F5 (FFIV) Q1 2026 earnings review
Breach Fears Were Overblown; Hardware Refresh Powers Massive Beat
F5 obliterated its own conservative Q1 guidance, proving that the August 2025 security incident caused minimal customer churn. Revenue of $822M (+7% YoY) crushed the $730-$780M guidance range. The story is a massive divergence: Systems (hardware) revenue surged 37% as customers refreshed legacy gear, while Software revenue contracted 8% due to cyclical renewal headwinds. Management signaled the 'all clear' by raising FY26 revenue growth guidance to 5-6% (up from 0-4%).
🐂 Bull Case
Fears of a post-breach exodus were unfounded. Revenue grew 7% YoY, and management raised full-year guidance immediately, suggesting the 'near-term disruption' flagged in Q4 was far less severe than modeled.
Systems revenue grew 37% YoY, marking the sixth consecutive quarter of double-digit growth. The refresh of legacy VIPRION and iSeries assets is a durable tailwind that is offsetting software weakness.
🐻 Bear Case
Software revenue turned negative (-8% YoY) after growing 0.3% in Q4. While management cites renewal timing, this segment is the long-term growth engine, and its volatility remains a concern for valuation multiples.
Despite the raise, the FY26 revenue guide (5-6%) implies growth will moderate later in the year compared to the strong Q1 start (+7%), suggesting the hardware refresh burst may cool off.
⚖️ Verdict: 🟢🟢
Strong Buy. The market priced in a disaster scenario post-breach that simply didn't happen. F5 is capitalizing on a massive hardware refresh cycle while maintaining elite margins (38% Ops Margin). The software dip is cyclical, not structural.
Key Themes
Systems Revenue Explosion
Stable/Strong. Systems revenue grew 37% YoY to $218M, continuing the momentum from Q4's 42% growth. This is driven by a 'tech refresh' cycle where customers are replacing aging hardware (VIPRION/iSeries) to support AI and hybrid architectures. This segment has single-handedly saved the top line while software stalls.
Software Volatility
Reversing. Software revenue fell 8% YoY to $192M, a sharp reversal from +22% in the prior year period (25Q1). Management previously guided for lumpy renewals (3-year cycle), but the drop to negative territory highlights F5's dependence on hardware right now. A 'SaaS' valuation multiple cannot be justified with shrinking software sales.
Elite Profitability in a Hard-Ware Cycle
Accelerating. Despite a mix-shift toward hardware (typically lower margin than software), F5 expanded profitability. Non-GAAP Operating Margin hit 38.2%, up from 37.4% a year ago and 37.0% in Q4. This demonstrates exceptional OpEx discipline ($224M Sales & Marketing vs $206M YoY) even while navigating breach remediation.
Security Incident: The Dog That Didn't Bite
In Q4, management guided FY26 revenue to 0-4% growth specifically due to 'near-term disruption' from the August 2025 breach. Q1 results (7% growth) and the raised FY26 guide (5-6%) prove those fears were overly conservative. While 'Cyber incident costs' appeared in GAAP adjustments ($17.5M), they did not derail sales execution.
Shareholder Returns
F5 repurchased $301M of stock in Q1, a significant acceleration from $125M in the prior quarter (25Q4). This aggressive buyback activity during a period of stock price uncertainty (post-breach) signals strong management confidence in the intrinsic value.
Other KPIs
Stable. Grew 4% YoY. This recurring revenue stream remains a steady ballast for the company, largely unaffected by the volatility seen in Product segments.
Decelerating. Down from $203M in 25Q1 (-21% YoY). This drop contrasts with the Net Income growth, likely driven by timing of billings or specific working capital movements related to the breach remediation payments (referenced in non-GAAP adjustments).
Accelerating. Beat guidance of $3.34-$3.46 significantly. Up 16% YoY from $3.84. Driven by revenue upside, margin expansion, and a reduced share count (58.1M vs 59.0M).
Guidance
Accelerating vs prior guide. Raised from '0% to 4%'. This implies FY26 revenue of ~$3.25B. The raise confirms that the 'breach impact' is largely behind them.
Accelerating vs prior guide. Raised from '$14.50 to $15.50'. The midpoint ($15.85) implies virtually flat growth vs FY25 ($15.81), likely due to tax rate normalization or conservative margin assumptions for H2.
Stable/Slight Acceleration. Midpoint ($780M) implies +6.7% YoY growth (vs $731M in 25Q2). This is consistent with Q1's +7% performance.
Decelerating. Midpoint ($3.40) is roughly flat YoY vs 25Q2 ($3.42). This suggests margin compression in Q2, consistent with historical seasonality (payroll tax resets).
Key Questions
Software Visibility
Software revenue dropped 8% this quarter. While you've cited renewal cycles, what is the specific timeline for a return to positive growth? Is there any competitive loss buried in this number?
Cyber Incident Costs
You recorded $17.5M in cyber incident costs this quarter. Are these costs fully contained to Q1, or should we model a tail of remediation expenses throughout FY26?
Hardware Refresh Duration
Systems growth has been above 30% for two quarters. How much of the installed base has completed the refresh, and when do you anticipate this growth to normalize to historical levels?