Oct 26, 2026 · 39 min

CrowdStrike bets AI will make cybersecurity a bigger market

How CrowdStrike Could Double ARR by 2030 with George Kurtz

The episode tests whether agentic threats can expand CrowdStrike’s opportunity toward $10 billion and potentially $20 billion in annual recurring revenue—and whether its valuation already anticipates that growth.

3 key takeaways

1AI agents are creating demand for real-time visibility, permissions control, runtime protection, and autonomous cyber defense.
2CrowdStrike is positioning Falcon Flex and a single-agent architecture as answers to enterprise security consolidation and predictable spending.
3The company’s growth case depends on sustained execution as automated attacks accelerate and the stock prices in much of the opportunity.

Don't miss

George Kurtz explains how goal-seeking agents can keep finding new paths after defenses block them, turning automated persistence into a growing breach risk.

The brief

George Kurtz says AI initially looked like a threat to cybersecurity demand, but enterprise adoption has instead created a need to monitor and control software agents in real time.

The argument shifts from protecting corporate boundaries to securing agent permissions, credentials, and activity, with runtime controls filling gaps that model-level safeguards cannot.

CrowdStrike’s research points to agentic attacks that can pursue goals, retry blocked paths, steal credentials, and coordinate across systems, lowering the barrier to sophisticated breaches.

Partnerships with Anthropic and NVIDIA extend the security pitch from software into frontier-model runtime protection and hardware-assisted defenses against concentrated supply-chain risk.

Falcon Flex supports the consolidation strategy, while Kurtz frames remaining customer white space and AI safety as the foundation for $10 billion and potentially $20 billion in ARR.

What was said on this episode

18 statements · 11 positive · 7 negative

George Kurtzon AI securityPositive3:41
AI deployment requires security controls.
“if you are going to create AI, you're going to need security to be able to use AI”
Listen at 3:41
George Kurtzon AI-agent protectionPositive6:27
AI-agent protection could exceed endpoint detection and response.
“I think it could be bigger than EDR because there's going to be so many more. AI agents that are out there, they're going to need to be protected.”
Listen at 6:27
George Kurtzon technology safetyPositive8:14
Security is shifting toward broader technology safety.
“security moves into safety”
Listen at 8:14
George Kurtzon AI agentsPositive10:12
AI agents will require kill switches for deployment.
“You're not going to be able to deploy agents without a kill switch.”
Listen at 10:12
George Kurtzon AI securityPositive11:13
Effective AI security requires runtime controls.
“Security really is based on creating controls and then implementing those in runtime.”
Listen at 11:13
George Kurtzon agentic attacksNegative13:35
Agentic attacks are increasing exponentially.
“it is an exponential increase in what we're seeing with agentic attacks”
Listen at 13:35
George Kurtzon AI agentsNegative14:53
AI agents let unsophisticated attackers execute nation-state-level attacks.
“the same unsophisticated threat actor is executing the same high level attack as a nation state because they're using agents”
Listen at 14:53
George Kurtzon AI-enabled cyberattacksNegative16:57
Anyone can cheaply execute AI-enabled cyberattacks.
“Anybody with a prompt and a few tokens can do it. And it only costs you a few bucks to actually execute these attacks.”
Listen at 16:57
George Kurtzon goal-seeking AI agentsNegative18:02
Goal-seeking AI agents persist until they gain access.
“it will basically go until it finds a way in”
Listen at 18:02
George Kurtzon agent swarmsNegative18:37
Agent swarms can continue attacks given sufficient compute and tokens.
“it's really a function of how much compute and tokens you have until they get it”
Listen at 18:37
George Kurtzon software supply chainNegative21:19
Compromised software supply chains threaten large enterprises.
“that supply chain is a real threat into these large enterprises”
Listen at 21:19
George Kurtzon hardware-level securityPositive22:14
Hardware security features enable stronger enforcement than software alone.
“the hardware element allows you to enforce a different level of security”
Listen at 22:14
George Kurtzon Falcon FlexPositive27:06
Falcon Flex gives large-commitment customers substantial licensing flexibility.
“customers commit big. They get a ton of flexibility on it.”
Listen at 27:06
George Kurtzon Falcon Flex contractsPositive28:19
Falcon Flex contracts improve CrowdStrike’s revenue and cash-flow predictability.
“having this sort of predictability of these big Falcon Flex contracts gives us a lot of confidence around that”
Listen at 28:19
George Kurtzon CrowdStrike $20 billion ARR targetPositive29:20
CrowdStrike can reach its $20 billion ARR target through existing white space and TAM.
“you can get there”
Listen at 29:20
George Kurtzon agentic defensePositive36:36
Organizations will need agentic defense against AI attacks.
“you're going to need agentic defense”
Listen at 36:36
George Kurtzon AI-driven vulnerability discoveryPositive36:52
Rising AI vulnerability discovery will increase demand for security.
“You're going to need more security going forward.”
Listen at 36:52
George Kurtzon AI-enabled cyberattacksNegative37:47
The recent surge in AI-enabled cyberattacks will worsen.
“it's only the beginning. Actually, only going to get worse from here.”
Listen at 37:47

Statements are attributed to the speaker as said on the episode and reflect their view at the time, not PodLume's. They are not advice.

Weekly email

State of the Pod, every Monday

The week's most-discussed names and stories from podcasts, with the moments behind them. Free, five minutes, unsubscribe in one click.