Finn
FFIV Cybersecurity · Hybrid cloud · Application security · AI infrastructure · Thesis updated August 11, 2026

F5 raises outlook as AI demand fuels systems growth

01 Running thesis

Two growth lines with an AI tailwind

F5 came into the second half of fiscal 2026 with momentum, and Q3 results proved that the hardware rebound is structural. Systems revenue grew 32 percent year over year to $240 million, while software revenue grew 7 percent to $223 million. This double-engine performance prompted management to raise full-year revenue expectations.

The bull case is cleaner than it has been in years. F5 is successfully monetizing three massive trends: hybrid multi-cloud adoption, security platform consolidation, and the artificial intelligence infrastructure boom. Systems growth is fueled by sovereign data center buildouts and intense AI data delivery requirements. At the same time, F5's push into AI runtime security is winning new software customers.

The bear case continues to weaken, but it has not vanished. Bears now point to fiscal 2027 gross margin risks. Dynamic memory and storage pricing could keep margins constrained near 80 to 82 percent. There is also a lingering question about what happens when the current multi-year hardware refresh cycle finally laps.

Finn's valuation view remains cautious, meaning strong execution might already be priced in. The watch items are straightforward: can software growth re-accelerate to double digits in fiscal 2027, and can F5 manage input costs to protect its profit margins?

Jul 2026Q3 FY2026 results showed a 32 percent jump in systems revenue and strong AI demand, prompting management to raise full-year revenue guidance to 9 to 10 percent.
May 2026Q2 FY2026 strengthened the thesis. Systems revenue grew 26.2 percent year over year, and software revenue grew 16.7 percent, easing the main concern from Q1.
Jan 2026Management raised fiscal 2026 revenue growth guidance to 5 to 6 percent. Strong systems demand and better software expectations shifted the debate toward how durable the rebound can be.
Jul 2025Q3 FY2025 was a beat-and-raise quarter. Systems growth reached 39 percent year over year, and software grew 16 percent, helped by hybrid cloud demand.
Apr 2025Q2 FY2025 added confidence that the systems refresh could last well into 2026. Software was flat, but management still expected stronger second-half renewal activity.
Jan 2025Q1 FY2025 showed broad growth, with software up 22 percent year over year and systems up 18 percent. That reduced the fear that hardware decline would drag down the whole company.
Oct 2024Q4 FY2024 showed software growth re-accelerating to 19 percent year over year. Management also guided for revenue acceleration in fiscal 2025.
02 Business model

Selling control over messy app networks

F5 makes money from Products and Global Services. Products include systems, which are hardware appliances, and software, which includes BIG-IP, NGINX, and Distributed Cloud offerings. Global Services is mostly support and maintenance tied to the installed base.

The business has moved away from being mainly a hardware company. Recurring revenue was 77 percent of total revenue in Q3 FY2024, helped by software subscriptions and maintenance contracts. That gives F5 more predictable revenue than a pure hardware refresh business.

The customer problem is complexity. A bank, retailer, or telecom may run apps in its own data center, in several clouds, and at the network edge. F5 tries to be the common control layer that delivers the app, secures it, and keeps policies consistent.

Where this breaks is competition and input costs. Cloud security vendors can attack pieces of F5's stack with simpler software tools. Higher memory prices can also pressure hardware margins, meaning F5 might sell more systems but make less profit on each box.

03 Product portfolio

The app delivery stack

Growth engine

BIG-IP

BIG-IP is F5's main platform for app delivery and security. It can run as hardware or software and handles traffic management, DNS, and web application firewall services.

Steady

NGINX

NGINX is software used for web serving, reverse proxying, caching, and load balancing. It matters for modern apps that use containers and microservices.

Growth engine

F5 Distributed Cloud Services

Distributed Cloud is F5's platform for web app and API protection. It includes web application firewall, bot defense, DDoS protection, and API security.

Option

F5 Application Delivery and Security Platform

ADSP unites BIG-IP, NGINX, and Distributed Cloud into one platform. Customers get one place for policy, visibility, and AI-driven insights across many environments.

Growth engine

AI Security and Data Delivery

Bolstered by the SurePath AI acquisition, this platform offers AI discovery, guardrails, and red teaming to protect artificial intelligence models at runtime.

04 Business segments

Services anchor the mix

Systems28%growing fast
Software26%modest
Global Services46%flat

Mix is from Q3 FY2026, the quarter ended June 30, 2026. Revenue was $240 million for systems, $223 million for software, and $402 million for Global Services.

05 Risk factors

What could still go wrong

Memory costs and supply limits

Medium impact · Medium odds

Management has flagged rising memory and storage component costs as a margin risk for fiscal 2027. This matters most for systems, where hardware delivery and gross margin can be pressured. The risk is whether F5 must absorb higher input costs.

We watchGross margin guidance, hardware backlog, and management comments on memory supply.

Hardware refresh hangover

High impact · Medium odds

Systems growth has been exceptionally strong due to a multi-year refresh cycle and sovereign AI buildouts. If these upgrade cycles finish and demand normalizes, hardware revenue could face a steep drop-off.

We watchQuarterly systems growth rates and management commentary on refresh cycle duration.

Cloud security competition

High impact · Medium odds

F5 competes with cloud-native tools and pure-play security vendors. Customers may pick cheaper point products for bot defense, API security, or web application firewall needs. If F5 cannot show that one platform lowers cost and complexity, pricing power could fade.

We watchSoftware growth, Distributed Cloud customer wins, and any signs of weaker renewal rates or discounting.

Accelerating AI threat landscape

Medium impact · Medium odds

Attackers are using AI to discover and exploit vulnerabilities at unprecedented speeds. This compresses the time organizations have to patch systems. If F5's defensive products fail to keep up with these automated threats, reputation and market share could suffer.

We watchCustomer security breach reports involving F5 infrastructure and adoption rates of F5's new AI runtime security tools.
06 Quick answers

In one breath

What does F5 actually do?

F5 helps companies deliver and secure apps. Its tools route app traffic, balance loads, protect websites and APIs, and help the same security rules work across data centers and clouds.

Why did F5 stock sentiment improve after Q3 FY2026?

Systems revenue grew an impressive 32 percent year over year. The company also raised its full-year growth outlook and showed rapid customer adoption for its AI security tools.

Is F5 an AI company?

F5 is not building foundational AI models. It benefits when companies build AI infrastructure because those workloads need secure, high-capacity app delivery. F5 also recently launched dedicated tools to secure AI traffic.

What is the main risk for F5 now?

The main internal risks are rising memory component costs that could hurt profit margins and the potential end of the current hardware upgrade cycle. External risks include intense competition in cloud security.

Get started with Finn today