Analyst(s): Fernando Montenegro
Publication Date: July 21, 2026
Fortinet is folding AI visibility, native DLP, endpoint risk scoring, and FortiAI-assisted operations into FortiEndpoint, delivered through a single agent, console, and license. The consolidation is the real buyer story, and whether Fortinet stands apart will come down to how well it governs AI across its endpoint and SASE estate, not the individual controls themselves.
What is Covered in This Article:
- Consolidation over novelty: Fortinet is putting AI visibility, DLP, endpoint risk scoring, and FortiAI-assisted operations behind one agent, one console, and one license, with availability expected in Q3 2026.
- A crowded field: Microsoft, CrowdStrike, Netskope, and Zscaler, among others, already ship AI-aware data controls, so the individual features read as a catch-up move rather than a new category.
- The buyer’s win is tool sprawl: collapsing endpoint protection, response, secure access, and data security into one operating environment matters more to buyers than any single control in the release.
- Governance is the real test: Fortinet’s more defensible play is governing AI data and access across FortiEndpoint and its SASE estate, where point products struggle to keep pace.
The News: Fortinet has announced a set of new FortiEndpoint capabilities that combine AI usage visibility, endpoint protection, detection and response, secure remote access, native data loss prevention, endpoint risk scoring, and FortiAI-assisted operations. The company will deliver these through one agent, one console, and one license, with availability expected in Q3 2026.
FortiEndpoint identifies sanctioned and unsanctioned AI applications, agents, and web tools, and lets security teams monitor, restrict, allow, or block them. Native DLP inspects sensitive information exchanged with AI services, while FortiAI-Assist supports natural-language investigations, summaries, device-risk identification, policy recommendations, and troubleshooting.
Fortinet’s Security Fabric integration enables endpoint telemetry and device risk context to inform connected access controls and security policies.
Fortinet’s AI Controls Join the Field. Can Integration Set Them Apart?
Analyst Take: Fortinet has picked the right problem here, and we would give it credit for that, but picking the right problem is not the same as defining a new category. Shadow AI, data leakage, and unauthorized applications are genuine, pressing concerns, and FortiEndpoint aims squarely at them.
The trouble, to us, is that Microsoft, with its Purview and Defender combination, CrowdStrike, Netskope, and Zscaler, among others, are already in this fight. So the question worth asking is not whether Fortinet can do AI-aware endpoint controls, it plainly can, but whether any of this separates the company from a field that is converging on the same feature set.
Is the Buyer-Win the Features, or the Consolidation?
We reckon the strongest part of this release has little to do with AI as such. Security teams already juggle separate tools for endpoint protection, detection, and response, remote access, data security, and policy enforcement, and every seam between those tools slows an investigation and opens a gap.
Putting those functions into one agent, one console, and one license is the part buyers should actually value, and Security Fabric integration, which lets endpoint telemetry and device-risk context feed connected access controls, is what keeps the consolidation from being a mere packaging exercise. This tracks with what practitioners tell us they buy on: in Futurum’s 1H 2026 Cybersecurity Global Enterprise Decision Maker Survey (N=929, unweighted), integration with existing tools was the second-most-cited vendor-selection factor, named in the top three by roughly 27% of respondents, behind only product effectiveness and capabilities.
Catch-Up, Not a Lead
When it comes to the controls themselves, we are more measured. Visibility into approved and unofficial tools, application-level restrictions, DLP inspection, and user coaching no longer puts a vendor out in front.
Buyers will soon treat them as table stakes for any endpoint or data-security platform, which does not make them unimportant; it makes them necessary, and that is a different thing. A checklist of AI controls brings Fortinet into the contest without putting it ahead of the rivals already there.
Enforcement Is Not the Same as Enablement
There is a deeper limit worth naming, and it is not Fortinet’s alone. FortiEndpoint handles enforcement well, as it can track, restrict, block, redact, and inspect AI activity, and its centralized view can surface installed applications, agents, web tools, unmanaged software, and user behavior across endpoints. Its DLP can catch personally identifiable information, intellectual property, and financial data before someone pastes it into an AI service, and real-time coaching can explain why a policy was fired.
None of that, and no enforcement-first offering, delivers the sanctioned AI infrastructure employees actually want. Blocking the unofficial path does not remove the reason people took it. Shadow AI is ultimately a demand problem, and the category as a whole, including Fortinet, provides controls rather than addressing that demand. We raise it here not as a Fortinet shortcoming but as the boundary of what endpoint enforcement can do for anyone.
Where Fortinet Could Actually Pull Ahead
This is where the platform, rather than the endpoint, has to earn its keep. We expect the individual endpoint features to commoditize quickly, since any competent competitor can add similar visibility, coaching, and data controls.
The more defensible approach is to govern AI-related data and access across FortiEndpoint and the SASE estate together, using shifting device health, compliance status, and risk scores to adjust access to AI applications and protected resources in real time. Governance here is a moving target, not a setting: every capability jump, agents and multimodal applications among them, resets what sanctioned and unsanctioned AI even mean.
Fortinet will stand apart only if it treats that as a continuous adaptation and turns endpoint signals into coordinated controls that point products cannot easily match.
What to Watch:
- Can Fortinet apply one AI data and access policy across FortiEndpoint and the SASE estate? Consistent policy across endpoints and access is the whole-platform argument, and it is harder to deliver than shipping the controls separately.
- How well will detection hold up as shadow AI shifts? Identifying installed applications, web tools, and agents is a moving target, and accuracy will matter more than coverage claims.
- Does coaching change behavior, or just redirect it? Real-time nudges may cut sensitive-data exposure, or simply push employees toward the next unofficial tool.
- How fast can Fortinet update its guardrails as AI capabilities jump? Agents and multimodal applications will keep resetting what their inspection and policy have to cover.
- Does one agent, one console, one license actually reduce the tool count? The consolidation claim only holds if customers retire products rather than add another.
For more information, read the full announcement from Fortinet.
Disclosure: Futurum is a research and advisory firm that engages or has engaged in research, analysis, and advisory services with many technology companies, including those mentioned in this article. The author does not hold any equity positions with any company mentioned in this article.
Analysis and opinions expressed herein are specific to the analyst individually and data and other information that might have been provided for validation, not those of Futurum as a whole.
Other Insights From Futurum:
Secure Access Service Edge (SASE) – Futurum Signal
Fortinet’s FortiOS 8.0 Pushes Secure Networking Toward AI Governance
How Does SASE Evolve in the Age of AI?
Author Information
Fernando Montenegro serves as the Vice President & Practice Lead for Cybersecurity & Resilience at The Futurum Group. In this role, he leads the development and execution of the Cybersecurity research agenda, working closely with the team to drive the practice's growth. His research focuses on addressing critical topics in modern cybersecurity. These include the multifaceted role of AI in cybersecurity, strategies for managing an ever-expanding attack surface, and the evolution of cybersecurity architectures toward more platform-oriented solutions.
Before joining The Futurum Group, Fernando held senior industry analyst roles at Omdia, S&P Global, and 451 Research. His career also includes diverse roles in customer support, security, IT operations, professional services, and sales engineering. He has worked with pioneering Internet Service Providers, established security vendors, and startups across North and South America.
Fernando holds a Bachelor’s degree in Computer Science from Universidade Federal do Rio Grande do Sul in Brazil and various industry certifications. Although he is originally from Brazil, he has been based in Toronto, Canada, for many years.
