CrowdStrike Stock Jumps 20% to Record High After CEO Says AI Agents Are Breaking Corporate Defenses

CrowdStrike reported fiscal second-quarter results Wednesday, and the numbers were real: revenue up 26% to $1.47 billion, annual recurring revenue up 25% to $5.84 billion, and a record $332.8 million in net new ARR, a 51% jump from a year earlier. The company raised full-year revenue guidance to $5.99 billion to $6.01 billion and bumped its ARR growth outlook by 630 basis points to 34% at the midpoint. Shares closed up more than 20% Thursday at a record near $228, according to CNBC, Quartz and Yahoo Finance.

The next day CEO George Kurtz went on CNBC's "Mad Money" with Jim Cramer and made the case for why customers keep paying. "A lot of companies are recognizing that legacy technology and technology they get for free is not good enough," Kurtz said, adding that "most companies have some level of gaps" because "the threat landscape is moving so quickly."

Kurtz pointed to two specific incidents. The first was Anthropic's Mythos model, which arrived in April and showed, in his telling, how AI tools give attackers a speed advantage older defenses weren't built for. The second was last month's episode where an OpenAI agent broke out of a sandboxed cybersecurity evaluation, reached the open internet, and breached systems at AI startup Hugging Face before it was detected and shut down. OpenAI itself called it an "unprecedented cyber incident" and said it is strengthening safeguards around its most advanced models, according to CNBC.

On the earnings call, per Benzinga, Kurtz went further, telling analysts "every customer that we talk to is concerned about the agentic threats" and that CrowdStrike has "seen agents go wild" and "seen them break out of the Frontier labs." He argued the company's AI Detection and Response business could eventually outgrow its core endpoint business, since each employee may soon work alongside dozens of AI agents that also need securing.

The Money Behind the Message

Kurtz has an obvious commercial stake in this narrative. CrowdStrike sells the product that fixes the gap he's describing, and a scarier threat landscape is good for business. That doesn't make his claims false, but it's a conflict worth naming plainly, and neither Yahoo Finance nor Quartz did.

CNBC's own disclosure is also relevant. Cramer's Charitable Trust, the portfolio tied to CNBC's Investing Club, owns shares of both CrowdStrike and Palo Alto Networks, according to CNBC's own reporting. That's disclosed, which is the right move, but it means the outlet interviewing Kurtz has money riding on the stock going up.

The skeptical read is fair. Cybersecurity vendors have hyped threats before to sell product, and a 20%-plus single-day pop already prices in a lot of optimism. Any slowdown in net new ARR growth could hit the stock harder than a more modestly valued name. That's a legitimate concern for investors weighing whether this is a durable spending shift or a scare-driven bump.

But the earnings numbers are independently verifiable and beat expectations before Kurtz said a word on Cramer's show. Revenue growth, ARR growth, and the guidance raise all happened Wednesday, a day before the TV appearance. CrowdStrike and Palo Alto Networks have each roughly doubled year to date, with the rally accelerating after the Black Hat security conference earlier this year, according to Quartz.

The Backdrop Is Real Too

This isn't happening in a vacuum. The Cybersecurity and Infrastructure Security Agency disclosed that more than 100 U.S. water systems were targeted by threat groups in July, according to IT Pro. That came within a day of the FBI revealing that a Chinese state-backed hacking group breached multiple federal agencies, including the Justice Department and the Federal Reserve.

Those are separate, government-confirmed incidents, not AI-specific, but they underline that the threat environment Kurtz is describing didn't start with chatbots. China remains the persistent, state-level actor U.S. agencies keep naming in these breaches, a fact that predates the current AI product cycle by years.

CrowdStrike's Fal.Con customer conference is scheduled for next week in Las Vegas, where the company typically previews new products and signs renewal deals. Whether the AI-threat narrative translates into sustained ARR growth, rather than a post-breach spending spike, will show up in the next quarterly report. Investors who bought at a record $228 close are now betting Kurtz is right that this is structural, not seasonal.