Fortinet recently unveiled significant enhancements to its Security Operations (SecOps) Platform at the Fortinet Accelerate 2026 event.
These updates include advanced agentic AI features, a preview of the FortiSOC tool, expanded managed services, and new improvements in endpoint security delivered through FortiEndpoint.
AI Acceleration and Much-Needed Advancements
With cyber attackers increasingly leveraging AI for more efficient reconnaissance and social engineering, security operations must keep pace with similar technological advancements. Fortinet is addressing this challenge by advancing its unified AI-powered security operations platform.
"As attackers weaponize AI to accelerate reconnaissance, exploit development and social engineering, security operations must function with the same speed and coordination," said Ken Xie, Founder, Chairman of the Board, and Chief Executive Officer at Fortinet.
Strengthening Security Operations
The Fortinet Security Operations Platform simplifies the complexities faced by security teams in protecting diverse attack surfaces—from endpoints and identity to cloud and networks—while alleviating the challenges of skills shortages and alert overload.
This platform enhances organizations' capabilities in SOC modernization, agentic AI execution, managed service offerings, and endpoint security.
Introducing FortiSOC and Advancing FortiAI
Fortinet has improved its SOC architecture with expertise and curated intelligenceTo combat tool sprawl and workflow fragmentation in mature security operations, Fortinet is previewing FortiSOC, a cloud-delivered solution. This service integrates the functions of FortiAnalyzer, FortiSIEM, FortiSOAR, and FortiTIP, providing cloud SOC capabilities through a unified console and data model.
FortiSOC is equipped with built-in SOC best practices, and AI/ML capabilities, drawing from Fortinet's own global SOC operations, to support log ingestion, normalization, and more. Future enhancements will include extended endpoint protection and Continuous Threat Exposure Management (CTEM).
Expanding FortiAI Across Platforms
Fortinet is also extending FortiAI capabilities, integrating with FortiAnalyzer, FortiSIEM, FortiSOAR, and FortiSOC to introduce agentic execution. This setup allows for seamless connectivity between telemetry, tools, and response mechanisms within the SOC.
Enhancements further include automated alert triage, investigation, and support for Model Context Protocol (MCP) to ensure context continuity throughout detection and response workflows.
Enhancing FortiGuard SOC-as-a-Service
Organizations in need of continuous security monitoring and escalation can benefit from FortiGuard SOC-as-a-Service's new features. Fortinet has improved its SOC architecture with expertise and curated intelligence, integrating third-party log sources for wider monitoring and enhancing visibility with FortiNDR and FortiCNAPP telemetry across hybrid environments.
Streamlining Endpoint Security with FortiEndpoint
With endpoints as a major attack vector, Fortinet's FortiEndpoint enhancements focus on consolidating security products to minimize complexity and agent proliferation. By unifying security functions like ZTNA, SASE, EPP, EDR, and DLP under a single agent, Fortinet simplifies management and improves threat protection, particularly against AI application misuse.
Fortinet's foresight in these innovations is aimed at simplifying security operations while enabling organizations to combat AI-driven threats effectively and efficiently. The enhanced SecOps platform promises to streamline complexities, quicken investigations, and provide scalable defenses against evolving cybersecurity challenges.
Fortinet, the global cybersecurity pioneer driving the convergence of networking and security, announced major innovations across the Fortinet Security Operations (SecOps) Platform at Fortinet Accelerate 2026.
Updates feature next-generation SecOps advancements, including expanded agentic AI capabilities, a preview of FortiSOC, managed services, and endpoint security enhancements delivered through FortiEndpoint.
AI acceleration
"As attackers weaponise AI to accelerate reconnaissance, exploit development and social engineering, security operations must function with the same speed and coordination. Fortinet is advancing a unified, AI-powered security operations platform that provides a scalable operating architecture across our defense framework, enabling organizations to build, extend, or optimize their SOC through a single architecture spanning self-managed, cloud, and managed deployments.” Ken Xie, Founder, Chairman of the Board, and Chief Executive Officer at Fortinet
Advancing security operations for an AI-accelerated threat landscape
Security teams must defend an expanding attack surface across endpoints, identity, cloud, email, and networks while facing skills shortages, alert overload, and fragmented tooling. The Fortinet Security Operations Platform unifies telemetry, analytics, threat intelligence, and response across the kill chain, reducing complexity and accelerating investigations without forcing operational rebuilds.
This release strengthens four core areas for organizations: SOC modernisation, agentic AI execution, FortiGuard managed services, and simplified endpoint security.
FortiSOC and FortiAI: Unifying cloud SOC and advancing agentic operations
As security operations mature, tool sprawl and workflow fragmentation slow teams down.
At Accelerate 2026, Fortinet is previewing FortiSOC, a cloud-delivered offering that brings together the core capabilities of FortiAnalyzer, FortiSIEM, FortiSOAR and FortiTIP into a single integrated service, while expanding FortiAI to introduce new agentic workflows across security operations.
FortiSOC supports log ingestion, normalisation, correlation, automation, case management, behavioral analytics, and identity-focused investigations through a single console and a unified data model, integrating telemetry from Fortinet and third-party environments. Built-in SOC best practices, shaped by Fortinet’s own global SOC operations, are embedded alongside AI/ML and FortiAI capabilities to accelerate analysis and response. Simplified subscription licensing and elastic cloud scale helps streamline deployment, while future endpoint and Continuous Threat Exposure Management (CTEM) architectural expansions will be incorporated into the FortiSOC experience.
Fortinet is also expanding FortiAI across FortiAnalyzer, FortiSIEM, FortiSOAR and FortiSOC to move beyond interactive copilots toward agentic execution that connects telemetry, tools, and response actions across the SOC. Enhancements include a dedicated agent that automates alert triage, investigation, threat hunting and Model Context Protocol (MCP) support to maintain shared context and execution continuity across detection, investigation, and response workflows.
FortiGuard SOC-as-a-Service: Strengthening managed coverage
For organizations requiring continuous monitoring and escalation, Fortinet enhanced FortiGuard SOC-as-a-Service, extending the unified SOC architecture with Fortinet expertise and curated intelligence.
Enhancements include third-party log sources for multivendor monitoring, expanded Security Fabric integrations, FortiNDR telemetry to improve detection fidelity, and FortiCNAPP telemetry to extend cloud visibility, strengthening investigation confidence across hybrid environments.
FortiEndpoint: Simplifying endpoint security in the AI Era
Endpoints remain a primary attack vector and a source of operational complexity. Fortinet announced unified endpoint security enhancements though FortiEndpoint to consolidate multiple endpoint products, reduce agent sprawl, simplify licensing and management, and strengthen protection against emerging threats, including AI application misuse.
Enhancements include single-agent unification across ZTNA, SASE, EPP, EDR and DLP, extending data protection without additional agents. Fortinet also introduced FortiAI-powered application visibility and control to detect and govern AI applications and their communications, reducing unsanctioned usage and data exposure risk. Enhanced EDR integration further streamlines management through a unified console and simplified licensing.
Enabling faster and smarter security operations
Together, these innovations advance Fortinet’s SecOps platform by strengthening unified SOC modernisation, previewing a transformative cloud SOC experience, expanding agentic AI, enhancing managed coverage and simplifying endpoint security.
The result is a single architecture that reduces operational complexity, accelerates investigations and enables organizations to defend against AI-driven threats at scale.
