There is a point in every bull run where a share price stops being an opinion about a company and becomes an opinion about other people’s opinions. CrowdStrike arrived there some time ago and has been enjoying the view.
The underlying business is not the problem and never has been. Endpoint security is one of the few software categories where the buyer’s alternative to spending money is explaining a breach to a board, which is the most reliable pricing power in enterprise technology. Renewal rates in this corner of the market are high because nobody rips out the thing that is currently watching their laptops, and the land-and-expand motion works because a company that trusts you with detection will eventually hand you identity, logging and whatever the next module is called. That is a genuinely good business. It is also now a business whose share price has run far enough ahead of its own earnings that the arithmetic has started leaving notes.
The comparator doing the most damage is Okta, sitting on something like 54 times forward earnings and being treated, in this conversation, as the cheap one. That is the detail worth pausing on. When the value end of your peer group is on 54x, the peer group has stopped being a valuation range and become a mood. Every multiple in the sector is being justified by reference to another multiple in the same sector, which is a closed loop with no outside wall. Somebody has to be anchored to cash flows eventually, and the longer the anchoring is deferred the more violent the eventual knot.
Anyone who has paid serious money for a cappuccino in an airport understands the mechanism intimately. What you are handed is tall, architectural and warm, and roughly a third of it is air that has been persuaded to hold a shape. The foam is not a lie. It was made from real milk by a real machine, and a skilled hand built it. But it is not what you are thirsty for, it does not survive the walk to the gate, and the volume in the cup tells you almost nothing about the volume of coffee in the cup. Froth is a legitimate product of the process. It is just a poor unit of account.
The valuation question for CrowdStrike is exactly that distinction. The company is generating real recurring revenue, real free cash flow and real competitive insulation. Simultaneously, a meaningful portion of the current price reflects a market-wide conviction that security budgets are structurally immune to scrutiny and that artificial intelligence will expand the attack surface forever, creating permanent demand growth that needs no further proof. The first set of facts belongs to the company. The second belongs to the sector narrative, and the sector narrative is the part of the cup that is air.
This is where the warning signs actually live. They are not signals that the business will disappoint. They are signals that the price has borrowed from a future in which nothing goes sideways: no budget consolidation, no credible challenger undercutting on bundled pricing, no large customer deciding that three security vendors can be two. Growth rates that would be triumphant for any ordinary enterprise software firm will read as deceleration against this multiple, and deceleration against a 54x floor is not a small correction.
The honest summary is that both things are true at once, and the market has decided to only price one of them. CrowdStrike is an excellent company. Its shares are priced by people looking at Okta, who are looking at CrowdStrike. Drink the coffee. Count the coffee.
Source: Yahoo Finance, “CrowdStrike stock is flying, but the valuation math is sending warning signs”