Fortinet Overview
Fortinet is the volume leader of the global network-security industry and the only large-cap security vendor whose competitive architecture rests on proprietary silicon. Its differentiation is a single operating system — FortiOS — running across appliances, virtual machines, cloud and SaaS, accelerated by in-house FortiASIC security processing units that deliver materially better performance-per-watt and total cost of ownership than merchant-silicon rivals. That combination has produced a 55% unit share of the firewall market and well over half a million customers in more than 100 countries, sold almost entirely through a two-tier channel. Fortinet is now converting that installed base into three pillars: Secure Networking (the mature core), Unified SASE, and AI-driven Security Operations. Financially it is unusually self-funded — GAAP-profitable every year since its 2009 IPO, with an 80%-plus gross margin, a 35%-plus non-GAAP operating margin, a net cash balance sheet, and $2.2 billion of free cash flow in FY2025 largely returned through buybacks.
| Metric | FY2021 | FY2022 | FY2023 | FY2024 | FY2025 |
|---|---|---|---|---|---|
| Total headcount (persons) | 10,195 | 12,595 | 13,568 | 14,138 | 15,109 |
FY2024 and FY2025 headcount are taken directly from the respective Forms 10-K (14,138 and 15,109). FY2022 is from the FY2022 Form 10-K (12,595). FY2021 and FY2023 are from a third-party aggregation of the same filings. As of 31 December 2025, approximately 30% of employees were in the United States, approximately 20% in Canada, and approximately 50% outside the US and Canada, primarily in EMEA. Fortinet states it owns no manufacturing or research and development activities in China.
The company's own description (FY2025 Form 10-K, paraphrased)
Fortinet describes itself as a leader in cybersecurity driving the convergence of networking and security, with a mission to secure people, devices and data everywhere. Its integrated platform, the Fortinet Security Fabric, spans secure networking, unified Secure Access Service Edge (SASE) and AI-driven security operations (SecOps). As of 31 December 2025 its end-customers were located in over 100 countries and included enterprises across financial services, retail, healthcare and operational technology verticals, communication and security service providers, and government organisations. Research and development is centred in the United States and Canada with a global footprint of support and centres of excellence. The company held 1,064 US patents and 1,405 global patents at year-end 2025, including 321 AI-related patents, and states it has been recognised in over 140 enterprise analyst reports.
Fortinet identifies five core technology differentiators: FortiOS (the unified operating system, including emerging quantum-resistant cryptography); FortiASIC (application-specific integrated circuit security processing units); FortiCloud (its organically built global cloud infrastructure, powered by the FortiStack SaaS platform); FortiAI (a dual-layered "AI for Security / Security for AI" framework); FortiEndpoint (a converged single-agent endpoint); and OT Security for cyber-physical systems.
Independent characterisation
Fortinet is best understood as a hardware-anchored platform annuity. The economics work in three stages:
-
Land with silicon. A FortiGate appliance is sold at a hardware gross margin (67.3% in FY2025) that is deliberately lower than the software industry norm, but the appliance is cheaper per unit of throughput than competitors because the heavy lifting is done by an in-house ASIC rather than an x86 CPU. This is the mechanism behind the 55% unit share.
-
Attach the subscription. Every appliance carries FortiGuard AI-powered security services and FortiCare technical support, recognised rateably over one-to-five year terms at an 86.8% service gross margin (FY2025). Service revenue was 67.4% of total FY2025 revenue.
-
Expand across the Fabric. The same FortiOS licence and management plane extends into switching, wireless, SD-WAN, SASE, endpoint, cloud-native protection and the SOC — which is why Unified SASE and SecOps together reached 36% of billings in FY2025 from roughly 30% two years earlier.
Revenue model mix
FY2023 billings are the company's rounded disclosure ($6.40 billion).
Value chain position. Fortinet is fabless and asset-light in manufacturing but asset-heavy in cloud. It outsources appliance assembly to contract and original design manufacturers — Accton Technology, IBASE Technology, Micro-Star International, Senao Networks and Wistron among them — with approximately 87% of hardware manufactured in Taiwan. Its proprietary ASICs are built by contract manufacturers including Toshiba America Electronic Components and Renesas Electronics America, using foundries in Taiwan and Japan operated by TSMC or by the contract manufacturer itself. Finished goods route through Fortinet's own warehouses in California and the Netherlands, or a logistics partner in Taoyuan City, Taiwan. Conversely, Fortinet owns rather than rents its SASE delivery infrastructure: more than 190 points of presence globally, plus owned data centres and colocation arrangements — a deliberate choice management argues delivers roughly one-third the total cost of ownership of peers who rent public-cloud capacity.
Route to market. Substantially all revenue is generated through a two-tier channel: distributors sell to resellers, service providers and managed security service providers (MSSPs), who sell to end-customers. Named distributors include Arrow Electronics, Exclusive, Ingram Micro and TD Synnex. Concentration is material: six distributors purchasing directly accounted for 67% of total net accounts receivable at 31 December 2025 (69% at end-2024), and one distributor alone accounted for 32% of net accounts receivable. Fortinet maintains sales professionals in over 100 countries and uses a direct-touch overlay for large enterprise and service-provider deals.
Customers and end-markets. Well over half a million customers. Verticals disclosed: financial services, government, manufacturing, retail, technology, education, healthcare and telecommunications. Service providers and MSSPs are described in the 10-K risk factors as Fortinet's largest industry vertical — a concentration that cuts both ways. Operational technology and cyber-physical systems is the fastest-growing vertical adjacency, with OT billings rising more than 25% in FY2025.
Strategy
Stated strategy — themes from the FY2025 Form 10-K and 2026 investor communications
Theme 1 — Convergence of networking and security. The 10-K states Fortinet was founded with the mission of providing a converged networking and security approach and that it believes demand for secure networking will overtake the pure networking market by 2030. Ken Xie's Q1 2026 framing: convergence is "an approach Fortinet has led for 26 years," now intensified by an AI-driven threat environment.
Theme 2 — Platform consolidation. The 10-K argues that enterprises facing an escalating threat landscape, a cybersecurity skills shortage and siloed tooling "need to consolidate point products to gain better visibility and faster threat response times," and positions the Fortinet Security Fabric as the answer. Over 50 products, one operating system, one management console.
Theme 3 — The refresh cycle as an expansion event. The 10-K states that as organisations modernise, Fortinet anticipates "a significant firewall refresh and upgrade cycle in the coming years," presenting a strategic opportunity to expand footprint within existing customer environments across LAN, SD-WAN, SASE, CNAPP and SecOps. This is the same thesis that produced the August 2025 disclosure event and subsequent litigation — a reminder that the strategic narrative and the near-term revenue bridge are not the same thing.
Theme 4 — The SASE Firewall. From Q2 2026: customers value Fortinet's "unique 'SASE Firewall'," with firewall, SD-WAN and SASE functionality integrated on a single FortiOS and powered by purpose-built FortiASIC, offering flexible deployment in sovereign form factor, on-premises and in the cloud. Management frames this as the creation of a new market category rather than participation in an existing one.
Theme 5 — Sovereignty as a moat. FortiSASE Sovereign delivers full SASE capability within infrastructure the customer controls — on-premises, private data centre or trusted colocation. Ken Xie has stated the sovereign SASE opportunity could be equal to or larger than the public-cloud SASE market, and that Fortinet has no major competitor offering an equivalent solution. This is the clearest differentiated claim in the strategy.
Theme 6 — Owned infrastructure economics. FortiCloud is organically built and owned, which management asserts delivers roughly one-third the total cost of ownership of peers renting public cloud.
Announced initiatives, last 24 months
| Date | Initiative | Detail |
|---|---|---|
| Aug 2024 | Lacework integration | CNAPP integrated as Lacework FortiCNAPP; adds 225 patents and applications |
| Aug 2024 | Next DLP integration | Becomes FortiDLP; extends DLP into SSE and across the Fabric |
| Dec 2024 / early 2025 | Perception Point integration | Email and collaboration security into FortiMail Workspace Security |
| May 2025 | Suridata acquisition | SaaS security posture management; targets misconfigurations, identity abuse, third-party risk |
| 2,025 | SP5 ASIC and FortiGate-90G | New 2025 models consume up to 62% less power than equivalent prior-generation models |
| Q4 2025 | NVIDIA integrated solution | FortiGate VM embedded on BlueField-3 DPUs delivering firewalling, segmentation and policy enforcement directly in AI-factory infrastructure |
| Q4 2025 | Google Unified Security partnership | Named the inaugural Google Unified Security Recommended partner for network protection, covering FortiSASE and FortiGate NGFW on Google Cloud |
| Feb 2026 | Buyback expansion | Authorisation increased $1.0bn to $10.25bn aggregate, running through 28 February 2027 |
| Mar 2026 | FortiOS 8.0 | Secure AI Controls, Fabric-Based AI Agents, next-generation SASE, simplified SD-WAN, quantum-safe cryptography |
| Mar–Jul 2026 | FortiSOC | Cloud-delivered SOC platform unifying six core security-operations functions into a single AI SOC experience |
| 2,026 | FortiEndpoint expansion | Multiple endpoint innovations converged into one agent to enable safe AI adoption, data security and risk visibility |
| Apr 2026 | Anthropic — Project Glasswing (Mythos) | AI partnership; the broader Glasswing initiative announced 8 April 2026 also involves CrowdStrike and Palo Alto Networks |
| 2,026 | OpenAI — Project Daybreak (GPT-5.5 Cyber) | AI partnership |
| 2,026 | NVIDIA Open Secure AI Alliance | Founding member, AI safety and security |
| Jul 2026 | Intel collaboration on SP6 | Joint development of Fortinet Security Processor 6, combining Fortinet SPU design with Intel design, development, packaging and manufacturing; explicitly framed as supply-chain resilience and diversification |
| Jul 2026 | FortiGate 1200G with FortiSASE Outpost | Creates the "SASE Firewall" category |
| Ongoing | Sustainability commitments | SBTi-validated near-term targets; zero Scope 1 and 2 emissions by 2030; one million individuals trained in cybersecurity by end-2026 (914,800 reached, 91%) |
Management financial targets
| Metric | Q3 2026 | FY2026 |
|---|---|---|
| Revenue | $2.010–2.100bn | $8.020–8.180bn |
| Service revenue | — | $5.180–5.220bn |
| Billings | $2.250–2.350bn | $9.350–9.550bn |
| Non-GAAP gross margin | 79.0–81.0% | 79.0–81.0% |
| Non-GAAP operating margin | 35.0–37.0% | 35.0–37.0% |
| Non-GAAP diluted EPS | $0.83–0.87 | $3.41–3.47 |
| Assumed non-GAAP tax rate | 18% | 18% |
| Assumed diluted share count | 741–745m | 741–745m |
| Guidance vintage | FY2026 revenue range | FY2026 billings range | FY2026 non-GAAP EPS |
|---|---|---|---|
| 5 Feb 2026 | $7.500–7.700bn | $8.400–8.600bn | $2.94–3.00 |
| 6 May 2026 | $7.710–7.870bn | $8.800–9.100bn | $3.10–3.16 |
| 29 Jul 2026 | $8.020–8.180bn | $9.350–9.550bn | $3.41–3.47 |
Fortinet does not publish multi-year financial targets. Its governing internal metric is the "Rule of 45" — GAAP revenue year-over-year growth plus non-GAAP operating margin — which it has exceeded for six consecutive years. FY2025 delivered 14.2% + 35.5% = 49.7. On FY2026 guidance midpoints (approximately 19% growth + 36% margin) the implied score is approximately 55.
Guidance trajectory through 2026 — a striking sequence of raises:
The FY2026 revenue midpoint has been raised $400m (5.3%) and the EPS midpoint $0.47 (15.8%) in under six months.
Products & Services
Fortinet states it fields over 50 enterprise-grade products across three solution pillars, all sharing a single operating system. Pricing is not disclosed at SKU level in any public filing; the general commercial model is described at the end of this section. Product-by-product detail follows.
Foundation technologies
FortiOS — the unified networking and security operating system and the engine of the Security Fabric. Runs identically across physical appliances, virtual machines, public cloud and SaaS form factors. Supports over 30 networking and security functions on a single console. Includes advanced encryption and emerging quantum-resistant cryptographic capabilities. Latest major version: FortiOS 8.0, launched 10 March 2026 at Accelerate 2026, adding Secure AI Controls (visibility into shadow AI, AI-aware application controls), Fabric-Based AI Agents for automated troubleshooting, flexible SASE options including SASE Outpost and sovereign deployment, simplified SD-WAN management with multipath IPsec, and quantum-safe cryptography. Target customer: all. Licensing: bundled with hardware; feature entitlements via FortiGuard bundles.
FortiASIC — in-house designed security processing units (SPUs), comprising network processors, content processors and system-on-chip designs. Fortinet develops these internally and states its SPU-powered appliances deliver superior "Security Compute Ratings" against industry alternatives at lower footprint and power. Current generation: SP5, which underpins the G-series and delivers up to 62% lower power consumption than equivalent prior-generation models. SP6 is under development under a July 2026 strategic collaboration with Intel, combining Fortinet's SPU expertise with Intel's design, development, packaging and manufacturing capabilities — explicitly framed as both an acceleration and a supply-chain diversification measure.
FortiCloud / FortiStack — Fortinet's organically built global cloud infrastructure. FortiCloud is the private-cloud SaaS platform; FortiStack is the underlying secure SaaS platform operating as a private cloud service provider. Over 190 points of presence globally, supplemented by colocation and public-cloud (AWS, Microsoft Azure, Google Cloud) delivery. Management asserts roughly one-third the total cost of ownership of peers.
FortiAI — dual-layer framework. AI for Security: FortiAI-Assist, generative and agentic AI supporting NOC and SOC monitoring, analysis and response. Security for AI: FortiAI-Protect (AI/ML defence against AI-driven threats and zero-days, plus GenAI application governance) and FortiAI-SecureAI (protection of AI infrastructure including large language models and APIs, and prevention of data leakage into and out of LLMs). FortiAIGate provides AI runtime security. 321 AI-related patents held at year-end 2025.
FortiGuard Labs — threat intelligence and research organisation of threat hunters, researchers, analysts, engineers and data scientists, using millions of global network sensors and machine learning to mine the worldwide attack surface. Also operates the Product Security Incident Response Team (PSIRT), which publicly posts known product vulnerabilities and mitigations.
Secure Networking pillar
| Product | Description / capability | Target customer | Notes |
|---|---|---|---|
| FortiGate NGFW (appliances) | ASIC-accelerated next-generation firewall for branch, campus, data centre, internal segmentation, private and public cloud; hybrid mesh firewall deployment; SSL inspection, IPsec/VPN | SMB through carrier | Current G-series includes FortiGate 50G, 90G, 200G, 400G, 1200G, 3500G and 3800G. #1 by units with 55% unit share (650 Group, Q3 2025) |
| FortiGate 1200G with FortiSASE Outpost | Launched 28 July 2026; combines local enforcement with cloud-delivered security to address sovereignty, performance and AI-infrastructure requirements | Large enterprise, regulated, sovereign | Defines Fortinet's "SASE Firewall" category |
| FortiGate Rugged series | Ruggedised industrial-edge appliances | OT, utilities, transport, manufacturing | Won the 2025 Red Dot Product Design Award, a second consecutive win |
| FortiGate VM / Cloud NGFW | Virtualised and cloud-native firewall | Cloud and hybrid estates | Also embedded on NVIDIA BlueField-3 DPUs for AI-factory infrastructure |
| FortiFirewall | Pure firewall form factor without full UTM stack | Data centre, high-throughput | — |
| FortiSwitch | Secure ethernet switches, including chassis switching, managed via FortiLink as an extension of the security fabric | Campus and branch | — |
| FortiAP | Wireless LAN access points, including high-density models | Campus, retail, education | — |
| FortiExtender | 5G/LTE wireless WAN gateways and remote ethernet extenders | Branch, mobile, temporary sites | — |
| FortiNAC | Network access control, including IoT and OT device security | Enterprise, healthcare, OT | — |
| FortiManager | Centralised multi-device policy and configuration management | Enterprise, MSSP | — |
| FortiAnalyzer | Central SOC platform with unified data lake; built-in SIEM, SOAR, XDR and threat intelligence | Enterprise, MSSP | Straddles Secure Networking and SecOps |
| FortiAIOps | AI-driven network operations analytics | NOC teams | — |
| FortiEdge Cloud | Cloud-based LAN management | Distributed enterprises, SMB | — |
| FortiConverter | Third-party firewall migration service | Competitive displacement | — |
| FortiGate-as-a-Service (FGaaS) | Managed FortiGate consumption model | Mid-market, MSSP-delivered | — |
| FortiFlex | Points-based flexible consumption licensing across the portfolio | Cloud-first and variable-demand buyers | Also used to satisfy cloud minimum-spend commitments |
Unified SASE pillar
| Product | Description / capability | Target customer |
|---|---|---|
| FortiSASE | Single-vendor SASE: firewall, SD-WAN, secure web gateway, CASB, DLP, digital experience monitoring, remote browser isolation and ZTNA, delivered from 190+ PoPs | Hybrid-workforce enterprises |
| FortiSASE Sovereign | Full SASE capability delivered within customer-controlled infrastructure — on-premises, private data centre or trusted colocation | Government, defence, regulated industries, data-residency-constrained markets |
| FortiSASE Outpost | Local enforcement node paired with cloud-delivered SASE, introduced with the FortiGate 1200G in July 2026 | Performance- and sovereignty-sensitive deployments |
| Fortinet Secure SD-WAN | WAN edge with integrated security on FortiOS; multipath IPsec simplification in FortiOS 8.0 | Distributed enterprises |
| Universal ZTNA | Zero-trust application access, agent and agentless | All |
| FortiProxy | Secure web gateway / explicit proxy | Enterprise, education, government |
| FortiCASB | Cloud access security broker | SaaS-heavy estates |
| FortiDLP | Cloud-native data loss prevention and insider risk management (from Next DLP, 2024) | Enterprise data-protection buyers |
| FortiMonitor | Digital experience monitoring | Hybrid-work operations |
| FortiIsolator | Remote browser isolation | High-risk browsing populations |
| Lacework FortiCNAPP | Cloud-native application protection platform: code-to-cloud, workload protection, threat detection (from Lacework, 2024) | Cloud-native engineering organisations |
| FortiWeb | Web application firewall | Application owners |
| FortiAppSec Cloud | Unified web application and API protection (WAAP) platform | DevSecOps |
| FortiADC / FortiGSLB | Application delivery controller, server load balancing, global server load balancing | Data centre |
| FortiDDoS | Distributed denial-of-service mitigation | Service providers, high-exposure enterprises |
| FortiDevSec / FortiDAST | Application security testing in the development pipeline; dynamic application security testing | DevSecOps |
| FortiAIGate | AI runtime security for models and agent traffic | AI-adopting enterprises |
| Suridata-derived SSPM | SaaS security posture management — misconfiguration, identity abuse and third-party risk across SaaS stacks (acquired May 2025) | SaaS-heavy enterprises |
AI-Driven Security Operations pillar
| Product | Description / capability | Target customer |
|---|---|---|
| FortiSOC | Cloud-delivered SOC platform launched in 2026, unifying six core security-operations functions into a single AI SOC experience | Enterprise and mid-market SOCs |
| FortiAnalyzer | Unified data lake, SIEM, SOAR, XDR and threat intelligence; centralised analytics and automation | All |
| FortiSIEM | Security information and event management for advanced SOC requirements | Large enterprise |
| FortiSOAR | Orchestration, automation and playbook-driven response | Mature SOCs, MSSPs |
| FortiEndpoint | Converged single agent: secure connectivity, endpoint protection, EDR and Universal ZTNA. Expanded in 2026 to enable safe AI adoption, data security and risk visibility | All endpoints |
| FortiEDR | Endpoint detection and response (from enSilo, 2019) | Enterprise |
| FortiNDR | Network detection and response | Enterprise, OT |
| FortiSandbox | Dynamic malware analysis | Enterprise |
| FortiDeceptor | Deception technology / decoys | High-value targets, OT |
| FortiRecon | Continuous threat exposure management and external attack surface management | Enterprise |
| FortiMail / FortiMail Workspace Security | Email security and collaboration security (Perception Point technology, acquired 2024/25) | All |
| FortiPhish | Phishing simulation | All |
| FortiAuthenticator / FortiIdentity Cloud / FortiToken | Identity and access management, multi-factor authentication | All |
| FortiPAM / FortiSRA | Privileged access management; secure remote access | Enterprise, OT |
| FortiTIP | Threat intelligence platform | SOC teams |
Operational technology and cyber-physical systems
Purpose-built protection for engineered systems underpinning critical infrastructure: energy and utilities, manufacturing, transportation. Comprises FortiGate Rugged appliances, FortiGuard OT Security Services, NAC for OT, FortiAnalyzer SOC analytics for OT, FortiNDR for OT, and an OT Technology Alliance ecosystem. OT billings grew more than 25% in FY2025.
Services
FortiGuard AI-powered security subscriptions — natively integrated across the Security Fabric, spanning application security services, content security services, device security services, NOC/SOC security services and web security services. Named components include intrusion prevention, antivirus, inline malware prevention, URL filtering, DNS filtering, CASB, data loss prevention, attack surface security (security rating) and OT/industrial security. Sold individually or in bundles.
FortiCare technical support — global 24x7 support with flexible add-ons, enhanced SLAs and priority hardware replacement through in-country and local depots. Three enterprise tiers: FortiCare Elite (targeting 15-minute response for key product families), FortiCare Premium, FortiCare Essential. Account-level Advanced Support in three tiers — Core, Pro and Pro Plus — with global coverage available at Pro and Pro Plus.
Expert services — SOC-as-a-Service (SOCaaS), Managed Detection and Response (MDR), Incident Response, Ransomware Advisory Services, Security Advisory Services, Managed FortiGate Service, Overlay-as-a-Service, cloud security consulting and professional services.
Fortinet Training Institute — one of the largest training and certification programmes in the industry, with approximately two million certifications issued to date; over 890 education partnerships across more than 100 countries; free Security Awareness Curriculum for primary and secondary schools in the US, UK, Canada, Australia and New Zealand; a Veterans Program with a dedicated Advisory Council.
Adjacent and consumer brands
Following the consolidation of Linksys, Fortinet's trademark schedule now includes Linksys, Linksys Cognitive, Velop, Max-Stream, WRT and Intelligent Mesh. Other adjacent product lines carried in the trademark schedule include FortiVoice and FortiFone (unified communications), FortiCamera and FortiRecorder (video surveillance), FortiGuest, FortiPresence, FortiTester, FortiHSM and FortiDrive.
Pricing model
Fortinet does not publish list pricing or per-SKU economics in its filings. The disclosed commercial architecture is: (i) hardware sold through distribution at a product gross margin of 67.3% (FY2025); (ii) attached FortiGuard security subscriptions and FortiCare support sold on one-to-five year terms and recognised rateably, at an 86.8% service gross margin; (iii) FortiSASE and cloud services sold on subscription; and (iv) FortiFlex, a points-based flexible consumption programme allowing dynamic optimisation of cloud security spend and satisfaction of cloud service provider minimum-spend commitments. Specific price points are not publicly disclosed.
Financial Narrative
Income statement
Notes: all per-share figures are retroactively adjusted for the five-for-one forward split effective 22 June 2022. FY2023 depreciation and amortisation, interest income and interest expense were not separately retrieved from the filings reviewed and are marked "nd"; consequently FY2023 EBITDA is not presented. FY2023 non-GAAP operating income and non-GAAP net income are the company's rounded disclosures ($1.51 billion and $1.29 billion). FY2023 basic EPS is derived from reported net income and weighted-average basic shares.
Margins and growth
Five-year revenue CAGR (FY2021–FY2025): 19.4%. Non-GAAP operating income CAGR over the same period: 28.8%.
Balance sheet
FY2021 goodwill and other intangibles are split from a combined reported figure of $188.7m; the FY2021 split shown is approximate. FY2025 total debt comprises $499.7m current portion (the 2026 maturity) and $496.6m long term (the 2031 maturity).
Cash flow
FY2023 operating cash flow, capex and free cash flow are the company's rounded disclosures ($1.94bn, $1.73bn) with capex derived as the difference; treat as approximate. Adjusted free cash flow adds back real-estate-related purchases ($328.7m in FY2024, $289.7m in FY2025) and was not disclosed on a comparable basis before FY2024.
Commentary — trends, inflections and drivers
The 2023–24 inflection. Fortinet's growth profile bifurcated in FY2023. Revenue growth decelerated from 32.2% (FY2022) to 20.1% (FY2023) to 12.3% (FY2024), and billings growth collapsed to 2.1% in FY2024. The proximate cause was the digestion of pandemic-era channel inventory: days inventory outstanding spiked to 143 days at end-FY2023 from 89 days a year earlier, and product revenue actually declined 1.0% in FY2024. Critically, profitability moved in the opposite direction: gross margin expanded 390 basis points in FY2024 and non-GAAP operating margin expanded 660 basis points to 35.0%. Fortinet did not buy growth. It let volume normalise while mix, silicon-driven cost efficiency and operating leverage on a largely fixed sales force lifted margin. That is the single most important structural fact in the five-year record.
The margin architecture. Gross margin rose from 75.4% (FY2022) to 80.5% (FY2025), a 510 basis point move driven almost entirely by (i) service mix rising to 67.4% of revenue and (ii) product gross margin expanding from 61.2% to 67.3% as SP5-based G-series hardware replaced F-series. The service gross margin has been remarkably stable at 85–87% despite heavy investment in owned data centres and points of presence — evidence that the FortiCloud build is being absorbed without margin erosion.
Operating expense discipline. Sales and marketing has fallen from 40.3% of revenue (FY2021) to 34.5% (FY2025) while R&D has been held roughly flat at 12.0%. General and administrative actually declined in absolute dollars in FY2025 ($233.4m from $237.8m). The company has therefore funded R&D at a constant intensity and generated all of its operating leverage from the go-to-market line — a lever that has limited remaining travel.
The tax normalisation. The effective tax rate rose from 2.2% (FY2021) to 19.2% (FY2025). Fortinet's low early-period rates reflected large deferred tax asset recognitions (deferred tax assets grew from $342.3m to $1,335.6m between FY2021 and FY2024). This is a genuine and permanent headwind to net income growth: FY2025 pre-tax income grew 10.9% but net income grew only 6.2% because the tax provision grew 54.7%. Non-GAAP EPS growth of 16.5% in FY2025 flatters the GAAP picture because non-GAAP normalises to an 18% rate.
Cash conversion. Free cash flow margin has been stable in a 31–36% band for five years, with FY2025 free cash flow of $2,211.8m and adjusted free cash flow of $2,501.5m (36.8% margin). The gap between the two is real-estate capex — $289.7m in FY2025 and $328.7m in FY2024 — reflecting the owned-infrastructure strategy. Property and equipment has grown from $687.6m to $1,619.0m over five years, of which approximately $993.5m sat in the United States and $215.8m in Canada as at Q1 2025. This is a genuinely capital-intensive software company by peer standards, and the 10-K carries a dedicated risk factor on construction, permitting, power access and data-centre equipment lead times.
The FY2026 reacceleration. The current fiscal year has broken the pattern decisively. Q1 2026 revenue grew 20% with billings +31%; Q2 2026 revenue grew 26% with product revenue +52% and billings +33%. Non-GAAP operating margin reached a record 38% in Q2 2026 and free cash flow tripled year on year to $965.6m (47.2% margin). Half-year 2026 operating cash flow was $2,120.7m against $1,315.2m in the prior-year half. Full-year guidance has been raised twice, from $7.500–7.700bn in February to $8.020–8.180bn in July.
Unlock Company Financials
Unlock this company profile to view its financial data.
View Subscription PlansFinancial Detail
Revenue by Segment and Segment Margins & Growth (%)
| Metric (USD Mn) | FY2021 | FY2022 | FY2023 | FY2024 | FY2025 |
|---|---|---|---|---|---|
Product revenue | 1,255.0 | 1,780.5 | 1,927.3 | 1,908.7 | 2,218.4 |
Service revenue | 2,087.2 | 2,636.9 | 3,377.5 | 4,047.1 | 4,581.2 |
Product gross profit | 767.3 | 1,089.2 | 1,129.9 | 1,256.7 | 1,493.0 |
Service gross profit | 1,791.9 | 2,243.3 | 2,937.7 | 3,541.5 | 3,977.7 |
Product gross margin (%) | 61.1 | 61.2 | 58.6 | 65.8 | 67.3 |
Service gross margin (%) | 85.9 | 85.1 | 87.0 | 87.5 | 86.8 |
Product revenue YoY growth (%) | 36.9 | 41.9 | 8.2 | -1.0 | 16.2 |
Service revenue YoY growth (%) | 24.4 | 26.3 | 28.1 | 19.8 | 13.2 |
Product % of total revenue | 37.6 | 40.3 | 36.3 | 32.0 | 32.6 |
Segment Revenue
| Pillar | Contents | FY2025 billings growth | FY2025 share of billings |
|---|---|---|---|
Secure Networking | FortiGate NGFW, FortiOS, FortiASIC, FortiSwitch, FortiAP, FortiExtender, FortiNAC, FortiManager, plus attached FortiGuard/FortiCare | Approximately 13% (Q4 2025 rate) | Approximately 64% |
Unified SASE | FortiSASE (SSE), Secure SD-WAN (a percentage of FortiGate billings), Universal ZTNA, SWG, CASB, DLP, RBI, DEM, plus cloud security (FortiCNAPP, FortiWeb, FortiAppSec) | +24% for FY2025; +40% in Q4 2025 | 27% |
AI-Driven SecOps | FortiAnalyzer, FortiSIEM, FortiSOAR, FortiSOC, FortiEndpoint/FortiEDR, FortiNDR, FortiSandbox, FortiDeceptor, FortiRecon, FortiDLP, SOCaaS, MDR | +22% for FY2025; +6% in Q4 2025 | Approximately 9% |
Revenue by Segment and Segment Margins & Growth (%) (FY2023–FY2025)
| Metric (USD Mn) | FY2023 | FY2024 | FY2025 |
|---|---|---|---|
Unified SASE ARR | 875.3 | 1,120.0 | 1,280.0 |
Security Operations ARR | 319.6 | 422.4 | 491.0 |
Unified SASE ARR growth (%) | — | 27.9 | 11.0 |
Security Operations ARR growth (%) | — | 32.2 | 21.0 |
Income Statement and Per-Share Data
| Metric (USD Mn) | FY2021 | FY2022 | FY2023 | FY2024 | FY2025 |
|---|---|---|---|---|---|
Total revenue | 3,342.2 | 4,417.4 | 5,304.8 | 5,955.8 | 6,799.6 |
Total cost of revenue | 783.0 | 1,084.9 | 1,237.2 | 1,157.6 | 1,328.9 |
Gross profit | 2,559.2 | 3,332.5 | 4,067.6 | 4,798.2 | 5,470.7 |
Research and development | 424.2 | 512.4 | 650.6 | 716.8 | 815.5 |
Sales and marketing | 1,345.7 | 1,686.1 | 1,977.4 | 2,044.8 | 2,347.5 |
General and administrative | 143.5 | 169.0 | 203.1 | 237.8 | 233.4 |
Total operating expenses | 1,908.8 | 2,362.9 | 2,826.5 | 2,994.8 | 3,386.0 |
Operating income (GAAP) | 650.4 | 969.6 | 1,241.1 | 1,803.4 | 2,084.7 |
Depreciation and amortisation | 84.4 | 104.3 | — | 122.8 | 152.0 |
EBITDA | 734.8 | 1,073.9 | — | 1,926.2 | 2,236.7 |
Interest income | 4.5 | 17.4 | — | 155.2 | 162.3 |
Interest expense | 14.9 | 18.0 | — | 20.0 | 20.1 |
Pre-tax income | 628.4 | 955.5 | 1,333.7 | 2,058.5 | 2,282.2 |
Provision for income taxes | 14.1 | 30.8 | 143.8 | 283.9 | 439.1 |
Net income | 606.8 | 857.3 | 1,148.1 | 1,745.2 | 1,853.4 |
Non-GAAP operating income | 875.5 | 1,208.1 | 1,510.0 | 2,085.3 | 2,412.7 |
Non-GAAP net income | 666.0 | 961.6 | 1,290.0 | 1,832.9 | 2,107.1 |
EPS — basic (USD) | 0.74 | 1.08 | 1.49 | 2.28 | 2.45 |
EPS — diluted (USD) | 0.73 | 1.06 | 1.46 | 2.26 | 2.42 |
EPS — non-GAAP diluted (USD) | 0.80 | 1.19 | 1.63 | 2.37 | 2.76 |
Dividends per share (USD) | 0 | 0 | 0 | 0 | 0 |
Weighted-average diluted shares (M) | 835.3 | 805.3 | 788.2 | 771.9 | 764.6 |
Margin Analysis (%)
| Metric (%) | FY2021 | FY2022 | FY2023 | FY2024 | FY2025 |
|---|---|---|---|---|---|
Gross margin | 76.6 | 75.4 | 76.7 | 80.6 | 80.5 |
Operating margin (GAAP) | 19.5 | 21.9 | 23.4 | 30.3 | 30.7 |
Operating margin (non-GAAP) | 26.2 | 27.3 | 28.4 | 35.0 | 35.5 |
EBITDA margin | 22.0 | 24.3 | — | 32.3 | 32.9 |
Net margin | 18.2 | 19.4 | 21.6 | 29.3 | 27.3 |
Revenue growth YoY | 28.8 | 32.2 | 20.1 | 12.3 | 14.2 |
Billings growth YoY | 34.7 | 33.8 | 14.4 | 2.1 | 15.6 |
Effective tax rate | 2.2 | 3.2 | 10.8 | 13.8 | 19.2 |
Balance Sheet
| Metric (USD Mn) | FY2021 | FY2022 | FY2023 | FY2024 | FY2025 |
|---|---|---|---|---|---|
Cash and cash equivalents | 1,319.1 | 1,682.9 | 1,397.9 | 2,875.9 | 2,495.3 |
Short-term investments | 1,194.0 | 502.6 | 1,021.5 | 1,190.6 | 1,087.2 |
Long-term investments | 440.8 | 45.5 | 0.0 | 0.0 | 339.7 |
Accounts receivable, net | 807.7 | 1,261.7 | 1,402.0 | 1,463.4 | 1,691.2 |
Inventory | 175.8 | 264.6 | 484.8 | 315.5 | 399.5 |
Total current assets | 3,600.6 | 3,810.4 | 4,428.3 | 5,971.5 | 5,900.2 |
Property and equipment, net | 687.6 | 898.5 | 1,044.4 | 1,349.5 | 1,619.0 |
Deferred contract costs | 423.3 | 518.2 | 605.6 | 622.9 | 735.5 |
Deferred tax assets | 342.3 | 569.4 | 868.8 | 1,335.6 | 1,314.9 |
Goodwill | 128.0 | 128.0 | 126.5 | 235.4 | 257.4 |
Other intangible assets, net | 60.7 | 56.0 | 35.3 | 115.0 | 97.3 |
Total assets | 5,919.1 | 6,228.0 | 7,258.9 | 9,763.1 | 10,389.2 |
Deferred revenue — current | 1,777.4 | 2,349.3 | 2,848.7 | 3,276.2 | 3,636.0 |
Deferred revenue — long term | 1,675.5 | 2,291.0 | 2,886.3 | 3,084.7 | 3,479.8 |
Total current liabilities | 2,318.1 | 3,078.4 | 3,719.0 | 4,060.7 | 5,034.0 |
Total debt | 988.4 | 990.4 | 992.3 | 994.3 | 996.3 |
Total liabilities | 5,120.7 | 6,509.6 | 7,722.3 | 8,269.3 | 9,151.7 |
Total stockholders' equity | 798.4 | -281.6 | -463.4 | 1,493.8 | 1,237.5 |
Working capital | 1,282.5 | 732.0 | 709.3 | 1,910.8 | 866.2 |
Net cash (cash and investments less debt) | 1,965.5 | 1,240.6 | 1,427.1 | 3,072.2 | 2,925.9 |
Cash Flow and Margin Analysis (%)
| Metric (USD Mn) | FY2021 | FY2022 | FY2023 | FY2024 | FY2025 |
|---|---|---|---|---|---|
Net cash from operating activities | 1,499.7 | 1,730.6 | 1,940.0 | 2,258.1 | 2,590.6 |
Purchases of property and equipment (capex) | 295.9 | 281.2 | 210.0 | 378.9 | 364.8 |
Free cash flow | 1,203.8 | 1,449.4 | 1,730.0 | 1,879.2 | 2,211.8 |
Adjusted free cash flow | — | — | — | 2,207.9 | 2,501.5 |
Free cash flow margin (%) | 36.0 | 32.8 | 32.6 | 31.6 | 32.5 |
Share repurchases (cash paid) | 741.8 | 1,991.2 | 1,500.0 | 0.6 | 2,289.8 |
Dividends paid | 0 | 0 | 0 | 0 | 0 |
Payments for business combinations, net of cash | 74.9 | 30.8 | — | 275.5 | 41.6 |
Returns & Leverage Ratios (%) and Financial Ratios (x)
| Ratio | FY2021 | FY2022 | FY2023 | FY2024 | FY2025 |
|---|---|---|---|---|---|
Return on assets (net income / ending assets, %) | 10.3 | 13.8 | 15.8 | 17.9 | 17.8 |
Return on equity (net income / ending equity, %) | 76.0 | — | — | 116.8 | 149.8 |
ROIC (NOPAT / debt plus equity, %) | 35.6 | 132.4 | 209.3 | 62.5 | 75.4 |
Current ratio (x) | 1.55 | 1.24 | 1.19 | 1.47 | 1.17 |
Debt / equity (x) | 1.24 | — | — | 0.67 | 0.81 |
Interest coverage (operating income / interest expense, x) | 43.7 | 53.9 | — | 90.2 | 103.7 |
Asset turnover (revenue / ending assets, x) | 0.56 | 0.71 | 0.73 | 0.61 | 0.65 |
Days sales outstanding | 88.2 | 104.3 | 96.5 | 89.7 | 90.8 |
Days inventory outstanding | 81.9 | 89.0 | 143.0 | 99.5 | 109.7 |
Days payable outstanding | 69.2 | 81.9 | 60.3 | 60.2 | 63.4 |
Cash conversion cycle (days) | 100.9 | 111.4 | 179.2 | 129.0 | 137.1 |
Revenue by Region
| Region (USD Mn) | FY2022 | FY2023 | FY2024 | FY2025 |
|---|---|---|---|---|
Americas | 1,785.0 | 2,175.2 | 2,442.2 | 2,700.4 |
Europe, Middle East and Africa | 1,691.8 | 2,072.9 | 2,396.2 | 2,834.3 |
Asia Pacific | 940.6 | 1,056.7 | 1,117.4 | 1,264.9 |
Total revenue | 4,417.4 | 5,304.8 | 5,955.8 | 6,799.6 |
Region Margins & Growth (%) and Revenue by Region (%)
| Metric (%) | FY2023 | FY2024 | FY2025 |
|---|---|---|---|
Americas growth YoY | 21.9 | 12.3 | 10.6 |
EMEA growth YoY | 22.5 | 15.6 | 18.3 |
APAC growth YoY | 12.3 | 5.7 | 13.2 |
Americas share of revenue | 41.0 | 41.0 | 39.7 |
EMEA share of revenue | 39.1 | 40.2 | 41.7 |
APAC share of revenue | 19.9 | 18.8 | 18.6 |
Revenue by Region (Dec 2024–Mar 2025)
| Region (USD Mn) | Dec 2024 | Mar 2025 |
|---|---|---|
United States | 993.5 | 993.5 |
Canada | 216.8 | 215.8 |
Latin America | 4.4 | 2.4 |
EMEA | 73.3 | 129.3 |
APAC | 61.5 | 62.8 |
Total | 1,349.5 | 1,403.8 |
Valuation Snapshot
| Metric | Value |
|---|---|
Price (12 Aug 2026 close) | $160.84 |
Price (11 Aug 2026) | $162.44 |
52-week range | $73.55 – $172.17 |
All-time high | $172.09 (5 Aug 2026) |
All-time low | $1.47 (13 Jul 2010) |
Market capitalisation | Approximately $119.9bn – $121.4bn |
Shares outstanding | 733.71m |
Beta | 0.92 – 1.07 (source-dependent) |
Dividend yield | 0.00% (trailing and forward) |
Valuation Multiples
| Multiple | Fortinet | Basis |
|---|---|---|
P/E (normalised, trailing) | 49.2× | Morningstar, Aug 2026 |
P/E on FY2026 guided non-GAAP EPS | Approximately 46.8× | $160.84 ÷ $3.44 midpoint |
P/S (trailing) | 16.0× | Morningstar, Aug 2026 |
EV/Sales on FY2026 guided revenue | Approximately 14.3× | EV approximately $115.9bn ÷ $8.10bn midpoint |
EV/Sales on TTM revenue | Approximately 16.3× | EV ÷ $7.11bn TTM revenue |
EV/EBITDA on FY2026 estimate | Approximately 37–38× | EV ÷ estimated FY2026 EBITDA of approximately $3.1bn |
P/B | Approximately 97× | $119.9bn ÷ $1,237.5m FY2025 equity — not meaningful given buyback-depleted book value |
Share Price & Returns
| Period | Shares repurchased | Average price | Aggregate value |
|---|---|---|---|
FY2021 | 12.9m | $57.45 | $741.8m |
FY2022 | 36.0m | $55.37 | $1,991.2m |
FY2023 | 27.2m | $55.25 | $1,500.0m |
FY2024 | — | — | $0.6m |
FY2025 | — | — | $2,289.8m |
H1 2026 | — | — | $972.8m |
Credit Ratings
| Agency | Rating | Action |
|---|---|---|
Moody's Ratings | A3 (senior unsecured notes); (P)A3 (senior unsecured shelf) | Upgraded from Baa1 / (P)Baa1, disclosed 29 July 2026. Stated by Fortinet to be the highest rating of any public cybersecurity company |
Analyst Conclusions
Management guidance
For Q3 2026: revenue $2.010–2.100bn; billings $2.250–2.350bn; non-GAAP gross margin 79.0–81.0%; non-GAAP operating margin 35.0–37.0%; non-GAAP diluted EPS $0.83–0.87 on 741–745m diluted shares at an 18% non-GAAP tax rate.
For FY2026: revenue $8.020–8.180bn (approximately 19% growth); service revenue $5.180–5.220bn; billings $9.350–9.550bn (approximately 25% growth); non-GAAP gross margin 79.0–81.0%; non-GAAP operating margin 35.0–37.0%; non-GAAP diluted EPS $3.41–3.47.
Implied H2 2026 revenue is approximately $4.20bn at the midpoint, against $3.90bn in H1 — a sequential step-up consistent with normal seasonality but requiring continued 15%-plus growth. Implied H2 billings of approximately $5.08bn against $4.46bn in H1 requires the pillar momentum to hold.
Consensus expectations
Sell-side consensus in August 2026 was Neutral, with a mean twelve-month target of $160.86 against a price of $162.44, a high of $220 and a low of $86. The dispersion — a 2.6× spread between high and low targets — is unusually wide for a $120bn company and reflects genuine disagreement about whether the FY2026 acceleration is cyclical (refresh plus AI-driven urgency) or structural (SASE Firewall category creation).
Bull case
1. The SASE Firewall thesis is working, and the evidence is in the mix rather than the headline. For three years the bear argument was that Unified SASE growth would come at the expense of Secure Networking. Q2 2026 disproved it: Secure Networking billings +34%, Unified SASE +35%, SecOps +25% — all three pillars accelerating simultaneously. That is only possible if the FortiGate 1200G with FortiSASE Outpost genuinely expands the deal rather than redistributing it. If this holds, Fortinet is not defending a firewall business; it is converting a 55% unit share into a subscription franchise, and the $79bn SASE TAM becomes addressable through an installed base no competitor can replicate.
2. Product revenue is the leading indicator and it has turned decisively. Management has stated repeatedly that its sixteen-year record shows product revenue growth leads service revenue growth by several quarters. Product revenue grew 16% in FY2025, 41% in Q1 2026 and 52% in Q2 2026. Service revenue growth of 13.2% in FY2025 is the trough, not the trend. FY2026 service revenue guidance of $5.18–5.22bn implies 13–14% growth, which the product signal suggests is conservative — and service revenue carries an 86.8% gross margin.
3. Sovereignty is a defensible, under-modelled moat. FortiSASE Sovereign has no equivalent from Zscaler, Netskope or Palo Alto Networks, whose architectures require traffic to transit vendor-controlled cloud. As European, Gulf and Asian data-residency requirements harden, Fortinet's owned-infrastructure model — 190+ points of presence, plus the ability to deploy the entire stack inside a customer's own data centre — converts what looked like a capital-intensity disadvantage into the only compliant option. EMEA overtaking the Americas in FY2025, and EMEA property and equipment rising 76% in a single quarter, are the early evidence.
Bear case
1. The vulnerability record is a compounding liability, not a series of incidents. Twenty-six Fortinet CVEs sit on CISA's Known Exploited Vulnerabilities catalog as of July 2026, thirteen tied to ransomware campaigns. In November 2025 two chainable FortiWeb flaws enabled unauthenticated remote code execution. In December 2025 an SSO bypass affected four product families. In January 2026 Fortinet disabled FortiCloud SSO globally because CVE-2026-24858 defeated its own patches. In April 2026 it shipped an emergency FortiClient EMS hotfix for an actively exploited critical flaw. Fortinet's own risk factor concedes that such failures harm it "more significantly as compared to other companies." At some point this becomes a procurement disqualifier in exactly the large-enterprise and government segments management is targeting.
2. The valuation prices structural, not cyclical, reacceleration. At approximately 47× FY2026 guided non-GAAP EPS and approximately 14× forward EV/Sales, the market has extrapolated two quarters. Yet the components of the acceleration are substantially identifiable as one-time: a firewall refresh cycle whose finite nature Fortinet itself disclosed in August 2025; a memory and component cost environment prompting pre-buy; and a step-function in AI-driven urgency. Billings guidance implies 25% growth in FY2026 against 2.1% in FY2024 — a swing that is arithmetically a base effect as much as a demand effect. Consensus mean target sits at the current price with an average analyst rating of Neutral.
3. Fortinet is subscale precisely where the industry is consolidating. Fortinet is a Gartner Challenger in SASE Platforms and in SIEM. Palo Alto Networks has $9.2bn of revenue, a 37.6% free cash flow margin and just absorbed CyberArk for $25bn. CrowdStrike has $5.25bn of ARR growing 24% on a single-agent architecture. Microsoft bundles competitive capability into E5. Fortinet's answer is organic development plus tuck-ins averaging under $100m. In endpoint, SIEM, identity and CNAPP the gap is widening, and the platform consolidation argument cuts against Fortinet in every category where it is not the incumbent.
Catalysts and monitorables — next twelve months
| Timing | Item | What to watch |
|---|---|---|
| Late Oct / early Nov 2026 | Q3 2026 results | Whether billings growth holds above 25% and whether Secure Networking sustains 30%-plus; the first clean read on refresh-cycle exhaustion |
| Aug–Sep 2026 | Conference circuit (Rosenblatt 17 Aug, Stifel 24 Aug, Deutsche Bank 27 Aug, Goldman Sachs 8 Sep, Kepler Cheuvreux 10 Sep) | Management framing of the SASE Firewall TAM and the durability of product revenue |
| 15 Sep 2026 | SASE Summit — "The Age of Autonomous Trust" | Agentic SOC roadmap; FortiSOC general availability and pricing |
| Feb 2027 | Q4 and FY2026 results; FY2027 initial guidance | The critical test — the first guide that cannot lean on the refresh cycle |
| 28 Feb 2027 | Buyback authorisation expiry | Whether the Board re-authorises and at what size; $1.38bn remained at Feb 2026 against $2.29bn deployed in FY2025 |
| Ongoing | SP6 development milestones with Intel | Tape-out timing; any disclosed manufacturing shift out of Taiwan |
| Ongoing | Securities litigation | Lead plaintiff appointment, consolidated complaint, motion-to-dismiss ruling; any reserve taken |
| Ongoing | PSIRT advisory cadence and CISA KEV additions | Frequency and severity; any incident with disclosed customer-breach consequences |
| Ongoing | Unified SASE ARR and FortiSASE ARR | FortiSASE ARR grew over 90% in FY2025 off a small base; the mix of FortiSASE versus SD-WAN within the pillar |
| Ongoing | S&P and Fitch ratings actions | Whether either follows Moody's A3 upgrade |
| Ongoing | Memory and component pricing | Fortinet's unusual FY2025 disclosure on memory sourcing implies gross margin sensitivity |
Analyst verdict
Fortinet in August 2026 is a company whose operating performance has decisively outrun its narrative credibility, and whose valuation has now outrun both.
The operating case is strong and improving. Q2 2026 was the best quarter in the company's history: revenue up 26%, product revenue up 52%, billings up 33%, a record 38% non-GAAP operating margin, and free cash flow of $966m at a 47% margin. All three strategic pillars accelerated together — the single most important datapoint in the file, because it falsifies the cannibalisation thesis that has capped the multiple for three years. Moody's A3 upgrade, no debt maturing before 2031, and roughly $4bn of net cash confirm a balance sheet that can absorb almost anything.
Three things restrain enthusiasm. First, the acceleration is heavily refresh-driven, and Fortinet has already told the market — under duress, in August 2025 — that it does not know how large that cohort is. Second, the vulnerability record is genuinely disqualifying in places: twenty-six CVEs on CISA's KEV catalog and a global disabling of FortiCloud SSO is not a run of bad luck, it is a product-security posture, and it directly undercuts the large-enterprise and government push. Third, at approximately 47× forward earnings and 14× forward sales, with consensus Neutral and the mean target at the market price, the shares already embed structural reacceleration.
The honest read: Fortinet's competitive architecture — proprietary silicon, one operating system, owned sovereign-capable infrastructure — is the most defensible in network security, and the SASE Firewall convergence is a real category rather than marketing. But the entry point is poor. This is a business to own through a drawdown, not into an all-time high reached six trading days ago. Constructive on the franchise; disciplined on the price.
-
FY2023 depreciation and amortisation, interest income and interest expense (consequently FY2023 EBITDA and interest coverage).
-
FY2023 exact operating cash flow, capex and free cash flow (company disclosures are rounded to $1.94bn and $1.73bn; capex is derived).
-
Full-year FY2025 United States revenue (quarterly disclosures only were retrieved).
-
Individual named executive officer compensation splits for FY2025 (salary, bonus, stock awards, option awards, all other) — only PEO and average non-PEO NEO totals were retrieved.
-
Ages, education and full biographies for Christiane Ohlgart and John Whittle beyond career history.
-
The formal title of Will Cooper, named as a proxy holder in the 2026 proxy.
-
Linksys step-acquisition date, consideration and accounting detail beyond the disclosed bargain-purchase gains.
-
Deal values for ShieldX Networks, Panopta, OPAQ Networks, CyberSponse, enSilo, ZoneFox, Bradford Networks, Alaxala Networks and Suridata.
-
S&P Global Ratings and Fitch Ratings assignments and outlooks.
-
MSCI ESG and Sustainalytics ratings.
-
Full text of Item 3, Legal Proceedings, in the FY2025 Form 10-K.
-
FY2025 remaining performance obligations (FY2024 RPO of $6.42bn was retrieved).
-
Operating margins and R&D intensity for Palo Alto Networks, CrowdStrike and Check Point in the benchmarking table.
-
Check Point FY2025 full-year revenue (inferred from quarterly disclosure).
Conflicting sources noted: (i) Fortinet's principal executive office is stated as 909 Kifer Road in its Forms 10-K and proxy, while certain Schedule 13G filings by third parties state 899 Kifer Road — the 10-K address is authoritative; (ii) third-party services report institutional ownership between 63% and 70% and Vanguard's stake between 6.2% and 9.7% depending on whether entity-level or aggregate filings are used; (iii) beta is reported at 0.92 by one service and 1.07 by another; (iv) third-party firewall market sizing varies by more than 90% between providers depending on definition.
Unlock Company Financials
Unlock this company profile to view its financial data.
View Subscription PlansExecutive Leadership
Executive Leadership Team
| Name | Age | Title | Tenure in role | Prior roles | Education |
|---|---|---|---|---|---|
Ken Xie | 63 | Chief Executive Officer and Chairman of the Board | CEO since co-founding, October 2000; President until November 2013 | Founder, President and CEO of NetScreen Technologies (acquired by Juniper Networks, April 2004); CEO of Systems Integration Solutions. Member of the National Academy of Engineering. Director of TeleNav since July 2012; Cyber Threat Alliance board 2017–2022 | B.S. and M.S. electrical engineering, Tsinghua University; M.S. electrical engineering, Stanford University |
Michael Xie | 57 | President, Chief Technology Officer and Director | President and CTO since November 2013; director since February 2001 | VP Engineering, ServGate Technologies; Software Director and Architect, NetScreen; Senior Software Engineer, Milkyway Networks | M.S. electrical engineering, University of Manitoba; B.S. and M.S. automobile engineering, Tsinghua University |
Christiane Ohlgart | 58 | Chief Financial Officer | CFO since May 2025; Chief Accounting Officer March 2024 – May 2025 (remains Principal Accounting Officer) | CFO, IGEL Technology; VP Finance, Fortinet; SVP Finance and Treasurer, Syapse; VP Finance, Intermedia.net; 18 years at SAP. Over three decades in software and technology finance | Not disclosed in the 2026 proxy |
John Whittle | 57 | Chief Operating Officer | COO since January 2024; Chief Legal Officer April 2022 – January 2024; EVP Corporate Development January 2019 – January 2024; Corporate Secretary January 2007 – April 2024; General Counsel October 2006 – April 2022 | VP and General Counsel, Ingres Corporation; VP and General Counsel, Corio, Inc.; IBM (post-Corio acquisition); attorney, Wilson Sonsini Goodrich & Rosati | Not disclosed in the 2026 proxy |
Ken Xie | 63 | Oct 2000 | No (employee) | — | See above; Chairman |
Michael Xie | 57 | Feb 2001 | No (employee) | Cybersecurity | See above |
Kenneth A. Goldman | 76 | Oct 2020 | Yes | Human Resources; Audit (Chair) | CFO of Yahoo! 2012–2017; Fortinet SVP and CFO 2007–2012; President of Hillspire LLC 2017–2022; PCAOB Standing Advisory Group 2015–2017, Investor Advisory Group since 2024. Boards: RingCentral, Wealthfront, C3.ai, Kodiak AI |
Ming Hsieh | 70 | Apr 2013 | Yes | Audit; Governance and Social Responsibility (Chair) | Chairman and CEO, Fulgent Therapeutics; founder and CEO of Cogent Inc. (acquired by 3M, 2010) |
Jean Hu | 62 | Oct 2019 | Yes | Audit; Cybersecurity | EVP and CFO, Advanced Micro Devices since January 2023; previously EVP and CFO of Marvell Technology and CFO of QLogic |
Janet Napolitano | 68 | Nov 2024 | Yes | Human Resources; Cybersecurity | US Secretary of Homeland Security 2009–2013; Governor of Arizona 2003–2009; President, University of California 2013–2020. Boards: Vir Biotechnology, Zoom Communications |
Judith Sim | 57 | Jun 2015 | Yes | Human Resources (Chair); Governance and Social Responsibility | Lead Independent Director since April 2024. Chief Marketing Officer, Oracle 2005–2020. Boards: First Advantage, DataStax |
Admiral James Stavridis (Ret) | 71 | Oct 2021 | Yes | Governance and Social Responsibility; Cybersecurity (Chair) | 37 years US Navy, 4-star Admiral; 16th Supreme Allied Commander of NATO; 12th Dean, Fletcher School, Tufts. Vice Chairman Global Affairs, The Carlyle Group; Chair, Rockefeller Foundation Board of Trustees |
Derek Kan | 47 | Nominee (April 2026) | Yes (if elected) | — | Chief Business Officer, Deliverr (to Shopify acquisition 2022); Deputy Director, White House OMB 2019–2020; Under Secretary for Policy, US DOT 2017–2019; Vice Chairman, USPS Board of Governors. Boards: Toll Brothers, Globe Life, Oklo |
Directors' Remuneration
| Measure (USD) | FY2021 | FY2022 | FY2023 | FY2024 | FY2025 |
|---|---|---|---|---|---|
CEO (PEO) Summary Compensation Table total | 14,203,211 | 14,200,453 | 16,301,613 | 13,143,289 | 11,458,039 |
CEO compensation actually paid (CAP) | 84,745,190 | -15,190,085 | -21,526,918 | 37,716,937 | 1,145,113 |
Average non-PEO NEO SCT total | 4,867,616 | 4,532,172 | 6,586,873 | 5,967,146 | 5,674,275 |
Average non-PEO NEO CAP | 27,685,473 | -4,867,322 | -8,065,655 | 15,033,124 | -1,396,923 |
Major Shareholders
| Holder | Shares | Approximate % | Source |
|---|---|---|---|
The Vanguard Group (aggregate) | Approximately 70m | Approximately 9.4–9.7 | Third-party aggregation; Vanguard Capital Management separately reported 45,987,681 shares (6.21%) on Schedule 13G in 2026 |
BlackRock, Inc. | 54,206,558 | 7.4 | 2026 proxy, based on Schedule 13G/A filed 26 January 2024 |
Ken Xie (CEO and Chairman) | Approximately 59.0m | Approximately 8.1 | Third-party aggregation of Form 4 and proxy data |
Michael Xie (President and CTO) | — | Approximately 2–3 | Third-party estimate |
“—” = not publicly disclosed.
Competitive Landscape
Competitor Detail
| Pillar / category | Principal competitors | Fortinet's relative position |
|---|---|---|
Network firewall (appliance) | Palo Alto Networks, Cisco, Check Point, Huawei, HPE (Juniper), SonicWall, Sophos, WatchGuard, Barracuda, Hillstone, Sangfor | #1 by units, 55% unit share (650 Group, Q3 2025); highest product revenue among cybersecurity peers. Named a Leader in the 2025 Gartner Magic Quadrant for Hybrid Mesh Firewall |
SD-WAN | Cisco, HPE (Silver Peak/Aruba), VMware/Broadcom, Palo Alto Networks (Prisma SD-WAN), Cato Networks | Long-standing leadership; SD-WAN is delivered natively in FortiOS rather than as a separate stack |
SASE / SSE | Zscaler, Netskope, Palo Alto Networks (Prisma Access), Cato Networks, Cloudflare, Cisco | Challenger in the 2026 Gartner Magic Quadrant for SASE Platforms, but Gartner Peer Insights Customers' Choice for SSE for a third consecutive year — the only vendor to hold that distinction. Uniquely positioned in sovereign SASE |
Endpoint / XDR | CrowdStrike, Microsoft, SentinelOne, Palo Alto Networks (Cortex), Sophos, Trend Micro | Subscale; FortiEndpoint's advantage is agent consolidation with ZTNA rather than best-of-breed detection |
SIEM / SOC | Microsoft (Sentinel), Splunk (Cisco), Palo Alto Networks (XSIAM), CrowdStrike (Falcon Next-Gen SIEM), IBM, Google (Chronicle) | Challenger in the 2025 Gartner Magic Quadrant for SIEM; FortiSOC (2026) is the strategic response |
Cloud security / CNAPP | Palo Alto Networks (Prisma Cloud), Wiz (Google), CrowdStrike, Microsoft, Orca, Sysdig | Sub-scale but improving; recognised in three KuppingerCole CNAPP Compass categories |
WAF / WAAP | F5, Akamai, Cloudflare, Imperva (Thales), Barracuda | Established mid-tier position via FortiWeb / FortiAppSec |
OT / cyber-physical | Claroty, Nozomi Networks, Dragos, Cisco, Honeywell | Differentiated by ruggedised hardware plus native OT security services; OT billings +25%-plus in FY2025 |
Peer Comparison FY2026
| Metric | Fortinet (FY2025) | Palo Alto Networks (FY2025, Jul-end) | CrowdStrike (FY2026, Jan-end) | Check Point (FY2025) |
|---|---|---|---|---|
Revenue (USD Mn) | 6,799.6 | 9,221.0 | 4,812.0 | 2,680.0 |
Revenue growth YoY (%) | 14.2 | 14.9 | 21.7 | — |
GAAP operating margin (%) | 30.7 | — | — | — |
Non-GAAP operating margin (%) | 35.5 | — | — | — |
Free cash flow (USD Mn) | 2,211.8 | 4,129.0 | — | — |
Free cash flow margin (%) | 32.5 | 37.6 | — | — |
R&D as % of revenue | 12.0 | — | — | — |
Recurring revenue metric | ARR growth 21% | NGS ARR guided $7.94–7.96bn (fiscal Q3 2026) | ARR $5.25bn, +24% | — |
