### Headcount trend
FY2024 and FY2025 headcount are taken directly from the respective Forms 10-K (14,138 and 15,109). FY2022 is from the FY2022 Form 10-K (12,595). FY2021 and FY2023 are from a third-party aggregation of the same filings. As of 31 December 2025, approximately 30% of employees were in the United States, approximately 20% in Canada, and approximately 50% outside the US and Canada, primarily in EMEA. Fortinet states it owns no manufacturing or research and development activities in China.
### Positioning statement (150 words)
Fortinet is the volume leader of the global network-security industry and the only large-cap security vendor whose competitive architecture rests on proprietary silicon. Its differentiation is a single operating system — FortiOS — running across appliances, virtual machines, cloud and SaaS, accelerated by in-house FortiASIC security processing units that deliver materially better performance-per-watt and total cost of ownership than merchant-silicon rivals. That combination has produced a 55% unit share of the firewall market and well over half a million customers in more than 100 countries, sold almost entirely through a two-tier channel. Fortinet is now converting that installed base into three pillars: Secure Networking (the mature core), Unified SASE, and AI-driven Security Operations. Financially it is unusually self-funded — GAAP-profitable every year since its 2009 IPO, with an 80%-plus gross margin, a 35%-plus non-GAAP operating margin, a net cash balance sheet, and $2.2 billion of free cash flow in FY2025 largely returned through buybacks.
---
### The company's own description (FY2025 Form 10-K, paraphrased)
Fortinet describes itself as a leader in cybersecurity driving the convergence of networking and security, with a mission to secure people, devices and data everywhere. Its integrated platform, the Fortinet Security Fabric, spans secure networking, unified Secure Access Service Edge (SASE) and AI-driven security operations (SecOps). As of 31 December 2025 its end-customers were located in over 100 countries and included enterprises across financial services, retail, healthcare and operational technology verticals, communication and security service providers, and government organisations. Research and development is centred in the United States and Canada with a global footprint of support and centres of excellence. The company held 1,064 US patents and 1,405 global patents at year-end 2025, including 321 AI-related patents, and states it has been recognised in over 140 enterprise analyst reports.
Fortinet identifies five core technology differentiators: FortiOS (the unified operating system, including emerging quantum-resistant cryptography); FortiASIC (application-specific integrated circuit security processing units); FortiCloud (its organically built global cloud infrastructure, powered by the FortiStack SaaS platform); FortiAI (a dual-layered "AI for Security / Security for AI" framework); FortiEndpoint (a converged single-agent endpoint); and OT Security for cyber-physical systems.
### Independent characterisation
Fortinet is best understood as a hardware-anchored platform annuity. The economics work in three stages:
1. **Land with silicon.** A FortiGate appliance is sold at a hardware gross margin (67.3% in FY2025) that is deliberately lower than the software industry norm, but the appliance is cheaper per unit of throughput than competitors because the heavy lifting is done by an in-house ASIC rather than an x86 CPU. This is the mechanism behind the 55% unit share.
2. **Attach the subscription.** Every appliance carries FortiGuard AI-powered security services and FortiCare technical support, recognised rateably over one-to-five year terms at an 86.8% service gross margin (FY2025). Service revenue was 67.4% of total FY2025 revenue.
3. **Expand across the Fabric.** The same FortiOS licence and management plane extends into switching, wireless, SD-WAN, SASE, endpoint, cloud-native protection and the SOC — which is why Unified SASE and SecOps together reached 36% of billings in FY2025 from roughly 30% two years earlier.
**Revenue model mix**
FY2023 billings are the company's rounded disclosure ($6.40 billion).
**Value chain position.** Fortinet is fabless and asset-light in manufacturing but asset-heavy in cloud. It outsources appliance assembly to contract and original design manufacturers — Accton Technology, IBASE Technology, Micro-Star International, Senao Networks and Wistron among them — with approximately 87% of hardware manufactured in Taiwan. Its proprietary ASICs are built by contract manufacturers including Toshiba America Electronic Components and Renesas Electronics America, using foundries in Taiwan and Japan operated by TSMC or by the contract manufacturer itself. Finished goods route through Fortinet's own warehouses in California and the Netherlands, or a logistics partner in Taoyuan City, Taiwan. Conversely, Fortinet owns rather than rents its SASE delivery infrastructure: more than 190 points of presence globally, plus owned data centres and colocation arrangements — a deliberate choice management argues delivers roughly one-third the total cost of ownership of peers who rent public-cloud capacity.
**Route to market.** Substantially all revenue is generated through a two-tier channel: distributors sell to resellers, service providers and managed security service providers (MSSPs), who sell to end-customers. Named distributors include Arrow Electronics, Exclusive, Ingram Micro and TD Synnex. Concentration is material: six distributors purchasing directly accounted for 67% of total net accounts receivable at 31 December 2025 (69% at end-2024), and one distributor alone accounted for 32% of net accounts receivable. Fortinet maintains sales professionals in over 100 countries and uses a direct-touch overlay for large enterprise and service-provider deals.
**Customers and end-markets.** Well over half a million customers. Verticals disclosed: financial services, government, manufacturing, retail, technology, education, healthcare and telecommunications. Service providers and MSSPs are described in the 10-K risk factors as Fortinet's largest industry vertical — a concentration that cuts both ways. Operational technology and cyber-physical systems is the fastest-growing vertical adjacency, with OT billings rising more than 25% in FY2025.
---