Fal.Con 2026
Positioning Suggestions
→ CRWD: the stock already re-rated roughly 11-12% on the Aug 26 beat-and-raise. Fal.Con is confirmatory product-cycle news layered on an already-repriced print, not the primary catalyst -- treat it as a lower-conviction window unless a hard forward ARR/EPS number clears the standing $1.59 base-case watch trigger. Wait for CRWD's thesis doc to reconcile its own conflicting scenario tables (prose vs. structured, both currently live in research.doc) before sizing off the post-print level.
→ PANW / MSFT / S / FTNT: CRWD's own beat-and-raise, plus any incremental Fal.Con platform or Flex-bundling news, is a genuine negative data point for these names' own consolidation narratives -- PANW's own Q4 FY2026 report already treats CRWD's Aug 26 print as displacement risk against its more appliance-dependent delivery model. Feed into each name's next research-update trigger rather than trading same-week headlines.
→ GOOGL (Wiz): independent CNAPP satisfaction data already favors Wiz over CrowdStrike in cloud-native workload categories. Any CRWD cloud-security-specific announcement at Fal.Con (XM Cyber integration, expanded exposure management) is the first test of whether CrowdStrike narrows that gap -- worth tracking into the next cycle, not a same-week trade.
→ AMZN: any expanded AWS commercial commitment disclosed at Fal.Con is confirmatory only at Amazon's scale -- do not size a trade off conference sponsorship headlines alone.
→ Across the list: Fal.Con keynote tone will be upbeat by construction, fresh off a record quarter. Score only concrete disclosed figures (ARR, contract counts, named timelines, a named CTO successor) against the Aug 26 baseline, not enthusiasm.
Predictions
7CrowdStrike will disclose a forward FY2028 or longer-range ARR/EPS figure at Fal.Con's investor briefing that lifts the base-case non-GAAP EPS assumption materially above the $1.59 already tracked in-repo, not merely restate the Aug 26 FY2027 guide
If cleared -> supports moving the next research-update pass toward base/bull; if not, the valuation-fragility bear case in the current Sell-rated thesis stands unresolved.
CrowdStrike will disclose a specific ARR, customer-count, or monetization figure for Charlotte AI / Charlotte AI AgentWorks, rather than only qualitative growth language
CrowdStrike will name a successor, or disclose a defined search process, for the Global CTO role vacated by Elia Zaitsev's 2026-08-20 departure
CrowdStrike will announce a specific new commercial or product expansion of its AWS partnership (beyond the existing infrastructure/marketplace relationship) during Fal.Con week
Confirmatory only for AMZN at its scale -- do not size a trade off this alone.
CrowdStrike will give a concrete product capability and integration timeline for the pending XM Cyber exposure-management acquisition, rather than roadmap-only language
Management will NOT make any new public statement referencing the July 2024 outage litigation, resiliency guarantees, or a settlement update during Fal.Con week
CRWD shares will move more than 8% (either direction) in the 3 trading days following the Aug 31 opening keynote, measured from the post-Q2-earnings base
The Aug 26 print already did most of the near-term re-rating work; a second double-digit move inside the same month would indicate Fal.Con itself carried a genuinely new data point.
Key Questions
- Does CrowdStrike disclose a forward FY2028 or longer-range ARR/EPS figure at the Fal.Con investor briefing that lifts the base-case non-GAAP EPS assumption materially above the $1.59 already tracked in-repo (watch trigger wt-crwd-fy2028-guide-above-base-eps), or restate the Aug 26 guide with conference framing?
- Does management disclose any hard ARR, customer-count, or monetization figure for Charlotte AI / Charlotte AI AgentWorks, beyond the qualitative growth language used on the Aug 26 call?
- Is a successor named, or a defined search process disclosed, for the Global CTO role vacated by Elia Zaitsev's 2026-08-20 departure?
- Does CrowdStrike announce a concrete new commercial or product expansion of its AWS partnership (beyond the existing infrastructure and marketplace relationship), consistent with AWS's billing as lead ecosystem sponsor?
- Does management directly address the Microsoft Defender/E5 bundling pricing threat by name or clear reference, or stay at the generic 'legacy AV/point solution' framing?
- Does CrowdStrike give a concrete product capability and integration timeline for the pending XM Cyber exposure-management asset acquisition (expected to close 2H FY27), or keep it at roadmap-only language?
- Does the company make any new public statement on the July 2024 outage litigation, resiliency guarantees, or customer-trust metrics during the conference week?
Monitoring Checklist
Post-Event Results
Actual Outcomes
- • At its September 2 investor briefing, CrowdStrike issued initial FY2028 net-new ARR guidance of at least $1.626 billion, implying at least 20% growth from the FY2027 midpoint of $1.355 billion; it also pulled forward the $10 billion ending-ARR milestone to within FY2030 and the $20 billion milestone to within FY2035, and introduced a FY2029 non-GAAP operating-margin target of 28%-32% and a FY2028 free-cash-flow-margin expectation of at least 32.5%.
- • CrowdStrike disclosed $695 million of ending ARR for the broader Agentic SOC grouping, up 60% year over year, but did not disclose a Charlotte AI or Charlotte AI AgentWorks-specific ARR, customer-count, or monetization figure.
- • CrowdStrike did not name a Global CTO successor or disclose a defined search process during Fal.Con; the Day 3 keynote remained assigned to Chief AI & Autonomous Systems Officer Bartley Richardson.
- • CrowdStrike announced new or expanded Fal.Con integrations and commercial routes with Google Cloud, OpenAI, Anthropic, EY, and NVIDIA, but no new AWS commercial or product expansion beyond the pre-existing relationship; AWS was recognized as Global AI Partner of the Year.
- • Neither the investor briefing nor the Fal.Con release set provided a concrete XM Cyber integration capability and delivery timeline.
- • CrowdStrike made no new Fal.Con statement on July 2024 outage litigation, a settlement, or a new resiliency guarantee; presentation references to the July 19 incident were standard safe-harbor and non-GAAP-definition language.
- • Using the August 28 post-Q2 close of $218.40 as the post-earnings base, CRWD closed at $215.07 on September 1, $203.42 on September 2, and $214.97 on September 3; the largest closing move was -6.9% and the third-day move was -1.6%, so the predicted move greater than 8% did not occur on a closing-price basis.
Market Reaction
Thesis Updates Needed
Trade Recommendations
→ Activate a CRWD research-update work order to re-underwrite the scenario framework against the new FY2028 net-new ARR and FY2029 margin targets; do not change the target from conference headlines alone.
→ Void the AMZN conference trade condition because Fal.Con produced no new AWS commercial expansion beyond the existing relationship.
→ Void the CRWD volatility trade condition because closing prices did not move more than 8% from the post-Q2 base during the three-session window.
→ Treat the PANW, MSFT, S, and FTNT read-throughs as research-update inputs rather than same-week trades; the releases establish broader product competition but not quantified peer revenue displacement.