Fortinet, Inc. Due Diligence

Run due diligence on Fortinet, Inc.: check compliance and get alerts when suppliers or ownership change.

United States · owned by Independent (United States) · fortinet.com · 23 vendors

Fortinet is a global leader in cybersecurity solutions and services, providing network security, unified SASE, cloud security, security operations, and operational technology security solutions. The company secures over 700,000 enterprises, service providers, and government organizations worldwide.

Resilience scores

Technology vendors

Services catalogue

23 services in catalogue across 4 categories; runs on 23 sub-vendors.

Insights

Last updated 2026-09-13 · revision 9

23 direct vendors, 226 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Compliance

9 in-scope frameworks identified; showing 3.

FedRAMP — No public evidence

The Federal Risk and Authorization Management Program (FedRAMP) is mandatory for all cloud service providers that hold U.S. federal agency data.

Evidence: https://www.fortinet.com/blog/industry-trends/fortinet-progress-on-its-secure-by-design-pledge-commitments, https://www.fortinet.com/corporate/about-us/newsroom/press-releases/2024/fortinet-reaffirms-commitment-to-secure-product-development-processes-and-responsible-vulnerability-disclosure-policies, https://docs.fortinet.com/document/forticnapp/26.3.0/administration-guide/981487/vulnerability-policies, https://www.fortinet.com/blog/industry-trends/preparing-for-the-new-european-machinery-compliance-regulation, https://www.fortinet.com/resources/cyberglossary/what-is-fedramp, https://www.interweavetech.net/blog/what-is-fedramp-compliance

FIPS 140-2 — Evidence found

As a provider of network security appliances to the U.S. federal government, Fortinet's products which use cryptography must be validated against FIPS 140-2 and the newer FIPS 140-3 standards.

Evidence: https://www.fortinet.com/solutions/cloud-security/vulnerability-management, https://www.fortinet.com/blog/operational-technology/fortinet-achieves-iec-62443-4-1-ml2-certification-for-secure-product-development, https://www.fortiguard.com/psirt_policy, https://docs.fortinet.com/document/forticnapp/26.3.0/administration-guide/981487/vulnerability-policies, https://infosecmonkey.com/fips-140-explained-levels-lifecycle-and-fortinet-support/, https://www.fortinet.com/corporate/about-us/product-certifications/fips

Common Criteria — Evidence found

Fortinet sells its security products to government and enterprise customers worldwide, many of whom require Common Criteria certification as a measure of security assurance.

Evidence: https://www.fortinet.com/blog/operational-technology/fortinet-achieves-iec-62443-4-1-ml2-certification-for-secure-product-development, https://www.fortinet.com/corporate/about-us/newsroom/press-releases/2024/fortinet-reaffirms-commitment-to-secure-product-development-processes-and-responsible-vulnerability-disclosure-policies, https://www.fortinet.com/blog/industry-trends/fortinet-progress-on-its-secure-by-design-pledge-commitments, https://www.fortinet.com/resources/cyberglossary/digital-operational-resilience-act-dora, https://www.fortinet.com/corporate/about-us/product-certifications/common-criteria, https://investor.fortinet.com/news-releases/news-release-details/fortinet-earns-common-criteria-eal-4-certification-fortigate/

Financials

Three-year financials

Financial Resilience Score: 8/10

Fortinet demonstrates strong financial resilience driven by consistent double-digit revenue growth, robust operating margins averaging over 21%, and a highly recurring subscription-based revenue model that provides predictable cash flows. The company maintains a substantial net cash position with minimal debt, enabling continuous R&D investment and strategic acquisitions without compromising liquidity.

Key strengths: High recurring subscription revenue, Strong operating margins, Net cash balance sheet, Consistent double-digit growth

Risk factors: Intense competition in cybersecurity, Dependence on channel partners, Macroeconomic IT spending slowdowns, Cybersecurity threat landscape volatility

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report