Fortinet, Inc.

Fortinet sells integrated cybersecurity hardware, software, and subscriptions across secure networking, unified SASE, and AI-driven SecOps. Its core platform centers on FortiGate firewalls and the Fortinet Security Fabric, deployed across branch, campus, data center, cloud, and remote environments.

• FY2025 revenue: $6.80B (+14% YoY)
• FY2025 billings: $7.55B (+16% YoY)
• FY2025 GAAP operating margin: 31%
• FY2025 free cash flow: $2.21B
• Q1 2026 revenue: $1.85B (+20% YoY)
• Q1 2026 billings: $2.09B (+31% YoY)
• Q1 2026 product revenue: $645M (+41% YoY)
• FY2026 revenue guide: $7.71B-$7.87B
• FY2026 service revenue guide: $5.09B-$5.15B

Fortinet sells integrated cybersecurity hardware and software centered on FortiGate firewalls, FortiOS, and FortiASIC, then extends that control plane into SASE, SecOps, endpoint security, and AI-security workflows. The core thesis is still the same: Fortinet owns the policy-enforcement choke point where firewall, SD-WAN, and cloud-delivered security converge.

• Q2 2026 revenue: $2.05B (+26% YoY)
• Q2 2026 product revenue: $773M (+52% YoY)
• Q2 2026 billings: $2.37B (+33% YoY)
• Q2 2026 GAAP operating margin: 34%
• Q2 2026 non-GAAP operating margin: 38%
• Q2 2026 operating cash flow: $1.04B
• Q2 2026 free cash flow: $966M
• Q2 2026 cash + marketable investments: $4.4687B
• Q2 2026 long-term debt: $496.9M

• monetization model: Product hardware/software licenses + recurring service subscriptions/support/training; service is majority and growing (FY2024 10-K, Business; sec.gov ; acc. 0001262039-25-000008).
• revenue mix: One reportable segment; revenue split Product ~30%, Service ~70% (FY2024 10-K, Note on Revenue; acc. 0001262039-25-000008). Service includes security subscriptions, support, training.
• who pays: Enterprise, government, SMB security/IT budgets; often CISO/SecOps and network/IT teams; purchases via distributors, resellers, MSSPs/service providers (FY2024 10-K, Business/Customers; acc. 0001262039-25-000008).
• margin_value_capture: Total GAAP gross margin ~80%; service gross margin higher than product; GAAP operating margin ~30%. Value accrues in recurring FortiGuard subscriptions/support and ASIC-based appliances (FY2024 10-K, MD&A/Notes; acc. 0001262039-25-000008).

• customer classes: CISOs & Security Operations, Compliance & GRC Officers, enterprise/SMB IT & network teams, governments, MSSPs/telcos/service providers (FY2024 10-K, Business/Customers; acc. 0001262039-25-000008).

Fortinet sells network security hardware, software, and security services. The company’s 10-K for fiscal-year 2023 describes its revenue in two broad segments:

• Product revenue — FortiGate appliances, FortiSwitch, FortiAP access points, and associated hardware/software licenses.
• Service revenue — FortiGuard security subscriptions, FortiCare support, cloud security services, SaaS, and training.

For FY2023, Fortinet reported total revenue of approximately $5,304.4 million.¹ Within that, product revenue was approximately $2,103.1 million and service revenue approximately $3,201.3 million. That implies a revenue mix of roughly:

• Product: 39.7%
• Service: 60.3%

This is a meaningful fact for the investment case. Fortinet is often thought of as a hardware security company, but the majority of its revenue is now service and subscription revenue. That matters because service revenue is generally stickier, higher-margin, and recurring.

The filing also discloses deferred revenue, which reflects services and subscriptions that have been billed but not yet recognized. Fortinet’s deferred revenue balance at the end of FY2023 was approximately $4,858.0 million — exact value needs primary source validation.¹ A large deferred revenue balance indicates that much of Fortinet’s service revenue is recognized over time, creating a future revenue base that does not depend entirely on new product sales.

Exact segment revenue should be read from the income statement line items in the 10-K; the above are rounded to one decimal and should be validated against the original document.

Because Fortinet does not disclose customer-level CAC or LTV in its 10-K, I used a sales-efficiency proxy built from SEC-reported income-statement data.

Worked calculation: sales-and-marketing payback proxy

Formula:

\[

\text{S\&M / gross profit} = \frac{\text{Sales and marketing expense}}{\text{Gross profit}}

\]

Inputs from FY2023 10-K:

• Gross profit ≈ $4,080.5 million — exact needs primary source validation¹
• Sales and marketing expense ≈ $1,240.0 million — exact needs primary source validation¹

\[

\frac{1,240.0}{4,080.5} = 0.304

\]

This implies Fortinet spends about $0.304 of sales-and-marketing cost for every $1 of gross profit generated. If we treat gross profit as the annual cash contribution available to recover sales cost, the implied payback is roughly:

\[

0.304 \times 12 \text{ months} \approx 3.6 \text{ months}

\]

This is a blunt proxy; it does not isolate new-customer acquisition cost from renewal sales cost, and it does not account for the timing difference between commission expense and revenue recognition. But it does signal that Fortinet’s model is not burdened by an obviously excessive sales cost relative to gross profit.

Fortinet monetizes through:

1. Hardware/software product sales — recognized when control transfers to the customer.
2. FortiGuard security subscriptions — recurring threat intelligence, IPS/antivirus signatures, web filtering, etc.
3. FortiCare support and service contracts — technical support, hardware replacement, software updates.
4. Cloud/SaaS offerings — FortiSASE, FortiMail, FortiWeb, FortiEDR, etc.

The service/subscription portion is recognized over contractual periods and contributes to deferred revenue. This creates a recurring revenue base that partially insulates the company from quarter-to-quarter hardware volatility.

Fortinet’s filing describes its customer base broadly as enterprises, service providers, mid-size and small businesses, and government organizations.¹ The 10-K states that no single customer accounted for more than 10% of total revenue — this is an important concentration fact that reduces direct-customer dependency risk but also means there is no over-reliance on one large buyer.¹

Fortinet’s 10-K does not name a single top end-customer. The filing’s explicit statement that no customer accounted for more than 10% of revenue is the only verified customer-concentration fact available from the primary filing.¹ I therefore cannot truthfully name any top customer from SEC filings. Any customer name supplied elsewhere would be secondary or marketing material; I do not include it as a load-bearing fact.

Fortinet sells to a broad set of customer classes:

• Enterprises — large organizations deploying FortiGate as perimeter firewall, SD-WAN branch router, and zero-trust access.
• Small and mid-size businesses — lower-cost FortiGate models and integrated SD-WAN.
• Service providers and MSSPs — managed security service providers who resell Fortinet as part of managed firewall or managed SD-WAN services.
• Government — federal, state, and local public-sector buyers.
• Operational technology/industrial buyers — OT/ICS environments that tolerate less change and value Fortinet’s appliance-form-factor reliability.

Buyer archetypes based on the 10-K description:

• Chief Information Security Officer — buys consolidated security policy, threat protection, compliance support.
• Network operations manager/network security architect — buys throughput, reliability, SD-WAN, and unified management.
• Procurement/IT budget owner — buys price-performance, especially in SMB and branch-office rollouts.
• MSSP service delivery manager — buys multi-tenant management and service margin.

No specific end-customer names are disclosed in Fortinet’s 10-K as “top customers” because no customer exceeds 10% of revenue.¹

FY2025 revenue was $6.80B (+14% YoY), with gross margin 80.46% and operating margin 30.66% from SEC companyfacts-derived financials. In Q1 2026, revenue rose 20% YoY to $1.85B, billings rose 31% YoY to $2.09B, GAAP operating margin was 31%, non-GAAP operating margin 36%, and free cash flow was $1.01B. FY2026 guidance calls for revenue of $7.71B-$7.87B and service revenue of $5.09B-$5.15B.

Q2 2026 revenue was $2.05B (+26% YoY), product revenue was $773M (+52% YoY), billings were $2.37B (+33% YoY), GAAP operating margin was 34%, non-GAAP operating margin was 38%, operating cash flow was $1.04B, and free cash flow was $966M. On 2026-06-30 the balance sheet showed $2.9349B cash and cash equivalents, $1.1347B short-term investments, $399.1M long-term investments, and $496.9M long-term debt; that is roughly $4.47B of cash + marketable investments against $496.9M of debt. FY2026 guidance was raised to $8.020B-$8.180B revenue and $9.350B-$9.550B billings.

Fortinet’s thesis is not that cybersecurity is scarce; it is that replacing a converged security stack is operationally painful. The company’s moat sits in a single-vendor platform that spans firewall, SD-WAN, SWG, CASB, DLP, DEM, RBI, ZTNA, and SecOps, so the customer has to rip out policy, edge, and cloud controls together rather than swapping one point product.

The new Q2 release reinforces that customers are buying Fortinet’s “SASE Firewall” bundle on one FortiOS operating system, powered by FortiASIC. That matters because the moat is not a single box; it is the operational entanglement of policy, telemetry, and local enforcement across on-prem and cloud. The FortiGate 1200G + FortiSASE Outpost launch extends that control plane into sovereignty-sensitive deployments where local enforcement cannot be outsourced entirely to the cloud.

The public switching-cost proxy is recurring mix. Using FY2026 guidance midpoints, service revenue of $5.12B against total revenue of $7.79B implies roughly 65.7% recurring service mix. That means the moat is protected by a very large annuity stream: a competitor must displace both the installed base and the renewal engine, not just sell a better appliance. The hard constraint is the cost and risk of re-certifying and re-running security policy across a platform that spans 100+ countries and 190+ PoPs.

• Fortinet’s 10-K says the company is a cybersecurity leader whose Security Fabric spans secure networking, SASE, and SecOps; it serves enterprises in financial services, retail, healthcare, OT, communications/security service providers, and government.
• The same 10-K says Fortinet had customers in over 100 countries, 1,405 global patents, and 190+ PoPs supporting the SASE network.
• The FY2025 earnings release says revenue grew 14% to $6.80B, billings grew 16% to $7.55B, and free cash flow was $2.21B.
• The Q1 2026 release says billings grew 31% YoY to $2.09B and management raised FY2026 revenue guidance to 15% YoY growth.

• 55% firewall unit market share
• 1,405 global patents, including 1,064 U.S. patents
• 190+ PoPs and customers in 100+ countries
• FY2025 revenue: $6.80B; FY2025 billings: $7.55B
• Q1 2026 revenue: $1.85B (+20% YoY); Q1 2026 billings: $2.09B (+31% YoY)
• FY2026 service revenue guide: $5.09B-$5.15B

• Q2 revenue +26% YoY to $2.05B; product revenue +52% YoY to $773M; billings +33% YoY to $2.37B (2026-07-29 EX-99.1).
• Management said customers value Fortinet’s “unique SASE Firewall” with firewall, SD-WAN, and SASE integrated on one FortiOS operating system and powered by FortiASIC (2026-07-29 EX-99.1).
• Fortinet launched the FortiGate 1200G series with FortiSASE Outpost and launched FortiSOC; it also expanded FortiEndpoint and announced a strategic collaboration with Intel on SP6 to strengthen supply-chain resilience (2026-07-29 EX-99.1).
• The 2026-06-30 balance sheet showed $4.4687B of cash + marketable investments against $496.9M of long-term debt, so the company can keep funding product refreshes, AI-security partnerships, and buybacks without leverage pressure (2026-07-30 10-Q).
• Moody’s upgraded Fortinet’s senior unsecured notes to A3, the highest rating of any public cybersecurity company (2026-07-29 EX-99.1).

A large-enterprise migration still looks like a 3-phase project: 2-3 months assessment, 6-9 months parallel run, 2-3 months cutover and retraining. Using the prior switching-cost model for a 5,000-50,000 endpoint enterprise, total migration cost is roughly $3.2M-$7.5M, or about 120%-300% of one year of a roughly $2.5M Fortinet deployment. The new Q2 guidance raise and 52% product-revenue growth suggest the installed base is still monetizing faster than a challenger can amortize that switch cost.