Fortinet Stock: A 389% Ransomware Surge Is Building the Bull Case for FTNT in 2026

Wiltone Asuncion8 minute read
Reviewed by: David Hanson
Last updated May 6, 2026

Key Stats for Fortinet Stock

  • Current Price: $89.92
  • Target Price (Mid): ~$136
  • Street Target: ~$90
  • Potential Total Return: ~51%
  • Annualized IRR: ~9% / year
  • Earnings Reaction (Q4 2025, reported 2/5/26): +4.85%

Now Live: Discover how much upside your favorite stocks could have using TIKR’s new Valuation Model (It’s free) >>>

What Happened?

Fortinet (FTNT) has spent most of the past year frustrating shareholders. The stock sits at $89.92, down roughly 17% from its 52-week high of $108.77, while the business has beaten earnings estimates in all four quarters of 2025 and generated a record $2.21 billion in free cash flow for the full year, per the company’s Q4 2025 earnings release. Bulls argue the market is underpricing a platform at the center of every enterprise AI security conversation. Bears point to legacy appliance exposure and a Street consensus that implies essentially no upside from today’s price. The unresolved question: with Q1 2026 earnings releasing after market close today, does the AI-driven threat wave now visible in hard data translate into accelerating demand?

A 389% Ransomware Surge Is Fortinet’s Biggest Tailwind

On April 30, 2026, Fortinet’s FortiGuard Labs released its 2026 Global Threat Landscape Report, documenting 7,831 confirmed ransomware victims globally in 2025. That is a 389% increase from approximately 1,600 victims in 2024. The report attributed the acceleration to AI-powered crime kits, including WormGPT, FraudGPT, and BruteForceAI. The United States accounted for 3,381 victims, with manufacturing, business services, and retail as the three hardest-hit sectors.

This data comes from FortiGuard Labs telemetry gathered across Fortinet’s more than half a million customers worldwide. It is not a marketing projection. When ransomware victim counts nearly quintuple in a single year, enterprise security budgets follow. And Fortinet’s Unified SASE (secure access service edge, which converges network security and cloud-delivered protection into one managed platform) is directly positioned to capture that spending.

According to Fortinet’s Q4 2025 earnings release, Unified SASE billings grew 40% in Q4 2025, representing 27% of total billings. CEO Ken Xie stated on the call: “Unified SASE billing grew 40%, representing 27% of our total billing, supporting our belief that Fortinet is the fastest growing SASE leader at scale.” That 40% figure is the number investors need to see hold in tonight’s Q1 report.

What the April 1 Demo Day Revealed

Fortinet held a live Unified SASE Demo Day on April 1, 2026, running the platform against real enterprise threat scenarios, not slides. Alexandra Mehat, Product Marketing Director, confirmed that FortiGuard Labs has more than 500 patents in AI, has applied machine learning to threat detection for over 15 years, and blocked more than 3 trillion vulnerability attempts in 2024.

The demos addressed the exact risks the FortiGuard Labs ransomware report describes. Presenters showed FortiSASE blocking a phishing attempt, a malware download, and an unrated domain visit in real time, using the same AI detection engine for both corporate employees on managed devices and contractors on personal devices using only a proxy setting. The policy was identical for both users.

The most commercially relevant scenario was the generative AI controls. Fortinet’s DLP (data loss prevention, meaning automated detection and blocking of unauthorized data transfers) engine intercepted messages sent to ChatGPT and DeepSeek containing flagged keywords before they reached those platforms. Presenter Mohamed Abosree framed the need plainly: “AI platforms retain and process user input, which can create long-term data exposure risk.”

Mehat also confirmed that Fortinet holds the Gartner Peer Insights Customer Choice award for SD-WAN for seven consecutive years and is the only vendor with that distinction for ZTNA (zero trust network access, meaning every user and device is verified before gaining application access). These claims are sourced from the April 1, 2026, Demo Day transcript.

Fortinet Product, Security Subscription, & Technical Support Operating Revenue (TIKR)

See historical and forward estimates for Fortinet stock (It’s free!) >>>

The Numbers Heading Into Tonight

Per TIKR, here is where Fortinet stands financially:

  • FY2025 revenue: $6,799.60 million (up 14% year-over-year per the earnings release)
  • Q4 2025 revenue: $1,905.00 million, beating the $1,860.96 million consensus by 2.37%
  • Q4 2025 product revenue: $691 million, up 20%
  • Q4 2025 total billings: $2,370 million, up 18%
  • FY2025 free cash flow: $2,211.80 million at a 33% margin
  • LTM EV/EBITDA: 28.44x | NTM EV/EBITDA: 22.91x

Services (security subscriptions plus technical support) totaled $4,581.20 million in FY2025, or roughly 67% of total revenue, consistent with management’s statement on the Q4 earnings call. Every FortiSASE contract added improves this mix because subscriptions carry higher recurring margins than hardware.

For Q1 2026, management guided revenue of $1.70 to $1.76 billion (midpoint up ~12% year-over-year) and billings of $1.77 to $1.87 billion (midpoint up ~14%), with a non-GAAP operating margin of 30 to 32%. CFO Christiane Ohlgart noted on the Q4 call that Q1 has two fewer calendar days than Q4 and reflects planned marketing expense timing. The step-down from Q4’s 37% non-GAAP margin is seasonal, not structural.

On valuation, Fortinet trades at 22.91x NTM EV/EBITDA per TIKR, compared to Palo Alto Networks at 37.44x and CrowdStrike at 67.25x. Fortinet’s discount reflects a lower current software mix, but it also holds 55% unit market share in firewalls per CEO Ken Xie’s Q4 2025 earnings call, a structural upsell base that neither peer can replicate organically. The Street’s current breakdown per TIKR: 9 Buys, 1 Outperform, 29 Holds, 1 Underperform, 3 Sells, with a mean target of $89.57, essentially flat to today’s price.

Fortinet NTM EV/EBITDA vs Peers (TIKR)

See how Fortinet performs against its peers in TIKR (It’s free!) >>>

TIKR Advanced Model Analysis

  • Current Price: $89.92 
  • Target Price (Mid): ~$136 
  • Potential Total Return: ~51% 
  • Annualized IRR: ~9% / year
Fortinet Stock Price Target (TIKR)

See analysts’ growth forecasts and price targets for Fortinet stock (It’s free!) >>>

The TIKR mid-case prices Fortinet at approximately $136 by December 31, 2030, implying around 51% total return from today’s price, or roughly 9% annualized. The two revenue drivers are Unified SASE billings compounding off the 55% firewall market share base and security subscription growth as FortiOS 8.0 deepens AI-native capabilities across the installed base. The margin driver is operating leverage in services: as SASE grows faster than hardware, gross margins improve because subscription contracts carry higher incremental margins than appliance sales.

The primary risk is a faster-than-expected hardware refresh deceleration. Product revenue grew 20% in Q4 2025. If that normalizes sharply before SASE is large enough to compensate, revenue growth could undershoot the ~10% CAGR assumption embedded in the mid-case and compress the target. The upside requires SASE billings to sustain above 35% growth through 2026. The Street’s $89.57 mean target implies no re-rating from current levels. The TIKR mid-case disagrees, and the FortiGuard Labs ransomware data published last week is exactly the kind of macro catalyst that forces security budget conversations.

Conclusion

Watch Unified SASE billings growth in tonight’s Q1 2026 report. It ran at 40% in Q4 2025. Management guided total Q1 billings of $1.77 to $1.87 billion at around 14% growth at the midpoint. Sustaining SASE above 35% confirms the acceleration is structural. A drop below 25% gives the bears their clearest data point yet. FortiGuard Labs documented a 389% ransomware surge in 2025, driven by AI attack tools. The platform Fortinet demonstrated live on April 1 is built to defend against that specific threat vector. The TIKR mid-case prices FTNT at approximately $136 by December 31, 2030, implying roughly 51% total return for investors willing to hold through the SASE inflection.

See what stocks billionaire investors are buying so you can follow the smart money with TIKR.

Should You Invest in Fortinet?

The only way to really know is to look at the numbers yourself. TIKR gives you free access to the same institutional-quality financial data that professional analysts use to answer exactly that question.

Pull up Fortinet, and you’ll see years of historical financials, what Wall Street analysts expect for revenue and earnings in the quarters ahead, how valuation multiples have moved over time, and whether price targets are trending up or down.

You can build a free watchlist to track Fortinet alongside every other stock on your radar. No credit card required. Just the data you need to decide for yourself.

Analyze Fortinet on TIKR Free →

Looking for New Opportunities?

Disclaimer:

Please note that the articles on TIKR are not intended to serve as investment or financial advice from TIKR or our content team, nor are they recommendations to buy or sell any stocks. We create our content based on TIKR Terminal’s investment data and analysts’ estimates. Our analysis might not include recent company news or important updates. TIKR has no position in any stocks mentioned. Thank you for reading, and happy investing!

Related Posts

Join thousands of investors worldwide who use TIKR to supercharge their investment analysis.

Sign Up for FREENo credit card required