Fal.Con 2026
Positioning Suggestions
→ CRWD: the stock already re-rated roughly 11-12% on the Aug 26 beat-and-raise. Fal.Con is confirmatory product-cycle news layered on an already-repriced print, not the primary catalyst -- treat it as a lower-conviction window unless a hard forward ARR/EPS number clears the standing $1.59 base-case watch trigger. Wait for CRWD's thesis doc to reconcile its own conflicting scenario tables (prose vs. structured, both currently live in research.doc) before sizing off the post-print level.
→ PANW / MSFT / S / FTNT: CRWD's own beat-and-raise, plus any incremental Fal.Con platform or Flex-bundling news, is a genuine negative data point for these names' own consolidation narratives -- PANW's own Q4 FY2026 report already treats CRWD's Aug 26 print as displacement risk against its more appliance-dependent delivery model. Feed into each name's next research-update trigger rather than trading same-week headlines.
→ GOOGL (Wiz): independent CNAPP satisfaction data already favors Wiz over CrowdStrike in cloud-native workload categories. Any CRWD cloud-security-specific announcement at Fal.Con (XM Cyber integration, expanded exposure management) is the first test of whether CrowdStrike narrows that gap -- worth tracking into the next cycle, not a same-week trade.
→ AMZN: any expanded AWS commercial commitment disclosed at Fal.Con is confirmatory only at Amazon's scale -- do not size a trade off conference sponsorship headlines alone.
→ Across the list: Fal.Con keynote tone will be upbeat by construction, fresh off a record quarter. Score only concrete disclosed figures (ARR, contract counts, named timelines, a named CTO successor) against the Aug 26 baseline, not enthusiasm.
Predictions
7CrowdStrike will disclose a forward FY2028 or longer-range ARR/EPS figure at Fal.Con's investor briefing that lifts the base-case non-GAAP EPS assumption materially above the $1.59 already tracked in-repo, not merely restate the Aug 26 FY2027 guide
If cleared -> supports moving the next research-update pass toward base/bull; if not, the valuation-fragility bear case in the current Sell-rated thesis stands unresolved.
CrowdStrike will disclose a specific ARR, customer-count, or monetization figure for Charlotte AI / Charlotte AI AgentWorks, rather than only qualitative growth language
CrowdStrike will name a successor, or disclose a defined search process, for the Global CTO role vacated by Elia Zaitsev's 2026-08-20 departure
CrowdStrike will announce a specific new commercial or product expansion of its AWS partnership (beyond the existing infrastructure/marketplace relationship) during Fal.Con week
Confirmatory only for AMZN at its scale -- do not size a trade off this alone.
CrowdStrike will give a concrete product capability and integration timeline for the pending XM Cyber exposure-management acquisition, rather than roadmap-only language
Management will NOT make any new public statement referencing the July 2024 outage litigation, resiliency guarantees, or a settlement update during Fal.Con week
CRWD shares will move more than 8% (either direction) in the 3 trading days following the Aug 31 opening keynote, measured from the post-Q2-earnings base
The Aug 26 print already did most of the near-term re-rating work; a second double-digit move inside the same month would indicate Fal.Con itself carried a genuinely new data point.
Key Questions
- Does CrowdStrike disclose a forward FY2028 or longer-range ARR/EPS figure at the Fal.Con investor briefing that lifts the base-case non-GAAP EPS assumption materially above the $1.59 already tracked in-repo (watch trigger wt-crwd-fy2028-guide-above-base-eps), or restate the Aug 26 guide with conference framing?
- Does management disclose any hard ARR, customer-count, or monetization figure for Charlotte AI / Charlotte AI AgentWorks, beyond the qualitative growth language used on the Aug 26 call?
- Is a successor named, or a defined search process disclosed, for the Global CTO role vacated by Elia Zaitsev's 2026-08-20 departure?
- Does CrowdStrike announce a concrete new commercial or product expansion of its AWS partnership (beyond the existing infrastructure and marketplace relationship), consistent with AWS's billing as lead ecosystem sponsor?
- Does management directly address the Microsoft Defender/E5 bundling pricing threat by name or clear reference, or stay at the generic 'legacy AV/point solution' framing?
- Does CrowdStrike give a concrete product capability and integration timeline for the pending XM Cyber exposure-management asset acquisition (expected to close 2H FY27), or keep it at roadmap-only language?
- Does the company make any new public statement on the July 2024 outage litigation, resiliency guarantees, or customer-trust metrics during the conference week?