Fortinet Tripled Free Cash Flow and Fell While Rivals Rallied on No New Numbers
Hypothesis Fable 5 · Research Fable 5 · Writing Fable 5 · Prompt v1.4
Cybersecurity stocks added about 11% in a month, but the two companies that actually reported accelerating business went opposite directions. Fortinet grew billings 33% and tripled free cash flow to $966m — and its shares slipped anyway. Cloudflare grew revenue 35.9%, its fourth straight quarter of acceleration, and jumped 17% on the print.
The rest of the rally rests on sentiment. Rubrik (+27%) and Zscaler (+24%) haven't reported since early June and late May; their entire moves are multiple expansion, much of it in shared sessions around the Black Hat conference's AI-threat headlines. Strip each stock's two best days and the group's average month falls from roughly +11% to +1%.
Cloudflare now trades near 40x forward sales, up roughly 50% from its spring multiple on one earnings report. Okta, growing 11% with identity seats, sat the rally out entirely.
| Ticker | Company | Segment | Trend · 13mo | 30D | 1Y |
|---|---|---|---|---|---|
FTNT | Fortinet | Network Security Appliances | 🌱 Emerging Bull | −1.0% | +98.1% |
NET | Cloudflare | Network & Application Delivery | 🟢 Cont. Bull | +13.7% | +56.0% |
ZS | Zscaler | AI & Data Intelligence | 🔴 Cont. Bear | +22.4% | −33.7% |
RBRK | Rubrik | Other | 🌱 Emerging Bull | +29.5% | +19.3% |
PANW | Palo Alto Networks | Cybersecurity & Threat Protection | 🌱 Emerging Bull | +7.1% | +118.1% |
CRWD | CrowdStrike | Cybersecurity & Threat Protection | 🔴 Cont. Bear | +6.8% | −49.1% |
OKTA | Okta | Identity & Access Management | 🌱 Emerging Bull | −1.3% | +61.3% |
12-month price & trend
| Ticker | Mkt cap | P/E | P/E fwd | P/S | P/S fwd | P/GP | P/GP fwd | EV/EBITDA | FCF yld |
|---|---|---|---|---|---|---|---|---|---|
FTNT | $117.4B | 55.9x | 46.8x | 15.6x | 14.5x | 19.4x | 18.1x | 39.7x | 2.7% |
NET | $112.0B | n/m | 263.6x | 44.6x | 39.9x | 61.4x | 54.9x | — | 0.3% |
ZS | $29.7B | n/m | 40.1x | 9.4x | 7.6x | 12.2x | 9.9x | 251.1x | 3.2% |
| Ticker | Mkt cap | P/E | P/E fwd | P/S | P/S fwd | P/GP | P/GP fwd | EV/EBITDA | FCF yld |
|---|---|---|---|---|---|---|---|---|---|
RBRK | $21.0B | n/m | 329.5x | 14.8x | 12.8x | 18.3x | 15.9x | n/m | 1.5% |
PANW | $313.2B | 322.9x | 93.4x | 29.5x | 22.6x | 41.0x | 31.5x | 137.3x | 1.4% |
CRWD | $220.9B | n/m | 176.2x | 43.4x | 37.2x | 57.8x | 49.5x | 648.9x | 0.7% |
| Ticker | Mkt cap | P/E | P/E fwd | P/S | P/S fwd | P/GP | P/GP fwd | EV/EBITDA | FCF yld |
|---|---|---|---|---|---|---|---|---|---|
OKTA | $24.5B | 105.3x | 38.3x | 8.2x | 7.7x | 10.6x | 9.9x | 67.1x | 3.7% |
Consensus projections
| Ticker | FY2026E | FY2027E | FY2028E | |
|---|---|---|---|---|
FTNT | Revenue | +19.8% | +11.3% | +10.9% |
| EPS | +27.0% | +9.4% | +13.3% | |
NET | Revenue | +31.0% | +27.9% | +27.4% |
| EPS | +31.0% | +32.8% | +38.3% | |
ZS | Revenue | +25.2% | +16.9% | +16.7% |
| EPS | +29.0% | +11.2% | +17.6% | |
RBRK | Revenue | +48.7% | +28.4% | +21.5% |
| EPS | −90.5% | −278.4% | +106.3% | |
PANW | Revenue | +24.3% | +21.1% | +14.1% |
| EPS | +15.3% | +9.0% | +17.6% | |
CRWD | Revenue | +22.2% | +23.7% | +21.8% |
| EPS | −1.2% | +32.6% | +26.5% | |
OKTA | Revenue | +12.0% | +10.0% | +9.5% |
| EPS | +24.3% | +11.7% | +10.8% |
Forward fiscal years only. Blank means no analyst coverage for that year.
The security industry just staged a rally in which the tightest link between business results and share price was an inverse one. Fortinet, which sells firewall appliances with attached security subscriptions, delivered on July 29 what was arguably the group's best quarter — billings up 33% to $2.37bn, revenue growth accelerating to 25.6% from 14.8% two quarters earlier, free cash flow tripling to $966m — and the stock finished the month down 2.7%. Meanwhile Rubrik and Zscaler, which have reported nothing new since early June and May 26 respectively, gained 27% and 24%.
The explanation for Fortinet is arithmetic, not disappointment: the shares had already doubled over twelve months and trade at 46.8x forward earnings, so a record quarter bought digestion rather than applause. The explanation for the rest of the group is a narrative. The Black Hat conference in Las Vegas pushed CrowdStrike and Palo Alto Networks to record highs on August 10 on the argument that AI is both a new attack surface and a new budget line, with industry forecasts putting 2026 security spending above $520bn, double 2021's level.
Who has the numbers
Only two of the seven can point to reported acceleration. Cloudflare, which runs a global edge network billed by usage rather than seats, grew Q2 revenue 35.9% to $696m and raised full-year guidance to about $2.87bn — its fourth straight quarter of accelerating growth, with net retention up six points in a year to 120% and management saying more than half its network traffic now comes from AI agents. Fortinet is the other, and its quarter is described above.
The rest are riding along. Rubrik, which secures backup data and bills by volume, is decelerating — revenue growth has slowed from 51% to 39% over four quarters — and its August surge came from an AI-agent identity product launch that lifted the stock 18% plus the Black Hat pop. Zscaler, which routes employee traffic through its cloud to enforce zero-trust access, grows a steady 25% with no acceleration in three quarters; its move is entirely multiple, though at 7.6x forward sales it started from the least demanding valuation in the group. Palo Alto Networks, the sector's largest vendor at a $313bn market cap, printed 31% headline growth, but that includes the $21.1bn CyberArk acquisition; organic growth ran near 15%, and the quarter swung to a $183m GAAP operating loss on deal costs. CrowdStrike, which sells endpoint-sensor subscriptions, is quietly re-accelerating toward 26% growth, yet remains down 49% over twelve months and still costs about 43x trailing sales. Okta, which bills per employee identity managed, is the group's clearest laggard for a reason: growth of 11% is guided to 9-10% next year, net retention sits at 107%, and consensus price targets sit below the shares.
The month, decomposed
Strip each stock's two best sessions and the group's average 30-day gain collapses from roughly +11% to +1%. Those best days cluster on the same dates — around Cloudflare's August 6 report and the August 10 Black Hat session — so this was a sector-wide sentiment sequence, not seven independent stories. Trend-wise the group is not one trade either: Cloudflare and Fortinet have held unbroken uptrends since May 5, while CrowdStrike's 50-day average still sits below its 200-day and Zscaler turned positive only on August 13.
The price being paid for the story is steepest at Cloudflare: 39.9x forward sales and roughly 264x forward earnings, against a spring level near 25-28x enterprise value to forward revenue — a re-rating of about 50% on one earnings report. Whether the AI-security budget is real will be settled by the companies that haven't spoken yet.
The setup
Where it stands — Two of seven security vendors reported accelerating spend; the other five rallied, or didn't, on narrative alone.
Would confirm — CrowdStrike, Zscaler and Rubrik each print accelerating billings or revenue growth at their next reports.
Would invalidate — Palo Alto's organic growth stays near 15% and Zscaler's growth slips below 25%, leaving the rally two names wide.
Watch next — Palo Alto's fiscal-Q4 report in late August, then CrowdStrike, Zscaler and Rubrik in early September.
Valuation — Cloudflare at 39.9x forward sales versus roughly 25-28x in May; Zscaler at 7.6x forward sales for 25% growth.














































































