Fortinet, Inc. (FTNT) | The Buildout — AI Infrastructure
The Verdict
Fortinet sells the security enforcement and visibility layer that AI-era networks pass through. Its platform, the Fortinet Security Fabric, runs on a single operating system, FortiOS, and is accelerated by silicon the company designs itself, FortiASIC. That single-OS, single-vendor design is Fortinet's core claim: it argues competitors assemble point products, often through acquisitions, while Fortinet builds the pieces in-house. The AI-specific pitch is that east-west machine-to-machine traffic has to be inspected locally rather than hauled up to a cloud point of presence and back — and that high-throughput local inspection favors its own chips.
| Market Cap | — |
| Revenue (TTM) | $7.5B |
| Revenue Growth | +18.8% |
| EBITDA Margin (TTM) | 35.8% |
| Net Cash | $3.6B |
| Earnings Beats | 7 of 7 |
| P/E (TTM) | — |
| EV/EBITDA (TTM) | — |
What We Like
- Total billings and product revenue accelerated in two consecutive quarters: billings +31% to +33%, product revenue +41% to +52%, with two raises to FY2026 guidance in the same span.
- Record profitability against an unfavorable mix: Q2 non-GAAP gross margin 80.9% and non-GAAP operating margin 38%, up 490 bps year over year, while product revenue — the structurally lower-margin line — grew 52%.
- Two consecutive ~$1B free-cash-flow quarters: $1.01B in Q1 ($1.07B adjusted, 58% margin) and $966M in Q2 ($996M adjusted, 49% margin), with about $766M left on the buyback authorization through February 28, 2027.
- The service inflection has mechanical support: service billings +26%, total deferred revenue +17%, and remaining performance obligations of $7.45B at March 31, 2026, of which $3.76B is expected to be recognized within twelve months.
What We’re Watching
- Guidance implies deceleration into Q3: billings midpoint +27% versus Q2's +33%, revenue +19% versus +26%, and non-GAAP operating margin 35–37% versus the 38% actual.
- A high-single-digit price contribution is embedded in the second-half billings assumption, and management describes its margin policy as pass-through — "we want to maintain the same gross margin" — so that revenue component can reverse if memory costs fall.
- Service revenue grew 14% while product revenue grew 52%. Management called the first quarter of 2026 the trough, but the inflection is not yet visible in a print, and service revenue is recognized ratably over one to five years.
- The competitive set is broad — 12 vendors named in the 10-K, including Check Point, Cisco, CrowdStrike, Palo Alto Networks and Zscaler — and Fortinet's in-house-integration and unit-share claims are its own, not independently corroborated in the source set.
The weight of the evidence points to a strengthening thesis: product revenue, billings, operating margin and cash flow all improved sequentially, two guidance raises followed two quarters of accelerating demand, and the forward indicators — service billings, deferred revenue, purchase commitments — point the same way. What tempers it is composition. The second-half billings guide carries a high-single-digit price contribution that reverses with input costs, the durable service layer is still growing at 14%, and OT — the strongest structural growth line — stepped down from over 70% to over 55% without that deceleration being directly addressed. The open question is whether the product surge is genuine new demand or a refresh-and-price composite, and whether service revenue inflects in Q3 as promised.
Earnings Beat
Q2 FY2026, the June 2026 quarter, reported total revenue of $2.05B, up 26% year over year, on billings of $2.37B, up 33%. Product revenue was the standout at $773M, up 52%, driven by FortiGate unit growth and a mix shift toward higher-performing models. Non-GAAP gross margin was 80.9% against a GAAP gross margin of 80.2%. Non-GAAP operating margin set a Q2 record at 38%, up 490 bps year over year and above the high end of guidance. Free cash flow more than tripled to $966M.
| Metric | Q2 FY2026 | Q1 FY2026 | Q2 FY2025 | YoY |
|---|---|---|---|---|
| Revenue | $2.0B | $1.8B | $1.6B | +25.6% |
| Gross margin | 80.2% | 80.3% | 81.5% | -130bps |
| EBITDA | $731M | $714M | $495M | +47.6% |
| EPS | $0.82 | $0.72 | $0.57 | +44.0% |
| Total billings | $2.37B | $2.09B | n/a | +33% YoY |
| Product revenue | $773M | $645M | n/a | +52% YoY |
We believe the first quarter of 2026 marked the trough for our service revenue growth rate, and we anticipate a positive trajectory in our growth rates going forward.— Christiane Ohlgart, CFO, 2026-07-29
Management tone: From the Q1 call to the Q2 call, management's commentary on service revenue turned more definitive — from a hedged "pick up in the second half" to a stated view that the first quarter of 2026 marked the trough with a positive trajectory ahead. They raised the disclosed pricing assumption from low single-digit to approximately high single-digit, and introduced a new category name, "SASE Firewall," with a quantified claim that its addressable market is approximately 2 to 3x larger than cloud-only SASE, while noting the name may not stick. On durability they stayed narrative-heavy, and they declined to quantify 2027: "It's probably a little bit too early to give any number on the 2027." The sequential OT deceleration from over 70% to over 55% was not directly addressed.
Management Guidance
For FY2026 management guided billings of $9.35–9.55B (midpoint about +25%), revenue of $8.02–8.18B (about +19%), service revenue of $5.18–5.22B (about +14%), non-GAAP gross margin of 79–81%, non-GAAP operating margin of 35–37% and non-GAAP EPS of $3.41–3.47, with infrastructure investments of $350–550M, an 18% non-GAAP tax rate and $400–450M of cash taxes. For Q3 FY2026 it initiated billings of $2.25–2.35B (about +27%), revenue of $2.01–2.10B (about +19%), non-GAAP gross margin of 79–81%, non-GAAP operating margin of 35–37%, non-GAAP EPS of $0.83–0.87 on a share count of 741–745M, and infrastructure investments of $100–150M. The billings assumptions include approximately high-single-digit pricing impact for the second half; management said it is managing the remainder of the year on a quarter-by-quarter basis.
Trajectory
Revenue has moved in steps rather than a straight line: $1,725M in Q3 FY2025, $1,905M in Q4 FY2025, $1,850M in Q1 FY2026 and $2,048M in Q2 FY2026. Composition is the story. Product revenue grew 41% in Q1 and 52% in Q2, while service revenue grew 11% and then 14%, so the mix rotated toward hardware — the structurally lower-margin line. The audited spine reflects that: gross margin compressing while operating and EBITDA margins expand. Cash generation has been consistent, with $1.01B of free cash flow in Q1 and $966M in Q2, and trailing-twelve-month free cash flow covering net income at 194%.
The Model
The model projects FY+1 revenue of $8,250M with EBITDA of $2,970M, a 36.0% margin, and FY+2 revenue of $9,750M with EBITDA of $3,559M, a 36.5% margin. The near-term anchor is the raised FY2026 plan — revenue of $8.02–8.18B including service revenue of $5.18–5.22B — plus the product cycle and the SASE Firewall category build-out. The step to FY+2 depends on whether the product surge converts into attached services as the ratable schedule unwinds, and whether the AI data-center vector scales from 8-figure wins into a repeatable motion.
| Metric | FY2025 | Next FY (E) | Following FY (E) |
|---|---|---|---|
| Revenue | $6.8B | $8.2B | $9.8B |
| YoY Growth | — | +21.3% | +18.2% |
| EBITDA | $2.2B | $3.0B | $3.6B |
| EBITDA Margin | 32.9% | 36.0% | 36.5% |
Projections are the median of 5 independent model runs. The model’s revenue sits 12.9% above analyst consensus.
For FY2026 management guided billings of $9.35–9.55B (midpoint about +25%), revenue of $8.02–8.18B (about +19%), service revenue of $5.18–5.22B (about +14%), non-GAAP gross margin of 79–81%, non-GAAP operating margin of 35–37% and non-GAAP EPS of $3.41–3.47, with infrastructure investments of $350–550M, an 18% non-GAAP tax rate and $400–450M of cash taxes. For Q3 FY2026 it initiated billings of $2.25–2.35B (about +27%), revenue of $2.01–2.10B (about +19%), non-GAAP gross margin of 79–81%, non-GAAP operating margin of 35–37%, non-GAAP EPS of $0.83–0.87 on a share count of 741–745M, and infrastructure investments of $100–150M. The billings assumptions include approximately high-single-digit pricing impact for the second half; management said it is managing the remainder of the year on a quarter-by-quarter basis.
What Could Go Right — and Wrong
- Product revenue holds above 40% growth, indicating new deployment rather than refresh and price.
- Service revenue prints at or above 14% and accelerates, confirming management's trough call and rotating the mix back toward the roughly 87% service gross-margin line.
- The SASE Firewall category proves durable, keeps growing at the Q2 pace of 34%, and converts management's 2-to-3x larger addressable-market claim into win rates against cloud-only SASE.
- A second and third 8-figure AI data-center win, or a named reference architecture, turns the AI vector from a narrative into a measurable revenue stream.
- The Intel chip-manufacturing partnership produces a disclosed next-generation product on a stated node or timeline, converting the in-house-silicon claim into a multi-year supply-chain position.
- Product revenue growth falls back to the 20s, read either as the pull-forward management denies or as the price pass-through lapsing.
- The high-single-digit pricing contribution proves to be a large share of second-half billings growth and unwinds without any change in unit demand.
- A component shortage or a Taiwan supply disruption. Roughly 87% of hardware is manufactured in Taiwan, with sole or limited sources for CPUs, network chips and memory and no long-term contracts guaranteeing capacity or price.
- Cisco and Palo Alto Networks compete directly in the same firewall and SASE segment Fortinet is reframing.
- Channel or geographic concentration bites: Distributor A was 28% of March-quarter revenue, six distributors were 66% of net accounts receivable, and EMEA was 42% of Q1 FY2026 revenue.
Looking Ahead
Over the next twelve months the agenda is execution on the raised guide plus the promised 2027 disclosure. Management has said 2027 numbers will arrive in January or February, and the service revenue inflection it says began at the Q1 trough has to show up in Q3 or the second half. Alongside that sit the NVIDIA press release of 2026-05-12, the SASE Firewall category build-out around the FortiGate 1200G, and a buyback authorization running to February 28, 2027 with about $766M remaining.
- Q3 FY2026Q3 results vs raised guide — Tests service revenue inflection and whether product growth holds.
- Second half 2026Price pass-through plays out — High-single-digit price impact sits in 2H billings assumptions.
- January or February 20272027 guidance — Management declined to quantify 2027 on the Q2 call.
- February 28, 2027Buyback authorization expires — About $766M remained available as of the Q2 filing.
Financials
Annual Summary
| Metric | FY2024 | FY2025 | TTM | YoY |
|---|---|---|---|---|
| Revenue | $6.0B | $6.8B | $7.5B | +14.2% |
| Gross Margin | 80.5% | 80.9% | 80.4% | +43bps |
| EBITDA | $1.9B | $2.2B | $2.7B | +16.0% |
| EBITDA Margin | 32.3% | 32.9% | 35.8% | +51bps |
| Net Income | $1.7B | $1.9B | $2.1B | +6.2% |
| Free Cash Flow | $1.9B | $2.2B | $3.1B | — |
| Net Cash | — | — | — | — |
Key Ratios (Trailing)
- P/E TTM—
- EV/EBITDA TTM—
- EV/Revenue TTM—
- Price/FCF TTM—
- Gross Margin (TTM)80.4%
- EBITDA Margin (TTM)35.8%
- Net Margin (TTM)28.2%
- FCF Conversion115.7%
- SBC / Revenue3.9%
The Company
Fortinet sells network security: the firewalls, switches, access points and cloud-delivered services that inspect traffic entering, leaving and moving inside a network. Its platform, the Fortinet Security Fabric, has three pillars. Secure Networking converges networking and security on the FortiOS operating system. Unified SASE is a single-vendor secure access service edge spanning firewall, SD-WAN, secure web gateway, CASB, DLP and ZTNA. AI-Driven SecOps covers detect-and-respond tooling plus FortiGuard security services and FortiCare support. The company describes itself as "a leader in cybersecurity, driving the convergence of networking and security," with the mission "to secure people, devices and data everywhere."
Fortinet designs its key components in-house rather than manufacturing them itself. It develops FortiOS and FortiASIC; contract manufacturers build the appliances — named partners include Accton Technology, IBASE Technology, Micro-Star International, Senao Networks and Wistron Corporation — while ASICs are built by Toshiba America Electronic Components and Renesas Electronics America, using foundries operated by TSMC or by the contract manufacturer, in Taiwan and Japan. The 10-K states that approximately 87% of hardware is manufactured in Taiwan and that there are no long-term contracts guaranteeing capacity or pricing. Headquarters is in Sunnyvale, California — about 395,000 square feet on 21 acres — with regional operations in the United States (2,400 staff), Canada (1,000), EMEA (910) and APAC (40). Fortinet sells through technology distributors including Arrow Electronics, Exclusive, Ingram Micro and TD Synnex.
Business Segments
Competitive Landscape
Fortinet's 10-K names its competitive set: Check Point, Cisco, CrowdStrike, F5 Networks, Hewlett-Packard Enterprise, Huawei, Microsoft, Netskope, Palo Alto Networks, SonicWALL, Sophos and Zscaler. Management draws its own line — Fortinet is "very focused on the network security," in contrast to competitors it describes as endpoint-centric or assembled through acquisition, and it repeatedly claims in-house integration: "we are the only vendor to develop all key components of SASE Firewall in-house and integrate into a single operating system, FortiOS." The source set carries no third-party share data to test those claims; the only share metric it holds is management's self-reported "almost 60% market share on the unit shipment of the network security system."
- Palo Alto NetworksThe platform comparison analysts keep making; management reframes around network-security focus and in-house R&D versus competitors' acquisitions.
- CiscoNamed in filings; not discussed.
- CrowdStrikeManagement describes it as more endpoint-focused in contrast to Fortinet's network-security focus.
- Check PointNamed in filings; not discussed.
- ZscalerNamed in filings; not discussed.
Supply Chain
Fortinet designs its own silicon and operating system, contract-manufactures the hardware, sources components from a narrow supplier list, and sells through distributors. Intel is the supplier management singled out on the Q2 call as a U.S. chip-manufacturing partner — "we have a great partnership."
More on FTNT: Earnings recap