How CrowdStrike Could Double ARR by 2030 with George Kurtz

CrowdStrike Holdings

Across the shows: 1 speaker in other episodes, 1 bullish and 0 bearish calls, past 30 days

• Josh Brown · Ritholtz Wealth ManagementBullish

  AI is a decades-long age, not a trade; CrowdStrike's products have years to run.

  Brown argues the AI shift is a multi-decade era, not a short-term trade to be timed by quarterly results. He says products CrowdStrike built three years ago are only now blossoming and could have years to run in penetrating their total addressable market. He says the valuation is high because growth is high, and that long-term institutional holders are betting on CrowdStrike as a central platform for the age of AI rather than a quarter-to-quarter AI trade.

  “AI is not a trade, it's an age. We're in the age of AI, which like is decades, right?”at 31:39

Cybersecurity

• George Kurtz · CrowdStrike

  Agentic cyberattacks are rising exponentially, letting low-skill actors match nation-state attacks.

  Kurtz cites CrowdStrike research showing an exponential increase in agentic attacks. He says the old pyramid of pain, with nation-states at the top and hacktivists at the base, has collapsed into an 'agent state'. Low-skill actors can use off-the-shelf AI skills, and nation-state actors split tasks across an ensemble of models so no single model sees the goal, with an executor agent assembling the results. Open-weight models with guardrails removed serve as that executor, and they may be less capable than frontier models but are good enough. The attacks are cheap, costing a few dollars, so the bottom of the pyramid, with the most actors, can now run sophisticated operations.

  “it is an exponential increase in what we're seeing with agentic attacks.”at 13:36

• George Kurtz · CrowdStrike

  AI agents given broad privileges and unchecked internet downloads create a serious supply-chain threat.

  Kurtz says concentration in software providers and open-source tools creates supply-chain risk. Coding agents such as Claude Code fetch open-source packages from the internet, and attackers have compromised those packages, so agents running them execute the malicious code. He says the security model of not running untrusted code and focusing on identity has been reversed: companies give agents privileged identity, let them download anything, and do not check it. He says this undoes thirty years of security controls and requires a different level of technology to keep it safe. Josh Brown adds that a single compromised source can expose hundreds of databases through shared architecture.

  “we're going give agents incredible identity in terms of its privilege. And then we're going to allow it to download anything from the Internet and we're not going to check it.”at 19:52

• Josh Brown · Ritholtz Wealth Management

  Cybersecurity has been one of the only guaranteed bull markets on earth for about six years.

  Brown says he has described cybersecurity as a guaranteed bull market for most of the last six years. He frames the sector's demand as structurally secure, so the only open question has been which company to own. He supports the view mainly by pointing to CrowdStrike's strong performance, which is a historical result rather than an argument about future demand.

  “for most of the last six years, I've been referring to cybersecurity as one of the only guaranteed bull markets on earth.”at 37:54