F5 2025-26: Cybersecurity Incident Reset, FY26 Revenue 0-4%, EPS $3.35-$3.85 Q1
FY25 (Sep year-end) revenue $3.09B (+10%); op income $766M (+16%); NI $692M (+22%); EPS $11.80 (+24%). Q4 revenue $810M (+8%). Q4 product revenue +16% YoY ($414M); Systems revenue $186M (+42%). Q4 software $229M (perpetual license +25% / subscription -3%). Q4 services $396M (+2%). FY software $803M (+9%); subscriptions 85% of FY software. FY security revenue $1.2B (+6%, 39% of total); standalone security $463M (31% of product). Q4 recurring revenue 72%. CalypsoAI acquired (AI security). Cybersecurity incident impact dominates near-term outlook. FY26 guide revenue 0-4% non-GAAP; gross margin 83-83.5%; non-GAAP op margin 33.5-34.5%. Q1 FY26 revenue $730-$780M / non-GAAP EPS $3.35-$3.85.
Key takeaways
- Cybersecurity incident creates near-term FY26 reset. This is the dominant FY26 thesis variable. F5 disclosed cybersecurity incident on Q4 call; mgmt explicit on impact: "near-term incident impact" creates customer delays, project deferrals, resource allocation to incident response. Hence FY26 revenue guide just 0-4% — sharp deceleration from FY25 +10% growth.
- Q4 record revenue $810M (+8%) — positive operational backdrop pre-incident. Q4 product revenue +16% YoY ($414M); Systems revenue +42% to $186M; software +25% perpetual license. Strong commercial momentum entering the cybersecurity incident.
- CalypsoAI acquired (AI security). Strategic acquisition expands AI security capabilities. Material positioning in AI-powered cybersecurity at right time. Supports F5's AI use cases (data delivery + runtime security + factory load balancing).
- Recurring revenue 72% Q4; subscription 85% of FY software. Strong recurring revenue mix. Subscription scale + multi-year customer contracts provide cushion against near-term incident disruption.
- FY26 gross margin 83-83.5% / non-GAAP op margin 33.5-34.5%. Margins remain industry-leading despite incident response costs. The structural model + operational leverage + recurring revenue mix supports profitability through near-term volatility.
Business
F5, Inc. is a US application + security technology company providing application services + cloud security + multi-cloud management. Two reportable segments + AI security expansion via CalypsoAI:
- Product Revenue (~50% of revenue):
- Systems (~22% of total revenue) — Hardware appliances + virtual editions for application delivery + load balancing.
- Software (~28% of total revenue) — Perpetual licenses + subscription-based software. F5 BIG-IP family + cloud + edge solutions.
- Service Revenue (~50% of revenue): Maintenance + support + professional services. Highly recurring.
Strategic moves FY25:
- Cybersecurity incident disclosed Q4 (specific details + impact ongoing)
- Michael Montoya joined as CTO (incident response priority)
- CalypsoAI acquired (AI security)
- AI use cases: data delivery + runtime security + factory load balancing
- $502M FY25 buyback (basically flat vs $501M FY24)
- 72% recurring revenue Q4
- Customer wins: APAC bank + North American investment manager + energy/gas company
- Hybrid cloud adoption + data center reinvestment driving demand
FY25 financial performance (Sep year-end)
| Metric (FY) | 2022 | 2023 | 2024 | 2025 |
|---|---|---|---|---|
| Revenue ($B) | 2.70 | 2.81 | 2.82 | 3.09 |
| Revenue YoY | n/a | +4% | 0% | +10% |
| Op income ($M) | 404 | 473 | 659 | 766 |
| Op margin | 15.0% | 16.8% | 23.4% | 24.8% |
| Net income ($M) | 322 | 395 | 567 | 692 |
| Diluted EPS ($) | 5.27 | 6.55 | 9.55 | 11.80 |
| FCF ($M) | 409 | 599 | 762 | 906 |
| Capex ($M) | -34 | -54 | -30 | -43 |
| Total debt ($M) | 937 | 521 | 465 | 493 |
| Buyback ($M) | -500 | -350 | -501 | -502 |
The earnings progression: revenue 4-yr CAGR ~5%; op margin 15.0% → 24.8% (+980bp expansion); EPS $5.27 → $11.80 (+124% over 3 years). FCF $906M FY25 (+19% YoY) — strong cash generation.
Total debt $493M (basically flat). Buyback $-502M FY25 — consistent ~$500M annual return.
Capital allocation
- Capex $-43M FY25 (+45% YoY). Light-asset model.
- Dividends $0 (no dividend).
- Buybacks $-502M FY25. Consistent ~$500M annual.
- Debt $493M (flat).
- FCF $906M (+19%).
FY26 outlook (per Q4 FY25 call, 2025-10-27)
| FY26 framework | Detail |
|---|---|
| Revenue growth | 0% to 4% (non-GAAP) due to near-term incident impact |
| Gross margin | 83% to 83.5% |
| Non-GAAP operating margin | 33.5% to 34.5% |
| Q1 FY26 revenue | $730M to $780M |
| Q1 FY26 non-GAAP EPS | $3.35 to $3.85 |
The FY26 revenue guide just 0-4% reflects: incident-related customer delays, project deferrals, resource allocation to incident response, integration / restoration time. Underlying business momentum (Q4 +8%) suggests recovery once incident response completes.
Key risks
Near-term incident impact. Q4 mgmt explicit risk. Customer delays + project deferrals + resource allocation to incident response. Multi-quarter incident response.
Reputational + commercial impact. Cybersecurity incident at security software company creates particular reputational risk + commercial dynamics. Customer trust + renewal rates matter.
Customer trust + renewal rates. Subscription business model dependent on renewal — if trust compromised, churn risk increases.
Software mix dynamics. Perpetual license +25% Q4 vs subscription -3% — mix shift opposite of expected (typically subscription growing). Mix dynamics affect economics.
Competitive landscape. Cisco, Palo Alto, Fortinet, Cloudflare, Akamai compete with F5. Incident creates competitive opportunity for rivals.
CalypsoAI integration. AI security acquisition requires multi-year integration + revenue capture.
Macro / IT spending. Enterprise IT spending sensitivity affects demand.
Hybrid cloud transition. Customer cloud migration affects on-prem appliance demand.
Talent retention. Cybersecurity + AI talent retention competitive.
FX volatility. Multi-currency operations.
Geographic concentration. APAC + Americas + EMEA mix.
Subscription transition. Multi-year transition continues; subscription -3% Q4 reflects transition dynamics.
Bottom line
F5 FY25 (Sep year-end) is the structural compounding interrupted by cybersecurity incident: revenue +10% to $3.09B; op income +16%; NI +22%; EPS +24% to $11.80; FCF $906M (+19%). Q4 was the strong moment — record revenue $810M (+8%); product revenue +16%; Systems +42%; software perpetual license +25%; recurring revenue 72%. CalypsoAI acquired (AI security).
Cybersecurity incident disclosed on Q4 call dominates near-term FY26 outlook. Mgmt explicit on customer delays + project deferrals + resource allocation creating drag. FY26 revenue guide just 0-4% — sharp deceleration from FY25 +10%. Underlying business momentum + operational excellence + 72% recurring revenue mix provide cushion.
The risks are real and dominant — near-term incident impact, reputational + commercial impact, customer trust + renewal rates, software mix dynamics, competitive landscape (incident creates competitive opportunity), CalypsoAI integration, macro / IT spending, hybrid cloud transition, talent retention, FX volatility, geographic concentration, subscription transition.
But the structural thesis (application + security technology + recurring revenue 72% + 83% gross margin + AI security via CalypsoAI + multi-year operational excellence + capital return) is intact and FY25 print confirms the underlying business strength pre-incident.
Quality cybersecurity + application services compounder mid-incident-recovery cycle. The FY26 0-4% revenue reset reflects near-term incident drag; underlying momentum (Q4 +8%, recurring 72%, gross margin 83%, op margin 24.8%) provides recovery foundation. Investors get exposure to application security + AI security + multi-cloud + structural margin economics, but with significant near-term cybersecurity-incident-recovery uncertainty. The conservative FY26 framework + Q1 starting point + customer trust dynamics provides multiple paths to outperformance once incident response completes.
Citations
- F5, Inc. FY25 (Sep '25) Form 10-K (filed November 2025, SEC EDGAR).
- FFIV Q4 FY25 earnings call, 2025-10-27 — Q4 revenue $810M (+8%); product revenue $414M (+16%); Systems $186M (+42%); software $229M (perpetual +25% / subscription -3%); services $396M (+2%); FY software $803M (+9%, subscriptions 85% of FY software); FY security $1.2B (+6%, 39% of total); standalone security $463M; Q4 recurring 72%; CalypsoAI acquired; cybersecurity incident disclosed (impact: customer delays + project deferrals + resource allocation); Michael Montoya new CTO; FY26 revenue 0-4% non-GAAP; GM 83-83.5%; non-GAAP op margin 33.5-34.5%; Q1 revenue $730M-$780M; Q1 non-GAAP EPS $3.35-$3.85.
- FFIV Q3 FY25 / Q2 FY25 / Q1 FY25 earnings calls — supporting product mix + recurring revenue + AI strategy + customer wins (assumed in line with Q4 trajectory).
- Internal financial_statements view (consolidated annual + cash flow + capital structure).