CrowdStrike's defining moves.
The defining strategic moves at CrowdStrike — each one explained and grounded in the record.
The Money Machine · Business Model
CrowdStrike Crashed 8.5 Million Computers and Kept 97% of Its Customers. That's the Moat.
On July 19, 2024, a bad CrowdStrike file blue-screened Windows machines worldwide and grounded airlines. The expected mass exodus never came: gross retention held above 97% and ARR still grew 23% to $4.24B. The reason is buried in the contract and the kernel.
8 min
Moat Anatomy · Moat Anatomy
CrowdStrike's Moat and Its Worst Day Were the Same Decision
CrowdStrike's data flywheel ingests more than 1 trillion events a day, and it's a genuine moat. But the kernel-level access that feeds it is the exact thing that crashed 8.5 million Windows machines in July 2024. The moat and the risk are one architecture.
8 min
The Crisis Response · Crisis Response
CrowdStrike Wasn't Hacked. It Hacked Itself — With One File, Everywhere, at Once.
On July 19, 2024, a single config file crashed 8.5 million Windows machines and grounded thousands of flights. It wasn't a cyberattack. It was a missing bounds check shipped to every production sensor at once — a governance failure, not a security one.
8 min
The Moat Anatomy · Moat Anatomy
CrowdStrike Crashed 8.5 Million Machines and Lost Almost No One. The Outage Was the Moat Test.
On July 19, 2024, a CrowdStrike update bricked millions of Windows machines and grounded airlines. The obvious bet was an exodus. Instead, gross retention stayed over 97% - down less than half a point. The outage didn't break the moat. It proved it.
8 min