2 of our software stocks face major tests of whether their rallies are for real

CrowdStrike (CRWD) and Salesforce (CRM) report earnings Wednesday with the market focused on whether the AI-driven cybersecurity demand is sustainable after a strong run: CRWD is up >55% YTD, more than doubled from its Feb. 23 52-week low (~$86), but has recently started to test post-earnings declines. Salesforce has rallied ~40% in nine weeks after a June 22 52-week low (~$146) but remains down ~22% YTD and ~30% from late-December highs; technical resistance near ~$209 and a retest of its 50-day moving average (~$200) raise the stakes for earnings/call commentary. Overall, the article stays constructive (hold-equivalent 2 ratings) while flagging the key risk that earnings may not show a “windfall” even if demand remains robust.

Analysis

The real mechanism here is not “AI is good for software” but whether AI shows up as monetizable expansion versus internal substitution. For CRM, the bull case is that AI increases workflow value per account faster than it reduces seat counts; that supports both retention and attach, and the upcoming Dreamforce window gives management a second chance to reframe the narrative if the quarter is merely decent. The bear case is still more structural: if customers use AI to automate support/sales ops or build lightweight internal tools, seat growth can stay sluggish even while usage rises, capping multiple expansion.

For CRWD/PANW, demand may remain strong while earnings still lag because security budgets are bought in cycles, not instantly. That means the next 1-3 months are about guide quality, large-deal commentary, and billings durability rather than headline ARR beats; the stocks can overshoot on “AI security” enthusiasm and then give it back if execution doesn’t catch up. PANW is the cleaner beneficiary if boards continue to consolidate vendors around platform spend, while CRWD is more exposed to a “good but not enough” reaction because expectations have moved faster than the business cycle.

The contrarian view is that the market may be underestimating how much of the recent SaaS rally is just valuation mean reversion off depressed positioning, not a durable re-acceleration. If CRM merely prints “not bad” and holds the 50-day, that may be enough for another leg higher into Dreamforce; if it disappoints, the move down could be sharp because traders have already forced a reset on the anti-SaaS narrative. For CRWD, a strong print that is accompanied by conservative forward commentary could still be sold—precisely because the stock has already priced in a lot of the AI-security story.

Key Decisions for Investors

• Short-dated volatility overlay on CRWD into earnings: prefer a put spread or call spread sale rather than outright short, because the stock can still gap on any strong AI-security commentary; thesis breaks if management lifts FY guidance or billings/ARR re-accelerate.
• Long CRM on a post-earnings hold above $200 and especially a reclaim of ~$209 into Dreamforce (1-4 weeks): risk/reward improves if the call shifts from 'defensive SaaS' to 'AI monetization + margin leverage'; cut if support at the 50-day fails on volume.
• Relative-value pair: long CRM / short CRWD for the next 4-8 weeks if CRM shows any path to stabilization while CRWD remains priced for perfection; this captures valuation compression on the more extended name without betting against cyber demand itself.
• Keep PANW on the watchlist as the cleaner 1-3 month beneficiary if CRWD confirms strong demand but warns on timing of conversion; the trade is long PANW vs. a basket of software if cybersecurity consolidation broadens and software remains a multiple-risk factor.
• If CRM management does not explicitly quantify AI attach/expansion or Dreamforce pipeline lift, treat the post-earnings rally as sellable rather than chaseable; the falsifier is a clear guide raise tied to enterprise AI adoption metrics.