FTNT Fortinet 10-Q 2026-09-30 section summaries

Fortinet — Q3 and nine months ended September 30, 2026

Consolidated results

Dollars in millions, except per-share data. Q3 and 9M are compared with the corresponding 2025 periods.

Revenue grew 20.5% in Q3 and 22.1% in 9M. Product revenue growth accelerated to 36.8% in Q3 from 42.9% for 9M, while service revenue grew 12.7% and 12.6%, respectively. Q3 gross margin eased to 79.0% from 80.8%, although operating income rose 28.7% and net income 34.1%. The company has one reportable segment; segment net income was $635.5 million in Q3 2026 versus $473.9 million in Q3 2025.

Geographic revenue

Dollars in millions; Q3 only.

EMEA was the largest region, growing 23.4% in Q3; its 9M growth was 26.3%. Distributor concentration was significant: three distributors accounted for 27%, 14%, and 12% of Q3 revenue (27%, 14%, and 12% in Q3 2025). They represented 26%, 12%, and 12% of September 30 net receivables; the largest represented 32% at year-end 2025.

Cash flow and capital allocation

Dollars in millions; 9M only.

Operating cash flow benefited from an $817.8 million increase in deferred revenue, compared with $288.1 million in 9M 2025, and was partly offset by $370.1 million of deferred contract cost outflows. Shares outstanding declined from 743.0 million at the start of 9M 2026 to 734.6 million at September 30; the comparable 2025 period began at 767.0 million and ended at 742.9 million. Repurchases averaged $77.73 per share, excluding $5.1 million accrued excise tax. About $765.8 million remained under the program at quarter-end; subsequent authorization increases brought total authorization to $11.48 billion through February 28, 2028, with about $2.0 billion available October 29.

Stock-based compensation expense was $82.0 million in Q3 versus $72.2 million and $236.0 million in 9M versus $209.0 million. Unrecognized compensation was $592.2 million for unvested RSUs/PSUs and $50.1 million for options. Outstanding awards included 7.7 million RSUs and 5.5 million options; potentially dilutive awards added 8.4 million shares to Q3 diluted shares. The equity plan had 45.8 million shares available for grant.

Balance sheet and obligations

Dollars in millions; September 30, 2026 compared with December 31, 2025.

Other intangible assets comprised developed technologies ($51.7 million), customer relationships ($18.5 million), trade names ($2.7 million), and backlog ($1.5 million). Goodwill additions were $16.3 million; no impairment was recorded. Inventory growth included finished goods of $464.3 million (from $334.6 million) and raw materials of $123.6 million (from $61.9 million); the excess and obsolete reserve declined to $123.3 million from $137.5 million. Write-downs were not material.

Deferred revenue was $7,934.4 million, up from $7,115.8 million at year-end. Remaining performance obligations were $7.98 billion, including approximately $3.98 billion expected within 12 months and $3.18 billion in years two and three. Fortinet recognized $2.93 billion of 9M revenue from opening deferred revenue, versus $2.61 billion in 2025.

The company repaid $500.0 million principal of its 1.0% 2026 notes at maturity. Remaining debt was $500.0 million principal of 2.2% 2031 notes, carried at $497.1 million after unamortized discount and issuance costs; estimated fair value was approximately $432.0 million, including accrued interest. No financial covenants apply. Nine-month interest expense on the notes declined to $10.0 million from $13.5 million.

Inventory purchase commitments with contract manufacturers totaled $1.9295 billion, including $1.1445 billion allocated to 2026 and $785.0 million thereafter; a significant portion is firm, non-cancelable, and unconditional. A $30.3 million liability covered commitments exceeding forecast demand, versus $26.7 million at year-end. Other non-cancelable commitments over one year were $134.1 million, in addition to $63.4 million of operating-lease payment commitments.

Other material developments and risks

Fortinet acquired an AI security business for $13.4 million cash in Q3. For 2025 acquisitions, Linksys accounting included a $10.8 million remeasurement gain and a $39.9 million bargain-purchase gain, primarily from deferred tax assets; a related $30.6 million deferred tax asset was later derecognized through tax expense. Fortinet also acquired U.S. and Brazilian real estate for $95.8 million for future data-center and office expansion. In October, it agreed to buy approximately 204,000 square feet of Tokyo real estate for $136.8 million cash, excluding acquisition costs.

The Q3 effective tax rate fell to 16% from 20% (9M: 17% versus 18%), mainly reflecting higher FDDEI deductions and stock-compensation tax benefits. Unrecognized tax benefits rose to $96.2 million from $90.4 million; $78.5 million would favorably affect the effective tax rate if recognized. Audits focus primarily on intercompany profit allocation. Nine-month other income included a $50.7 million gain on the sale of marketable equity securities; available-for-sale investments had $7.5 million of gross unrealized losses at quarter-end.

A consolidated securities class action alleges misleading statements about Fortinet’s business and prospects, including the 2026 firewall refresh cycle. The company disputes the claims; the outcome and potential impact cannot be estimated, and no loss accrual was recorded. Related derivative litigation is stayed. An Alorica plaintiff appealed a jury verdict for Fortinet; no accrual was recorded. Indemnification provisions may expose the company to losses beyond contract value, sometimes without a cap.

Fortinet (FTNT) — Q3 and nine months ended September 30, 2026

Fortinet’s growth was led by products, with revenue up 20% in Q3 and 22% for the first nine months. Product growth was faster year to date than in the quarter, while service revenue grew 13% in both periods. Revenue growth reflected demand for higher-performance products, pricing actions and increased shipments, alongside continued recognition of deferred service revenue. Operating income grew faster than revenue as expenses rose more slowly, even as a shift toward lower-margin products weighed on gross margin.

Consolidated results

Gross-profit figures are reported at the precision provided in the filing summary.

Q3 product revenue growth was 37%, compared with 43% for 9M; service revenue grew 13% in both periods. Product demand benefited from AI-infrastructure deployments, technology upgrades, upselling and new use cases, particularly in secure networking hardware and term licenses. Higher hardware average selling prices reflected demand for higher-performance products and pricing actions. Management expected product revenue to continue growing year over year through the rest of 2026.

Service revenue growth was supported by deferred revenue recognition, FortiGuard subscriptions, FortiCare, and demand for SaaS offerings including Unified SASE and SecOps. Security subscriptions increased 12% in both periods—by $81.6M in Q3 and $237.8M in 9M—while technical support and other services grew 13%, increasing $66.2M and $187.7M, respectively. Management also expected service revenue to continue growing year over year through year-end.

Geographic revenue

All regions grew. EMEA had the largest dollar increase in both periods; growth rates were 23% in Q3 and 26% in 9M. Q3 growth was 21% in the Americas and 14% in APAC; 9M growth was 20% and 17%, respectively. Five countries generated approximately half of Q3 billings; the other half came from more than 100 countries, each contributing less than 3%.

Profitability, cash flow and billings

Product mix pressured gross margin. Q3 product gross margin declined to 64.4% from 67.7%, principally reflecting higher memory-chip costs and inventory-reserve expense, partly offset by pricing actions. Service gross margin improved to 87.4% from 87.0%, as service growth outpaced labor-cost increases. For 9M, product gross margin was 67.3% versus 67.5%, while service gross margin was 87.0% versus 86.8%. Management expected higher hardware-component costs to weigh on full-year product gross margin, with service margin relatively consistent. It expected current U.S. tariffs to have no meaningful gross-margin impact, but noted future trade-policy changes could affect margins.

Operating expenses grew 11% in Q3 and 12% for 9M, slower than revenue growth. Q3 R&D was $213.4M versus $202.4M, sales and marketing was $665.0M versus $583.5M, and G&A was $59.6M versus $61.4M. Higher sales and marketing expense mainly reflected $71.4M of additional personnel costs. Expenses declined as a share of revenue, supporting operating leverage. Management expected full-year operating margin to increase slightly from 2025, while operating expenses rise in absolute dollars to support product development, sales and marketing, data centers and real estate.

Free cash flow includes a $17.0M escrow-proceeds deduction in 2026; the 9M 2025 figure includes a $14.0M IP-proceeds deduction. 9M operating cash-flow growth reflected improved profitability and working-capital management, including a $493.6M increase in non-current deferred revenue and a $370.1M increase in deferred contract costs, primarily sales commissions. Billings reconcile to revenue plus the change in deferred revenue, less acquired deferred revenue.

Liquidity, capital allocation and risks

At September 30, 2026, cash, cash equivalents and investments totaled $5.3184B, versus $3.9222B at December 31, 2025; working capital was $2.0205B, up from $866.2M. Deferred revenue was $7.9344B, including $3.96B short term, providing a substantial base for future revenue recognition. Fortinet repaid the $500.0M principal of its 2026 Senior Notes at maturity in March; remaining long-term debt had a $497.1M carrying value. Management said liquidity was sufficient for at least 12 months and estimated 2026 capital expenditures of $390M–$420M.

Fortinet repurchased 12.5M shares for $972.8M during 9M. Its authorization was increased to $11.48B through February 28, 2028, with approximately $2.0B available as of October 29. Inventory purchase commitments rose to $1.93B from $810.6M at year-end; the related excess-commitment liability was $30.3M versus $26.7M. These commitments secure supply amid demand growth and component-cost increases, but create exposure to supply constraints, obsolescence and changes in customer requirements.

Fortinet positions its integrated Security Fabric around Secure Networking, Unified SASE and AI-Driven SecOps, supported by FortiOS, FortiASIC, FortiCloud, FortiAI and FortiGuard. Its SASE network has more than 200 points of presence, and the company plans to accelerate data-center and PoP deployment. Key risks include competition, macroeconomic and geopolitical volatility, tariffs, memory-chip shortages, inventory and demand forecasting, sales-cycle variability, and the costs and execution risks of adapting to cloud and AI solutions. Management said pricing actions may not fully offset component-cost increases and could affect demand.

For the nine months ended September 30, 2026, Fortinet reported no material changes in market risk compared with its disclosures in the Form 10-K filed February 25, 2026. The section provides no new market-risk metrics or developments.

As of September 30, 2026, Fortinet’s CEO and CFO concluded that disclosure controls and procedures were effective in providing reasonable assurance that required information was recorded, processed, summarized, reported on time, and communicated to support disclosure decisions. No changes during the quarter ended September 30, 2026 materially affected, or were reasonably likely to materially affect, internal control over financial reporting.

Fortinet (FTNT) — Part II, Item 1A: Risk Factors

Fortinet’s principal risks concern execution and demand, cybersecurity and product reliability, supply-chain concentration, competitive and pricing pressure, and its ability to meet expanding regulatory and customer requirements. The combined effect could weaken revenue growth, margins, cash flow, or investor confidence.

Operating performance, demand and competition

Quarterly results can fluctuate with order and shipment timing, backlog conversion, product and service mix, pricing, renewals, sales execution, supply availability, and revenue-recognition timing. Sales and shipments are often concentrated in the final two weeks of a quarter, so logistics, order-processing, manufacturing, power, or system disruptions can shift deliveries or billings into a later period. Because some operating expenses are fixed in the near term, a revenue shortfall can disproportionately pressure margins. Fortinet’s significant sales and marketing investments may also fail to produce expected growth.

Macroeconomic weakness, inflation, interest-rate changes, geopolitical conflict, reduced IT or government spending, and weaker customer budgets could lengthen sales cycles, delay purchases, reduce unit sales or prices, and increase costs. Enterprise and government deals can take more than 12 months and involve extensive discounting, approvals, support, and certification requirements. Missing certifications, including FedRAMP where required, may exclude Fortinet from government opportunities.

Competition may intensify from larger vendors with broader portfolios and bundling power, cloud-delivered providers, AI companies, and specialized security vendors. Customers may add competitors’ products rather than replace existing infrastructure, or favor bundled security features and established vendor relationships. Fortinet’s integrated appliances may be viewed as less suitable than best-of-breed offerings or as a single point of failure. These dynamics, recent product price reductions, discounting, product mix, currency movements, and lifecycle pricing could reduce selling prices, gross profit, and operating margins.

Subscriptions and support are important revenue sources, but are generally recognized ratably over one-to-five-year terms. Current reported revenue therefore largely reflects contracts signed in earlier periods: weaker new sales or renewals may affect revenue with a delay, while growth in service sales also takes time to appear in reported revenue.

Cybersecurity, products and cloud transition

Defects, vulnerabilities, missed threats, false positives, or ineffective updates can expose customer networks, interrupt operations, and lead to lost sales, remediation costs, litigation, regulatory scrutiny, and reputational damage. Customers may delay patches or continue using unsupported products, while increasingly sophisticated threats—including AI-enabled attacks—may be harder to anticipate. Fortinet itself is a high-value target: attacks on its corporate, operational, R&D, data-center, cloud, or third-party systems could compromise information or disrupt FortiGuard and FortiCare services. The company has described prior targeting attempts involving technical data, private encryption keys, and vulnerabilities.

Fortinet invests substantially in product development and promotion, but new offerings may not gain acceptance or arrive on schedule. Rapid technology changes, evolving customer needs, product defects, interoperability issues, and competitors could prevent the company from recovering those investments. Although customers and competitors are moving toward cloud-based security, much of Fortinet’s platform remains on-premises. Expanding cloud delivery requires investment in infrastructure and personnel and creates execution, service-level, and demand risks. Cloud availability also depends on third-party providers, including AWS, Microsoft Azure, and Equinix.

Supply chain and operating infrastructure

Fortinet outsources hardware manufacturing to a limited group of partners, and individual product lines are generally made by one partner. Approximately 83% of hardware was manufactured in Taiwan in the three months ended September 30, 2026. Geopolitical tensions, trade restrictions, natural disasters, labor disruptions, or shipping interruptions could therefore constrain supply. Fortinet also relies on limited sources for key components and ASICs; purchase orders do not guarantee manufacturing capacity, and replacing suppliers can take time.

The company reports memory-chip constraints amid shortages associated with AI infrastructure build-out. It has increased purchase commitments in response to supply constraints and longer lead times, creating risk of excess or obsolete inventory if demand, product requirements, or forecasts change. Shortages can delay shipments and lose sales; excess commitments can result in write-downs, discounting, storage costs, and pressure on margins and cash flow. Fortinet is implementing price increases to mitigate higher hardware costs, but these may reduce demand or fail to offset costs. Middle East conflict and other disruptions may also lengthen shipping routes and raise freight and insurance costs.

Data-center and office construction or expansion expose Fortinet to delays, labor and equipment shortages, permitting and utility constraints, cost overruns, and underutilization. System limitations, manual processes, and quarter-end order volumes can also disrupt fulfillment, forecasting, revenue recognition, and reporting.

Financial, counterparty and capital risks

Substantially all revenue is generated through channel partners, with significant exposure to a limited number of distributors. As of September 30, 2026, one distributor represented 26% of net accounts receivable, and six distributor customers that purchase directly from Fortinet represented 63% in aggregate. Partner financial distress, operational disruption, competing priorities, excess inventory, or failure to comply with laws could impair orders, collections, and customer relationships.

Fortinet had $497.1 million of Senior Notes outstanding as of September 30, 2026, and may incur additional debt. Debt service, covenants, refinancing conditions, ratings changes, or change-of-control repurchase obligations could constrain liquidity and investment flexibility.

The board increased the share repurchase authorization by $1.0 billion in January 2026 and $1.23 billion in October 2026. Total authorization is $11.48 billion, with approximately $2.0 billion available as of October 29, 2026, and the program runs through February 28, 2028. Repurchases can reduce funds for operations, investment, or acquisitions and may occur at unfavorable prices. Fortinet’s share price ranged from $75.23 to $178.76 during the nine months ended September 30, 2026.

Legal, regulatory, tax and other exposures

Fortinet faces evolving privacy, cybersecurity, export-control, sanctions, government-contracting, environmental, and product requirements. GDPR, CCPA/CPRA, NIS2, DORA, the EU Data Act, and the phased-in Cyber Resilience Act may raise compliance costs, require product or process changes, complicate data transfers, or delay releases. Environmental rules may require redesign, component substitution, packaging changes, or data-center upgrades; Fortinet says related expenditures have not materially affected operating results or cash flows to date, but expects further costs. Litigation and investigations—including patent, product-liability, securities, employment, and commercial matters—could result in legal costs, damages, restrictions, or reputational harm.

A significant portion of operating expenses is denominated in foreign currencies, while sales are primarily in U.S. dollars; Fortinet has no material hedging activities. Tax outcomes are uncertain due to geographic profit mix, audits, transfer-pricing challenges, and changing laws, including ongoing audits in the U.K., Canada, and Germany. Accounting estimates, new standards, and fair-value changes in marketable equity investments may also affect reported results; investment fair-value changes are recognized in net income. Management concluded internal control over financial reporting was effective as of December 31, 2025.

Other risks include dependence on key executives and skilled employees, intellectual-property claims and open-source licensing obligations, acquisition integration or impairment, AI-related security, privacy and competitive disruption, and natural-hazard exposure at key facilities and in Taiwan.

Rule 10b5-1 Trading Plan

On August 31, 2026, Fortinet director Janet Napolitano adopted a Rule 10b5-1 trading plan intended to qualify for the rule’s affirmative defense. The plan permits potential sales between November 30, 2026 and December 3, 2027 of up to 390 Fortinet common shares, plus up to 60% of additional net shares she receives from restricted stock units after shares are withheld for taxes. The number of additional shares is not yet determinable.

Napolitano represented that, on the plan’s adoption date, she was not aware of material nonpublic information about Fortinet or the securities covered by the plan. That representation does not cover information of which she was unaware or information acquired by her or Fortinet after August 31, 2026. Transactions under the plan will be publicly disclosed through Form 4 and/or Form 144 filings. Except as required by law, Fortinet disclaims an obligation to report modifications, termination, or other activity under this or other Rule 10b5-1 plans adopted by its directors, officers, or affiliated entities.