CrowdStrike, which sells cloud-delivered endpoint, identity and cloud-workload protection as subscriptions to its Falcon platform, reported its July quarter after the close on 26 August: revenue of $1.47bn, up 25.8%, and net new annual recurring revenue of $332.8m, a record and up 51%. The next session, twelve listed security vendors rose together. Palo Alto Networks, which has published no financial statement since April, rose 11.4% of them.

That is the stake this week. A sector that has roughly doubled since the start of May had, until Wednesday night, almost no fresh audited evidence underneath it. CrowdStrike has now supplied some. Palo Alto supplies its own after the close on Tuesday, 1 September.

What CrowdStrike actually disclosed

Revenue growth accelerated for a fourth straight quarter, from 22.2% three quarters ago to 25.8%. Gross profit grew faster than revenue, up 27.7%, as gross margin widened 111 basis points to 74.6%. The number that matters most against the long shadow of the July 2024 outage is the subscription line: GAAP subscription gross margin was 78%, up from 77% a year earlier. The discounting embedded in post-outage customer packages is not visible in the economics.

Underneath, ending ARR reached $5.84bn, up 25%. Commitments through Falcon Flex, the pooled-licensing construct that lets customers draw down across modules, exceeded $2.29bn and more than doubled year on year. Next-generation security information and event management — the log-analytics business CrowdStrike is taking from Splunk-era incumbents — reached $695m of ARR, up 60%. The company said its separately priced AI detection and response module nearly tripled its ARR in a single quarter. Management raised the full-year outlook for net new ARR growth by 630 basis points, to 34% at the midpoint, the second consecutive quarterly raise.

"We are in an arms race," co-founder and chief executive George Kurtz told investors on the 26 August call. "AI is driving more cyber attacks. AI is driving more cyber spending."

The mechanism has a name and a date

The budget shift is traceable. Anthropic's release of its Mythos model, capable of exploiting previously unknown software vulnerabilities, converted AI from a claim on security budgets into a source of them; Kurtz called it "the Mythos moment." Black Hat in early August had already pushed both names to records. On 27 August, 116 companies and entities including OpenAI, Anthropic, Microsoft and AMD signed a letter stating that "We have a limited window to strengthen cyber defenses." Okta reported the same evening as CrowdStrike and rose 27.5%. Microsoft, the largest incumbent competitor in endpoint and security operations, rose 0.8%.

Palo Alto's evidence is four months old

In its April quarter, Palo Alto's revenue rose 31.1% — but $388m of it came from the acquired CyberArk and Chronosphere businesses, leaving organic growth near 14%. Purchase accounting cut gross margin 5.4 points to 67.6%, gross profit grew 21.5% against that 31% headline, and GAAP operating income swung to a loss of $183m from a profit of $219m. The organic evidence that does hold up is contractual: next-generation security ARR grew 28% excluding acquisitions, and remaining performance obligations 23% — both running well ahead of organic revenue, which is what longer contracts look like rather than deeper discounts. "Q3 was a standout quarter," chairman and chief executive Nikesh Arora said on 2 June, "with accelerating organic bookings growth as customers turn to us to secure their AI deployments at scale." Guidance for the quarter now due calls for next-generation security ARR of $8.90bn to $8.95bn.

What the price has done with it

CrowdStrike's four-for-one split on 2 July makes its chart misleading; adjusted, the shares are up 95% since 1 May, in line with the group. Its price to trailing gross profit has gone from 32 times on 3 May to 57 times, against gross-profit dollars up 26% over the past year. Palo Alto's went from 20 times to 41 times on gross profit up 17%, and its forward price-to-earnings ratio is 93 times consensus for fiscal 2027 — a year in which consensus has earnings growing 8.9%, down from 15.3%.

So: CrowdStrike earned its business move and has been paid roughly three times over for it. Palo Alto's re-rating is identically shaped and rests on a print that has not happened. The demand mechanism is common to both and looks real; the distinction now is disclosure. One company has shown the money arriving in ARR, in margin and in raised guidance. The other has shown a backlog from April and a promise.

Tuesday settles half of it. If Palo Alto's fourth quarter holds acquisition-adjusted growth near where April left it, the sector's summer will look like the market pricing a budget cycle early. If it does not, Palo Alto will have doubled on somebody else's earnings call.