Fortinet

Fortinet, Inc. is an American cybersecurity company with headquarters in Sunnyvale, California. The company develops and sells security solutions like firewalls, endpoint security and intrusion detection systems. Fortinet has offices located all over the world.

Brothers Ken Xie and Michael Xie founded Fortinet in 2000. The company's first and main product was FortiGate, a physical firewall. The company later added wireless access points, sandbox and messaging security. The company went public in November 2009.

History

Early history

In 2000, Ken Xie and his brother Michael Xie co-founded Appligation, Inc., which they renamed ApSecure and finally Fortinet (from the phrase "Fortified Networks").

Fortinet introduced its first product, FortiGate, in 2002, followed by anti-spam and anti-virus software. The company raised $13 million in private funding from 2000 to early 2003. Fortinet's first channel program was established in October 2003.

The company began distributing its products in Canada in December 2003 and in the UK in February 2004. By 2004, Fortinet had offices in Asia, Europe, and North America.

Growth and expansion

Fortinet became profitable in the third quarter of 2008.

According to market research firm IDC, by November 2009, Fortinet held over 15 percent of the unified threat management market. Also in 2009, '' CRN Magazine''s survey-based annual report card placed Fortinet first in network security hardware, up from seventh in 2007. In November 2009, Fortinet had an initial public offering, opening on the NASDAQ Global Market under the ticker symbol FTNT. By the end of the first day of trading, the company had raised $156 million. The company later became listed on the NASDAQ Global Select Market, and became a component of the NASDAQ-100 index.

By 2010, Fortinet had $324 million in annual revenues and held the largest share of the unified threat management market according to IDC.

Recent history

In July 2014, Fortinet announced a technical certification program called the Network Security Expert (NSE) program. In March 2016, Fortinet launched a Network Security Academy to help fill open cybersecurity jobs in the U.S. Fortinet donated equipment and provided information to universities to help train students for jobs in the field. Also in 2016, Fortinet launched a program called FortiVet to recruit military veterans for cybersecurity jobs.

In January 2017, it was announced that Philip Quade, a former member of the NSA, would become the company's chief information security officer.

In 2019, Fortinet's FortiGate SD-WAN and Next Generation Firewall received a "Recommended" rating from NSS Labs.

In September 2021, Fortinet pledged to train one million people in support of President Joe Biden's call to action to address the talent shortage in American cybersecurity.

In March 2022, Fortinet announced the termination of operations in Russia. The company has stopped all sales, support, and professional services within Russia.

Also in 2022, NetworkWorld reported that Fortinet had introduced new AI and ML-based security services utilizing telemetry from its global network.

Acquisitions

In 2008, the company acquired the intellectual property of IPLocks, a database security and auditing company.

In August 2009, Fortinet acquired the intellectual property and other assets of Woven Systems, an Ethernet switching company.

Fortinet made four acquisitions from 2012 to 2016. The company acquired app-hosting service XDN (formerly known as 3Crowd) in December 2012, Coyote Point in 2013, and Wi-Fi hardware company Meru Networks in 2015. In June 2016, Fortinet acquired IT security, monitoring and analytics software vendor, AccelOps.

In June 2018, Fortinet acquired Bradford Networks, a maker of access control and IoT security solutions.

In October 2018, Fortinet acquired ZoneFox, a threat analytics company.

In late 2019, Fortinet acquired enSilo and CyberSponse.

In 2020, Fortinet acquired SASE cloud provider OPAQ Networks, and automated incident management company Panopta.

In Mach 2021, Fortinet acquired cloud and network security firm ShieldX. In July 2021, Fortinet acquired application security company Sken.Ai to offer continuous application security testing.

In June 2024, Fortinet acquired Lacework, a data-driven cloud security company for an undisclosed amount. In August 2024, Fortinet acquired Next DLP, a cloud based DLP provider company for an undisclosed amount.

Products and research

Products

Fortinet released its first product, FortiGate, a firewall, in 2002, followed by anti-spam and anti-virus software.
As functions like anti-spam were added, they were made available in a unified product along with the firewall and other functions. FortiGate was updated later to use application-specific integrated circuit (ASIC) architecture. The company has used ASIC in several of its products, including to support its SD-WAN features.

Initially, FortiGate was a physical, rack-mounted product but later became available as a virtual appliance that could run on virtualization platforms such as VMware vSphere.

In May 2004, Trend Micro, a competing cyber security and defense company, filed a legal complaint against Fortinet. Though the International Trade Commission initially ruled against Fortinet, the Trend Micro patents at the center of the dispute were later declared invalid in 2010. In 2005, an OpenNet study suggested that Myanmar, which was under American sanctions, had begun using Fortinet's FortiGuard system for internet censorship. Fortinet stated that their products are sold by third-party resellers and that they acknowledged US embargoes; however, their sales director participated in a ceremony to deliver the firewall product to the prime minister.

In April 2016, Fortinet began building its Security Fabric architecture so multiple network security products could communicate as one platform. Later that year, the company added Security Information and Event Management (SIEM) products. In September 2016, the company announced it would integrate the SIEM products with the security systems of other vendors.

In 2017, Fortinet announced the addition of switches, access points, analyzers, sandboxes and cloud capabilities to the Security Fabric, in addition to endpoints and firewalls. Later in 2017, Fortinet created a standalone subsidiary, Fortinet Federal, to develop cybersecurity products for government agencies. Fortinet has received security effectiveness certifications through NSS Labs.

In 2019, Fortinet grew to 21,000 WAN edge customers, according to a Gartner report.

In February 2020, Fortinet released FortiAI, a threat-detection program that uses artificial intelligence. In July 2020, Fortinet launched multi-cloud SD-WAN. That year, BT Security selected Fortinet and other Threat Alliance members as Critical Partners.

Vulnerabilities and credential leaks

In September 2021, almost 500,000 login names and passwords for Fortinet VPN devices were published on a hacking forum. The credentials were allegedly scraped from devices vulnerable to a 2018 exploit (CVE-2018-13379).

In January 2025, the credentials and configuration files of over 15,000 FortiGate devices were leaked on a hacking forum. The data is believed to have been obtained from devices vulnerable to a 2022 exploit (CVE-2022–40684).

Accomplishments in cybersecurity

In 2005, Fortinet created the FortiGuard Labs internal security research team.

By 2014, Fortinet had four research and development centers in Asia, as well as others in the US, Canada and France.

In March 2014, Fortinet founded the Cyber Threat Alliance (CTA) with Palo Alto Networks in order to share security threat data across vendors. It was later joined by McAfee and Symantec. In 2015, the CTA published a white paper on the CryptoWall ransomware, which detailed how attackers obtained $325 million through ransoms paid by victims to regain access to their files.

In April 2015, Fortinet provided threat intelligence to Interpol in order to help apprehend the ringleader of several online scams based in Nigeria. The scams, which resulted in compromise of business emails and CEO fraud, had cost one business over $15 million. The following year, in March 2016, Fortinet and Cisco joined NATO in a data-sharing agreement to improve their information security capabilities.

Fortinet researchers discovered a spyware that scammed victims by impersonating the IRS. Also in 2017, researchers helped identify malware, called Rootnik, and ransomware, called MacRansom, that targeted Android and MacOS systems respectively.

Controversies

In April 2005, a German court issued a preliminary injunction against Fortinet's UK subsidiary in relation to source code for its GPL-licensed elements. The dispute ended a month later after Fortinet agreed to make the source code available upon request.

In September 2019, Fortinet settled a whistleblower lawsuit regarding what the company has described as an "isolated incident" of sales of intentionally mislabeled Chinese-made equipment to U.S. government end users.

In 2023, Fortinet Fortiguard devices were revealed by Microsoft and members of the Five Eyes intelligence network to be the subject of a wide-ranging and ongoing cyberattack by a state-sponsored entity in China.

In September 2024, reports surfaced of an unknown person going by the nickname "Fortibitch" posting to an unnamed "hacking forum" that they allegedly stole 440 gigabytes of data from Fortinet's Microsoft SharePoint server. Fortinet confirmed the data breach to Bleeping Computer and said that the data breach included "limited data related to a small number of Fortinet customers".

References

Further reading

*

External links

*

{{NASDAQ-100

Computer security companies
Companies based in Sunnyvale, California
Computer companies established in 2000
Content-control software
Computer hardware companies
Networking hardware companies
Networking companies of the United States
Telecommunications equipment vendors
Computer companies of the United States
Software companies of the United States
Companies listed on the Nasdaq
2009 initial public offerings
Software companies established in 2000
American companies established in 2000