Fortinet Owns the Gate Every Packet Crosses and Keeps Most of the Toll

Cash left for shareholders after capex and all stock pay

$3,126.9M

Twelve months to Sep 30, 2026, our calculation

Inventory build since year end

+48%

Sep 30, 2026 against Dec 31, 2025, our calculation

Revenue through the three largest distributors

53%

Q3 2026

1. Our call: Buy, because Fortinet sits in the path of every packet and keeps most of what it earns

Our call: Buy. Fortinet sells FortiGate firewalls and about 50 other networking and security products, most running one operating system, FortiOS, on its own security chips, and it sells the threat updates and support that keep those boxes current ^[1].

It is the gate traffic passes through on the way in and out of a branch, campus, factory or data center ^[1].

Third quarter 2026 revenue rose 20.5% to $2,078.4M, our calculation, with product revenue up 36.8% and service revenue up 12.7% ^[2]. Billings, revenue plus the change in deferred revenue, grew 29% to $2,340M ^[3].

The company raised 2026 revenue guidance to $8,125M to $8,215M, growth of 19.5% to 20.8%, our calculation ^[3][8].

We measure owner cash, the cash left for shareholders: operating cash flow, less all capital spending including real estate, less all stock pay. Fortinet capitalizes no separate software line, so capex is the property and equipment line ^[2].

On that measure it produced $1,946.3M in 2025 and $3,126.9M over the twelve months to Sep 30, 2026, about 39.7% of revenue, our calculation from the filings and SEC XBRL

2. Research spending is about a tenth of revenue, and stock pay is low

2b. Fortinet owns the box in the path

A FortiGate sits inline: traffic must cross it, and the rules that decide what passes are written in FortiOS ^[1]. Replacing it means rewriting those rules across every site, which is why the 10-K expects a firewall refresh cycle to pull more of its own products into existing customers ^[1].

Two passes, one partial and a fail. The gate is the inline position plus the custom chip: a rival has to match throughput per unit of power and cost, and Fortinet's own chip is its answer to that test ^[1].

The fail reflects pricing by device and contract, which caps what Fortinet earns as threats grow, and the partial reflects a crowded field ^[1].

3. Growth reaccelerated to about 20%

After slowing to 12.3% in 2024, growth has climbed back to about 20% ^[8]. The driver is hardware.

Product revenue rose $205.7M in the third quarter on higher prices, demand for faster appliances, recent pricing actions and more units, and the 10-Q also cites data center build-outs ^[2].

Service revenue, the recurring part, grew more slowly: security subscriptions rose 12.1% to $753.6M and support rose 13.4% to $559.8M, our calculation ^[2]. Contracted revenue not yet recognized reached $7,980M at Sep 30, 2026, up 18.8% from $6,720M a year earlier, our calculation ^[8].

Fourth quarter guidance of $2,155M to $2,245M implies growth of 13% to 18% against the fourth quarter of 2025, our calculation, so the guide already assumes some slowing from the third quarter pace ^[3][8].

The filings do not split product growth between price and volume ^[2]. Revenue lifted by price increases on hardware is less durable than revenue from new units, because buyers can delay the next purchase when prices rise.

4. Half of revenue runs through three distributors

Fortinet sells almost entirely through channel partners ^[1]. Distributor A accounted for 27% of third quarter revenue, Distributor B 14% and Distributor C 12%, so three firms handled 53% ^[2].

That is a collection and logistics concentration, not an end-customer one: the 10-K says end-customers sit in over 100 countries across finance, retail, healthcare, industry and government ^[1][2].

The risk is that a distributor holding stock can slow orders sharply when a cycle turns. Distributor A was owed 26% of receivables at Sep 30, 2026, down from 32% at year end ^[2].

Headcount was 15,109 at Dec 31, 2025, about 30% of it in the United States ^[1].

5. Margins are high, but the hardware mix is pulling gross margin down

Gross margin was 78.9% in the third quarter against 80.8% a year earlier, our calculation, because product revenue, with lower margins, grew nearly three times as fast as service revenue ^[2]. GAAP operating margin was 33.9%, our calculation ^[2].

Stock pay was $279.5M in 2025, 4.1% of revenue, and $231.9M in the first nine months of 2026, 3.9%, our calculation ^[8]. That is a fraction of the level at most software companies we cover, and it is why GAAP profit and the cash left for shareholders sit close to the company's own measures ^[8].

Inventory rose to $591.2M at Sep 30, 2026 from $399.5M at year end, an increase of 48.0%, our calculation, with raw materials doubling to $123.6M ^[2]. That supports the stronger product guidance, but it also leaves more stock exposed if the refresh slows ^[2][3].

6. What shareholders kept has more than doubled in three years

Part of the jump is timing. Deferred revenue added $817.8M to operating cash in the first nine months of 2026 against $288.1M a year earlier, as customers prepaid more multi-year contracts ^[2].

Without that $529.7M difference, nine month free cash for investors would still have risen about 45%, our calculation ^[2].

Capex here includes buildings and land: Fortinet owns $653.7M of land and $1,009.1M of buildings, and agreed in Oct 2026 to buy a Tokyo property for $136.8M ^[2]. We count that spending in full against owner cash even though it buys durable assets ^[2].

The mix of deferred revenue deserves a second look. Long-term deferred revenue, contracts billed now but earned after the next twelve months, rose to $3,973.4M at Sep 30, 2026 from $3,189.9M a year earlier, up 24.6%, while the current portion rose 14.5% to $3,961.0M, our calculation ^[8].

Longer prepaid terms lift cash today and spread revenue thinly over later years, so part of the cash surge borrows from future collections

7. Buybacks are a third of the cash kept, and the count is falling

Fortinet repurchased $2,289.8M of stock in 2025 and $972.8M in the first nine months of 2026, and repaid $500M of notes in Mar 2026 ^[2][8]. Over the twelve months to Sep 30, 2026 buybacks were $1,030.0M against $3,126.9M of cash left for shareholders, a ratio of about 1 to 3, our calculation ^[8].

The board added $1.2B to the program in Oct 2026, leaving $2.0B ^[3].

Shares outstanding fell to 734.7M on Oct 27, 2026 from 743.6M on Nov 4, 2025, down 1.2%, and from 766.5M in Nov 2024, down 4.1%, our calculation ^[8].

Cash and investments totaled $5,318.4M at Sep 30, 2026 against $500M of 2.2% notes due 2031, the only debt ^[2].

8. The main risks are a hardware peak, distributor stock and rivals

Cycle: product revenue grew 36.8% in the quarter on pricing and a refresh the company itself called for, and growth built on a refresh tends to fall when the refresh ends ^[1][2]. Fourth quarter guidance already implies slower growth ^[3].

Channel stock: with 53% of revenue through three distributors and inventory up 48.0% this year, a slowdown would show first as distributors drawing down stock ^[2].

Competition: the 10-K names Palo Alto Networks, Cisco, Check Point, Zscaler, Microsoft, Huawei and others, and many sell cloud-delivered security that does not need an appliance ^[1].

Control: the founders, Ken and Michael Xie, are brothers who hold 9.8% and 9.3% of the shares, and both sit on the board ^[4].

9. A founder-led company in its cash-return stage

Fortinet is mature in cash terms: owner cash has exceeded $1,400M a year since 2023 and the company has been buying back stock for years ^[8]. It is not mature in growth terms, since revenue is again growing about 20% ^[3].

Three choices mark the stage. It repaid notes instead of rolling them, it keeps buying real estate for data centers and offices, and it expanded the buyback twice in fourteen months ^[2][3][6].

Each fits a company that expects cash to keep exceeding its needs.

The test for this stage is whether service revenue, the part that renews, speeds up as the refreshed boxes come online ^[2]. If security subscriptions stay near 12% growth while hardware cools, total growth would fall back toward the 2024 to 2025 range ^[2][8].

10. Agents moving data still have to cross a firewall

The bull case is that software agents will make far more network calls, to more outside services, than human staff, and each call crosses a gate that has to inspect it ^[1]. Fortinet has launched an inline service to inspect and set rules for that traffic on boxes customers already own ^[3].

The bear case is that agent traffic moves to cloud-delivered security, where Zscaler, Palo Alto Networks and Microsoft are strong, and the physical box matters less ^[1].

The test sits in figures Fortinet already discloses. If agents raise demand at the gate, security subscription growth should climb above 15% in 2027 and contracted revenue should keep growing near 19% ^[2][8].

If the box is losing ground, product revenue will turn down after the refresh while subscriptions stay near 12% ^[2].

11. Two founding brothers and a board tied to AMD, Zoom, Aon and Carlyle

Ken Xie, co-founder, chief executive and chair since 2000, previously founded NetScreen Technologies, which Juniper Networks bought, and sits on the TeleNav board ^[4]. Michael Xie, his brother, is president and chief technology officer and a former NetScreen engineer ^[4].

Chief financial officer Christiane Ohlgart, who replaced the retiring Keith Jensen in May 2025, was finance chief of IGEL Technology and spent 18 years at SAP ^[4][7]. Chief operating officer John Whittle was general counsel for 16 years ^[4].

Lead Independent Director Judith Sim, a former Oracle marketing chief, sits on the First Advantage board ^[4]. Kenneth Goldman, who was Fortinet's own finance chief from 2007 to 2012 and then Yahoo's, sits on the RingCentral, Wealthfront, C3 and Kodiak boards ^[4].

Jean Hu is the finance chief of AMD, a chip supplier to the networking industry ^[4]. Janet Napolitano, former Secretary of Homeland Security, sits on the Zoom and Vir Biotechnology boards

12. The questions we would ask management, and the calls we are tracking

Question one: how much of 2026 product growth came from price increases rather than more units? ^[2]

Question two: how much inventory do the three largest distributors hold, and how does it compare with a year ago? ^[2]

Question three: when does the firewall refresh peak, and what share of the installed base has been upgraded? ^[1]

Question four: how much more real estate will you buy, and why own it rather than lease it? ^[2]

Question five: what share of new subscription bookings comes from inspecting traffic generated by software agents? That answer sets our conviction.

^[3]

Prediction one: 2026 revenue exceeds $8,215M, the top of guidance (55%). ^[3]

Prediction two: 2026 cash left for shareholders, as we define it, exceeds $3,000M (65%). ^[8]

Prediction three: fourth quarter 2026 service revenue grows 12% or more (70%).

Bottom line: Fortinet owns the gate and keeps the toll

Fortinet's appliances sit in the path of corporate traffic, its own chips and single operating system make that position hard to copy, and cash left for shareholders reached $3,126.9M over the twelve months to Sep 30, 2026 with stock pay under 4% of revenue ^[1][2][8]. The risk is a hardware peak: product revenue grew 36.8% on pricing and refresh, inventory is up 48.0% and three distributors carry 53% of sales ^[2].

We would raise conviction if security subscription growth climbs above 15% in 2027, and we would move to Hold off if service growth falls below 10% or product revenue turns down while inventory keeps rising. Our call: Buy, conviction 3 of 5.