ANETArista Networks
In a world where data is increasingly a precious commodity and competitive differentiator, Arista was founded to enable our customers to access all their centers of data in the quickest, most reliable, and secure manner. 10-K, Item 1
- Employees
- 5,115
- Headquarters
- Santa Clara, CA
- CEO
- Jayshree Ullal
- Next results
- around Feb 11, 2027
26 paragraphs in Risk Factors of the 10-K filed Feb 17, 2026 with nothing like them in the 10-K filed Feb 19, 2025. Quoted exactly. Paragraphs that were only edited are under 10-K change.
Compared with the Risk Factors in the latest 10-K of the other 74 Technology companies: a paragraph with at least half its words the same at another company is called similar, and the companies are listed under it. A paragraph most of them have is marked boilerplate. No line means no other company has one like it. This counts text; it does not say how serious a risk is.
•sales of our switching and routing platforms generate most of our product revenue;
Read in the 10-K ↗
•we, or third parties on which we rely, could experience cybersecurity incidents, which could disrupt our operations, cause vulnerabilities in our products or services, compromise intellectual property or other sensitive data, or otherwise negatively impact our business.
Read in the 10-K ↗
•enhanced import/export restrictions, such as enhanced export controls the U.S. has adopted targeting trade with China, as well as countermeasures taken by affected countries may negatively affect our business;
Read in the 10-K ↗
Our products are primarily manufactured in Malaysia, Vietnam, and Mexico, and we also procure a limited number of products originating from China, Taiwan, Thailand and the Philippines. In addition, our contract manufacturing partners procure some components from China for use in the manufacturing of our products. Because our products are primarily manufactured internationally, the import of our products into the U.S. may be affected by applicable tariff policies.
Over the last decade, and especially under the current administration, the U.S. government has enacted various new and increased tariffs affecting the import of various items from various countries. For example, since 2018, the U.S. government has enacted various tariffs on products from China under Section 301 trade authorities, including on communications equipment products and components manufactured and imported from China. Since February 2025, the U.S. has also imposed additional country-specific tariffs on most trading partners, including China, as well as additional commodity-specific tariffs on certain imported items, in both instances pursuant to executive orders issued under various trade authorities, including the International Emergency Economic Powers Act and Section 232 of the Trade Expansion Act of 1962.
In response to these and other U.S. measures, China, Mexico and other countries have taken or threatened to take a range of retaliatory measures. These include the imposition of retaliatory tariffs on certain U.S.-origin goods; the implementation of new export controls by China on various critical minerals, including rare earths metals; the scheduling of further retaliatory tariff measures; and other actions that may affect us directly or indirectly.
The situation regarding these tariffs and trade policies has been and continues to be fluid, leading to significant uncertainty about the future relationship between the U.S., and other countries, with respect to tariffs and trade policies.
The U.S., China, Malaysia, Vietnam, Mexico, Taiwan, Thailand, the Philippines and other governments may place additional tariffs and trade barriers on communication equipment products, our products and services, our inputs, or other items, which could result in higher costs to us and negatively affect our gross margins.
An increase in trade-related costs associated with these tariff actions may affect our cost of production, impair the profitability of our international production, affect our ability to procure certain items, strain our suppliers’ ability to provide
Read in the 10-K ↗
•the budgeting, sales, implementation and refresh cycles, purchasing practices, technology roadmaps and priorities and buying patterns of customers;
Similar paragraph at 1 of 74 other Technology companies: CRWDRead in the 10-K ↗
New and changing laws, regulations, executive orders, directives, and enforcement priorities can adversely affect the Company’s business by increasing the Company’s costs, limiting the Company’s ability to continuously navigate global supply chain options in lieu of optimizing tariff outcomes, offer a product or service to customers in a timely manner, impacting customer demand for the Company’s products and services, and requiring changes to the Company’s business or supply chain. New and changing laws, regulations, executive orders, directives, and enforcement priorities can also create uncertainty about how such laws and regulations will be interpreted and applied.
Similar paragraph at 1 of 74 other Technology companies: AAPLRead in the 10-K ↗
acquisitions could result in dilution to our stockholders. The incurrence of indebtedness would result in increased fixed obligations and could also include covenants or other restrictions that would impede our ability to manage our operations. Moreover, if the investment or acquisition becomes impaired, we may be required to take an impairment charge, which could adversely affect our financial condition or the market price of our common stock.
Read in the 10-K ↗
standards may not be widely adopted or implemented uniformly and competing standards may emerge that may be preferred by our customers.
Read in the 10-K ↗
7 more
We, or third parties on which we rely, could experience cybersecurity incidents relating to our information systems, or our products, services, or data, which could disrupt our operations or our ability to provide services, cause vulnerabilities or perceived vulnerabilities in our product, compromise intellectual property or other sensitive data, harm our reputation, damage customer or other relationships, delay our ability to recognize revenue, lead to significant costs, legal proceedings, legal liability, or enforcement actions, or otherwise negatively impact our business.
We, like all technology companies, depend upon information technology systems to conduct virtually all business operations, ranging from internal operations and product development activities to marketing and sales efforts and communications with customers and business partners. We could experience disruptions, cybersecurity breaches, and other cybersecurity incidents relating to our information systems, or our products, services, or data. We could also be impacted by cybersecurity incidents through third parties on which we rely. We have outsourced some business functions to third parties, including our manufacturers, logistics providers, and cloud service providers. We also rely upon distributors, resellers and system integrators to sell our products. We also depend upon our employees, and the technology our employees use to comply with the security measures we have instituted to prevent and mitigate cybersecurity incidents.
We, or third parties on which we rely, could experience disruptions, cybersecurity breaches, and other cybersecurity incidents with many different types of causes, including phishing schemes and other social engineering methods, fraud and other malfeasance, denial of service attacks, vulnerabilities or defects in design or manufacture, unintended technical errors, misconfigurations, “bugs,” viruses, ransomware and other malware, mishandling of data or other mistakes by employees or other insiders, and attacks by insiders or external parties. Sophisticated, or even unsophisticated, persons or organizations may attempt to compromise our systems, or third party systems on which we rely, and access, use, destroy, impair, or obtain confidential, personal, or otherwise sensitive or proprietary information and could compromise our systems, products, services and networks, or those of third parties on which we rely. Geopolitical tensions and conflicts, such as the Russia-Ukraine conflict, and deteriorating U.S.-China relations, may create a greater risk of cyberattacks against our company and our manufacturers, suppliers, logistics providers, banks and other business partners. Our acquisition of Awake Security and our provision of its NDR platform may result in us being a more attractive target for such attacks. We may also face increased risks of cybersecurity incidents in connection with personnel working remotely.
We may experience cybersecurity incidents that we do not detect, or that we do not detect for extended periods of time. The techniques used to carry out attacks are constantly evolving, and it may be more difficult to detect attacks involving techniques that we are not aware of or have not anticipated.
If we, or any of the aforementioned third parties, or any other third parties capable of introducing risks to our system or operations, experience a cyberattack or any other kind of cybersecurity incident, our ability to conduct our business effectively could be damaged in a number of ways, including:
Read in the 10-K ↗
The U.S. government also recently introduced regulations that require notification of or prohibit certain transactions by the Company with entities in China or with certain linkages to China. These regulations could apply to certain intracompany activities with our China and Hong Kong subsidiaries or other activities with entities in China or with linkages to China. These regulations could also limit the ability of others to transact certain business with the Company if those transactions involve or
benefit, directly or indirectly our operations in China. Where these new rules apply to a given transaction, it might limit our ability to carry out our long-term business strategy.
Read in the 10-K ↗
We also expect laws, regulations, industry standards and other obligations worldwide relating to privacy, data protection and cybersecurity to continue to evolve, and that there will continue to be new, modified, and re-interpreted laws, regulations, standards, and other obligations in these areas. For example, the Network and Information Security Directive II, or NIS2, adopted in 2023, aims to enhance cybersecurity across critical infrastructure and essential services in the EU. It expands the scope of the 2016 NIS Directive to include additional sectors while enforcing stricter governance and accountability requirements. NIS2 requires all 27 EU member states to issue implementing legislation by October 2024; however, several EU
member states have not finalized their respective legislation and guidance. Additionally, the Digital Operational Resiliency Act, or DORA, became effective in January 2025, and aims to establish a universal framework for managing and mitigating information and communication technology risks that will apply to entities in the financial sector and their third-party cloud service providers.
Read in the 10-K ↗
Furthermore, certain export control and economic sanctions laws prohibit the shipment of certain products, technology, software and services to embargoed countries and sanctioned governments, entities, and persons. The U.S. government also continues to add additional entities to restricted party lists impacting the ability of U.S. companies to provide products, and in certain cases services, to these entities and, in some cases, receive products or services from these entities.
Read in the 10-K ↗
including germanium and gallium. These Chinese export controls have been the subject of bilateral trade negotiations between the U.S. and China and have been partially relaxed since May 2025, though further changes are possible. Further, the Chinese government has responded to U.S. actions by adding U.S. entities to an unreliable entity list, which limits the ability of companies on the list to engage in business with Chinese customers. These restrictions could disrupt the ability of China to procure or produce semiconductors and other electronics and impact our ability to source components from China and could impact the cost of components or inputs used to produce our products.
Read in the 10-K ↗
We use machine learning and AI technologies in our offerings and business, including in our Arista Guardian for Network Identity offering, and we are making investments in expanding our AI capabilities in our products, services, and tools, including ongoing deployment and improvement of existing machine learning and AI technologies, as well as developing new product features using AI technologies. We may rely on third party AI technologies and our ability to continue to use those technologies and provide our applicable products, services and tools are subject to the continued availability and improvement of those technologies. The protectability of the intellectual property in AI-generated or assisted works and inventions is unclear. To the extent we use AI to create any valuable IP, we may not be able to protect it to the same extent that we would have, had we not used AI.
Read in the 10-K ↗
Our business is subject to the risks of natural disasters, social unrest, violent conflicts, systemic failures and other catastrophic events.
Read in the 10-K ↗
New in the latest 10-Q
5 paragraphs in the 10-Q filed Nov 4, 2026 with nothing like them in the 10-Q filed Aug 5, 2026 (at least half the words must differ; new numbers alone do not count). Quoted exactly, grouped by the item heading above them. This is text that changed, not a judgement of how serious it is.
Financial statements and notes
made. Our actual results may differ materially from those anticipated in these forward-looking statements as a result of various factors, including those set forth under “Risk Factors” and elsewhere in this Quarterly Report on Form 10-Q. We undertake no obligation to update any forward-looking statements made in this Quarterly Report on Form 10-Q to reflect events or circumstances after the date of this Quarterly Report on Form 10-Q or to reflect new information or the occurrence of unanticipated events, except as required by law. You should not place undue reliance on our forward-looking statements.
Read in the 10-Q ↗
Risk Factors
economic disruptions or deterioration in the global economy could have a negative impact on demand from our customers in future periods, which may result in reductions in overall demand from these customers in future periods and negatively impact our revenue, financial condition, business or prospects. You should not rely on our revenue for any prior quarterly or annual period as an indication of our future revenue or revenue growth. If we are unable to maintain consistent revenue or revenue growth, our business, financial condition, results of operations and prospects could be materially adversely affected, and our stock price could be volatile.
Read in the 10-Q ↗
our reputation may be damaged and our financial results may be negatively affected. In addition, our or third-party AI agents could take unintended or unauthorized actions, act outside the scope of their instructions or permissions, exploit vulnerabilities or weaknesses in the systems in which they operate, or may be vulnerable to adversarial manipulation such as prompt injection. Such AI agents may be capable of circumventing or escaping technical restrictions or isolated execution environments, obtaining access to networks or systems that were not intended to be accessible, escalating privileges, accessing, modifying, or disclosing confidential information, or using available tools and credentials to take additional unauthorized actions.
Read in the 10-Q ↗
ability to sell our products where these standards or regulations apply, which in turn may prevent us from sustaining our net revenues or maintaining profitability.
Read in the 10-Q ↗
transfers between EU member states and the UK. The UK has issued new standard contractual clauses that, like the SCCs, are required to be implemented.
Read in the 10-Q ↗
The 10-Q's risk factors against the 10-K
Item 1A of the 10-Q filed Nov 4, 2026 against Item 1A of the 10-K filed Feb 17, 2026.
A 10-Q repeats only the risks that changed, so a 10-K paragraph that is missing from it is not counted as removed.
Added is a paragraph with nothing like it in the 10-K, Reworded a sentence that is in both with several words changed,
Quiet changes a sentence in both where one to four words changed and one is a hedge or a modal
(cut words struck through, new words highlighted and underlined).
Text on the page, not a score; each links to the filing at sec.gov.
The first 26 of 80 are shown (at most 12 of each type).
Work on ANET in a spreadsheet:
Excel workbook (a sheet per section, ten years by column, charts, links to the filings) ·
CSV.
For a Google Sheet that stays up to date, paste =IMPORTDATA("https://tickdelta.com/company/ANET/export.csv") into a cell.