The lede. BEAD — the federal government's $42.45 billion Broadband Equity, Access, and Deployment program — is the largest rural infrastructure build in a generation, and Washington buried a security mandate inside the plumbing. Under the NTIA's NOFO, every subgrantee (rural ISP, electric co-op, tribal utility) must submit a Cybersecurity and Supply Chain Risk Management (C-SCRM) plan aligned to NIST frameworks before a dollar of federal money is released, and network software including cybersecurity solutions is an explicit eligible cost. That single clause turns a telecom construction subsidy into a security procurement mandate: thousands of small, under-resourced rural carriers and co-ops that have never run a SOC now must buy — and prove they operate — enterprise-grade network security as a condition of federal funding. States are actively grinding through BEAD Final Proposals and subgrantee awards in 2026, meaning this procurement wave is live now, not theoretical.
Fortinet's Farm Bill: The Rural Broadband Clause That Locks Pure-Play Security Out
A buried NTIA cybersecurity mandate inside the $42 billion BEAD rural broadband build is forcing under-resourced ISPs and co-ops to buy converged network-security appliances — a bid only Fortinet's hardware can even enter.
The RFP requires a box that is simultaneously the network and the security control — pure-play security vendors without SD-WAN hardware can't even submit a bid.
Who cashes in.
Fortinet FTNT is the mechanism's structural winner. Rural ISPs and co-ops building greenfield IP networks under BEAD need both WAN connectivity (SD-WAN, routing, LTE/5G failover across sparse geography) and the security stack to satisfy C-SCRM sign-off — in one box, from one vendor, with one support contract. Fortinet's converged Secure SD-WAN appliances are purpose-built for exactly that RFP: a single SKU that is simultaneously the network and the security control. Pure-play security vendors without carrier-grade networking hardware can't even complete the bid — there's no appliance to put at the tower or substation that also routes traffic.
Palo Alto Networks PANW still competes at the edge of this build through its own SD-WAN/SASE (Prisma) push into service-provider and utility accounts, giving it a partial seat even without Fortinet's installed base in rural telecom.
CrowdStrike CRWD benefits at one remove: once BEAD-funded networks go live, the endpoint and cloud workload protection layer for the new billing systems, customer portals, and utility SCADA-adjacent IT that ride on top of the network is a second wave of spend these newly-funded operators didn't budget for before.
Who is exposed. Zscaler ZS and Okta OKTA are cloud-delivered, identity/proxy-first architectures with no on-prem networking hardware — they're structurally locked out of the "secure the physical last-mile buildout" RFP category entirely, a niche where the box at the pole matters as much as the software. SentinelOne S, like CrowdStrike, plays downstream of the network layer, not in it, so it captures none of the primary BEAD infrastructure dollar.
The play. Watch state BEAD subgrantee announcements and rural telecom/co-op trade press (NTCA, NRECA) for named equipment vendors — that's the tell of who's actually winning these RFPs, not press releases from Santa Clara.
Source: original report ↗
Free: catalyst alerts, straight to your inbox.
Get the White House orders, federal contracts, and FDA decisions that move money — with who cashes in — free. Unsubscribe in one click.
Free · weekly · unsubscribe anytime. Privacy.
Stay three moves ahead of every practice in your market.
Knowing it happened is table stakes. Money Racket Pro hands you the play — what each move means for your margins, your license, and your patients, and exactly what to do about it — in a two-minute brief, twice a week. The owners who read it never get blindsided.
Get the edge · $40/moJoin the owners who run ahead of the industry. Cancel anytime, one click.