Fortinet has unveiled FortiSOC, a unified, cloud-delivered security operations centre (SOC) platform that integrates multiple security functions into a single system powered by agentic artificial intelligence, as enterprises seek to streamline increasingly complex cyber defence operations.
The Nasdaq-listed cybersecurity firm said FortiSOC consolidates six core security operations capabilities—including security information and event management (SIEM), security orchestration, automation and response (SOAR), threat intelligence, and identity threat detection—into a single software-as-a-service platform. The system is designed to reduce operational silos while enabling faster detection and response to threats.
At the core of the platform is embedded agentic AI, which can autonomously investigate alerts, correlate activity across assets and identities, and recommend or execute response actions under human oversight. Fortinet said this approach addresses the growing volume and sophistication of cyber threats, which are overwhelming traditional SOC models.
“Security teams today are being challenged by faster attacks, growing investigation volume, and fragmented operations that simply don’t scale,” said Michael Xie, founder, president and chief technology officer at Fortinet. “FortiSOC delivers the power of an AI SOC to help customers eliminate complexity, automate threat detection and response, and stay a step ahead of attackers.”
FortiSOC also introduces FortiAI-Assist, which enables AI-driven investigation and workflow orchestration across alerts, threat hunting and incident response. Using enterprise telemetry and FortiGuard Labs threat intelligence, the system coordinates activity across tools and teams, while generating playbooks and automating processes to improve efficiency.
The platform is designed to support organisations at different stages of SOC maturity, from smaller teams establishing baseline monitoring to large enterprises scaling advanced security operations. Delivered via the cloud, it allows customers to deploy and expand capabilities without managing multiple point solutions.
A key feature is its unified operating model, offering a single console and subscription structure aimed at simplifying procurement and reducing tool sprawl. Fortinet said this model can improve resource allocation and allow security teams to focus on threat mitigation rather than system integration.
FortiSOC also comes with pre-configured detection rules and playbooks based on Fortinet’s own global SOC operations, alongside continuous updates from FortiGuard Labs to keep pace with evolving threat landscapes. Native integrations across the Fortinet Security Fabric and third-party systems further extend its reach across IT and business environments.
The launch builds on Fortinet’s broader SOC platform portfolio, including FortiAnalyzer, FortiSIEM and FortiSOAR, by offering a unified, cloud-based alternative for customers seeking a more integrated approach.
Industry analysts note rising demand for such platforms. According to IDC, organisations are increasingly prioritising cloud-delivered security operations and improved analyst workflows to enhance visibility and accelerate response times.
Fortinet said FortiSOC is intended to meet these demands by combining automation, AI and unified workflows into a scalable platform for modern security operations.
