Fortinet is accelerating its transition toward AI-powered cybersecurity services and Unified SASE (Secure Access Service Edge) solutions as enterprise customers increasingly shift spending from traditional firewall hardware to cloud-based security, automation, and AI-driven threat operations.
Speaking during the Q1 2026 earnings call, CEO Ken Xie said Fortinet is positioning itself for the “second wave” of cybersecurity investment centered on artificial intelligence, automation, and secure networking modernization.
Fortinet reported revenue of $1.46 billion in Q1 2026, representing 10.1 percent growth. Total billings reached $1.54 billion, up 6 percent, reflecting momentum in software subscriptions and security services despite weakness in hardware refresh cycles.
The company’s service revenue increased 22 percent to $960 million, driven by strong adoption of AI-powered security subscriptions, Unified SASE services, and Security Operations (SecOps) solutions. Meanwhile, product revenue declined 8 percent as enterprise customers continued digesting firewall inventory accumulated during the post-pandemic infrastructure expansion cycle.
Fortinet’s Security Operations business emerged as a major growth engine during the quarter, with SecOps revenue increasing 24 percent. The company is integrating artificial intelligence capabilities across its FortiOS operating platform to help enterprises transition from reactive cybersecurity management to proactive threat detection and automated incident response.
A major focus area is FortiAI, the company’s generative AI assistant integrated across Fortinet’s SecOps and Unified SASE portfolio. FortiAI enables security analysts to automate complex operational tasks, accelerate investigations, and simplify enterprise cybersecurity management.
Fortinet revealed that AI-driven automation now handles approximately 90 percent of routine security alerts for enterprise customers, significantly reducing mean time to resolution (MTTR) and improving operational efficiency for IT security teams.
Unified SASE continued to be one of Fortinet’s fastest-growing businesses in Q1 2026. Revenue in the segment increased 27 percent, while Unified SASE billings accounted for approximately 24 percent of total company billings, up from 19 percent a year earlier.
Fortinet’s convergence strategy combines networking and cybersecurity into a unified cloud-managed architecture. Through its FortiLink technology, enterprise customers can manage wired infrastructure, wireless networks, SD-WAN, and security policies through a single cloud-based management console.
Fortinet also expanded its global SASE infrastructure footprint to more than 150 points of presence worldwide, improving low-latency secure connectivity for multinational enterprise customers adopting hybrid work environments and cloud-native applications.
The company continues to strengthen its position in the large enterprise market despite cautious global IT spending conditions. Fortinet closed more than 25 deals valued above $5 million during Q1 2026, representing a record number of large transactions for a first quarter.
Fortinet said large enterprise customers are becoming a bigger share of the sales pipeline as mid-market customers remain more constrained by budget pressures. Fortinet’s installed customer base now exceeds 750,000 organizations globally, maintaining one of the largest deployments in the cybersecurity industry.
Ken Xie said Fortinet’s strategy for the remainder of 2026 centers on its “Secure Networking” refresh initiative, which combines AI-ready firewall hardware with higher-margin Unified SASE and SecOps services.
The company expects enterprise customers to increasingly adopt integrated AI-driven networking and security platforms as organizations modernize hybrid cloud infrastructure and automate cybersecurity operations.
RAJANI BABURAJAN
