10-K: F5 Reports Strong FY25 Growth, Navigates Cyber Incident

F5, Inc. reported significant revenue growth in fiscal year 2025, driven by increased product and service sales, despite facing a sophisticated cyber incident and ongoing macroeconomic uncertainties.

Summary

• Total net revenues increased 9.6% to $3.088 billion in fiscal year 2025 from $2.816 billion in fiscal year 2024.
• Product revenues increased 18.5% to $1.509 billion, driven by systems and software growth.
• Service revenues increased 2.3% to $1.579 billion, primarily from maintenance contract purchases and renewals.
• Net income rose to $692.38 million in fiscal year 2025 from $566.78 million in fiscal year 2024.
• Diluted earnings per share (EPS) increased to $11.80 in fiscal year 2025 from $9.55 in fiscal year 2024.
• The company completed the acquisition of CalypsoAI Corp. for $145.2 million to enhance AI security offerings.
• A significant cyber incident was disclosed on October 15, 2025, involving exfiltration of BIG-IP source code and undisclosed vulnerabilities, with anticipated near-term sales cycle disruption in fiscal year 2026.
• F5 authorized an additional $1.0 billion for its common stock share repurchase program, repurchasing 1,879,403 shares for $500.037 million in fiscal year 2025.
• Restructuring plans in fiscal year 2025 resulted in charges of $25.484 million related to workforce reductions.

Sentiment

Score: 7

Explanation: F5 demonstrated strong financial performance in fiscal year 2025 with significant revenue and profit growth, improved gross margins, and robust operating cash flow. Strategic acquisitions and AI integration are positive. However, the recent cyber incident and its anticipated impact on FY26 sales cycles and operating margins, along with increased restructuring charges, introduce notable uncertainty and risk.

Positives

• Total net revenues increased 9.6% year-over-year to $3.088 billion.
• Product revenues grew 18.5% to $1.509 billion, with systems revenue up 31.3% and software revenue up 9.2%.
• Net income increased significantly from $566.78 million in fiscal year 2024 to $692.38 million in fiscal year 2025.
• Diluted EPS increased from $9.55 in fiscal year 2024 to $11.80 in fiscal year 2025.
• Gross margin improved to 81.4% in fiscal year 2025 from 80.2% in fiscal year 2024.
• Cash provided by operating activities increased to $949.7 million in fiscal year 2025, up from $792.4 million in fiscal year 2024.
• Successful acquisition of CalypsoAI Corp. for $145.2 million to enhance AI security capabilities.
• An additional $1.0 billion was authorized for the share repurchase program, demonstrating commitment to shareholder returns.
• High employee satisfaction and belonging rates were reported in March 2025: 85% proud to work for F5, 90% trust manager, 91% commitment to ethical business, and 80% sense of belonging.
• Progress towards climate targets was reported with a 16% year-over-year reduction in Scope 1 and 2 emissions and a 10% year-over-year reduction in Scope 3 emissions in fiscal year 2024.

Negatives

• SaaS and managed services revenue decreased from $193.2 million in fiscal year 2024 to $175.6 million in fiscal year 2025.
• Product gross margin decreased to 22.4% in fiscal year 2025 from 26.4% in fiscal year 2024.
• Restructuring charges increased to $25.484 million in fiscal year 2025 from $8.655 million in fiscal year 2024.
• A Cyber Incident was disclosed on October 15, 2025, involving exfiltration of BIG-IP source code and undisclosed vulnerabilities, with anticipated near-term sales cycle disruption and operating margin impact in fiscal year 2026.
• The $350.0 million Revolving Credit Facility expired on January 31, 2025, and was not renewed.

Risks

• Security vulnerabilities or control failures in IT infrastructure or multicloud application delivery and security products and services, as well as unforeseen product errors, could have a material adverse impact.
• The Cyber Incident has had and may continue to have an adverse effect on business, reputation, customer, employee and partner relations, results of operations, financial condition, and cash flows.
• Dependence on various information technology systems, and failures of or interruptions to those systems, could harm business.
• Success depends on key personnel and the ability to hire, retain, and motivate qualified executives, sales and marketing, operations, product development, and professional services personnel.
• Cloud-based and SaaS computing trends present competitive and execution risks.
• Success depends upon the ability to effectively plan and manage resources and restructure the business.
• Business may be harmed if contract manufacturers are not able to provide adequate supplies of products or if a single source of hardware assembly is lost or impaired.
• Business could suffer if there are any interruptions or delays in the supply of hardware components from third-party sources.
• Future operating results are difficult to predict due to an unpredictable sales cycle.
• May not be able to sustain or develop new distribution relationships, and a reduction or delay in sales to significant distribution partners could hurt business.
• Reliance on fulfillment at the end of the quarter could cause revenue for the applicable period to fall below expected levels.
• Operating results are exposed to risks associated with international commerce, including geopolitical, trade, economic, and diplomatic relations.
• The average selling price of products may decrease and costs may increase, negatively impacting revenues and profits.
• Acquisitions present many risks, and the financial and strategic goals contemplated at the time of the transaction may not be realized.
• Success depends on timely development of new software and systems products and features, market acceptance of new offerings, and proper management of product life cycles.
• Success depends on sales and continued innovation of application delivery and security product lines.
• Issues related to the development and use of artificial intelligence (AI) could give rise to legal and/or regulatory action, damage reputation, or otherwise materially harm business.
• Business could be adversely impacted by conditions affecting the markets in which F5 competes, such as macroeconomic downturns or uncertainties.
• Industry consolidation may result in increased competition.
• May not be able to compete effectively in the application delivery and security market.
• Misuse of products could harm reputation.
• Failure to adequately protect personal information could have a material adverse effect on business.
• A portion of revenue is generated by sales to government entities, which are subject to a number of challenges and risks.
• F5 faces litigation risks, including intellectual property and securities litigation, and potential litigation related to the Cyber Incident.
• May not be able to adequately protect intellectual property, and products may infringe on the intellectual property rights of third parties.
• Subject to governmental export and import controls that could subject F5 to liability or impair the ability to compete in international markets.
• Changes in governmental regulations could negatively affect revenues.
• May have exposure to greater than anticipated tax liabilities, including from the Pillar Two framework.
• Exposed to fluctuations in currency exchange rates, which could negatively affect financial condition and results of operations.
• Changes in financial accounting standards may cause adverse unexpected revenue fluctuations and affect reported results of operations.
• If unable to maintain effective internal control over financial reporting, the accuracy and timeliness of financial reporting may be adversely affected.
• Quarterly and annual operating results may fluctuate in future periods, which may cause stock price to fluctuate.
• Anti-takeover provisions could make it more difficult for a third party to acquire F5.
• Stock price could be volatile, particularly during times of economic uncertainty and volatility in domestic and international stock markets.
• If securities or industry analysts publish inaccurate or unfavorable research or discontinue publishing research, the price and trading volume of securities could decline.
• Macroeconomic downturns or uncertainties may harm industry, business, and results of operations.
• Risks associated with having operations and employees located in Israel due to political, economic, and military conditions.
• Business is subject to the risks of earthquakes, fire, power outages, floods, and other catastrophic events, and to interruption by man-made problems such as terrorism.
• Climate change and associated regulation may have an impact on business.

Future Outlook

F5 anticipates near-term disruption to sales cycles in fiscal year 2026, with demand impacts more pronounced in the early part of the year and normalizing in the second half, due to the recently disclosed Cyber Incident. A near-term impact on operating margin is also expected within fiscal year 2026, along with continued professional services and other expenses related to incident response. The company believes its existing cash, cash equivalents, and investment balances, combined with anticipated cash flows from operations, will be sufficient to meet liquidity needs for the next twelve months. Future capital requirements will depend on revenue growth, expansion activities, new product introductions, market acceptance, the share repurchase program, acquisitions, and macroeconomic conditions. Stock-based compensation expenses are expected to increase with additional equity-based awards. The Pillar Two framework for minimum tax, effective for fiscal year 2025, is not expected to have a material impact on future consolidated financial statements.

Management Comments

• Our management team monitors and analyzes a number of key performance indicators in order to manage our business and evaluate our financial and operating performance on a consolidated basis.
• We believe customer acceptance rates of our new products, feature enhancements and consumption models are indicators of future trends.
• We believe the primary driver of cash flows will continue to be net income from operations.
• We will continue to evaluate possible acquisitions of, or investments in businesses, products, or technologies that we believe are strategic, which may require the use of cash.
• To date, we believe our containment actions have been successful, and since the initiation of these efforts, we have not observed any evidence of new unauthorized activity (regarding the Cyber Incident).
• To date, we are not aware of any undisclosed critical or remote code vulnerabilities, and we are not aware of active exploitation of any undisclosed vulnerabilities within our products (regarding the Cyber Incident).
• Further, to date, we have no evidence of modification to our software supply chain, including our source code and our build and release pipelines. This assessment has been validated through independent reviews by leading cybersecurity research firms (regarding the Cyber Incident).
• We have, and will continue to prioritize steps to bolster our security posture in implementing further measures to strengthen our security environment and protect our customers.
• Management believes that the Company has meritorious defenses to the allegations made in its pending cases and intends to vigorously defend these lawsuits (regarding legal proceedings).

Industry Context

F5 operates in a rapidly evolving and highly competitive market characterized by continuous technological change, evolving industry standards, and the consolidation of network and application functions. The industry is seeing a significant shift towards hybrid multicloud IT environments, driving demand for application delivery and security solutions across on-premises, cloud, and edge locations. F5 is actively leveraging AI to enhance its offerings, addressing security and performance challenges for AI model training, inference, and AI-driven workloads. Competition is intensifying from both established players like Citrix, Broadcom, Akamai, Cloudflare, Fortinet, and Palo Alto, as well as new entrants, including large cloud providers such as AWS and Google Cloud Platform. There is a growing customer preference for a unified platform approach, like F5's Application Delivery and Security Platform (ADSP), to simplify hybrid multicloud complexity, moving away from fragmented point solutions. Macroeconomic conditions, including inflation, interest rates, and geopolitical events, continue to influence customer spending and demand for IT solutions globally.

Comparison to Industry Standards

• F5's BIG-IP offerings compete against Citrix and Broadcom in application delivery.
• F5's NGINX offerings, which optimize Kubernetes traffic management and load balancing cloud-native applications, compete against Amazon Web Services (AWS), Google Cloud Platform, Envoy, and HAProxy.
• In application security, F5 competes with vendors offering web application firewall, bot detection and mitigation, API protection, and DDoS mitigation, including Akamai, Cisco, Cloudflare, Fortinet, Juniper Networks, Palo Alto, Radware, and Thales (Imperva).
• F5 Distributed Cloud Services, for SaaS-delivered application and API security and multicloud networking, competes with traditional edge players like Akamai, Cloudflare, and Fastly, as well as networking vendors such as Broadcom and Cisco, pure-play vendors like Aviatrix, and public cloud providers.
• F5 positions itself as the only provider capable of supporting customers' modern and legacy application delivery and security needs across any environment (on-premises, co-located, cloud, or edge) with its comprehensive portfolio.

Management Changes

Corporate Governance

Legal Proceedings

• Lynwood Investment CY Limited v. F5 Networks et al.: A lawsuit filed on June 8, 2020, alleging intellectual property infringement related to NGINX software. The District Court initially dismissed the case, but the Ninth Circuit Court of Appeals partially affirmed the dismissal and remanded a portion of the copyright claim on November 7, 2024. F5 intends to vigorously defend the litigation.
• Cyber Incident: Potential claims from customers and third parties, and inquiries from governmental authorities, are being received in connection with the Cyber Incident disclosed on October 15, 2025. F5 is cooperating and providing information.
• General Litigation: Subject to various legal proceedings, claims, investigations, and litigation arising in the ordinary course of business, including intellectual property litigation. Management believes it has meritorious defenses and intends to vigorously defend these lawsuits.

Stakeholder Impact

• Shareholders: Benefit from increased net income, EPS, and the ongoing share repurchase program. Face potential negative impacts from stock price volatility, macroeconomic downturns, and the financial implications of the Cyber Incident.
• Employees: Benefit from competitive compensation, growth and development opportunities, diversity and inclusion initiatives, and wellbeing programs. May be negatively impacted by restructuring plans involving workforce reductions and potential attrition.
• Customers: Benefit from enhanced application delivery and security solutions, including AI integration and multicloud support. Face potential negative impacts from security vulnerabilities, product errors, and the Cyber Incident (e.g., trust, service disruption).
• Partners (Distributors, Resellers): Benefit from F5's product portfolio and sales support. May be negatively impacted if F5 cannot sustain distribution relationships or if sales to significant partners decline.
• Creditors: Strong financial health and cash flows indicate low credit risk. The expiration of the Revolving Credit Facility is noted, but there were no outstanding borrowings at the time of expiration.

Next Steps

• Finalize the allocation of the purchase price for the CalypsoAI acquisition within one year from the acquisition date.
• Continue to evaluate possible acquisitions of, or investments in businesses, products, or technologies.
• Continue to monitor for additional guidance regarding the Pillar Two framework.
• Continue to prioritize steps to bolster security posture and implement further measures to strengthen the security environment and protect customers following the Cyber Incident.
• Deliver reliable software release updates to address all undisclosed high vulnerabilities in BIG-IP source code.
• Continue vigorously defending the Lynwood Investment CY Limited v. F5 Networks et al. litigation.
• Continue expanding into international markets.
• Continue to innovate and improve products and develop new products.
• Continue to invest in expanding SaaS-based F5 Distributed Cloud Services.
• Continue to improve customer awareness and understanding of F5's portfolio.
• Enhance digital customer experiences.
• Pursue partnerships with global leaders in AI.
• Monitor and analyze key performance indicators, sales mix, and revenue concentration by geographic region.
• Manage and forecast future operating expense trends based on headcount and hiring plans.
• Monitor and mitigate credit risks of customers.
• Evaluate the impact of new accounting standards (ASU 2023-09, ASU 2024-03, ASU 2025-06) on disclosures and financial statements.

Key Dates

Recommendation

F5 demonstrated strong financial performance in fiscal year 2025 with significant revenue and profit growth, improved gross margins, and robust operating cash flow, indicating solid execution in its core business and strategic initiatives like AI integration and multicloud solutions. The increased share repurchase authorization also signals confidence and commitment to shareholder returns. However, the recent disclosure of a sophisticated cyber incident, which involved the exfiltration of source code and undisclosed vulnerabilities, introduces considerable uncertainty and risk. The anticipated near-term disruption to sales cycles and potential impact on operating margins in fiscal year 2026, coupled with ongoing litigation, warrant a cautious approach. While the underlying business appears robust, these new risks suggest a 'hold' position until the full scope and financial implications of the cyber incident become clearer and the company demonstrates effective mitigation.

Keywords

F5, application delivery, security, multicloud, SaaS, AI, NGINX, BIG-IP, Distributed Cloud Services, cybersecurity, 10-K, financial results, software, hardware, enterprise, API security, corporate governance, risk management