Compare moats
Up to three covered companies, band by band. Every call is a curated editorial judgment, never a disclosed figure — and every band carries its cited basis.
| Palantir Technologies | ServiceNow | CrowdStrike | |
|---|---|---|---|
| Moat rating | narrow The FY2025 10-K competition section concedes that some competitors have 'greater name recognition, longer operating histories, and larger customer bases', 'larger and more mature intellectual property portfolios', and 'substantially greater financial, technical, and other resources' — and that Palantir is 'fundamentally competing with the internal software development efforts of our potential customers'. A real moat exists but the filing's own disclosure caps it below wide. | narrow The FY2025 10-K shows RPO of $28.2 billion, up 27%; customers above $5 million of ACV at 603, 502 and 420 as of December 31 2025, 2024 and 2023; revenue of $13,278 million, up 21%; and a 98% renewal rate for three years. That rate cannot prove durability: the filing computes it excluding "changes in price or users," says it "does not reflect increased or decreased purchases," and warns "period-to-period comparison of renewal rates may not be meaningful." The company also calls its market "characterized by fragmentation, low barriers to entry." Real switching costs plus compounding large accounts support narrow; wide would need durability proof this filing lacks. | narrow Narrow rather than wide because the FY2026 10-K argues both ways and its own risk factors are the harder side: it describes a self-reinforcing data advantage and says "we do not believe any of our competitors currently have a true platform offering equivalent to the Falcon platform", but the same filing calls the market for security and IT operations solutions "intensely competitive, fragmented", warns that "Competitive pricing pressure may reduce our gross profits", and still carries the July 19 Incident as having "had, and is expected to continue to have, an adverse effect on our business, sales, customer and partner relations, reputation" more than two years after it occurred. |
| Moat type | switching costs The 10-K reports that 'our top three customers by revenue for the year ended December 31, 2025, have been with us for an average of ten years' and that a significant portion of revenue comes from existing customers expanding their relationships. The filing explicitly disclaims patent dependence — 'we are not dependent on any particular patent or application' — so the durable source is embedded deployment, not IP. | switching costs The binding force is architecture and configuration. The filing describes "a multi-instance architecture that provides each customer with a dedicated application layer and database," an ITOM product that "maintains a single record of all IT configurable items," and products built to "integrate with existing workflows rather than replace them." Once that record and its integrations are configured, replacement becomes a re-platforming program — our inference, as the filing quantifies no switching cost. Not IP: it holds "over 2,000 issued U.S. and foreign patents" but is not "materially dependent on any single patent." Not network effects. | network effects The 10-K states the mechanism directly: "The more data that is fed into our Falcon platform, the more intelligent the AI Security Cloud becomes, the stronger our ability to anticipate and counter evolving adversary tradecraft, and the more our customers benefit, creating a powerful network effect that increases the overall value we provide." |
| Leadership | at parity The 10-K claims only that 'we believe we generally compete favorably with our competitors', while conceding rivals' greater scale, recognition and resources. The filing does not assert market leadership, so a leader band is not groundable from it. | clear leader The call is scoped to IT service management. Apps Run The World's 2024 ITSM ranking (page dated 23 July 2025) places ServiceNow first at 44.4% share, ahead of Atlassian, BMC, GoTo and Ivanti, in an $11.4 billion market where the top ten hold 83.3%. Scale corroborates: about 8,700 customers, 29,187 employees, $13,278 million of revenue, $28.2 billion of RPO. References to "two decades partnering with enterprise customers" and process knowledge "that cannot be readily replicated" are the filing's own characterisation. Outside ITSM it is weaker: one of six Leaders in the 2025 Gartner LCAP quadrant, and tenth of ten in CRM behind Salesforce at 26.1%. | co leader Co-leader rather than clear leader because the only claim of platform primacy available is the company's own ("we do not believe any of our competitors currently have a true platform offering equivalent"), while the same 10-K describes a fragmented market and lists seven distinct categories of competitor, from legacy antivirus to network security, cloud security, identity and legacy SIEM vendors. |
| Pricing power | strong FY2025 gross profit of $3.7 billion on a gross margin of 82% (84% excluding stock-based compensation), up from 80% (83% ex-SBC) in FY2024 — a sustained and rising 80%+ gross margin. | moderate The filing discloses no average selling price, no net revenue retention and no pricing data, and the renewal rate is no proxy — it "does not reflect increased or decreased purchases" and excludes "changes in price or users." Revenue up 21%, the $5 million-plus cohort up about 20% annually and RPO up 27% are all consistent with expansion at flat pricing. Margins cut the other way: subscription gross profit fell to 80% from 82% with no stated cause, and professional services gross loss widened to 5% from 2%. One real lever is that "certain AI and data solutions include a consumption-based pricing component." | moderate The 10-K's risk factors state that "Competitive pricing pressure may reduce our gross profits" and that competing successfully may require "aggressive pricing", which is the company's own case against strong pricing power; the offsetting factor it cites is module consolidation on one sensor. |
| Summary | Customers who deploy Foundry model their operations in the Ontology and build workflows on top of it, so displacement means rebuilding that layer rather than swapping a vendor — which is why the 10-K frames its main competitor as the customer's own internal build effort. Ten-year average tenure among the top three customers is the filing's own evidence that those deployments persist. | ServiceNow sells a workflow platform that sits on top of, rather than replaces, an enterprise's existing systems. Each customer gets a dedicated application layer and database, ITOM maintains a single record of all IT configurable items, and products integrate with existing workflows rather than replace them; once that record and its integrations span IT, HR and customer service, displacement becomes a re-platforming exercise. The evidence is in large commitments: $5 million-plus ACV customers rose from 420 to 502 to 603, and RPO reached $28.2 billion, up 27%, against $13,278 million of FY2025 revenue. The moat is bounded by a market the company itself calls fragmented with low barriers to entry, by larger rivals that can bundle or cut price, and by falling subscription gross margin, 82% to 80%. | A single lightweight sensor collects enterprise data once and reuses it across 33 cloud modules, and the pooled telemetry trains the models every customer is then defended by — the 10-K calls this crowdsourced, high-fidelity data "cloud-scale AI" and treats it as the fundamental differentiator from competitors. |
| Chain position | Application-layer software sitting above the cloud and model providers; AIP connects to third-party LLMs rather than supplying them. | Enterprise workflow platform layered on top of customers' existing systems of record. It consumes public cloud capacity (named relationships with AWS, Google, Microsoft and NVIDIA) plus its own data centers, and reaches customers through a direct sales force, global system integrators (Accenture, Deloitte, EY, Infosys, KPMG) and resale partners. Microsoft is named as both partner and competitor. | AI-native security platform — an adopter and reseller of AI rather than a supplier of AI infrastructure. |
| Products (share / barrier) |
|
|
|
| Long-horizon vote | +0.11 at weight 0.20 · swarm bullish Editorial prior, not backtested. | +0.20 at weight 0.20 · swarm neutral Editorial prior, not backtested. | +0.13 at weight 0.20 · swarm neutral Editorial prior, not backtested. |