CRWD and PANW are both winning, but the quality of growth is different.
A public version of the verified CRWD vs PANW research packet. CrowdStrike has demand re-acceleration with a billings wedge. Palo Alto has scale and cash flow, but headline growth is now acquisition-heavy.
The two-horse consolidation story is too simple.
CRWD and PANW can both consolidate security budgets, but their near-term questions are different: CRWD needs the market to trust ARR/RPO over billings; PANW needs organic growth to remain visible as acquisition contribution stops being broken out.
Fundamental demand re-accelerated, but Falcon Flex weakens billings as a clean leading indicator.
Headline growth is strong; organic growth and amortization drag are the cleaner watch items.
Prisma AIRS and CRWD AIDR are strategically important but still pre-material in disclosed ARR.
Fortinet is not behaving like an obvious share donor: revenue, billings, and margins are strong.
What matters now.
| Issue | CRWD Read | PANW Read | What Would Change It |
|---|---|---|---|
| Demand quality | Revenue growth re-accelerated four straight quarters; net new ARR +32%. | Reported revenue +31%, but roughly mid-teens organic after CyberArk and Chronosphere. | CRWD billings/ARR wedge normalizes; PANW shows organic NGS ARR without acquisition opacity. |
| Platformization | 51% of customers on 6+ modules; Flex is the expansion vehicle. | 2,280 platformized customers with 120% NRR, still a small share of the base. | Evidence that platformization expands outside installed base without heavy concessions. |
| AI security | AIDR +250% sequential, but off an undisclosed base; $50M pipeline, not ARR. | Prisma AIRS 300 customers and visibility to $100M ARR, but no current ARR disclosure. | A disclosed ARR base and proof that AI security spend is incremental budget. |
| Valuation | EV ~$159.8B; about 31.4x TTM sales and 110x TTM FCF. | EV ~$176.5B; about 16.6x TTM sales and 41x TTM FCF. | Durability of CRWD re-acceleration or PANW integration risk changes materially. |
The AI-security TAM may be real, but the revenue proof is early.
The verification report corrected stale valuation figures and several timing/count details. The highest-value next source checks are CRWD's billings/ARR normalization, PANW organic NGS ARR after acquisition breakout removal, Prisma AIRS crossing a $100M ARR marker, and third-party proof that agentic security budgets are incremental.
Source treatment: this post uses the Cybersecurity room's verified deep research report as the current source candidate. Underlying fan-out notes are supporting context, not independent confirmations of the same claim.