Part 3: Fortinet's Chip Edge and the Memory Bill
Most cybersecurity stories are about software: subscriptions, ARR and platform deals. Fortinet's 2026 story is about hardware. Its firewall appliances grew 52% year over year last quarter, and two chip questions sit underneath that number: what its in-house security processors buy it, and how much of the growth is simply memory costs passed through to customers. This is Part 3 of Cybersecurity Stocks, Five Ways.
KEY TAKEAWAYS
1. Q2 2026 product revenue rose 52% to $773M while total revenue grew 26% to $2.05bn, per Fortinet's July 29, 2026 release.
2. Fortinet says its SP5 security chip runs firewall work 17x and encryption 32x faster than a leading standard CPU at 88% less power. The next chip, SP6, moves to Intel.
3. CEO Ken Xie puts memory at 10% to 20% of cost. If it is 15%, a 60% memory price jump adds 9% to appliance cost (illustrative calculation). Fortinet raised appliance prices 5% to 20%.
A hardware quarter at a software multiple
Fortinet reported Q2 2026 on July 29. Billings rose 33% to $2.37bn and the non-GAAP operating margin hit 38.0%. Full-year revenue guidance moved to $8.02bn to $8.18bn, the second raise after the initial $7.50bn to $7.70bn range set in February. Product revenue was about 38% of the total, high for a security vendor.
The stock closed at $191.27 on Oct 6, 2026, for a market value of roughly $140bn, per secondary market data. That valuation rests on two things this post looks at: a chip design edge that Fortinet says lowers its cost per unit of performance, and an appliance cycle whose length is still an open question.
Why a firewall vendor designs its own silicon
A firewall inspects every packet that crosses the network. It checks whether a session is allowed, decrypts encrypted traffic and matches content against threat signatures. Put all of that on a general-purpose CPU and the jobs queue behind one another. That is why turning on more security features usually slows a box down.
Fortinet's answer is to split the work across fixed-function hardware. According to Fortinet's hardware acceleration documentation, its NP (network processor) blocks handle the packet path, such as firewall sessions and IPsec, while CP (content processor) blocks handle pattern matching for intrusion prevention and antivirus. SP5, announced on Feb 6, 2023, puts both alongside Arm CPU cores on one system-on-chip. Fortinet describes it as a 7-nanometer part; press reports name TSMC as the foundry.
Fixed-function logic trades flexibility for efficiency. Fortinet says the FortiGate 1200G, an SP5-based appliance announced July 28, 2026, draws 1.9 watts per Gbps of firewall throughput. With data center power now a binding constraint, watts per Gbps is becoming a purchasing metric for security gear too, not just for GPUs.
The performance claims, and the Intel move
At launch, Fortinet claimed SP5 delivers 17x faster firewall throughput, 32x faster encryption and 3.5x faster next-generation firewall (NGFW) performance than a leading industry-standard CPU, with 88% less power. These are company numbers, not third-party benchmarks. The NGFW multiple is the smallest because application-layer inspection still leans on general-purpose compute.
The commercial point is cost. On the Q1 2026 call (May 6), Ken Xie said Fortinet gets "about 3x to 5x better performance for the same cost" on its top functions. A rival that builds on merchant server CPUs has to buy a pricier processor to go faster. A vendor with its own ASIC can lift throughput inside the same price band. Chip design shows up as gross margin.
On July 21, 2026, Intel and Fortinet announced that Intel will bring "design, packaging, and manufacturing capabilities" to SP6, with the stated goal of supply chain resilience and diversity. Intel's release also cites its "disaggregated" design expertise and advanced packaging, which reads like a multi-die design rather than one monolithic chip. Tom's Hardware reports SP6 will use Intel 4; neither company has disclosed the node, timing or performance. For a company that has relied on a single foundry, the move is as much about supply security as about the chip.
Refresh cycle, or something longer?
Product revenue climbed from $459M in Q1 2025 to $773M in Q2 2026. In 2025 Fortinet pointed to a wave of firewalls reaching end of support as a driver for 2026. Then on Aug 6, 2025 it said 40% to 50% of that refresh was already done. The stock fell 22% the next day, to $75.30, and a securities class action followed, per plaintiff law firm filings.
On the July 2026 call, Xie said current growth is "much bigger than just the refresh," citing a shift to higher-performance models and AI data center deployments, including an eight-figure win with a cloud provider. The distinction matters. Refresh-driven demand ends when the installed base is replaced. Demand driven by data center traffic lasts as long as that traffic keeps growing.
One step further: memory cost pass-through
On the Q4 2025 call (Feb 5, 2026), Xie said memory is "10% to 20%" of cost, similar to other system makers. He did not say whether that refers to appliance cost of goods. Holding every other component flat, a 15% memory share and a 60% memory price increase lift appliance cost by 9%; at 20% share and a doubling of memory prices, cost rises 20%.
Fortinet's response was price. On the same call the CFO guided to appliance increases of 5% to 20% by product, and Xie noted about six months of inventory as a buffer. By July, management said price increases were worth roughly a high single-digit amount in second-half billings assumptions. Non-GAAP gross margin held at 80.9% in Q2.
The flip side: part of the 52% is price, not units. Xie has said Fortinet cuts prices when costs fall, and in July management said memory prices had stabilized over recent weeks to months. At a Goldman Sachs conference on Sept 8, 2026, per an Investing.com transcript, the company said it mainly uses DDR5 and DDR4, not HBM. So its exposure tracks commodity DRAM contract prices, and if those roll over, reported product growth slows with them.
Illustrative calculation. Not actual company figures.
What I actually watch
| Checkpoint | Why it matters |
|---|---|
| Q3 2026 results (Oct 28) | Revenue guide $2.01bn to $2.10bn |
| Units vs. price in product growth | Separates demand from pass-through |
| SP6 node and timing | Tests the Intel foundry shift |
| DRAM contract prices | Price cuts follow if memory falls |
Value chain read-through
| Link | Fortinet data point | Signal to track |
|---|---|---|
| Security ASIC | SP6 with Intel | Node, ramp date |
| Memory | 10% to 20% of cost | DDR4/DDR5 contract price |
| Appliances | Product revenue +52% | Unit growth |
Risks to this view
• Hardware cyclicality: with product near 38% of revenue, results swing harder when a refresh wave ends.
• Price and inventory: price increases are inflating growth. If memory falls, growth slows and six months of higher-cost inventory still has to flow through.
• Litigation: the securities class action tied to 2025 refresh comments is ongoing.
• Foundry transition: any SP6 delay at Intel would push back the next generation of FortiGate appliances.
• Performance multiples are company claims, and the memory sensitivity is an illustrative calculation, not actual company figures.
Fortinet is the one name in this series where the chip roadmap and the memory price cycle sit directly in the income statement. Next in Part 4: AhnLab, Korea's security bellwether, where a hacking-headline rally meets the actual earnings.
Sources: Fortinet Q2 2026 earnings release and 10-Q (Jul 29, 2026); Fortinet Q1 2026, Q4 2025 and Q3 2025 earnings releases (SEC 8-K exhibits); Fortinet Q4 2025, Q1 2026 and Q2 2026 earnings call transcripts (Feb 5, May 6, Jul 29, 2026, via The Motley Fool); Fortinet FortiSP5 announcement (Feb 6, 2023); Fortinet FortiGate 1200G release (Jul 28, 2026); Intel and Fortinet release (Jul 21, 2026); Tom's Hardware (Jul 2026); Investing.com transcript of Goldman Sachs conference (Sep 8, 2026); Bernstein Litowitz case page, Oklahoma Firefighters v. Fortinet; share price as of Oct 6, 2026 from secondary market data.
Comments
Post a Comment