Wolfe Research upgrades CrowdStrike stock rating on valuation

Wolfe Research upgraded CrowdStrike to Outperform with a $450 price target (22% upside vs current $369.58), citing accelerating growth and expanding margins; Citizens also maintains a Market Outperform with a $550 target. Shares have fallen ~21% YTD and ~10.6% over the past week after leaked news of Anthropic’s model release, but Wolfe values the stock at ~13x EV/CY27E revenue and ~40x EV/CY27E free cash flow (below its 3-year FY+2 averages of 15.5x and 50.5x) and views the valuation as an attractive entry. Fundamentals show revenue +21.7% L12M and gross margin 74.8%, and CrowdStrike expanded its collaboration with Intel to optimize Falcon for Intel-powered AI PCs amid rising demand for solutions to counter AI-driven attacks.

Analysis

The Anthropic-model story is a structural accelerant for endpoint security sellers that can convert higher attacker sophistication into larger recurring spend — but it also democratizes offensive tooling, creating a bifurcation between scale players with global telemetry and small vendors relying on rules. Hardware-accelerated telemetry (the Intel vector) is a practical moat: when telemetry cost/performance falls, attach rates and net retention should mechanically rise because customers see less endpoint overhead and faster detection-to-remediation loops. Expect this to show up as margin expansion and higher LTV/CAC over 12–24 months for vendors that control both signal and distribution.

Competitive dynamics favor platform incumbents who can stitch prevention, detection, and workflow automation into a single purchase; adjacent workflow vendors (security SOAR/ITSM) become accelerants rather than substitutes if integrations reduce switching friction. Second-order winners include cloud IaaS/CDN providers and managed SOC partners who will capture increased services spend; losers are point-solution scan/analysis vendors whose outputs can be absorbed into larger platforms or in-house AI toolchains. The near-term market will price headline AI releases and RSA soundbites, but durable value accrues to providers that convert ephemeral model-risk into structural product improvements.

Key catalysts: near-term volatility around further model releases and quarterly results (days–weeks), enterprise renewal cycles and RSA-driven procurement (1–12 months), and multi-year secular re-architecting of endpoint-to-cloud telemetry (12–36 months). Tail risks include model-driven substitution (enterprises building internal red-teaming/ML ops), major false-positive incidents that depress adoption, or rapid in-house moves by hyperscalers that compress pricing. Monitor net retention trends, telemetry CPU/latency metrics, and cross-sell attachment rates as the leading indicators for whether the AI impulse translates into sustainable economics.

Key Decisions for Investors

• Long CRWD vs Short ZS (pair): 6–12 month horizon. Weight long 1.0 / short 0.6 to create endpoint-over-network bias. Rationale: endpoint platforms should re-rate faster as AI-driven endpoint attacks increase attach rates; target 25–35% relative outperformance, stop the pair if the spread erodes 12% adverse from entry.
• Buy CRWD 9–12 month call-spread (debit): buy near-the-money calls, sell strikes ~25–35% above to fund premium. Timeframe 9–12 months to capture post-earnings multiple re-rating and RSA-cycle wins. Risk = premium paid; reward = capped but ~2–4x potential if re-rating occurs.
• Long INTC equity or 12-month calls (directional): allocate a smaller tactical sleeve to play hardware acceleration tailwinds to security. Timeframe 12 months; target 20–30% upside if partnerships translate to higher OEM attach and service revenue; risk 20% downside on execution/market cycles.
• Volatility play around next CRWD earnings/catalyst: buy a 1–3 month straddle/strangle sized to 1–2% of portfolio to monetize expected elevated IV from AI headlines. Reward: asymmetric payoffs to surprise beats or large guidance moves; risk: full premium if results are muted and IV collapses.