CrowdStrike Holdings Inc.: 10-K Risk Factor Changes

Our results of operations may vary significantly from period to period, which could adversely affect our business, financial condition and results of operations. Our results of operations have varied significantly from period to period, and we expect that our results of operations will continue to vary as a result of a number of factors, many of which are outside of our control and may be difficult to predict, including: •our ability to attract new and retain existing customers; •the budgeting cycles, seasonal buying patterns, and purchasing practices of customers; •economic difficulties confronting our customers, which may impact the number of modules or endpoint deployments they are willing or able to purchase; •insolvency or credit difficulties confronting our customers, affecting their ability to purchase or pay for our solutions; •the timing and length of our sales cycles; •changes in customer or channel partner requirements or market needs; •any disruption in our relationship with channel partners; •changes in the growth rate of the cloud-based SaaS-delivered endpoint security solutions market; •the timing and success of new product and service introductions by us or our competitors or any other competitive developments, including consolidation among our customers or competitors; •decisions by organizations to purchase security solutions from larger, more established security vendors or from their primary IT equipment vendors; •changes in our pricing policies or those of our competitors; •the level of awareness of cybersecurity threats, particularly advanced cyberattacks, and the market adoption of our Falcon platform; •significant security breaches of, technical difficulties with or interruptions to, the use of our Falcon platform; •negative media coverage or publicity; •our ability to successfully expand our business domestically and internationally; •the amount and timing of operating costs (including new hires), tightening of labor markets and capital expenditures related to the expansion of our business; •extraordinary expenses such as litigation or other dispute-related settlement payments or outcomes; •increases or decreases in our expenses caused by fluctuations in foreign currency exchange rates; •future accounting pronouncements or changes in our accounting policies or practices; 31 31 31 Table of Contents Table of Contents •deteriorating or volatile conditions in the global economy and financial markets, including as a result of weak or negative gross domestic product growth, uncertainty or disruptions in the capital and credit markets, changing interest rates, inflation, bank failures or adverse conditions impacting financial institutions, and supply-chain disruptions; and •political events, geopolitical unrest or tension, acts of war and terrorism. In addition, we experience seasonal fluctuations in our financial results as we typically receive a higher percentage of our annual orders from new customers, as well as renewal orders from existing customers, in the second half of the fiscal year as compared to the first half of the year due to the annual budget approval process of many of our customers. In addition, we also experience seasonality in our operating margin, typically with a lower margin in the first half of our fiscal year. Any of the above factors, individually or in the aggregate, may result in significant fluctuations in our financial and other results of operations from period to period. As a result of this variability, our historical results of operations should not be relied upon as an indication of future performance. Moreover, this variability and unpredictability could result in our failure to meet our operating plan or the expectations of investors or analysts for any period. If we fail to meet such expectations for these or other reasons, our stock price could fall substantially, and we could face costly lawsuits, including securities class action suits.

Our results of operations may vary significantly from period to period, which could adversely affect our business, financial condition and results of operations. Our results of operations have varied significantly from period to period, and we expect that our results of operations will continue to vary as a result of a number of factors, many of which are outside of our control and may be difficult to predict, including: •our ability to attract new and retain existing customers; •the budgeting cycles, seasonal buying patterns, and purchasing practices of customers; •economic difficulties confronting our customers, which may impact the number of modules or endpoint deployments they are willing or able to purchase; •the timing and length of our sales cycles; •changes in customer or channel partner requirements or market needs; •changes in the growth rate of the cloud-based SaaS-delivered endpoint security solutions market; •the timing and success of new product and service introductions by us or our competitors or any other competitive developments, including consolidation among our customers or competitors; •the level of awareness of cybersecurity threats, particularly advanced cyberattacks, and the market adoption of our Falcon platform; 29 29 29 Table of Contents Table of Contents •our ability to successfully expand our business domestically and internationally; •decisions by organizations to purchase security solutions from larger, more established security vendors or from their primary IT equipment vendors; •changes in our pricing policies or those of our competitors; •any disruption in our relationship with channel partners; •insolvency or credit difficulties confronting our customers, affecting their ability to purchase or pay for our solutions; •significant security breaches of, technical difficulties with or interruptions to, the use of our Falcon platform; •extraordinary expenses such as litigation or other dispute-related settlement payments or outcomes; •future accounting pronouncements or changes in our accounting policies or practices; •negative media coverage or publicity; •political events; •the amount and timing of operating costs and capital expenditures related to the expansion of our business; •increases or decreases in our expenses caused by fluctuations in foreign currency exchange rates; and •significant natural disasters and other catastrophic events, including the occurrence of a contagious disease or illness, such as COVID-19. Furthermore, our business and revenues are impacted by global economic and geopolitical conditions. Volatile financial markets, inflation, rising interest rates, supply chain challenges, political turmoil and other disruptions to global and regional economies and markets continue to add uncertainty to macroeconomic conditions. Any continued or further uncertainty, weakness or deterioration in economic conditions or the geopolitical environment could harm our business and results of operations. In addition, we experience seasonal fluctuations in our financial results as we typically receive a higher percentage of our annual orders from new customers, as well as renewal orders from existing customers, in the second half of the fiscal year as compared to the first half of the year due to the annual budget approval process of many of our customers. In addition, we also experience seasonality in our operating margin, typically with a lower margin in the first half of our fiscal year. Any of the above factors, individually or in the aggregate, may result in significant fluctuations in our financial and other results of operations from period to period. As a result of this variability, our historical results of operations should not be relied upon as an indication of future performance. Moreover, this variability and unpredictability could result in our failure to meet our operating plan or the expectations of investors or analysts for any period. If we fail to meet such expectations for these or other reasons, our stock price could fall substantially, and we could face costly lawsuits, including securities class action suits.

We are expanding our international operations and staff to support our business in international markets. We generally conduct our international operations through wholly-owned subsidiaries and are or may be required to report our taxable income in various jurisdictions worldwide based upon our business operations in those jurisdictions. Our intercompany relationships are subject to complex transfer pricing regulations administered by taxing authorities in various jurisdictions. The amount of taxes we pay in different jurisdictions may depend on the application of the tax laws of the various jurisdictions, including the United States, to our international business activities, changes in tax rates, new or revised tax laws or interpretations of existing tax laws and policies, and our ability to operate our business in a manner consistent with our corporate structure and intercompany arrangements. The relevant taxing authorities may disagree with our determinations as to the income and expenses attributable to specific jurisdictions. If such a disagreement were to occur, and our position was not sustained, we could be required to pay additional taxes, interest and penalties, which could result in one-time tax charges, higher effective tax rates, reduced cash flows and lower overall profitability of our operations. We are subject to federal, state, and local income, sales, and other taxes in the United States and income, withholding, transaction, and other taxes in numerous foreign jurisdictions. Significant judgment is required in evaluating our tax positions and our worldwide provision for taxes. During the ordinary course of business, there are many activities and transactions for which the ultimate tax determination may be uncertain. In addition, our tax obligations and effective tax rates could be adversely affected, among other things, by (i) changes in the relevant tax, accounting and other laws, regulations, principles and interpretations, including increases in corporate tax rates and greater taxation of international income and changes relating to income tax nexus, (ii) recognizing tax losses or lower than anticipated earnings in jurisdictions where we have lower statutory 52 52 52 Table of Contents Table of Contents rates and higher than anticipated earnings in jurisdictions where we have higher statutory rates, (iii) changes in foreign currency exchange rates, or (iv) changes in the valuation of our deferred tax assets and liabilities. We may be audited in various jurisdictions, and such jurisdictions may assess additional taxes, sales taxes and value added taxes against us. Although we believe our tax estimates are reasonable, the final determination of any tax audits or litigation could be materially different from our historical tax provisions and accruals, which could have an adverse effect on our results of operations or cash flows in the period or periods for which a determination is made. In addition, the Organization for Economic Cooperation and Development (“OECD”) has published proposals covering a number of issues, including country-by-country reporting, permanent establishment rules, transfer pricing rules, tax treaties, and taxation of the digital economy. On October 8, 2021, the OECD/G20 inclusive framework on Base Erosion and Profit Shifting (the “Inclusive Framework”) published a statement updating and finalizing the key components of a two-pillar plan on global tax reform originally agreed on July 1, 2021, and a timetable for implementation by 2023. The timetable for implementation has since been extended to 2024 and, with respect to certain components of the plan, to 2025. Under pillar one, a portion of the residual profits of multinational businesses with global turnover above €20 billion and a profit margin above 10% will be allocated to market jurisdictions where such allocated profits would be taxed. Under pillar two, the Inclusive Framework has agreed on a global minimum corporate tax rate of 15% for companies with revenue above €750 million, calculated on a jurisdictional basis. While substantial work remains to be completed by the OECD and national governments on the implementation of these proposals, future tax reform resulting from these developments may result in changes to long-standing tax principles, which could adversely affect our effective tax rate or result in higher cash tax liabilities. On February 1, 2023, the U.S. Financial Accounting Standards Board ("FASB") indicated that they believe the minimum tax imposed under pillar two is an alternative minimum tax, and, accordingly, deferred tax assets and liabilities associated with the minimum tax would not be recognized or adjusted for the estimated future effects of the minimum tax but would be recognized in the period incurred. In addition, the OECD’s proposed solution envisages new international tax rules and the removal of all Digital Services Taxes (“DST”). Notwithstanding this, some countries, in the European Union and beyond, continue to operate existing DST regimes to capture tax revenue on digital services more immediately. Such laws may increase our tax obligations in those countries or change the manner in which we operate our business.

We are expanding our international operations and staff to support our business in international markets. We generally conduct our international operations through wholly-owned subsidiaries and are or may be required to report our taxable income in various jurisdictions worldwide based upon our business operations in those jurisdictions. Our intercompany relationships are subject to complex transfer pricing regulations administered by taxing authorities in various jurisdictions. The amount of taxes we pay in different jurisdictions may depend on the application of the tax laws of the various jurisdictions, including the United States, to our international business activities, changes in tax rates, new or revised tax laws or 50 50 50 Table of Contents Table of Contents interpretations of existing tax laws and policies, and our ability to operate our business in a manner consistent with our corporate structure and intercompany arrangements. The relevant taxing authorities may disagree with our determinations as to the income and expenses attributable to specific jurisdictions. If such a disagreement were to occur, and our position was not sustained, we could be required to pay additional taxes, interest and penalties, which could result in one-time tax charges, higher effective tax rates, reduced cash flows and lower overall profitability of our operations. We are subject to federal, state, and local income, sales, and other taxes in the United States and income, withholding, transaction, and other taxes in numerous foreign jurisdictions. Significant judgment is required in evaluating our tax positions and our worldwide provision for taxes. During the ordinary course of business, there are many activities and transactions for which the ultimate tax determination may be uncertain. In addition, our tax obligations and effective tax rates could be adversely affected, among other things, by (i) changes in the relevant tax, accounting and other laws, regulations, principles and interpretations, including increases in corporate tax rates and greater taxation of international income and changes relating to income tax nexus, (ii) recognizing tax losses or lower than anticipated earnings in jurisdictions where we have lower statutory rates and higher than anticipated earnings in jurisdictions where we have higher statutory rates, (iii) changes in foreign currency exchange rates, or (iv) changes in the valuation of our deferred tax assets and liabilities. We may be audited in various jurisdictions, and such jurisdictions may assess additional taxes, sales taxes and value added taxes against us. Although we believe our tax estimates are reasonable, the final determination of any tax audits or litigation could be materially different from our historical tax provisions and accruals, which could have an adverse effect on our results of operations or cash flows in the period or periods for which a determination is made. In addition, the Organization for Economic Cooperation and Development (“OECD”) has published proposals covering a number of issues, including country-by-country reporting, permanent establishment rules, transfer pricing rules, tax treaties and taxation of the digital economy. A significant majority of countries in the OECD’s Inclusive Framework have agreed in principle to a proposed solution to address the tax challenges arising from the digitalization of the economy, including joining a two-pillar plan to reform international taxation rules and ensure that multinational enterprises pay a fair share of tax wherever they operate. The first pillar is focused on the allocation of taxing rights between countries for in-scope multinational enterprises that sell goods and services into countries with little or no local physical presence and is intended to apply to multinational enterprises with global revenue above 20 billion euro and certain other criteria. The second pillar is focused on developing a global minimum tax rate of at least 15 percent applicable to in-scope multinational enterprises and is intended to apply to multinational enterprises with annual consolidated group revenue in excess of 750 million euro. While substantial work remains to be completed by the OECD and national governments on the implementation of these proposals, future tax reform resulting from these developments may result in changes to long-standing tax principles, which could adversely affect our effective tax rate or result in higher cash tax liabilities. The OECD’s proposed solution envisages new international tax rules and the removal of all Digital Services Taxes (“DST”). Notwithstanding this, some countries, in the European Union and beyond, continue to operate a DST regime to capture tax revenue on digital services more immediately. Such laws may increase our tax obligations in those countries or change the manner in which we operate our business.

We have incurred net losses each year prior to fiscal 2024, and we may not achieve or maintain profitability in the future. We experienced net gains of $89.3 million for fiscal 2024, and net losses of $183.2 million, and $234.8 million for fiscal 2023, and fiscal 2022, respectively. As of January 31, 2024, we had an accumulated deficit of $1.1 billion. While we have experienced significant growth in revenue in recent periods, and have achieved profitability during quarterly periods, we cannot assure you when or whether we will reach sustained profitability. We also expect our operating expenses to increase in the future as we continue to invest for our future growth, which will negatively affect our results of operations if our total revenue does not increase. We cannot assure you that these investments will result in substantial increases in our total revenue or improvements in our results of operations. We also have incurred and expect to continue to incur significant additional legal, 23 23 23 Table of Contents Table of Contents accounting, and other expenses as a public company. Any failure to increase our revenue as we invest in our business or to manage our costs could prevent us from achieving or maintaining profitability or positive cash flow.

We have incurred net losses in all periods since our inception, and we may not achieve or maintain profitability in the future. We experienced net losses of $183.2 million, $234.8 million, and $92.6 million for fiscal 2023, fiscal 2022, and fiscal 2021, respectively. As of January 31, 2023, we had an accumulated deficit of $1.1 billion. While we have experienced significant growth in revenue in recent periods, we cannot assure you when or whether we will reach or maintain profitability. We also expect our operating expenses to increase in the future as we continue to invest for our future growth, which will negatively affect our results of operations if our total revenue does not increase. We cannot assure you that these investments will result in substantial increases in our total revenue or improvements in our results of operations. We also have incurred and expect to continue to incur significant additional legal, accounting, and other expenses as a public company. Any failure to increase our revenue as we invest in our business or to manage our costs could prevent us from achieving or maintaining profitability or positive cash flow.

Our principal executive offices are located in Austin, Texas, and we also maintain other office locations around the world, including in California and India, that are prone to natural disasters including severe weather and seismic activity. A significant natural disaster, such as an earthquake, a fire, a flood, or significant power outage and other catastrophic events, including the occurrence of a contagious disease or illness, such as COVID-19, could have a material adverse impact on our business, results of operations, and financial condition. Natural disasters and other catastrophic events such as public health crises, could affect our personnel, recovery of our assets, data centers, supply chain, manufacturing vendors, or logistics providers’ ability to provide materials and perform services such as manufacturing products or assisting with shipments on a timely basis. In addition, climate change could result in an increase in the frequency or severity of natural disasters. If our or our service providers’ information technology systems or manufacturing or logistics abilities are hindered by any of the events discussed above, shipments could be delayed, resulting in missed financial targets, such as revenue and shipment targets, for a particular quarter. In addition, computer malware, viruses and computer hacking, fraudulent use attempts, and phishing attacks have become more prevalent in our industry and may be further enhanced in frequency or effectiveness through threat actors’ use of AI, and our internal systems may be victimized by such attacks. Although we maintain incident management and disaster response plans, in the event of a major disruption caused by a catastrophic event, such as a natural disaster, or man-made problem, we may be unable to continue our operations and may endure system interruptions, reputational harm, delays in our development activities, lengthy interruptions in service, breaches of data security and loss of critical data, and our insurance may not cover such events or may be insufficient to compensate us for the potentially significant losses we may incur. All of the aforementioned risks may be further increased if the disaster recovery plans for us and our suppliers prove to be inadequate. To the extent that any of the above should result in delays or cancellations of customer orders, delays in the manufacture, deployment or shipment of our products, or delays in the rendering of our services, our business, financial condition and results of operations would be adversely affected.

Our principal executive offices are located in Austin, Texas, and we also maintain other office locations around the world, including in California and India, that are prone to natural disasters including severe weather and seismic activity. A significant natural disaster, such as an earthquake, a fire, a flood, or significant power outage and other catastrophic events, including the occurrence of a contagious disease or illness, such as COVID-19, could have a material adverse impact on our business, results of operations, and financial condition. Natural disasters and other catastrophic events such as COVID-19, could affect our personnel, recovery of our assets, data centers, supply chain, manufacturing vendors, or logistics providers’ ability to provide materials and perform services such as manufacturing products or assisting with shipments on a timely basis. In addition, climate change could result in an increase in the frequency or severity of natural disasters. In the event that our or our service providers’ information technology systems or manufacturing or logistics abilities are hindered by any of the events discussed above, shipments could be delayed, resulting in missed financial targets, such as revenue and shipment targets, for a particular quarter. In addition, computer malware, viruses and computer hacking, fraudulent use attempts, and phishing attacks have become more prevalent in our industry, and our internal systems may be victimized by such attacks. Although we maintain incident management and disaster response plans, in the event of a major disruption caused by a natural disaster or man-made problem, we may be unable to continue our operations and may endure system interruptions, reputational harm, delays in our development activities, lengthy interruptions in service, breaches of data security and loss of critical data, and our insurance may not cover such events or may be insufficient to compensate us for the potentially significant losses we may incur. Acts of terrorism and other geopolitical unrest could also cause disruptions in our business or the business of our supply chain, manufacturers, logistics providers, partners, or customers or the economy as a whole. Any disruption in the business of our supply chain, manufacturers, logistics providers, partners or end-customers could have a significant adverse impact on our financial results. All of the aforementioned risks may be further increased if the disaster recovery plans for us and our suppliers prove to be inadequate. To the extent that any of the above should result in delays or cancellations of customer orders, or the delay in the manufacture, deployment or shipment of our products, our business, financial condition and results of operations would be adversely affected.

Our products, services and business activities, including our collection of information about cyber threats, are subject to various restrictions under U.S. export controls and trade and economic sanctions laws, including the U.S. Commerce Department’s Export Administration Regulations and economic and trade sanctions regulations maintained by the U.S. Treasury Department’s Office of Foreign Assets Control. The U.S. export control laws and U.S. economic sanctions laws include prohibitions on the sale or supply of certain products and services to U.S. embargoed or sanctioned countries, governments, persons and entities and also require authorization for the export of encryption items. In addition, various countries regulate the import of certain encryption technology, including through import and licensing requirements, and have enacted laws that could limit our ability to distribute our products or service or could limit our customers’ ability to implement our service in those countries. Changes in our products or services or changes in these laws and regulations may create delays in the introduction of our products or services into international markets, prevent our customers with international operations from deploying our products or services globally or, in some cases, prevent the export or import of our products or services to certain countries, governments or persons altogether. Any decreased use of our products or services or limitation on our ability to export to or sell our products or services in international markets would likely adversely affect our business, financial condition, and operating results. Obtaining the necessary authorizations, including any required license, for a particular transaction may be time-consuming, is not guaranteed, and may result in the delay or loss of sales opportunities. If we fail to comply with these laws and regulations, we and certain of our employees could be subject to civil or criminal penalties, including the possible loss of export privileges and monetary penalties. Although we take precautions to prevent our products or services from being provided in violation of such laws, our products or services may have been in the past, and could in the future be, provided in violation of such laws, despite the precautions we take. This could result in negative consequences to us, including government investigations, penalties and harm to our reputation. 41 41 41 Table of Contents Table of Contents

We are subject to laws and regulations, including governmental export controls, that could subject us to liability or impair our ability to compete in our markets. Our products are subject to U.S. export controls, including the U.S. Department of Commerce’s Export Administration Regulations, and we and our employees, representatives, contractors, agents, intermediaries, and other third parties are also subject to various economic and trade sanctions regulations administered by the U.S. Treasury Department’s Office of Foreign Assets Control. We incorporate standard encryption algorithms into our products, which, along with the underlying technology, may be exported outside of the U.S. only with the required export authorizations, including by license, license exception or other appropriate government authorizations, which may require the filing of an encryption registration and classification request. Furthermore, U.S. export control laws and economic sanctions prohibit the shipment of certain cloud-based solutions to countries, governments, and persons targeted by U.S. sanctions. We also collect information about cyber threats from open sources, intermediaries, and third parties, which we use and make available to our customers in our threat industry publications. Although we take precautions and have implemented certain procedures to prevent our information collection practices and services from being provided in violation of applicable laws and regulations, our information collection practices and services may have been in the past, and could in the future be, provided in violation of such laws and regulations. In addition, we cannot assure you that third parties, many of whom we do not control, have complied with all such laws or regulations. Failure by our employees, representatives, contractors, agents, intermediaries, or other third parties to comply with such laws and regulations in the collection of this information could adversely affect us, through reputational harm, loss of access to certain markets, government investigations, and civil and criminal penalties. Various countries regulate the import of certain encryption technology, including through import permit and license requirements, and have enacted laws that could limit our ability to distribute our products or could limit our customers’ ability to implement our products in those countries. Obtaining the necessary authorizations, including any required license, for a particular transaction may be time consuming, is not guaranteed and may result in the delay or loss of sales opportunities. Changes in our products or changes in export and import regulations may create delays in the introduction of our products into international markets, prevent our customers with international operations from deploying our products globally or, in some cases, prevent the export or import of our products to certain countries, governments or persons altogether. Any change in export or import regulations, economic sanctions or related legislation, shift in the enforcement or scope of existing regulations, or change in the countries, governments, persons or technologies targeted by such regulations, could result in decreased use of our products by, or in our decreased ability to export or sell our products to, existing or potential customers with international operations. Any decreased use of our products or limitation on our ability to export or sell our products would likely adversely affect our business, results of operations, and financial condition. We are also subject to the FCPA, the Bribery Act, and other anti-corruption, sanctions, anti-bribery, anti-money laundering and similar laws in the United States and other countries in which we conduct activities. Anti-corruption and anti-bribery laws, which have been enforced aggressively and are interpreted broadly, prohibit companies and their employees, agents, intermediaries, and other third parties from promising, authorizing, making or offering improper payments or other benefits to government officials and others in the private sector. We leverage third parties, including intermediaries, agents, and channel partners, to conduct our business in the U.S. and abroad, to sell subscriptions to our Falcon platform and to collect information about cyber threats. We and these third-parties may have direct or indirect interactions with officials and employees of government agencies or state-owned or affiliated entities and we may be held liable for the corrupt or other illegal activities of these third-party business partners and intermediaries, our employees, representatives, contractors, channel partners, agents, intermediaries, and other third parties, even if we do not authorize such activities. While we have policies and procedures to address compliance with the FCPA, the Bribery Act and other anti-corruption, sanctions, anti-bribery, anti-money laundering and similar laws, we cannot assure you that they will be effective, or that all of our employees, representatives, contractors, 40 40 40 Table of Contents Table of Contents channel partners, agents, intermediaries, or other third parties have taken, or will not take actions, in violation of our policies and applicable law, for which we may be ultimately held responsible. As we increase our international sales and business, our risks under these laws may increase. Noncompliance with these laws could subject us to investigations, severe criminal or civil sanctions, settlements, prosecution, loss of export privileges, suspension or debarment from U.S. government contracts, other enforcement actions, disgorgement of profits, significant fines, damages, other civil and criminal penalties or injunctions, whistleblower complaints, adverse media coverage and other consequences. Any investigations, actions or sanctions could harm our reputation, business, results of operations and financial condition.