Fortinet’s firewall rebound is real, margins are the test
- Product revenue jumped 41% year over year in Q1 2026, a clear sign the hardware refresh cycle is still running.
- Service revenue was $1.20 billion in Q1 2026, or 65% of total revenue, giving Fortinet a large recurring base.
- Management named AI infrastructure deployments as one driver of product demand, but has not said how much of the growth came from AI.
- Q1 operating margin rose to 31.4%, yet management still expects full-year 2026 operating margin to fall versus 2025.
- The business quality is high, but the stock price leaves less room for mistakes in growth, margins, or competition.
A rebound with a margin bill
Fortinet’s Q1 2026 results made the bull case stronger. Product revenue was $645.1 million, up 41% from a year earlier. That is a sharp step up from the product recovery seen through 2025. Management said demand came from higher performance products, AI infrastructure deployments, upgrades, upsells, and new uses.
Services still matter more to the model. Service revenue was $1.20 billion in Q1 2026, up 11% from a year earlier. That was 65% of total revenue for the quarter. These contracts include security updates and technical support, so they can turn each hardware sale into years of follow-on revenue.
The bear case is not about whether Fortinet has customers. It is about how much profit the company keeps while it invests in SASE, security operations, data centers, cloud hosting, and AI. Q1 operating margin rose 1.9 percentage points to 31.4%, but management still expects full-year 2026 operating margin to decrease compared with 2025.
The next few quarters should answer the key question. If product growth stays above 20% and services remain in double digits, the growth story holds up. If margins fall faster than expected, or if memory chip shortages hurt product gross margin, investors may decide the stock was priced for too clean a path.
Appliances first, services after
Fortinet makes money in two main ways. First, it sells products such as FortiGate firewalls, other network hardware, virtual appliances, and software licenses. Second, it sells service contracts, including FortiGuard security subscriptions and FortiCare technical support.
The model runs mostly through partners. Fortinet sells to distributors, who sell to resellers and managed security service providers. Those partners then sell to companies, governments, and other end customers. This helps Fortinet reach many customers without building every sales relationship itself.
The goal is simple: place Fortinet gear in a network, then attach paid services that renew over time. The company’s FortiOS operating system, FortiASIC chips, FortiCloud infrastructure, and FortiAI tools all help tie the system together under its Security Fabric platform.
This model can break in a few places. A weaker hardware cycle would reduce new service attach opportunities. Partner concentration also matters, since one distributor accounted for 32% of total net accounts receivable as of December 31, 2025. If big partners slow orders or customers switch platforms, growth can cool fast.
The Security Fabric stack
FortiGate and Secure Networking
FortiGate firewalls are the core product line. They protect networks and are helped by Fortinet’s own FortiASIC chips, which are built to process security traffic quickly.
FortiGuard Security Services
FortiGuard provides paid security subscriptions, such as threat updates and protection services. These contracts are a key reason service revenue is larger than product revenue.
FortiCare Support
FortiCare is technical support for customers using Fortinet products. It helps turn one-time product sales into repeat service revenue.
Unified SASE
SASE means secure access service edge, a cloud-based way to protect users and apps outside the office. Fortinet combines firewall, SD-WAN, secure web gateway, CASB, data loss prevention, and zero trust access in one offer.
AI-Driven Security Operations
This group includes tools such as FortiAnalyzer, FortiSIEM, FortiSOAR, and FortiEDR. They help security teams find, study, and respond to attacks.
FortiAI
FortiAI adds generative AI help across Fortinet’s platform. The company frames it as both AI for security work and security for AI systems, but the size of the revenue lift is still an open question.
Services now carry the mix
Segment mix is from the three months ended March 31, 2026. Service was 65% of revenue and Product was 35%, while Fortinet also depends on a partner channel with some distributor concentration.
What could break the thesis
Margin giveback from investments
High impact · Medium oddsManagement expects full-year 2026 operating margin to decrease compared with 2025. That warning matters because Q1 looked strong, with operating margin at 31.4%. If spending on SASE, SecOps, cloud capacity, and AI rises faster in later quarters, the full-year profit picture could weaken.
Hardware cycle fades
High impact · Medium oddsProduct revenue rose 41% year over year in Q1 2026, helped by upgrades, higher performance products, AI infrastructure deployments, and upsell activity. That is a strong number, but it may be hard to repeat. A slowdown would also limit the pool of new devices that can attach future services.
Memory chip shortage
Medium impact · Medium oddsFortinet disclosed that the global build-out of AI infrastructure has created a shortage of memory chips used in some products. If the company cannot get enough chips on fair terms, it could face delays or higher costs. Price increases may not fully cover the pressure.
SASE and SecOps competition
High impact · Medium oddsFortinet is pushing into cloud-based security and security operations, where rivals such as Palo Alto Networks, Cisco, CrowdStrike, and Zscaler compete hard. Customers may choose a different platform if they prefer a cloud-native specialist or a larger bundled offer. This could slow Fortinet’s move beyond firewalls.
Channel partner concentration
Medium impact · Medium oddsFortinet relies heavily on distributors, resellers, and managed security service providers. One distributor accounted for 32% of total net accounts receivable as of December 31, 2025. If a large partner reduces orders, changes inventory levels, or has credit trouble, reported results could swing.
Security flaws in security products
High impact · Low oddsFortinet sells tools that customers trust to protect critical systems. A serious defect, breach, or vulnerability in its products could damage that trust. The financial hit could come from lost renewals, slower new sales, or higher support costs.
In one breath
How does Fortinet make most of its money?
In Q1 2026, Fortinet made 65% of revenue from services and 35% from products. Products include firewalls and software licenses, while services include security subscriptions and technical support.
Why did Fortinet’s product revenue grow so fast in Q1 2026?
Management pointed to demand for higher performance products, AI infrastructure deployments, technology upgrades, upsells, and new use cases. Product revenue rose 41% year over year, but the company has not said how much came from AI-related deployments.
What is the main risk for Fortinet stock now?
The main risk is that growth stays good but margins fall as Fortinet invests in SASE, SecOps, cloud capacity, and AI. The stock also has less room for error if investors already expect strong growth.
Who competes with Fortinet?
Fortinet competes with large network and security companies such as Cisco and Palo Alto Networks. It also faces cloud-focused security rivals such as CrowdStrike and Zscaler.