Arista Networks, Inc.
For the period ended Sep 30, 2026. Filed Nov 4, 2026.
View on SEC.govAbout this filing
A company's report for each of its first three quarters. The financial statements are not audited. It shows how the business has moved since the last annual report, and what management says changed.
Sep 30, 2026 · Filed Nov 4, 2026
What changed in Risk Factors?
Read the current filingPrevious report: 10-Q
Period ended 2026-06-30; filed 2026-08-05.
0001596532-26-000175
Item 1A. Risk FactorsUnregistered Sales of Equity Securities and Use of ProceedsDefaults Upon Senior SecuritiesMine Safety DisclosuresCurrent report: 10-Q
Period ended 2026-09-30; filed 2026-11-04.
0001596532-26-000254
Item 1A. Risk FactorsUnregistered Sales of Equity Securities and Use of ProceedsDefaults Upon Senior SecuritiesMine Safety DisclosuresThe baseline is this issuer’s latest earlier reporting period of the same form that was filed before the current report. A previous 10-Q is a different quarter, not a year-over-year comparison. Amendments are excluded.
Compared 355 previous paragraphs and 354 current paragraphs.
326 unchanged; 27 reworded; 1 added; 1 removed; 1 previous and 0 current paragraphs rearranged.
Tables are not compared: 0 previous and 0 current tables excluded. Dates, whitespace, punctuation and numbering changes are ignored; changes to financial figures remain significant.
A changed paragraph is not evidence that risk increased or decreased. An unchanged paragraph does not establish that risk stayed the same.
Added paragraphs (1)
Current report
•industry cyclicality and developments affecting AI center infrastructure may cause fluctuations in our revenue;
Removed paragraphs (1)
Previous report
•industry cyclicality may cause fluctuations in our revenue;
Reworded paragraphs (27)
Previous wording
•failure to raise additional capital on terms satisfactory to us.
Current wording
•failure to raise additional capital on terms satisfactory to us could reduce our ability to compete.
Previous wording
Large purchases by a relatively limited number of customers have accounted for a significant portion of our revenue. For example, sales to one end customer represented 16%, 15%, and 21% of our total revenue, and sales to the other end customer represented 26%, 20%, and 18% of our total revenue for the years ended December 31, 2025, 2024, and 2023, respectively. We have experienced unpredictability in the timing of orders from our high-volume customers primarily due to the overall complexity of large-scale orders and changes in demand specific to these customers, including reductions in or changes in the mix of capital expenditures by these customers and the impact of cost reduction and other efficiency efforts by these customers. Volatility and uncertainty in the demand for AI models underlying network systems could increase this unpredictability from our large customers. In addition, thevariability in customer concentration is linked to the timing of new product deployments, and spending cycles with these customers, as well as the time it takes these customers to evaluate, test, qualify and accept our products and services, and we expect continued variability in our customer concentration and timing of sales on a quarterly and annual basis. In addition, we typically provide more favorable terms and conditions to large customers, than we typically do to other customers, including pricing discounts, bundled upgrades, acceptance terms, indemnification terms, and other rights, which negatively impacts our gross margins.
Current wording
Large purchases by a relatively limited number of customers have accounted for a significant portion of our revenue. For example, sales to one end customer represented 16%, 15%, and 21% of our total revenue, and sales to the other end customer represented 26%, 20%, and 18% of our total revenue for the years ended December 31, 2025, 2024, and 2023, respectively. We have experienced unpredictability in the timing of orders from our high-volume customers primarily due to the overall complexity of large-scale orders and changes in demand specific to these customers, including reductions in or changes in the mix of capital expenditures by these customers and the impact of cost reduction and other efficiency efforts by these customers. Volatility and uncertainty in the demand for AI models underlying network systems could increase this unpredictability from our large customers. In addition, thevariability in customer concentration is linked to the timing of new product deployments, and spending cycles with these customers, as well as the time it takes these customers to evaluate, test, qualify and accept our products and services, and we expect continued variability in our customer concentration and timing of sales on a quarterly and annual basis. In addition, we typically provide more favorable terms and conditions to large customers, than we typically do to other customers, including pricing discounts, bundled upgrades, acceptance terms, indemnification terms, and other rights, which negatively impacts our gross margins. Further, if additional customers account for a significant portion of our revenue, a greater portion of our revenue may become dependent on the purchasing decisions of a small number of customers, which could increase the volatility of our results of operations.
Previous wording
If any of the factors discussed above drive some of our large customers to cancel all or portion of their business relationships with us, the growth in our business and the ability to meet our current and long-term financial forecasts may be materially impacted. As a result, we may be unable to sustain or increase our revenue from our large customers, grow revenue with new or other existing customers at the rate we anticipate or at all, or offset a decline or discontinuation of concentrated purchases by our larger customers with purchases by new or existing customers. We expect that such concentrated purchases will continue to contribute materially to our revenue for the foreseeable future and that our results of operations may fluctuate on a quarterly basis as a result of such larger customers’ buying patterns. In addition, we may see consolidation of our customer base, such as among Internet companies and cloud service providers, which could result in the loss of customers. The loss of such customers, or a significant delay or reduction in their purchases, including reductions or delays due to customer departures from recent buying patterns, or an unfavorable change in competitive or economic conditions could materially harm our business, financial condition, results of operations and prospects.
Current wording
If any of the factors discussed above drive some of our large customers to cancel all or a portion of their business relationships with us, the growth in our business and the ability to meet our current and long-term financial forecasts may be materially impacted. As a result, we may be unable to sustain or increase our revenue from our large customers, grow revenue with new or other existing customers at the rate we anticipate or at all, or offset a decline or discontinuation of concentrated purchases by our larger customers with purchases by new or existing customers. We expect that such concentrated purchases will continue to contribute materially to our revenue for the foreseeable future and that our results of operations may fluctuate on a quarterly basis as a result of such larger customers’ buying patterns. In addition, we may see consolidation of our customer base, such as among Internet companies and cloud service providers, which could result in the loss of customers. The loss of such customers, or a significant delay or reduction in their purchases, including reductions or delays due to customer departures from recent buying patterns, or an unfavorable change in competitive or economic conditions could materially harm our business, financial condition, results of operations and prospects.
Previous wording
Over the last decade, and especially under the current administration, the U.S. government has enacted various new and increased tariffs affecting the import of various items from various countries. For example, since 2018, the U.S. government has enacted various tariffs on products from China under Section 301 trade authorities, including on communications equipment products and components manufactured and imported from China. Since February 2025, the U.S. has also imposed additional global, country-specific, as well as additional commodity-specific tariffs on certain imported items, pursuant to executive orders issued under various trade authorities, including the International Emergency Economic Powers Act (“IEEPA”), Sections 122 and 301 of the Trade Act of 1974, and Section 232 of the Trade Expansion Act of 1962. In February 2026, the U.S. Supreme Court held that the tariffs imposed under IEEPA were invalid.
Current wording
Over the last decade, and especially under the current administration, the U.S. government has enacted various new and increased tariffs affecting the import of various items from various countries. For example, since 2018, the U.S. government has enacted various tariffs on products from China under Section 301 trade authorities, including on communications equipment products and components manufactured and imported from China. Since February 2025, the U.S. has also imposed additional global, country-specific, as well as additional commodity-specific tariffs on certain imported items, pursuant to executive orders issued under various trade authorities.
Previous wording
In response to these and other U.S. measures, China, Mexico and other countries have taken or threatened to take a range of retaliatory measures. These include the imposition of retaliatory tariffs on certain U.S.-origin goods; the implementation of new export controls by China on various critical minerals, including rare earths metals; the scheduling of further retaliatory tariff measures; and other actions that may affect us directly or indirectly.
Current wording
In response to these and other U.S. measures, China, Mexico and other countries have taken or threatened to take a range of retaliatory measures. These include the imposition of retaliatory tariffs on certain U.S.-origin goods; the implementation of new export controls by China on various critical minerals, including rare earth metals; the scheduling of further retaliatory tariff measures; and other actions that may affect us directly or indirectly.
Previous wording
Our business depends on the overall demand for information technology, network connectivity and access to data and applications. Weak domestic or global economic conditions and continuing economic uncertainty, fear or anticipation of such conditions, a recession, geopolitical pressures, including international trade disputes, changes in tariff policies, global pandemics, a reduction in information technology and network infrastructure spending or a deterioration of the financial performance, condition or prospects of our customers, could adversely affect our business, financial condition, results of operations and prospects in a number of ways, including longer sales cycles, reduced demand or lower prices for our products and services, higher default rates among our channel partners, reduced unit sales and lower or no growth. In addition, the global macroeconomic environment has been negatively affected by, among other things, the uncertainty in the global banking and financial services markets, epidemics, instability in global economic markets, changes in government administration and policy positions, increased uncertainty associated with recent scheduled, threatened and/or anticipated increases in tariffs and other trade barriers, inflationary pressures, higher interest rates, instability in the global credit markets, the impact and uncertainty regarding global central bank monetary policy, instability, tension and conflict in the geopolitical environment, and foreign governmental debt concerns which have caused, and are likely to continue to cause, uncertainty and instability in local economies and in global financial markets. In addition, a government shutdown or a default by the U.S. government on its debt obligations, or related credit-rating downgrades could also have adverse effects on the broader global economy and contribute to, or worsen, an economic recession.
Current wording
Our business depends on the overall demand for information technology, network connectivity and access to data and applications. Weak domestic or global economic conditions and continuing economic uncertainty, fear or anticipation of such conditions, a recession, geopolitical pressures, including international trade disputes, changes in tariff policies, global pandemics, a reduction in information technology and network infrastructure spending or a deterioration of the financial performance, condition or prospects of our customers, could adversely affect our business, financial condition, results of operations and prospects in a number of ways, including longer sales cycles, reduced demand or lower prices for our products and services, higher default rates among our channel partners, reduced unit sales and lower or no growth. In addition, the global macroeconomic environment has been negatively affected by, among other things, the uncertainty in the global banking and financial services markets, epidemics, instability in global economic markets, changes in government administration and policy positions, increased uncertainty associated with recent scheduled, threatened and/or anticipated increases in tariffs and other trade barriers, inflationary pressures, higher interest rates, instability and weakness in the global credit markets, the impact and uncertainty regarding global central bank monetary policy, instability, tension and conflict in the geopolitical environment, and foreign governmental debt concerns which have caused, and are likely to continue to cause, uncertainty and instability in local economies and in global financial markets. In addition, a government shutdown or a default by the U.S. government on its debt obligations, or related credit-rating downgrades could also have adverse effects on the broader global economy and contribute to, or worsen, an economic recession.
Previous wording
Our revenue growth rates in previous periods may not be indicative of our future performance. We have experienced annual revenue growth rates of 28.6%, 19.5% and 33.8% in 2025, 2024 and 2023, respectively. In the future, our revenue growth rates will continue to be volatile due to cyclical trends in our business, and as we become more embedded with our existing customer base and product markets and look to enter and expand into new markets. Our growth strategy relies on maintaining our agility and increasing our investment in research and development to deliver market-leading features to enhance the functionality of existing cloud networking platform, expand our product offerings and build upon our technology leadership. We must continue to expand our product offerings and build upon our technology leadership. In addition we must continue to expand our global sales force and deepen our channel partnerships to reach new customers more effectively and increase sales to existing customers. An increase in customer trials and contracts with acceptance provisions, and an increase in the volatility and magnitude of our evaluation inventory and product deferred revenue balances, have created and could continue to create variability in our revenue. Any delays in acceptance, or rejection, or any return, of those products could further negatively impact our revenue. We have also experienced supply constraints that have and may continue to result in manufacturing and shipment delays, which would negatively affected the timing of revenue recognition and /or a reduction in revenue if our customers cancel their orders due to shipping delays. If these manufacturing and supply chain disruptions recur and/or if we are unable to reduce our lead times it could also result in the cancellation of orders by customers, reduce demand from existing customers in future periods, and increase difficulty in adding new customers. Other factors may also contribute to declines in our revenue growth rates, including changes in demand for our products and services, particularly from our large customers, the deterioration of the financial performance, condition or prospects of our large customers, changes in capital spending by our large customers, increased competition, price sensitivities from our customers to increases in our pricing, our ability to successfully manage our expansion or continue to capitalize on growth opportunities, the maturation of our business, geopolitical pressures, macroeconomic conditions, recession risks and monetary policy shifts, and our ability to be successful in the AI market and adjacent markets, such as campus switching, Wi-Fi networking markets and network security markets. Recent technologies, such as generative and agentic AI models, have emerged, and while they have driven increased demand for networking, the long-term trajectory of such technologies is unknown and it is difficult for us to predict the demand for such new technologies. Custome…
Excerpt shortened here; the source contains the full paragraph.
Current wording
Our revenue growth rates in previous periods may not be indicative of our future performance. We have experienced annual revenue growth rates of 28.6%, 19.5% and 33.8% in 2025, 2024 and 2023, respectively. In the future, our revenue growth rates will continue to be volatile due to cyclical trends in our business, and as we become more embedded with our existing customer base and product markets and look to enter and expand into new markets. Our growth strategy relies on maintaining our agility and increasing our investment in research and development to deliver market-leading features to enhance the functionality of existing cloud networking platform, expand our product offerings and build upon our technology leadership. We must continue to expand our product offerings and build upon our technology leadership. In addition we must continue to expand our global sales force and deepen our channel partnerships to reach new customers more effectively and increase sales to existing customers. An increase in customer trials and contracts with acceptance provisions, and an increase in the volatility and magnitude of our evaluation inventory and product deferred revenue balances, have created and could continue to create variability in our revenue. Any delays in acceptance, or rejection, or any return, of those products could further negatively impact our revenue. We have also experienced supply constraints that have and may continue to result in manufacturing and shipment delays, which would negatively affect the timing of revenue recognition and /or a reduction in revenue if our customers cancel their orders due to shipping delays. If these manufacturing and supply chain disruptions recur and/or if we are unable to reduce our lead times it could also result in the cancellation of orders by customers, reduce demand from existing customers in future periods, and increase difficulty in adding new customers. Other factors may also contribute to declines in our revenue growth rates, including changes in demand for our products and services, particularly from our large customers, the deterioration of the financial performance, condition or prospects of our large customers, changes in capital spending by our large customers, increased competition, price sensitivities from our customers to increases in our pricing, our ability to successfully manage our expansion or continue to capitalize on growth opportunities, the maturation of our business, geopolitical pressures, macroeconomic conditions, recession risks and monetary policy shifts, and our ability to be successful in the AI market and adjacent markets, such as campus switching, Wi-Fi networking markets and network security markets. Recent technologies, such as generative and agentic AI models, have emerged, and while they have driven increased demand for networking, the long-term trajectory of such technologies is unknown and it is difficult for us to predict the demand for such new technologies. Customers…
Excerpt shortened here; the source contains the full paragraph.
Previous wording
•announcements by us or other competitors of new products or product enhancements, warranty returns, general economic conditions or other factors;
Current wording
•announcements by us or our competitors of new products or product enhancements, warranty returns, general economic conditions or other factors;
Previous wording
•changes in the growth rates of existing or new customers and the networking market the deterioration of the financial performance, condition or prospects of existing or new customers, including large customers and service providers, changes in end-customer, distributor or reseller;
Current wording
•changes in the growth rates of existing or new customers and the networking market, the deterioration of the financial performance, condition or prospects of existing or new customers, including large customers and service providers, changes in end-customer, distributor or reseller demand;
Previous wording
Industry cyclicality may cause fluctuations in our revenue and results of operations.
Current wording
Industry cyclicality and developments affecting AI center infrastructure may cause fluctuations in our revenue and results of operations.
Previous wording
Our business is reliant on demand for network infrastructure, which rises and falls in cycles. Moreover, business cycles vary somewhat in different geographical regions and by customer type. Our customers’ demand is driven by, among other factors, the development of new network infrastructure and the refreshment of existing network infrastructure. Cyclical changes in our customers’ demand for our products and services, particularly changes in the demand of our largest customers, could result in fluctuations in our revenue, revenue growth and results of operations. We believe that this cyclicality results from a number of factors, including the specific procurement, budgeting and deployment cycles of our customers as well as the impact of general economic conditions on business operations and investment. The effects of supply chain disruptions and our rapid growth may have reduced the impact of cyclical factors that might otherwise have influenced our business and broader industry performance. If our growth rates slow, cyclical variations in our operations may become more pronounced over time and may materially affect our business, financial condition, results of operations and prospects.
Current wording
Our business is reliant on demand for network infrastructure, which rises and falls in cycles and has recently been driven by demand for AI center infrastructure. Moreover, business cycles vary somewhat in different geographical regions and by customer type. Our customers’ demand is driven by, among other factors, the development of new network infrastructure and the refreshment of existing network infrastructure. Cyclical changes in our customers’ demand for our products and services, particularly changes in the demand of our largest customers, could result in fluctuations in our revenue, revenue growth and results of operations. We believe that this cyclicality results from a number of factors, including the specific procurement, budgeting and deployment cycles of our customers as well as the impact of general economic conditions on business operations and investment. The effects of supply chain disruptions and our rapid growth may have reduced the impact of cyclical factors that might otherwise have influenced our business and broader industry performance. If our growth rates slow, cyclical variations in our operations may become more pronounced over time and may materially affect our business, financial condition, results of operations and prospects.
Previous wording
Most of our contracts with customers are on an open credit basis, with standard payment terms of 30 to 90 days. From time to time, we also grant extended payment terms with certain large customers. These arrangements may expose us to credit risk and upfront working capital requirements. Although we monitor individual end-customer payment capability in granting such arrangements, we seek to limit such open credit to amounts we believe the customers can pay and maintain reserves we believe are adequate to cover exposure for doubtful accounts. However, our exposure to credit risks can be negatively impacted by downturns in our customer's business, a global economic downturn, or periods of economic uncertainty. Any significant delay or default in the collection of receivables could result in an increased need for us to obtain working capital from other sources, possibly on worse terms than we could have negotiated if we had established such working capital resources prior to such delays or defaults. There is no assurance that our customers will be able to pay us and our customers could default on their obligations to us, which could adversely affect our results of operations, financial condition, and liquidity.
Current wording
Most of our contracts with customers are on an open credit basis, with standard payment terms of 30 to 90 days. From time to time, we also grant extended payment terms with certain large customers. These arrangements may expose us to credit risk and upfront working capital requirements. Although we monitor individual end-customer payment capability in granting such arrangements, we seek to limit such open credit to amounts we believe the customers can pay and maintain reserves we believe are adequate to cover exposure for doubtful accounts. However, our exposure to credit risks can be negatively impacted by downturns in our customer's business, a global economic downturn, or periods of economic uncertainty. In particular, AI cloud providers and data center developers have issued substantial amounts of debt to fund AI infrastructure projects. Certain data center developers have recently experienced tightened credit availability and higher financing costs. Tightening credit conditions could cause financial distress among highly leveraged AI cloud providers or data center developers, which could cause certain of our customers to delay, reduce or cancel purchases of our products or impair their ability to pay amounts owed to us. Any significant delay or default in the collection of receivables could result in an increased need for us to obtain working capital from other sources, possibly on worse terms than we could have negotiated if we had established such working capital resources prior to such delays or defaults. There is no assurance that our customers will be able to pay us and our customers could default on their obligations to us, which could adversely affect our results of operations, financial condition, and liquidity.
Previous wording
We produce highly complex products that incorporate advanced technologies, including both hardware and software technologies. Despite testing prior to their release, our products may contain undetected defects or errors, especially when first introduced or when new versions are released. Product defects or errors could affect the performance of our products, could result in a failure of appropriate updates to be distributed or installed, could delay the development or release of new products or new versions of products, and could result in warranty claims and product liability claims from customers. Any actual or perceived defect, error, or vulnerability in our products or services, or other allegations of unsatisfactory performance could cause us to lose revenue or market share, increase our service costs, cause us to incur substantial costs in analyzing, correcting or redesigning the products or otherwise addressing defects, errors or vulnerabilities, cause us to lose significant customers, harm our reputation and market positions, subject us to liability for damages, subject us to litigation, regulatory inquiries or investigations, and divert our resources from other tasks, any one of which could materially adversely affect our business, financial condition, results of operations and prospects.
Current wording
We produce highly complex products that incorporate advanced technologies, including both hardware and software technologies. Despite testing prior to their release, our products may contain undetected defects or errors, especially when first introduced or when new versions are released. In addition, we use AI in some of our products, such as Arista AVA and CloudVision. AI systems may produce wrong, misleading or unpredictable outputs, recommendations or actions. In our products, this could lead to network misconfigurations, missed or false detection of faults or security threats, service disruptions, performance problems or other harm to our customers’ networks and operations. Product defects or errors could affect the performance of our products, could result in a failure of appropriate updates to be distributed or installed, could delay the development or release of new products or new versions of products, and could result in warranty claims and product liability claims from customers. Any actual or perceived defect, error, or vulnerability in our products or services, or other allegations of unsatisfactory performance could cause us to lose revenue or market share, increase our service costs, cause us to incur substantial costs in analyzing, correcting or redesigning the products or otherwise addressing defects, errors or vulnerabilities, cause us to lose significant customers, harm our reputation and market positions, subject us to liability for damages, subject us to litigation, regulatory inquiries or investigations, and divert our resources from other tasks, any one of which could materially adversely affect our business, financial condition, results of operations and prospects.
Previous wording
Our products, services, and external facing or internal network systems could experience cybersecurity incidents or become a target for security attacks, including attacks specifically designed to disrupt our business and our customers and introduce malicious software and attacks by state sponsors. For example, we could face attacks that involve the introduction of malicious software to our products, services, networks, or damage or exfiltration of our data or that of our customers; or are perceived to have been compromised, our reputation may be damaged and our financial results may be negatively affected.
Current wording
Our products, services, and external facing or internal network systems could experience cybersecurity incidents or become a target for security attacks, including attacks specifically designed to disrupt our business and our customers and introduce malicious software and attacks by state sponsors. For example, we have and could continue to face attacks that involve malicious software directed at our products, services, networks, or exfiltration of our data or that of our customers. If our products, services, or external-facing or internal networks are compromised or are perceived to have been compromised, our reputation may be damaged and our financial results may be negatively affected. In addition, our or third-party AI agents could take unintended or unauthorized actions, act outside the scope of their instructions or permissions, exploit vulnerabilities or weaknesses in the systems in which they operate, or may be vulnerable to adversarial manipulation such as prompt injection. Such AI agents may be capable of circumventing or escaping technical restrictions or isolated execution environments, obtaining access to networks or systems that were not intended to be accessible, escalating privileges, accessing, modifying, or disclosing confidential information, or using available tools and credentials to take additional unauthorized actions.
Previous wording
In addition defects, errors, or vulnerabilities in our security platform or in the hardware upon which it is deployed, including as a result of misuse or a failure to implement updates to such platform, could temporarily or permanently limit our detection capabilities and expose our end-customers’ networks, leaving their networks unprotected against the latest security threats, or otherwise lead to cybersecurity incidents. If customers of our security platform do suffer a cybersecurity incident, even if it is not attributable to a failure of our platform, customers may believe that our platform failed to detect a threat or vulnerability, which could harm our reputation or negatively affect our financial results.
Current wording
Defects, errors, or vulnerabilities in our security platform or in the hardware upon which it is deployed, including as a result of misuse or a failure to implement updates to such platform, could temporarily or permanently limit our detection capabilities and expose our end-customers’ networks, leaving their networks unprotected against the latest security threats, or otherwise lead to cybersecurity incidents. If customers of our security platform do suffer a cybersecurity incident, even if it is not attributable to a failure of our platform, customers may believe that our platform failed to detect a threat or vulnerability, which could harm our reputation or negatively affect our financial results.
Previous wording
We, like all technology companies, depend upon information technology systems to conduct virtually all business operations, ranging from internal operations and product development activities to marketing and sales efforts and communications with customers and business partners. We could experience disruptions, cybersecurity breaches, and other cybersecurity incidents relating to our information systems, or our products, services, or data. We could also be impacted by cybersecurity incidents through third parties on which we rely. We have outsourced some business functions to third parties, including our manufacturers, logistics providers, and cloud service providers. We also rely upon distributors, resellers and system integrators to sell our products. We also depend upon our employees, and the technology our employees use to comply with the security measures we have instituted to prevent and mitigate cybersecurity incidents.
Current wording
We, like all technology companies, depend upon information technology systems, including AI tools and agentic AI, to conduct virtually all business operations, ranging from internal operations and product development activities to marketing and sales efforts and communications with customers and business partners. Our safeguards for our information technology systems, and in particular access controls, monitoring, isolation mechanisms, and other measures designed to constrain the actions of AI systems, may not operate as intended or may be insufficient to prevent disruptions or cybersecurity breaches or incidents.We have previously experienced immaterial disruptions, cybersecurity breaches, and other cybersecurity incidents and we could again experience disruptions, cybersecurity breaches, and other cybersecurity incidents relating to our information systems, or our products, services, or data. We could also be impacted by cybersecurity incidents through third parties on which we rely. We have outsourced some business functions to third parties, including our manufacturers, logistics providers, and cloud service providers. We also rely upon distributors, resellers and system integrators to sell our products. We also depend upon our employees, and the technology our employees use to comply with the security measures we have instituted to prevent and mitigate cybersecurity incidents.
Previous wording
We, or third parties on which we rely, could experience disruptions, cybersecurity breaches, and other cybersecurity incidents with many different types of causes, including phishing schemes and other social engineering methods, fraud and other malfeasance, denial of service attacks, vulnerabilities or defects in design or manufacture, unintended technical errors, misconfigurations, “bugs,” viruses, ransomware and other malware, mishandling of data or other mistakes by employees or other insiders, and attacks by insiders or external parties. Sophisticated, or even unsophisticated, persons or organizations may attempt to compromise our systems, or third party systems on which we rely, and access, use, destroy, impair, or obtain confidential, personal, or otherwise sensitive or proprietary information and could compromise our systems, products, services and networks, or those of third parties on which we rely. Geopolitical tensions and conflicts may create a greater risk of cyberattacks against our company and our manufacturers, suppliers, logistics providers, banks and other business partners. Our acquisition of Awake Security and our provision of its NDR platform may result in us being a more attractive target for such attacks. We may also face increased risks of cybersecurity incidents in connection with personnel working remotely.
Current wording
We, or third parties on which we rely, have in the past and could again experience cybersecurity threats, disruptions, and incidents with many different types of causes, including phishing schemes and other social engineering methods, fraud and other malfeasance, denial of service attacks, vulnerabilities or defects in design or manufacture, unintended technical errors, misconfigurations, “bugs,” viruses, ransomware and other malware, mishandling of data or other mistakes by employees or other insiders, and attacks by insiders or external parties, including agentic AI. Sophisticated, or even unsophisticated, persons, AI tools, or organizations may attempt to compromise our systems, or third party systems on which we rely, and access, use, destroy, impair, or obtain confidential, personal, or otherwise sensitive or proprietary information and could compromise our systems, products, services and networks, or those of third parties on which we rely. Geopolitical tensions and conflicts may create a greater risk of cyberattacks against our company and our manufacturers, suppliers, logistics providers, banks and other business partners. Our acquisition of Awake Security and our provision of its NDR platform may result in us being a more attractive target for such attacks. We may also face increased risks of cybersecurity incidents in connection with personnel working remotely.
Previous wording
We may experience cybersecurity incidents that we do not detect, or that we do not detect for extended periods of time. The techniques used to carry out attacks are constantly evolving, and it may be more difficult to detect attacks involving techniques that we are not aware of or have not anticipated. The emergence and maturation of AI capabilities may also lead to security breaches and incidents, and more frequent and intense attacks, owing to new and/or more sophisticated methods of attack, new means of identifying and exploiting vulnerabilities or other new or enhanced capabilities.
Current wording
We may experience cybersecurity incidents that we do not detect, or that we do not detect for extended periods of time. The techniques used to carry out attacks are constantly evolving, and it may be more difficult to detect attacks involving techniques that we are not aware of or have not anticipated. The emergence and maturation of AI capabilities has and may continue to contribute to more frequent and intense attacks, owing to new and/or more sophisticated methods of attack, new means of identifying and exploiting vulnerabilities or other new or enhanced threat capabilities, that could lead to security incidents or breaches.
Previous wording
•intellectual property or other proprietary or sensitive data regarding our business or our customers could be stolen or lost, modified, rendered unavailable, or otherwise assessed, used, or processed in authorized manners;
Current wording
•intellectual property or other proprietary or sensitive data regarding our business or our customers could be stolen or lost, modified, rendered unavailable, or otherwise assessed, used, or processed in unauthorized manners;
Previous wording
If we experience a cybersecurity incident, or if any of the above events occur, or are perceived to have occurred, we could be subject to significant claims for liability from our customers and others and regulatory investigations and actions from governmental agencies, and we could be required to expend significant capital and other resources to remediate and otherwise address any incident, including to notify individuals, entities, or regulatory bodies. In addition, our ability to protect our intellectual property rights could be compromised and our reputation and competitive position could be significantly harmed. The regulatory and contractual actions, proceedings, litigation, investigations, fines, penalties and liabilities relating to any actual or perceived incidents can be significant in terms of fines and reputational impact and necessitate changes to our business operations that may be disruptive to us. We could incur significant costs to upgrade our systems and measures in an effort to prevent network and system disruptions and other cybersecurity incidents. Even the perception of inadequate security may damage our reputation and negatively impact our ability to win new customers and retain existing customers. Consequently, our financial performance and results of operations could be adversely affected by any of the foregoing types of incidents or perceived incidents.
Current wording
If we experience a cybersecurity incident, or if any of the above events occur, or are perceived to have occurred, we could be subject to significant claims for liability from our customers and others and regulatory investigations and actions from governmental agencies, and we could be required to expend significant capital and other resources to remediate and otherwise address any incident, including to notify individuals, entities, or regulatory bodies. In addition, our ability to protect our intellectual property rights could be compromised and our reputation and competitive position could be significantly harmed. The regulatory and contractual actions, proceedings, litigation, investigations, fines, penalties and liabilities relating to any actual or perceived incidents can be significant in terms of fines and reputational impact and necessitate changes to our business operations that may be disruptive to us. We have and could continue to incur costs to upgrade our systems and measures in an effort to prevent network and system disruptions and other cybersecurity incidents, and such costs may become significant. Even the perception of inadequate security may damage our reputation and negatively impact our ability to win new customers and retain existing customers. Consequently, our financial performance and results of operations could be adversely affected by any of the foregoing types of incidents or perceived incidents.
Previous wording
In addition to laws aimed directly at trade, failure of our products to comply with a broader set of evolving industry standards and government regulations may adversely impact our business and in particular our ability to market in particular countries. Our products must comply with various U.S. federal government regulations and standards defined by agencies such as the Federal Communications Commission, standards established by governmental authorities in various foreign countries and recommendations of the International Telecommunication Union. In some circumstances, we must obtain regulatory approvals or certificates of compliance before we can offer or distribute our products in certain jurisdictions or to certain customers. In recent years, certain jurisdictions have tied these approvals to concerns about international relationships, including, e.g., concerns about entities with components sourced from or tested in China. Complying with new regulations or obtaining certifications, especially as standards evolve, may be costly and disruptive to our business and also may affect our ability to sell our products where these standards or regulations apply, which in turn may prevent us from sustaining our net revenues or achieving profitability.
Current wording
In addition to laws aimed directly at trade, failure of our products to comply with a broader set of evolving industry standards and government regulations may adversely impact our business and in particular our ability to market in particular countries. Our products must comply with various U.S. federal government regulations and standards defined by agencies such as the Federal Communications Commission, standards established by governmental authorities in various foreign countries and recommendations of the International Telecommunication Union. In some circumstances, we must obtain regulatory approvals or certificates of compliance before we can offer or distribute our products in certain jurisdictions or to certain customers. In recent years, certain jurisdictions have tied these approvals to concerns about international relationships, including, e.g., concerns about entities with components sourced from or tested in China. Complying with new regulations or obtaining certifications, especially as standards evolve, may be costly and disruptive to our business and also may affect our ability to sell our products where these standards or regulations apply, which in turn may prevent us from sustaining our net revenues or maintaining profitability.
Previous wording
Over the past several years, the U.S. government has enacted a series of enhanced international trade restrictions affecting China and other countries which have included additional export controls and sanctions, import regulations and foreign investment regulations. For example, the U.S. has added additional entities, from China and elsewhere, to restricted party lists impacting the ability of U.S. companies to provide products, and in certain cases services, to these entities and, in some cases, receive products or services from these entities. Beginning in October 2022, the U.S. expanded controls restricting the ability to send certain products and technology related to semiconductors, semiconductor manufacturing, and supercomputing. Although prior to the scheduled compliance date the administration announced its intention to rescind, and nonenforcement posture for, new regulations introduced in January 2025 further expanding the controls to impose a worldwide licensing requirement on certain ICs and computing resources that are used for training of AI models. The U.S. government may issue new controls on similar technologies in the future. The U.S. government also expanded the scope of restrictions on the development or production of advanced ICs and certain semiconductor manufacturing equipment, and the restrictions on supercomputing, though certain U.S. export controls have been partially relaxed pursuant to the bilateral trade negotiations between the U.S. and China since May 2025. Further changes to any of these policies are possible.
Current wording
Over the past several years, the U.S. government has enacted a series of enhanced international trade restrictions affecting China and other countries which have included additional export controls and sanctions, import regulations and foreign investment regulations. For example, the U.S. has added additional entities, from China and elsewhere, to restricted party lists impacting the ability of U.S. companies to provide products, and in certain cases services, to these entities and, in some cases, receive products or services from these entities. Beginning in October 2022, the U.S. expanded controls restricting the ability to send certain products and technology related to semiconductors, semiconductor manufacturing, and supercomputing. Although prior to the scheduled compliance date the administration announced its intention to rescind, and nonenforcement posture for, new regulations introduced in January 2025 further expanding the controls to impose a worldwide licensing requirement on certain ICs and computing resources that are used for training of AI models. The U.S. government may issue new controls on similar technologies in the future. The U.S. government also expanded the scope of restrictions on the development or production of advanced ICs and certain semiconductor manufacturing equipment, and the restrictions on supercomputing, though certain U.S. export controls have been partially relaxed since May 2025 pursuant to the bilateral trade negotiations between the U.S. and China. Further changes to any of these policies are possible.
Previous wording
California enacted Senate Bill 122, which extends the $5 million limitation on the use of business tax credits through 2029 and establishes a permanent credit cap starting in 2030 at the greater of $5 million or 70% of tax liability. We have assessed the impacts of these new laws domestically and on countries that we operate in and do not currently anticipate any material impacts on our effective tax rate. However, we cannot provide any assurance that there will not be a material impact to our effective tax rate in the future because of these developments or other proposed tax law changes.
Current wording
Taxation of earnings inside and outside of the U.S. may have adverse effects on our operating results and could impact the tax treatment of our earnings and cash and cash equivalent balances we currently maintain. On January 5, 2026, the Organization for Economic Cooperation and Development ("OECD") announced its “side-by-side” elective safe harbor package that would exempt U.S.-parented multinational entities from certain provisions of Pillar Two legislation previously enacted across the EU and other OECD member countries for fiscal years beginning on or after January 1, 2026. And, in June 2026, California enacted Senate Bill 122, which extends the $5 million limitation on the use of business tax credits through 2029 and establishes a permanent credit cap starting in 2030 at the greater of $5 million or 70% of tax liability. We have assessed the impacts of these new laws domestically and on countries that we operate in and do not currently anticipate any material impacts on our effective tax rate. However, we cannot provide any assurance that there will not be a material impact to our effective tax rate in the future because of these developments or other proposed tax law changes.
Previous wording
Our business is subject to regulation by various federal, state, local and foreign governmental agencies, including agencies responsible for monitoring and enforcing employment and labor laws, workplace safety, product safety, environmental laws (including new laws related to climate change), consumer protection laws, privacy, data protection, telecommunications, anti-bribery laws such as the U.S. Foreign Corrupt Practices Act, import/export controls and sanctions, conflict minerals, federal securities laws and tax laws and regulations. In addition, emerging tools and technologies we utilize in providing our products, like AI and machine learning, may also become subject to regulation under new laws or new applications of existing laws, such as product compliance and safety regulations. Violations of these laws and regulations could result in fines and penalties, criminal sanctions against us, our officers or our employees, prohibitions on the conduct of our business, and damage to our reputation.
Current wording
Our business is subject to regulation by various federal, state, local and foreign governmental agencies, including agencies responsible for monitoring and enforcing employment and labor laws, workplace safety, product safety, environmental laws (including new laws related to climate change), consumer protection laws, privacy, data protection, telecommunications, anti-bribery laws such as the U.S. Foreign Corrupt Practices Act, import/export controls and sanctions, conflict minerals, federal securities laws and tax laws and regulations. The laws, regulations, and policies governing us directly, and the build out of AI infrastructure more generally, are subject to robust public debate, which may result in slowing the development of AI and data center infrastructure as well as demand for our products and services. In addition, emerging tools and technologies we utilize in providing our products, like AI and machine learning, may also become subject to regulation under new laws or new applications of existing laws, such as product compliance and safety regulations. Violations of these laws and regulations could result in fines and penalties, criminal sanctions against us, our officers or our employees, prohibitions on the conduct of our business, and damage to our reputation.
Previous wording
The United States may also continue to leverage the use of “secondary tariffs” and/or “secondary sanctions” to achieve certain foreign policy goals, or increase its enforcement of such tools, which may directly or indirectly affect our business (see also the “Escalated or escalating U.S. tariffs, as well as countermeasures taken by affected countries may have a negative effect on global economic conditions, financial markets and our business, as may retaliatory actions by other countries, including China, in response to these U.S. policies” risk factor above). Even though we take precautions to ensure that we and our channel partners comply with all relevant regulations, any failure by us or our channel partners to comply with such regulations could have negative consequences, including reputational harm, government investigations and penalties. In addition, economic sanctions that are vague and not subject to guidance by regulators lead to heightened compliance risk.
Current wording
The United States may also continue to leverage the use of “secondary tariffs” and/or “secondary sanctions” to achieve certain foreign policy goals, or increase its enforcement of such tools, which may directly or indirectly affect our business (see also the “Escalated or escalating U.S. tariffs, as well as countermeasures and retaliatory actions taken by affected countries may have a negative effect on global economic conditions, financial markets and our business, in response to these U.S. policies” risk factor above). Even though we take precautions to ensure that we and our channel partners comply with all relevant regulations, any failure by us or our channel partners to comply with such regulations could have negative consequences, including reputational harm, government investigations and penalties. In addition, economic sanctions that are vague and not subject to guidance by regulators lead to heightened compliance risk.
Previous wording
Our directors, executive officers and each of our stockholders who own greater than 10% of our outstanding common stock together with their affiliates, in the aggregate, beneficially own approximately 17.0% of the outstanding shares of our common stock, based on shares outstanding as of June 30, 2026. As a result, these stockholders, if acting together, could exercise a significant level of influence over matters requiring approval by our stockholders, including the election of directors and the approval of mergers, acquisitions or other extraordinary transactions. They may also have interests that differ from yours and may vote in a way with which you disagree and which may be averse to your interests. This concentration of ownership may also discourage a potential investor from acquiring our common stock due to the limited voting power of such stock or otherwise may have the effect of delaying, preventing or deterring a change of control of our company, could deprive our stockholders of an opportunity to receive a premium for their common stock as part of a sale of our company and might ultimately affect the market price of our common stock. In addition, sales by such stockholders could negatively affect our stock price.
Current wording
Our directors, executive officers and each of our stockholders who own greater than 10% of our outstanding common stock together with their affiliates, in the aggregate, beneficially own approximately 16.6% of the outstanding shares of our common stock, based on shares outstanding as of September 30, 2026. As a result, these stockholders, if acting together, could exercise a significant level of influence over matters requiring approval by our stockholders, including the election of directors and the approval of mergers, acquisitions or other extraordinary transactions. They may also have interests that differ from yours and may vote in a way with which you disagree and which may be averse to your interests. This concentration of ownership may also discourage a potential investor from acquiring our common stock due to the limited voting power of such stock or otherwise may have the effect of delaying, preventing or deterring a change of control of our company, could deprive our stockholders of an opportunity to receive a premium for their common stock as part of a sale of our company and might ultimately affect the market price of our common stock. In addition, sales by such stockholders could negatively affect our stock price.
Previous wording
From time to time, we repurchase shares of our common stock pursuant to repurchase programs that are funded from working capital. In May 2025, our board of directors authorized a $1.5 billion Repurchase Program. The Repurchase Program does not obligate us to acquire any of our common stock and may be suspended or discontinued by the Company at any time without prior notice. We did not repurchase any shares during the six months ended June 30, 2026. As of June 30, 2026, the remaining authorized amount for repurchases under the Repurchase Program was $817.9 million. Refer to Note 6. Stockholders' Equity and Stock-Based Compensation of the Notes to Condensed Consolidated Financial Statements included in Part I, Item 1, of this Quarterly Report on Form 10-Q for further discussion.
Current wording
From time to time, we repurchase shares of our common stock pursuant to repurchase programs that are funded from working capital. In May 2025, our board of directors authorized a $1.5 billion Repurchase Program. The Repurchase Program does not obligate us to acquire any of our common stock and may be suspended or discontinued by the Company at any time without prior notice. We did not repurchase any shares during the nine months ended September 30, 2026. As of September 30, 2026, the remaining authorized amount for repurchases under the Repurchase Program was $817.9 million. Refer to Note 5. Stockholders' Equity and Stock-based Compensation of the Notes to Condensed Consolidated Financial Statements included in Part I, Item 1, of this Quarterly Report on Form 10-Q for further discussion.
Rearranged previous paragraphs (1)
Previous report — wording carried elsewhere
Taxation of earnings inside and outside of the U.S. may have adverse effects on our operating results and could impact the tax treatment of our earnings and cash and cash equivalent balances we currently maintain. On January 5, 2026, the Organization for Economic Cooperation and Development ("OECD") announced its “side-by-side” elective safe harbor package that would exempt U.S.-parented multinational entities from certain provisions of Pillar Two legislation previously enacted across the EU and other OECD member countries for fiscal years beginning on or after January 1, 2026. And, in June 2026,