Fortinet folds AI visibility, DLP, and risk scoring into FortiEndpoint

Overview

Updated Sep 17

Fortinet folded AI governance, data-loss prevention, and endpoint risk scoring into FortiEndpoint, its unified endpoint agent. One console now shows which AI apps and agents employees run, and can block sensitive data from being sent to tools IT hasn't approved.

The update targets shadow AI, employees using ChatGPT, Claude, or coding agents without clearance. Until now that required separate point products. Fortinet says all of it lands in Q3 2026 under a single license.

Why it matters

If the tools work as advertised, security teams can stop proprietary data leaking into unapproved AI apps without adding another vendor or console.

Questions about this story

Free account needed to ask — your question is kept and asked for you right after sign-up. Answers are public.

No questions yet — be the first to ask.

Key Indicators

Q3 2026

Targeted availability

Fortinet expects the new FortiEndpoint capabilities to reach general availability in Q3 2026.

Unified agent, console, and license

The platform consolidates endpoint protection, EDR, VPN, zero-trust access, DLP, and AI visibility into one product.

Voices

Curated perspectives — historical figures and your fellow readers.

People Involved

Michael Xie

Founder, President, and Chief Technology Officer, Fortinet

Leading the Security Fabric and FortiEndpoint strategy

Organizations Involved

Fortinet

Cybersecurity vendor

Expanding its unified endpoint platform to cover AI usage and data security

Network-security vendor pushing its Security Fabric convergence strategy into endpoint management.

Timeline

July 2026 September 2026

2 events Latest: September 17th, 2026 · 2 months ago

September 2026
FortiEndpoint expansion detailed as Q3 launch nears
Latest Coverage

Trade and partner outlets lay out the AI guardrail policies, native DLP, and zero-trust risk scoring in the unified FortiEndpoint agent.
September 17th, 2026
July 2026
Fortinet announces FortiEndpoint AI expansion
Product announcement

Fortinet adds AI visibility and control, native DLP, endpoint risk scoring, and FortiAI-assisted operations, targeting Q3 2026 availability.
July 14th, 2026

Scenarios

FortiEndpoint AI controls ship on schedule in Q3 2026

Likely Resolves by End of 2026

Discussed by: Fortinet press materials, Help Net Security, techpartner.news

Fortinet makes AI visibility, native DLP, and risk scoring generally available before the quarter ends, letting customers set guardrail policies and inspect AI-bound data from the existing console. DLP Test treats the announcement as roadmap until general availability is confirmed.

FortiEndpoint AI rollout slips past Q3 with trimmed features

Possible Resolves by Q1 2027

Discussed by: DLP Test

The capabilities stay roadmap through the end of 2026, or ship with detection depth reduced. DLP Test flags that announced-but-not-yet-available features often land narrower than promised, especially on separating managed AI apps from shadow AI.

Rivals counter with native endpoint AI data controls

Uncertain Resolves by Q2 2027

Discussed by: DLP Test industry analysis

Platform and secure-access incumbents push GenAI data-loss prevention down to their own agents rather than ceding the field to standalone AI-DLP startups such as MIND, Jazz, and Orion. Fortinet's move forces a matching response from other endpoint vendors.

Historical Context

2 moments from history that rhyme with this story — and how they unfolded.

2015–2018

Cloud access security brokers absorb shadow SaaS (2015–2018)

Employees adopted Salesforce, Dropbox, and Google Apps without IT approval. A new tool class, cloud access security brokers (CASBs), emerged to discover and control that shadow SaaS usage.

Then

CASB vendors like Netskope grew fast selling visibility into unapproved cloud apps.

Now

The brokers were absorbed into larger secure-access (SASE and SSE) platforms as the market consolidated.

Why this matters now

Shadow AI is the new shadow IT. The pattern repeats: a visibility tool appears, then gets folded into the broader platform—exactly what Fortinet is doing with FortiEndpoint.

2005–2010

Symantec consolidates endpoint tools into one agent (2005–2010)

After acquiring Veritas and other vendors, Symantec merged antivirus, firewall, and data-loss prevention into a single managed endpoint agent to cut tool sprawl for enterprises.

Then

Customers ran one agent and one console instead of several overlapping products.

Now

Unified endpoint agents became the industry norm, setting the template for today's consolidation pitch.

Why this matters now

Fortinet is repeating the one-agent, one-console consolidation play, this time extending it to AI-era needs like agent visibility and AI-bound data protection.