WillItSurvive
Cybersecurity companies · United States

Fortinet

Fortinet sells firewalls and network security hardware built on custom chips, used by 680,000+ customers.

Hard to displace
Assessed 21 July 2026 · Evidence as of 21 July 2026
Strong structural protection; the business model survives ai pressure.
On the recordSince 21 July 2026 · Checkable from July 29, 2026 · Every call on the record Checkpoint: Q2 2026 earnings report
The call

Four security incidents in 2026 test the trust that big customers pay for, while revenue growth has kept accelerating through the disclosures so far.

Fortinet makes security boxes (called FortiGate appliances) that sit between a company's network and the internet to block attacks and filter traffic. The company is hard to replace because it has 680,000 customers already using its boxes, 20+ years of data about what threats look like, and special computer chips it built itself, plus it holds government certifications that take years to earn. However, Fortinet had four separate security problems in the first half of 2026 (hackers found ways into its own products), which is concerning because companies and governments buy from Fortinet specifically to trust it with their security, and if that trust breaks, they may switch to rivals like Palo Alto Networks. The key thing to watch is whether Fortinet's revenue growth stays strong through the next few quarters (which would mean customers are staying) or slows down (which would signal customers are leaving because of the hacks).

Why
01
AI pressure: AI-native SOC startups like Cycode. AI can automate alert triage and commoditize signature detection, but Fortinet is shipping its own agentic SOC and AI endpoint tools to keep pace. Could AI do the core job? Unlikely.
02
Bigger players: Palo Alto Networks and Microsoft. Palo Alto is bundling platforms via its CyberArk deal and Microsoft folds security into E5 licenses, pressuring price but not yet taking network hardware share. Could a giant copy it? No, they are blocked.
03
What protects it. Custom ASIC firewalls plus 20 years of threat data across 680,000 customers are hard to rip out or replicate quickly.
What would change this call
Q2 2026 earnings on July 29, 2026 versus $1.886B consensus revenue. Shows whether growth is decelerating against tough prior-year comparisons.
A fifth security incident or CVE disclosure in H2 2026 following the four 2026 events. Would indicate the breach pattern is escalating rather than contained.
Any public statement from a Fortune 500 or government customer citing the breaches when switching vendors. Would show the trust/compliance pillar is actually eroding customer retention.
Key numbers
  • $1.85B Q1 2026 revenue, up 20.1% YoY (2026-03-31)
  • $118.4B market cap (2026-07-18)
  • 680,000+ customers worldwide (2026-10-12)
Named risks
  • Four distinct security incidents in 2026 including FortiBleed credential exposure of ~74K-86.6K devices. Severity: high
  • Two FortiSandbox RCE flaws added to CISA KEV July 17, 2026 with tight federal patch deadline. Severity: high
  • Q2 2026 earnings (July 29) face tough YoY comps that could reveal growth deceleration. Severity: medium
  • Palo Alto Networks consolidating adjacent categories via CyberArk deal could pressure identity/PAM positioning. Severity: medium
  • HSBC downgraded FTNT to Reduce in late June 2026 amid otherwise bullish analyst sentiment. Severity: low
Rivals, as read in July 2026
RivalDirectionEvidence
Palo Alto NetworkscontestingAnnounced ~$25B CyberArk acquisition Aug 2025 to consolidate identity security against Fortinet's IAM/PAM push
CiscocontestingCompetes via Meraki/Secure Firewall but described as having wrong channel/pricing versus Fortinet's ASIC advantage
MicrosoftcontestingBundles security into E5 licenses, pressuring software margins but not Fortinet's ASIC-based network enforcement
ZscalercontestingCompetes in SASE/cloud security; Fortinet counters with Unified/Sovereign SASE billings up 31% in Q1 2026
AI-native SOC startups (e.g. Cycode)contestingCommoditizing signature-based detection and first-line triage as of May 2026, prompting Fortinet's FortiSOC launch
Questions people ask
Is Fortinet profitable in 2026?
Yes. Fortinet reported FY2025 revenue of $6.80 billion with net income of about $1.85 billion, and Q1 2026 revenue hit $1.85 billion, up 20.1% year over year, with EPS of $0.82 beating the $0.62 consensus, as of March 31, 2026.
What is Fortinet's biggest competitor?
Palo Alto Networks is Fortinet's closest rival, having announced an approximately $25 billion CyberArk acquisition in August 2025 to consolidate identity security. Cisco, Check Point, Zscaler, Cloudflare and Cato Networks also compete, but none has visibly taken share from Fortinet's core network security business as of mid-2026.
Could AI replace Fortinet's security products?
Unlikely soon. AI-native SOC tools like Cycode can commoditize signature-based detection and first-line triage, but Fortinet's ASIC hardware base, FortiGuard telemetry since 2005, and 680,000-plus customer relationships are hard to replicate. Fortinet is also shipping its own agentic-AI FortiSOC platform, launched in 2026.
Has Fortinet had security breaches in 2026?
Yes, four distinct incidents in 2026: a January authentication-bypass flaw (CVE-2026-24858), a mid-June 'FortiBleed' credential exposure of roughly 74,000 to 86,644 FortiGate devices across 194 countries, and two FortiSandbox remote-code-execution flaws added to CISA's KEV list on July 17, 2026.
Who owns Fortinet?
Fortinet is an independently traded public company on Nasdaq under ticker FTNT, with a market capitalization of roughly $118.4 billion as of July 18, 2026. Co-founders Ken Xie (Chairman/CEO) and Michael Xie (President/CTO) remain in leadership, though both have made regular insider stock sales in 2026.
What is Fortinet's revenue guidance for 2026?
Fortinet raised its FY2026 guidance to revenue of $7.71 to $7.87 billion, about 15% growth at the midpoint, and billings of $8.8 to $9.1 billion, about 18% growth at the midpoint, according to guidance cited July 9, 2026, ahead of its July 29, 2026 earnings report.
Timeline
  • 2026-07-17CISA adds two actively exploited FortiSandbox RCE flaws to KEV list with July 19 patch deadline
  • 2026-07-14Fortinet expands FortiEndpoint with AI governance and DLP features, GA targeted for Q3 2026
  • 2026-06-18CISA alert on 'FortiBleed' credential exposure affecting ~74K-86.6K FortiGate devices
  • 2026-03-31Q1 2026 revenue reaches $1.85B, up 20.1% YoY, product revenue up 41% YoY
  • 2026-02-05Fortinet reports FY2025 revenue of $6.80B and boosts buyback authorization to $10.25B
  • 2026-01-28CISA flags ongoing exploitation of authentication-bypass CVE-2026-24858
  • 2026-01FortiOS 8.0 and FortiSOC agentic-AI SOC platform launch
  • 2025-08Palo Alto Networks announces ~$25B CyberArk acquisition
  • 2025-01Fortinet acquires Everest, a Wi-Fi access point maker in India
  • 2024-08Fortinet acquires Next DLP
Revision history
21 July 2026
First assessed. Hard to displace. The text above is fixed as of this date and is not edited afterwards.
In the same band
Sources