FSLY · CIK 0001517413
What Fastly, Inc. told the SEC could break it.
Fastly's risks cluster on customer concentration and the hardware its network runs on. Although no single customer topped 10% of revenue, affiliated business units of a single company together generated about 10% of 2025 revenue and its ten largest customers were 32% — a concentration the filing pairs with U.S. legislation that would effectively ban TikTok unless its China-based parent ByteDance divests, so a TikTok ban or a usage decline at a top customer could materially cut revenue (CDN usage is volatile). On the supply side, building the servers and points-of-presence behind its global edge network depends on a limited number of suppliers for several components, leaving it exposed to shortages — and to tariffs and trade disputes that could raise the cost of expanding or refreshing that internationally sourced hardware.
3 self-disclosed vulnerabilities, pulled from its own filings — each in the company’s words, with the source. This is the risk register almost nobody reads.
In its own words
What could break it.
Customer concentration
- Affiliated business units of a single company (ByteDance/TikTok per adjacent disclosure) = ~10% of revenue; top-10 customers = 32% — exposed to a U.S. TikTok banmedium
Although no single customer exceeded 10% of revenue, affiliated customers that are business units of a single company generated an aggregate of 10% of Fastly's revenue in 2025, and its 10 largest customers were 32% of revenue. The filing pairs this concentration with the U.S. legislation that would effectively ban TikTok unless its China-based parent ByteDance divests — strongly implying ByteDance/TikTok-affiliated units are the ~10% concentration. A TikTok ban or forced divestiture, or loss/usage decline of this or other top customers (CDN usage is volatile), could materially reduce revenue. A concentration risk with a distinctive regulatory (TikTok-ban) overlay; the counterparty is not cleanly quantified as a single named customer, so recorded as a risk rather than a named edge.
“business units of a single company generated an aggregate of 10% of the Company's revenue for the year ended December 31, 2025.”
SEC filing →As of 2026
Supplier concentration
- Reliance on a limited number of suppliers for several components of the server/POP equipment used to operate its global edge networkmedium
Fastly's business depends on the timely supply of parts and components to build the servers and points-of-presence (POPs) that make up its global edge network, and it relies on a limited number of suppliers for several of these components. This exposes it to reduced control over production costs and to availability constraints — a component shortage or supplier disruption could impair its ability to expand or maintain network capacity and serve customers. Suppliers unnamed, so a sole-source/component-concentration risk.
“We rely on a limited number of suppliers for several components of the equipment we use to operate our network and provide products to our customers.”
SEC filing →As of 2026
Regulatory & policy
- Tariffs/trade disputes raising cost and disrupting supply of network hardware componentslow
Fastly flags that international trade disputes may disrupt or delay its supply chain for server/network components or raise their prices: the U.S. has imposed or signaled tariffs on certain countries that could trigger counter-tariffs and increase production costs and supply-chain disruptions. As an operator of capital-intensive global edge hardware sourced internationally, tariff escalation raises the cost of expanding/refreshing its network. A trade-policy exposure on its hardware supply chain.
“the United States has imposed or indicated an intention to impose tariffs on certain countries which may lead to retaliatory actions such as counter-tariffs and increase production costs and disruptions in our supply chain.”
The hidden graph
Who it depends on, and who depends on it.
Relationships surfaced from filings — including ones disclosed by the other side, which is how the non-obvious ones come to light.
Its suppliers
Microsoft Azure (Microsoft Corporation)
“We rely on third-party services such as Amazon Web Services (AWS), Google Cloud Platform (GCP), Microsoft (Azure), and other cloud providers such as object storage providers, that facilitate our platform.”
Cited →Amazon Web Services (Amazon.com, Inc.)
“We rely on third-party services such as Amazon Web Services (AWS), Google Cloud Platform (GCP), Microsoft (Azure), and other cloud providers such as object storage providers, that facilitate our platform.”
Cited →Google Cloud Platform (Alphabet Inc.)
“We rely on third-party services such as Amazon Web Services (AWS), Google Cloud Platform (GCP), Microsoft (Azure), and other cloud providers such as object storage providers, that facilitate our platform.”
Cited →
In the MyPRIA app, this is checked against the companies you actually own.
← World Watch