Fortinet Inc

Our business is subject to numerous risks and uncertainties, including those described in Part I, Item 1A, “Risk Factors” in this Annual Report on Form 10-K. You should carefully consider these risks and uncertainties when investing in our common stock. Some of the principal risks and uncertainties include:

•Our operating results are likely to vary significantly and be unpredictable.

•Adverse economic conditions, such as a possible economic downturn or recession, and possible impacts of inflation or stagflation, tariffs or other trade disruptions, changing interest rates, changes in government spending or regulation or reduced information technology (“IT”) spending, including firewall spending, may adversely impact our business.

•We have been, and may in the future be, susceptible to supply chain constraints, supply shortages and disruptions, long or less predictable lead times for components and finished goods and supply changes because some of the key components in our products come from limited sources of supply.

•As a result of supply chain disruptions in previous periods, we increased our purchase order commitments in previous periods and, were in some instances required to and may in the future be required to accept or pay for components and finished goods regardless of our level of sales in a particular period, which may negatively or unpredictably impact our operating results and financial condition.

•Our billings, revenue, and free cash flow growth may slow or may not continue to grow, and our operating margins may decline.

•Our real estate assets, including construction, acquisitions, leasing activity, and ongoing maintenance and management of office buildings, warehouses, data centers and points of presence (“PoPs”), as well as data center expansions or enhancements, could involve significant risks to our business.

•Our backlog may fluctuate over quarters. If we experience supply chain shortages and cannot fulfill orders or if customers cancel or delay delivery of orders, our backlog may be affected, which will negatively impact our aggregate backlog to billings conversion and revenue in such quarter. A reduction to backlog increases our aggregate billings and revenue during the quarter when delivered.

•As the supply chain challenges normalize, our product revenue growth rate may be lower versus prior quarters where delivery from backlog contributed more to billings. For the fiscal year 2024, the comparably lower backlog contribution to billings resulted in decreased year-over-year quarterly growth rates.

•Any weakness in sales strategy, productivity, personnel and execution could negatively impact our results of operations.

•We are dependent on the continued services and performance of our senior management, as well as our ability to hire, retain and motivate qualified personnel.

•We rely on third-party channel partners for substantially all of our billings, revenue, and a small number of distributors represents a large percentage of our revenue and accounts receivable.

•Reliance on a concentration of shipments at the end of the quarter or changes in shipping terms could cause our billings and revenue to fall below expected levels.

•We rely significantly on revenue from FortiGuard and other security subscriptions and FortiCare technical support services, and revenue from these services may decline or fluctuate.

•We face intense competition in our market and we may not maintain or improve our competitive position.

•We are susceptible to defects or vulnerabilities, including critical vulnerabilities, in our products or services, as well as reputational harm from the failure or misuse of our products or services, and any actual or perceived defects or vulnerabilities, including critical vulnerabilities, in our products or services, failure of our products or services to detect or prevent a security incident or to cause a disruption to operations, failure of our customers to implement preventative actions such as updates to one of our deployed solutions or failure to help secure our customers, could cause our products or services to allow unauthorized access to our customers’ networks and harm our operational results and reputation more significantly as compared to other companies. Our Product Security Incident Response

Team publicly posts on our FortiGuard Labs website known product vulnerabilities, including critical vulnerabilities, and methods for customers to mitigate the risk of vulnerabilities. However, there can be no assurance that such posts will be sufficiently timely, accurate or complete or that those customers will see such posts or take steps to mitigate the risk of vulnerabilities, and certain customers may be negatively impacted.

•If our internal enterprise IT networks, our operational networks, our research and development (“R&D”) networks, our back-end labs and cloud stacks hosted in our data centers or PoPs, colocation vendors or public cloud providers are compromised, public perception of our products and services may be harmed, our customers may be breached and harmed, we may become subject to liability, and our business, operating results and stock price may be adversely impacted.

•We have incurred indebtedness and may incur other debt in the future, which may adversely affect our financial condition and future financial results.

•We generate a majority of billings, revenue and cash flow from sales outside of the United States.

•We may not be successful in executing our strategy to increase our sales to large- and medium-sized end-customers.

•A portion of our revenue is generated by sales to government organizations and other customers, which are subject to a number of regulatory requirements, their own supply chain constraints and contractual requirements, challenges and risks.

•We order components from third-party manufacturers based on our forecasts of future demand and targeted inventory levels, which exposes us to the risk of product shortages, may result in lost sales, higher expenses and inventory excesses which may lead to inventory charges and costs related to future purchase commitments, possibly requiring us to sell our products at discounts or offer various other incentives.

•We depend on third parties to provide various components for our products and build our products and are susceptible to manufacturing delays, capacity constraints, cost increases, and changes in the geopolitical environment.

•Our inability to successfully acquire and integrate other businesses, products or technologies, or to successfully invest in and form successful strategic alliances with other businesses, could seriously harm our competitive position and could negatively affect our financial condition and results of operations.

•Investors’, activists’ and regulators’ expectations of our investments and performance relating to environmental, social and governance factors may impose additional costs and expose us to new risks.

•We are exposed to fluctuations in currency exchange rates, which could negatively affect our financial condition and results of operations.

•Our proprietary rights may be difficult to enforce and we may be subject to claims by others that we infringe their proprietary technology.

•The trading price of our common stock may be volatile, which volatility may be exacerbated by share repurchases under our Share Repurchase Program (the “Repurchase Program”).

•Anti-takeover provisions contained in our certificate of incorporation and bylaws, as well as provisions of Delaware law, could impair a takeover attempt.

•Global economic uncertainty can weaken and harm our financial position.

•Weakening product demand caused by political instability, changes in trade agreements, wars and foreign conflicts, such as the war in Ukraine or tensions between China and Taiwan, could adversely affect our business and financial performance.

Part I