Fortinet

Headcount trend

FY2024 and FY2025 headcount are taken directly from the respective Forms 10-K (14,138 and 15,109). FY2022 is from the FY2022 Form 10-K (12,595). FY2021 and FY2023 are from a third-party aggregation of the same filings. As of 31 December 2025, approximately 30% of employees were in the United States, approximately 20% in Canada, and approximately 50% outside the US and Canada, primarily in EMEA. Fortinet states it owns no manufacturing or research and development activities in China.

Positioning statement (150 words)

Fortinet is the volume leader of the global network-security industry and the only large-cap security vendor whose competitive architecture rests on proprietary silicon. Its differentiation is a single operating system — FortiOS — running across appliances, virtual machines, cloud and SaaS, accelerated by in-house FortiASIC security processing units that deliver materially better performance-per-watt and total cost of ownership than merchant-silicon rivals. That combination has produced a 55% unit share of the firewall market and well over half a million customers in more than 100 countries, sold almost entirely through a two-tier channel. Fortinet is now converting that installed base into three pillars: Secure Networking (the mature core), Unified SASE, and AI-driven Security Operations. Financially it is unusually self-funded — GAAP-profitable every year since its 2009 IPO, with an 80%-plus gross margin, a 35%-plus non-GAAP operating margin, a net cash balance sheet, and $2.2 billion of free cash flow in FY2025 largely returned through buybacks.

The company's own description (FY2025 Form 10-K, paraphrased)

Fortinet describes itself as a leader in cybersecurity driving the convergence of networking and security, with a mission to secure people, devices and data everywhere. Its integrated platform, the Fortinet Security Fabric, spans secure networking, unified Secure Access Service Edge (SASE) and AI-driven security operations (SecOps). As of 31 December 2025 its end-customers were located in over 100 countries and included enterprises across financial services, retail, healthcare and operational technology verticals, communication and security service providers, and government organisations. Research and development is centred in the United States and Canada with a global footprint of support and centres of excellence. The company held 1,064 US patents and 1,405 global patents at year-end 2025, including 321 AI-related patents, and states it has been recognised in over 140 enterprise analyst reports.

Fortinet identifies five core technology differentiators: FortiOS (the unified operating system, including emerging quantum-resistant cryptography); FortiASIC (application-specific integrated circuit security processing units); FortiCloud (its organically built global cloud infrastructure, powered by the FortiStack SaaS platform); FortiAI (a dual-layered "AI for Security / Security for AI" framework); FortiEndpoint (a converged single-agent endpoint); and OT Security for cyber-physical systems.

Independent characterisation

Fortinet is best understood as a hardware-anchored platform annuity. The economics work in three stages:

1. Land with silicon. A FortiGate appliance is sold at a hardware gross margin (67.3% in FY2025) that is deliberately lower than the software industry norm, but the appliance is cheaper per unit of throughput than competitors because the heavy lifting is done by an in-house ASIC rather than an x86 CPU. This is the mechanism behind the 55% unit share.
2. Attach the subscription. Every appliance carries FortiGuard AI-powered security services and FortiCare technical support, recognised rateably over one-to-five year terms at an 86.8% service gross margin (FY2025). Service revenue was 67.4% of total FY2025 revenue.
3. Expand across the Fabric. The same FortiOS licence and management plane extends into switching, wireless, SD-WAN, SASE, endpoint, cloud-native protection and the SOC — which is why Unified SASE and SecOps together reached 36% of billings in FY2025 from roughly 30% two years earlier.

Revenue model mix

FY2023 billings are the company's rounded disclosure ($6.40 billion).

Value chain position. Fortinet is fabless and asset-light in manufacturing but asset-heavy in cloud. It outsources appliance assembly to contract and original design manufacturers — Accton Technology, IBASE Technology, Micro-Star International, Senao Networks and Wistron among them — with approximately 87% of hardware manufactured in Taiwan. Its proprietary ASICs are built by contract manufacturers including Toshiba America Electronic Components and Renesas Electronics America, using foundries in Taiwan and Japan operated by TSMC or by the contract manufacturer itself. Finished goods route through Fortinet's own warehouses in California and the Netherlands, or a logistics partner in Taoyuan City, Taiwan. Conversely, Fortinet owns rather than rents its SASE delivery infrastructure: more than 190 points of presence globally, plus owned data centres and colocation arrangements — a deliberate choice management argues delivers roughly one-third the total cost of ownership of peers who rent public-cloud capacity.

Route to market. Substantially all revenue is generated through a two-tier channel: distributors sell to resellers, service providers and managed security service providers (MSSPs), who sell to end-customers. Named distributors include Arrow Electronics, Exclusive, Ingram Micro and TD Synnex. Concentration is material: six distributors purchasing directly accounted for 67% of total net accounts receivable at 31 December 2025 (69% at end-2024), and one distributor alone accounted for 32% of net accounts receivable. Fortinet maintains sales professionals in over 100 countries and uses a direct-touch overlay for large enterprise and service-provider deals.

Customers and end-markets. Well over half a million customers. Verticals disclosed: financial services, government, manufacturing, retail, technology, education, healthcare and telecommunications. Service providers and MSSPs are described in the 10-K risk factors as Fortinet's largest industry vertical — a concentration that cuts both ways. Operational technology and cyber-physical systems is the fastest-growing vertical adjacency, with OT billings rising more than 25% in FY2025.

10.1 Stated strategy — themes from the FY2025 Form 10-K and 2026 investor communications

Theme 1 — Convergence of networking and security. The 10-K states Fortinet was founded with the mission of providing a converged networking and security approach and that it believes demand for secure networking will overtake the pure networking market by 2030. Ken Xie's Q1 2026 framing: convergence is "an approach Fortinet has led for 26 years," now intensified by an AI-driven threat environment.

Theme 2 — Platform consolidation. The 10-K argues that enterprises facing an escalating threat landscape, a cybersecurity skills shortage and siloed tooling "need to consolidate point products to gain better visibility and faster threat response times," and positions the Fortinet Security Fabric as the answer. Over 50 products, one operating system, one management console.

Theme 3 — The refresh cycle as an expansion event. The 10-K states that as organisations modernise, Fortinet anticipates "a significant firewall refresh and upgrade cycle in the coming years," presenting a strategic opportunity to expand footprint within existing customer environments across LAN, SD-WAN, SASE, CNAPP and SecOps. This is the same thesis that produced the August 2025 disclosure event and subsequent litigation — a reminder that the strategic narrative and the near-term revenue bridge are not the same thing.

Theme 4 — The SASE Firewall. From Q2 2026: customers value Fortinet's "unique 'SASE Firewall'," with firewall, SD-WAN and SASE functionality integrated on a single FortiOS and powered by purpose-built FortiASIC, offering flexible deployment in sovereign form factor, on-premises and in the cloud. Management frames this as the creation of a new market category rather than participation in an existing one.

Theme 5 — Sovereignty as a moat. FortiSASE Sovereign delivers full SASE capability within infrastructure the customer controls — on-premises, private data centre or trusted colocation. Ken Xie has stated the sovereign SASE opportunity could be equal to or larger than the public-cloud SASE market, and that Fortinet has no major competitor offering an equivalent solution. This is the clearest differentiated claim in the strategy.

Theme 6 — Owned infrastructure economics. FortiCloud is organically built and owned, which management asserts delivers roughly one-third the total cost of ownership of peers renting public cloud.

10.2 Announced initiatives, last 24 months

10.3 Management financial targets

Fortinet does not publish multi-year financial targets. Its governing internal metric is the "Rule of 45" — GAAP revenue year-over-year growth plus non-GAAP operating margin — which it has exceeded for six consecutive years. FY2025 delivered 14.2% + 35.5% = 49.7. On FY2026 guidance midpoints (approximately 19% growth + 36% margin) the implied score is approximately 55.

Current guidance (issued 29 July 2026):

Guidance trajectory through 2026 — a striking sequence of raises:

The FY2026 revenue midpoint has been raised $400m (5.3%) and the EPS midpoint $0.47 (15.8%) in under six months.

Fortinet states it fields over 50 enterprise-grade products across three solution pillars, all sharing a single operating system. Pricing is not disclosed at SKU level in any public filing; the general commercial model is described at the end of this section. Product-by-product detail follows.

5.1 Foundation technologies

FortiOS — the unified networking and security operating system and the engine of the Security Fabric. Runs identically across physical appliances, virtual machines, public cloud and SaaS form factors. Supports over 30 networking and security functions on a single console. Includes advanced encryption and emerging quantum-resistant cryptographic capabilities. Latest major version: FortiOS 8.0, launched 10 March 2026 at Accelerate 2026, adding Secure AI Controls (visibility into shadow AI, AI-aware application controls), Fabric-Based AI Agents for automated troubleshooting, flexible SASE options including SASE Outpost and sovereign deployment, simplified SD-WAN management with multipath IPsec, and quantum-safe cryptography. Target customer: all. Licensing: bundled with hardware; feature entitlements via FortiGuard bundles.

FortiASIC — in-house designed security processing units (SPUs), comprising network processors, content processors and system-on-chip designs. Fortinet develops these internally and states its SPU-powered appliances deliver superior "Security Compute Ratings" against industry alternatives at lower footprint and power. Current generation: SP5, which underpins the G-series and delivers up to 62% lower power consumption than equivalent prior-generation models. SP6 is under development under a July 2026 strategic collaboration with Intel, combining Fortinet's SPU expertise with Intel's design, development, packaging and manufacturing capabilities — explicitly framed as both an acceleration and a supply-chain diversification measure.

FortiCloud / FortiStack — Fortinet's organically built global cloud infrastructure. FortiCloud is the private-cloud SaaS platform; FortiStack is the underlying secure SaaS platform operating as a private cloud service provider. Over 190 points of presence globally, supplemented by colocation and public-cloud (AWS, Microsoft Azure, Google Cloud) delivery. Management asserts roughly one-third the total cost of ownership of peers.

FortiAI — dual-layer framework. AI for Security: FortiAI-Assist, generative and agentic AI supporting NOC and SOC monitoring, analysis and response. Security for AI: FortiAI-Protect (AI/ML defence against AI-driven threats and zero-days, plus GenAI application governance) and FortiAI-SecureAI (protection of AI infrastructure including large language models and APIs, and prevention of data leakage into and out of LLMs). FortiAIGate provides AI runtime security. 321 AI-related patents held at year-end 2025.

FortiGuard Labs — threat intelligence and research organisation of threat hunters, researchers, analysts, engineers and data scientists, using millions of global network sensors and machine learning to mine the worldwide attack surface. Also operates the Product Security Incident Response Team (PSIRT), which publicly posts known product vulnerabilities and mitigations.

5.2 Secure Networking pillar

5.3 Unified SASE pillar

5.4 AI-Driven Security Operations pillar

5.5 Operational technology and cyber-physical systems

Purpose-built protection for engineered systems underpinning critical infrastructure: energy and utilities, manufacturing, transportation. Comprises FortiGate Rugged appliances, FortiGuard OT Security Services, NAC for OT, FortiAnalyzer SOC analytics for OT, FortiNDR for OT, and an OT Technology Alliance ecosystem. OT billings grew more than 25% in FY2025.

5.6 Services

FortiGuard AI-powered security subscriptions — natively integrated across the Security Fabric, spanning application security services, content security services, device security services, NOC/SOC security services and web security services. Named components include intrusion prevention, antivirus, inline malware prevention, URL filtering, DNS filtering, CASB, data loss prevention, attack surface security (security rating) and OT/industrial security. Sold individually or in bundles.

FortiCare technical support — global 24x7 support with flexible add-ons, enhanced SLAs and priority hardware replacement through in-country and local depots. Three enterprise tiers: FortiCare Elite (targeting 15-minute response for key product families), FortiCare Premium, FortiCare Essential. Account-level Advanced Support in three tiers — Core, Pro and Pro Plus — with global coverage available at Pro and Pro Plus.

Expert services — SOC-as-a-Service (SOCaaS), Managed Detection and Response (MDR), Incident Response, Ransomware Advisory Services, Security Advisory Services, Managed FortiGate Service, Overlay-as-a-Service, cloud security consulting and professional services.

Fortinet Training Institute — one of the largest training and certification programmes in the industry, with approximately two million certifications issued to date; over 890 education partnerships across more than 100 countries; free Security Awareness Curriculum for primary and secondary schools in the US, UK, Canada, Australia and New Zealand; a Veterans Program with a dedicated Advisory Council.

5.7 Adjacent and consumer brands

Following the consolidation of Linksys, Fortinet's trademark schedule now includes Linksys, Linksys Cognitive, Velop, Max-Stream, WRT and Intelligent Mesh. Other adjacent product lines carried in the trademark schedule include FortiVoice and FortiFone (unified communications), FortiCamera and FortiRecorder (video surveillance), FortiGuest, FortiPresence, FortiTester, FortiHSM and FortiDrive.

5.8 Pricing model

Fortinet does not publish list pricing or per-SKU economics in its filings. The disclosed commercial architecture is: (i) hardware sold through distribution at a product gross margin of 67.3% (FY2025); (ii) attached FortiGuard security subscriptions and FortiCare support sold on one-to-five year terms and recognised rateably, at an 86.8% service gross margin; (iii) FortiSASE and cloud services sold on subscription; and (iv) FortiFlex, a points-based flexible consumption programme allowing dynamic optimisation of cloud security spend and satisfaction of cloud service provider minimum-spend commitments. Specific price points are not publicly disclosed.

6.1 Income statement

Notes: all per-share figures are retroactively adjusted for the five-for-one forward split effective 22 June 2022. FY2023 depreciation and amortisation, interest income and interest expense were not separately retrieved from the filings reviewed and are marked "nd"; consequently FY2023 EBITDA is not presented. FY2023 non-GAAP operating income and non-GAAP net income are the company's rounded disclosures ($1.51 billion and $1.29 billion). FY2023 basic EPS is derived from reported net income and weighted-average basic shares.

6.2 Margins and growth

Five-year revenue CAGR (FY2021–FY2025): 19.4%. Non-GAAP operating income CAGR over the same period: 28.8%.

6.3 Balance sheet

FY2021 goodwill and other intangibles are split from a combined reported figure of $188.7m; the FY2021 split shown is approximate. FY2025 total debt comprises $499.7m current portion (the 2026 maturity) and $496.6m long term (the 2031 maturity).

6.4 Cash flow

FY2023 operating cash flow, capex and free cash flow are the company's rounded disclosures ($1.94bn, $1.73bn) with capex derived as the difference; treat as approximate. Adjusted free cash flow adds back real-estate-related purchases ($328.7m in FY2024, $289.7m in FY2025) and was not disclosed on a comparable basis before FY2024.

6.5 Ratios

Critical caveat on returns. Return on equity and ROIC are not meaningful as comparative measures for Fortinet. Aggressive buybacks drove total stockholders' equity negative in FY2022 and FY2023 (-$281.6m and -$463.4m), and the equity base remains small relative to earnings ($1,237.5m against $1,853.4m of net income). The ROIC figures above are arithmetically correct but economically meaningless — a 209% ROIC in FY2023 reflects a $528.9m denominator, not superior capital productivity. The economically informative measures for Fortinet are gross margin, non-GAAP operating margin, free cash flow margin and the Rule of 45.

6.6 Commentary — trends, inflections and drivers

The 2023–24 inflection. Fortinet's growth profile bifurcated in FY2023. Revenue growth decelerated from 32.2% (FY2022) to 20.1% (FY2023) to 12.3% (FY2024), and billings growth collapsed to 2.1% in FY2024. The proximate cause was the digestion of pandemic-era channel inventory: days inventory outstanding spiked to 143 days at end-FY2023 from 89 days a year earlier, and product revenue actually declined 1.0% in FY2024. Critically, profitability moved in the opposite direction: gross margin expanded 390 basis points in FY2024 and non-GAAP operating margin expanded 660 basis points to 35.0%. Fortinet did not buy growth. It let volume normalise while mix, silicon-driven cost efficiency and operating leverage on a largely fixed sales force lifted margin. That is the single most important structural fact in the five-year record.

The margin architecture. Gross margin rose from 75.4% (FY2022) to 80.5% (FY2025), a 510 basis point move driven almost entirely by (i) service mix rising to 67.4% of revenue and (ii) product gross margin expanding from 61.2% to 67.3% as SP5-based G-series hardware replaced F-series. The service gross margin has been remarkably stable at 85–87% despite heavy investment in owned data centres and points of presence — evidence that the FortiCloud build is being absorbed without margin erosion.

Operating expense discipline. Sales and marketing has fallen from 40.3% of revenue (FY2021) to 34.5% (FY2025) while R&D has been held roughly flat at 12.0%. General and administrative actually declined in absolute dollars in FY2025 ($233.4m from $237.8m). The company has therefore funded R&D at a constant intensity and generated all of its operating leverage from the go-to-market line — a lever that has limited remaining travel.

The tax normalisation. The effective tax rate rose from 2.2% (FY2021) to 19.2% (FY2025). Fortinet's low early-period rates reflected large deferred tax asset recognitions (deferred tax assets grew from $342.3m to $1,335.6m between FY2021 and FY2024). This is a genuine and permanent headwind to net income growth: FY2025 pre-tax income grew 10.9% but net income grew only 6.2% because the tax provision grew 54.7%. Non-GAAP EPS growth of 16.5% in FY2025 flatters the GAAP picture because non-GAAP normalises to an 18% rate.

Cash conversion. Free cash flow margin has been stable in a 31–36% band for five years, with FY2025 free cash flow of $2,211.8m and adjusted free cash flow of $2,501.5m (36.8% margin). The gap between the two is real-estate capex — $289.7m in FY2025 and $328.7m in FY2024 — reflecting the owned-infrastructure strategy. Property and equipment has grown from $687.6m to $1,619.0m over five years, of which approximately $993.5m sat in the United States and $215.8m in Canada as at Q1 2025. This is a genuinely capital-intensive software company by peer standards, and the 10-K carries a dedicated risk factor on construction, permitting, power access and data-centre equipment lead times.

The FY2026 reacceleration. The current fiscal year has broken the pattern decisively. Q1 2026 revenue grew 20% with billings +31%; Q2 2026 revenue grew 26% with product revenue +52% and billings +33%. Non-GAAP operating margin reached a record 38% in Q2 2026 and free cash flow tripled year on year to $965.6m (47.2% margin). Half-year 2026 operating cash flow was $2,120.7m against $1,315.2m in the prior-year half. Full-year guidance has been raised twice, from $7.500–7.700bn in February to $8.020–8.180bn in July.

22.1 Management guidance

For Q3 2026: revenue $2.010–2.100bn; billings $2.250–2.350bn; non-GAAP gross margin 79.0–81.0%; non-GAAP operating margin 35.0–37.0%; non-GAAP diluted EPS $0.83–0.87 on 741–745m diluted shares at an 18% non-GAAP tax rate.

For FY2026: revenue $8.020–8.180bn (approximately 19% growth); service revenue $5.180–5.220bn; billings $9.350–9.550bn (approximately 25% growth); non-GAAP gross margin 79.0–81.0%; non-GAAP operating margin 35.0–37.0%; non-GAAP diluted EPS $3.41–3.47.

Implied H2 2026 revenue is approximately $4.20bn at the midpoint, against $3.90bn in H1 — a sequential step-up consistent with normal seasonality but requiring continued 15%-plus growth. Implied H2 billings of approximately $5.08bn against $4.46bn in H1 requires the pillar momentum to hold.

22.2 Consensus expectations

Sell-side consensus in August 2026 was Neutral, with a mean twelve-month target of $160.86 against a price of $162.44, a high of $220 and a low of $86. The dispersion — a 2.6× spread between high and low targets — is unusually wide for a $120bn company and reflects genuine disagreement about whether the FY2026 acceleration is cyclical (refresh plus AI-driven urgency) or structural (SASE Firewall category creation).

22.3 Bull case

1. The SASE Firewall thesis is working, and the evidence is in the mix rather than the headline. For three years the bear argument was that Unified SASE growth would come at the expense of Secure Networking. Q2 2026 disproved it: Secure Networking billings +34%, Unified SASE +35%, SecOps +25% — all three pillars accelerating simultaneously. That is only possible if the FortiGate 1200G with FortiSASE Outpost genuinely expands the deal rather than redistributing it. If this holds, Fortinet is not defending a firewall business; it is converting a 55% unit share into a subscription franchise, and the $79bn SASE TAM becomes addressable through an installed base no competitor can replicate.

2. Product revenue is the leading indicator and it has turned decisively. Management has stated repeatedly that its sixteen-year record shows product revenue growth leads service revenue growth by several quarters. Product revenue grew 16% in FY2025, 41% in Q1 2026 and 52% in Q2 2026. Service revenue growth of 13.2% in FY2025 is the trough, not the trend. FY2026 service revenue guidance of $5.18–5.22bn implies 13–14% growth, which the product signal suggests is conservative — and service revenue carries an 86.8% gross margin.

3. Sovereignty is a defensible, under-modelled moat. FortiSASE Sovereign has no equivalent from Zscaler, Netskope or Palo Alto Networks, whose architectures require traffic to transit vendor-controlled cloud. As European, Gulf and Asian data-residency requirements harden, Fortinet's owned-infrastructure model — 190+ points of presence, plus the ability to deploy the entire stack inside a customer's own data centre — converts what looked like a capital-intensity disadvantage into the only compliant option. EMEA overtaking the Americas in FY2025, and EMEA property and equipment rising 76% in a single quarter, are the early evidence.

22.4 Bear case

1. The vulnerability record is a compounding liability, not a series of incidents. Twenty-six Fortinet CVEs sit on CISA's Known Exploited Vulnerabilities catalog as of July 2026, thirteen tied to ransomware campaigns. In November 2025 two chainable FortiWeb flaws enabled unauthenticated remote code execution. In December 2025 an SSO bypass affected four product families. In January 2026 Fortinet disabled FortiCloud SSO globally because CVE-2026-24858 defeated its own patches. In April 2026 it shipped an emergency FortiClient EMS hotfix for an actively exploited critical flaw. Fortinet's own risk factor concedes that such failures harm it "more significantly as compared to other companies." At some point this becomes a procurement disqualifier in exactly the large-enterprise and government segments management is targeting.

2. The valuation prices structural, not cyclical, reacceleration. At approximately 47× FY2026 guided non-GAAP EPS and approximately 14× forward EV/Sales, the market has extrapolated two quarters. Yet the components of the acceleration are substantially identifiable as one-time: a firewall refresh cycle whose finite nature Fortinet itself disclosed in August 2025; a memory and component cost environment prompting pre-buy; and a step-function in AI-driven urgency. Billings guidance implies 25% growth in FY2026 against 2.1% in FY2024 — a swing that is arithmetically a base effect as much as a demand effect. Consensus mean target sits at the current price with an average analyst rating of Neutral.

3. Fortinet is subscale precisely where the industry is consolidating. Fortinet is a Gartner Challenger in SASE Platforms and in SIEM. Palo Alto Networks has $9.2bn of revenue, a 37.6% free cash flow margin and just absorbed CyberArk for $25bn. CrowdStrike has $5.25bn of ARR growing 24% on a single-agent architecture. Microsoft bundles competitive capability into E5. Fortinet's answer is organic development plus tuck-ins averaging under $100m. In endpoint, SIEM, identity and CNAPP the gap is widening, and the platform consolidation argument cuts against Fortinet in every category where it is not the incumbent.

22.5 Catalysts and monitorables — next twelve months

22.6 Analyst verdict (300 words)

Fortinet in August 2026 is a company whose operating performance has decisively outrun its narrative credibility, and whose valuation has now outrun both.

The operating case is strong and improving. Q2 2026 was the best quarter in the company's history: revenue up 26%, product revenue up 52%, billings up 33%, a record 38% non-GAAP operating margin, and free cash flow of $966m at a 47% margin. All three strategic pillars accelerated together — the single most important datapoint in the file, because it falsifies the cannibalisation thesis that has capped the multiple for three years. Moody's A3 upgrade, no debt maturing before 2031, and roughly $4bn of net cash confirm a balance sheet that can absorb almost anything.

Three things restrain enthusiasm. First, the acceleration is heavily refresh-driven, and Fortinet has already told the market — under duress, in August 2025 — that it does not know how large that cohort is. Second, the vulnerability record is genuinely disqualifying in places: twenty-six CVEs on CISA's KEV catalog and a global disabling of FortiCloud SSO is not a run of bad luck, it is a product-security posture, and it directly undercuts the large-enterprise and government push. Third, at approximately 47× forward earnings and 14× forward sales, with consensus Neutral and the mean target at the market price, the shares already embed structural reacceleration.

The honest read: Fortinet's competitive architecture — proprietary silicon, one operating system, owned sovereign-capable infrastructure — is the most defensible in network security, and the SASE Firewall convergence is a real category rather than marketing. But the entry point is poor. This is a business to own through a drawdown, not into an all-time high reached six trading days ago. Constructive on the franchise; disciplined on the price.

APPENDIX — DATA LIMITATIONS AND UNVERIFIED ITEMS

The following were sought but not verified from primary sources in this review and are flagged rather than estimated:

• FY2023 depreciation and amortisation, interest income and interest expense (consequently FY2023 EBITDA and interest coverage).
• FY2023 exact operating cash flow, capex and free cash flow (company disclosures are rounded to $1.94bn and $1.73bn; capex is derived).
• Full-year FY2025 United States revenue (quarterly disclosures only were retrieved).
• Individual named executive officer compensation splits for FY2025 (salary, bonus, stock awards, option awards, all other) — only PEO and average non-PEO NEO totals were retrieved.
• Ages, education and full biographies for Christiane Ohlgart and John Whittle beyond career history.
• The formal title of Will Cooper, named as a proxy holder in the 2026 proxy.
• Linksys step-acquisition date, consideration and accounting detail beyond the disclosed bargain-purchase gains.
• Deal values for ShieldX Networks, Panopta, OPAQ Networks, CyberSponse, enSilo, ZoneFox, Bradford Networks, Alaxala Networks and Suridata.
• S&P Global Ratings and Fitch Ratings assignments and outlooks.
• MSCI ESG and Sustainalytics ratings.
• Full text of Item 3, Legal Proceedings, in the FY2025 Form 10-K.
• FY2025 remaining performance obligations (FY2024 RPO of $6.42bn was retrieved).
• Operating margins and R&D intensity for Palo Alto Networks, CrowdStrike and Check Point in the benchmarking table.
• Check Point FY2025 full-year revenue (inferred from quarterly disclosure).

Conflicting sources noted: (i) Fortinet's principal executive office is stated as 909 Kifer Road in its Forms 10-K and proxy, while certain Schedule 13G filings by third parties state 899 Kifer Road — the 10-K address is authoritative; (ii) third-party services report institutional ownership between 63% and 70% and Vanguard's stake between 6.2% and 9.7% depending on whether entity-level or aggregate filings are used; (iii) beta is reported at 0.92 by one service and 1.07 by another; (iv) third-party firewall market sizing varies by more than 90% between providers depending on definition.

No layoffs, restructurings or workforce reductions were disclosed* during the period; headcount grew from 14,138 to 15,109 during 2025.