Fortinet launches unified SOC platform powered by agentic AI

Fortinet has launched FortiSOC, a unified, cloud-delivered security operations centre (SOC) platform that brings six security-operations functions into a single software-as-a-service console and embeds agentic AI to investigate alerts and drive response.

Fortinet said FortiSOC autonomously investigates and correlates alerts across assets and identities, then recommends or executes response actions under analyst oversight, delivered through one console, one subscription and one operating model.

The platform unifies security information and event management (SIEM); security orchestration, automation and response (SOAR); threat intelligence; user and entity behaviour analytics; case management; and identity threat detection and response, drawing on FortiGuard Labs threat intelligence.

The agentic layer, branded FortiAI-Assist, applies autonomous investigation, AI-generated playbooks and Model Context Protocol (MCP)-based coordination across alerts, investigations, threat hunting, cases and response, working across an organisation’s tools and teams within the one platform.

Fortinet positioned the product for security teams at any stage - from resource-constrained teams building foundational monitoring to mature SOCs wanting deeper automation and correlation at scale - and said best-practice detection content and playbooks drawn from its own global SOC ship out of the box, with monthly content updates.

The company said that FortiSOC complements rather than replaces its existing SOC portfolio - comprising of FortiAnalyzer, FortiSIEM and FortiSOAR - which it said will continue to be sold and enhanced for customers who prefer those products, while FortiSOC will serve those who want a single cloud-based platform.

“Security teams today are being challenged by faster attacks, growing investigation volume, and fragmented operations that simply don’t scale,” said Michael Xie, founder, president and chief technology officer of Fortinet.

“FortiSOC gives organisations a simpler way to operationalise the SOC capabilities they need through a unified, cloud-delivered platform designed to support security teams of all sizes, from teams building foundational capabilities to enterprises scaling advanced SOC environments.

"With embedded AI, integrated workflows, and built-in best practices informed by Fortinet’s own global security operations centre, FortiSOC delivers the power of an AI SOC to help customers eliminate complexity, automate threat detection and response, and stay a step ahead of attackers.”