Fortinet, Inc. lineage
Built its own firewall and the silicon to make it fast, then bought the rest of the Security Fabric one adjacent product at a time.
What Fortinet, Inc. is made of, and who made it. Every acquisition below is verified against primary sources, with the product line it turned into where that connection is documented rather than inferred.
Founded 2000 in Sunnyvale, California as Fortinet by Ken Xie and Michael Xie.
FortiGate, and the decision to put the inspection work in custom silicon rather than general-purpose CPUs. The FortiASIC is the reason a small appliance could do content inspection at line rate when competitors needed a much larger box, and it is the architectural bet the whole company was built on. FortiOS grew around it as the single operating system the rest of the portfolio would eventually be measured against.
The name has not changed. Ken Xie had already founded and sold one firewall company - NetScreen, which Juniper acquired in 2004 - before starting this one.
Acquisitions
15 · 4 disclosed, as of July 2026- Coyote Point Systemsundisclosed
Application delivery controllers and server load balancing.
Became: FortiADC, and the beginning of a portfolio that reached beyond the firewall.
- Meru Networks$44M
A publicly traded enterprise Wi-Fi company with a distinctive single-channel architecture.
Became: The enterprise wireless line that became FortiWLC alongside the existing FortiAP. Reported as Fortinet's largest acquisition by disclosed price.
Closed 8 July 2015.
- AccelOps$28M
Security information and event management, plus IT monitoring and analytics.
Became: FortiSIEM. The product a great many NSE candidates meet as if it were built in-house.
- Bradford Networksundisclosed
Network access control and IoT device visibility.
Became: FortiNAC.
- ZoneFoxundisclosed
Insider-threat analytics from Edinburgh, watching user activity for data exfiltration.
Became: Behavioural analytics inside the fabric.
- enSiloundisclosed
Endpoint detection and response, with automated post-breach containment.
Became: FortiEDR, and later the basis of the extended detection story.
- CyberSponseundisclosed
Security orchestration, automation and response - playbooks for the SOC.
Became: FortiSOAR.
- OPAQ Networksundisclosed
A cloud-delivered zero-trust network access and SASE platform.
Became: The cloud half of the SASE offering, well before SASE was a checkbox on every RFP.
- Panoptaundisclosed
SaaS infrastructure monitoring and automated remediation across servers, containers, applications and cloud.
Became: FortiMonitor.
Announced 9 December 2020.
- ShieldX Networksundisclosed
Cloud-native micro-segmentation and east-west inspection.
Became: Cloud workload protection within the fabric.
- Sken.aiundisclosed
Continuous application security testing in the development pipeline.
Became: The shift-left strand of the application security story.
- Laceworkundisclosed (analyst estimate $200-230M)
Cloud-native application protection - workload security and cloud posture.
Became: The cloud security portfolio. Worth stating plainly: Lacework had raised more than $1.3B in venture capital, so at the estimated price its investors are unlikely to have seen a return. Forrester characterised it as a fire sale.
Terms were not disclosed. The $200-230M figure is Forrester's estimate and is presented as an estimate rather than a reported price.
- Next DLPundisclosed
Cloud-based data loss prevention.
Became: The DLP capability across the fabric.
- Perception Point~$100M (reported)
Email and collaboration security - the channel most attacks still arrive through.
Became: Email and workspace protection.
- Everest Networks and the remaining Linksys stakeundisclosed
High-density venue Wi-Fi from Everest, and full ownership of Linksys after holding a partial stake.
Became: Wireless for stadiums and large venues, plus a consumer and small-business brand - a return to the wireless market Meru opened a decade earlier.