Fortinet (NASDAQ: FTNT) plunges 21%. Is recurring revenue the problem?

Fortinet, Inc. (NASDAQ: FTNT), the California-based cybersecurity company specialising in network security, firewalls and secure access technologies, saw its shares fall approximately 21% during early trading on October 29, 2026, despite reporting stronger-than-expected third-quarter earnings and raising its full-year revenue guidance. The company generated US$2.08 billion in quarterly revenue, up 20%, while billings increased 29% to US$2.34 billion and non-GAAP operating margin reached a third-quarter record of 38.2%. However, management reduced its full-year service revenue forecast by US$40 million at the midpoint and acknowledged that some large enterprise contracts were taking longer to translate into recognised recurring revenue. The central question for investors is whether the sharp selloff reflects a temporary delay in subscription recognition or a more significant slowdown in the high-margin services business that supports Fortinet’s long-term valuation.

Why did Fortinet stock collapse despite beating quarterly revenue and earnings expectations?

Fortinet’s October 28 earnings announcement contained several encouraging financial indicators. Revenue increased from US$1.725 billion a year earlier to US$2.078 billion, while GAAP net income rose approximately 34% to US$635.5 million. Non-GAAP diluted earnings increased 23% to US$0.91 per share, exceeding analyst expectations of approximately US$0.86. Revenue also surpassed the prevailing consensus of roughly US$2.06 billion, indicating that the reported quarter was stronger than expected on its headline measures.

The market response was nevertheless severe. Fortinet shares had already declined 5.9% to US$174.08 during the October 28 regular session, before the earnings announcement. They subsequently fell by approximately 25% in extended trading. During the October 29 session, the stock opened at US$127.96 before recovering to approximately US$137.97 by 10:14 a.m. Eastern Time, still 20.7% below the previous closing price.

The contradiction reflects the difference between financial performance already achieved and expectations for future growth. Fortinet entered the announcement after a substantial share-price advance during 2026, leaving its valuation particularly sensitive to signs that growth might moderate. Although the company delivered higher revenue and earnings, the performance of its services business and the outlook for hardware demand raised questions about whether the earlier expansion could continue at the same pace.

The results therefore do not establish that Fortinet’s underlying business is contracting. Rather, they suggest that some of the growth assumptions supporting the previous share price have become more difficult to justify without additional evidence. The crucial issue is whether the factors affecting current revenue recognition will reverse as large enterprise deployments progress.

Why is Fortinet’s 13% service revenue growth worrying investors when billings increased 29%?

Fortinet operates two principal revenue categories: products and services. Product revenue primarily reflects sales of security appliances and related equipment, while service revenue includes subscriptions, security updates, technical support and other recurring arrangements. Services are particularly important because they create revenue streams extending beyond the initial equipment sale and carry substantially higher gross margins.

Third-quarter service revenue increased approximately 13% to US$1.313 billion from US$1.166 billion a year earlier. Product revenue, by comparison, increased approximately 37% to US$765 million. Services still accounted for roughly 63% of quarterly revenue, making their growth rate a major determinant of future operating performance.

The concern intensified because management reduced its 2026 service revenue forecast from US$5.18 billion to US$5.22 billion previously to US$5.15 billion to US$5.17 billion. The US$40 million reduction at the midpoint is relatively modest compared with the company’s overall revenue base. Nevertheless, it contrasts with the simultaneous increase in full-year consolidated revenue guidance and suggests that the mix of growth is shifting towards hardware.

Chief Financial Officer Christiane Ohlgart attributed part of the shortfall to the timing of service activation within large enterprise agreements. Customers purchasing substantial new infrastructure sometimes activate associated subscriptions in stages, meaning the service revenue begins appearing later than management originally anticipated. Fortinet also secured expansion agreements that consolidated several existing service arrangements, creating additional differences between contract activity and recognised revenue.

This explanation is commercially plausible but must be tested against subsequent financial results. Revenue delayed because services have not yet been activated could support future periods as deployment proceeds. However, the eventual benefit depends on the contractual arrangements, activation schedules and the continued value of services purchased by customers.

The stronger billings figure provides evidence that the commercial pipeline remains active. Total billings increased 29% to US$2.336 billion, while management reported approximately 26% growth in service billings. The company calculates total billings using recognised revenue plus the change in deferred revenue, adjusted for acquired deferred revenue balances. This is a non-GAAP measure and should not be interpreted as cash collected during the quarter or as a guarantee of future recognised revenue.

Fortinet also reported US$7.934 billion in total deferred revenue at September 30, comprising current and longer-term balances. Short-term deferred revenue growth accelerated to approximately 14.5%, its strongest pace in five quarters. These indicators support management’s argument that the service business retains underlying commercial momentum, although the timing and profitability of future revenue recognition remain important.

Is the firewall hardware upgrade cycle beginning to slow after Fortinet’s exceptional growth?

Fortinet’s product business has benefited from customers replacing older firewalls with newer systems offering greater processing capacity, improved security functions and more efficient networking capabilities. Demand has also been supported by increased corporate investment in artificial intelligence infrastructure, operational technology security and network modernisation. These developments helped product revenue grow rapidly during the first nine months of 2026.

However, the rate of expansion is moderating. Third-quarter product revenue growth of 37% compared with approximately 52% in the preceding quarter. Management’s December-quarter outlook also implies a further slowdown in product revenue growth, although the exact result will depend on customer purchasing schedules and the mix of hardware and services.

A particularly important detail emerged from the earnings discussion. Management indicated that price increases had contributed approximately 10 percentage points to third-quarter billings growth. Earlier price adjustments were partly associated with rising equipment costs and strong demand for newer products, but their contribution is beginning to stabilise.

This matters because growth supported by higher selling prices can moderate even when underlying demand remains healthy. If future pricing increases become smaller, Fortinet will need greater equipment volumes, stronger product mix or faster growth in other services to sustain comparable revenue expansion. Investors therefore cannot assume that the exceptional hardware growth achieved earlier in 2026 will continue automatically.

Management also acknowledged longer lead times for certain components. Fortinet held US$591.2 million in inventory at September 30, compared with US$399.5 million at the end of 2025. The higher balance reflects preparation for customer demand and supply-chain requirements, but it also increases the importance of matching procurement with actual delivery schedules.

The most constructive interpretation is that Fortinet continues benefiting from a strong network security replacement cycle, while growth naturally moderates against increasingly demanding comparisons. A more cautious interpretation is that earlier purchasing and pricing activity may have brought forward some demand, leaving the company facing slower hardware expansion during 2027. Future product orders and customer deployment patterns will help distinguish between those possibilities.

Can Fortinet’s AI security, SASE and operational technology businesses sustain higher growth?

Fortinet has been expanding beyond conventional firewall appliances into broader security services and integrated networking products. Its strategic priorities include secure access service edge, operational technology security and AI-driven security operations. These offerings are intended to help enterprises protect increasingly distributed computing environments while simplifying the number of separate security products required.

The latest operating indicators suggest demand remains strong in several targeted areas. SASE firewall billings increased approximately 31% during the September quarter, while operational technology security billings grew nearly 40%. AI-driven security operations billings increased 15%. These growth rates are encouraging, although Fortinet has not disclosed sufficient standalone revenue figures to determine precisely how much each business contributes to consolidated earnings.

Management also reported that the aggregate value of large enterprise deals exceeding US$1 million increased 51%. The company highlighted customer demand for protecting AI infrastructure, industrial systems and complex enterprise networks. Larger contracts could support stronger long-term customer relationships, although they may also involve phased deployments and service activation schedules that complicate near-term revenue recognition.

Fortinet recently introduced its FortiGuard Inline AI Security Service, designed to monitor and protect enterprise use of artificial intelligence applications. It also expanded FortiLink SASE capabilities for distributed locations and announced collaborations involving Oracle Corporation, Microsoft Corporation and NVIDIA Corporation. These developments broaden its technology portfolio, but partnerships and product announcements should not be treated as evidence of a specific amount of contracted revenue unless financial terms are disclosed.

The commercial challenge is to convert product development and enterprise interest into sustained service revenue. New AI security products may offer opportunities to increase subscriptions among existing customers, particularly as businesses seek protection against data exposure and emerging threats. Nevertheless, the speed of adoption, competitive pricing and contribution to profitability remain uncertain.

Management expects service revenue growth to accelerate during 2027 relative to the approximately 13% anticipated for 2026. That expectation is supported partly by stronger service billings and deferred revenue growth, but the company has not yet issued a detailed numerical services forecast for the coming year.

The key question is whether those leading indicators will translate into faster recognised revenue growth as anticipated. Until that happens, strong billings and expanding product capabilities provide encouraging evidence of demand without completely resolving the concerns affecting the share price.

Has Fortinet become attractively valued after losing more than 20% in one session?

Fortinet shares were trading near US$137.97 at 10:14 a.m. Eastern Time on October 29, compared with the previous closing price of US$174.08. Using the same price series, the intraday quotation was approximately 20.2% below the October 22 close of US$172.98 and approximately 21.6% below the September 29 close of US$175.96. The stock’s observed 52-week trading range was US$73.55 to US$197.13.

The sharp decline has reduced the valuation considerably, although the share price remains substantially above its annual low. Using approximately 733.7 million ordinary shares outstanding, the October 29 intraday reference implies an equity market capitalisation of roughly US$101.2 billion. This is a Business News Today calculation based on a specified intraday price rather than an official closing valuation.

Against management’s updated 2026 revenue guidance midpoint of US$8.17 billion, that represents approximately 12.4 times expected annual sales. Dividing the intraday share price by the midpoint of the company’s US$3.54 to US$3.58 full-year adjusted earnings guidance produces a multiple of roughly 38.8 times expected non-GAAP earnings. The valuation remains dependent on assumptions about future recurring revenue growth and margins.

Those multiples are materially lower than before the earnings announcement, but they are not necessarily inexpensive in isolation. A business generating high margins, significant recurring revenue and strong free cash flow may justify a substantial premium. However, that premium becomes more difficult to sustain if service revenue growth remains near current levels or hardware sales moderate more quickly than expected.

Fortinet’s balance sheet provides an important counterweight to the growth concerns. The company reported US$3.751 billion in cash and cash equivalents and US$1.048 billion in short-term investments at September 30. Long-term debt stood at approximately US$497 million after repayment of US$500 million of notes during the first nine months.

Cash generation also remained substantial. Third-quarter operating cash flow reached approximately US$946 million, while company-defined free cash flow was US$865 million, an increase of 52% year over year. For the first nine months, free cash flow reached approximately US$2.84 billion.

The board also approved a US$1.2 billion increase to its share-repurchase authorisation, leaving approximately US$2 billion available. Repurchases may support per-share earnings over time, but they cannot independently reverse weaker operating trends or establish that the current valuation is appropriate.

The financial position therefore does not suggest that Fortinet is confronting an immediate liquidity problem. The more important valuation issue is whether the company can sustain the recurring revenue expansion and profitability expected of a premium cybersecurity business.

What must happen in the fourth quarter and 2027 to restore confidence in Fortinet’s growth?

The immediate milestone is delivery against Fortinet’s December-quarter guidance. Management expects revenue between US$2.155 billion and US$2.245 billion, with a midpoint of US$2.2 billion, equivalent to approximately 15% year-over-year growth. Billings are forecast between US$2.775 billion and US$2.925 billion, implying approximately 20% growth at the midpoint.

The guidance also calls for non-GAAP operating margin between 35.5% and 37.5%, below the 38.2% achieved in September. This does not necessarily indicate a permanent deterioration in profitability, because quarterly margins can change with product mix and spending patterns. However, it reinforces the importance of assessing whether the company can maintain operating efficiency as hardware growth moderates.

The second milestone is service revenue conversion. Based on the first nine months’ reported US$3.793 billion in service revenue, the revised annual guidance implies approximately US$1.357 billion to US$1.377 billion in fourth-quarter service revenue. That would represent sequential growth from the September-quarter figure of US$1.313 billion, but the longer-term question concerns whether service revenue can accelerate more substantially during 2027.

The third milestone is demand for newer security platforms. Continued growth in SASE, operational technology and AI security services could provide opportunities to expand customer relationships beyond traditional firewall hardware. However, the financial significance will depend on subscription adoption, recognised revenue and margins, not merely the number of announced technologies or partnerships.

A fourth consideration is the sustainability of hardware demand. Management has indicated that customer requirements remain strong, but the combination of slower product growth and a stabilising contribution from price increases creates a more demanding comparison for the coming year. Updated product guidance and evidence of continued enterprise purchasing will help establish whether the current moderation reflects normalisation or a more persistent slowdown.

Fortinet’s reported financial performance remains strong in several respects. Revenue, operating profit, billings and free cash flow all increased during the latest quarter, while its balance sheet provides substantial flexibility. The sharp share-price decline therefore reflects concerns about the future composition and durability of growth rather than evidence of a financially distressed business.

What remains unresolved is whether stronger service billings and deferred revenue will produce the acceleration in recognised recurring revenue that management expects during 2027. If that conversion occurs alongside resilient margins and continued customer demand, the investment case could strengthen considerably. If service growth remains subdued while product expansion slows, the valuation may face further pressure despite the company’s substantial existing profitability.

The next decisive evidence will come from the December-quarter results and more detailed 2027 guidance. For Fortinet, the issue is no longer simply whether cybersecurity demand is growing, but whether the company can convert that demand into the recurring earnings profile implied by its market valuation.

Key takeaways: What should Fortinet investors watch after the earnings-driven selloff?

• Fortinet shares declined approximately 21% during early October 29 trading after reporting stronger-than-expected quarterly earnings.
• Third-quarter revenue increased 20% to US$2.078 billion, while total billings grew 29% to US$2.336 billion.
• Service revenue increased only 13%, and management reduced its full-year services forecast by US$40 million at the midpoint.
• Product revenue grew 37%, down from approximately 52% growth in the preceding quarter, indicating moderating hardware momentum.
• Management reported 26% growth in service billings and stronger short-term deferred revenue, supporting its expectation of faster services growth during 2027.
• Fortinet generated US$865 million in quarterly free cash flow and maintained substantial liquidity, reducing immediate financing concerns.
• Sustained improvement in service revenue recognition, continued enterprise demand and resilient operating margins would provide the strongest evidence supporting a recovery in the investment case.