F5 has two engines firing again
- Q2 FY2026 made the bull case stronger: systems revenue grew 26.2% year over year and software grew 16.7%.
- The key change is software: it bounced back after an 8% year-over-year drop in Q1 FY2026.
- F5 sells systems, software, and services that keep apps fast, reachable, and harder to attack.
- AI, hybrid cloud, and data sovereignty rules are helping demand, but F5 has not sized AI revenue yet.
- Finn likes the operating performance more than the valuation, so the price paid still matters.
Two growth lines, one price question
F5 came into fiscal 2026 with one main doubt: would software slow enough to offset the hardware rebound? Q2 answered that for now. Systems revenue grew 26.2% year over year to $226 million, and software revenue grew 16.7% to $184 million.
That matters because F5 needs both lines working. Systems growth shows customers are still upgrading capacity and hardware for hybrid cloud and AI workloads. Software growth shows the shift toward subscriptions and security tools is still alive after a weak Q1 comparison.
The bull case is now cleaner. F5 can grow by helping large companies run apps across private data centers, public clouds, and edge locations. These environments are messy. F5 sells tools that route traffic, block attacks, protect APIs, and apply the same policies across many places.
The bear case has not vanished. Full-year guidance still implies growth may slow in the second half. Finn's valuation view is cautious, so good execution may already be partly priced in. The watch items are simple: can systems stay in double-digit growth, can software stay positive, and can management put real numbers around AI demand?
Selling control over messy app networks
F5 makes money from Products and Global Services. Products include systems, which are hardware appliances, and software, which includes BIG-IP, NGINX, and Distributed Cloud offerings. Global Services is mostly support and maintenance tied to the installed base.
The business has moved away from being mainly a hardware company. The internal view says recurring revenue was 77% of total revenue in Q3 FY2024, helped by software subscriptions and maintenance contracts. That gives F5 more predictable revenue than a pure hardware refresh business.
The customer problem is complexity. A bank, retailer, or telecom may run apps in its own data center, in several clouds, and at the network edge. F5 tries to be the common control layer that delivers the app, secures it, and keeps policies consistent.
Where this breaks is competition and timing. Cloud security vendors can attack pieces of F5's stack with simpler SaaS tools. Hardware cycles can also fade. If customers delay large infrastructure projects, systems growth can fall faster than investors expect.
The app delivery stack
BIG-IP
BIG-IP is F5's main platform for app delivery and security. It can run as hardware or software and handles traffic management, DNS, and web application firewall services.
NGINX
NGINX is software used for web serving, reverse proxying, caching, and load balancing. It matters for modern apps that use containers and microservices.
F5 Distributed Cloud Services
Distributed Cloud is F5's SaaS platform for web app and API protection. It includes web application firewall, bot defense, DDoS protection, and API security.
F5 Application Delivery and Security Platform
ADSP is the plan to unite BIG-IP, NGINX, and Distributed Cloud into one platform. If it works, customers get one place for policy, visibility, and AI-driven insights across many environments.
Services anchor the mix
Mix is from Q2 FY2026, the quarter ended March 31, 2026. Revenue was $226 million for systems, $184 million for software, and $401 million for Global Services, so services are still the largest single piece.
What could still go wrong
Second-half growth fade
High impact · Medium oddsThe bear case now depends on a slowdown that has not shown up in Q2 results. Full-year guidance still leaves room for slower growth later in fiscal 2026. If systems or software growth drops back toward flat, the current thesis weakens fast.
Cloud security competition
High impact · Medium oddsF5 competes with cloud-native tools and pure-play SaaS security vendors. Customers may pick cheaper point products for bot defense, API security, or web application firewall needs. If F5 cannot show that one platform lowers cost and complexity, pricing power could fade.
Memory costs and supply limits
Medium impact · Medium oddsManagement has flagged rising memory costs and possible supply constraints as industry issues. This matters most for systems, where hardware delivery and gross margin can be pressured. The risk is not just revenue timing, it is whether F5 must absorb higher input costs.
Macro pullback in large projects
Medium impact · Medium oddsF5 sells into large enterprise infrastructure budgets. Those budgets can slow when companies cut spending or delay data center upgrades. A weaker macro backdrop could hit systems orders first and then reduce services and software expansion over time.
AI demand stays vague
Medium impact · Medium oddsAI is part of the bull case, but F5 has not yet given a clear revenue number for AI use cases. Management said in Q1 FY2026 that it won as many new AI customers in 90 days as it did in all of fiscal 2025. That is useful color, but investors still need to know how large the dollars are.
In one breath
What does F5 actually do?
F5 helps companies deliver and secure apps. Its tools route app traffic, balance loads, protect websites and APIs, and help the same security rules work across data centers and clouds.
Why did F5 stock sentiment improve after Q2 FY2026?
Systems revenue stayed strong, growing 26.2% year over year. More important, software returned to 16.7% growth after falling in Q1, which answered the biggest near-term worry.
Is F5 an AI company?
F5 is not a pure AI company. It benefits when companies build AI infrastructure because those workloads need secure, high-capacity app delivery, but management has not yet disclosed a clear AI revenue contribution.
What is the main risk for F5 now?
The main company-specific risk is that Q2 software strength does not last. The main external risks are a slowdown in enterprise spending and higher memory costs that could pressure hardware margins.