
Fortinet
Hardware appliances (FortiGate) plus attached subscription security services and support; ~67% of FY2025 revenue was recurring services, sold through a two-tier channel (distributors/MSSPs/carriers)
Sources — 21 figures with citations
- Total revenue, Q2 FY2026filed2026-06-30$2,047.9M vs $1,630.0M in Q2 FY2025 (+25.6%)sec.gov — Condensed consolidated statements of income in the Q2 2026 earnings release (8-K EX-99.1, filed 2026-07-29). Growth derived: 2047.9 / 1630.0 - 1 = 25.64%.
- Product and service revenue split, Q2 FY2026filed2026-06-30Product $773.0M (+51.9%); Service $1,274.9M (+13.7%), 62.3% of totalsec.gov — Filed income statement. Growth derived: 773.0/508.9-1 = 51.9%; 1274.9/1121.1-1 = 13.7%. Service share derived: 1274.9/2047.9 = 62.3%.
- Billings, Q2 FY2026filed2026-06-30$2,372.1M vs $1,778.4M (+33.4%)sec.gov — Revenue-to-billings reconciliation in the release: revenue $2,047.9M plus change in deferred revenue $324.2M. Non-GAAP measure as defined by the company. Growth derived: 2372.1/1778.4-1 = 33.4%.
- Gross margin, Q2 FY2026filed2026-06-3080.2% GAAP / 80.9% non-GAAP (vs 80.7% / 81.6% YoY)sec.gov — GAAP-to-non-GAAP gross margin reconciliation. Segment detail derived from the filed statement: product GM 539.2/773.0 = 69.8% (vs 67.4% YoY); service GM 1104.0/1274.9 = 86.6%.
- Operating margin, Q2 FY2026filed2026-06-3033.7% GAAP ($689.3M) / 38.0% non-GAAP ($778.7M)sec.gov — Reconciliation adds back $80.8M stock-based compensation and $9.9M intangible amortization, less a $1.3M IP gain. Prior-year non-GAAP margin was 33.1%, so +490bp YoY.
- EPS, Q2 FY2026filed2026-06-30GAAP diluted $0.82 (+44%); non-GAAP diluted $0.90 (+41%)sec.gov — GAAP net income $606.3M on 739.9M diluted shares; non-GAAP net income $665.0M after an 18% non-GAAP tax rate adjustment of -$30.7M.
- Free cash flow and capex, Q2 FY2026filed2026-06-30FCF $965.6M (47.2% margin); OCF $1,043.6M; capex $78.0M (3.8% of revenue)sec.gov — FCF reconciliation table. Adjusted FCF $995.9M (48.6%) after adding $30.3M of real-estate purchases — down from $143.8M of real-estate spend in Q2 FY2025.
- Capex intensity trendderived2026-06-303.8% of revenue in H1 FY2026 vs 7.4% in H1 FY2025sec.gov — From the filed cash flow statement: H1 FY2026 capex $148.6M / revenue $3,897.5M = 3.81%; H1 FY2025 $234.3M / $3,169.7M = 7.39%. Intensity roughly halved as the owned-campus build wound down.
- Net cash positionderived2026-06-30~$3.97B net cash at 2026-06-30sec.gov — From the filed balance sheet: cash $2,934.9M + short-term investments $1,134.7M + long-term investments $399.1M = $4,468.7M, less long-term debt $496.9M = $3,971.8M. The $499.7M current note was repaid during H1 (financing outflow -$500.0M), leaving no current debt.
- Remaining performance obligations and deferred revenuefiled2026-06-30RPO $7.73B (~$3.86B due within 12 months); total deferred revenue $7,675.7Msec.gov — Q2 FY2026 Form 10-Q, revenue note. Deferred revenue is the sum of the filed current $3,841.8M and non-current $3,833.9M, up from $7,115.8M at 2025-12-31.
- Share repurchases and remaining authorizationfiled2026-06-3012.5M shares for $972.8M in H1 FY2026 at a $77.73 weighted-average price; $765.8M remainingsec.gov — 10-Q share repurchase note. Aggregate authorization $10.25B (after a $1.0B January 2026 increase) expiring 2027-02-28. The $77.73 average is less than half the 2026-08-03 close of $163.21.
- Q2 buyback pace vs Q1derived2026-06-30Repurchases were heavily front-loaded into Q1; Q2 was minimalsec.gov — H1 repurchases were $972.8M, but Q2 net cash used in financing was only $147.9M (which also includes stock-issuance proceeds and tax withholding), versus H1 net financing of -$1,490.8M including the -$500M note repayment. Implies roughly $820-850M repurchased in Q1 near the $70.12 52-week low and only ~$120-150M in Q2. Approximate — the 10-Q does not disclose a Q2-only figure.
- FY2026 guidance (raised at Q2)filed2026-07-29Revenue $8.020-8.180B; billings $9.350-9.550B; non-GAAP operating margin 35-37%; non-GAAP EPS $3.41-3.47sec.gov — Guidance section of the release. Service revenue guided $5.180-5.220B; 18% non-GAAP tax rate; 741-745M diluted shares. Q3 2026: revenue $2.010-2.100B, billings $2.250-2.350B, non-GAAP EPS $0.83-0.87.
- FY2025 revenue baseline and implied FY2026 growthfiled2025-12-31FY2025 revenue $6,799.6M; FY2026 guide midpoint $8.10B = +19.1%data.sec.gov — FY2025 figure from Fortinet's XBRL company facts as reported in the FY2025 Form 10-K. Growth derived: 8,100 / 6,799.6 - 1 = 19.1%, matching the release headline of 19% guided growth.
- TTM revenuederived2026-06-30$7,527.4M ($7.53B), +18.8% TTMdata.sec.gov — Sum of filed quarters: Q3 FY2025 $1,724.9M + Q4 FY2025 $1,905.0M + Q1 FY2026 $1,849.6M + Q2 FY2026 $2,047.9M. Q4 FY2025 derived as FY2025 $6,799.6M less Q1 $1,539.7M, Q2 $1,630.0M, Q3 $1,724.9M. Cross-checks to the $7.53B TTM shown by stockanalysis.com.
- Share price (close)market2026-08-03$163.21 close on 2026-08-03stockanalysis.com — Official close, 2026-08-03 4:00 PM EDT (not an intraday level; that session's intraday range was $159.37-$165.97).
- Market capitalizationmarket2026-08-03$119.75B at the 2026-08-03 closestockanalysis.com — Cross-checked: 733.71M shares outstanding (per the 10-Q cover page, as of 2026-07-28) x $163.21 = $119.74B.
- Valuation multiplesderived2026-08-03~15.4x EV/TTM revenue; ~47x FY2026 guided non-GAAP EPS; ~14.3x EV/FY2026 guided revenuestockanalysis.com — EV derived as $119,738M market cap less $3,971.8M net cash = $115,766M. EV/TTM = 115,766/7,527.4 = 15.38x (source page shows 15.44x and EV $116.24B on a slightly different net-cash definition). Forward P/E = 163.21/3.44 (guide midpoint) = 47.4x; source page shows 46.57x. 200-day moving average $100.95.
- Consensus beat, Q2 FY2026market2026-07-29Non-GAAP EPS $0.90 vs ~$0.74 consensus; revenue $2.05B vs ~$1.89B consensus (+9.1%)finance.yahoo.com — Zacks-sourced consensus comparison; revenue growth of 25.6% matches the filed figure. FY2026 guidance midpoint $8.10B vs ~$7.81B consensus. Third-party consensus, not a filed number.
- Pillar billings growth, Q2 FY2026market2026-07-29Unified SASE +35%; Secure Networking +34%; AI-driven SecOps +25%; OT +55%marketbeat.com — From earnings-call coverage, not the filed 8-K exhibit — Fortinet does not disclose pillar billings in its financial statements. Same source: 'SASE Firewall' billings grew 34% to more than $2B, and management flagged an ~high-single-digit price-increase effect on second-half billings.
- Credit rating and supply-chain actionfiled2026-07-29Moody's upgraded senior unsecured notes to A3 from Baa1; Intel collaboration on Security Processor 6 (SP6)sec.gov — Recent Business Highlights section of the release. Fortinet states A3 is the highest rating of any public cybersecurity company; the Intel SP6 tie-up is framed as strengthening supply-chain resilience and diversity for its custom silicon.
Earnings, margins, COGS & capex
FY2025 revenue $6.80B (+14%) with billings $7.55B (+16%), GAAP operating margin 31% / non-GAAP 35% (14% growth + 35% margin again beats the Rule of 45). Q1 FY26 accelerated sharply: revenue +20% to $1.85B, billings +31% to $2.09B, product revenue +41% to $645M on the firewall refresh wave, non-GAAP EPS $0.82 vs $0.62 consensus (~+32% beat), record $1.08B OCF and $1.01B FCF. Management raised FY2026 guidance to revenue $7.71-7.87B (from $7.50-7.70B) and billings $8.80-9.10B (from $8.40-8.60B).
Income statement — where each revenue dollar goes
% of revenueOf every $1 of revenue, ~20¢ is cost of goods and ~47¢ operating expense, leaving ~34¢ of operating profit.
Revenue trend
Margins
stable-high; service GM > product GM, mix-dependent
up
record levels; FY26 guide 33-36%
up; Q1 FY26 record $1.01B
COGS structure
COGS ~20% of revenue: hardware BOM for FortiGate appliances (custom FortiASIC chips fabbed at third-party foundries, merchant silicon, memory, ODM assembly) plus cloud/data-center delivery costs for FortiGuard and SASE services; service COGS is small, keeping blended gross margin ~80%
Capex
~$380M FY2025 (~5-6% of revenue, derived from OCF $2.59B less FCF $2.21B) - above software-peer norms because Fortinet owns real estate/campuses and builds its own SASE/FortiCloud points of presence rather than renting all capacity
Latest earnings
Large beat on both lines and above the high end of the company's own guidance. Non-GAAP EPS $0.90 vs ~$0.74 consensus (+~22%); revenue $2.05B vs ~$1.89B consensus (+9.1%). Q2 was guided at $1.83-1.93B revenue / $2.09-2.19B billings at the Q1 print — actuals cleared the high end by ~6% and ~8%. FY2026 guidance midpoint $8.10B vs ~$7.81B consensus.
Raised for the second consecutive quarter. FY2026: revenue $8.020-8.180B, service revenue $5.180-5.220B, billings $9.350-9.550B, non-GAAP gross margin 79-81%, non-GAAP operating margin 35-37%, non-GAAP diluted EPS $3.41-3.47 (18% non-GAAP tax rate, 741-745M diluted shares). Q3 2026: revenue $2.010-2.100B, billings $2.250-2.350B, non-GAAP operating margin 35-37%, non-GAAP EPS $0.83-0.87. Company guides non-GAAP only; no GAAP guidance is given.
- Billings (Q2 FY2026)
- $2,372.1M, +33.4% YoY
- Product revenue (Q2 FY2026)
- $773.0M, +51.9% YoY
- Service revenue (Q2 FY2026)
- $1,274.9M, +13.7% YoY — 62% of total revenue
- Non-GAAP operating margin
- 38.0% (record); GAAP 33.7%
- Free cash flow (Q2 FY2026)
- $965.6M, 47.2% of revenue
- Remaining performance obligations
- $7.73B at 2026-06-30; ~$3.86B to be recognized in the next 12 months
- Total deferred revenue
- $7,675.7M at 2026-06-30, up from $7,115.8M at 2025-12-31
- Buybacks
- $972.8M / 12.5M shares in H1 FY2026 at a $77.73 weighted-average price; only $765.8M of the $10.25B authorization remained at quarter end (expires 2027-02-28)
- Pillar billings growth (Q2, from earnings call)
- Unified SASE +35%, Secure Networking +34%, AI-driven SecOps +25%, OT +55%
- Credit rating
- Moody's upgraded senior unsecured notes to A3 from Baa1 — the highest rating of any public cybersecurity company
Growth drivers
- Firewall refresh cycle around FortiOS end-of-support — product revenue +41% in Q1 FY26; secure networking is 66% of billings growing 32% vs a ~7% market CAGR ($65B TAM, per Q1 FY26 slides)
- Unified SASE — 25% of billings growing +31% YoY in Q1 FY26 against a company-cited $79B TAM growing ~18% CAGR; single-OS firewall + SD-WAN + SASE convergence pitch
- OT (operational technology) security — billings +70%+ YoY in Q1 FY26, boosted by AI-infrastructure protection demand
- AI-driven Security Operations pillar — +23% billings growth (9% of billings, Q1 FY26; $166B TAM per company slides)
- Company-cited >50% global share of firewall units shipped feeding installed-base upsell to SASE/SecOps subscriptions
Reported financials — SEC EDGAR
Audited GAAP figures pulled from SEC filings · latest filing 2026-02-25. The audited primary-source spine — not financial advice.
Revenue — annual (GAAP)
Margins & balance sheet — FY’25
Bull & bear
Q2 was an unambiguous acceleration on every axis that matters — billings +33%, product +52%, record 38% non-GAAP operating margin, 47% FCF margin — and management raised FY2026 guidance for the second straight quarter while carrying $3.97B of net cash and a fresh Moody's A3 upgrade.
- The refresh-plus-AI demand wave is running ahead of any plausible model: product revenue +51.9% and billings +33.4% both cleared the high end of guidance by 6-8%, and the FY2026 revenue guide went up ~$310M at the midpoint in one quarter.
- Margin expansion is arriving with the growth, not in spite of it: non-GAAP operating margin hit a record 38.0% (up 490bp YoY) even as lower-margin product mix rose to 38% of revenue. Product gross margin itself improved to 69.8% from 67.4%, evidence the FortiASIC cost curve holds under volume.
- Cash conversion is exceptional and structurally improving: $965.6M FCF at a 47.2% margin, while capex intensity halved to 3.8% of revenue from 7.4% in H1 2025 as the owned-campus spend rolled off. FCF is now growing much faster than revenue.
- The recurring base is visibly thickening beneath the hardware wave: RPO $7.73B with ~$3.86B due in the next 12 months, and total deferred revenue up $560M in six months — the mechanism by which a product cycle converts into years of service revenue.
- Unified SASE billings +35% and OT +55% show the attach motion is working, and the Intel partnership on Security Processor 6 directly de-risks the single biggest structural bear point (custom-silicon supply concentration) while Moody's A3 validates the balance sheet.
You are paying ~15.4x EV/TTM sales and ~47x FY2026 guided non-GAAP EPS after the stock roughly doubled in seven months, for a business whose recurring service revenue is still only growing 13.7% — the entire acceleration is hardware and price, both of which lap.
- Strip out the appliance wave and the growth is ordinary: service revenue, 62% of the total, grew just 13.7% YoY. Product's +51.9% is a refresh/AI-buildout pulse that becomes a brutal comp in 2027 — the 2023-24 digestion, when billings fell from 30%+ to single digits, is the precedent.
- Part of the billings acceleration is price, not demand: management flagged on the call that price increases contribute an ~high-single-digit effect to second-half billings. Price-led billings growth does not repeat and inflates the reported gap between billings and revenue.
- Management's own capital allocation argues the stock is no longer cheap. They repurchased 12.5M shares in H1 at a $77.73 weighted average — less than half the current $163.21 price — then went nearly quiet in Q2 (total Q2 financing outflow was only $147.9M). Just $765.8M of authorization remains, expiring 2027-02-28, so the buyback is not a meaningful support at this level.
- Valuation leaves no margin for error: ~15.4x EV/TTM revenue and ~47x FY2026 guided non-GAAP EPS, versus a 200-day moving average of $100.95. A single quarter of product deceleration re-rates this multiple hard, and interest income is already fading ($33.2M vs $45.0M YoY) as a below-the-line offset.
- Competitive and mix risk persists: AI-driven SecOps is the slowest pillar at +25% and remains the smallest, so Fortinet is still under-indexed exactly where Palo Alto and CrowdStrike are strongest, while cloud-native SASE rivals attack the hardware-anchored deployment model. Overall gross margin already slipped 50bp YoY on the product-heavy mix.
What it is worth
Forward multiples vs peer set (PANW, ZS, CRWD, CHKP, NET) + reverse-DCF sanity check on guided FY26 numbers
~$95-110
product revenue laps the refresh in 2027 and decelerates hard (2023-24 pattern), billings growth halves, multiple compresses to ~30-35x on ~$3.10-3.20 EPS
~$150-165
guidance achieved (EPS ~$3.13, ~15% revenue growth), multiple holds ~48-52x - roughly the current price; return driven by EPS growth thereafter
~$190-205
refresh runway extends into 2027, SASE stays ~30%, FY27 non-GAAP EPS ~$3.70 at a sustained ~52-55x premium multiple
At ~$158.67 (Jul 7, 2026 close) and ~$114-120B market cap, FTNT trades ~50x FY26 guided non-GAAP EPS ($3.10-3.16, midpoint $3.13) and ~14-15x EV/FY26 guided revenue ($7.71-7.87B; EV ~$112-117B net of ~$2.8B net cash) - a premium to CHKP/CSCO and comparable to PANW/high-growth peers despite a hardware-heavy mix. Reverse-DCF: the price implies high-teens FCF growth sustained ~10 years - i.e., the market is paying for the refresh wave to hand off cleanly to durable ~30% SASE/SecOps growth with no 2027 air pocket. That is possible (deferred revenue $7.35B at Q1 FY26 and services compounding support it) but leaves little room for a product-revenue rollover. Scenario prices below are illustrative multiple-x-EPS constructs, not price targets.
SWOT
Strengths
- Firewall unit-share leader (company-cited >50% of global units shipped) with a massive installed base to upsell
- Custom FortiASIC silicon delivers superior price/performance per watt vs software-on-x86 rivals - a structural cost advantage
- Single FortiOS operating system across firewall, SD-WAN, SASE, and switching reduces buyer tool sprawl
- Best-in-class profitability — ~80% gross margin, 35-36% non-GAAP operating margin, ~32% FCF margin, net cash balance sheet
- Founder-led (Ken Xie CEO, Michael Xie CTO) with long engineering-first track record and consistent Rule-of-45 execution
Weaknesses
- Hardware-heavy mix (~33% product revenue in FY2025) makes growth cyclical around refresh waves - the 2023-24 post-COVID digestion showed the downside
- Recurring history of exploited FortiOS/FortiGate CVEs (targeted by nation-state actors), a reputational and churn risk in the installed base
- Weaker position at the largest global enterprises and in premium SecOps (SIEM/XDR) vs Palo Alto Networks and CrowdStrike; SecOps is only 9% of billings
- SMB/mid-market and channel concentration exposes it to macro-driven small-business spending swings
Opportunities
- 2026-27 firewall refresh wave (FortiOS end-of-support) still has runway; installed-base conversion to higher-ARPU bundles
- Unified SASE share gains in a company-cited $79B, ~18% CAGR market as customers consolidate SD-WAN + security vendors
- OT/ICS and AI-infrastructure security (billings +70% YoY) — factories, utilities, and AI data centers need network segmentation
- Attach of AI-driven SecOps (FortiAI, SIEM/SOAR) onto the firewall base; sovereign/on-prem AI security demand
- MSSP and carrier channel expansion internationally
Threats
- Platform-consolidation war with Palo Alto Networks (aggressive platformization discounting) and Cisco/HPE bundling networking + security
- Cloud-native pure-plays (Zscaler, Cloudflare, Netskope) positioning hardware firewalls as legacy in a cloud-first world
- Post-refresh product-revenue air pocket in 2027 once the end-of-support wave completes - the setup that hurt the stock in 2023
- Tariffs/supply-chain and semiconductor sourcing risk for appliance BOM
- Valuation risk — the stock is up ~94% over 12 months (per market-cap trackers, early Jul 2026); any billings deceleration gets punished
Moats, dependencies & bottlenecks
Moats
Decades of ASIC iteration yields price/performance-per-watt rivals on merchant silicon or x86 cannot match; hard to replicate quickly
Company-cited >50% of firewall units shipped globally; FortiOS config, policies, and FortiGuard subscriptions make displacement costly
moderate-strong One OS across firewall/SD-WAN/SASE/switching underpins the convergence pitch; rivals stitch acquisitions
Deep two-tier channel (Exclusive Networks, Ingram Micro, TD Synnex) and carrier/MSSP reach, especially SMB/mid-market and international
Telemetry from millions of appliances feeds detection quality; shared by other large vendors, so relative not absolute
Dependencies
FortiASIC is fabless - dependent on third-party foundries (TSMC among others) and memory/merchant-silicon availability; tariff and geopolitics exposure
Ingram Micro, TD Synnex) Nearly all revenue flows through distributors/partners; top distributors are a meaningful share of billings
Current acceleration is tied to the FortiOS end-of-support wave; 2027 comps depend on converting hardware buyers to recurring bundles
Founder brothers run strategy and engineering; succession undefined publicly
partner/infrastructure Marketplace distribution and some SASE/cloud delivery ride hyperscaler infrastructure alongside owned PoPs
Advantages
- Lowest-cost producer in network security via custom ASICs - can win on price and still expand margins
- Both the network (SD-WAN, switching, AP) and the security in one vendor - the true single-vendor SASE claim
- Fortress balance sheet (net cash) plus ~32% FCF margin funding large buybacks
- OT/ICS security leadership as industrial and AI-infrastructure demand inflects
- Founder-led engineering culture with 20+ year consistency of execution (Rule of 45 again in FY2025)
Weaknesses
- Hardware cyclicality - growth is refresh-wave shaped, not linear
- Recurring exploited-CVE headlines on FortiOS/FortiGate edge devices
- Under-indexed to cloud-native and premium enterprise SecOps segments
- ~94% 12-month stock run leaves little valuation cushion for a guide-down
Bottlenecks
- Enterprise SecOps credibility — SIEM/XDR pillar is only 9% of billings, capping the platform-consolidation story vs PANW/CRWD
- SASE PoP footprint and cloud-delivery scale vs Zscaler/Cloudflare's much larger edge networks
- Appliance supply chain (foundry slots, components) gates how fast the refresh wave can ship
- Sales capacity in the largest global accounts, where Palo Alto and Cisco have deeper incumbency
Top signals & trends
Top signals
The key tell for a post-refresh air pocket; Q1 FY26 was +41%
+31% YoY in Q1 FY26 (25% of billings); sustaining ~30% validates the convergence share-gain thesis
+70% YoY Q1 FY26; small base but the fastest structural driver
Raised at Q1 to revenue $7.71-7.87B / billings $8.80-9.10B / EPS $3.10-3.16; further raises = cycle still building
Each mass-exploited edge-device vulnerability is churn and brand risk
Aggressive competitor bundles pressure win rates at renewal
$2.29B repurchased FY2025 + $823M in Q1 FY26 left well under $1B of the $10.25B aggregate authorization (through Feb 2027); another board increase would signal continued support under the stock
Trends
The proximate driver of 2026 acceleration; finite duration
Consolidation favors vendors owning both; Fortinet and Palo Alto are the main beneficiaries
High-throughput east-west inspection favors ASIC-accelerated appliances; also drives OT-adjacent AI-infrastructure protection
Grows Fortinet's SASE but structurally favors cloud-native pure-plays; hardware perceived as legacy by some buyers
Raises overall security spend but Fortinet devices are themselves a favored target
Fortinet is a category leader; billings +70% YoY
Ecosystem & competitor graph
Suppliers feed the company; customers pull from it. Line thickness shows the strength of each tie (supply-chain dependency, customer earnings contribution). Hover to isolate a tie.
Leading foundry for custom ASIC security processors (Fortinet is fabless)
Merchant switching/networking silicon in appliances
Memory/storage components in appliance BOM
GPU/accelerator partner for AI-driven security workloads and AI-infrastructure security designs
Carrier/MSSP channel delivering Fortinet-based managed security
Managed security services built on Fortinet SD-WAN/firewall
Orange Business - large international Fortinet MSSP
SMB-to-large enterprises and OT operators (utilities, manufacturing) Broad horizontal base; no single customer concentration - channel-mediated
Closest platform rival across firewall, SASE, and SecOps; competes via platformization bundling at large enterprises
Cloud-native SSE/SASE pure-play; the main alternative narrative to appliance-anchored SASE
Dominant in endpoint/SecOps where Fortinet is weakest; expanding toward network and exposure management
Networking incumbent bundling security (incl. Splunk) into enterprise agreements
Legacy firewall peer; slower growth but competes on installed-base renewals
Edge-network SASE/Zero Trust challenger with a massive PoP footprint
SSE specialist (Nasdaq IPO Sep 2025) strong in CASB/DLP-led SASE deals
Post-Juniper-acquisition networking + security bundle competitor in SD-WAN/campus
SD-WAN and SSE assets competing in parts of the SASE stack
Major network-security share in China and parts of EMEA/APAC; context only - excluded from US/allied markets and not investable for US-market readers