Case Studies: Software Stock Teardowns
Theory without application is academic. In this final section, we apply every framework from this playbook—unit economics, Rule of 40, NRR, moats, and AI positioning—to three real-world software companies across the valuation spectrum.
Case Study 1: CrowdStrike (CRWD) — The Generational Compounder
Company Profile: CrowdStrike is the dominant cloud-native cybersecurity platform, built on the Falcon architecture. It started with endpoint detection and response (EDR) and has expanded into cloud security, identity protection, log management, and AI-powered threat intelligence.
The Bull Case (Compounder Thesis):
- NRR: ~120%+. CrowdStrike's land-and-expand motion is a machine. Customers adopt the Falcon agent for endpoint protection, then progressively add modules. The company reports that customers with 5+ modules (out of 20+) have substantially lower churn and higher lifetime value. The multi-module attach rate continues to climb, providing structural NRR durability.
- Rule of 40: ~60+. CrowdStrike maintains 30%+ revenue growth while generating 30%+ FCF margins, putting it firmly in the elite tier. This combination of growth AND profitability at scale is exceptionally rare.
- Moat: Data Network Effect + Switching Costs. The Falcon platform ingests threat telemetry from millions of endpoints worldwide. Every new customer makes the threat intelligence better for every other customer. This is a self-reinforcing data moat that no startup can replicate without the installed base. Additionally, ripping out your endpoint security platform is operationally terrifying for a CISO.
- AI Positioning: Tier 1 (Charlotte AI). CrowdStrike's Charlotte AI uses the company's proprietary threat graph to accelerate incident response, automate triage, and predict attack vectors. This is genuine AI value built on proprietary data, not a ChatGPT wrapper.
- TAM Expansion: The company's TAM has expanded from ~$25B (endpoint security) to ~$100B+ (full security platform including cloud, identity, observability, and data protection). The addressable wallet per customer is growing faster than the customer count.
The Risk: Valuation. At 15x+ NTM revenue, CrowdStrike is priced for near-perfect execution. Any stumble—a major security incident, a miss on cloud security adoption, or a broad macro selloff—could cause a 30-40% drawdown. The investor must have the conviction and patience to hold through volatility.
Verdict: Generational Compounder. A core holding, sized at 10-15%.
Case Study 2: Snowflake (SNOW) — The Consumption Puzzle
Company Profile: Snowflake is a cloud-native data platform that enables organizations to store, transform, and analyze data across AWS, Azure, and GCP. Its consumption-based pricing model means customers pay only for the compute and storage they use.
The Complexity:
Snowflake is one of the most debated stocks in software investing because it sits at the intersection of extraordinary product quality and complex financial dynamics.
- NRR: ~125-130% (at peak), declining to ~115% more recently. Snowflake's NRR has been historically elite, driven by customers migrating more workloads and running increasingly complex queries. However, the rate of NRR expansion has slowed as the company's customer base matures and optimization efforts by customers reduce consumption growth.
- Rule of 40: Improving. Snowflake has historically been a "growth at all costs" company, with negative FCF margins during its early public years. It has recently pivoted toward profitability, with FCF margins expanding to 25%+. The Rule of 40 score has improved dramatically, though primarily through margin gains rather than growth acceleration.
- Moat: Data Gravity + Multi-Cloud. Snowflake's moat is "data gravity"—once an organization's data estate lives in Snowflake, migrating it is an enormous undertaking. The multi-cloud architecture (running on all three major cloud providers) is unique and gives Snowflake negotiating leverage that single-cloud competitors (BigQuery, Redshift) lack.
- AI Positioning: Tier 2 (Cortex AI). Snowflake's Cortex enables customers to build and run AI models directly on data stored in Snowflake, without moving it to a separate environment. This is strategically sound (keeping data gravitationally bound to the platform), but the AI revenue contribution is still nascent compared to core warehousing.
The Risk: The consumption model is double-edged. When enterprises optimize their cloud spending (as they did aggressively in 2023-2024), Snowflake's revenue growth decelerates sharply. Unlike subscription models, there is no guaranteed revenue floor. A prolonged optimization cycle can compress growth to single digits, triggering aggressive multiple compression.
Verdict: High-quality asset with complex near-term dynamics. Best suited for Tier 2 position (6-10%) with a 3-5 year horizon. The AI workload thesis is promising but must be validated by actual consumption data over the next 4-8 quarters.
Case Study 3: Dropbox (DBX) — The Value Trap Archetype
Company Profile: Dropbox is a cloud file storage and collaboration platform. It was one of the pioneering SaaS companies of the late 2000s and went public in 2018.
The Bear Case (Value Trap Thesis):
- NRR: ~100% and Stagnant. Dropbox's existing customers are not spending more. There is no meaningful expansion revenue. The platform solves file storage—a functionality that has been commoditized by Apple (iCloud), Google (Drive), and Microsoft (OneDrive), all of which bundle storage with their core platform subscriptions at no additional cost.
- Rule of 40: ~30-35 (Driven Entirely by Margins). Growth has decelerated to low single digits (<5%). The Rule of 40 compliance is achieved solely through aggressive cost-cutting and high FCF margins (~30%+). This is a classic "harvesting" pattern—the company is milking its existing base rather than investing for future growth.
- Moat: Eroded. Dropbox's original moat—easy cloud file syncing—was powerful in 2012. By 2024, file syncing is a commodity feature embedded in every operating system and every productivity suite. There are no meaningful switching costs; a user can migrate from Dropbox to Google Drive in minutes.
- AI Positioning: Tier 3 (Dropbox Dash). Dropbox launched "Dash," a universal search tool, as an AI play. It has gained minimal traction and competes directly against far better-resourced incumbents (Microsoft Copilot, Google Gemini, Notion AI). There is no proprietary data advantage or distribution moat to give Dash a competitive edge.
- Revenue Trajectory: Flatline. Revenue has been essentially flat for multiple years. New user growth has stalled. The business is a mature annuity generating cash, but there is no catalyst for re-acceleration.
Why It Looks Cheap: Trading at ~4x NTM Revenue with 30% FCF margins, Dropbox appears statistically cheap compared to the SaaS universe median. Value-oriented investors are attracted to the FCF yield.
Why It's a Trap: A 4x revenue multiple for a 3% growth company is not cheap—it's fair. The market is correctly pricing in a business with no growth levers, an eroding competitive position, and no credible AI optionality. For the stock to re-rate higher, growth must re-accelerate. There is no credible thesis for why that would happen.
Verdict: Value Trap. Avoid or underweight. Capital is better deployed in compounding businesses with growing NRR and expanding TAM.