Fortinet Federal Achieves CMMC Level 2 Certification
Rhea-AI Summary
Fortinet (NASDAQ: FTNT) announced that its subsidiary Fortinet Federal has achieved CMMC Level 2 certification following an assessment by an Authorized CMMC Third-Party Assessment Organization. The certification confirms implementation of 110 security requirements aligned with NIST SP 800-171 Revision 2 for protecting Controlled Unclassified Information in its assessed environment.
According to Fortinet, pursuing CMMC Level 2 supports its commitment to stronger cybersecurity across operations and the defense supply chain, and demonstrates its practical understanding of requirements facing Defense Industrial Base organizations. Fortinet Federal highlights that its cybersecurity portfolio supports nearly all 14 CMMC Level 2 domains, with FortiGate mapping to 83 of the 110 requirements.
Positive
- CMMC Level 2 certification achieved after assessment by an Authorized C3PAO
- 110 NIST SP 800-171 Rev. 2 requirements implemented for CUI protection
- FortiGate mapped to 83 of 110 CMMC Level 2 security requirements
Negative
- None.
Key Figures
Historical Context
| Date | Event | Sentiment | 24h Move | Catalyst |
|---|---|---|---|---|
| Aug 17 | AI acquisition | Positive | -2.6% | Completed Virtue AI acquisition to expand AI runtime protection capabilities |
| Jul 29 | 2Q26 earnings report | Positive | +0.7% | Reported higher revenue, earnings, cash flow, and raised full-year guidance |
| Jul 28 | Product expansion | Positive | -1.6% | Introduced FortiGate 1200G and FortiSASE Outpost for firewall-SASE convergence |
| Jul 21 | Strategic collaboration | Positive | -1.4% | Partnered with Intel on SP6 development and supply-chain resilience |
24h Move is the share-price change in the day after each event; other market factors may also have contributed.
Recent positive Fortinet announcements more often diverged from the stock's 24-hour price response than aligned with it.
Key Terms
cmmc regulatory
c3pao regulatory
nist sp 800-171 revision 2 technical
controlled unclassified information regulatory
AI-generated analysis. How Rhea-AI works. Not financial advice.
Certification validates the implementation of required cybersecurity safeguards within Fortinet Federal's assessed environment
RESTON, Va., Aug. 26, 2026 (GLOBE NEWSWIRE) -- Fortinet Federal, Inc., a wholly owned subsidiary of Fortinet, Inc., today announced that it has achieved Cybersecurity Maturity Model Certification (CMMC) Level 2 following an assessment by an Authorized CMMC Third-Party Assessment Organization (C3PAO).
The CMMC Level 2 certification validates Fortinet Federal's implementation of 110 security requirements aligned with NIST SP 800-171 Revision 2 for protecting Controlled Unclassified Information within its assessed environment.
Fortinet Federal pursued CMMC Level 2 certification as part of its broader commitment to strengthening cybersecurity across its operations and supply chain, while providing customers, government contractors, and partners with independent validation of its security practices. The experience also validates Fortinet Federal’s firsthand understanding of the requirements facing organizations across the Defense Industrial Base.
“CMMC reflects the responsibility every DoD Contractor has to protect sensitive defense information wherever it resides,” said Steve Hoffman, president, Fortinet Federal. “Achieving CMMC Level 2 demonstrates that Fortinet Federal applies the same rigorous security practices we help customers implement within our own organization. We remain focused on continuously improving our security program as threats and mission requirements evolve.”
Fortinet Federal Is CMMC Certified, and Built to Help You Get There, Too
Fortinet Federal’s cybersecurity portfolio supports security requirements across nearly all 14 CMMC Level 2 security domains. FortiGate Next-Generation Firewall maps to 83 of the 110 CMMC Level 2 security requirements, including requirements within the Risk Assessment, System and Communications Protection, and System and Information Integrity domains.
Through the Fortinet Security Fabric, Fortinet Federal helps defense organizations connect and automate security controls, improve visibility, and reduce tool fragmentation.
For more information about Fortinet Federal’s approach to supporting CMMC readiness, read the CMMC solution brief or visit fortinetfederal.com.
Additional Resources
- Read more about how Fortinet Federal secures government agencies.
- Visit fortinet.com/trust to learn more about Fortinet innovation, collaboration partners, product security processes, and enterprise-grade products.
- Learn more about Fortinet's commitment to product security and integrity, including its responsible product development and vulnerability disclosure approach and policies.
- Learn about Fortinet’s free cybersecurity training, which includes broad cyber awareness and product training. The Fortinet Training Institute also provides training and certification through the Network Security Expert (NSE) Certification, Academic Partner, and Education Outreach programs.
- Read how Fortinet customers are securing their organizations.
- Follow Fortinet on Facebook, Instagram, LinkedIn, and X. Subscribe to Fortinet on our blog or YouTube.
About Fortinet
Fortinet is a driving force in the evolution of cybersecurity and the convergence of networking and security. Our mission is to secure people, devices, and data everywhere, and today we deliver cybersecurity everywhere our customers need it with the largest integrated portfolio of over 50 enterprise-grade products. Well over half a million customers trust Fortinet's solutions, which are among the most deployed, most patented, and most validated in the industry. The Fortinet Training Institute, one of the largest and broadest training programs in the industry, is dedicated to making cybersecurity training and new career opportunities available to everyone. Collaboration with esteemed organizations from both the public and private sectors, including Computer Emergency Response Teams (CERTS), government entities, and academia, is a fundamental aspect of Fortinet’s commitment to enhance cyber resilience globally. FortiGuard Labs, Fortinet’s elite threat intelligence and research organization, develops and utilizes leading-edge machine learning and AI technologies to provide customers with timely and consistently top-rated protection and actionable threat intelligence. Learn more at https://www.fortinet.com, the Fortinet Blog, and FortiGuard Labs.
FTNT-O
Copyright © 2026 Fortinet, Inc. All rights reserved. The symbols ® and ™ denote respectively federally registered trademarks and common law trademarks of Fortinet, Inc., its subsidiaries and affiliates. Fortinet’s trademarks include, but are not limited to, the following: Fortinet, the Fortinet logo, FortiGate, FortiOS, FortiGuard, FortiCare, FortiAnalyzer, FortiManager, FortiASIC, FortiClient, FortiCloud, FortiCore, FortiMail, FortiSandbox, FortiADC, FortiAgent, FortiAI, FortiAIGate, FortiAIOps, FortiAntenna, FortiAP, FortiAPCam, FortiAppSec, FortiAuthenticator, FortiBranchSASE, FortiCall, FortiCam, FortiCamera, FortiCarrier, FortiCART, FortiCASB, FortiCentral, FortiConnect, FortiController, FortiConverter, FortiDAST, FortiDATA, FortiDB, FortiDevice, FortiDDoS, FortiDeceptor, FortiDeploy, FortiDevice, FortiDevSec, FortiDLP, FortiEdge, FortiEDR, FortiEndpoint, FortiExplorer, FortiExtender, FortiFirewall, FortiFlex, FortiFone, FortiGSLB, FortiGuest, FortiHSM, FortiHypervisor, FortiIdentity, FortiInsight, FortiIsolator, FortiLink, FortiMonitor, FortiNAC, FortiNDR, FortiPAM, FortiPhish, FortiPoint, FortiPoints, FortiPortal, FortiPresence, FortiProxy, FortiRecon, FortiRecorder, FortiSASE, FortiSAT, FortiSEC, FortiSIEM, FortiSMS, FortiSOAR, FortiSOC, FortiSRA, FortiSwitch, FortiTelemetry, FortiTester, FortiTIP, FortiToken, FortiTrust, FortiVoice, FortiWAN, FortiWeb, FortiWiFi, FortiWLC, FortiWLM, FortiXDR, Lacework FortiCNAPP, Linksys, the Linksys logo, Linksys Cognitive, Intelligent Mesh, Velop, Max-Stream, WRT and SECURITY FABRIC. Other trademarks belong to their respective owners. Fortinet has not independently verified statements or certifications herein attributed to third parties and Fortinet does not independently endorse such statements. Notwithstanding anything to the contrary herein, nothing herein constitutes a warranty, guarantee, contract, binding specification or other binding commitment by Fortinet or any indication of intent related to a binding commitment, and performance and other specification information herein may be unique to certain environments.
| Media Contact: | Investor Contact: | Analyst Contact: |
| Tiffany Curci Fortinet, Inc. 408-235-7700 pr@fortinet.com | Anthony Luscri Fortinet, Inc. 408-235-7700 investors@fortinet.com | Sarah Goodwin Fortinet, Inc. 408-235-7700 sgoodwin@fortinet.com |
