Fortinet announced the general availability of FortiSOC on June 16, a unified cloud-delivered security operations center platform that consolidates SIEM, SOAR, UEBA, identity threat detection and response, threat intelligence, and case management into a single SaaS experience. The platform embeds FortiAI-Assist, an agentic AI engine that autonomously investigates and correlates alerts across assets and identities using Model Context Protocol for agent coordination.
FortiSOC represents Fortinet’s answer to the platform consolidation trend driving enterprise security purchasing decisions. Rather than requiring organizations to integrate separate point products for each SOC function, the platform delivers pre-integrated workflows where an alert generated by the SIEM component can trigger an automated investigation through SOAR, correlate with UEBA behavioral data, check identity context through ITDR, and produce a complete case with recommended response actions without manual analyst intervention for routine incidents.
The MCP-powered coordination layer is the architectural differentiator. FortiAI-Assist uses MCP to orchestrate multiple specialized AI agents, each responsible for a distinct analytical task, that collaborate on complex investigations the same way a team of analysts would divide work across specialties. The system generates AI-authored playbooks for novel alert patterns and adapts its investigation methodology based on the threat intelligence context associated with observed indicators.
Fortinet President and CTO Michael Xie stated that FortiSOC gives organizations a simpler way to operationalize SOC capabilities through a unified, cloud-delivered platform. The launch arrives two months after Fortinet released FortiOS 8.0 at Accelerate 2026, which embedded three AI engines (FortiAI-SecureAI, FortiAI-Protect, and FortiAI-Assist) directly into the inspection engine and added post-quantum cryptography readiness. FortiSOC extends the same AI infrastructure into the operations layer with more than 1,000 third-party integrations available at launch.
Source: Fortinet Press Release.
