Current remaining performance obligations, or cRPO, is the value of contracted revenue that a company expects to recognize within the next 12 months. In SaaS and cloud businesses, it is a forward-looking measure of committed demand: customers have signed, but the service has not yet been delivered or billed as revenue.
In cyber security, cRPO matters because it helps analysts judge a vendor’s financial stability and ability to fund security operations, patching, compliance, and incident response. A strong cRPO can indicate steady recurring cash flow, while a weakening cRPO may signal delayed renewals or budget pressure that can affect security staffing and control rollout. Security teams also use it in vendor risk reviews to understand whether a critical supplier is likely to remain healthy enough to support secure operations over time.