A Rare Combination of Cybersecurity Growth, Profitability, Founder-Led Management—and Disciplined Expansion
Cybersecurity may be one of the most durable technology investment themes of the next decade.
Businesses are moving more workloads to the cloud. Employees are accessing corporate systems from everywhere. Artificial intelligence is creating new applications, new autonomous agents and entirely new security risks. Connected devices continue multiplying. Meanwhile, cyberattacks are becoming more sophisticated.
Companies can postpone replacing computers or building offices. They cannot simply decide that cybersecurity is no longer necessary.
That makes cybersecurity attractive for long-term investors.
The problem is that many of the best cybersecurity companies have become extremely expensive.
CrowdStrike, Palo Alto Networks, Zscaler, Okta and Fortinet are all formidable businesses, but their valuations vary enormously. When growth stocks become expensive, even excellent business performance may not be enough to produce excellent investment returns.
Among these companies, Fortinet (NASDAQ: FTNT) stands out to me because it combines several characteristics that rarely appear together:
strong growth, exceptional profitability, proprietary technology, a founder-led management team, a healthy balance sheet, disciplined acquisitions and a valuation substantially below some of its most celebrated competitors.
Fortinet is certainly not cheap in the traditional value-investing sense. Nor should anyone describe a technology stock as “safe” in the same way Treasury bills are safe.
But on a relative basis, Fortinet may currently represent one of the better combinations of quality, growth, financial strength and valuation in the cybersecurity industry.
From Firewall Company to Cybersecurity Platform
Fortinet was founded in 2000 by brothers Ken Xie and Michael Xie.
The company initially became famous for its FortiGate firewalls, but today’s Fortinet is much broader.
Its products now span network security, next-generation firewalls, secure SD-WAN, SASE, endpoint protection, cloud security, security operations, Zero Trust access, operational-technology security, data protection and increasingly AI security.
At the center of the ecosystem is FortiOS, Fortinet’s operating system, along with the broader Fortinet Security Fabric.
This is important because Ken Xie’s long-term strategy has never been simply to sell more firewalls.
His central thesis has been:
Networking and cybersecurity will increasingly converge.
Historically, a large corporation might buy networking equipment from Cisco, firewalls from Fortinet or Palo Alto, endpoint protection from CrowdStrike, identity from Okta, cloud security from another vendor, SD-WAN from another company and security analytics from yet another.
That creates complexity.
Fortinet wants more of those functions operating within a unified architecture.
If the industry increasingly moves toward vendor consolidation, Fortinet could benefit substantially.
Fortinet’s Technological Advantage: Designing Its Own Security Chips
One of the most interesting things about Fortinet is something many investors overlook.
Fortinet doesn’t rely entirely on conventional processors.
It designs specialized security processors called FortiASICs.
Cybersecurity appliances must inspect enormous quantities of network traffic without introducing unacceptable latency. Packets may need to be analyzed, encrypted, decrypted, filtered, authenticated and evaluated against threat signatures in fractions of a second.
Ordinary CPUs can perform these tasks.
But specialized processors designed specifically for cybersecurity can potentially perform them faster, with less power consumption and better price/performance.
This philosophy goes back to Ken Xie’s previous company, NetScreen.
Xie recognized decades ago that increasingly complex firewall software running on ordinary processors would eventually encounter performance limitations. NetScreen therefore developed specialized hardware for security processing.
Juniper Networks eventually acquired NetScreen for approximately $4 billion.
Xie carried that concept into Fortinet.
More than two decades later, Fortinet’s custom silicon remains an important competitive differentiator.
The company is now continuing the strategy with its next generation of security processors, including collaboration with Intel.
This is one reason I regard Fortinet’s moat as more substantial than simply having a recognizable cybersecurity brand.
There is real engineering underneath it.
Fortinet’s Latest Financial Performance Is Exceptional
Fortinet’s recent results demonstrate why investors have become enthusiastic about the company.
For Q2 2026, Fortinet reported approximately:
| Metric | Q2 2026 | Year-over-year change |
|---|---|---|
| Revenue | $2.05 billion | +26% |
| Product revenue | $773 million | +52% |
| Billings | $2.37 billion | +33% |
| GAAP operating margin | 33.7% | Up significantly |
| Non-GAAP operating margin | 38.0% | Up significantly |
| GAAP EPS | $0.82 | +44% |
| Adjusted EPS | $0.90 | +41% |
| Operating cash flow | ~$1.04 billion | — |
| Free cash flow | ~$966 million | — |
These numbers are remarkable for a company founded more than 25 years ago.
Fortinet isn’t merely growing.
It is growing while producing operating margins that many mature software companies would envy.
That makes the quality of the growth particularly important.
Cash Flow May Be Even More Important Than Earnings
Free cash flow tells investors whether accounting profits are ultimately turning into real cash.
Fortinet generated nearly $1 billion of free cash flow in a single recent quarter.
That cash gives management several options.
Fortinet can invest in research and development, build new products, hire engineers, expand internationally, repurchase shares and acquire companies without putting significant financial pressure on the balance sheet.
This financial flexibility becomes especially valuable during recessions or technology downturns.
A company burning cash may have to raise money when markets are unfavorable.
Fortinet generally doesn’t face that problem.
An Extremely Strong Balance Sheet
Fortinet recently had roughly:
$2.9 billion of cash
plus approximately:
$1.1 billion of short-term investments
against only around:
$500 million of long-term debt.
That gives Fortinet roughly $4 billion of highly liquid assets with comparatively modest long-term borrowing.
For a cybersecurity company growing rapidly, that is a very strong position.
Fortinet is therefore relatively safe from a financial-distress perspective.
That does not mean FTNT’s share price cannot decline substantially.
It means the underlying company is unlikely to face the financing problems that often destroy highly leveraged or cash-burning technology businesses.
Fortinet Is Also Repurchasing Its Own Shares
Another positive factor is capital allocation.
Fortinet spent roughly $1 billion repurchasing shares during the first half of 2026.
Share repurchases are particularly useful for technology companies because employee stock compensation can otherwise continually dilute shareholders.
Fortinet’s diluted share count has been declining.
That means existing shareholders can own a slightly larger percentage of the business over time.
Of course, buybacks only create value when management does not dramatically overpay for the stock.
But Fortinet clearly has enough cash generation to return capital while still investing heavily in growth.
Ken Xie: An Unusually Technical Founder-CEO
The CEO is one of the strongest parts of the Fortinet story.
Ken Xie is not a professional executive who was hired after the company became successful.
He built it.
Before Fortinet, he founded multiple technology companies, most notably NetScreen.
His academic background is heavily technical.
He earned engineering degrees from Tsinghua University and later a master’s degree in electrical engineering from Stanford University.
He is also a member of the U.S. National Academy of Engineering.
That doesn’t automatically make someone a great CEO.
What matters more is how effectively technical intelligence is translated into business decisions.
Xie’s record in that regard is unusually strong.
Does Ken Xie Have Intelligence, Energy and Integrity?
Warren Buffett has often emphasized three characteristics when evaluating managers:
Integrity, intelligence and energy.
Ken Xie performs exceptionally well on two of them.
Integrity is harder for an outsider to measure.
Intelligence: Exceptional
Xie’s strongest attribute may be his ability to understand where cybersecurity architecture is heading years before the market fully develops.
The ASIC strategy is one example.
Networking and security convergence is another.
Fortinet’s expansion into SASE, cloud security, operational technology and now AI security shows that the company has not remained trapped inside its original firewall market.
I would rate Xie’s technical and strategic intelligence extremely highly.
Energy: Exceptional
Xie has spent more than three decades creating cybersecurity businesses.
He founded NetScreen.
He founded Fortinet.
He has remained deeply involved in Fortinet for roughly a quarter-century.
Yet the company is still growing at rates normally associated with much younger businesses.
That suggests unusual entrepreneurial stamina.
Integrity: Generally Encouraging, But Harder to Establish
Integrity cannot be reliably measured from a résumé or earnings report.
There have also been legal matters investors should know about.
Fortinet previously settled a government matter involving country-of-origin labeling by an employee. Importantly, the company terminated the responsible employee, investigated the issue and cooperated with authorities.
More recently, Fortinet and senior executives including Xie have faced shareholder litigation concerning statements around the firewall replacement cycle.
Those allegations remain disputed and should not be treated as proven wrongdoing.
Therefore, I wouldn’t characterize Xie as unethical based on currently available information.
But an investor evaluating management integrity should continue monitoring those cases.
My assessment would be roughly:
Technical intelligence: 10/10
Strategic thinking: 9.5/10
Energy and drive: 9.5/10
Long-term orientation: 9.5/10
Integrity: positive overall, but with unresolved issues worth watching
Enormous Skin in the Game
One of the things I particularly like about Fortinet is that its founders remain major owners.
Ken Xie recently owned approximately 9.8% of Fortinet.
Michael Xie owned approximately another 9.3%.
Together, the brothers therefore retain close to one-fifth of the company.
This creates powerful economic alignment.
If Fortinet destroys shareholder value, the Xie family loses billions.
If Fortinet compounds successfully for another decade, the founders prosper alongside ordinary shareholders.
I generally prefer this arrangement to companies where hired executives own relatively little stock and receive enormous compensation regardless of long-term shareholder returns.
Founder ownership doesn’t guarantee good decisions.
But it usually makes me pay closer attention.
Fortinet Is Increasingly Expanding Through Acquisitions
Another important part of Fortinet’s strategy deserves more attention.
Historically, Fortinet has developed much of its technology internally.
It remains primarily an organic-growth company.
But management has become increasingly willing to acquire smaller specialized cybersecurity companies when doing so can fill gaps in the Fortinet platform faster than building everything internally.
That is an important distinction.
Fortinet does not appear to be pursuing a traditional acquisition roll-up strategy where a company continually buys competitors simply to manufacture revenue growth.
Instead, the strategy looks much more like:
Build the core internally, identify missing technology, acquire it, integrate it into Fortinet’s ecosystem and sell it through Fortinet’s existing customer base.
Recent acquisitions illustrate this approach.
Lacework: Expanding Deeply Into Cloud Security
One of Fortinet’s most important recent acquisitions was Lacework.
Lacework specializes in cloud-native application protection.
Its technology helps companies secure cloud workloads, applications, containers, cloud configurations and other parts of the software-development and deployment process.
This was strategically important because cloud security is an area where companies such as Palo Alto Networks and CrowdStrike had already established strong positions.
Instead of spending years rebuilding every cloud-security capability from scratch, Fortinet acquired a company with established technology and expertise.
Fortinet paid roughly $152 million in cash for Lacework.
For a company Fortinet’s size, that was a relatively modest purchase.
Ken Xie indicated that Lacework substantially expanded Fortinet’s addressable market and brought specialized engineering and sales talent into the company.
The acquisition helps Fortinet move from:
network security
toward:
network + cloud + application security.
That makes Fortinet increasingly capable of competing for broader enterprise cybersecurity budgets.
Next DLP: Protecting Corporate Data
Fortinet also acquired Next DLP for roughly $105 million.
DLP stands for Data Loss Prevention.
The technology helps companies prevent sensitive corporate information from leaving authorized environments.
Imagine an employee trying to:
copy confidential customer records,
upload proprietary source code,
send financial data outside the company,
move documents into unauthorized cloud storage,
or expose sensitive data through AI applications.
DLP systems are designed to identify and stop these kinds of events.
Next DLP also brought insider-risk detection and machine-learning capabilities.
Fortinet can integrate this technology into its SASE and endpoint-security offerings.
Again, this appears to be a targeted technology purchase rather than an acquisition designed merely to increase revenue.
Perception Point: Securing the Modern Workplace
Fortinet also acquired technology from Perception Point.
Perception Point specializes in protecting communication and collaboration environments such as:
email,
web browsers,
Microsoft Teams,
Slack,
cloud storage,
and SaaS applications.
This helps Fortinet protect users beyond the traditional corporate network.
That’s becoming increasingly important.
Employees now work through dozens of cloud applications, browsers and collaboration systems rather than simply connecting to a corporate server.
Every one of those applications creates another potential attack vector.
The acquisition therefore expands Fortinet’s workplace-security capabilities.
Linksys: Extending Security Beyond the Enterprise
Fortinet has also taken full control of Linksys, the networking company familiar to many consumers.
This acquisition is somewhat different from Lacework or Next DLP.
The potential strategy is to extend enterprise-quality networking and security technology into:
home offices,
small businesses,
remote employees,
smart homes,
IoT environments,
and consumer networking.
Remote work has blurred the traditional distinction between enterprise networks and home networks.
An employee may be accessing highly sensitive corporate data from the same home router used by televisions, cameras, gaming consoles and smart appliances.
That creates security challenges Fortinet could potentially address.
I view Linksys as somewhat more speculative strategically than Lacework, but Fortinet’s incremental purchase price for full control was relatively modest.
Virtue AI: Preparing for the Next Security Battlefield
Fortinet’s acquisition of Virtue AI in August 2026 may eventually prove particularly important.
AI security could become an enormous cybersecurity category.
Companies are increasingly deploying:
AI models,
AI applications,
autonomous AI agents,
AI assistants,
APIs,
MCP-connected tools,
and automated systems capable of taking real-world actions.
Those systems introduce entirely new vulnerabilities.
An AI agent could potentially access corporate databases, execute code, communicate with customers, initiate transactions, read confidential documents or communicate with other agents.
Securing those environments will require more than traditional firewalls.
Virtue AI specializes in areas such as:
AI runtime protection,
AI application testing,
AI-agent security,
prompt and model protection,
and protection of AI-connected tools.
This complements Fortinet’s internally developed AI-security products.
The strategic significance is important.
Ken Xie is not merely defending Fortinet’s existing firewall franchise.
He is trying to position Fortinet for an emerging market:
Securing the AI infrastructure itself.
That could become a major growth opportunity over the next decade.
What I Like About Fortinet’s Acquisition Strategy
The size of the acquisitions matters.
Fortinet has generally been buying relatively small companies compared with its own market capitalization.
Recent transactions have often been measured in tens or hundreds of millions—not tens of billions.
That lowers acquisition risk.
Fortinet can purchase specialized technology, integrate it into its architecture and distribute it through a massive existing sales organization.
This can produce powerful economics.
Consider an existing Fortinet customer that already buys firewalls and networking products.
Fortinet can potentially sell that same customer:
cloud security,
SASE,
endpoint protection,
DLP,
email security,
security analytics,
AI security,
and other products.
The company therefore does not necessarily need to acquire a new customer every time it wants to increase revenue.
It can increase the amount each existing customer spends.
Cross-selling usually has much better economics than constantly finding new customers.
The Acquisition Strategy Is Also Relatively Disciplined
This is important because acquisitions can destroy enormous amounts of shareholder value.
Large technology companies frequently overpay for businesses simply because management wants another growth story.
Fortinet so far appears more disciplined.
The company’s acquisitions have generally been:
strategically focused,
relatively small,
technology-driven,
easy to finance,
and designed to complement existing products.
That is exactly the type of M&A strategy I prefer.
I would become more concerned if Fortinet suddenly began spending $10 billion or $20 billion buying large companies simply to maintain growth.
But buying a $100–200 million specialist with valuable technology and then selling that technology through Fortinet’s enormous distribution network can create considerable value.
Fortinet Still Appears Primarily Organic
This point is critical.
Fortinet’s recent growth has not simply been manufactured by acquisitions.
Its latest 26% revenue growth and extraordinary product growth have largely reflected strong underlying demand.
The company continues investing heavily in internal research and development and has accumulated more than 1,000 U.S. patents.
Therefore, I would characterize its expansion strategy as:
Organic innovation first, selective acquisitions second.
That is generally healthier than relying on M&A as the primary engine of growth.
Fortinet vs. CrowdStrike
CrowdStrike is one of the best cybersecurity companies in the world.
Its Falcon platform has become enormously important in endpoint security, threat detection and security operations.
Its recent growth has also been excellent.
But valuation is the problem.
Using the late-August 2026 figures we discussed earlier, CrowdStrike was trading around:
~185× forward earnings
while Fortinet was closer to:
~50× forward earnings.
The businesses aren’t identical, and CrowdStrike deserves a premium because of its subscription model, ARR growth and strong competitive position.
But a multiple approaching 200× earnings creates enormous expectations.
Fortinet gives investors substantial growth while requiring considerably less future perfection.
That makes FTNT appear significantly safer from a valuation perspective.
Fortinet vs. Palo Alto Networks
Palo Alto Networks may currently be the strongest overall pure-play cybersecurity platform.
Its product breadth is extraordinary.
PANW competes across:
networking,
cloud security,
SASE,
endpoint security,
SecOps,
identity,
and increasingly AI security.
If I ignored valuation completely, Palo Alto could arguably be the strongest overall cybersecurity franchise.
But investors cannot ignore price.
Using the recent valuations discussed earlier:
PANW: roughly 90×+ forward earnings
versus:
FTNT: roughly 50×.
Palo Alto may deserve some premium.
Whether it deserves almost twice the earnings multiple is a much more difficult question.
Fortinet’s combination of proprietary silicon, high margins and founder leadership makes the cheaper valuation particularly interesting.
Fortinet vs. Okta
Okta specializes primarily in identity security.
It is becoming increasingly profitable and generates substantial free cash flow.
Identity could also become tremendously important in an AI-agent world.
But Okta’s recent revenue growth has been closer to the low teens.
Fortinet recently grew approximately 26%.
Okta’s valuation was around the mid-40× forward-earnings range, somewhat below Fortinet.
Therefore, Okta may technically be cheaper.
But Fortinet currently offers much faster growth and substantially higher GAAP operating profitability.
For roughly comparable valuations, I currently prefer Fortinet’s business economics.
Fortinet vs. Check Point
If someone simply asks:
“Which major cybersecurity company is cheapest?”
Fortinet probably isn’t the answer.
Check Point Software trades at a dramatically lower earnings multiple.
But there is a reason.
Check Point’s overall growth has been much slower.
That creates a very different investment proposition.
Check Point offers:
lower valuation + high profitability + slower growth.
Fortinet offers:
higher valuation + high profitability + considerably faster growth.
For a long-term growth investor, I find Fortinet more attractive.
For a strict value investor, Check Point may be more appealing.
Relative Cybersecurity Valuations
Using approximate late-August 2026 figures discussed earlier:
| Company | Approx. Forward P/E | Investment profile |
|---|---|---|
| Check Point | ~13× | Very cheap, slow growth |
| Zscaler | ~37× | Zero Trust/SSE growth |
| Okta | ~45× | Identity, moderate growth |
| Fortinet | ~50× | Growth + exceptional profitability |
| Palo Alto | ~90×+ | Broad leader, expensive |
| CrowdStrike | ~180×+ | Excellent growth, extreme valuation |
These multiples change constantly and are not perfectly comparable because accounting models differ.
But the broad conclusion remains useful.
Fortinet isn’t the cheapest cybersecurity stock.
It may instead occupy a particularly attractive middle ground:
Much stronger growth than the inexpensive mature players, but a far more reasonable valuation than the most expensive high-growth leaders.
Is Fortinet a Safe Investment?
The answer depends upon what we mean by safe.
The business itself looks relatively safe.
Fortinet has:
a huge installed customer base,
mission-critical products,
high recurring service revenue,
excellent operating margins,
large free cash flow,
a strong balance sheet,
modest debt,
founder ownership,
proprietary technology,
and substantial secular cybersecurity demand.
I see relatively little financial-distress risk.
But FTNT stock itself can still be volatile.
At approximately 50× forward earnings, investors are already expecting substantial future growth.
Suppose the company earns approximately $3.50 per share.
At different valuation multiples:
| P/E | Implied price |
|---|---|
| 50× | $175 |
| 45× | $157.50 |
| 40× | $140 |
| 35× | $122.50 |
| 30× | $105 |
The company could remain highly profitable and continue growing while the stock declines considerably simply because investors decide to pay a lower multiple.
That is called multiple compression.
It is probably one of FTNT’s largest investment risks today.
At What Price Does Fortinet Become Particularly Attractive?
Using Fortinet’s approximate FY2026 adjusted EPS guidance midpoint around $3.44:
| FTNT share price | Approx. P/E |
|---|---|
| $170 | 49× |
| $160 | 47× |
| $150 | 44× |
| $140 | 41× |
| $130 | 38× |
| $120 | 35× |
| $110 | 32× |
| $100 | 29× |
This is why I distinguish between liking Fortinet the company and liking FTNT at every possible price.
Around $165–$170, I like the business more than the valuation.
Around $140–$150, the risk/reward becomes considerably more interesting if the fundamentals remain strong.
Around $120–$130, I would regard the valuation as particularly attractive for a company with Fortinet’s competitive position, margins and balance sheet—provided the decline was not caused by significant deterioration in the business itself.
What Could Go Wrong?
Fortinet still faces meaningful risks.
Palo Alto Networks is an extraordinarily capable competitor.
CrowdStrike continues expanding beyond endpoint security.
Microsoft can bundle cybersecurity capabilities into Microsoft 365 and Azure.
Fortinet remains exposed to firewall and networking upgrade cycles.
Its recent 52% product-revenue growth is unlikely to continue indefinitely.
Acquisitions could eventually become harder to integrate.
AI-security investments may take years to produce meaningful revenue.
The Xie brothers’ substantial ownership provides alignment but also creates significant founder/family influence.
Pending shareholder litigation involving management should continue to be monitored.
And most importantly, the stock still carries a premium valuation.
None of these concerns invalidate the investment thesis.
But they prevent FTNT from being considered genuinely low-risk.
The Fortinet Investment Thesis in One Sentence
If I had to summarize the entire investment case:
Fortinet is evolving from a highly profitable firewall and networking company into a broader cybersecurity platform, using proprietary technology, organic innovation and disciplined acquisitions under a technically exceptional founder-CEO—while trading at a substantially lower valuation than CrowdStrike and Palo Alto Networks.
That combination is uncommon.
My Overall Assessment
I would currently rate Fortinet approximately:
| Category | Assessment |
|---|---|
| Business quality | 9/10 |
| CEO / management | 9/10 |
| Technical moat | 9/10 |
| Financial strength | 9.5/10 |
| Profitability | 9.5/10 |
| Growth prospects | 9/10 |
| Acquisition strategy | 9/10 |
| AI opportunity | 8.5/10 |
| Current valuation | 6.5/10 |
| Overall risk/reward | 8/10 |
Among Fortinet, CrowdStrike, Palo Alto Networks and Okta, Fortinet currently strikes me as perhaps the best balance between quality and price.
CrowdStrike may grow faster.
Palo Alto may have the broadest overall cybersecurity platform.
Okta may offer an especially interesting identity opportunity.
Check Point may be cheaper.
But Fortinet gives investors something unusual:
High growth without sacrificing profitability, a founder with enormous ownership, proprietary technology, tremendous cash generation and an acquisition strategy that so far appears disciplined rather than reckless.
That does not make FTNT cheap.
And it certainly does not guarantee good returns from today’s price.
But compared with the extremely high valuations attached to some cybersecurity competitors, Fortinet appears relatively reasonably priced and financially safer.
The aspect I find increasingly attractive is that Fortinet isn’t standing still.
Ken Xie is using the company’s cash and technological foundation to expand from traditional network security into cloud security, SASE, data protection, workplace security and now AI security.
If Fortinet successfully integrates companies such as Lacework, Next DLP and Virtue AI into its broader Security Fabric and cross-sells those capabilities to its enormous installed customer base, the company could emerge from the next decade as something much larger than a firewall manufacturer.
It could become one of the world’s dominant end-to-end cybersecurity platforms.
For a long-term investor, that possibility makes FTNT a company worth watching very closely—particularly if a broader market correction provides the opportunity to buy an excellent business at a considerably better valuation.
