News··6 min read

AI Agents Just Became a Line Item in the Security Budget

Price · 12MYahoo Finance ↗

Two security companies reported on the same evening and both stocks had an extraordinary day. CrowdStrike closed up 20.5%. Okta closed up 28.6%.

They sell different things. They gave the same explanation.

The numbers

CrowdStrikeOkta
Revenue$1.47bn, +26%$805m, +10.6%
Subscription revenue$1.40bn, +27%$793m, +12%
Adjusted EPS$0.31$1.05
Headline metricNet new ARR $332.8m, +51%FY guide raised to $3.22bn
Close, 27 Aug$227.96, +20.5%$172.91, +28.6%

The CrowdStrike line that did the work is net new ARR accelerating 51% year on year to a record. Total ARR growth of 25% is good; net new ARR accelerating at a company already at $5.84 billion is the thing that does not usually happen, and it is why the reaction was that size.

Okta's growth is half CrowdStrike's — 10.6% is not a hypergrowth number — and it still rose more. That reaction was about the guidance raise landing on a stock nobody was positioned in.

Why the same driver appears twice

Both managements pointed at AI agents.

An agent that books travel, files tickets or moves money needs credentials, permissions and system access. It acts without a person approving each step. Every agent is therefore an identity, and identities in the tens of thousands are not something an access-review spreadsheet handles.

That is a straightforward budget consequence. Deploying agents at scale creates a security cost that scales with the deployment. It is not discretionary spend that gets cut in a soft quarter; it arrives attached to a project the board has already approved.

Which is why these two prints are, structurally, AI capex — just landing on a different set of income statements than the semiconductor ones.

The wider pattern in the week

Salesforce rose 22.6% the same day for converting AI into margin now. CrowdStrike and Okta rose for selling into a budget that AI adoption creates now. Nvidia rose for a forecast about fiscal 2028 and gave half of it back within a session.

The market spent this week paying for the near end of the AI trade and discounting the far end. With September rate-hike odds moving to a coin flip on Friday, that is exactly the sorting you would expect.

How I read it

The second-order beneficiaries of AI are having a better year than the story suggests, and they are cheaper to be wrong about than the chip makers.

What I would watch on Okta specifically: 10.6% revenue growth does not support a 28.6% single-day move on its own. That was a repricing of expectations, not of the business, and repricings of expectation reverse faster. It already gave back 3.9% the following session.

CrowdStrike's number is the more durable one. Net new ARR is a forward measure, and it accelerated.

Frequently asked questions

What did CrowdStrike report?
Revenue of $1.47 billion, up 26%, with subscription revenue of $1.40 billion, up 27%. Annual recurring revenue reached $5.84 billion, up 25%, and net new ARR accelerated 51% year on year to a record $332.8 million. Adjusted earnings were $0.31 per share.
What did Okta report?
Revenue of $805 million, up 10.6% and ahead of the $792.8 million consensus, with subscription revenue of $793 million, up 12%. Adjusted earnings were $1.05 per share against roughly $0.96 expected, and full-year revenue guidance was raised to $3.216-$3.226 billion.
How much did the two stocks move?
On 27 August CrowdStrike closed up 20.5% at $227.96 and Okta closed up 28.6% at $172.91. Both gave some back on Friday, finishing the week at $218.40 and $166.23.
What is the AI agent security problem?
An autonomous agent needs credentials, permissions and access to systems in order to act. Each one is an identity that can be compromised, and it operates without a human reviewing each step — which turns identity and endpoint control from an IT cost into a spending line that scales with AI deployment.

Ruslan Averin is an independent investor and market analyst, author of averin.com, publishing market research since 2014.

A
Ruslan AverinInvestor & Market Analyst

Writes on capital allocation, risk, and market structure.