Fortinet — Business Overview
What does Fortinet do?
Fortinet is a cybersecurity company that sells an integrated platform combining network security and networking technology into a single system. Rather than offering separate, disconnected tools, Fortinet bundles firewalls, cloud security, and threat detection under one operating system called FortiOS, marketed as the Fortinet Security Fabric. Its customers range from small businesses to large enterprises, government agencies, and telecommunications providers across more than 100 countries. In 2025, the company generated $6.80 billion in total revenue and $1.85 billion in net income.
The platform spans three main solution pillars:
| Pillar | What it does |
|---|---|
| Secure Networking | Firewalls (FortiGate), ethernet switches (FortiSwitch), wireless access points (FortiAP), and 5G connectivity — the core hardware and software that secures a company's internal network |
| Unified SASE (Secure Access Service Edge) | Cloud-delivered security for remote workers and cloud applications, including SD-WAN (software-defined networking), zero-trust access, and data loss prevention, delivered via 190+ global points of presence |
| AI-Driven SecOps (Security Operations) | Threat detection, automated response, and monitoring tools such as FortiSIEM, FortiSOAR, and FortiAnalyzer — essentially a digital security operations center |
How does Fortinet make money?
Fortinet earns revenue through two main streams: selling hardware appliances and selling ongoing subscription and support services. Hardware (physical firewall boxes and networking equipment) generates upfront revenue, while FortiGuard subscription services (threat intelligence, antivirus, intrusion prevention) and FortiCare technical support contracts generate recurring revenue that continues after the initial hardware sale. This recurring services component is strategically important because it grows more predictably over time and carries higher margins than hardware.
The company sells primarily through a two-tier channel model rather than directly to end customers. Fortinet works with major distributors — including Arrow Electronics, Ingram Micro, and TD Synnex — who sell to resellers and managed security service providers (MSSPs), who then serve end customers. This approach lets Fortinet scale globally without building a massive direct sales force, though it does sell directly to large enterprises and service providers in some cases.
What market does Fortinet operate in?
Fortinet competes in the broad cybersecurity market, which is driven by an escalating and increasingly sophisticated threat landscape. Cyberattacks are growing in frequency and complexity, pushing organizations of all sizes to spend more on protection. Key secular tailwinds include the migration of corporate applications to the cloud, the rise of hybrid and remote workforces, and the proliferation of connected devices (IoT). Fortinet explicitly believes that demand for secure networking will overtake the pure networking market by 2030, suggesting the two fields are converging rather than remaining separate.
An anticipated firewall hardware refresh cycle is a near-term growth catalyst the company is positioning for. Many enterprises are running aging firewall infrastructure, and Fortinet expects a wave of upgrades in the coming years. Because its platform spans hardware, cloud, and services, each hardware refresh is an opportunity to pull customers deeper into its broader ecosystem — including SASE, cloud security, and SecOps tools.
Who are Fortinet's main competitors?
The cybersecurity market is large, competitive, and includes both sprawling technology giants and focused specialists. Fortinet's named competitors include Check Point, Cisco, Palo Alto Networks, CrowdStrike, Zscaler, Microsoft, Huawei, Netskope, Sophos, SonicWALL, F5 Networks, and HPE. Several of these — Cisco and Microsoft in particular — are significantly larger with broader product lines, deeper customer relationships, and greater financial resources.
Fortinet's claimed competitive advantages center on proprietary silicon and deep platform integration. Its custom-designed FortiASIC chips (application-specific integrated circuits built in-house) allow its appliances to process security tasks — like inspecting encrypted traffic — faster and more efficiently than competitors using off-the-shelf processors. Fortinet points to a 1,405-patent portfolio (including 321 AI-related patents) and a single unified operating system (FortiOS) across its entire product line as key differentiators. The company argues this reduces complexity and total cost of ownership compared to stitching together multiple vendors' point products. Smaller, specialist competitors may outperform Fortinet in narrow categories, while larger rivals can absorb market downturns more easily.
Where does Fortinet operate?
Fortinet is headquartered in Sunnyvale, California, with a genuinely global footprint spanning sales, manufacturing, and research across many regions. It has sales professionals in over 100 countries, and roughly 50% of its 15,109 employees are based outside the United States and Canada — primarily in Europe, the Middle East, and Africa (EMEA). Research and development is concentrated in the US and Canada; the filing explicitly states no source code development or R&D is conducted in Russia or China.
Hardware manufacturing is heavily concentrated in Taiwan, which represents a notable supply chain concentration risk. Approximately 87% of Fortinet's hardware is manufactured in Taiwan through contract manufacturers. Its proprietary ASICs are fabricated at foundries in Taiwan and Japan, primarily by TSMC. Finished products are distributed from warehouses in California and the Netherlands, and a logistics hub in Taoyuan City, Taiwan. The company's cloud infrastructure — supporting its SASE and subscription services — runs through Fortinet-owned data centers and points of presence globally, as well as through Amazon Web Services, Microsoft Azure, and Google Cloud.