Market Insights

Fortinet sold more boxes than ever. The market wanted the meter, and it fell 26%.

Fortinet beat on revenue, billings and profit, then lost about a quarter of its value after hours over a $40 million service guide cut. The cut is small. What it says about where Fortinet’s growth comes from is not.

Oct 29, 2026 · 4 min read

The print. Fortinet beat on Wednesday. Revenue grew 20% to $2.08 billion. Billings, the value of what customers signed up for in the quarter, grew 29% to $2.34 billion. Free cash flow was $865 million. Fortinet raised its full-year billings guide for the third time this year. Then the stock fell about 26% after hours, from $174.29 to $129.68. BofA downgraded it to Neutral on Thursday, and Reuters counted at least 15 other brokers cutting their targets.

The one line that mattered. Fortinet cut its full-year service revenue guide to $5.15 billion to $5.17 billion, from $5.18 billion to $5.22 billion. The Street was at $5.2 billion, per Bloomberg data. That’s about $40 million at the midpoint, on a company guiding to more than $8.1 billion in revenue. The market didn’t sell $40 million. It sold the story behind it.

Box versus meter. Fortinet reports two kinds of revenue. Product is the hardware: FortiGate firewalls, switches, access points. You sell it once. Service is everything after: support and FortiGuard security subscriptions that renew every year. Service is the meter, and the meter is what earns a software multiple. In Q3, product grew 37% to $765 million. Service grew 13% to $1.31 billion. A quarter earlier, product had grown 52%. The box is still sprinting. The meter is jogging.

Why the box outran the meter. Management answered this on the call, and the answers are more interesting than the guide. First, pricing. Fortinet’s investor relations team clarified that price increases added about 10 percentage points to billings growth this year. Second, inventory. Ken Xie said Fortinet normally keeps about six months of inventory on hand. In the first half, management said, that let it sell at higher prices on stock bought at lower costs. From Q3, Xie said, that cushion is “starting to disappear,” and some component lead times are longer. BofA put it bluntly: the normalization of Fortinet’s inventory advantage “is limiting its ability to meet demand.”

Third, and most important, mix. CFO Christiane Ohlgart said big new customers roll out hardware first and switch services on later. Sovereign deployments, where a government or regulated buyer runs everything on its own gear, are more product-heavy than cloud deals. Networking gear carries fewer subscriptions than a firewall. Bloomberg Intelligence read the cut as lower attach rates, meaning fewer subscriptions sold per box.

The bull case is real. Service billings grew 26%. Short-term deferred revenue, subscriptions already paid for but not yet counted as revenue, grew 14.5%, its fastest pace in five quarters. Fortinet says service growth in 2027 will beat 2026. If customers are paying for subscriptions they haven’t switched on yet, the revenue shows up later. That’s timing, and timing fixes itself.

Where I land. Timing explains one quarter. It doesn’t explain the mix. The sharpest question on the call came from Raymond James, which asked whether Fortinet should consider a chip-company-style model for its fastest-growing buyers, sovereign clouds and neoclouds that buy high volumes of hardware and run their own services. When an analyst asks that out loud, the multiple is already moving.

Here’s the rough math. Using the reported share prices and Fortinet’s guided diluted share count of about 742 million, the company was worth roughly $129 billion at Wednesday’s close and roughly $96 billion after hours. Against the full-year revenue guide midpoint of $8.17 billion, that’s about 15.8 times sales before the print and about 11.8 times after. That’s still a premium. But it’s no longer a pure subscription premium. The market is pricing a share of Fortinet as part security platform, part hardware cycle.

The read-across. Palo Alto Networks, CrowdStrike and Zscaler each gave up 6% to 7% after hours. Tenable beat and raised, then fell 6.87% after hours on a Q4 guide that implied 6.9% growth. The pattern for this earnings season is simple: a beat is the entry fee. What gets paid is proof of recurring growth for 2027.

What buyers should do. If you’re mid-refresh, this quarter is leverage. Fortinet says pricing has stabilized and it needs services attached. Push for multi-year subscription bundles priced off today’s hardware quote, and lock delivery dates in writing given the lead times. Check Point launched a firewall-as-a-subscription offer on Monday, where the vendor owns the box and you pay one monthly or annual fee. Put both on the table. The vendor that most needs recurring revenue is the one most likely to bend on it.

Sources