CrowdStrike

On an ordinary day over the last month of trading, CRWD has moved about 3.17%, making it one of the most volatile of the stocks Kinzan tracks (their median is 1.81%).

Measured against its own habit, today is a +2.6σ day: the kind it has only a few times a year.

It sits near the top of its 24-hour range of 236.31–257.91, measured on hourly closes.

The New York block (13:00–22:00 UTC) did most of the work — roughly 90% of the movement over the last 24 hours.

Over the last 60 sessions of daily returns, it has moved most closely with CRM (+0.57, a moderate relationship).

Its last close is at the 73rd percentile of its own last 82 sessions, and its 20-day volatility at the 20th.

Market read: CrowdStrike is surging on heavy volume, with the vast majority of gains occurring during the New York session.

What it is

CrowdStrike sells cybersecurity as a subscription. Its Falcon platform runs on a lightweight software agent installed on each laptop, server or virtual machine, which streams activity data to the company’s cloud, where it is analysed to detect and stop attacks. Endpoint protection, replacing traditional antivirus, was the founding product; the platform has since added modules for cloud security, identity protection, security-event logging, threat intelligence and a managed service in which the company’s own analysts watch a customer’s systems. The model is to land with one module and expand to many.

What drives it

Annual recurring revenue is the number the market trades on, particularly the net new recurring revenue added in a quarter, as the best sign of whether demand is accelerating or slowing. Module adoption is the engine underneath. Competition matters on two fronts: Microsoft bundles security into its enterprise licensing, and other security vendors are pushing platforms of their own, so the question is whether customers consolidate onto CrowdStrike or away from it. The faulty software update in July 2024 that crashed millions of Windows computers worldwide is part of its record. It led to customer concessions and lawsuits, and showed how much of the company’s value rests on trust in an agent that runs with deep access to every machine.

How it trades through the day

It is traded in the US cash session, 13:30 to 20:00 UTC in summer and 14:30 to 21:00 UTC in winter. The fiscal year ends in January, so results land in early March, around the start of June, around the turn of August and September, and in late November or early December, after the close. As a high-valuation growth stock it reacts strongly to the recurring-revenue figures and guidance, and to interest-rate expectations, which change the value placed on earnings far in the future. A large cyber incident in the news can move the whole security group intraday.

What it tends to move with

Its peer group is cybersecurity software: Palo Alto Networks, Zscaler, Fortinet and SentinelOne, whose results and commentary on enterprise security budgets are read across to it. More broadly it trades with high-growth software, and has tended to fall harder than the market when investors move away from long-duration growth shares.