incident has harmed, and is expected to continue to harm, our business, sales, customer and partner relations, and our reputation. As a result of the July 19 Incident, certain of our existing or prospective customers have deferred or decided against purchases of our products and services and terminated or chosen not to renew their contracts with us, and others may take similar actions in the future. The July 19 Incident has negatively impacted, and may in the future negatively impact, our existing or prospective partners’ ability or willingness to promote our products or services. Certain of our competitors have aggressively approached our current and prospective customers and partners to attempt to capitalize on the July 19 Incident, and may continue to do so. Furthermore, we have agreed to, and expect to agree to in the future, provide incentives in connection with our commercial arrangements with our customers, including subscription period extensions, discounts or promotional modules. The July 19 Incident has received negative media coverage and harmed our reputation and brand. Additional negative media coverage and publicity, whether directly or indirectly related to the July 19 Incident, may harm our reputation and brand further, exacerbating the effects discussed herein. These factors may result in harm to our business, results of operations and financial condition. While we are investing in enhancements to software resiliency, testing and customer controls following the July 19 Incident, we cannot guarantee that such enhancements will be effective, or that our products do not have or will not have defects, errors, or vulnerabilities.
Previous wording
We have incurred net losses each year prior to fiscal 2024, and we may not achieve or maintain profitability in the future. We experienced net losses of $19.3 million and $183.2 million for fiscal 2025 and 2023, respectively, and net income of $89.3 million for fiscal 2024. As of October 31, 2025, we had an accumulated deficit of $1.3 billion. While we have experienced significant growth in revenue in recent periods, and have achieved profitability during certain periods, including fiscal 2024, we cannot assure you when or whether we will reach sustained profitability. We also expect our operating expenses to increase in the future as we continue to invest for our future growth, which will negatively affect our results of operations if our total revenue does not increase. Additionally, on May 6, 2025, we announced a strategic plan (the “Plan”) to evolve our operations to yield greater efficiencies as we continue to scale our business with focus and discipline to meet our goals. We cannot assure you that the Plan or the above-mentioned investments will result in substantial increases in our total revenue or improvements in our results of operations. We also have incurred and expect to continue to incur significant additional legal, accounting, and other expenses as a public company. Any failure to increase our revenue as we invest in our business or to manage our costs could prevent us from achieving or maintaining profitability or positive cash flow.
Current wording
We have incurred net losses each year prior to fiscal 2024, and we may not achieve or maintain profitability in the future. We experienced net losses of $162.5 million and $15.2 million for fiscal 2026 and 2025, respectively, and net income of $72.2 million for fiscal 2024. As of April 30, 2026, we had an accumulated deficit of $1.3 billion. While we have experienced significant growth in revenue in recent periods, and have achieved profitability during certain periods, including the first quarter of fiscal 2027 and fiscal 2024, we cannot assure you when or whether we will reach sustained profitability. We also expect our operating expenses to increase in the future as we continue to invest for our future growth, which will negatively affect our results of operations if our total revenue does not increase. We also have incurred and expect to continue to incur significant additional legal, accounting, and other expenses as a public company. Any failure to increase our revenue as we invest in our business or to manage our costs could prevent us from achieving or maintaining profitability or positive cash flow.
Previous wording
Many of our competitors have greater financial, technical, marketing, sales, and other resources, greater name recognition, longer operating histories, and a larger base of customers than we do. They may be able to devote greater resources to the development, promotion, and sale of services than we can, and they may offer lower pricing than we do. Further, they may have greater resources for research and development of new technologies, the provision of customer support, and the pursuit of acquisitions. Our larger competitors have substantially broader and more diverse product and services offerings as well as routes to market, which allows them to leverage their relationships based on other products or incorporate functionality into existing products to gain business in a manner that discourages users from purchasing our platform, including our cloud modules. Conditions in our market could change rapidly and significantly as a result of technological advancements, including with respect to AI. Our competitors may more successfully incorporate AI into their products, gain or leverage superior access to certain AI technologies, and achieve higher market acceptance of their AI solutions. Conditions in our market could also change rapidly and significantly due to partnering or acquisitions by our competitors or continuing market consolidation. Some of our competitors have recently made acquisitions of businesses or have established cooperative relationships that may allow them to offer more directly competitive and comprehensive solutions than were previously offered and adapt more quickly to new technologies and customer needs. These competitive pressures in our market or our failure to compete effectively may result in price reductions, fewer orders, reduced revenue and gross margins, increased net losses and loss of market share. Further, competitors that specialize in providing protection from a single type of security threat may be able to deliver these targeted security products to the market quicker than we can or convince organizations that these limited products meet their needs. Even if there is significant demand for cloud-based security solutions like ours, if our competitors include functionality that is, or is perceived to be, equivalent to or better than ours in legacy products that are already generally accepted as necessary components of an organization’s IT security architecture, we may have difficulty increasing the market penetration of our solutions. Furthermore, even if the functionality offered by other security and IT operations providers is more limited than the functionality of our platform, organizations may elect to accept such limited functionality in lieu of adding products from additional vendors like us. If we are unable to compete successfully, or if competing successfully requires us to take aggressive pricing or other actions, our business, financial condition, and results of operations would be adversely affected.
Current wording
Many of our competitors have greater financial, technical, marketing, sales, and other resources, greater name recognition, longer operating histories, and a larger base of customers than we do. They may be able to devote greater resources to the development, promotion, and sale of services than we can, and they may offer lower pricing than we do. Further, they may have greater resources for research and development of new technologies, the provision of customer support, and the pursuit of acquisitions. Our larger competitors have substantially broader and more diverse product and services offerings as well as routes to market, which allows them to leverage their relationships based on other products or incorporate functionality into existing products to gain business in a manner that discourages users from purchasing our platform, including our cloud modules. Conditions in our market are changing rapidly and significantly as a result of technological advancements, including with respect to AI. Our competitors may more successfully incorporate AI into their products, gain or leverage superior access to certain AI technologies, and achieve higher market acceptance of their AI solutions. Conditions in our market could also change rapidly and significantly due to partnering or acquisitions by our competitors or continuing market consolidation. Some of our competitors have recently made acquisitions of businesses or have established cooperative relationships that may allow them to offer more directly competitive and comprehensive solutions than were previously offered and adapt more quickly to new technologies and customer needs. These competitive pressures in our market or our failure to compete effectively may result in price reductions, fewer orders, reduced revenue and gross margins, increased net losses and loss of market share. Further, competitors that specialize in providing protection from a single type of security threat may be able to deliver these targeted security products to the market quicker than we can or convince organizations that these limited products meet their needs. Even if there is significant demand for cloud-based security solutions like ours, if our competitors include functionality that is, or is perceived to be, equivalent to or better than ours in legacy products that are already generally accepted as necessary components of an organization’s IT security architecture, we may have difficulty increasing the market penetration of our solutions. Furthermore, even if the functionality offered by other security and IT operations providers is more limited than the functionality of our platform, organizations may elect to accept such limited functionality in lieu of adding products from additional vendors like us. If we are unable to compete successfully, or if competing successfully requires us to take aggressive pricing or other actions, our business, financial condition, and results of operations would be adversely affected.
Previous wording
In addition, job candidates and existing employees often consider the value of the equity awards they receive in connection with their employment. Therefore, volatility or lack of performance in our stock price could affect our ability to attract and retain our key employees. Also, many of our employees have become, or will soon become, vested in a substantial amount of equity awards, which may give them a substantial amount of personal wealth. This may make it more difficult for us to retain and motivate these employees, and this wealth could affect their decision about whether or not they continue to work for us. In addition, the Plan could negatively affect our ability torecruit and retain skilled personnel. Any failure to successfully attract, integrate or retain qualified personnel to fulfill our current or future needs could adversely affect our business, results of operations and financial condition.
Current wording
In addition, job candidates and existing employees often consider the value of the equity awards they receive in connection with their employment. Therefore, volatility or lack of performance in our stock price could affect our ability to attract and retain our key employees. Also, many of our employees have become, or will soon become, vested in a substantial amount of equity awards, which may give them a substantial amount of personal wealth. This may make it more difficult for us to retain and motivate these employees, and this wealth could affect their decision about whether or not they continue to work for us. In addition, the Strategic Plan (as defined in the notes to our unaudited condensed consolidated financial statements) could negatively affect our ability torecruit and retain skilled personnel. Any failure to successfully attract, integrate or retain qualified personnel to fulfill our current or future needs could adversely affect our business, results of operations and financial condition.
Previous wording
We depend on our direct sales force to obtain new customers and increase sales with existing customers. Our ability to achieve significant revenue growth will depend, in large part, on our success in recruiting, training and retaining sufficient numbers of sales personnel, particularly in international markets. We have expanded our sales organization significantly in recent periods and expect to continue to add additional sales capabilities in the near term. There is significant competition for sales personnel with the skills and technical knowledge that we require. New hires require significant training and may take significant time before they achieve full productivity, and this delay is accentuated by our long sales cycles. Our recent hires and planned hires may not become productive as quickly as we expect, and we may be unable to hire or retain sufficient numbers of qualified individuals in the markets where we do business or plan to do business. In addition, a large percentage of our sales force is new to our company and selling our solutions, and therefore this team may be less effective than our more seasoned sales personnel. Furthermore, hiring sales personnel in new countries, or expanding our existing presence, requires upfront and ongoing expenditures that we may not recover if the sales personnel fail to achieve full productivity. We cannot predict whether, or to what extent, our sales will increase as we expand our sales force or how long it will take for sales personnel to become productive. If we are unable to hire and train a sufficient number of effective sales personnel, or the sales personnel we hire are not successful in obtaining new customers or increasing sales to our existing customer base, our business and results of operations will be adversely affected.
Current wording
We depend on our direct sales force to obtain new customers and increase sales with existing customers. Our ability to achieve significant revenue growth will depend, in large part, on our success in recruiting, training, incentivizing and retaining sufficient numbers of sales personnel, particularly in international markets. We have expanded our sales organization significantly in recent periods and expect to continue to add additional sales capabilities in the near term. There is significant competition for sales personnel with the skills and technical knowledge that we require. New hires require significant training and may take significant time before they achieve full productivity, and this delay is accentuated by our long sales cycles. Our recent hires and planned hires may not become productive as quickly as we expect, and we may be unable to hire or retain sufficient numbers of qualified individuals in the markets where we do business or plan to do business. In addition, a large percentage of our sales force is new to our company and selling our solutions, and therefore this team may be less effective than our more seasoned sales personnel. Furthermore, hiring sales personnel in new countries, or expanding our existing presence, requires upfront and ongoing expenditures that we may not recover if the sales personnel fail to achieve full productivity. We cannot predict whether, or to what extent, our sales will increase as we expand our sales force or how long it will take for sales personnel to become productive. If we are unable to hire and train a sufficient number of effective sales personnel, or the sales personnel we hire are not successful in obtaining new customers or increasing sales to our existing customer base, our business and results of operations will be adversely affected.
Previous wording
We derived approximately 30%, 32%, 32% and 33% of our total revenue from our international customers for fiscal 2023, fiscal 2024, fiscal 2025 and the nine months ended October 31, 2025, respectively. We are continuing to adapt to and develop strategies to address international markets and our growth strategy includes expansion into target geographies, but there is no guarantee that such efforts will be successful. We expect that our international activities will continue to grow in the future, as we continue to pursue opportunities in international markets. These international operations will require significant management attention and financial resources and are subject to substantial risks, including:
Current wording
We derived approximately 32%, 32%, 33% and 34% of our total revenue from our international customers for fiscal 2024, fiscal 2025, fiscal 2026 and the three months ended April 30, 2026, respectively. We are continuing to adapt to and develop strategies to address international markets and our growth strategy includes expansion into target geographies, but there is no guarantee that such efforts will be successful. We expect that our international activities will continue to grow in the future, as we continue to pursue opportunities in international markets. These international operations will require significant management attention and financial resources and are subject to substantial risks, including:
Previous wording
•unexpected costs for the localization of our services, including translation into foreign languages and adaptation for local practices and regulatory requirements (including, but not limited to data localization requirements, data sovereignty requirements and other digital restrictions, such as those emerging in the EU);
Current wording
•unexpected costs for the localization of our services, including translation into foreign languages and adaptation for local practices and regulatory requirements (including, but not limited to data localization requirements, digital sovereignty requirements and other restrictions, such as those emerging in the EU);
Previous wording
Our future growth is dependent upon our ability to continue to meet the needs of new customers and the expanding needs of our existing customers as their use of our solutions grow. As our customers gain more experience with our solutions, the number of endpoints and events, the amount of data transferred, processed and stored by us, the number of locations where our platform and services are being accessed, have in the past, and may in the future, expand rapidly. In order to meet the performance and other requirements of our customers, we intend to continue to make significant investments to increase capacity and to develop and implement new technologies, including those involving AI, in our service and cloud infrastructure operations. These technologies, which include databases, applications and server optimizations, network and hosting strategies, and automation, are often advanced, complex, new and untested. We may not be successful in developing or implementing these technologies. In addition, as our business grows, we must continue to improve and expand our information technology infrastructure. It takes a significant amount of time to plan, develop and test improvements to our technologies and infrastructure, and we may not be able to accurately forecast demand or predict the results we will realize from such improvements. We rely on external ecosystems, such as operating systems, to operate and make our products and services available to customers. If we are unable to adapt to product or policy changes in such ecosystems, or if we do not effectively operate with such ecosystems, demand for and availability of our products or services could decline. To the extent that we do not effectively scale our operations and infrastructure to meet the needs of our business, our growing customer base and to maintain performance as our customers expand their use of our solutions, we may not be able to grow as quickly as we anticipate, our customers may reduce or cancel use of our solutions and we may be unable to compete as effectively and our business and results of operations may be harmed.
Current wording
Our future growth is dependent upon our ability to continue to meet the needs of new customers and the expanding needs of our existing customers as their use of our solutions grow. As our customers gain more experience with our solutions, the number of endpoints and events, the amount of data transferred, processed and stored by us, the number of locations where our platform and services are being accessed, have in the past, and may in the future, expand rapidly. In order to meet the performance and other requirements of our customers, we intend to continue to make significant investments to increase capacity and to develop and implement new technologies, including those involving AI, in our service and cloud infrastructure operations. These technologies, which include databases, applications and server optimizations, network and hosting strategies, and automation, are often advanced, complex, new and untested. We may not be successful in developing or implementing these technologies. In addition, as our business grows, we must continue to improve and expand our information technology infrastructure. It takes a significant amount of time to plan, develop and test improvements to our technologies and infrastructure, and we may not be able to accurately forecast demand or predict the results we will realize from such improvements. We rely on external ecosystems, such as operating systems and platforms, to operate and make, in various layers of technology stacks, our products and services available to customers. If we are unable to adapt to product or policy changes in such ecosystems, or if we do not effectively operate with such ecosystems, demand for and availability of our products or services could decline. To the extent that we do not effectively scale our operations and infrastructure to meet the needs of our business, our growing customer base and to maintain performance as our customers expand their use of our solutions, we may not be able to grow as quickly as we anticipate, our customers may reduce or cancel use of our solutions and we may be unable to compete as effectively and our business and results of operations may be harmed.
Previous wording
We expect that the combination of our existing cash and cash equivalents, cash flows from operations, and our revolving facility will be sufficient to meet our anticipated cash needs for working capital and capital expenditures for at least the next 12 months. Retaining or expanding our current levels of personnel and product and service offerings may require additional funds to respond to business challenges, including the need to develop new products or services and enhancements to our Falcon platform, improve our operating infrastructure, or acquire complementary businesses and technologies. Our failure to raise additional capital or generate the significant capital necessary to expand our operations and invest in new products or services could reduce our ability to compete and could harm our business. Accordingly, we may need to engage in additional equity or debt financings to secure additional funds. If we raise additional equity financing, our stockholders may experience significant dilution of their ownership interests and the market price of our common stock could decline. If we engage in additional debt financing, the holders of such debt would have priority over the holders of our common stock, and we may be required to accept terms that further restrict our operations or our ability to incur additional indebtedness or to take other actions that would otherwise be in the interests of the debt holders. Any of the above could harm our business, results of operations, and financial condition.
Current wording
We expect that the combination of our existing cash and cash equivalents and cash flows from operations will be sufficient to meet our anticipated cash needs for working capital and capital expenditures for at least the next 12 months. Retaining or expanding our current levels of personnel and product and service offerings may require additional funds to respond to business challenges, including the need to develop new products or services and enhancements to our Falcon platform, improve our operating infrastructure, or acquire complementary businesses and technologies. Our failure to raise additional capital or generate the significant capital necessary to expand our operations and invest in new products or services could reduce our ability to compete and could harm our business. Accordingly, we may need to engage in additional equity or debt financings to secure additional funds. If we raise additional equity financing, our stockholders may experience significant dilution of their ownership interests and the market price of our common stock could decline. If we engage in additional debt financing, the holders of such debt would have priority over the holders of our common stock, and we may be required to accept terms that further restrict our operations or our ability to incur additional indebtedness or to take other actions that would otherwise be in the interests of the debt holders. Any of the above could harm our business, results of operations, and financial condition.
Previous wording
Legal developments in the EEA have created complexity and uncertainty regarding processing and transfers of personal data from the EEA to the United States and other so-called third countries outside the EEA, including in the context of website cookies. Similar complexities and uncertainties also apply to transfers from the U.K. to third countries. While we have taken steps to mitigate the impact on us, such as implementing the European Commission’s standard contractual clauses (“SCCs”) and the U.K.’s international Data Transfer Agreement (or the U.K.’s international data transfer addendum that can be used with the SCCs), the efficacy and longevity of these mechanisms remains uncertain. On July 10, 2023, the European Commission adopted an adequacy decision concluding that the U.S. ensures an adequate level of protection for personal data transferred from the EU to the U.S. under the recently adopted EU-U.S. Data Privacy Framework (followed on October 12, 2023 with the adoption of an adequacy decision in the U.K. for the U.K.-U.S. Data Bridge); however, such new adequacy decision has been challenged in EU courts, and is likely to face additional challenges. Moreover, although the U.K. currently has an adequacy decision from the European Commission, such that SCCs are not required for the transfer of personal data from the EEA to the U.K., that decision will sunset in December 2025 unless extended (as it was prior to the previous June 2025 deadline) and it may be revoked in the future by the European Commission if the U.K. data protection regime is reformed in ways that deviate substantially from the GDPR. The EU has also enacted legislation that would regulate non-personal data and establish new cybersecurity standards, and other countries, including the U.K., may similarly do so in the future. In particular, the EU’s Digital Services Act and the EU’s Data Act both entered into force in 2024 and impose certain content moderation, notice and transparency obligations on digital platforms and intermediaries and certain data and cloud service interoperability and switching obligations to enable users to switch between cloud service providers (as well as certain requirements concerning cross-border international transfers of non-personal data outside the EEA), respectively. Additionally, the EU’s Network and Information Security Directive II, adopted in 2023, regulates resilience and incident response capabilities of entities operating in a number of sectors, including the digital infrastructure sector and provides for EU member states to have issued implementing legislation by October 2024. Further, the EU’s Digital Operational Resiliency Act became effective in January 2025 and imposes certain requirements on entities in the financial sector and their third-party cloud service providers related to managing and mitigating information and communication technology risk. If we are unable to transfer data, including personal data, between and among countr…
Excerpt shortened here; the source contains the full paragraph.
Current wording
Legal developments in the EEA have created complexity and uncertainty regarding processing and transfers of personal data from the EEA to the United States and other so-called third countries outside the EEA, including in the context of website cookies. Similar complexities and uncertainties also apply to transfers from the U.K. to third countries. While we have taken steps to mitigate the impact on us, such as implementing the European Commission’s standard contractual clauses (“SCCs”) and the U.K.’s international Data Transfer Agreement (or the U.K.’s international data transfer addendum that can be used with the SCCs), the efficacy and longevity of these mechanisms remains uncertain. On July 10, 2023, the European Commission adopted an adequacy decision concluding that the U.S. ensures an adequate level of protection for personal data transferred from the EU to the U.S. under the recently adopted EU-U.S. Data Privacy Framework (followed on October 12, 2023 with the adoption of an adequacy decision in the U.K. for the U.K.-U.S. Data Bridge); however, such new adequacy decision has been challenged in EU courts, and is likely to face additional challenges. Moreover, although the U.K. currently has an adequacy decision from the European Commission, such that SCCs are not required for the transfer of personal data from the EEA to the U.K., that decision will sunset in December 2031 unless extended or renewed and it may be revoked in the future by the European Commission if the U.K. data protection regime is reformed in ways that deviate substantially from the GDPR. The EU has also enacted legislation that would regulate non-personal data and establish new cybersecurity standards, and other countries, including the U.K., may similarly do so in the future. In particular, the EU’s Digital Services Act and the EU’s Data Act both entered into force in 2024 and impose certain content moderation, notice and transparency obligations on digital platforms and intermediaries and certain data and cloud service interoperability and switching obligations to enable users to switch between cloud service providers (as well as certain requirements concerning cross-border international transfers of non-personal data outside the EEA), respectively. Additionally, the EU’s Network and Information Security Directive II, adopted in 2023, regulates resilience and incident response capabilities of entities operating in a number of sectors, including the digital infrastructure sector and provides for EU member states to have issued implementing legislation by October 2024. Further, the EU’s Digital Operational Resiliency Act became effective in January 2025 and imposes certain requirements on entities in the financial sector and their third-party cloud service providers related to managing and mitigating information and communication technology risk. If we are unable to transfer data, including personal data, between and among countries and regions in which we operate, or ar…
Excerpt shortened here; the source contains the full paragraph.
Previous wording
Our business is subject to regulation by various federal, state, local and foreign governmental agencies, including agencies responsible for monitoring and enforcing data privacy and security laws and regulations, employment and labor laws, workplace safety, product safety, environmental laws, consumer protection laws, anti-bribery laws, import and export controls, federal securities laws and tax laws and regulations. In certain jurisdictions, these regulatory requirements may be more stringent than in the United States. Increased scrutiny may also lead to new laws and regulations, or new applications of existing laws and regulations, that target topics such as AI, critical infrastructure software resiliency and concentration risk. Noncompliance by us, our employees, representatives, contractors, channel partners, agents, intermediaries, or other third parties with applicable regulations or requirements could subject us to:
Current wording
Our business is subject to regulation by various federal, state, local and foreign governmental agencies, including agencies responsible for monitoring and enforcing data privacy and security laws and regulations, employment and labor laws, workplace safety, product safety, environmental laws, consumer protection laws, anti-bribery laws, import and export controls, federal securities laws and tax laws and regulations. In certain jurisdictions, these regulatory requirements may be more stringent than in the United States. Increased scrutiny may also lead to new laws and regulations, or new applications of existing laws and regulations, that target topics such as AI, critical infrastructure software resiliency, digital sovereignty requirements and concentration risk. Our efforts to comply with applicable laws and regulations may increase operating costs, which could adversely affect our business and operations. Noncompliance by us, our employees, representatives, contractors, channel partners, agents, intermediaries, or other third parties with applicable regulations or requirements could subject us to:
Previous wording
The technologies underlying AI and its uses are subject to a variety of laws and regulations, including intellectual property, privacy, data protection cybersecurity, consumer protection, competition, and equal opportunity laws and regulations, and are expected to be subject to new laws and regulations or new applications of existing laws and regulations. AI is the subject of ongoing review by various U.S. governmental and regulatory agencies, and various U.S. states and other foreign jurisdictions are applying, or are considering applying, their cybersecurity and data protection laws to AI or are considering general legal frameworks for AI. For example, in the EU, the first set of provisions under the EU’s AI Act became effective in February 2025, with additional provisions becoming effective on later dates. The AI Act establishes, among other things, a risk-based governance framework for regulating AI systems in the EU by categorizing AI systems, based on the risks associated with such AI systems’ intended purposes, as creating unacceptable or high risks, with all other AI systems being considered low risk. This regulatory framework is expected to have a material impact on the way AI is regulated in the EU and beyond. As further indication of a trend in increased regulatory and legislative oversight of the use and development of AI, in 2024, California enacted a range of laws regulating the use and development of AI, which generally relate to transparency, privacy and fairness, among other concerns. Other states, including Colorado and Utah, have also enacted AI-related laws, and several more have proposed enacting such laws.
Current wording
The technologies underlying AI and its uses are subject to a variety of laws and regulations, including intellectual property, privacy, data protection cybersecurity, consumer protection, competition, and equal opportunity laws and regulations, and are expected to be subject to new laws and regulations or new applications of existing laws and regulations. AI is the subject of ongoing review by various U.S. governmental and regulatory agencies, and various U.S. states and other foreign jurisdictions are applying, or are considering applying, their cybersecurity and data protection laws to AI or are considering general legal frameworks for AI. For example, in the EU, the first set of provisions under the EU’s AI Act became effective in February 2025, with additional provisions becoming effective on later dates. The AI Act establishes, among other things, a risk-based governance framework for regulating AI systems in the EU by categorizing AI systems, based on the risks associated with such AI systems’ intended purposes, as creating unacceptable or high risks, with all other AI systems being considered low risk. This regulatory framework is expected to have a material impact on the way AI is regulated in the EU and beyond. As further indication of a trend in increased regulatory and legislative oversight of the use and development of AI, in 2024, California enacted a range of laws regulating the use and development of AI, which generally relate to transparency, privacy and fairness, among other concerns. Other states, including Texas, Colorado and Utah, have also enacted AI-related laws, and several more have proposed enacting such laws.
Previous wording
In June 2025, we announced that our board of directors authorized a program under which we are authorized to repurchase up to $1.0 billion of our outstanding shares of common stock (the “Share Repurchase Program”). Such repurchases may be made from time to time using a variety of methods, including open market purchases, privately negotiated transactions and trading plans intended to qualify under Rule 10b5-1 under the Exchange Act. The Share Repurchase Program does not have a fixed expiration date and may be suspended or discontinued at any time. We are not obligated to use the Share Repurchase Program to acquire any specific amount of common stock. We intend to use the Share Repurchase Program opportunistically depending on market prices and other factors, and there can be no assurance that we will repurchase any shares of stock under the Share Repurchase Program. Any failure to repurchase stock after we have announced our intention to do so may negatively impact our reputation and investor confidence in us and may negatively impact our stock price.
Current wording
In June 2025, we announced that our board of directors authorized a program under which we are authorized to repurchase up to $1.0 billion of our outstanding shares of common stock (the “Share Repurchase Program”). On April 6, 2026, we announced that our board of directors authorized the repurchase of up to an additional $500 million of our outstanding shares of common stock, bringing the total authorization under the Share Repurchase Program to $1.5 billion. Such repurchases may be made from time to time using a variety of methods, including open market purchases, privately negotiated transactions and trading plans intended to qualify under Rule 10b5-1 under the Exchange Act. The Share Repurchase Program does not have a fixed expiration date and may be suspended or discontinued at any time. We are not obligated to use the Share Repurchase Program to acquire any specific amount of common stock. We intend to use the Share Repurchase Program opportunistically depending on market prices and other factors.
Previous wording
The timing and amount of any repurchases, if any, will be subject to liquidity, market and economic conditions, restrictions under our credit agreement, compliance with applicable legal requirements, and other relevant factors. If we do repurchase shares of our common stock under the Share Repurchase Program, such repurchases will reduce the amount of cash we have available to fund working capital, repayment of debt, capital expenditures, strategic acquisitions or business opportunities, and other general corporate purposes. The Share Repurchase Program may not enhance long-term stockholder value because the market price of our common stock may decline below the levels at which we repurchased shares and short-term stock price fluctuations could reduce the effectiveness of this program.
Current wording
The timing and amount of any repurchases will be subject to liquidity, market and economic conditions, any applicable restrictions under future credit facilities, compliance with applicable legal requirements, and other relevant factors. Repurchases of shares of our common stock under the Share Repurchase Program will reduce the amount of cash we have available to fund working capital, repay debt, make capital expenditures and strategic acquisitions or pursue business opportunities, and for other general corporate purposes. The Share Repurchase Program may not enhance long-term stockholder value because the market price of our common stock may decline below the levels at which we repurchased shares and short-term stock price fluctuations could reduce the effectiveness of this program.
Previous wording
Sales of a substantial number of shares of our common stock in the public market, particularly sales by our directors, executive officers and significant stockholders, or the perception that these sales could occur, could adversely affect the market price of our common stock. As of November 25, 2025, we had 252,098,440 shares of common stock outstanding.
Current wording
Sales of a substantial number of shares of our common stock in the public market, particularly sales by our directors, executive officers and significant stockholders, or the perception that these sales could occur, could adversely affect the market price of our common stock. As of May 28, 2026, we had 254,564,820 shares of common stock outstanding.
Previous wording
We do not intend to pay dividends in the foreseeable future. As a result, your ability to achieve a return on your investment will depend on appreciation in the price of our common stock.
Current wording
We do not intend to pay cash dividends in the foreseeable future. As a result, your ability to achieve a return on your investment will depend on appreciation in the price of our common stock.
Previous wording
We have never declared or paid any cash dividends on our capital stock. We currently intend to retain all available funds and any future earnings for use in the operation of our business and do not anticipate paying any dividends in the foreseeable future. Any determination to pay dividends in the future will be at the discretion of our board of directors. Additionally, our ability to pay dividends is limited by restrictions on our ability to pay dividends or make distributions under the terms of our credit facility. Accordingly, investors must rely on sales of their common stock after price appreciation, which may never occur, as the only way to realize any future gains on their investments.
Current wording
We have never declared or paid any cash dividends on our capital stock. We currently intend to retain all available funds and any future earnings for use in the operation of our business and do not anticipate paying any cash dividends in the foreseeable future. Any determination to pay dividends in the future will be at the discretion of our board of directors. Additionally, our ability to pay dividends may become limited by restrictions on our ability to pay dividends or make distributions under the terms of any future credit facility. Accordingly, investors must rely on sales of their common stock after price appreciation, which may never occur, as the only way to realize any future gains on their investments.
Previous wording
As of October 31, 2025, we had $750.0 million principal amount of indebtedness outstanding (excluding intercompany indebtedness), and there is additional availability under our revolving facility of up to $750.0 million (excluding issued but undrawn letters of credit). Our indebtedness could have important consequences, including:
Current wording
As of April 30, 2026, we had $750.0 million principal amount of indebtedness outstanding (excluding intercompany indebtedness). Our indebtedness could have important consequences, including:
Previous wording
•increasing our vulnerability to adverse changes in general economic, industry and competitive conditions;
Current wording
•increasing our vulnerability to adverse changes in general economic, industry and competitive conditions; and
Previous wording
If we cannot make scheduled payments on our indebtedness, we will be in default and holders of our Senior Notes could declare all outstanding principal and interest to be due and payable, the lenders under our revolving facility could terminate their commitments to loan money, our secured lenders could foreclose against the assets securing their borrowings and we could be forced into bankruptcy or liquidation. If we breach the covenants under our debt instruments, we would be in default under such instruments. The holders of such indebtedness could exercise their rights, as described above, and we could be forced into bankruptcy or liquidation.
Current wording
If we cannot make scheduled payments on our indebtedness, we will be in default and holders of our Senior Notes could declare all outstanding principal and interest to be due and payable. Such a default could result in material adverse consequences that negatively impact our business, the market price for our common stock, and our ability to obtain financing in the future. If we breach the covenants under our debt instruments, we would be in default under such instruments. The holders of such indebtedness could exercise their rights, as described above, and we could be forced into bankruptcy or liquidation.
Previous wording
Our revolving facility and the indenture that governs our Senior Notes contain terms which restrict our current and future operations, particularly our ability to respond to changes or to take certain actions.
Current wording
The indenture that governs our Senior Notes contains, and future credit agreements may contain, terms which restrict our current and future operations, particularly our ability to respond to changes or to take certain actions.
Previous wording
Our revolving facility and the indenture that governs our Senior Notes contain a number of restrictive covenants that impose significant operating and financial restrictions on us and may limit our ability to engage in acts that may be in our long-term best interest, including, among other things, restrictions on our ability to:
Current wording
The indenture that governs our Senior Notes contains a number of restrictive covenants that impose significant operating and financial restrictions on us and may limit our ability to engage in acts that may be in our long-term best interest, including, among other things, restrictions on our ability to:
Previous wording
In addition, the Organization for Economic Cooperation and Development (“OECD”) has published proposals covering a number of issues, including country-by-country reporting, permanent establishment rules, transfer pricing rules, tax treaties and taxation of the digital economy. On October 8, 2021, the OECD/G20 inclusive framework on Base Erosion and Profit Shifting (the “Inclusive Framework”) published a statement updating and finalizing the key components of a two-pillar plan on global tax reform originally agreed on July 1, 2021, and a timetable for implementation by 2024 and, with respect to certain components of the plan, to 2025. Under Pillar Two, the Inclusive Framework has agreed on a global minimum corporate tax rate of 15% for companies with revenue above €750 million, calculated on a jurisdictional basis. The European Union and other countries (including those in which we operate) have enacted or committed to enact Pillar Two into their domestic laws, which may adversely impact our provision for income taxes, existing tax incentives, net income and cash flows. On February 1, 2023, the U.S. Financial Accounting Standards Board (“FASB”) indicated that they believe the minimum tax imposed under Pillar Two is an alternative minimum tax, and, accordingly, deferred tax assets and liabilities associated with the minimum tax would not be recognized or adjusted for the estimated future effects of the minimum tax but would be recognized in the period incurred. On January 20, 2025, the Trump Administration issued an executive order declaring the Inclusive Framework has no force or effect in the U.S. absent congressional action, and directing the U.S. Department of Treasury to: (i) investigate whether any non-U.S. countries are not in compliance with any U.S. tax treaty or have implemented or are likely to implement tax rules that are extraterritorial or disproportionately affect U.S. companies, which may include actions or taxes imposed under Pillar One or Pillar Two, and (ii) develop options for “protective measures” in response to any such noncompliance or tax rules. On June 28, 2025, the United States and the rest of G7 countries announced an agreement that would, in principle, exclude U.S. parented groups from certain taxes under Pillar Two and address certain risks of base erosion and profit shifting. However, we cannot predict whether or when such agreement will be brought into force, and whether the United States will adopt any other protective measures, including with respect to any taxes imposed under Pillar One, or whether or how any non-U.S. countries may change their tax laws, including with respect to Pillar One or Pillar Two, in response to the executive order, the agreement in principle described above, or otherwise. In addition, the Inclusive Framework envisages the removal of all Digital Services Taxes (“DST”). Notwithstanding this, some countries, in the European Union and beyond, continue to operate existing DST regimes to captur…
Excerpt shortened here; the source contains the full paragraph.
Current wording
In addition, the Organization for Economic Cooperation and Development (“OECD”) has published proposals covering a number of issues, including country-by-country reporting, permanent establishment rules, transfer pricing rules, tax treaties and taxation of the digital economy. On October 8, 2021, the OECD/G20 inclusive framework on Base Erosion and Profit Shifting (the “Inclusive Framework”) published a statement updating and finalizing the key components of a two-pillar plan on global tax reform originally agreed on July 1, 2021, and a timetable for implementation by 2024 and, with respect to certain components of the plan, to 2025. Under Pillar Two, the Inclusive Framework has agreed on a global minimum corporate tax rate of 15% for companies with revenue above €750 million, calculated on a jurisdictional basis. The European Union and other countries (including those in which we operate) have enacted or committed to enact Pillar Two into their domestic laws, which may adversely impact our provision for income taxes, existing tax incentives, net income and cash flows. On February 1, 2023, the U.S. Financial Accounting Standards Board (“FASB”) indicated that they believe the minimum tax imposed under Pillar Two is an alternative minimum tax, and, accordingly, deferred tax assets and liabilities associated with the minimum tax would not be recognized or adjusted for the estimated future effects of the minimum tax but would be recognized in the period incurred. On January 20, 2025, the Trump Administration issued an executive order declaring the Inclusive Framework has no force or effect in the U.S. absent congressional action, and directing the U.S. Department of Treasury to: (i) investigate whether any non-U.S. countries are not in compliance with any U.S. tax treaty or have implemented or are likely to implement tax rules that are extraterritorial or disproportionately affect U.S. companies, which may include actions or taxes imposed under Pillar One or Pillar Two, and (ii) develop options for “protective measures” in response to any such noncompliance or tax rules. On June 28, 2025, the United States and the rest of G7 countries announced a Side by Side (“SbS”) agreement that would, in principle, exclude U.S. parented groups from certain taxes under Pillar Two and address certain risks of base erosion and profit shifting, with the OECD publishing Administrative Guidance with respect to this on January 5, 2026. While the Administrative Guidance has approved the U.S. tax system as a “Qualified SbS Jurisdiction” (such that, for fiscal years commencing on or after January 1, 2026, U.S.-headquartered multinational enterprises may elect for the SbS safe harbor, which effectively deems the top-up tax for a jurisdiction to be zero for the purposes of the “income inclusion rules” and “under taxed profits rules”), we cannot predict whether or when such agreement will be brought into force, and whether the United States will adopt any other protective mea…
Excerpt shortened here; the source contains the full paragraph.
Previous wording
As of January 31, 2025, we had aggregate U.S federal and California net operating loss carryforwards of $1.4 billion and $307.9 million, respectively, which may be available to offset future taxable income for income tax purposes. The federal net operating losses are carried forward indefinitely, and California net operating loss carryforwards begin to expire in fiscal 2034 through fiscal 2045. As of January 31, 2025, net operating loss carryforwards for other states totaled $716.0 million, which begin to expire in fiscal 2026 through fiscal 2045. As of January 31, 2025, net operating loss carryforwards for the U.K. totaled $78.0 million, which are carried forward indefinitely, and net operating loss carryforwards totaled immaterial amounts in certain foreign jurisdictions. As of January 31, 2025, we had U.S federal and California research and development (“R&D”) credit carryforwards of $165.1 million and $39.6 million, respectively. The federal R&D credit carryforwards begin to expire in fiscal 2037 though fiscal 2045. The California R&D credits are carried forward indefinitely. Realization of these net operating loss and R&D credit carryforwards depends on future income, and there is a risk that our existing carryforwards could expire unused and be unavailable to offset future income tax liabilities, which could adversely affect our results of operations.
Current wording
As of January 31, 2026, we had aggregate U.S federal and California net operating loss carryforwards of $2.6 billion and $417.4 million, respectively, which may be available to offset future taxable income for income tax purposes. The federal net operating losses are carried forward indefinitely, and California net operating loss carryforwards begin to expire in fiscal 2034 through fiscal 2046. As of January 31, 2026, net operating loss carryforwards for other states totaled $998.3 million, which begin to expire in fiscal 2027 through fiscal 2046. As of January 31, 2026, net operating loss carryforwards for the U.K. totaled $84.2 million, which are carried forward indefinitely, and net operating loss carryforwards totaled immaterial amounts in certain foreign jurisdictions. As of January 31, 2026, we had U.S federal and California research and development (“R&D”) credit carryforwards of $227.0 million and $59.8 million, respectively. The federal R&D credit carryforwards begin to expire in fiscal 2037 though fiscal 2046. The California R&D credits are carried forward indefinitely. Realization of these net operating loss and R&D credit carryforwards depends on future income, and there is a risk that our existing carryforwards could expire unused and be unavailable to offset future income tax liabilities, which could adversely affect our results of operations.
Previous wording
Expectations regarding our efforts and performance relating to environmental, social and governance factors have imposed and may impose additional costs on us and expose us to risks.
Current wording
Expectations regarding our efforts and performance relating to corporate responsibility factors have imposed and may impose additional costs on us and expose us to risks.
Rearranged previous paragraphs (1)
Previous report — wording carried elsewhere
On July 19, 2024, we released a content configuration update for our Falcon sensor that resulted in system crashes for certain Windows systems (the “July 19 Incident”). We have incurred, and expect to continue to incur, significant costs and expenses related to the incident, including in connection with remediation efforts, customer and partner relations, measures taken to address the damage to our reputation, and other measures taken in response to the incident. Our management and other personnel have devoted, and may continue to devote, significant time and resources to address the impacts of the July 19 Incident. We also have hired, and in the future may hire, additional personnel to assist with our ongoing efforts. Any real or perceived failure, by us or the third-party service providers we engage, to remediate and respond to the July 19 Incident could adversely impact our business. While we are investing in enhancements to software resiliency, testing and customer controls following the July 19 Incident, we cannot guarantee that such enhancements will be effective, or that our products do not have or will not have defects, errors, or vulnerabilities.