Fortinet has expanded
FortiEndpoint with new tools for managing AI use, protecting sensitive data, and assessing endpoint risk. The update brings endpoint protection, detection, and response, secure access, data security, and AI governance into one platform.
The company is positioning FortiEndpoint as part of its broader security consolidation strategy. Endpoint telemetry and risk data can be shared across the Fortinet Security Fabric, allowing access controls and security policies to change based on the condition of a device or the activity taking place on it.
Ankit Gupta, product marketing director at Fortinet, told MSSP Alert that the single-agent architecture is the main point of differentiation from broader endpoint and XDR platforms making similar consolidation claims.
“FortiEndpoint’s key differentiator is its single-agent architecture,” Gupta said. “It delivers endpoint protection, EDR, secure access (ZTNA/VPN), AI visibility, native data protection, and AI-assisted operations through a single agent, console, and license.”
Gupta said customers do not need to add separate AI security or data protection tools, while native integration with the Fortinet Security Fabric connects endpoint telemetry with network, identity, and cloud security data. FortiEndpoint can also be deployed in cloud, on-premises, hybrid, or air-gapped environments.
Tracking AI use across endpoints
FortiEndpoint now gives security teams a centralized view of AI applications, agents, and web-based tools running across employee devices. That includes approved services as well as shadow AI tools introduced without the security team’s knowledge.
Administrators can allow, monitor, restrict, or block individual tools based on company policy. The controls are designed to help organizations understand which AI services employees are using and where those services may create security, compliance, or data protection concerns.
Fortinet has also added native data loss prevention to FortiEndpoint. The platform can inspect information shared with AI applications, agents, and web services, including personally identifiable information, financial records, and intellectual property.
Users can receive real-time warnings when an action conflicts with company policy. That gives employees a chance to correct risky behavior before data leaves the device, while giving security teams another way to enforce acceptable-use rules.
FortiEndpoint now includes FortiAI-Assist, which allows analysts to investigate events and manage the platform using natural language. Teams can generate investigation summaries, identify high-risk devices, review findings, and troubleshoot issues from the same console.
Fortinet has paired those workflows with endpoint risk and compliance scoring. The platform continuously evaluates device health, security posture, and policy compliance, then uses that information to guide access decisions.
Managed service opportunities for MSSPs
Fortinet is also pitching the update as a way for MSSPs to manage AI controls and endpoint security across multiple customer environments without adding more consoles.
“Through centralized, multi-tenant management, MSSPs can oversee AI application visibility, DLP, endpoint risk scoring, and endpoint security for every customer from a single, unified platform rather than juggling separate consoles,” Gupta said.
He said FortiAI-Assist is intended to reduce the work involved in deployment and daily operations, while helping providers apply policies consistently across customer environments.
The new capabilities could also give MSSPs room to build services around shadow AI discovery, AI application governance, endpoint data protection, and risk management.
“AI adoption is a powerful growth driver for MSSPs, opening the door to higher-value managed security services,” Gupta said. “Specifically, partners can offer services around AI application visibility and governance, endpoint data protection, endpoint risk management, and managed detection and response.”
