Bank of America Securities raised its profitability expectations for CrowdStrike in a Sept. 4 report after attending the company’s Fal.Con 2026 conference, where annual attendance reached about 10,000, a record high.
The report said CrowdStrike introduced a slate of AI security products, including Falcon Guardian, SafeMind, Superintelligence Lab and Agentic Identity. It also moved its long-term annual recurring revenue targets forward by one year each, now aiming for $10 billion in FY30 instead of FY31 and $20 billion in FY35 instead of FY36.
Long-term ARR targets were brought forward
CrowdStrike management said FY28 nnARR growth is expected to come in above 20%. Based on the FY27 nnARR midpoint of $1.355 billion, that implies FY28 nnARR of at least about $1.626 billion, well above the market consensus of $1.537 billion.
The report tied that confidence to recent execution. Q2 nnARR reached $333 million, up 51% year over year. Ongoing Falcon Flex adoption and a broader AI security opportunity were cited as key supports for the higher outlook.
Management also set an FY28 free cash flow margin target of at least 32.5%, while capital expenditures as a share of revenue are expected to rise to 11% to 12%.
Fal.Con 2026 focused heavily on AI products
Falcon Guardian was described as the most closely watched launch at the event. According to the report, it uses CrowdStrike’s runtime sensor data and threat intelligence to detect and respond to agent-driven attacks at inference speed. It can be activated immediately on existing sensor deployments, with no additional deployment required.
SafeMind was another featured release. It is sold through a token-pack structure, allowing customers to buy and expand through Flex commitments and convert AI innovation directly into incremental ARR.
Superintelligence Lab, Agentic Identity and added Agentic SOC capabilities rounded out the company’s broader product set.
CrowdStrike’s core thesis, as summarized in the report, is that AI is shifting cybersecurity from the nation-state era to an agent era. Capabilities that once required nation-state resources are becoming accessible to low-skill adversaries through AI. These agent-driven attacks operate in seconds, at low cost and with low expertise requirements. Defending against that environment requires an integrated security architecture across runtime, identity, cloud, data and response, with AI operating at inference speed.
The report said CrowdStrike’s strategic edge comes from combining endpoint and workload telemetry, identity context, threat intelligence and automated response on a single platform. At its investor day, management said the AI security market will be larger than the endpoint security market, with an adoption curve steeper than cloud security. BofA said Guardian could create meaningful upsell potential across the existing customer base in FY27 and FY28.
Falcon Flex remains the commercial engine
BofA described Falcon Flex as CrowdStrike’s commercial engine. The model is commitment-based rather than consumption-based. After making a single commitment, customers can activate additional modules without renegotiating the full contract.
Total Flex contract value is now nearing $2.3 billion, up 101% from a year earlier, and the latest quarter added 935 new Flex opportunities.
Flex adoption is also spreading beyond large enterprises. Enterprise customers accounted for 50% of the mix, down from 61% in 2Q26, while non-enterprise customers rose to 50%. The report said the share of non-Flex contracts is expected to keep falling as the company shifts toward a Flex-first model.
For customers moving from non-Flex contracts to Flex, average ARR uplift increased to 40% from 34% last year. BofA said the combination of product breadth, pre-installed technology and simpler procurement could shorten adoption cycles and turn AI innovation into incremental ARR.
BofA lifted profit expectations and flagged downside risks
BofA set a $230 price target on CrowdStrike, based on roughly 32x FY27 EV/sales. The report said that premium valuation relative to high-growth SaaS peers at 13x to 19x is supported by CrowdStrike’s competitive position in endpoint security and its longer-term growth opportunities in cloud security, log management and identity protection.
The report also listed downside risks, including investor sensitivity to elevated valuation, lower-than-expected adoption of new products, slower customer expansion, security vulnerability risk, and stronger competition from incumbent vendors and next-generation providers.
Source note in the original article
The original Chinese article said it was a summary and interpretation by Chaoxiang Research of a third-party broker report from Bank of America Securities dated Sept. 4, 2026, combined with public market information. It added that the ratings, price targets, earnings forecasts and related judgments cited in the piece were the views of the broker’s analysts, representing only their institution and not Chaoxiang Research, and should not be treated as investment advice.
The article also said market decisions should be made independently and that the piece should not be used as a basis for buying or selling any security.
By Rita.
