Fortinet, Inc. (FTNT) stock intrinsic value fair value estimate & owner earnings analysis

Fortinet is a global cybersecurity company that sells network security appliances (its FortiGate firewalls), software, and a growing slate of subscription services — threat-intelligence updates (FortiGuard), secure access service edge (SASE) networking, and AI-driven security operations (SecOps) — bundled together in what the company calls its Security Fabric. Revenue is diversified across more than 100 countries: Europe/Middle East/Africa is now the largest region (about 42% of 2025 revenue), the Americas is close behind (about 40%, of which the U.S. is 28%), and Asia-Pacific makes up the remainder (about 19%). Products are sold mainly through two large distributors, which together represent a meaningful share of both revenue and receivables — a concentration worth noting, though it has been a stable feature of the business for years. The heart of the business is a large, growing installed base of security appliances that generates recurring subscription revenue as customers renew their FortiGuard and SASE/SecOps subscriptions. At the end of 2025, roughly 71% of the service revenue recognized during the year was already sitting on the books as deferred revenue at the start of the year — a good measure of how visible and recurring this business has become. Owner earnings — cash generated by the business after removing the swings caused by working-capital timing, stock-based compensation, and the portion of capital spending that funds growth rather than upkeep — have grown steadily and substantially: from roughly $0.72 per share in 2020 to about $2.54 per share in 2025, driven by margin expansion as the subscription mix has grown and the fixed cost base has spread over a larger revenue base. Fortinet carries no meaningful debt and has funded an aggressive, multi-year buyback program from free cash flow, shrinking its share count every year since 2017. One accounting judgment worth flagging: Fortinet capitalizes a large and growing amount of sales-commission-type costs each year (about $449 million in 2025) and amortizes them over time. We treated the cash outlay for these costs as a recurring cost of doing business — not a one-time item to add back — consistent with how we treated other working-capital items. We also split capital spending on property and data centers into a growth portion (expanding Fortinet's own cloud/data-center footprint to support its SASE and SecOps offerings) and a maintenance portion; only the maintenance portion is treated as a true cost of staying in business. We valued the shares using three cases: Bear case (about $44/share): in its 2025 10-K the company disclosed pending securities class actions in which shareholders allege that Fortinet's public statements about a 2026 firewall refresh cycle — a wave of aging appliances reaching end of support that would need replacing — were inaccurate; these are allegations and remain unresolved. If the anticipated refresh wave proves smaller or more front-loaded than expected, combined with intensifying competition from larger, well-funded rivals (Palo Alto Networks, Cisco, Zscaler and others) in the fast-moving SASE/cloud-security category, growth could slow sharply, reaching roughly flat within about a decade as the recurring subscription base persists without further growth. Base case (about $98/share): growth continues near the pace actually delivered over the last year (about 16%), gradually decelerating over the following decade to mid-single digits as the business matures and comparisons get tougher, then persisting at a modest 2% annual pace beyond that — supported by the size and stickiness of the subscription base and the company's demonstrated ability to raise prices to offset cost increases. Bull case (about $147/share): the acceleration already visible in the first half of 2026 — revenue growth of roughly 20-26% year over year, well above 2025's pace — continues as the refresh cycle plays out as originally described, supported by continued subscription attach to a growing installed base. Given the real uncertainty behind the spread between these cases — most of it tied to whether the 2026 refresh-cycle growth story is real and durable, or was overstated — the margin-of-safety price is about $63 per share, a level at which the cases imply a 20%+ annual return with cushion against a materially worse-than-expected outcome. Because the accelerated growth is still only two quarters old and the related litigation is unresolved, the stronger growth story is not treated as confirmed until that acceleration persists for a couple more quarters and the litigation resolves without a materially adverse outcome. The business is financially strong — no debt, a shrinking share count, and high revenue visibility. The main risk to this view is that the current growth acceleration does not hold up and Fortinet instead reverts to the slower path implied by the bear case.