10-Q: Fortinet Reports Strong Q3 Revenue Growth, Expands Cloud Security

Fortinet, a leader in cybersecurity, announced a 14% increase in total revenue for Q3 2025, driven by product and service growth, alongside strategic investments in cloud and AI.

Summary

• Total revenue for the three months ended September 30, 2025, increased by 14% to $1.72 billion, compared to $1.51 billion in the same period last year.
• Product revenue grew 18% to $559.3 million, while service revenue increased 13% to $1.17 billion for the quarter.
• For the nine months ended September 30, 2025, total revenue also increased by 14% to $4.89 billion, with product and service revenues both growing 14%.
• Operating income for Q3 2025 rose 16% to $547.3 million, resulting in an operating margin of 31.7%, up 0.5 percentage points year-over-year.
• Net income for Q3 2025 decreased to $473.9 million from $539.9 million in Q3 2024, primarily due to a $106.3 million non-recurring gain on bargain purchase related to the Lacework acquisition in the prior year.
• Diluted net income per share for Q3 2025 was $0.62, down from $0.70 in Q3 2024.
• Deferred revenue reached $6.65 billion as of September 30, 2025, an increase of 10.6% from September 30, 2024.
• Non-GAAP billings for Q3 2025 increased 14% to $1.81 billion.
• Cash and cash equivalents, short-term and long-term investments totaled $3.41 billion as of September 30, 2025.
• The company repurchased 23.3 million shares of common stock for $1.83 billion in Q3 2025 under its expanded share repurchase program, with $795.9 million remaining available.
• Headcount increased 7% year-over-year to 15,015 employees as of September 30, 2025.

Sentiment

Score: 7

Explanation: The company demonstrated solid revenue and operating income growth, indicating strong underlying business performance. While net income decreased for the quarter, this was primarily due to a non-recurring gain in the prior year, not operational weakness. Strategic investments in cloud and AI, along with an expanded share repurchase program, reflect confidence in future prospects. However, a significant decrease in working capital and ongoing litigation introduce some caution.

Positives

• Strong revenue growth of 14% for both the three and nine months ended September 30, 2025, demonstrating consistent market demand.
• Product revenue increased by 18% in Q3 2025, driven by secure networking hardware and term licenses.
• Service revenue grew 13% in Q3 2025, primarily from security subscription revenue and growth in SaaS solutions like unified SASE and SecOps.
• Operating income increased 16% in Q3 2025, and operating margin improved by 0.5 percentage points to 31.7%, indicating improved operational leverage.
• Total gross margin for the nine months ended September 30, 2025, increased by 0.4 percentage points to 80.8%, benefiting from lower inventory reserves compared to the prior year.
• Cash flows from operating activities for the nine months ended September 30, 2025, increased by 11% to $1.97 billion.
• Deferred revenue grew 10.6% year-over-year to $6.65 billion, representing future revenue recognition.
• Strategic acquisitions of Linksys, Perception Point Ltd., Next DLP, and Lacework Inc. enhance product portfolio in cloud security, insider risk, and data loss prevention.
• The board approved a $1.0 billion increase in the share repurchase program, extending it to February 28, 2027, signaling confidence in future cash generation and commitment to shareholder returns.
• The enactment of H.R. 1 (One Big Beautiful Bill Act) is expected to reduce cash paid for income taxes in 2025 by approximately $100 million to $150 million.

Negatives

• Net income for the three months ended September 30, 2025, decreased by 12.2% to $473.9 million, compared to $539.9 million in the prior year, primarily due to a non-recurring gain on bargain purchase in Q3 2024.
• Diluted EPS for Q3 2025 decreased to $0.62 from $0.70 in Q3 2024.
• Total gross margin for Q3 2025 decreased by 1.7 percentage points to 80.8%, mainly due to reduced benefit from net release of inventory-related reserves and increased cloud service costs.
• Free cash flow (non-GAAP) for Q3 2025 slightly decreased to $567.5 million from $571.8 million in the same period last year.
• Working capital significantly decreased to $127.4 million as of September 30, 2025, from $1,910.8 million as of December 31, 2024, largely due to substantial share repurchases.
• Cash, cash equivalents, short-term and long-term investments decreased by 16% to $3.41 billion as of September 30, 2025, from $4.07 billion as of December 31, 2024, also impacted by share repurchases.

Risks

• Operating results are likely to vary significantly and be unpredictable due to factors like adverse economic conditions, supply chain constraints, and sales strategy execution.
• Adverse economic conditions, including a possible recession, inflation, stagflation, tariffs, changing interest rates, or reduced IT spending, may negatively impact the business.
• Susceptibility to supply chain constraints, shortages, and disruptions, with key components coming from limited sources, potentially leading to increased purchase order commitments and inventory excesses.
• Billings, revenue, and free cash flow growth may slow or decline, and operating margins may decrease.
• Real estate assets and data center operations involve significant risks, including construction delays, unexpected budget changes, and increased costs for supplies and labor.
• Dependence on the continued services and performance of senior management, including Ken Xie and Michael Xie, and the ability to hire, retain, and motivate qualified personnel.
• Reliance on third-party channel partners for substantially all revenue, with a small number of distributors representing a large percentage of revenue and accounts receivable, exposing the company to credit and liquidity risks.
• Concentration of shipments at the end of the quarter or changes in shipping terms could cause billings and revenue to fall below expected levels.
• Significant reliance on revenue from FortiGuard and other security subscriptions and FortiCare technical support services, which may decline or fluctuate.
• Intense competition in the market from companies like Check Point, Cisco, CrowdStrike, Palo Alto Networks, and Zscaler, potentially impacting competitive position.
• Susceptibility to defects or vulnerabilities, including critical vulnerabilities, in products or services, and reputational harm from failure or misuse, which could lead to unauthorized access to customer networks.
• Compromise of internal IT networks, operational networks, or R&D networks could harm public perception, lead to customer breaches, and result in liability.
• Incurred indebtedness and potential future debt may adversely affect financial condition and future financial results.
• Majority of billings, revenue, and cash flow are generated from sales outside the United States, exposing the company to international risks like currency exchange rate fluctuations, political instability, and trade conflicts (e.g., war in Ukraine, tensions between China and Taiwan).
• Backlog may fluctuate, and supply chain shortages or customer cancellations/delays could negatively impact backlog conversion and revenue.
• Inability to successfully acquire and integrate other businesses, products, or technologies, or form strategic alliances, could harm competitive position and financial results.
• Investors' expectations regarding operational sustainability factors may impose additional costs and risks.
• Proprietary rights may be difficult to enforce, and the company may be subject to claims of infringement by others.
• The trading price of common stock may be volatile, potentially exacerbated by share repurchases.
• Anti-takeover provisions in corporate documents and Delaware law could impair takeover attempts.
• Managing inventory of products and components is complex, exposing the company to risks of product shortages, lost sales, higher expenses, and excess inventory.
• New products, services, and enhancements may not achieve sufficient market acceptance, impacting results and competitive position.
• Failure to accurately predict and respond to rapid technological and market developments, changing customer needs, and expanding regulatory requirements could harm competitive position.
• Market perception that individual products from one vendor providing multiple layers of security are inferior to point products from multiple vendors could limit demand.
• Incorporation of similar functionality into existing network infrastructure products by competitors could adversely affect the business.
• Dependence on third-party manufacturers for products, leading to susceptibility to manufacturing delays, capacity constraints, cost increases, and geopolitical environment changes (e.g., Taiwan manufacturing risks).
• Reliance on limited sources of supply for key components, leading to risks of shortages, long lead times, and supply changes.
• Retroactive price protection offered to major distributors in North America could lead to inadequate allowances and adversely affect results if not balanced with inventory and demand.
• Sales prices of products and services may decrease, reducing gross profits and operating margin.
• URL database for web filtering service may fail to keep pace with rapid growth of URLs or categorize websites inaccurately, harming market acceptance.
• False positive detection of legitimate files as malware or legitimate emails as spam could adversely affect the business.
• Failure to offer high-quality technical support services could materially affect sales and results of operations.
• Risks of warranty claims, product returns, product liability, and product defects.
• Failure to meet service-level commitments for cloud-based subscription services could negatively impact current and future revenue.
• Inability to successfully manage future growth, including real estate expansion, or improve systems, processes, and controls, could negatively affect operating results.
• Potential difficulties maintaining and expanding internal business management systems (ERP, CRM).
• Unsuccessful artificial intelligence initiatives could adversely affect business, reputation, or financial results, including risks related to evolving regulations, competition, data practices, and ethical concerns.
• Changes in financial accounting standards may cause adverse unexpected fluctuations and affect reported results of operations.

Future Outlook

Fortinet expects product and service revenue to continue growing for the remainder of 2025. Research and development, and sales and marketing expenses are projected to increase in absolute dollars year-over-year, while general and administrative expenses are expected to remain relatively consistent. The operating margin for the full year 2025 is anticipated to be consistent with 2024. Service gross margin is expected to decrease due to data center expansion, but product gross margin is not expected to change significantly. Capital expenditures for Q4 2025 are estimated to be between $60 million and $110 million. The company believes it has sufficient liquidity to meet anticipated cash needs for at least the next 12 months, including the repayment of the 2026 Senior Notes at maturity. The GAAP effective tax rate for 2025 could increase by approximately one percentage point, while cash paid for income taxes could reduce by $100 million to $150 million due to the 'One Big Beautiful Bill Act'.

Management Comments

• Revenue continues to be diversified globally, which remains a key strength of our business.
• We experienced product revenue growth across our hardware products and software licensing, which mainly benefited from growth in secure networking hardware products and term licenses.
• The increase in service revenue was primarily due to the recognition of service revenue from our growing deferred revenue balance related to FortiGuard and other security subscriptions delivered to on-premise and cloud-based environments and strength in unified SASE and SecOps.
• Operating expenses as a percentage of revenue decreased mainly because our revenue growth outpaced our personnel costs growth.
• Our overall performance depends in part on worldwide economic and geopolitical conditions, such as trade policies and tariffs, GDP growth or contraction, geopolitical instability and uncertainty, the war in Ukraine or tensions between China and Taiwan, and their impact on customer behavior.
• We believe that our cash provided by operating activities, together with our existing cash, cash equivalents and investments will be sufficient to meet our anticipated cash needs and do not currently intend to retire our Senior Notes early.

Industry Context

Fortinet operates in the intensely competitive and dynamic cybersecurity market, driving the convergence of networking and security. The company's strategy focuses on its integrated platform, the Fortinet Security Fabric, spanning secure networking, unified SASE, and AI-driven security operations (SecOps). Key industry trends include the shift to cloud-based and AI solutions, with Fortinet making significant investments in these areas, as evidenced by its acquisitions and product development (FortiAI, FortiCloud). The company faces competition from established players like Check Point, Cisco, Palo Alto Networks, and cloud-focused competitors such as CrowdStrike and Zscaler, who are also expanding their offerings in SASE and AI. Fortinet's emphasis on proprietary ASIC technology (FortiASIC) and its FortiOS operating system aims to provide performance and integration advantages in this evolving landscape.

Comparison to Industry Standards

• Fortinet's FortiOS has been recognized across five Gartner Magic Quadrants, including Firewall, Software-Defined Wide-Area Network (SD-WAN), Security Service Edge (SSE), SASE Platforms, and Wired and Wireless Local Area Network (LAN), indicating strong competitive positioning against industry peers like Palo Alto Networks and Zscaler in these categories.
• The company's ASIC-based SPUs are highlighted for increasing speed, scale, efficiency, and value, delivering superior Security Compute Ratings compared to industry alternatives, which differentiates it from competitors relying solely on general-purpose CPUs.
• Fortinet's organically built global cloud infrastructure, FortiCloud, with over 170 Points of Presence (PoPs), positions it to compete with cloud-native security providers like CrowdStrike and Zscaler in delivering scalable, secure access experiences.
• The integration of AI and ML technologies into solutions like FortiAI (FortiAI-Protect, FortiAI-Assist, FortiAI-SecureAI) demonstrates a commitment to advanced threat detection and automated SecOps, aligning with and potentially surpassing AI capabilities offered by competitors in the rapidly evolving AI security landscape.
• The company's comprehensive portfolio of over 50 products across Secure Networking, Unified SASE, and AI-Driven SecOps aims for vendor consolidation, a trend sought by customers to reduce complexity, contrasting with strategies of point solution providers.

Management Changes

Corporate Governance

Legal Proceedings

• A securities class action, 'Oklahoma Firefighters Pension and Retirement System v. Fortinet, Inc., et al.', was filed on September 22, 2025, alleging false or misleading statements regarding the 2026 firewall refresh cycle.
• Another securities class action, 'State of Rhode Island Office of the General Treasurer v. Fortinet, Inc., et al.', was filed on October 16, 2025, with similar allegations.
• A stockholder derivative complaint, 'Jack Pittrof v. Fortinet, Inc., et al.', was filed on October 8, 2025, against current and former directors and officers, alleging breach of fiduciary duty and false statements.
• Alorica Inc. v. Fortinet: A jury returned a verdict in favor of Fortinet on October 4, 2024, but Alorica has filed a notice of appeal. The company believes the ultimate outcome will not materially impact financial position.
• No loss accrual was recorded as of September 30, 2025, for the ongoing securities class actions or derivative suit due to their preliminary nature and uncertain outcome.
• The company is involved in ongoing tax audits in the United Kingdom, Canada, Germany, and several other foreign jurisdictions, focusing on inter-company profit allocation.

Stakeholder Impact

• Shareholders: Impacted by the $1.83 billion in share repurchases in Q3 2025, which reduces outstanding shares but also cash reserves. Subject to potential stock price volatility due to market conditions and ongoing securities litigation.
• Employees: Headcount increased by 7% year-over-year, indicating continued investment in personnel. Stock-based compensation remains a significant component of overall compensation. The 401(k) and RRSP matching contributions benefit employees.
• Customers: Benefit from continued investment in R&D and new product enhancements, particularly in cloud-based and AI-driven security solutions. May face potential impacts from tariffs on product costs, though not expected to be meaningful currently. Service-level commitments for cloud services are critical for customer satisfaction.
• Suppliers/Contract Manufacturers: The company has increased inventory purchase commitments to $732.5 million, indicating continued reliance and demand for components. However, this also exposes the company to risks of inventory obsolescence and supply chain disruptions.
• Creditors: The company has $995.9 million in outstanding Senior Notes, with the 2026 notes maturing in March 2026, which the company expects to repay at maturity. The decrease in working capital could be a point of monitoring.

Next Steps

• Continue investing in the research and development organization, expecting R&D expense to increase in absolute dollars year over year during the remainder of 2025.
• Continue making investments in sales and marketing resources, expecting sales and marketing expense to increase in absolute dollars year over year during the remainder of 2025.
• Expand data center footprint and colocation and cloud hosting capacity to support the growth in unified SASE and SecOps offerings.
• Estimate capital expenditures to be between approximately $60 million and $110 million for the fourth quarter of 2025.
• Repay the outstanding balance of the 2026 Senior Notes maturing on March 15, 2026, at the date of maturity.
• Continue to monitor the impact of tariffs on the business, particularly on hardware sales to U.S. customers if tariffs increase.
• Evaluate the impact of ASU 2023-09 (Income Taxes) on disclosures for the annual period beginning fiscal year 2025.
• Evaluate ASU 2024-03 (Income Statement Expenses) for its impact on disclosures for the annual reporting period beginning fiscal year 2027.
• Evaluate ASU 2025-05 (Credit Losses) for its impact on consolidated financial statements and disclosures for the annual reporting period beginning fiscal year 2026.
• Assess adoption timing and method for ASU 2025-06 (Internal-Use Software) for the annual period beginning fiscal year 2028.

Key Dates

Recommendation

Fortinet demonstrates solid operational performance with strong revenue and operating income growth, driven by both product and service segments, particularly in secure networking, SASE, and AI-driven security. The company's strategic investments in cloud infrastructure and acquisitions like Linksys, Perception Point, Next DLP, and Lacework position it well for future growth in evolving cybersecurity markets. The significant share repurchase program signals management's confidence and commitment to shareholder returns. However, the quarterly net income decline, while explained by a prior-year non-recurring gain, might cause short-term investor concern. The substantial decrease in working capital due to share repurchases and ongoing legal proceedings, including securities class actions, introduce elements of uncertainty and risk. Given the mixed signals—strong operational growth offset by a non-recurring net income dip, reduced working capital, and legal overhangs—a 'hold' recommendation is prudent. Investors should monitor the resolution of legal matters, the impact of macroeconomic conditions, and the effectiveness of strategic investments in maintaining gross margins and sustaining growth.

Keywords

Cybersecurity, Network Security, SASE, SecOps, AI-driven Security, FortiGuard, FortiCare, Product Revenue, Service Revenue, Operating Income, Deferred Revenue, Billings, Share Repurchase, SEC Filing, 10-Q, Financial Results, Acquisitions, Supply Chain, Risk Factors, Cloud Security, Endpoint Protection