Security Neutral 5

F5 Systems Revenue Jumps 32% on AI Security Demand

F5's integration with MuleSoft puts AI Guardrails directly into the Agent Fabric Omni Gateway, giving security teams centralized enforcement against prompt injection, data leakage, and toxic outputs. F5's Q3 FY26 product revenue rose 19% and systems revenue surged 32% to $240 million, signaling a security budget shift toward AI infrastructure.

· 4 min read ·

Beat this week

Last 7 days · Security

8 stories
5.6 avg impact
13% positive
25% negative
vs prior 7 days New New vs empty prior window

Impact not comparable yet. Counts are stories in our record, not a market forecast.

Open the change report

Coverage balance Negative coverage leads. Negative coverage exceeds positive coverage by 12 percentage points.

  • 13% positive
  • 63% neutral
  • 25% negative

This story sits in Security — the counts compare this beat's last 7 days with the previous 7 in our verified record, not a market forecast.

Figures are computed live from our source-verified story record (as of ) The volume change compares this window with the prior 7 days in the same record. — see our methodology for how impact and sentiment are derived.

Cybersecurity briefing

Key takeaways

5 impact
Neutralsentiment
4min read
  1. F5's integration with MuleSoft puts AI Guardrails directly into the Agent Fabric Omni Gateway, giving security teams centralized enforcement against prompt injection, data leakage, and toxic outputs.
  2. F5's Q3 FY26 product revenue rose 19% and systems revenue surged 32% to $240 million, signaling a security budget shift toward AI infrastructure.

In this briefing

Mentioned

Key Intelligence

Key Facts

  1. 1On September 2, 2026, F5 announced an integration with Salesforce's MuleSoft, federating F5 AI Guardrails into MuleSoft's Agent Fabric Omni Gateway for centralized AI policy enforcement.
  2. 2F5 reported Q3 FY26 revenue of $865 million, up 11% year over year, with product revenue up 19% and systems revenue up 32% to $240 million.
  3. 3F5's non-GAAP operating margin was 35.0%, non-GAAP net income was $272 million, and non-GAAP diluted EPS rose to $4.73 from $4.16.
  4. 4Salesforce reported record Q2 FY27 revenue of $11.3 billion, up 11% year over year, including $10.8 billion in subscription and support revenue.
  5. 5Salesforce's Agentforce annual recurring revenue neared $3.9 billion, and non-GAAP diluted EPS reached $5.90.
  6. 6Salesforce raised full-year FY27 revenue guidance to $46.1 billion to $46.4 billion and reported cRPO of $33.5 billion.

Who's Affected

F5
companyPositive
Salesforce
companyPositive
MuleSoft
companyPositive
Enterprise security teams
organizationPositive
AI Security Market Outlook

Analysis

Security teams scaling agentic AI face a governance gap: each new agent adds prompt injection, data exfiltration, and toxic output risk. F5's September 2 integration with MuleSoft's Agent Fabric Omni Gateway puts AI Guardrails directly in the path of enterprise agent traffic, and its 32% systems revenue growth shows buyers are spending on that problem.

The immediate development is the September 2, 2026 integration of F5 AI Guardrails into MuleSoft's Agent Fabric Omni Gateway. MuleSoft, a Salesforce company, is now able to offer F5's AI security policy enforcement directly inside the gateway that routes enterprise agentic AI traffic. This addresses a growing governance gap created as enterprises scale agentic AI beyond pilots and into production. Security and platform engineering teams gain centralized policy enforcement, proactive threat mitigation, and low-touch policy tuning against prompt injection, data leakage, and toxic model outputs without needing to re-architect existing infrastructure.

F5's non-GAAP operating margin reached 35.0%, while non-GAAP net income came in at $272 million, or $4.73 per diluted share, up from $4.16 a year earlier.

The financial picture behind the partnership reveals two enterprise software companies operating at very different scales. F5, Inc. reported Q3 FY26 revenue of $865 million, up 11% year over year. The growth story within that number is sharper: product revenue rose 19% year over year, and systems revenue surged 32% to $240 million. That systems acceleration suggests enterprise buyers are investing in hardware and software designed to secure and deliver AI-era application traffic. F5's non-GAAP operating margin reached 35.0%, while non-GAAP net income came in at $272 million, or $4.73 per diluted share, up from $4.16 a year earlier.

Salesforce operated at roughly thirteen times F5's quarterly revenue scale. In its record Q2 FY27, Salesforce generated $11.3 billion in revenue, up 11% year over year. Subscription and support revenue was $10.8 billion, and Agentforce annual recurring revenue neared $3.9 billion. Salesforce posted a non-GAAP operating margin of 34.1% and non-GAAP diluted earnings per share of $5.90. Management also raised full-year FY27 revenue guidance to a range of $46.1 billion to $46.4 billion, signaling confidence that agentic AI monetization and core cloud demand remain durable. Salesforce's current remaining performance obligation reached $33.5 billion, a substantial forward revenue base.

Both companies run near-identical, highly profitable non-GAAP operating margins of approximately 34% to 35%, but the growth math is not equal. An 11% year-over-year increase for Salesforce represents roughly $1.1 billion in incremental quarterly revenue, while the same percentage growth for F5 represents about $86 million. Salesforce's free cash flow generation, cRPO backlog, and broad ecosystem reach give it the stronger overall financial foundation. F5's bull case, however, is not about total scale. It is about disproportionate exposure to AI infrastructure security, a category experiencing faster product and systems growth than its overall corporate average.

The integration itself is strategically important for both vendors. For Salesforce, embedding F5 AI Guardrails into MuleSoft's Agent Fabric Omni Gateway reduces a major barrier to Agentforce adoption: enterprise concern about governance and security when autonomous agents access systems and data. Security approval is often a precondition for production deployment, and native guardrails make that approval process easier. For F5, the integration provides access to the large and growing population of enterprises using MuleSoft as an integration and API control point, expanding distribution beyond F5's traditional application delivery controller customer base.

What to Watch

Looking forward, the contest between Agentforce growth and F5's AI security momentum may not be zero-sum. Demand for agentic AI and demand for AI security are complementary tailwinds. F5's 32% systems revenue growth is an early indicator that enterprises are allocating budgets specifically to secure AI infrastructure, while Agentforce's near $3.9 billion ARR suggests agentic AI is becoming a real revenue line rather than a marketing narrative. The companies' similar profitability also means neither is sacrificing margins to chase these opportunities.

Investors and technology buyers should watch whether F5 can sustain systems growth as AI security spending shifts toward software and gateway-native controls, and whether Salesforce can prove that Agentforce ARR converts into durable subscription expansion across its broader cloud portfolio. The next several quarters will show whether the partnership produces measurable adoption or remains a well-positioned but still early integration.

Timeline

Timeline

  1. F5 announces MuleSoft AI Guardrails integration

Cite This Page

"F5 Systems Revenue Jumps 32% on AI Security Demand." Cyber Intelligence Brief, September 13, 2026. https://getcyberbrief.com/story/f5-mulesoft-ai-guardrails-security-integration

How we covered this story

Every story in our cybersecurity coverage is assembled from multiple primary sources, cross-referenced for factual consistency, and scored along three independent dimensions: sentiment, operational impact, and source-cluster confidence. Single-source rumors and unverifiable claims do not pass our editorial gate. When a story shows "Verified by N sources" with N≥2, the development is independently corroborated; when N=1, we mark it explicitly so readers can weigh the signal accordingly.

Impact scoring uses a 1-10 scale weighted toward regulatory, financial, and operational consequence rather than coverage volume. A topic that runs in every outlet but moves no real decisions ranks lower than a niche regulatory filing that reshapes how operators in the cybersecurity space have to behave. Read our full methodology for the scoring rubric, our glossary for term definitions, and our trends index for the longitudinal view across the beat.

Sources are only linked to a story once they clear our classification pipeline at a minimum 35 percent relevance threshold. According to that methodology, reviewed July 2026, this follows multi-source corroboration standards recommended by journalism research bodies such as the Reuters Institute for the Study of Journalism.

See something wrong in this story — a wrong fact, a broken source link, a misattributed entity? Report a data issue.