Fortinet

Fortinet, Inc. is a United States cybersecurity company headquartered in Sunnyvale, California. Founded in 2000 by brothers Ken Xie and Michael Xie, the company developed from an early focus on integrated network security appliances into a broad portfolio spanning firewalls, secure networking, wireless access, endpoint protection, cloud security, security analytics, email security, data loss prevention, and security operations. The company originated as Appligation, Inc., was subsequently renamed ApSecure, and adopted the Fortinet name from the idea of fortified networks. Its first major commercial product was FortiGate, introduced in 2002 as a physical firewall appliance. FortiGate combined firewalling with functions such as virtual private networking, intrusion prevention, antivirus, and antispam, reflecting Fortinet's early emphasis on unified threat management rather than separate point products. The company later implemented custom ASIC acceleration in several product families to improve throughput and reduce the performance penalty associated with security inspection. Fortinet expanded internationally during its first decade, establishing channel operations in Canada and the United Kingdom and developing offices and research activity across North America, Europe, and Asia. It added products for email security, wireless networking, switching, application delivery, sandboxing, endpoint security, identity and access control, security information and event management, and cloud-based protection. The Fortinet Security Fabric became the company's architectural framework for connecting these technologies so that telemetry, policy, and response could be coordinated across the network and security stack. The company became profitable in 2008 and completed an initial public offering in November 2009 under the ticker FTNT. Its growth strategy has combined internal product development, hardware and software integration, threat research, channel distribution, training, and acquisitions. Acquisitions such as Meru Networks, AccelOps, Bradford Networks, ZoneFox, enSilo, CyberSponse, OPAQ Networks, Panopta, ShieldX, Lacework, and Next DLP broadened Fortinet's presence in wireless access, analytics, access control, cloud security, incident management, application security, and data protection. Fortinet also operates FortiGuard Labs, an internal threat-intelligence and research organization, and has participated in industry information-sharing initiatives including the Cyber Threat Alliance. Its education programs, including the Network Security Expert certification program and the Fortinet Training Institute, address the cybersecurity skills shortage. The company sells through direct and channel routes to enterprises, small and medium-sized businesses, telecommunications providers, managed service providers, and public-sector organizations. Its products are deployed globally, although Fortinet announced the termination of sales, support, and professional services in Russia in 2022. Fortinet's brand positioning centers on integrated cybersecurity, high-throughput inspection, proprietary security processing hardware, and a unified operating model across on-premises, hybrid, and cloud environments. Its principal commercial identity remains closely associated with FortiGate, while the broader Fortinet platform covers secure access, secure networking, cloud workload protection, security operations, and threat intelligence.

Fortinet began in 2000 when Ken Xie and Michael Xie founded Appligation, Inc. The company was later renamed ApSecure and then Fortinet, a name derived from the concept of fortified networks. Early financing supported development of an integrated security appliance, and the company created its first channel program in 2003. International distribution followed in Canada in late 2003 and the United Kingdom in early 2004, with additional offices and research activity established across North America, Europe, and Asia. Fortinet introduced FortiGate in 2002. Initially sold as a physical firewall appliance, FortiGate combined network firewalling with VPN, intrusion prevention, antivirus, antispam, and related security functions. This unified threat management approach became central to the company's identity. Over time, FortiGate was offered as both hardware and virtual appliances, while Fortinet incorporated purpose-built ASICs into portions of its portfolio to accelerate inspection and networking workloads. The company reached profitability in the third quarter of 2008 and completed its public offering in November 2009 on NASDAQ. During this period, Fortinet expanded beyond firewalls through acquisitions and new products. It acquired or obtained assets associated with database security, Ethernet switching, application hosting, load balancing, wireless networking, security analytics, access control, threat analytics, endpoint security, incident response, SASE, cloud security, and data loss prevention. Notable transactions included Meru Networks in 2015, AccelOps in 2016, Bradford Networks and ZoneFox in 2018, enSilo and CyberSponse in 2019, OPAQ Networks and Panopta in 2020, ShieldX and Sken.ai in 2021, and Lacework and Next DLP in 2024. Fortinet developed FortiGuard Labs as an internal security research group in 2005. The group supports threat intelligence, malware analysis, vulnerability research, and security services. In 2014, Fortinet helped establish the Cyber Threat Alliance with Palo Alto Networks, with other security companies joining later. The alliance promoted sharing of threat information, including research on CryptoWall ransomware. Fortinet also supplied intelligence to Interpol and participated in information-sharing arrangements involving NATO. From the middle of the 2010s, Fortinet increasingly presented its offerings as a connected Security Fabric rather than a collection of independent products. The architecture linked firewalls, switches, wireless access points, endpoints, sandboxes, security analytics, cloud services, and security operations tools. Fortinet added SIEM capabilities in 2016 and expanded the fabric to include broader network, endpoint, and cloud functions in 2017. Fortinet Federal was also created as a subsidiary serving government cybersecurity requirements. Education and workforce development became another part of the company's public profile. The Network Security Expert certification program began in 2014. In 2016, Fortinet launched the Network Security Academy and FortiVet, an initiative intended to help military veterans enter cybersecurity careers. In 2021, the company pledged to train one million people as part of efforts to address the cybersecurity labor shortage. Fortinet has also faced legal, regulatory, and security controversies. Trend Micro brought a patent dispute concerning antivirus functionality in FortiGate; the relevant patents were later invalidated. A 2005 German dispute involving source code for GPL-licensed components ended after Fortinet agreed to make the source available on request. Reports also linked Fortinet technology to internet censorship in Myanmar, which the company attributed to third-party distribution while noting applicable embargo obligations. In 2019, Fortinet settled a whistleblower case concerning allegedly mislabeled equipment sold to United States government end users, characterizing the matter as isolated. Separately, vulnerabilities in Fortinet products have periodically led to credential exposures and exploitation campaigns, underscoring the risks faced by a major security-vendor infrastructure estate.

1. 2024Lacework and Next DLP acquisitions

   Fortinet expanded its cloud-security and data-protection portfolio through acquisitions of Lacework and Next DLP.

   Source
2. 2022Russian operations terminated

   Fortinet stopped sales, support, and professional services in Russia.

   Source
3. 2020FortiAI and multi-cloud SD-WAN introduced

   Fortinet announced artificial-intelligence-assisted threat detection and a multi-cloud SD-WAN offering.

   Source
4. 2016Security Fabric and academy expanded

   Fortinet began building the Security Fabric architecture and launched its Network Security Academy.

   Source
5. 2014NSE certification launched

   Fortinet introduced its Network Security Expert professional certification program.

   Source
6. 2009NASDAQ listing

   Fortinet completed its initial public offering and began trading under FTNT.

   Source
7. 2008Profitability reached

   The company became profitable during the third quarter.

   Source
8. 2005FortiGuard Labs created

   Fortinet established its internal threat research and intelligence organization.

   Source
9. 2002FortiGate introduced

   Fortinet launched its first major product, a physical firewall appliance later expanded into a broad next-generation firewall platform.

   Source
10. 2000Company founded

    Ken Xie and Michael Xie founded the business that became Fortinet.

    Source

Integrated, high-performance cybersecurity and secure networking built around a unified Security Fabric architecture.

• FortiGateNext-generation firewall and secure networking2002

  FortiGate is Fortinet's foundational product family. It provides firewalling, VPN, intrusion prevention, application control, antivirus, web filtering, and secure SD-WAN functions. The range includes physical appliances, virtual machines, and cloud-oriented deployments. FortiGate hardware uses Fortinet-developed acceleration technologies in selected models to support high-throughput inspection.

• Fortinet Security FabricIntegrated cybersecurity architecture2016

  The Security Fabric connects Fortinet's network, endpoint, access, cloud, analytics, and security-operations products. Its purpose is to share telemetry and coordinate policy and response across distributed environments rather than treating each security control as an isolated system.

• FortiSwitchSecure networking switches

  FortiSwitch provides Ethernet switching designed to integrate with FortiGate and the Security Fabric. It supports enterprise and branch networking use cases, with centralized management and security-policy integration intended to connect wired access infrastructure with broader network protection.

• FortiAPWireless access points

  FortiAP is Fortinet's wireless access portfolio for enterprise, branch, and specialized high-density environments. The products are managed through Fortinet networking and security systems and are positioned as part of an integrated secure-access architecture.

• FortiMailEmail security

  FortiMail protects organizational email against spam, malware, phishing, and related messaging threats. It is offered as part of Fortinet's broader security portfolio and can use FortiGuard intelligence to improve detection and filtering.

• FortiClientEndpoint security and secure access

  FortiClient provides endpoint protection and secure connectivity, including endpoint detection capabilities and VPN or zero-trust access functions. It connects user devices to Fortinet's network and security controls.

• FortiSIEMSecurity information and event management2016

  FortiSIEM collects and analyzes security and operational events to support monitoring, correlation, investigation, and incident response. It became part of Fortinet's broader Security Fabric strategy as the company expanded into security operations.

• FortiSASESecure access service edge2020

  FortiSASE delivers security and access controls through a cloud-oriented service model for distributed users, branches, and applications. It extends Fortinet's secure networking approach beyond traditional appliance-based deployments.

• 2021One Million Cybersecurity Professionals pledge

  United States · Global

  Fortinet pledged to train one million people in response to public calls for action on the cybersecurity talent shortage.

  Outcome. Positioned training and certification as part of Fortinet's social and industry-development agenda.

  Source
• 2016Fortinet Network Security Academy

  United States · Global education sector

  Fortinet provided universities with equipment, information, and training resources intended to prepare students for cybersecurity careers and help address the shortage of qualified security professionals.

  Outcome. Established an education and workforce-development channel for Fortinet technologies.

  Source
• 2016FortiVet

  United States

  FortiVet was created to support recruitment of military veterans into cybersecurity roles.

  Outcome. Expanded Fortinet's workforce-development and recruitment initiatives.

  Source

• 2024Acquire Lacework and Next DLPM&A

  Cloud workloads and data-protection requirements were becoming more central to enterprise cybersecurity programs.

  What changed. Fortinet acquired Lacework and Next DLP to broaden its cloud-security and data-loss-prevention capabilities.

  Aftermath. The acquisitions expanded Fortinet's platform beyond traditional network security into cloud and data-security use cases.

  Source
• 2022Terminate operations in RussiaStrategy

  Geopolitical conditions and sanctions-related compliance requirements affected technology companies operating in Russia.

  What changed. Fortinet stopped sales, support, and professional services in Russia.

  Aftermath. Fortinet withdrew its direct commercial and service operations from the Russian market.

  Source
• 2020Launch FortiAI and multi-cloud SD-WANProduct launch

  Security teams faced growing volumes of alerts and increasingly distributed, multi-cloud network environments.

  What changed. Fortinet introduced FortiAI for artificial-intelligence-assisted threat detection and launched multi-cloud SD-WAN capabilities.

  Aftermath. The moves extended Fortinet's positioning from appliance security toward automated and cloud-connected secure networking.

  Source
• 2016Build the Security Fabric architectureStrategy

  Customers increasingly required coordinated protection across networks, endpoints, cloud services, and security operations.

  What changed. Fortinet began connecting its product families through a common architecture for telemetry exchange, centralized control, and coordinated response.

  Aftermath. The Security Fabric became the organizing framework for Fortinet's expanded cybersecurity portfolio.

  Source

• 2024SharePoint data breachControversy

  Fortinet confirmed that an attacker had accessed data from a company Microsoft SharePoint environment. The company said the exposed information included limited data relating to a small number of customers.

  Source
• 2023State-linked exploitation of FortiGate devicesControversy

  Microsoft and Five Eyes partners reported a broad, continuing cyberattack targeting Fortinet FortiGuard or FortiGate devices and attributed the activity to a state-sponsored actor in China.

  Source
• 2021Fortinet VPN credential exposureControversy

  A large set of login names and passwords associated with Fortinet VPN devices was reportedly published online. The credentials were linked to devices affected by a 2018 vulnerability, CVE-2018-13379.

  Source
• 2019Whistleblower case over government salesControversy

  Fortinet settled a whistleblower lawsuit concerning allegedly intentionally mislabeled Chinese-made equipment sold to United States government end users. The company described the matter as an isolated incident.

  Source
• 2005GPL source-code disputeControversy

  A German court issued a preliminary injunction involving Fortinet's UK subsidiary and source code associated with GPL-licensed components. The matter ended after Fortinet agreed to make the relevant source code available on request.

  Source
• 2005Myanmar censorship controversyControversy

  An OpenNet study reported use of FortiGuard technology by Myanmar's military government in an internet-censorship context. Fortinet said its products were sold by third-party resellers and referenced its obligations concerning United States embargoes.

  Source
• 2004Trend Micro patent disputeControversy

  Trend Micro alleged that FortiGate products infringed patents concerning server-based antivirus technology. The dispute involved proceedings before the United States International Trade Commission, while the patents at issue were later declared invalid.

  Source

• 2022Fortinet ends operations in Russia

  Fortinet announced that it had stopped sales, support, and professional services in Russia.

  Regulation
  Source
• 2019Fortinet announces FortiGate SD-WAN and next-generation firewall recognition

  NSS Labs gave Fortinet products a Recommended rating in its relevant security testing.

  Other
  Source
• 2016Fortinet establishes Network Security Academy

  Fortinet launched an academic initiative providing equipment and training resources to help universities prepare cybersecurity students.

  Campaign
  Source
• 2014Fortinet launches Network Security Expert certification program

  The company introduced a tiered technical certification program for cybersecurity professionals.

  Other
  Source
• 2009Fortinet completes initial public offering

  Fortinet began trading on the NASDAQ under FTNT in November 2009.

  Other
  Source

1. Fortinet
2. Fortinet leadership
3. Fortinet confirms data breach after hacker leaks stolen files