F5, Inc. Overview
F5 occupies an unusually defensible position in enterprise infrastructure: it is the incumbent traffic-management and security control point in front of the world's most mission-critical legacy applications, and it has spent a decade extending that franchise into software, SaaS and, latterly, AI. Roughly 70% of revenue is recurring. The installed BIG-IP base — sticky, deeply embedded, operationally hard to displace — funds a portfolio that now spans NGINX for cloud-native workloads, Distributed Cloud Services for SaaS-delivered security and multicloud networking, and an AI Security Platform assembled through rapid tuck-in M&A. The October 2025 nation-state breach of F5's own development environment was a genuine shock to the franchise's core asset, trust; yet FY2026 has delivered eight consecutive quarters of double-digit product growth and three successive guidance raises. F5 is no longer a declining hardware vendor dressed as a software company; it is a cash-generative platform business whose principal risk is now reputational rather than structural.
F5, Inc. is a Washington-incorporated, Seattle-headquartered provider of application delivery and application/API security technology. The company was incorporated on 26 February 1996 under the name F5 Labs, Inc., traded for most of its listed life as F5 Networks, Inc., and adopted its current short-form legal name, F5, Inc., in 2021. It retains Commission File Number 000-26041 and IRS Employer Identification Number 91-1714307, both confirmed in the FY2025 Form 10-K cover page.
| Metric | FY2021 | FY2022 | FY2023 | FY2024 | FY2025 |
|---|---|---|---|---|---|
| Total employees | 6,461 | 7,089 | 6,524 | 6,557 | 6,578 |
| Countries with employees | 47 | 47 | 47 | 47 | 47 |
| Share of employees in United States (%) | 52 | 50 | 48 | 47 | 47 |
FY2021 and FY2024–FY2025 headcount, country count and US share are taken directly from the respective Forms 10-K. FY2022 and FY2023 headcount are from Macrotrends' compilation of the same filings; the FY2022–FY2023 US-share percentages are interpolated from the disclosed FY2021 and FY2024 endpoints and should be treated as indicative rather than filed data.
What the company does — in its own words
The FY2025 Form 10-K opens with the company's own characterisation: F5 describes itself as a multicloud application delivery and security provider that partners with large, advanced organisations to optimise and secure every application and API wherever it runs — on premises, in the cloud, and at the network edge. Its stated purpose is to enable businesses to stay ahead of threats while delivering secure digital experiences. The company's corporate boilerplate, used consistently in FY2026 press releases, positions F5 as "the global leader that delivers and secures every app," backed by three decades of expertise and anchored on the F5 Application Delivery and Security Platform (ADSP).
The 10-K is explicit that solutions are available across a range of deployment and consumption models: packaged software sold perpetually, by subscription, or on usage-based terms; software-as-a-service and managed services on subscription or usage models; high-performance hardware systems; and a broad global services business comprising maintenance, consulting, training and technical support.
Independent characterisation
F5 is best understood as three overlapping businesses that share a single go-to-market engine and a single engineering culture.
The first and largest is the BIG-IP franchise — an application delivery controller (ADC) and security stack that sits in the data path in front of enterprise applications, terminating TLS, load-balancing traffic, enforcing access policy, and applying web application firewall and DDoS controls. BIG-IP is sold both as software (perpetual and subscription) and as purpose-built appliances (rSeries, VELOS). This is a mature, high-share, high-margin business with formidable switching costs: BIG-IP configurations encode years of accumulated operational policy in iRules and are among the hardest infrastructure components in an enterprise to rip out. It is also the business that generated the strongest growth in FY2025 and FY2026, driven by a hardware refresh cycle and AI-adjacent capacity demand.
The second is NGINX, acquired in 2019, which addresses the opposite architectural pole: lightweight, container-native, developer-adopted proxying, ingress control and API gateway functionality for microservices. NGINX gives F5 relevance in Kubernetes environments where a BIG-IP appliance would be architecturally absurd, and it gives F5 a free open-source funnel of extraordinary breadth.
The third is F5 Distributed Cloud Services, built principally on the Volterra and Shape Security acquisitions, which delivers WAAP, bot defence, multicloud networking, DNS, CDN and managed Kubernetes as SaaS across F5's own global private backbone (the F5 Global Network). This is the growth optionality, though it remains a minority of revenue and F5 does not disclose its standalone contribution.
Layered across all three since FY2025 is the F5 Application Delivery and Security Platform (ADSP), which is less a product than a unification strategy — a common policy engine, telemetry fabric and management console intended to convert a portfolio of adjacently acquired point products into something a CIO can buy once. The AI Security Platform launched in June 2026 is the newest module of that architecture.
Revenue model and mix
| Revenue mix (% of total) | FY2021 | FY2022 | FY2023 | FY2024 | FY2025 |
|---|---|---|---|---|---|
| Systems | 28.7 | 24.2 | 23.8 | 19.1 | 22.9 |
| Software | 19.2 | 24.7 | 23.6 | 26.1 | 26.0 |
| Global services | 52.1 | 51.1 | 52.6 | 54.8 | 51.1 |
F5 disaggregates revenue into three lines: systems (hardware), software, and global services. Software plus systems constitute "product" revenue, the metric management emphasises on earnings calls.
Source: F5 quarterly earnings releases and Fiscal.ai segment compilation of the same filings. Figures rounded; components may not sum exactly to total.
Two structural observations. First, the software share roughly doubled between FY2019 and FY2022 and has since plateaued around 26%, which is the principal bear argument on the equity: the software transition stalled. Second, services revenue — overwhelmingly maintenance attached to the installed hardware and software base — has grown at only 2–4% annually and now grows slower than product, meaning the recurring-revenue mix has been diluted, not enriched, by the FY2025–FY2026 hardware cycle. Management stated in the FY2025 proxy that over 70% of revenue is recurring.
Value chain position and route to market
F5 is fabless and asset-light. Manufacturing of all hardware systems is outsourced, principally to Flex Ltd., with assembly, quality control and systems testing at Flex facilities in Guadalajara, Mexico and Zhuhai, China. Product built in Guadalajara ships to a Flex fulfilment centre in Memphis, Tennessee for Americas and EMEA distribution; Zhuhai-built systems serve APAC. Title passes from Flex to F5 and then to the customer on shipment. F5 discloses in its risk factors that it currently uses a single contract manufacturer for its products, which is a genuine concentration exposure.
Sales are overwhelmingly indirect. F5 sells through distributors, value-added resellers, managed service providers and systems integrators, with a direct sales overlay for large accounts. Two worldwide distributors accounted for 33.3% of total net revenue in FY2025 — a concentration the 10-K flags explicitly as a risk.
Customers and end markets
The FY2025 10-K identifies the customer base as large enterprise businesses, public sector institutions, governments and service providers, with Fortune 1000 / Global 1000 enterprises in technology, financial services, transportation, education, manufacturing and healthcare, plus government customers and telecommunications service providers, making up the largest share. Government sales are a meaningful and separately risk-flagged portion of revenue — a fact that made the October 2025 CISA emergency directive commercially as well as reputationally significant.
Strategy
Stated strategy — verbatim themes from the FY2025 Form 10-K
F5 articulates three components of strategy, reproduced here as the company frames them.
Solving multicloud application delivery and security challenges. The 10-K asserts that with BIG-IP (optimised for traditional applications on premises, co-located or in cloud), NGINX (optimised for modern, container-native, microservices-based applications and APIs) and Distributed Cloud Services (SaaS and managed services for both), F5 is "the only provider capable of supporting customers' modern and legacy application delivery and security needs across any environment — on premises, co-located, in a cloud or at the edge."
Transforming how customers experience F5. Growing foundational capabilities in data and insights, digital sales and SaaS-delivered capability to deliver friction-free consumption; improving portfolio awareness across both user and buying personas; enhancing digital customer experiences for both growth and efficiency.
Capturing growth in security and SaaS. Continued investment in Distributed Cloud Services, with the Distributed Cloud console extending visibility and simplifying management for BIG-IP and NGINX customers.
The four-pronged AI strategy
The 10-K sets out an explicit four-part AI strategy, which is the most consequential strategic statement in the document:
-
Sell the existing portfolio into AI use cases — AI data delivery, AI runtime security and AI factory load balancing.
-
Use AI models within the existing data fabric to enhance current products.
-
Innovate new offerings addressing the rapidly evolving application and data security landscape.
-
Pursue partnerships with global AI leaders to deliver and secure AI workloads.
Each of the four has produced concrete output within eighteen months: BIG-IP Next for Kubernetes on BlueField DPUs (prong 1); AI-powered WAF risk scoring and the AI Data Fabric (prong 2); the AI Security Platform (prong 3); and the deepening NVIDIA relationship (prong 4).
Strategic initiatives announced in the last 24 months
| Date | Initiative | Description and strategic intent |
|---|---|---|
| FY2025 | F5 Application Delivery and Security Platform (ADSP) | Portfolio unification in response to customers' stated preference for platform over point solutions; the organising commercial construct for everything that follows |
| FY2025 | AI Data Fabric | Cross-portfolio telemetry and AI enablement layer within ADSP |
| Jun 2025 | Fletch acquisition | Agentic AI threat-intelligence analysis and real-time remediation, integrated into the AI Data Fabric |
| Aug 2025 | MantisNet acquisition | eBPF-powered cloud-native observability and real-time network intelligence; full-stack visibility across telco, enterprise and government domains |
| Sep 2025 | CalypsoAI acquisition | AI inference-layer security: guardrails, agentic red teaming, data security |
| Oct 2025 | Post-incident security transformation | Michael Montoya appointed Chief Technology Operations Officer (13 Oct 2025) to lead enterprise-wide cybersecurity strategy alongside the CISO; signing certificates and keys rotated 13 Oct 2025; "F5 Hardened Releases" programme introduced |
| Oct 2025 | BlueField-4 DPU integration | Gigascale AI factory support at up to 800 Gb/s |
| Jan 2026 | NVIDIA Enterprise AI Factory validated design | BIG-IP Next for Kubernetes included in NVIDIA's validated reference architecture |
| Jan 2026 | Political Contributions Policy | Semi-annual disclosure of political contributions from 1 January 2026, adopted in response to shareholder feedback |
| Mar 2026 | F5 Insight; BIG-IP v21.1; AI WAF risk scoring; NGINX AI agent visibility; NGINX Gateway Fabric acceleration | A coordinated release wave adding observability, post-quantum cryptography and AI-aware controls across the platform |
| Mar 2026 | Expanded NVIDIA AI-factory economics collaboration | Inference-aware routing using NIM statistics, Dynamo runtime signals and GPU telemetry |
| Mar 2026 | Board leadership transition | Combined Chair/CEO with strengthened Lead Independent Director |
| May 2026 | F5 Partner Foundations | Structured partner-engineer learning curriculum with specialisation pathway — channel capability build |
| May 2026 | Red Hat collaboration | Enhanced Kubernetes and AI application security solutions |
| Jun 2026 | F5 AI Security Platform launch and SurePath AI acquisition | Consolidated AI discovery, testing and protection for CISOs; shadow-AI detection |
| Ongoing | Digital sovereignty solution area | Dedicated go-to-market for sovereign cloud and sovereign AI requirements, particularly in EMEA |
| Ongoing | Post-quantum cryptography readiness | Discrete solution area and product capability in BIG-IP v21.1 |
Medium-term financial targets and guidance
| Guidance date | FY2026 revenue growth guidance (%) | FY2026 non-GAAP EPS guidance (USD) | FY2026 non-GAAP operating margin guidance (%) |
|---|---|---|---|
| 27 Oct 2025 (with FY25 results) | 0 to 4 | 14.50 to 15.50 | 33.5 to 34.5 |
| 27 Jan 2026 (with Q1) | 5 to 6 | 15.65 to 16.05 | 34.0 to 35.0 |
| 28 Apr 2026 (with Q2) | 7 to 8 | 16.25 to 16.55 | Not restated |
| 27 Jul 2026 (with Q3) | Approximately 9 to 10 | 17.21 to 17.33 | Not restated |
F5 does not publish multi-year financial targets. It guides one quarter and one fiscal year ahead. The FY2026 guidance trajectory is itself the most informative disclosure of the last twelve months:
Q4 FY2026 guidance, issued 27 July 2026: revenue of 870–890 million USD and non-GAAP EPS of 4.14–4.26.
The October 2025 guidance embedded an explicit assumption that the Cyber Incident would disrupt sales cycles, with impacts "more pronounced in the first half, before normalizing in the second half." Management further stated its belief that any demand impact would be short term and any effect on the operating model temporary. Three successive raises totalling roughly 700 basis points of revenue growth and approximately 2.80 USD of EPS have substantially vindicated that framing. Whether the initial guidance was genuinely conservative or whether management deliberately reset the bar low in a crisis quarter is a question the market has largely stopped asking, given the share price response.
ESG commitments with targets
F5's 2030 climate target, verified by the Science Based Targets initiative, is to reduce absolute Scope 1 and Scope 2 emissions by 50% and absolute Scope 3 emissions by 43% from a 2021 baseline.
Products & Services
F5 organises its portfolio into three product families — F5 BIG-IP, F5 NGINX and F5 Distributed Cloud Services — unified under the F5 Application Delivery and Security Platform, with the AI Security Platform as a fourth, newer pillar. The catalogue below follows the FY2025 10-K product descriptions, supplemented by FY2026 launches.
F5 Application Delivery and Security Platform (ADSP) — the unifying layer
| Attribute | Detail |
|---|---|
| Description | Platform layer introduced in FY2025 that unifies high-performance traffic management with application and API security across hybrid and multicloud environments, providing common policy management, analytics and automation |
| Key capabilities | Single policy engine across BIG-IP, NGINX and Distributed Cloud; unified console; AI Data Fabric for cross-portfolio telemetry; agentic AI remediation via the Fletch technology |
| Target customer | Large enterprises and service providers seeking consolidation away from point solutions |
| Launch year | 2,025 |
| Pricing model | Not separately priced; ADSP is the architecture through which constituent products are consumed and is central to the Flex Consumption Program |
| Flagship offering | The platform itself; commercially expressed through the Flex Consumption Program, which allows customers to draw down a committed spend pool across hardware, software and SaaS |
F5 BIG-IP family
| Product | Description and capabilities | Target customer |
|---|---|---|
| BIG-IP Access Policy Manager (APM) | Secures and controls user access to applications; identity-aware proxy, zero-trust access, SSO federation | Enterprises consolidating VPN and access control |
| BIG-IP Advanced Web Application Firewall (Advanced WAF) | Protects applications using behavioural analytics, bot defence and application-layer encryption; L7 attack mitigation | Any enterprise with internet-facing applications |
| BIG-IP SSL Orchestrator | Maximises security-stack efficacy through centralised encryption/decryption and dynamic traffic steering to inspection devices | Enterprises with multi-vendor inspection chains |
| BIG-IP Advanced Firewall Manager (AFM) | Network firewall with machine-learning-driven detection, stress monitoring, dynamic signatures and attack mitigation | Service providers and large data-centre operators |
| BIG-IP Carrier Grade NAT (CGNAT) | Carrier-scale IPv4/IPv6 address translation with high translation setup rates and high-speed logging | Telecommunications service providers |
| BIG-IP DDoS Hybrid Defender | Combined on-premises and cloud DDoS defence against volumetric, network and application attacks | Enterprises and providers with availability-critical estates |
| Product | Description and capabilities | Target customer |
|---|---|---|
| BIG-IP Local Traffic Manager (LTM) | The core ADC: full-proxy L4–L7 traffic management, load balancing, TLS offload, iRules programmability. The historical foundation of the company | Every BIG-IP customer; the anchor of the installed base |
| BIG-IP DNS | Hyperscale authoritative and global-server-load-balancing DNS with resilience under high query volume and DNS DDoS conditions | Enterprises and providers with global application footprints |
| BIG-IP Policy Enforcement Manager (PEM) | Subscriber-aware policy enforcement and traffic classification for network performance management | Mobile and fixed-line service providers |
| BIG-IP Next for Kubernetes | Ingress and egress traffic management for Kubernetes, with integration to multiple networks; the strategic AI-infrastructure product (see 5.6) | AI factory operators, service providers, large enterprises |
| BIG-IP Automation Tool Chain | Declarative automation tooling integrating BIG-IP into Ansible, HashiCorp Terraform, OpenShift and Cloud Foundry CI/CD pipelines | DevOps and NetOps teams |
| BIG-IQ Centralized Management | Central management, analytics and automation across fleets of BIG-IP instances; reduces operational cost of large estates | Customers with dozens to thousands of BIG-IP instances |
| Product | Description and capabilities | Notes |
|---|---|---|
| rSeries appliances | Next-generation standalone systems combining custom FPGA logic with off-the-shelf silicon; support multi-tenancy and concurrent BIG-IP software versions on one device | Designed for in-place version migration with minimal downtime |
| VELOS chassis and blades | Chassis-based modular platform for the highest-density deployments, with the same multi-tenancy and automation architecture as rSeries | Service provider and large enterprise data centres |
| Legacy iSeries | Prior-generation appliances still present in the installed base | End-of-support transitions are a driver of the FY2025–FY2026 refresh cycle |
F5 BIG-IP Packaged Software — Security modules
F5 BIG-IP Packaged Software — Application delivery modules
F5 BIG-IP Systems (hardware)
All F5 systems run all available BIG-IP software modules — a deliberate design choice that makes the hardware a licensing substrate rather than a functionally segmented product line. Consumption models: BIG-IP software is sold perpetually (the Good/Better/Best perpetual licensing programme) and by subscription; systems are sold outright with attached support contracts.
Software version note: BIG-IP v21.1, announced in March 2026, added post-quantum cryptography support — commercially significant given F5's positioning on "PQC readiness" as a discrete solution area.
F5 NGINX family
| Product | Description and capabilities | Consumption model |
|---|---|---|
| NGINX Open Source | The free web server, reverse proxy and load balancer that powers a very large share of the world's websites; F5's distribution funnel and community asset | Free, open source |
| NGINX Plus | Commercial all-in-one high-performance load balancer, web server, content cache and API gateway for modern applications; Kubernetes-friendly; integrates into enterprise workflows, CI/CD pipelines and automation frameworks. Also offered as a fully managed native service on Microsoft Azure | Packaged software, subscription |
| NGINX One Console | Unified SaaS management plane for deployment, configuration, monitoring and administration of NGINX instances across hybrid and multicloud estates; centralised visibility, real-time analytics, RBAC, DevOps pipeline integration | SaaS subscription |
| NGINX Ingress Controller | Kubernetes ingress traffic management deployed at the cluster entry point; reduces complexity and improves uptime and application-health visibility at scale | Subscription, scaling with cluster size |
| NGINX Gateway Fabric | Kubernetes Gateway API implementation; F5 accelerated its roadmap in March 2026 to serve customers navigating the Ingress Controller end-of-life transition | Subscription |
| F5 WAF for NGINX | Lightweight L7 WAF and denial-of-service defence, platform-agnostic across distributed and hybrid architectures; integrates into CI/CD pipelines | Add-on subscription; bundled into "advanced" NGINX Ingress Controller tiers |
A March 2026 release added AI agent traffic visibility to NGINX — a direct response to enterprises losing sight of what autonomous agents are doing on their networks.
F5 Distributed Cloud Services
| Product | Description and capabilities | Target customer |
|---|---|---|
| Distributed Cloud WAAP | SaaS web application and API protection on a cloud-native platform with a single policy engine and management console; multiple deployment options | Enterprises wanting security without appliance deployment |
| — Advanced WAF engine (SaaS) | The same F5 WAF engine available on BIG-IP and NGINX, applied uniformly across data centres, public/private clouds and edge | Multi-environment enterprises |
| — Distributed Cloud DDoS Mitigation | Managed cloud-delivered mitigation of L3–L7 application and volumetric attacks, including network and SSL attacks, in real time | Availability-critical estates |
| — API security | Machine-learning-based auto-discovery, anomaly detection and monitoring across the API estate | API-heavy digital businesses |
| — Distributed Cloud Bot Defense | AI-driven bot mitigation analysing traffic at scale with machine-learning prediction models; derived from the Shape Security acquisition | E-commerce, financial services, airlines, ticketing |
| — Account takeover protection | Protection against sophisticated credential-stuffing and ATO attempts | Consumer-facing digital businesses |
| Distributed Cloud Network Connect | Secure consolidated connectivity across public/hybrid clouds, data centres and edge sites; unified policy, single-pane management, full multi-tenancy and segmentation; automates native cloud networking configuration | NetOps teams running multicloud |
| Distributed Cloud App Connect | Application-level connectivity across cloud providers and regions; cross-cluster service discovery, fine-grained API control, self-maintaining redundant site connections | Platform engineering teams |
| Distributed Cloud DNS | Cloud-based primary or secondary DNS across multicloud environments, with authoritative DDoS protection, DNSSEC and automatic scaling | Global digital businesses |
| Distributed Cloud CDN | High-performance multicloud and edge CDN, purchasable standalone or with other Distributed Cloud services | Content and commerce operators |
| Distributed Cloud App Stack | Managed Kubernetes with centralised orchestration of distributed applications across on-premises, cloud and edge through one console | Enterprises standardising distributed Kubernetes |
| Distributed Cloud Client-Side Defense | Protection against client-side script attacks such as Magecart-style skimming | Payments and e-commerce |
| Distributed Cloud Web App Scanning | External attack-surface discovery and web application scanning | Security operations teams |
Delivered as SaaS and managed services over the F5 Global Network, a purpose-built cloud-based private backbone.
F5 AI Security Platform (launched 22 June 2026)
| Product | Description | Provenance |
|---|---|---|
| AI Security Platform | Umbrella platform giving CISOs continuous visibility, governance and protection across enterprise AI applications, models, agents and the APIs connecting them | Launched June 2026 |
| AI Guardrails | Runtime guardrails detecting and blocking prompt injection, jailbreaks and sensitive-data leakage at the inference layer | CalypsoAI (Sep 2025) |
| AI Red Team | Agentic adversarial testing at scale against models, applications and agents | CalypsoAI |
| Workforce AI Security | Discovery and control of shadow AI — identifying which AI tools and agents employees are using, including unsanctioned ones, and tracking their behaviour | SurePath AI (Jun 2026) |
| AI Gateway | Traffic-management and policy control plane for AI model and agent traffic | F5 organic, integrated into ADSP |
The newest pillar, assembled almost entirely through acquisition, and the clearest expression of F5's strategic bet.
Locoh-Donou's stated rationale in a June 2026 interview was consolidation: enterprises have been forced to assemble discovery, testing and protection from four, five or six separate tools. The platform's commercial logic is that F5 already sits in the data path where AI traffic flows.
AI infrastructure products
| Product | Description | Performance claims |
|---|---|---|
| BIG-IP Next for Kubernetes on NVIDIA BlueField-3 DPUs | Intelligent proxy offloading networking, TLS, AI-aware load balancing and traffic management to the DPU, preserving host CPU and GPU capacity | Tolly Group-validated testing (Mar 2026): up to 40% higher token throughput, 61% faster time to first token, 34% lower request latency |
| BIG-IP Next for Kubernetes on NVIDIA BlueField-4 DPUs | Next-generation integration announced Oct 2025 for gigascale AI factories, at speeds up to 800 Gb/s | Approximately 30% improvement in token generation capacity |
| Integration with NVIDIA Dynamo and KV Cache Manager | Inference-aware routing using NIM statistics, Dynamo runtime signals and GPU telemetry to match workloads to accelerators before execution | Reduced latency, improved GPU utilisation, disaggregated serving support |
| NVIDIA Enterprise AI Factory validated design | BIG-IP Next for Kubernetes included in NVIDIA's validated reference design (Jan 2026) | Channel and architectural endorsement |
Observability and operations
| Product | Description | Launch |
|---|---|---|
| F5 Insight | Observability and analytics product built into ADSP, initially targeting BIG-IP estates. Originated as an internal tool written by F5 field engineers before being productised | March 2026 |
| AI-powered WAF risk scoring | Automated severity scoring within the WAF workflow | March 2026 |
| AI security remediation tool | Agentic remediation of identified vulnerabilities, built on Fletch technology feeding the AI Data Fabric | March 2026 |
Global Services
F5's services business comprises annual maintenance and support contracts (the dominant component), professional and consulting services, managed services for Distributed Cloud, and training and certification delivered through the F5 Education Services Portal and the F5 Certified professional programme. In May 2026 F5 introduced F5 Partner Foundations, a structured learning curriculum for partner engineers with a defined specialisation pathway.
Consumption and pricing programmes
| Programme | Description |
|---|---|
| Flex Consumption Program | Committed-spend pool drawable across hardware, software and SaaS; F5's principal mechanism for platform-level selling |
| Perpetual licensing (Good/Better/Best) | Traditional perpetual BIG-IP software tiers |
| Subscriptions | Term subscriptions across BIG-IP software, NGINX and Distributed Cloud |
| Usage-based | Consumption-metered options for SaaS and managed services |
F5 does not publish list prices for enterprise products; specific price points are not publicly disclosed.
Financial Narrative
Basis of presentation. Revenue, gross profit, GAAP operating income, net income and EPS are as reported by F5 in its Forms 10-K and earnings releases. EBITDA, depreciation and amortisation, the expense breakdown, the balance-sheet detail and the cash-flow detail are drawn from S&P Global Market Intelligence's standardised presentation of F5's filings and are labelled as such where the standardised figure differs from the as-reported figure. The most important such difference: S&P presents operating income before merger and restructuring charges, which is why its FY2025 operating income of 791 million USD exceeds F5's reported GAAP figure of 766 million USD by exactly the 25 million USD of restructuring charges. The tables below use F5's as-reported GAAP operating income.
Margins and growth
Non-GAAP operating margins for FY2024 and FY2025 are as reported by F5; FY2021–FY2023 are computed from the reported non-GAAP operating profit disclosed in the respective Q4 earnings releases and should be treated as indicative.
Revenue CAGR FY2021–FY2025: 4.4%. Net income CAGR over the same period: 20.3%. EPS diluted CAGR: 21.9%. The gap between the three is the entire investment thesis of the last five years — F5 has been a margin and capital-return story far more than a growth story.
Balance sheet
From FY2024 onwards, F5 carries no borrowed debt at all; "total debt" comprises operating lease liabilities, predominantly the F5 Tower headquarters lease (approximately 515,000 sq ft, commenced April 2019, expiring 2033, with a renewal option; weighted-average remaining lease term of 7.9 years and a weighted-average discount rate of 2.94% at FY2024).
Ratio analysis
ROIC is calculated as GAAP operating income after tax at the effective rate, divided by total debt plus equity less cash and short-term investments.
Commentary — trends, inflections and drivers
Revenue. The five-year record divides cleanly. FY2021 grew nearly 11% on the back of the NGINX and Shape acquisitions annualising. FY2022–FY2024 were three years of stagnation, culminating in 0.1% growth in FY2024 — a genuine inflection point at which the bear case (an ADC business in secular decline, with a software transition that had stalled) looked close to vindicated. FY2025's 9.7% growth and FY2026's tracking 9–10% represent a sharp and largely unforecast reacceleration.
The driver of that reacceleration is systems, not software. Systems revenue collapsed 19.9% in FY2024 to 537 million USD, then rebounded 31.3% in FY2025 to 706 million USD, and has grown 26–37% in each quarter of FY2026. Software grew 9.2% in FY2025 and has been volatile quarterly in FY2026. The honest reading is that F5 is enjoying a hardware refresh supercycle — driven by end-of-support transitions on legacy iSeries platforms, pricing actions on systems (explicitly cited in the FY2025 10-K MD&A alongside demand), and incremental capacity demand from AI-adjacent data-centre build-outs. Whether this is durable or a pull-forward is the central FY2027 question.
Gross margin troughed at 78.9% in FY2023 — the point of maximum component-cost pressure and unfavourable systems mix — and has recovered to 81.4% in FY2025 and 81.9% on a trailing twelve-month basis to June 2026. The recovery is partly mix (higher-margin software), partly supply-chain normalisation, and partly the operating leverage of higher systems volume over fixed costs. Management flagged on the Q3 FY2026 call that component pricing could pressure margins going forward.
Operating margin expansion is the dominant financial fact of the period. GAAP operating margin rose from 15.1% in FY2021 to 24.8% in FY2025 — a 970 basis point expansion on only 485 million USD of incremental revenue. This was achieved almost entirely through expense discipline rather than gross-margin gains: SG&A fell from 45.1% of revenue to 38.3%, and R&D from 19.2% to 17.5%. Absolute R&D spend in FY2025 (540 million USD) was only 8% above FY2021 despite a 19% larger revenue base. The FY2023 restructuring (65 million USD of charges, headcount down from 7,089 to 6,524) was the pivot.
Tax. The FY2025 effective rate of 14.3% is 420 basis points below FY2024 and flatters net income growth. F5 notes exposure to the OECD Pillar Two minimum tax framework in jurisdictions where it operates, which represents a structural upward risk to the rate.
Cash generation is the balance-sheet story. Operating cash flow rose from 443 million USD in FY2022 to 950 million USD in FY2025, a 115% increase, driven by net income growth and a 200 million USD deferred-revenue build in FY2025. Capital intensity is negligible: capex has never exceeded 1.9% of revenue in the period. Free cash flow conversion (FCF to net income) exceeded 130% in every year of the period.
Capital allocation has been overwhelmingly buybacks. F5 has never paid a dividend. Over FY2021–FY2025 the company returned 2.43 billion USD through repurchases while spending only 718 million USD on acquisitions and 192 million USD on capex. Share count fell from 62 million diluted (FY2021) to 59 million (FY2025) and to approximately 58 million in the trailing twelve months to June 2026 — roughly 1.2–1.7% annual net shrinkage after offsetting substantial stock-based compensation issuance. Note that SBC of 231 million USD in FY2025 is 25% of free cash flow, so a material portion of the buyback is offsetting dilution rather than shrinking the equity.
Working capital has deteriorated steadily. The cash conversion cycle lengthened from 48 days in FY2021 to 104–108 days in FY2024–FY2025, driven by DSO in the high-100s and an inventory rebuild. F5's quarter-end-loaded revenue recognition pattern — disclosed as a risk factor — mechanically elevates period-end receivables. Long-term accounts receivable of 340 million USD at FY2025 (up from 159 million USD in FY2021) reflects multi-year subscription billing arrangements and is worth monitoring as a quality-of-earnings item.
FY2026 to date
Nine-month totals are summed from quarterly releases; Q3 GAAP EPS is derived from reported net income and share count and is indicative. Nine-month revenue of 2,499 million USD compares with 2,277 million USD in 9M FY2025, growth of 9.8%.
Unlock Company Financials
Unlock this company profile to view its financial data.
View Subscription PlansFinancial Detail
Revenue by Segment and Segment Margins & Growth (%)
| Metric (USD Mn unless stated) | FY2021 | FY2022 | FY2023 | FY2024 | FY2025 |
|---|---|---|---|---|---|
Systems revenue | 748 | 652 | 671 | 537 | 706 |
Software revenue | 499 | 665 | 664 | 735 | 803 |
Product revenue (systems plus software) | 1,247 | 1,317 | 1,335 | 1,273 | 1,509 |
Global services revenue | 1,356 | 1,379 | 1,479 | 1,543 | 1,579 |
Total net revenue | 2,603 | 2,696 | 2,813 | 2,816 | 3,088 |
Systems revenue growth (%) | 14.8 | -12.9 | 2.9 | -19.9 | 31.3 |
Software revenue growth (%) | 35.6 | 33.3 | -0.2 | 10.8 | 9.2 |
Product revenue growth (%) | 22.3 | 5.6 | 1.4 | -4.6 | 18.5 |
Services revenue growth (%) | 1.3 | 1.7 | 7.3 | 4.3 | 2.3 |
Revenue by Segment and Segment Margins & Growth (%) (Quarterly)
| Metric (USD Mn) | Q1 FY26 | Q2 FY26 | Q3 FY26 |
|---|---|---|---|
Systems revenue | 218 | 226 | 240 |
Software revenue | 192 | 184 | 223 |
Global services revenue | 412 | 401 | 402 |
Total revenue | 822 | 812 | 865 |
Total revenue growth year on year (%) | 7 | 11 | 11 |
Product revenue growth year on year (%) | 11 | 22 | 19 |
Systems revenue growth year on year (%) | 37 | 26 | 32 |
Software revenue growth year on year (%) | -8 | 17 | 7 |
Income Statement and Margin Analysis (%)
| Metric (USD Mn unless stated) | FY2021 | FY2022 | FY2023 | FY2024 | FY2025 |
|---|---|---|---|---|---|
Total net revenue | 2,603 | 2,696 | 2,813 | 2,816 | 3,088 |
Revenue growth (%) | 10.8 | 3.6 | 4.3 | 0.1 | 9.7 |
Cost of revenue | 487 | 540 | 593 | 558 | 574 |
Gross profit | 2,117 | 2,156 | 2,220 | 2,258 | 2,514 |
Research and development expense | 500 | 543 | 540 | 490 | 540 |
Selling, general and administrative expense | 1,173 | 1,195 | 1,142 | 1,101 | 1,183 |
Merger, restructuring and impairment charges | 50 | 14 | 65 | 9 | 25 |
Operating income (GAAP, as reported) | 394 | 404 | 473 | 659 | 766 |
EBITDA (S&P standardised) | 560 | 533 | 651 | 774 | 884 |
Depreciation and amortisation | 115 | 116 | 113 | 107 | 92 |
Net interest and investment income | 0 | 2 | 18 | 35 | 41 |
Pre-tax income | 387 | 385 | 486 | 695 | 808 |
Income tax expense | 56 | 63 | 91 | 129 | 116 |
Effective tax rate (%) | 14.4 | 16.4 | 18.7 | 18.5 | 14.3 |
Net income | 331 | 322 | 395 | 567 | 692 |
Stock-based compensation | 243 | 249 | 237 | 219 | 231 |
Diluted shares outstanding (millions) | 62 | 61 | 60 | 59 | 59 |
EPS basic (USD) | 5.46 | 5.34 | 6.59 | 9.65 | 11.96 |
EPS diluted (USD) | 5.34 | 5.27 | 6.55 | 9.55 | 11.80 |
Dividends per share (USD) | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 |
Unlock Company Financials
Unlock this company profile to view its financial data.
View Subscription PlansMargin Analysis (%)
| Metric (%) | FY2021 | FY2022 | FY2023 | FY2024 | FY2025 |
|---|---|---|---|---|---|
Gross margin | 81.3 | 80.0 | 78.9 | 80.2 | 81.4 |
Operating margin (GAAP) | 15.1 | 15.0 | 16.8 | 23.4 | 24.8 |
Non-GAAP operating margin | 31.3 | 30.5 | 31.9 | 33.6 | 35.2 |
EBITDA margin | 21.5 | 19.8 | 23.1 | 27.5 | 28.6 |
Pre-tax margin | 14.9 | 14.3 | 17.3 | 24.7 | 26.2 |
Net margin | 12.7 | 12.0 | 14.0 | 20.1 | 22.4 |
Free cash flow margin | 23.6 | 15.2 | 21.3 | 27.1 | 29.4 |
R&D as share of revenue | 19.2 | 20.2 | 19.2 | 17.4 | 17.5 |
SG&A as share of revenue | 45.1 | 44.3 | 40.6 | 39.1 | 38.3 |
Balance Sheet and Per-Share Data
| Metric (USD Mn) | FY2021 | FY2022 | FY2023 | FY2024 | FY2025 |
|---|---|---|---|---|---|
Cash and cash equivalents | 581 | 758 | 797 | 1,075 | 1,344 |
Short-term investments | 330 | 127 | 6 | 0 | 0 |
Cash and short-term investments | 911 | 885 | 803 | 1,075 | 1,344 |
Accounts receivable (current) | 556 | 790 | 829 | 790 | 913 |
Accounts receivable (long-term) | 159 | 225 | 203 | 278 | 340 |
Inventory | 22 | 68 | 36 | 76 | 77 |
Total current assets | 1,611 | 1,912 | 1,849 | 2,109 | 2,519 |
Property, plant and equipment, net | 436 | 396 | 366 | 329 | 343 |
Goodwill | 2,217 | 2,259 | 2,289 | 2,312 | 2,444 |
Other intangible assets, net | 237 | 200 | 151 | 112 | 96 |
Goodwill and intangibles combined | 2,454 | 2,459 | 2,440 | 2,424 | 2,540 |
Total assets | 4,997 | 5,276 | 5,248 | 5,613 | 6,319 |
Accounts payable | 62 | 113 | 63 | 68 | 84 |
Deferred revenue, current | 969 | 1,067 | 1,127 | 1,122 | 1,213 |
Deferred revenue, long-term | 521 | 624 | 649 | 676 | 786 |
Total deferred revenue | 1,490 | 1,691 | 1,776 | 1,798 | 1,999 |
Total current liabilities | 1,392 | 1,840 | 1,473 | 1,490 | 1,613 |
Total debt (including lease liabilities) | 715 | 665 | 281 | 250 | 262 |
Total liabilities | 2,637 | 2,807 | 2,448 | 2,484 | 2,727 |
Shareholders' equity | 2,360 | 2,469 | 2,800 | 3,129 | 3,592 |
Net cash (negative equals net debt) | 195 | 220 | 522 | 825 | 1,082 |
Working capital | 220 | 72 | 376 | 620 | 906 |
Book value per share (USD) | 38.91 | 41.25 | 47.30 | 53.87 | 62.27 |
Tangible book value | -94 | 9 | 361 | 705 | 1,052 |
Cash Flow
| Metric (USD Mn) | FY2021 | FY2022 | FY2023 | FY2024 | FY2025 |
|---|---|---|---|---|---|
Net income | 331 | 322 | 395 | 567 | 692 |
Depreciation and amortisation | 115 | 116 | 113 | 107 | 92 |
Stock-based compensation | 243 | 249 | 237 | 219 | 231 |
Change in deferred revenue | 216 | 191 | 82 | 23 | 200 |
Operating cash flow | 645 | 443 | 653 | 792 | 950 |
Capital expenditure | 31 | 34 | 54 | 30 | 43 |
Free cash flow | 615 | 409 | 599 | 762 | 906 |
Cash used for acquisitions | 411 | 68 | 35 | 33 | 171 |
Share repurchases | 514 | 521 | 363 | 512 | 524 |
Dividends paid | 0 | 0 | 0 | 0 | 0 |
Debt repaid | 20 | 20 | 350 | 0 | 0 |
Proceeds from stock issuance (ESPP and plans) | 66 | 65 | 60 | 55 | 59 |
Cash income taxes paid | 99 | 110 | 192 | 182 | 206 |
Net change in cash | -268 | 178 | 39 | 278 | 268 |
Returns & Leverage Ratios (%) and Financial Ratios (x)
| Ratio | FY2021 | FY2022 | FY2023 | FY2024 | FY2025 |
|---|---|---|---|---|---|
Return on equity, ending balance (%) | 14.0 | 13.0 | 14.1 | 18.1 | 19.3 |
Return on assets, ending balance (%) | 6.6 | 6.1 | 7.5 | 10.1 | 11.0 |
Return on invested capital (%) | 15.6 | 15.0 | 16.9 | 23.3 | 26.1 |
Current ratio (x) | 1.16 | 1.04 | 1.26 | 1.42 | 1.56 |
Debt to equity (x) | 0.30 | 0.27 | 0.10 | 0.08 | 0.07 |
Net debt to EBITDA (x) | -0.35 | -0.41 | -0.80 | -1.07 | -1.22 |
Asset turnover (x) | 0.52 | 0.51 | 0.54 | 0.50 | 0.49 |
Days sales outstanding (days) | 78 | 107 | 108 | 102 | 108 |
Days inventory outstanding (days) | 17 | 46 | 22 | 50 | 49 |
Days payables outstanding (days) | 47 | 77 | 39 | 44 | 53 |
Cash conversion cycle (days) | 48 | 76 | 91 | 108 | 104 |
Operating cash flow to net income (x) | 1.95 | 1.37 | 1.65 | 1.40 | 1.37 |
Income Statement and Margin Analysis (%) (Quarterly)
| Metric (USD Mn unless stated) | Q1 FY26 | Q2 FY26 | Q3 FY26 | 9M FY26 |
|---|---|---|---|---|
Revenue | 822 | 812 | 865 | 2,499 |
GAAP gross profit | 671 | 661 | 712 | 2,044 |
GAAP gross margin (%) | 81.5 | 81.4 | 82.2 | 81.8 |
GAAP operating income | 214 | 179 | 213 | 606 |
GAAP operating margin (%) | 26.0 | 22.1 | 24.7 | 24.2 |
GAAP net income | 180 | 148 | 208 | 536 |
GAAP diluted EPS (USD) | 3.10 | 2.58 | 3.61 | 9.29 |
Non-GAAP operating income | 314 | 274 | 303 | 891 |
Non-GAAP operating margin (%) | 38.2 | 33.8 | 35.0 | 35.7 |
Non-GAAP net income | 259 | 223 | 272 | 754 |
Non-GAAP diluted EPS (USD) | 4.45 | 3.90 | 4.73 | 13.08 |
Revenue by Region
| Region (USD Mn) | FY2021 | FY2022 | FY2023 | FY2024 | FY2025 |
|---|---|---|---|---|---|
United States | 1,366 | 1,487 | 1,487 | 1,488 | 1,631 |
Americas — other | 92 | 86 | 97 | 93 | 93 |
Total Americas | 1,458 | 1,573 | 1,584 | 1,581 | 1,724 |
EMEA | 667 | 635 | 742 | 756 | 827 |
APAC | 478 | 488 | 487 | 479 | 537 |
Total net revenue | 2,603 | 2,696 | 2,813 | 2,816 | 3,088 |
Growth rate (%)
| Growth rate (%) | FY2022 | FY2023 | FY2024 | FY2025 |
|---|---|---|---|---|
United States | 8.9 | 0.0 | 0.1 | 9.6 |
Total Americas | 7.9 | 0.7 | -0.2 | 9.0 |
EMEA | -4.9 | 16.8 | 1.9 | 9.4 |
APAC | 2.0 | -0.2 | -1.7 | 12.1 |
Total | 3.6 | 4.3 | 0.1 | 9.7 |
Share of total revenue (%)
| Share of total revenue (%) | FY2021 | FY2022 | FY2023 | FY2024 | FY2025 |
|---|---|---|---|---|---|
United States | 52.5 | 55.2 | 52.9 | 52.9 | 52.8 |
Total Americas | 56.0 | 58.3 | 56.3 | 56.2 | 55.8 |
EMEA | 25.6 | 23.5 | 26.4 | 26.8 | 26.8 |
APAC | 18.4 | 18.1 | 17.3 | 17.0 | 17.4 |
Non-Americas combined | 44.0 | 41.7 | 43.7 | 43.8 | 44.2 |
Valuation Snapshot
| Metric | Value |
|---|---|
Closing price, 15 September 2026 (USD) | 430.88 |
Change on the day (%) | +4.71 |
Pre-market, 16 September 2026 (USD) | 436.00 |
52-week high (USD) | Approximately 435 |
52-week performance (%) | +37.1 (as at early September 2026) |
Year-to-date performance, calendar 2026 (%) | Approximately +60 (as at late July 2026) |
Beta | 1.03 to 1.05 |
Short interest | Approximately 1.38 million shares, 2.45% of shares outstanding |
Number of covering analysts (per stockanalysis.com) | 13 |
Consensus rating | Hold |
Average 12-month price target (USD) | 436.10 |
Implied upside from 430.88 USD (%) | +1.2 |
Barclays price target (USD) | 397, raised from 386; Equal Weight |
One reported higher target cited (USD) | 515 |
Price Reference Points Details
| Price reference points (USD) | Date |
|---|---|
| 300.52 | 8 July 2025 |
| 297.90 | 25 March 2026 |
| 391.08 | 2 September 2026 |
| 407.96 | 27 July 2026 (regular close, Q3 results day) |
| 414.43 | 27 July 2026 (after hours) |
| 430.88 | 15 September 2026 |
Valuation Multiples
| Multiple | Current (Sep 2026) | FY2025 | FY2024 | FY2023 | FY2022 | FY2021 |
|---|---|---|---|---|---|---|
Price to earnings, trailing (x) | 34.3 | 26.8 | 22.6 | 24.2 | 26.8 | 36.2 |
Price to earnings, forward (x) | 24.8 | 20.6 | 16.1 | 12.9 | 13.5 | 17.6 |
Price to free cash flow (x) | 25.2 | 20.5 | 16.8 | 16.0 | 21.1 | 19.5 |
Price to sales (x) | 7.4 | 6.0 | 4.6 | 3.4 | 3.2 | 4.6 |
EV to EBITDA (x) | 25.0 | Not calculated | Not calculated | Not calculated | Not calculated | Not calculated |
EV to sales (x) | 7.0 | Not calculated | Not calculated | Not calculated | Not calculated | Not calculated |
Price to book (x) | 6.4 | Not calculated | Not calculated | Not calculated | Not calculated | Not calculated |
Action by Date
| Date | Action | Amount (USD) |
|---|---|---|
28 Oct 2024 | Board authorises an additional 1.0bn USD, incremental to 422m USD then remaining | 1,000,000,000 added; approximately 1,422,000,000 total available |
FY2025 | Repurchases executed | 523,970,000 |
TTM to 30 Jun 2026 | Repurchases executed | 651,060,000 |
Debt item
| Debt item | Status |
|---|---|
Term loan | Fully repaid in FY2023 (350m USD final repayment) |
Bonds / notes | None outstanding; none ever issued |
Revolving credit facility | Referenced in the FY2025 10-K; F5 had no drawings. |
Finance lease obligations | Immaterial |
Operating lease liabilities | 261.8m USD at FY2025; 252.4m USD at 30 Jun 2026 |
Weighted-average remaining lease term | 7.9 years at FY2024 |
Weighted-average lease discount rate | 2.94% at FY2024 |
Analyst Conclusions
Management guidance
| Guidance item | FY2026 |
|---|---|
| Revenue growth (%) | Approximately 9 to 10 |
| Implied FY2026 revenue (USD M) | 3366 to 3397 |
| Non-GAAP EPS (USD) | 17.21 to 17.33 |
| Non-GAAP operating margin (%) | 34 to 35 (last formally guided 27 Jan 2026) |
| Q4 FY2026 revenue (USD M) | 870 to 890 |
| Q4 FY2026 non-GAAP EPS (USD) | 4.14 to 4.26 |
Guidance for FY2026 has been raised three times, from an initial 0–4% to approximately 9–10%, and EPS guidance from 14.50–15.50 USD to 17.21–17.33 USD — an implied increase of approximately 2.80 USD, or 19%, at the midpoint. Q4 FY2026 results are expected in late October 2026.
Consensus expectations
Thirteen covering analysts rate the shares Hold on average with a 436.10 USD twelve-month target, approximately 1.2% above the 15 September 2026 close. At the FY2026 EPS guidance midpoint of 17.27 USD, the shares trade at 24.9 times forward non-GAAP earnings. Third-party commentary cited by Yahoo Finance references a path to approximately 4.2bn USD of revenue by 2029, which would imply a roughly 7.5% CAGR from FY2026 — materially above the 4.4% delivered over FY2021–FY2025 but below the FY2026 run rate.
Bull case — three arguments grounded in the data
1. The AI infrastructure position is real, measured and monetising now. This is not a slideware claim. The Tolly Group independently validated a 40% increase in token throughput, 61% faster time to first token and a 34% reduction in request latency for BIG-IP Next for Kubernetes on NVIDIA BlueField-3 DPUs. BIG-IP Next for Kubernetes is in NVIDIA's Enterprise AI Factory validated design. Systems revenue grew 42%, 37%, 26% and 32% in the last four reported quarters. When GPU capacity is the scarcest resource in the economy, a product that demonstrably increases the token yield of fixed GPU infrastructure has pricing power, and it does not have to displace anything to win.
2. The margin and cash engine is structurally sound and compounding. Non-GAAP operating margin of 35.2% in FY2025, free cash flow of 906m USD on 43m USD of capex, ROIC of 26.1% and a net cash balance sheet with zero borrowed debt. F5 converted 137% of net income into operating cash flow in FY2025 and returned 524m USD to shareholders while spending 171m USD on acquisitions — simultaneously, without leverage. On FY2026 guidance the company will earn roughly 1bn USD of free cash flow, or about 4% of market capitalisation, with essentially no reinvestment requirement.
3. The breach is behind it, and the demand response proves the moat. F5 guided FY2026 to 0–4% growth on 27 October 2025 in explicit anticipation of customer disruption. It has since delivered 7%, 11% and 11%, with eight consecutive quarters of double-digit product growth, and raised guidance three times. That is the strongest possible empirical evidence that BIG-IP cannot practically be displaced. Meanwhile the two named competitors in core ADC — Citrix under Cloud Software Group and Broadcom's VMware — are both distracted and under-investing.
Bear case — three arguments grounded in the data
1. The growth is a hardware cycle, and the software transition has stalled. Software revenue has been 23.6%, 26.1% and 26.0% of total revenue across FY2023–FY2025 — four years of no mix improvement. FY2026 growth is systems-led: 37%, 26% and 32% in the three reported quarters, against software growth of −8%, 17% and 7%. A10 Networks grew 11% in CY2025 on the same service-provider and AI refresh dynamic, which confirms this is a market cycle rather than F5-specific share capture. Refresh cycles end, and when this one does, the underlying business reverts to the 4.4% five-year CAGR.
2. The valuation has fully re-rated on a business that has not structurally changed. The shares trade at 7.4 times sales versus 3.2 times at FY2022 and 34.3 times trailing earnings versus 22.6 times at FY2024. Consensus is Hold with a target 1.2% above spot. Almost all of the last three years of shareholder return is multiple expansion. Meanwhile Cloudflare is growing 30% on 2.17bn USD of revenue with 48% RPO growth, and will pass F5's revenue base within three years on current trajectories. If the market decides F5 is a 5% grower again, a return to even 20 times earnings implies a 40% de-rating.
3. The Cyber Incident's tail risk is live, uninsured in part, and impossible to quantify. A securities class action is pending in W.D. Washington. The 10-K warns explicitly that regulators may impose undertakings, consent decrees or penalties that could materially increase software development expense, and that insurance costs may rise substantially with comparable coverage potentially unobtainable. Most seriously, portions of BIG-IP source code and information on undisclosed vulnerabilities are in the hands of a state-backed actor with a documented pattern of multi-year persistence and zero-day development. CISA stated this confers a technical advantage in exploiting F5 devices. A single weaponised zero-day against the installed base would do far more commercial damage than the original disclosure did.
Catalysts and monitorables — next twelve months
| Catalyst / monitorable | Timing | What to watch |
|---|---|---|
| Q4 and FY2026 results | Late October 2026 | Whether Q4 revenue lands at or above the 870–890m USD guide; FY2027 initial guidance, which is the single most important data point of the year |
| FY2027 guidance | Late October 2026 | Anything below high single digits confirms the refresh-cycle thesis |
| Systems revenue growth rate | Quarterly | The first quarter of sub-15% systems growth marks the cycle turn |
| Software revenue growth rate | Quarterly | Sustained mid-teens software growth would be the first genuine evidence the transition has restarted |
| Global services growth | Quarterly | Should accelerate above 2–3% as the FY2025–FY2026 hardware placements attach maintenance |
| AI Security Platform traction | FY2027 | Any disclosure of AI security ARR, customer counts or bookings would be a significant positive; continued silence is itself informative |
| Gross margin versus component costs | Quarterly | Management flagged component pricing pressure on the Q3 FY2026 call |
| Securities class action | Ongoing | Motion to dismiss ruling; any settlement accrual |
| Regulatory outcome of the Cyber Incident | Ongoing | Any disclosed investigation, undertaking or penalty |
| New buyback authorisation | Late October 2026 | Remaining authorisation is estimated at roughly 400–500m USD; a new authorisation is likely |
| Effective tax rate | FY2027 | Pillar Two exposure could reverse the 420bp FY2025 benefit |
| Cyber incident costs | Quarterly | The GAAP-to-non-GAAP gap; a return to normal indicates remediation is complete |
| M&A | Anytime | Whether F5 continues sub-200m USD tuck-ins or deploys the 1.35bn USD net cash position more aggressively |
| FY2026 10-K | November 2026 | Updated employee count, distributor concentration, geographic split, and the Cyber Incident risk factor language |
| ESG report | H1 2026 / H2 2026 | FY2025 emissions data against the 2030 SBTi target |
Analyst verdict
F5 has spent twelve months proving something important and something uncomfortable, simultaneously.
The important thing is that its moat is real. A nation-state actor sat inside the development environment of its flagship product for a year, walked out with source code and a catalogue of undisclosed vulnerabilities, and triggered a federal emergency directive — and F5's customers barely flinched. Guidance went from 0–4% to 9–10% in nine months. Nothing in enterprise infrastructure demonstrates switching cost more convincingly than that.
The uncomfortable thing is what has actually driven the recovery. It is systems. Hardware. Growing 26–37% a quarter on an end-of-support refresh cycle, favourable pricing, and AI data-centre capacity — the same cycle lifting A10 Networks by 11%. Software, the thing the equity story has rested on since 2019, has been flat at 26% of revenue for three years. F5 cut R&D 9% in FY2024, precisely when the AI opportunity opened, and has been buying the capability back in 50-to-180-million-dollar increments ever since. The acquisitions are well chosen and well integrated; they are also catch-up.
At 34 times trailing earnings and 7 times sales, the market is paying for a durable reacceleration in a business that compounded revenue at 4.4% over five years. Consensus is Hold with a target at spot. That is not a market discovering value; it is a market that has already repriced the story and is waiting to be told whether it was right.
The balance sheet is immaculate, the cash generation is genuine, and the NVIDIA relationship is a real asset. But the FY2027 guide issued in late October 2026 will settle this. High single digits and the re-rating holds. Low single digits and the refresh-cycle thesis is confirmed, with a 34-times multiple attached to a 5% grower and an open-ended litigation and zero-day tail still running.
Balanced, with asymmetric downside at the current multiple.
End of dossier. All figures stated in USD unless otherwise noted. Fiscal years end 30 September. Where sources conflict — notably on institutional ownership, standardised versus as-reported operating income and R&D expense, and peer financial metrics — both the discrepancy and its cause are noted at the relevant point in the text.
Unlock Company Financials
Unlock this company profile to view its financial data.
View Subscription PlansExecutive Leadership
Executive Leadership Team
| Name | Title | In role since | Prior background | Age (at Nov 2025) |
|---|---|---|---|---|
François Locoh-Donou | Chairman, President and CEO | CEO Apr 2017; Chairman Mar 2026 | COO of Ciena; SVP Global Products Group, Ciena; VP/GM EMEA, Ciena. Engineering degree from École Centrale de Marseille; MSc from Télécom ParisTech; MBA Stanford GSB. Director of Capital One Financial. Co-founder and chair of Cajou Espoir (Togo) and Digi.job | 54 |
Cooper (Edward) Werner | EVP and Chief Financial Officer | Nov 2024 | 23-year F5 veteran; SVP Finance 2012–2024. BA Business Administration (Accounting), Foster School of Business, University of Washington | 51 |
Tom Fountain | EVP and Chief Operating Officer | Sep 2024 | EVP Global Services and Chief Strategy Officer, F5 (2020–2024); Chief Strategy Officer, F5 (2018–2020); SVP Strategy and Corporate Development, McAfee; VP Strategy and Operations, Intel; VP/GM, Juniper Networks; venture capitalist at Mayfield Fund. MBA, MS Computer Science, MS Electrical Engineering, BS Computer Systems Engineering — all Stanford | 49 |
Chad Whalen | EVP and Chief Revenue Officer | Sep 2024 | EVP Worldwide Sales, F5 (2018–2024); joined F5 2017 to lead Cloud Sales; strategic alliances at Fortinet; worldwide sales at Jasper; Americas sales at Ciena. BA Business Administration, Eastern Washington University | 54 |
Kunal Anand | Chief Product Officer | Oct 2025 (CPO); joined Apr 2024 | Chief Innovation Officer, F5 (2024–2025); CTO, F5 (2024); dual CTO/CISO at Imperva; co-founder of Prevoty; Director of Technology, BBC Worldwide; roles at Gravity, MySpace, NASA JPL. BS, Babson College | 42 |
John Maddison | Chief Marketing Officer | Oct 2025 (CMO); joined Dec 2024 | Twelve years at Fortinet, latterly CMO and EVP Product Strategy; leadership roles at Trend Micro, Vina Communications, Octel. BS Engineering, Plymouth University | 62 |
Michael Montoya | EVP and Chief Technology Operations Officer | Oct 2025 | F5 board member 2021–2025; COO at BlueVoyant; CISO at Equinix and at Digital Realty. BA Economics, University of New Mexico | 54 |
Angelique M. Okeke | EVP and General Counsel; Corporate Secretary | Mar 2025 | Eight years at Nike, latterly Global Vice President; legal leadership roles at AWS and Lotame. BA Boston College; MA American University; JD Howard University School of Law | 50 |
Anand (Andy) Athreya | Chief Development Officer | 2026 | Engineering leadership; detail not disclosed in filings | — |
Alvina Antar | Chief Digital Officer | 2026 | Detail not disclosed in filings | — |
Christopher Burger | Chief Information Security Officer | Current | Detail not disclosed in filings | — |
Cathy Peterman | Chief People Officer | 2026 | Detail not disclosed in filings; succeeded Lyra Schramm, who served from April 2024 | — |
“—” = not publicly disclosed.
Executive Leadership Team by Executive
| Executive | Title | Salary (USD) | Stock awards (USD) | Non-equity incentive (USD) | All other (USD) | Total (USD) |
|---|---|---|---|---|---|---|
François Locoh-Donou | President and CEO | 962,000 | 20,642,852 | 1,398,421 | 36,546 | 23,039,819 |
Tom Fountain | Chief Operating Officer | 582,000 | 6,978,849 | 650,792 | 38,234 | 8,249,875 |
Chad Whalen | Chief Revenue Officer | 519,000 | 5,399,738 | 580,346 | 33,230 | 6,532,314 |
John Maddison | EVP and Chief Marketing Officer | 416,667 | 4,484,526 | 371,304 | 22,959 | 5,295,456 |
Cooper Werner | EVP and Chief Financial Officer | 500,000 | 2,680,424 | 447,280 | 28,381 | 3,656,085 |
Frank Pelzer | Former EVP and CFO | 454,461 | 2,142,692 | 0 | 328,198 | 2,925,351 |
Directors' Remuneration
| Compensation metric | FY2023 | FY2024 | FY2025 |
|---|---|---|---|
CEO total compensation (USD) | 10,856,765 | 18,044,442 | 23,039,819 |
CEO compensation actually paid (USD) | 13,807,880 | 28,656,363 | 44,505,157 |
Average non-PEO NEO summary compensation (USD) | 3,953,914 | 5,841,765 | 5,331,816 |
Average non-PEO NEO compensation actually paid (USD) | 4,619,933 | 8,952,978 | 7,076,641 |
Value of initial fixed 100 USD investment — F5 TSR (USD) | 131.25 | 179.36 | 263.25 |
Value of initial fixed 100 USD investment — peer group TSR (USD) | 145.50 | 222.15 | 284.85 |
Board of Directors
| Director | Age | Director since | Principal occupation | Independent | Committees |
|---|---|---|---|---|---|
François Locoh-Donou | 54 | Apr 2017 | Chairman, President and CEO, F5; Director, Capital One Financial | No | — |
Michel Combes | 63 | Sep 2023 (also 2018–2021) | Executive Chairman and acting CEO, Brightspeed; Director, Philip Morris International | Yes | Audit; Talent and Compensation. Lead Independent Director |
Marianne N. Budnik | 57 | Oct 2022 | Chief Marketing Officer, VAST Data; Director, Cerence | Yes | Risk (Chair); Nominating |
Elizabeth L. Buse | 64 | Sep 2020 | Director, U.S. Bancorp; former CEO, Monitise plc | Yes | Talent and Compensation (Chair); Risk; Nominating |
Tami Erwin | 61 | Oct 2023 | Director, Deere & Company and Xerox; former CEO, Verizon Business Group | Yes | Audit; Talent and Compensation |
Julie M. Gonzalez | 44 | Oct 2024 | SVP Business Finance, Workday | Yes | Audit (Chair); Risk. Audit committee financial expert |
Maya McReynolds | 54 | Oct 2024 | CFO, Client Solutions Group, Dell Technologies | Yes | Audit; Nominating. Audit committee financial expert |
Nikhil Mehta | 48 | Jan 2019 | Board member and special adviser, Gainsight; Director, PubMatic | Yes | Risk; Talent and Compensation |
Anand Eswaran | — | Apr 2026 | Executive experience at software companies | Yes | Audit; Talent and Compensation |
“—” = not publicly disclosed.
Major Shareholders
| Holder | Shares | Percentage | As of | Source |
|---|---|---|---|---|
Vanguard Portfolio Management LLC and affiliates | 2,982,657 | 5.27 | 31 Mar 2026 | Schedule 13G filed 29 Apr 2026 (sole voting power on only 7,063 shares; sole dispositive power on the full position) |
BlackRock, Inc. | Approximately 6.2 million | Approximately 11 | Q1–Q2 2026 | — |
Jericho Capital Asset Management | Approximately 2.6 million | Approximately 4.6 | 2,026 | Aggregator report; the single largest holding by share of the manager's own assets |
Competitive Landscape
Competitor Detail
| Capability area | Named competitors (per 10-K) | F5's relative position |
|---|---|---|
Traditional application delivery (BIG-IP) | Citrix (Cloud Software Group), Broadcom (VMware Avi Load Balancer) | Clear market leader. Citrix's ADC business has been under-invested since the Cloud Software Group take-private; Broadcom's VMware integration has disrupted customer relationships. F5's competitive position here has arguably strengthened through competitor self-harm |
Cloud-native / Kubernetes delivery (NGINX) | Amazon Web Services, Google Cloud Platform, Envoy, HAProxy | Contested. NGINX has unmatched open-source mindshare but monetisation is difficult against free cloud-native load balancers and Envoy's CNCF-backed momentum |
Application security (WAF, bot, API, DDoS, CGNAT, SSL orchestration, access) | Akamai, Cisco, Cloudflare, Fortinet, Juniper Networks, Palo Alto Networks, Radware, Thales (Imperva) | Strong in bot defence (Shape heritage) and WAF; KuppingerCole named F5 an Overall Market Leader in WAAP in 2025. Sub-scale versus Palo Alto and Fortinet in the broader security budget |
Distributed Cloud / SaaS security and multicloud networking | Akamai, Cloudflare, Fastly, Broadcom, Cisco, Aviatrix, public cloud providers | The weakest relative position. Cloudflare in particular is growing at 30% from a 2.2bn USD base with a fundamentally cheaper, developer-led motion |
Peer Comparison FY2025
| Metric | F5 (FY2025, Sep YE) | Akamai (CY2025) | Cloudflare (CY2025) | Fortinet (CY2025) |
|---|---|---|---|---|
Revenue (USD Mn) | 3,088 | 4,208 | 2,168 | 6,770 |
Revenue growth (%) | 9.7 | 5.0 | 30.0 | 14.0 |
GAAP operating margin (%) | 24.8 | 13.5 | -2.3 | 33.0 |
Non-GAAP operating margin (%) | 35.2 | — | 15.0 | 37.0 |
Free cash flow margin (%) | 29.4 | — | — | — |
R&D as share of revenue (%) | 17.5 | — | — | — |
Key Competitors
| Competitor | Latest disclosed revenue | Positioning versus F5 |
|---|---|---|
Cisco Systems | — | Vastly larger; competes in security and multicloud networking, not in core ADC |
Palo Alto Networks | — | The dominant enterprise security platform; competes for the same consolidation budget F5 is targeting with ADSP |
Broadcom | — | Owns VMware Avi Load Balancer; competes in ADC and multicloud networking |
Radware | — | Direct ADC and DDoS/WAF competitor; sub-500m USD scale |
A10 Networks | 290.6m USD (CY2025), +11.0% | Pure-play ADC competitor at roughly one-tenth F5's scale; also enjoying a service-provider and AI-driven upcycle, which corroborates that the FY2026 systems strength is a market phenomenon rather than F5-specific share gain |
Fastly | — | Edge/CDN competitor to Distributed Cloud CDN |
Citrix (Cloud Software Group) | Private; not disclosed | Legacy ADC competitor, under-invested |
Thales (Imperva) | Not disclosed separately | WAF and API security |
Juniper Networks | Now part of HPE; not disclosed separately | Security and networking |
Aviatrix | Private; not disclosed | Pure-play multicloud networking |
Kong, Envoy/Solo.io, HAProxy Technologies | Private or open source | API gateway and cloud-native proxy competitors to NGINX |
Recent Developments
Chronological register, March 2025 to September 2026.
