Fortinet introduces FortiSOC, a cloud-based SOC platform that integrates six core functions with agentic AI support.
Security operations centers (SOCs) are under pressure due to the increase in cyberattacks and a growing volume of alerts. Fortinet introduces FortiSOC, an all-in-one cloud platform designed to tackle these challenges. The solution combines existing technologies and new AI functionalities to help security teams work more efficiently. FortiSOC was already announced as a preview in March.
The platform unites six core SOC functions within a single SaaS solution, including SIEM, SOAR, and ITDR. This provides organizations with a single console and operational model, leading to simpler management and faster incident response.
Integrated AI
FortiSOC features agentic AI that independently investigates security alerts and establishes connections between incidents across different IT systems and identities. This AI can not only make recommendations but also execute actions directly, naturally under the supervision of security analysts. This accelerates the detection and response process, allowing organizations to fend off cyber threats more quickly.
The built-in FortiAI-Assist coordinates all activities surrounding investigation, threat hunting, and incident response, supported by the model context protocol (MCP). This allows security teams to set up customized workflows and involve different departments without sacrificing speed or oversight.
Scalability
FortiSOC is designed for organizations at every stage of their SOC journey. Teams with limited resources can easily get started, while large organizations benefit from automation and in-depth correlation of security alerts. The platform offers native integrations with the Fortinet Security Fabric and links to thousands of solutions from other vendors, expanding coverage and automation.
With a single subscription model and immediate deployability, FortiSOC reduces complexity and facilitates the transition to modern SecOps. Real-time threat intelligence from FortiGuard Labs keeps security teams up to date, while ready-to-use playbooks and best practices ensure rapid adoption.