Why FTNT is the relative-value play in cybersecurity
Fortinet operates across three overlapping markets — next-gen firewalls, secure networking (SASE), and security operations — which gives it exposure to nearly every major enterprise security budget line. Unlike PANW, which commands a premium for its platform narrative, and CRWD, which leads on cloud endpoint protection, FTNT trades at a lower earnings multiple despite delivering comparable billings growth in 2026.
The gap in relative valuation is a persistent trade that many institutional investors monitor. When cybersecurity sector sentiment improves broadly — triggered by a major breach, an uptick in M&A, or strong billings from a sector peer — FTNT often catches up fastest because it has the most valuation compression to unwind. Traders who track PANW and CRWD earnings call commentary as forward-looking reads on enterprise security spending often use FTNT as the lower-beta expression of the same macro theme.
- Watch billings growth (not just revenue) — accelerating billings is the leading indicator for FTNT's next re-rating cycle.
- Track FortiOS platform upgrades and AI security product launches: new appliance cycles drive hardware replacement revenue.
- Compare FTNT/PANW relative strength — sustained FTNT outperformance historically precedes a broader sector rotation into value within cybersecurity.