{ "generatedAt": "2026-10-22T15:15:11Z", "url": "https://deepstack.ltd/theses/crowdstrike-ai-driven-arr-reacceleration/", "disclaimer": "Analysis and opinion, not investment advice.", "id": "crowdstrike-ai-driven-arr-reacceleration", "number": 110, "question": "Will CrowdStrike report ending ARR of at least $5.5B with AI-native modules cited as a growth driver by 2027-06-30?", "dek": "Enterprise AI deployment multiplies endpoints, identities and agents that require sensors, so CrowdStrike's ARR and per-customer module adoption accelerate rather than commoditize.", "family": "T12", "subthesis": "T12.01", "sector": "AI.SEC", "subsectors": [ "AI.SEC.CYBER", "AI.SEC.IDENT", "AI.SEC.MODELSEC", "AI.SEC.GOV" ], "relatedParts": [], "approvedAt": "2026-10-22T05:42:55Z", "sectorName": "AI Security, Trust & Governance", "api": "https://deepstack.ltd/api/v1/theses/crowdstrike-ai-driven-arr-reacceleration.json", "sides": [ { "id": "yes", "label": "AI expands the attack surface and the security budget", "summary": "Each AI workload, local LLM, MCP server and non-human agent becomes a new protected object requiring endpoint, identity and AI-detection coverage. Coding agents also surface a backlog of existing vulnerabilities and give attackers autonomous capability while generating more software and more attack surface than AI removes. Security is reframed as an AI-adoption enabler, incumbent platform vendors upsell more modules per customer, and CrowdStrike's ARR growth reaccelerates toward the $5.5B threshold with AI-native modules cited as a driver.", "voices": [ { "name": "Citrini", "entity": null, "claim": "As coding agents improve they surface a backlog of existing vulnerabilities and give attackers autonomous capability, while simultaneously generating more software and more attack surface than AI removes; fear plus remediation plus proactive…", "date": "2026-08-07", "url": "https://www.citriniresearch.com/p/protection-matters" }, { "name": "Kris", "entity": "https://deepstack.ltd/people/kris/", "claim": "Because each AI workload and non-human agent needs its own host and sensor, and because AI-specific threats span data, models, prompts, agents, identities, infrastructure and the interaction layer, the number of things requiring protection…", "date": "2026-06-18", "url": "https://www.potentialmultibaggers.com/p/crowdstrike-the-mythos-moment" } ] }, { "id": "no", "label": "CrowdStrike falls short of the ARR mark", "summary": "Because AI enhances both attack and defense capabilities symmetrically, AI itself does not introduce new incremental risk that forces incremental security spend, unless policy restricts defensive AI use while attackers remain unconstrained. Without that asymmetry, enterprises have less reason to add sensors and modules for every AI workload, so CrowdStrike's ARR growth falls short of $5.5B or AI-native modules are not cited as a material driver by 2027-06-30.", "voices": [ { "name": "Jai Ramaswamy", "entity": null, "claim": "Because AI enhances both attack and defense capabilities symmetrically, a16z argues that AI itself does not introduce new incremental risk; however, if policy restricts defensive AI use while attackers remain unconstrained, an artificial asymmetry…", "date": "2025-12-17", "url": "https://www.a16z.news/p/a-roadmap-for-federal-ai-legislation" } ] } ], "tests": [ { "id": "th110-t01", "part": null, "thesis": 110, "slug": "crowdstrike-ai-driven-arr-reacceleration", "when": "October 28, 2026", "whenLabel": "Oct 28, 2026", "date": "2026-10-28", "precision": "day", "event": "Fortinet, operating cash flow as a share of revenue, quarter ended September 30, 2026: whether it comes in at or above 40%.", "status": "pending", "resultId": null, "sameAs": null, "stage": "open", "callExpects": null, "callExpectsBy": null, "callExpectsAt": null, "callProbability": null, "callProbabilityAt": null, "callProbabilityHistory": [], "source": { "kind": "thesis", "ref": "tests[0].date", "url": null }, "resolver": { "kind": "manual", "rule": "", "question": "", "source": null, "ambiguity": "", "specState": "pending" }, "url": "https://deepstack.ltd/docket/#test-th110-t01", "storyUrl": "https://deepstack.ltd/theses/crowdstrike-ai-driven-arr-reacceleration/#tests", "resultUrl": null, "machines": [ { "model": "claude-opus-5", "p": 80, "at": "2026-10-22T07:38:15Z" }, { "model": "deepseek-reasoner", "p": 38, "at": "2026-10-22T07:39:12Z" } ], "readers": null }, { "id": "th110-t02", "part": null, "thesis": 110, "slug": "crowdstrike-ai-driven-arr-reacceleration", "when": "November 18, 2026", "whenLabel": "Nov 18, 2026", "date": "2026-11-18", "precision": "day", "event": "Palo Alto Networks, operating cash flow as a share of revenue, quarter ended October 31, 2026: whether it comes in at or above 36%.", "status": "pending", "resultId": null, "sameAs": null, "stage": "pre", "callExpects": "yes", "callExpectsBy": "Desk Editor (level A)", "callExpectsAt": "2026-10-22T08:14:29Z", "callProbability": 73, "callProbabilityAt": "2026-10-22T08:14:29Z", "callProbabilityHistory": [], "source": { "kind": "thesis", "ref": "tests[1].date", "url": null }, "resolver": { "kind": "manual", "rule": "Divide the net cash from operating activities by the revenue that Palo Alto Networks reports for the quarter ended October 31, 2026 in its 10-Q or 10-K filing on SEC EDGAR. The answer is yes if the ratio is at or above 36.0%; no if it is below 36.0%.", "question": "Did the net cash from operating activities of Palo Alto Networks for the quarter ended October 31, 2026 come to at or above 36.0% of its revenue?", "source": { "label": "SEC EDGAR, XBRL company facts of Palo Alto Networks (Forms 10-Q and 10-K)", "url": "https://data.sec.gov/api/xbrl/companyfacts/CIK0001327567.json" }, "ambiguity": "If Palo Alto Networks has not filed by December 17, 2026, or a filing restates a period the rule reads, the test is inconclusive, and the Result says what was read and what was missing.", "specState": "approved", "specVersion": 1, "specUpdatedOn": "2026-10-22", "specHistory": [ { "version": 1, "date": "2026-10-22", "reason": "First specification.", "by": "Desk Editor (level A)" } ], "callExpects": "yes", "format": "ladder", "group": "th110-panw-ocf-margin", "threshold": 36, "direction": "above", "unit": "%", "think": { "baseRate": "Palo Alto Networks's operating cash flow as a share of revenue was 39.8% for the quarter ended July 31, 2026, by its filing on SEC EDGAR.", "outsideView": "A year earlier, for the quarter ended July 31, 2025, the same line read 40.3%, so the rungs sit on the last print.", "wouldChange": "A change in product mix, a one-time charge, or a reclassified line would move the reading." } }, "url": "https://deepstack.ltd/docket/#test-th110-t02", "storyUrl": "https://deepstack.ltd/theses/crowdstrike-ai-driven-arr-reacceleration/#tests", "resultUrl": null, "machines": [ { "model": "claude-opus-5", "p": 80, "at": "2026-10-22T07:39:16Z" }, { "model": "deepseek-reasoner", "p": 86, "at": "2026-10-22T07:39:29Z" } ], "readers": null }, { "id": "th110-t03", "part": null, "thesis": 110, "slug": "crowdstrike-ai-driven-arr-reacceleration", "when": "November 18, 2026", "whenLabel": "Nov 18, 2026", "date": "2026-11-18", "precision": "day", "event": "Palo Alto Networks, operating cash flow as a share of revenue, quarter ended October 31, 2026: whether it comes in at or above 39.5%.", "status": "pending", "resultId": null, "sameAs": null, "stage": "pre", "callExpects": "either", "callExpectsBy": "Desk Editor (level A)", "callExpectsAt": "2026-10-22T08:14:29Z", "callProbability": 48, "callProbabilityAt": "2026-10-22T08:14:29Z", "callProbabilityHistory": [], "source": { "kind": "thesis", "ref": "tests[2].date", "url": null }, "resolver": { "kind": "manual", "rule": "Divide the net cash from operating activities by the revenue that Palo Alto Networks reports for the quarter ended October 31, 2026 in its 10-Q or 10-K filing on SEC EDGAR. The answer is yes if the ratio is at or above 39.5%; no if it is below 39.5%.", "question": "Did the net cash from operating activities of Palo Alto Networks for the quarter ended October 31, 2026 come to at or above 39.5% of its revenue?", "source": { "label": "SEC EDGAR, XBRL company facts of Palo Alto Networks (Forms 10-Q and 10-K)", "url": "https://data.sec.gov/api/xbrl/companyfacts/CIK0001327567.json" }, "ambiguity": "If Palo Alto Networks has not filed by December 17, 2026, or a filing restates a period the rule reads, the test is inconclusive, and the Result says what was read and what was missing.", "specState": "approved", "specVersion": 1, "specUpdatedOn": "2026-10-22", "specHistory": [ { "version": 1, "date": "2026-10-22", "reason": "First specification.", "by": "Desk Editor (level A)" } ], "callExpects": "either", "format": "ladder", "group": "th110-panw-ocf-margin", "threshold": 39.5, "direction": "above", "unit": "%", "think": { "baseRate": "Palo Alto Networks's operating cash flow as a share of revenue was 39.8% for the quarter ended July 31, 2026, by its filing on SEC EDGAR.", "outsideView": "A year earlier, for the quarter ended July 31, 2025, the same line read 40.3%, so the rungs sit on the last print.", "wouldChange": "A change in product mix, a one-time charge, or a reclassified line would move the reading." } }, "url": "https://deepstack.ltd/docket/#test-th110-t03", "storyUrl": "https://deepstack.ltd/theses/crowdstrike-ai-driven-arr-reacceleration/#tests", "resultUrl": null, "machines": [ { "model": "claude-opus-5", "p": 60, "at": "2026-10-22T07:39:37Z" }, { "model": "deepseek-reasoner", "p": 91, "at": "2026-10-22T07:39:58Z" } ], "readers": null }, { "id": "th110-t04", "part": null, "thesis": 110, "slug": "crowdstrike-ai-driven-arr-reacceleration", "when": "November 18, 2026", "whenLabel": "Nov 18, 2026", "date": "2026-11-18", "precision": "day", "event": "Palo Alto Networks, operating cash flow as a share of revenue, quarter ended October 31, 2026: whether it comes in at or above 42%.", "status": "pending", "resultId": null, "sameAs": null, "stage": "pre", "callExpects": "no", "callExpectsBy": "Desk Editor (level A)", "callExpectsAt": "2026-10-22T08:14:29Z", "callProbability": 24, "callProbabilityAt": "2026-10-22T08:14:29Z", "callProbabilityHistory": [], "source": { "kind": "thesis", "ref": "tests[3].date", "url": null }, "resolver": { "kind": "manual", "rule": "Divide the net cash from operating activities by the revenue that Palo Alto Networks reports for the quarter ended October 31, 2026 in its 10-Q or 10-K filing on SEC EDGAR. The answer is yes if the ratio is at or above 42.0%; no if it is below 42.0%.", "question": "Did the net cash from operating activities of Palo Alto Networks for the quarter ended October 31, 2026 come to at or above 42.0% of its revenue?", "source": { "label": "SEC EDGAR, XBRL company facts of Palo Alto Networks (Forms 10-Q and 10-K)", "url": "https://data.sec.gov/api/xbrl/companyfacts/CIK0001327567.json" }, "ambiguity": "If Palo Alto Networks has not filed by December 17, 2026, or a filing restates a period the rule reads, the test is inconclusive, and the Result says what was read and what was missing.", "specState": "approved", "specVersion": 1, "specUpdatedOn": "2026-10-22", "specHistory": [ { "version": 1, "date": "2026-10-22", "reason": "First specification.", "by": "Desk Editor (level A)" } ], "callExpects": "no", "format": "ladder", "group": "th110-panw-ocf-margin", "threshold": 42, "direction": "above", "unit": "%", "think": { "baseRate": "Palo Alto Networks's operating cash flow as a share of revenue was 39.8% for the quarter ended July 31, 2026, by its filing on SEC EDGAR.", "outsideView": "A year earlier, for the quarter ended July 31, 2025, the same line read 40.3%, so the rungs sit on the last print.", "wouldChange": "A change in product mix, a one-time charge, or a reclassified line would move the reading." } }, "url": "https://deepstack.ltd/docket/#test-th110-t04", "storyUrl": "https://deepstack.ltd/theses/crowdstrike-ai-driven-arr-reacceleration/#tests", "resultUrl": null, "machines": [ { "model": "claude-opus-5", "p": 40, "at": "2026-10-22T07:40:02Z" }, { "model": "deepseek-reasoner", "p": 12, "at": "2026-10-22T07:40:30Z" } ], "readers": null }, { "id": "th110-t05", "part": null, "thesis": 110, "slug": "crowdstrike-ai-driven-arr-reacceleration", "when": "November 24, 2026", "whenLabel": "Nov 24, 2026", "date": "2026-11-24", "precision": "day", "event": "Zscaler, operating cash flow as a share of revenue, quarter ended October 31, 2026: whether it comes in at or above 28%.", "status": "pending", "resultId": null, "sameAs": null, "stage": "pre", "callExpects": "yes", "callExpectsBy": "Desk Editor (level B)", "callExpectsAt": "2026-10-22T08:14:29Z", "callProbability": 74, "callProbabilityAt": "2026-10-22T08:14:29Z", "callProbabilityHistory": [], "source": { "kind": "thesis", "ref": "tests[4].date", "url": null }, "resolver": { "kind": "manual", "rule": "Divide the net cash from operating activities by the revenue that Zscaler reports for the quarter ended October 31, 2026 in its 10-Q or 10-K filing on SEC EDGAR. The answer is yes if the ratio is at or above 28.0%; no if it is below 28.0%.", "question": "Did the net cash from operating activities of Zscaler for the quarter ended October 31, 2026 come to at or above 28.0% of its revenue?", "source": { "label": "SEC EDGAR, XBRL company facts of Zscaler (Forms 10-Q and 10-K)", "url": "https://data.sec.gov/api/xbrl/companyfacts/CIK0001713683.json" }, "ambiguity": "If Zscaler has not filed by December 17, 2026, or a filing restates a period the rule reads, the test is inconclusive, and the Result says what was read and what was missing.", "specState": "approved", "specVersion": 1, "specUpdatedOn": "2026-10-22", "specHistory": [ { "version": 1, "date": "2026-10-22", "reason": "First specification.", "by": "Desk Editor (level B)" } ], "callExpects": "yes", "format": "ladder", "group": "th110-zs-ocf-margin", "threshold": 28, "direction": "above", "unit": "%", "think": { "baseRate": "Zscaler's operating cash flow as a share of revenue was 31.1% for the quarter ended July 31, 2026, by its filing on SEC EDGAR.", "outsideView": "A year earlier, for the quarter ended July 31, 2025, the same line read 34.8%, so the rungs sit on the last print.", "wouldChange": "A change in product mix, a one-time charge, or a reclassified line would move the reading." } }, "url": "https://deepstack.ltd/docket/#test-th110-t05", "storyUrl": "https://deepstack.ltd/theses/crowdstrike-ai-driven-arr-reacceleration/#tests", "resultUrl": null, "machines": [ { "model": "claude-opus-5", "p": 80, "at": "2026-10-22T07:40:36Z" }, { "model": "deepseek-reasoner", "p": 88, "at": "2026-10-22T07:40:56Z" } ], "readers": null }, { "id": "th110-t06", "part": null, "thesis": 110, "slug": "crowdstrike-ai-driven-arr-reacceleration", "when": "November 24, 2026", "whenLabel": "Nov 24, 2026", "date": "2026-11-24", "precision": "day", "event": "Zscaler, operating cash flow as a share of revenue, quarter ended October 31, 2026: whether it comes in at or above 31%.", "status": "pending", "resultId": null, "sameAs": null, "stage": "pre", "callExpects": "either", "callExpectsBy": "Desk Editor (level B)", "callExpectsAt": "2026-10-22T08:14:29Z", "callProbability": 50, "callProbabilityAt": "2026-10-22T08:14:29Z", "callProbabilityHistory": [], "source": { "kind": "thesis", "ref": "tests[5].date", "url": null }, "resolver": { "kind": "manual", "rule": "Divide the net cash from operating activities by the revenue that Zscaler reports for the quarter ended October 31, 2026 in its 10-Q or 10-K filing on SEC EDGAR. The answer is yes if the ratio is at or above 31.0%; no if it is below 31.0%.", "question": "Did the net cash from operating activities of Zscaler for the quarter ended October 31, 2026 come to at or above 31.0% of its revenue?", "source": { "label": "SEC EDGAR, XBRL company facts of Zscaler (Forms 10-Q and 10-K)", "url": "https://data.sec.gov/api/xbrl/companyfacts/CIK0001713683.json" }, "ambiguity": "If Zscaler has not filed by December 17, 2026, or a filing restates a period the rule reads, the test is inconclusive, and the Result says what was read and what was missing.", "specState": "approved", "specVersion": 1, "specUpdatedOn": "2026-10-22", "specHistory": [ { "version": 1, "date": "2026-10-22", "reason": "First specification.", "by": "Desk Editor (level B)" } ], "callExpects": "either", "format": "ladder", "group": "th110-zs-ocf-margin", "threshold": 31, "direction": "above", "unit": "%", "think": { "baseRate": "Zscaler's operating cash flow as a share of revenue was 31.1% for the quarter ended July 31, 2026, by its filing on SEC EDGAR.", "outsideView": "A year earlier, for the quarter ended July 31, 2025, the same line read 34.8%, so the rungs sit on the last print.", "wouldChange": "A change in product mix, a one-time charge, or a reclassified line would move the reading." } }, "url": "https://deepstack.ltd/docket/#test-th110-t06", "storyUrl": "https://deepstack.ltd/theses/crowdstrike-ai-driven-arr-reacceleration/#tests", "resultUrl": null, "machines": [ { "model": "claude-opus-5", "p": 72, "at": "2026-10-22T07:41:01Z" }, { "model": "deepseek-reasoner", "p": 86, "at": "2026-10-22T07:41:19Z" } ], "readers": null }, { "id": "th110-t07", "part": null, "thesis": 110, "slug": "crowdstrike-ai-driven-arr-reacceleration", "when": "November 24, 2026", "whenLabel": "Nov 24, 2026", "date": "2026-11-24", "precision": "day", "event": "Zscaler, operating cash flow as a share of revenue, quarter ended October 31, 2026: whether it comes in at or above 34%.", "status": "pending", "resultId": null, "sameAs": null, "stage": "pre", "callExpects": "no", "callExpectsBy": "Desk Editor (level B)", "callExpectsAt": "2026-10-22T08:14:29Z", "callProbability": 23, "callProbabilityAt": "2026-10-22T08:14:29Z", "callProbabilityHistory": [], "source": { "kind": "thesis", "ref": "tests[6].date", "url": null }, "resolver": { "kind": "manual", "rule": "Divide the net cash from operating activities by the revenue that Zscaler reports for the quarter ended October 31, 2026 in its 10-Q or 10-K filing on SEC EDGAR. The answer is yes if the ratio is at or above 34.0%; no if it is below 34.0%.", "question": "Did the net cash from operating activities of Zscaler for the quarter ended October 31, 2026 come to at or above 34.0% of its revenue?", "source": { "label": "SEC EDGAR, XBRL company facts of Zscaler (Forms 10-Q and 10-K)", "url": "https://data.sec.gov/api/xbrl/companyfacts/CIK0001713683.json" }, "ambiguity": "If Zscaler has not filed by December 17, 2026, or a filing restates a period the rule reads, the test is inconclusive, and the Result says what was read and what was missing.", "specState": "approved", "specVersion": 1, "specUpdatedOn": "2026-10-22", "specHistory": [ { "version": 1, "date": "2026-10-22", "reason": "First specification.", "by": "Desk Editor (level B)" } ], "callExpects": "no", "format": "ladder", "group": "th110-zs-ocf-margin", "threshold": 34, "direction": "above", "unit": "%", "think": { "baseRate": "Zscaler's operating cash flow as a share of revenue was 31.1% for the quarter ended July 31, 2026, by its filing on SEC EDGAR.", "outsideView": "A year earlier, for the quarter ended July 31, 2025, the same line read 34.8%, so the rungs sit on the last print.", "wouldChange": "A change in product mix, a one-time charge, or a reclassified line would move the reading." } }, "url": "https://deepstack.ltd/docket/#test-th110-t07", "storyUrl": "https://deepstack.ltd/theses/crowdstrike-ai-driven-arr-reacceleration/#tests", "resultUrl": null, "machines": [ { "model": "claude-opus-5", "p": 60, "at": "2026-10-22T07:41:23Z" }, { "model": "deepseek-reasoner", "p": 88, "at": "2026-10-22T07:41:47Z" } ], "readers": null } ] }