Fortinet, Inc.

Previous wording

We rely on third-party channel partners for substantially all of our revenue. If our partners fail to perform, our ability to sell our products and services will be limited, and if we fail to optimize our channel partner model going forward, our operating results may be harmed. Additionally, a small number of distributors represents a large percentage of our revenue and accounts receivable, and one distributor accounted for 27% of our total net accounts receivable as of June 30, 2025.

Current wording

We rely on third-party channel partners for substantially all of our revenue. If our partners fail to perform, our ability to sell our products and services will be limited, and if we fail to optimize our channel partner model going forward, our operating results may be harmed. Additionally, a small number of distributors represents a large percentage of our revenue and accounts receivable, and one distributor accounted for 25% of our total net accounts receivable as of September 30, 2025.

Previous wording

The market for network security products is intensely competitive and dynamic, and we expect competition to continue to intensify. We face many competitors across the different cybersecurity markets. Our competitors include companies such as Check Point Software Technologies Ltd., Cisco Systems, Inc. (“Cisco”), CrowdStrike Holdings, Inc. (“CrowdStrike”), F5 Networks, Inc., Hewlett-Packard Enterprise, Huawei Technologies Co., Ltd., Juniper Networks, Inc., Microsoft Corporation (“Microsoft”), Netskope Inc., Palo Alto Networks, Inc., SonicWALL, Inc., Sophos Group Plc, and Zscaler, Inc. (“Zscaler”).

Current wording

The market for network security products is intensely competitive and dynamic, and we expect competition to continue to intensify. We face many competitors across the different cybersecurity markets. Our competitors include companies such as Check Point Software Technologies Ltd., Cisco Systems, Inc. (“Cisco”), CrowdStrike Holdings, Inc. (“CrowdStrike”), F5 Networks, Inc., Hewlett-Packard Enterprise, Huawei Technologies Co., Ltd., Microsoft Corporation (“Microsoft”), Netskope Inc., Palo Alto Networks, Inc., SonicWALL, Inc., Sophos Group Plc, and Zscaler, Inc. (“Zscaler”).

Previous wording

As of June 30, 2025, we had an aggregate of $995.3 million of indebtedness outstanding under our Senior Notes. Under the agreements governing our indebtedness, we are permitted to incur additional debt. This debt, and any debt that we may incur in the future, may adversely affect our financial condition and future financial results by, among other things:

Current wording

As of September 30, 2025, we had an aggregate of $995.9 million of indebtedness outstanding under our Senior Notes. Under the agreements governing our indebtedness, we are permitted to incur additional debt. This debt, and any debt that we may incur in the future, may adversely affect our financial condition and future financial results by, among other things:

Previous wording

•costs of complying with, and the risks, reputational damage and other costs of non-compliance with, U.S. or other foreign laws and regulations for foreign operations, including the U.S. Foreign Corrupt Practices Act, the United Kingdom Bribery Act 2010, the General Data Protection Regulation (the “GDPR”), the Digital Operational Resilience Act (“DORA”), import and export control laws, trade laws and regulations, tariffs and retaliatory measures, trade barriers and economic sanctions;

Current wording

•costs of complying with, and the risks, reputational damage and other costs of non-compliance with, U.S. or other foreign laws and regulations for foreign operations, including the U.S. Foreign Corrupt Practices Act, the United Kingdom Bribery Act 2010, the General Data Protection Regulation (the “GDPR”), the Digital Operational Resilience Act (“DORA”), the EU Data Act, import and export control laws, trade laws and regulations, tariffs and retaliatory measures, trade barriers and economic sanctions;

Previous wording

We outsource the manufacturing of our security appliance products to contract manufacturing partners and original design manufacturing partners, including manufacturers with facilities located in Taiwan and other countries outside the United States such as Accton, IBASE, Micro-Star, Senao and Wistron. Our reliance on our third-party manufacturers reduces our control over the manufacturing process, exposing us to risks, including reduced control over quality assurance, costs, supply and timing and possible tariffs. Any manufacturing disruption related to our third-party manufacturers or their component suppliers for any reason, including global chip shortages, natural disasters and health emergencies such as earthquakes, fires, power outages, typhoons, floods, health pandemics and epidemics and manmade events such as civil unrest, labor disruption, cyber events, international trade disputes, tariffs, international conflicts, terrorism, wars or other foreign conflicts, such as the war in Ukraine or tensions between China and Taiwan, and critical infrastructure attacks, could impair our ability to fulfill orders. If we are unable to manage our relationships with these third-party manufacturers effectively, or if these third-party manufacturers experience delays, increased manufacturing lead-times, disruptions, capacity constraints or quality control problems in their manufacturing operations, or fail to meet our future requirements for timely delivery, our ability to ship products to our customers could be impaired and our business would be seriously harmed. Further, certain components for our products come from Taiwan and approximately 90% of our hardware is manufactured in Taiwan. Any increase in tensions between China and Taiwan, including threats of military actions or escalation of military activities, could adversely affect our manufacturing operations in Taiwan, which, given the large percentage of our hardware that is manufactured in Taiwan, could have significant impacts on our business and operations.

Current wording

We outsource the manufacturing of our security appliance products to contract manufacturing partners and original design manufacturing partners, including manufacturers with facilities located in Taiwan and other countries outside the United States such as Accton, IBASE, Micro-Star, Senao and Wistron. Our reliance on our third-party manufacturers reduces our control over the manufacturing process, exposing us to risks, including reduced control over quality assurance, costs, supply and timing and possible tariffs. Any manufacturing disruption related to our third-party manufacturers or their component suppliers for any reason, including global chip shortages, natural disasters and health emergencies such as earthquakes, fires, power outages, typhoons, floods, health pandemics and epidemics and manmade events such as civil unrest, labor disruption, cyber events, international trade disputes, tariffs, international conflicts, terrorism, wars or other foreign conflicts, such as the war in Ukraine or tensions between China and Taiwan, and critical infrastructure attacks, could impair our ability to fulfill orders. If we are unable to manage our relationships with these third-party manufacturers effectively, or if these third-party manufacturers experience delays, increased manufacturing lead-times, disruptions, capacity constraints or quality control problems in their manufacturing operations, or fail to meet our future requirements for timely delivery, our ability to ship products to our customers could be impaired and our business would be seriously harmed. Further, certain components for our products come from Taiwan and approximately 80% of our hardware is manufactured in Taiwan. Any increase in tensions between China and Taiwan, including threats of military actions or escalation of military activities, could adversely affect our manufacturing operations in Taiwan, which, given the large percentage of our hardware that is manufactured in Taiwan, could have significant impacts on our business and operations.

Previous wording

For example, the GDPR imposes stringent data handling requirements on companies that operate in the EU or receive or process personal data about individuals in the EU in certain contexts. Non-compliance with the GDPR could result in data protection audits and significant penalties, heavy fines imposed on us and bans on other businesses’ use of our services. Compliance with, and the other burdens imposed by, the GDPR and local regulatory authorities may limit our ability to operate or expand our business in the EU and could adversely impact our operating results. In July 2020, the European Court of Justice issued a judgment declaring invalid the EU-U.S. Privacy Shield Framework (the “Privacy Shield”) as a mechanism for the transfer of GDPR-regulated personal data to recipients in the United States and calling into question the validity of certain popular alternative mechanisms for addressing GDPR restrictions on transfers to the United States and other areas where we operate. The Privacy Shield has now been replaced with the EU-U.S. Data Privacy Framework (the “Framework”) following certain changes to U.S. law intended to address the concerns underlying that court decision with respect to transfers of personal data to the United States. As of December 2024, we are an active participant in the Framework. However, there remains a possibility that our business could be negatively impacted by restrictions on transfers of GDPR-regulated personal data (including transfers made by our customers) to other areas we operate. In addition, it is possible that the updates to U.S. law may ultimately be deemed insufficient in a court case similar to the one that invalidated Privacy Shield. The mere possibility of this outcome, and our reliance on global data transfers within our corporate family and between us and our service providers, may create challenges for us to compete with companies that may be able to offer services in which personal data never exits the EU, thereby avoiding risks of noncompliance with GDPR data transfer restrictions.

Current wording

For example, the GDPR imposes stringent data handling requirements on companies that operate in the EU or receive or process personal data about individuals in the EU in certain contexts. Non-compliance with the GDPR could result in data protection audits and significant penalties, heavy fines imposed on us and bans on other businesses’ use of our services. Compliance with, and the other burdens imposed by, the GDPR and local regulatory authorities may limit our ability to operate or expand our business in the EU and could adversely impact our operating results. In July 2020, the European Court of Justice issued a judgment declaring invalid the EU-U.S. Privacy Shield Framework (the “Privacy Shield”) as a mechanism for the transfer of GDPR-regulated personal data to recipients in the United States and calling into question the validity of certain popular alternative mechanisms for addressing GDPR restrictions on transfers to the United States and other areas where we operate. The Privacy Shield has now been replaced with the EU-U.S. Data Privacy Framework, the UK Extension to the EU-U.S. Data Privacy Framework and the Swiss-U.S. Data Privacy Framework (collectively, the “Framework”) following certain changes to U.S. law intended to address the concerns underlying that court decision with respect to transfers of personal data to the United States. We are an active participant in the Framework. However, there remains a possibility that our business could be negatively impacted by restrictions on transfers of GDPR-regulated personal data (including transfers made by our customers) to other areas we operate. In addition, it is possible that the Framework may ultimately be deemed insufficient in a court case similar to the one that invalidated Privacy Shield. The mere possibility of this outcome, and our reliance on global data transfers within our corporate family and between us and our service providers, may create challenges for us to compete with companies that may be able to offer services in which personal data never exits the EU, thereby avoiding risks of noncompliance with GDPR data transfer restrictions.

Previous wording

The market price of our common stock may be subject to wide fluctuations in response to, among other things, the risk factors described in this periodic report, news about us and our financial results, news about our competitors and their results, and other factors such as rumors or fluctuations in the valuation of companies perceived by investors to be comparable to us. For example, during thesix months ended June 30, 2025, the closing price of our common stock ranged from $84.71 to $114.57 per share.

Current wording

The market price of our common stock may be subject to wide fluctuations in response to, among other things, the risk factors described in this periodic report, news about us and our financial results, news about our competitors and their results, and other factors such as rumors or fluctuations in the valuation of companies perceived by investors to be comparable to us. For example, during thenine months ended September 30, 2025, the closing price of our common stock ranged from $74.39 to $114.57 per share.

Previous wording

In the past, many companies that have experienced volatility in the market price of their stock have been subject to securities class action litigation. We may be the target of this type of litigation in the future. Securities litigation against us could result in substantial costs and divert our management’s attention from other business concerns, which could seriously harm our business.

Current wording

In the past, many companies that have experienced volatility in the market price of their stock have been subject to securities class action litigation. We currently are, and may be in the future, the target of this type of litigation. Securities litigation against us could result in substantial costs and divert our management’s attention from other business concerns, which could seriously harm our business.

Previous wording

In October 2024, our board of directors approved a $1.0 billion increase in the authorized stock repurchase amount under the Repurchase Program and extended the term of the Repurchase Program to February 28, 2026, bringing the aggregate amount authorized to be repurchased to $8.25 billion of our outstanding common stock through February 28, 2026. As of June 30, 2025, approximately $1.63 billion remained available for future share repurchases. Share repurchases under the Repurchase Program could affect the price of our common stock, increase stock price volatility and diminish ourcash reserves. In addition, an announcement of the reduction, suspension or termination of the Repurchase Program could result in a decrease in the trading price of our common stock. Moreover, our stock price could decline, resulting in repurchases made at non-optimal prices. Our failure to repurchase our stock at optimal prices may be perceived by investors as an inefficient use of our cash and cash equivalents, which could result in litigation that may have an adverse effect on our business, operating results and financial condition. In addition, while our board of directors carefully considers various alternative uses of our cash and cash equivalents in determining whether to authorize stock repurchases, there can be no assurance that the decision by our board of directors to repurchase stock would result in the most effective uses of our cash and cash equivalents, and there may be alternative uses of our cash and cash equivalents that would be more effective, such as investing in growing our business organically or through acquisitions.

Current wording

In August 2025, our board of directors approved a $1.0 billion increase in the authorized stock repurchase amount under the Repurchase Program and extended the term of the Repurchase Program to February 28, 2027, bringing the aggregate amount authorized to be repurchased to $9.25 billion of our outstanding common stock through February 28, 2027. As of September 30, 2025, approximately $795.9 million remained available for future share repurchases. Share repurchases under the Repurchase Program could affect the price of our common stock, increase stock price volatility and diminish ourcash reserves. In addition, an announcement of the reduction, suspension or termination of the Repurchase Program could result in a decrease in the trading price of our common stock. Moreover, our stock price could decline, resulting in repurchases made at non-optimal prices. Our failure to repurchase our stock at optimal prices may be perceived by investors as an inefficient use of our cash and cash equivalents, which could result in litigation that may have an adverse effect on our business, operating results and financial condition. In addition, while our board of directors carefully considers various alternative uses of our cash and cash equivalents in determining whether to authorize stock repurchases, there can be no assurance that the decision by our board of directors to repurchase stock would result in the most effective uses of our cash and cash equivalents, and there may be alternative uses of our cash and cash equivalents that would be more effective, such as investing in growing our business organically or through acquisitions.