Palo Alto Networks or Fortinet: which stock to buy?
2026-07-10 · By Lubin Danilo, founder of Lubin Investment
Analyze a stock on Lubin Investment
Palo Alto Networks and Fortinet are both excellent cybersecurity companies in my filter, but with opposite strategies: single platform consolidation for one, cost discipline and proprietary hardware for the other. Both trade well above their sector, Fortinet somewhat cheaper than Palo Alto Networks. Here is my detailed comparison.
Two different ways to dominate cybersecurity
Palo Alto Networks and Fortinet both sell enterprise network protection, but they play different games. Palo Alto bets on consolidation: convincing each customer to replace a dozen different security tools with one platform, its own. It just bought CyberArk to add identity security to its offering, and is building XSIAM, an AI driven security operations center that automates threat detection. Fortinet plays the opposite card: chips designed in house, rather than bought from third parties, let it sell firewall appliances cheaper than rivals while keeping healthy margins, a formula that made it the leader in the small business and branch office market.
Quality: two excellent files, two different scales
My filter scores Fortinet 24 out of 25, a score that already includes qualitative criteria (moat, management, competitive position) since that data is available for this file. For Palo Alto Networks, only the base financial layer is quantified so far, and the stock scores 9 out of 10 there. The two scales are not directly comparable, but the raw numbers are: Fortinet posts a 30.2% free cash flow margin and a 73.6% return on invested capital, one of the highest levels I have come across. Palo Alto shows a 20% cash margin and a 17.1% return on capital, solid but clearly behind.
Where does each one show a weak spot?
At Palo Alto, share count rises slightly each year, 3.3%, a sign of moderate dilution from stock based pay, and its cash collection cycle is stretching out, worth watching without being alarming. At Fortinet, the one measured weak spot is similar: a 110 day cash collection cycle that is lengthening over time, a sign that customers or inventory take longer to turn into cash than before.
The price: two expensive stocks, to different degrees
Both companies sit in the same software sector in my data, where the median valuation runs around 27 times free cash flow. Palo Alto Networks trades at 114.1 times its own, more than 4 times the sector median. Fortinet trades at 54.4 times, roughly twice the median: expensive, but clearly less than Palo Alto.
| Metric | Palo Alto Networks (PANW) | Fortinet (FTNT) |
|---|---|---|
| Valuation (P/FCF) | 114.1x | 54.4x |
| Free cash flow margin | 20.0% | 30.2% |
| Return on invested capital | 17.1% | 73.6% |
| 5 year sales growth | 19.1%/yr | 18.5%/yr |
| Sector median (P/FCF) | 26.96x | 26.96x |
For both files, my model computes a reasonable buy price well below the current level: around 65.62 dollars for Palo Alto, versus 325.91 today, and 109.14 dollars for Fortinet, versus 157.51. Both stocks trade well above what I would consider a cautious entry point, Palo Alto more so than Fortinet.
AI changes the game, for both
Cybersecurity is going through a shift: attackers already use generative AI to create malware that changes shape on every run, harder to catch with classic methods. Both companies respond with automation: XSIAM at Palo Alto, FortiAI at Fortinet. Palo Alto holds a recognized lead in cloud security and AI driven security operations. Fortinet remains unbeatable on the price to performance of physical appliances and branch networks. This is not a fight where one crushes the other, they do not chase quite the same customer.
How I decide between the two
If I had to choose today, I would look first at the valuation gap: Fortinet costs half as much as Palo Alto relative to the cash it generates, for a clearly higher return on capital. That does not make Palo Alto a bad choice, its single platform strategy gives it a different growth potential, but its current price leaves much less room for error if growth disappoints. In both cases the quality of the business is not in question, it is the price paid today that will decide the future return. You can check <a href="/analyse/PANW">the full page on Palo Alto Networks</a> and <a href="/analyse/FTNT">the one on Fortinet</a>, both built with <a href="/blog/note-10-sur-10-criteres-qualite-action">my 10 quality criteria</a>.
- Palo Alto Networks bets on single platform consolidation (identity, cloud, AI); Fortinet bets on cost discipline and proprietary chips.
- Fortinet delivers a 73.6% return on invested capital, versus 17.1% for Palo Alto Networks, a clear edge for Fortinet.
- Both stocks trade well above their sector median (27 times free cash flow): Palo Alto at 114.1x, Fortinet at 54.4x.
- AI changes the rules for both: harder to detect malware, met with automation at both companies.
- Fortinet leaves relatively more room for error at the current price; Palo Alto Networks leaves almost none.
FAQ
What is the difference between Palo Alto Networks and Fortinet?
Palo Alto sells an all in one security platform for large enterprises (identity, cloud, AI detection). Fortinet sells competitively priced network security appliances thanks to its own chips, aimed more at small businesses and branch networks.
Why is Palo Alto Networks more expensive than Fortinet?
The market pays a premium for Palo Alto's single platform strategy and cross selling potential. Fortinet, more cost disciplined, trades cheaper while posting a higher return on capital.
Is AI a threat or an opportunity for these two companies?
Both: it makes attacks more sophisticated, but it also enables automated detection and response, which both companies are actively building, XSIAM and FortiAI.
Which one should you buy?
It depends on your tolerance for the price paid: Fortinet leaves more room for error at the current price. This is not investment advice, do your own research before deciding.
Analyze a stock on Lubin Investment
About the author
Written by Lubin Danilo, founder of Lubin Investment. A self-taught individual investor, I find fundamental analysis fascinating, and it has delivered excellent results. For three years now, my performance has beaten the S&P 500. But analyzing every stock took too much time: sites with incomplete data, calculation methods and criteria never aligned with mine. And spotting the best stocks was just as time-consuming, even with my own well-defined checklist. So I put my software development background to work to build this software, base my investment strategy on its results, and share it with people who share the same passion as me. It judges a company's quality and its price separately, using criteria drawn from the financial literature (Warren Buffett, Michael Mauboussin, Aswath Damodaran).