STOCK TITAN

Fortinet Advances Its Security Operations Platform with Unified SOC, Agentic AI, and Expanded Endpoint Security

Fortinet (NASDAQ: FTNT) announced SecOps platform innovations at Accelerate 2026, previewing FortiSOC, expanded FortiAI agentic capabilities, FortiGuard SOC-as-a-Service enhancements, and FortiEndpoint unification.

(Neutral)

Sentiment and the balance of points

Rhea-AI Sentiment reads the wording of the document, how positive or negative its language is on a 1 to 5 scale. The balance of points shown with the takes weighs what the document actually discloses, so the two can disagree, for example when a trial that missed its main goal is described in upbeat language.

Tags
AI

Rhea-AI Summary

Fortinet (NASDAQ: FTNT) announced SecOps platform innovations at Accelerate 2026, previewing FortiSOC, expanded FortiAI agentic capabilities, FortiGuard SOC-as-a-Service enhancements, and FortiEndpoint unification. The release emphasizes a unified Security Fabric architecture to simplify SOC operations, automate investigations, and detect AI-driven threats across cloud, endpoint, and hybrid environments.

Loading...
Loading translation...

Positive

  • Preview of FortiSOC unifies FortiAnalyzer, FortiSIEM, FortiSOAR, FortiTIP
  • Expanded agentic FortiAI automates triage, hunting, and response
  • FortiEndpoint single-agent unifies ZTNA, SASE, EPP, EDR, and DLP
  • FortiGuard SOC-as-a-Service adds multivendor log support and FortiNDR telemetry

Negative

  • No quantified timelines or GAAP impact disclosed for product rollouts
  • Features described as previews; full availability and pricing not specified
Argus Mar 10 session
+0.47% close to close Open Argus
Details

News Market Reaction – FTNT

On Mar 10, the day this news came out, FTNT closed 0.47% above the previous close.

Data tracked by StockTitan Argus for the Mar 10 session.

Key Figures

FY 2025 revenue: $6.80B FY 2025 net income: $1.85B Q4 2025 revenue: $1.91B +5 more
FY 2025 revenue
$6.80B
Total revenue for year ended Dec 31, 2025 (10-K)
FY 2025 net income
$1.85B
Net income for year ended Dec 31, 2025 (10-K)
Q4 2025 revenue
$1.91B
Q4 2025 revenue, up 15% YoY (earnings release)
FY 2025 free cash flow
$2.21B
Full-year 2025 free cash flow (earnings release)
Share repurchase authorization
$10.25B
Total authorization through Feb 28, 2027 after $1.0B increase
Patent portfolio
1,064 U.S.; 1,405 global patents
Patents outstanding as of Dec 31, 2025 (10-K)
AI-related patents
321 patents
AI-related patents within total portfolio (10-K)
Employees
15,109 employees
Headcount as of Dec 31, 2025 (10-K)

Previous AI Reports

5 past events · Latest: Dec 17
Same Type 5 events
  1. Dec 17

    AI data center partnership

    24h Move
    -3.8%

    Joint Secure AI Data Center blueprint with Arista deployed at MPS.

  2. Dec 16

    NVIDIA AI integration

    24h Move
    +1.2%

    FortiGate VM running on NVIDIA BlueField-3 DPU for isolated AI workloads.

  3. Nov 05

    Secure AI platform launch

    24h Move
    +0.9%

    Launch of Secure AI Data Center and FortiGate 3800G with hyperscale throughput.

  4. Jun 04

    AI workspace security

    24h Move
    -1.2%

    AI-powered workspace security suite and FortiDLP upgrades post-Perception Point deal.

  5. Apr 28

    AI threat report

    24h Move
    +0.8%

    Global Threat Landscape Report on automated, AI-driven cyberattacks surge.

24h Move is the share-price change in the day after each event; other market factors may also have contributed.

Key Terms

SOC-as-a-Service, Model Context Protocol (MCP), ZTNA, SASE, +1 more
5 terms
SOC-as-a-Service technical
"FortiGuard SOC-as-a-Service: Strengthening Managed CoverageFor organizations requiring"
A security operations center offered as a managed service that continuously monitors an organization’s networks, systems and devices for cyber threats, alerts on suspicious activity and assists with investigation and response. Investors care because it converts large, unpredictable security costs into steady fees, can lower the chance and impact of a damaging breach, and therefore affects a company’s operational stability, regulatory risk and potential liabilities — like hiring a 24/7 neighborhood watch for digital assets.
Model Context Protocol (MCP) technical
"threat hunting, and Model Context Protocol (MCP) support to maintain shared"
The Model Context Protocol (MCP) is a system that helps financial models understand and share information about market conditions and data. It’s like a common language that ensures different tools and models work together smoothly, making predictions and decisions more accurate and consistent.
ZTNA technical
"single-agent unification across ZTNA, SASE, EPP, EDR, and DLP, extending data"
Zero Trust Network Access (ZTNA) is a security model that grants each user or device only the exact access needed to specific applications, instead of trusting them once they’re inside a network. Think of it as a smart bouncer who checks ID and a reservation for every room rather than letting someone roam freely; for investors, ZTNA matters because it reduces breach risk, lowers potential liability and compliance costs, and drives demand for security products and services.
SASE technical
"single-agent unification across ZTNA, SASE, EPP, EDR, and DLP, extending data"
SASE, or Secure Access Service Edge, is a modern technology that combines network security and access management into a single, cloud-based service. It ensures that users can safely connect to company resources from anywhere, much like having a secure, virtual gatekeeper that protects digital information. For investors, SASE matters because it reflects how organizations are adopting advanced security measures to support flexible, remote work environments and protect valuable data.
continuous threat exposure management (CTEM) technical
"while future endpoint and continuous threat exposure management (CTEM) architectural"
Continuous Threat Exposure Management (CTEM) is an ongoing program that identifies, ranks and reduces an organization’s security weaknesses by continuously scanning systems, testing defenses and tracking fixes until risks are lowered. For investors, CTEM is like a building’s routine maintenance: it helps prevent costly breaches, regulatory fines and business disruption, and therefore protects a company’s cash flow, reputation and long‑term value.

AI-generated analysis. How Rhea-AI works. Not financial advice.

See more from StockTitan in Google Search and AI answers. Adds StockTitan as a preferred source · opens Google
Add on Google

New innovations unify cloud SOC, agentic AI, managed detection and response, and endpoint protection within a single Security Fabric architecture

SUNNYVALE, Calif. and LAS VEGAS, March 10, 2026 (GLOBE NEWSWIRE) -- Accelerate 2026 -- Fortinet® (NASDAQ: FTNT), the global cybersecurity leader driving the convergence of networking and security, today announced major innovations across the Fortinet Security Operations (SecOps) platform at Fortinet Accelerate 2026. Updates feature next-generation SecOps advancements, including expanded agentic AI capabilities, a preview of FortiSOC, managed services, and endpoint security enhancements delivered through FortiEndpoint.

As attackers weaponize AI to accelerate reconnaissance, exploit development, and social engineering, security operations must function with the same speed and coordination. Fortinet is advancing a unified, AI-powered security operations platform that provides a scalable operating architecture across our defense framework, enabling organizations to build, extend, or optimize their SOC through a single architecture spanning self-managed, cloud, and managed deployments.” - Ken Xie, Founder, Chairman of the Board, and Chief Executive Officer at Fortinet

Advancing Security Operations for an AI-Accelerated Threat Landscape
Security teams must defend an expanding attack surface across endpoints, identity, cloud, email, and networks while facing skills shortages, alert overload, and fragmented tooling. The Fortinet Security Operations Platform unifies telemetry, analytics, threat intelligence, and response across the kill chain, reducing complexity and accelerating investigations without forcing operational rebuilds.

This release strengthens four core areas for organizations: SOC modernization, agentic AI execution, FortiGuard managed services, and simplified endpoint security.

FortiSOC and FortiAI: Unifying Cloud SOC and Advancing Agentic Operations
As security operations mature, tool sprawl and workflow fragmentation slow teams down.

At Accelerate 2026, Fortinet is previewing FortiSOC, a cloud-delivered offering that brings together the core capabilities of FortiAnalyzer, FortiSIEM, FortiSOAR, and FortiTIP into a single integrated service, while expanding FortiAI to introduce new agentic workflows across security operations.

FortiSOC supports log ingestion, normalization, correlation, automation, case management, behavioral analytics, and identity-focused investigations through a single console and a unified data model, integrating telemetry from Fortinet and third-party environments. Built-in SOC best practices, shaped by Fortinet’s own global SOC operations, are embedded alongside AI/ML and FortiAI capabilities to accelerate analysis and response. Simplified subscription licensing and elastic cloud scale helps streamline deployment, while future endpoint and continuous threat exposure management (CTEM) architectural expansions will be incorporated into the FortiSOC experience.

Fortinet is also expanding FortiAI across FortiAnalyzer, FortiSIEM, FortiSOAR, and FortiSOC to move beyond interactive copilots toward agentic execution that connects telemetry, tools, and response actions across the SOC. Enhancements include a dedicated agent that automates alert triage, investigation, threat hunting, and Model Context Protocol (MCP) support to maintain shared context and execution continuity across detection, investigation, and response workflows.

FortiGuard SOC-as-a-Service: Strengthening Managed Coverage
For organizations requiring continuous monitoring and escalation, Fortinet enhanced FortiGuard SOC-as-a-Service, extending the unified SOC architecture with Fortinet expertise and curated intelligence.

Enhancements include third-party log sources for multivendor monitoring, expanded Security Fabric integrations, FortiNDR telemetry to improve detection fidelity, and FortiCNAPP telemetry to extend cloud visibility, strengthening investigation confidence across hybrid environments.

FortiEndpoint: Simplifying Endpoint Security in the AI Era
Endpoints remain a primary attack vector and a source of operational complexity. Fortinet announced unified endpoint security enhancements though FortiEndpoint to consolidate multiple endpoint products, reduce agent sprawl, simplify licensing and management, and strengthen protection against emerging threats, including AI application misuse.

Enhancements include single-agent unification across ZTNA, SASE, EPP, EDR, and DLP, extending data protection without additional agents. Fortinet also introduced FortiAI-powered application visibility and control to detect and govern AI applications and their communications, reducing unsanctioned usage and data exposure risk. Enhanced EDR integration further streamlines management through a unified console and simplified licensing.

Enabling Faster and Smarter Security Operations
Together, these innovations advance Fortinet’s SecOps platform by strengthening unified SOC modernization, previewing a transformative cloud SOC experience, expanding agentic AI, enhancing managed coverage, and simplifying endpoint security. The result is a single architecture that reduces operational complexity, accelerates investigations, and enables organizations to defend against AI-driven threats at scale.

Additional Resources

Copyright © 2026 Fortinet, Inc. All rights reserved. The symbols ® and ™ denote respectively federally registered trademarks and common law trademarks of Fortinet, Inc., its subsidiaries and affiliates. Fortinet’s trademarks include, but are not limited to, the following: Fortinet, the Fortinet logo, FortiGate, FortiOS, FortiGuard, FortiCare, FortiAnalyzer, FortiManager, FortiASIC, FortiClient, FortiCloud, FortiMail, FortiSandbox, FortiADC, FortiAI, FortiAIOps, FortiAgent, FortiAntenna, FortiAP, FortiAPCam, FortiAuthenticator, FortiCache, FortiCall, FortiCam, FortiCamera, FortiCarrier, FortiCASB, FortiCentral, FortiCNP, FortiConnect, FortiController, FortiConverter, FortiCSPM, FortiCWP, FortiDAST, FortiDB, FortiDDoS, FortiDeceptor, FortiDeploy, FortiDevSec, FortiDLP, FortiEdge, FortiEDR, FortiExplorer, FortiExtender, FortiFirewall, FortiFlex FortiFone, FortiGSLB, FortiGuest, FortiHypervisor, FortiInsight, FortiIsolator, FortiLAN, FortiLink, FortiMonitor, FortiNAC, FortiNDR, FortiPAM, FortiPenTest, FortiPhish, FortiPoint, FortiPolicy, FortiPortal, FortiPresence, FortiProxy, FortiRecon, FortiRecorder, FortiSASE, FortiScanner, FortiSDNConnector, FortiSIEM, FortiSMS, FortiSOAR, FortiSRA, FortiStack, FortiSwitch, FortiTester, FortiToken, FortiTrust, FortiVoice, FortiWAN, FortiWeb, FortiWiFi, FortiWLC, FortiWLM, FortiXDR and Lacework FortiCNAPP.

Other trademarks belong to their respective owners. Fortinet has not independently verified statements or certifications herein attributed to third parties and Fortinet does not independently endorse such statements. Notwithstanding anything to the contrary herein, nothing herein constitutes a warranty, guarantee, contract, binding specification or other binding commitment by Fortinet or any indication of intent related to a binding commitment, and performance and other specification information herein may be unique to certain environments.



Media Contact:
Travis Anderson
Fortinet, Inc.
408-235-7700
pr@fortinet.com

Investor Contact:
Anthony Luscri
Fortinet, Inc.
408-235-7700
investors@fortinet.com

Analyst Contact:
Sarah Goodwin
Fortinet, Inc.
408-832-1428
sgoodwin@fortinet.com

FAQ

AI-generated questions and answers. How Rhea-AI works. Not financial advice.

What is FortiSOC and when will Fortinet (FTNT) make it generally available?

FortiSOC is a cloud-delivered SOC that unifies FortiAnalyzer, FortiSIEM, FortiSOAR, and FortiTIP into one service. According to the company, FortiSOC is being previewed at Accelerate 2026; the announcement does not provide a general availability date or pricing details.

How does Fortinet expand FortiAI agentic capabilities for FTNT customers?

Fortinet expanded FortiAI to enable agentic workflows that automate alert triage, investigation, and threat hunting. According to the company, enhancements include a dedicated agent and Model Context Protocol support to maintain execution continuity across SOC detection and response.

What changes did Fortinet announce for endpoint security under FTNT?

Fortinet consolidated endpoint protection into FortiEndpoint with a single agent covering ZTNA, SASE, EPP, EDR, and DLP. According to the company, this unification reduces agent sprawl and adds FortiAI-powered application visibility to govern AI application use.

What upgrades did FortiGuard SOC-as-a-Service receive in the FTNT announcement?

FortiGuard SOC-as-a-Service now supports third-party log sources, expanded Security Fabric integrations, FortiNDR telemetry, and FortiCNAPP visibility. According to the company, these enhancements aim to increase detection fidelity and investigation confidence across hybrid environments.

Will Fortinet's SecOps updates reduce operational complexity for FTNT customers?

The updates are designed to reduce complexity by unifying telemetry, analytics, and response under a single Security Fabric architecture. According to the company, the platform streamlines investigations and supports self-managed, cloud, and managed SOC deployments.

Does the Fortinet (FTNT) announcement include financial guidance or pricing for the new SecOps features?

No financial guidance or specific pricing was included for the new SecOps features in the announcement. According to the company, the release focuses on product capabilities and previews rather than availability dates, pricing, or financial metrics.

Keep reading