Fortinet, a notable name in the cybersecurity domain, has unveiled significant updates to its Security Operations (SecOps) Platform during the Fortinet Accelerate 2026 event.
These updates introduce new technologies and improvements, such as expanded AI capabilities, a preview of FortiSOC, and enhancements to endpoint security via FortiEndpoint.
AI acceleration and unified security operations
In response to cyber attackers increasingly employing AI for their malicious activities, Fortinet is enhancing its AI-driven security operations platform. Ken Xie, Fortinet's Founder, Chairman of the Board, and Chief Executive Officer, emphasised the importance of a unified, scalable security architecture.
"As attackers weaponise AI to accelerate reconnaissance, exploit development and social engineering, security operations must function with the same speed and coordination," Xie stated.
Enhancing security for an AI-driven threat landscape
Fortinet addresses the challenges of managing an expanding attack surface, the shortage of skilled professionals, and fragmented security tools.
The updated Security Operations Platform aims to streamline telemetry, analytics, threat intelligence, and response processes. This integration is designed to simplify operations without necessitating major system overhauls.
Introduction of FortiSOC and FortiAI
Fortinet announced updates to FortiEndpoint to unify endpoint products and reduce complexityDebuted at Accelerate 2026, Fortinet introduced FortiSOC, a cloud-based service that merges FortiAnalyzer, FortiSIEM, FortiSOAR, and FortiTIP functionalities. It facilitates log processing, automation, and identity investigations through a unified interface, leveraging best practices from Fortinet's SOC operations.
Additionally, FortiAI's expansion delivers new automated workflows across security operations, enhancing alert management and threat response.
Enhancements in FortiGuard SOC-as-a-Service
Organisations needing extensive monitoring can benefit from the updated FortiGuard SOC-as-a-Service, which extends Fortinet's robust SOC architecture and expert intelligence.
The service now supports multivendor monitoring, improved detection fidelity through FortiNDR telemetry, and enhanced cloud visibility with FortiCNAPP telemetry.
Upgrades to FortiEndpoint Security
Fortinet announced improvements to FortiEndpoint, aiming to unify various endpoint products and reduce complexity. The enhancements include a single-agent framework for multiple security applications, data protection, and AI application management. These developments intend to lower operational burdens and refine protection strategies against sophisticated AI threats.
Altogether, these upgrades bolster Fortinet's SecOps platform by reinforcing unified SOC capabilities, previewing a next-gen cloud SOC, expanding agentic AI, and simplifying endpoint security, helping organisations tackle AI-driven threats effectively.
Fortinet, the global cybersecurity pioneer driving the convergence of networking and security, announced major innovations across the Fortinet Security Operations (SecOps) Platform at Fortinet Accelerate 2026.
Updates feature next-generation SecOps advancements, including expanded agentic AI capabilities, a preview of FortiSOC, managed services, and endpoint security enhancements delivered through FortiEndpoint.
AI acceleration
"As attackers weaponise AI to accelerate reconnaissance, exploit development and social engineering, security operations must function with the same speed and coordination. Fortinet is advancing a unified, AI-powered security operations platform that provides a scalable operating architecture across our defense framework, enabling organisations to build, extend, or optimise their SOC through a single architecture spanning self-managed, cloud, and managed deployments.” Ken Xie, Founder, Chairman of the Board, and Chief Executive Officer at Fortinet
Advancing security operations for an AI-accelerated threat landscape
Security teams must defend an expanding attack surface across endpoints, identity, cloud, email, and networks while facing skills shortages, alert overload, and fragmented tooling. The Fortinet Security Operations Platform unifies telemetry, analytics, threat intelligence, and response across the kill chain, reducing complexity and accelerating investigations without forcing operational rebuilds.
This release strengthens four core areas for organisations: SOC modernisation, agentic AI execution, FortiGuard managed services, and simplified endpoint security.
FortiSOC and FortiAI: Unifying cloud SOC and advancing agentic operations
As security operations mature, tool sprawl and workflow fragmentation slow teams down.
At Accelerate 2026, Fortinet is previewing FortiSOC, a cloud-delivered offering that brings together the core capabilities of FortiAnalyzer, FortiSIEM, FortiSOAR and FortiTIP into a single integrated service, while expanding FortiAI to introduce new agentic workflows across security operations.
FortiSOC supports log ingestion, normalisation, correlation, automation, case management, behavioral analytics, and identity-focused investigations through a single console and a unified data model, integrating telemetry from Fortinet and third-party environments. Built-in SOC best practices, shaped by Fortinet’s own global SOC operations, are embedded alongside AI/ML and FortiAI capabilities to accelerate analysis and response. Simplified subscription licensing and elastic cloud scale helps streamline deployment, while future endpoint and Continuous Threat Exposure Management (CTEM) architectural expansions will be incorporated into the FortiSOC experience.
Fortinet is also expanding FortiAI across FortiAnalyzer, FortiSIEM, FortiSOAR and FortiSOC to move beyond interactive copilots toward agentic execution that connects telemetry, tools, and response actions across the SOC. Enhancements include a dedicated agent that automates alert triage, investigation, threat hunting and Model Context Protocol (MCP) support to maintain shared context and execution continuity across detection, investigation, and response workflows.
FortiGuard SOC-as-a-Service: Strengthening managed coverage
For organisations requiring continuous monitoring and escalation, Fortinet enhanced FortiGuard SOC-as-a-Service, extending the unified SOC architecture with Fortinet expertise and curated intelligence.
Enhancements include third-party log sources for multivendor monitoring, expanded Security Fabric integrations, FortiNDR telemetry to improve detection fidelity, and FortiCNAPP telemetry to extend cloud visibility, strengthening investigation confidence across hybrid environments.
FortiEndpoint: Simplifying endpoint security in the AI Era
Endpoints remain a primary attack vector and a source of operational complexity. Fortinet announced unified endpoint security enhancements though FortiEndpoint to consolidate multiple endpoint products, reduce agent sprawl, simplify licensing and management, and strengthen protection against emerging threats, including AI application misuse.
Enhancements include single-agent unification across ZTNA, SASE, EPP, EDR and DLP, extending data protection without additional agents. Fortinet also introduced FortiAI-powered application visibility and control to detect and govern AI applications and their communications, reducing unsanctioned usage and data exposure risk. Enhanced EDR integration further streamlines management through a unified console and simplified licensing.
Enabling faster and smarter security operations
Together, these innovations advance Fortinet’s SecOps platform by strengthening unified SOC modernisation, previewing a transformative cloud SOC experience, expanding agentic AI, enhancing managed coverage and simplifying endpoint security.
The result is a single architecture that reduces operational complexity, accelerates investigations and enables organisations to defend against AI-driven threats at scale.
