Skip to content Skip to navigation Skip to footer

Overview

Security operation teams face the dual challenges of an evolving threat landscape and increasing operational complexity. To counter the sophistication of attackers and new threats, organizations often deploy a multitude of technologies and strategies.

Integrated into the Fortinet Security Fabric, FortiSOAR security orchestration, automation and response (SOAR) provides innovative case management, automation, and orchestration. It pulls together all of an organization's tools, helps unify operations, and reduce alert fatigue, context switching, and the mean time to respond to incidents. Using FortiSOAR helps enterprises adapt and optimize their security processes with:

  • Response-times that are up to 98% faster than manual options
  • 450+ connectors
  • Content Hub with rich out-of-the-box solution packs

Unified IT/OT Security Automation: Rich new FortiSOAR OT features include OT asset management, IT/OT dashboards mapped to the Purdue Model hierarchy, OT-specific playbooks for threat remediation, risk-based OT vulnerability management, MITRE ATT&CK ICS view for threat analysis, OT threat-intelligence integration, and connectors for OT security-partner integration.

 

Threat Intel Management with FortiSOAR 7.2

High quality, actionable threat intelligence is key to the success of SOC operations. It enables SOC analysts to quickly filter out false alarms, speed up triage, and simplify incident analysis. In this video, learn how your SOC team can leverage FortiSOAR 7.2 Threat Intel Management framework to manage a myriad of threat feeds, to create, consume, and share actionable threat intelligence to improve threat detection, and to automate incident investigations.

Watch Now
video threat intel management fortisoar

Features and Benefits

Incident Management

Enterprise-grade customizable incident management enables SOC analysts to efficiently investigate alerts and better understand, review, and manage incidents

Automated Workflows

Leverage the most advanced playbook engine to create workflows within the product and integrate into existing enterprise tools. 200+ playbooks enable teams to easily onboard

FortiSOAR for MSSPs

Create a unique managed security service provider (MSSP)-enabled customer centric dashboards, workflows, and views to enable easy security operations management across customer segments  

SOC Dashboards and Reports

A built-in advanced visual dashboard enables customers to easily create dashboards specific to a role within security operations 

Partner Connectors

Integrate existing enterprise security solutions. FortiSOAR comes with 450+ partner connectors to existing vendors across SIEM, network security, endpoint, cloud, and more

Queue Management

Built-in queue management handles automatic work assignments across multiple queues and teams within the SOC 

Use Cases

Protect hybrid, multi-cloud

Unified Incident Response Management

Centralize security processes to orchestrate, automate, and respond to threats using existing tools for real-time responses at machine speed.

icon segment prevent lateral spread

Alert Triage Automation

Dynamically detect false positives with prioritization powered by artificial intelligence. Automatically group similar alerts and incidents into a consolidated timeline for investigations, which helps reduce alert fatigue and missed threats.

 

icon secure hybrid multi cloud

SOC Optimization

Optimize the SOC using out-of-the-box or tailored FortiSOAR dashboards to monitor security operations KPIs, identify vulnerabilities, and automate processes.

 

icon secure network edges

SOC Cross-Collaboration

Expedite remediation and improve team and cross-functional collaboration by connecting analysts to critical information and other teams and stakeholders for full end-to-end control and visibility.

FortiSOAR Features and Specifications

FortiSOAR is a purpose-built product for the modern SOC. With dedicated SOC Queue Management, OOB Vulnerability management, OOB Asset Management, Indicator Repository, Enterprise grade Reporting, SLA Tracking and more.

FortiSOAR is available in VM option only.

View by:

  • Incident Management
  • Crisis Management
  • Mobile Application
  • Automated Workflows
  • Connectors
  • For MSSPs
  • Dynamic Dashboards
  • Reporting
  • Queue Management
web icon fortisoar incident management 1

Better Understand Data with an Intuitive Interface

FortiSOAR facilitates the efficient investigation of alerts, so security analysts can better understand, review, manage, and act on data.

  • Manage alerts and incident listings in a grid view that can be filtered
  • Add mini-dashboards to each grid to gain visibility and understand larger trends
  • Define new modules and customize their fields, views, and permissions
  • Define custom views, data models, fields, and grids with the visual layout editor
web icon fortisoar incident management 2

An Enterprise Role-based Incident Management Solution

With robust role-based access control, FortiSOAR can manage sensitive data in accordance with SOC policies and guidelines.

  • Create custom roles and team hierarchies
  • Define field-level role permissions with various roles
  • Control data visibility and encryption with multiple role-based views
  • Configure custom views and page layouts using the visual designer
web icon fortisoar incident management 3

Flexible Configuration

FortiSOAR can define new modules, such as custom fields, views, and permissions. Security teams can configure it to the specific requirements of their environment.

  • Create custom modules to define fields as needed, such as a module to store permitted IPs for DevOps to review
  • Use the visual layout builder to define custom views and dashboards
  • Add related fields and cross-link module fields for easier analyst reviews
web icon fortisoar incident war room

Incident War Room

The Incident War Room in FortiSOAR is designed for fully integrated crisis management. It pulls together the components an organization needs during a crisis situation into one unified location, so teams can strategize and assemble a strong response in just minutes.

  • Work with unified dashboards with incident-related metrics, including time lapsed, impacted assets, threat types, and more
  • Communicate in real-time with executives, employees, and critical departments such as HR, legal, and PR
  • Coordinate with external vendors to understand the appropriate remediation steps
  • Facilitate coordination of actions and approvals from a user’s device with mobile support
web icon fortisoar mobile application

Notifications, Approvals, and Monitoring

With the FortiSOAR mobile application, analysts can manage operational and critical tasks in real-time from their mobile device. The app is available on iOS and on Android through the FortiExplorer application.

  • Monitor alert queues and take rapid actions
  • View and investigate alerts
  • Manage tasks
  • Run playbooks
  • Control the user interface through the main platform and perform role-based access control
web icon fortisoar automated workflow 1

Visual Playbook Builder

Create smart automated workflows with ease of product integrations

  • Drag and drop interface allows stringing multiple steps together
  • Plug multiple integrations into workflows
  • Zoom and pan to allow ease of navigation within the designer
  • Intuitive design
web icon fortisoar automated workflow 2

Create Multiple Collections

Manage playbooks better by grouping them into logical folders.

  • Ability to add multiple playbook collections
  • Import playbooks and playbook collections
  • Export collections together with dependent playbooks
web icon fortisoar automated workflow 3

Playbook Prioritization

Ensure vital playbooks are never deprioritized because of less critical automation tasks

  • Assign a normal, medium, or high priority level to each playbook
web icon fortisoar connector 1

Connectors

FortiSOAR integrates with an organization’s entire security stack with a single pane of glass. The connector repository provides unlimited access to hundreds of products from SIEMs and endpoints to threat intelligence platforms. Security teams can streamline their incident response process while maximizing ROI.

web icon fortisoar connectors

Connector Builder Wizard

Create and test connectors seamlessly using the wizard-driven connector builder, which provides a guided experience. Adapt FortiSOAR to your SOC with fast, flexible configurations

  • Build, test, or edit connectors within the product user interface
  • Use guided templates and open-canvas experiences
web icon fortisoar platform mssp 1

Unified Console Built on Enterprise Multi-tenancy Architecture

Get a complete overview of all customers and tenants using the unified FortiSOAR master console.

  • Filter views by customers to understand their current state
  • Assign and adhere to the roles and permissions assigned to each tenant
  • Create customer-specific alert and incident views
  • Load balance usage with the robust and scalable architecture
web icon fortisoar platform mssp 2

Handle Unique Customer Environments and Product Diversity

Easily manage customer environments with multiple third-party solutions.

  • Remotely run automation workflows on a specified tenant
  • Communicate and receive automation status and logs from the tenant
  • Limit data flow to the master console based on customer preference.

See the full list of FortiSOAR’s connectors here!

web icon fortisoar custom role based dashboards 1

Insight from Multiple Perspectives

FortiSOAR offers dashboards for better decision making.

  • Choose from a number of predefined dashboards and multiple views
  • Export and import dashboard templates
  • Export dashboard views as PDFs
web icon fortisoar custom role based dashboards 2

Visual Layout Builder

With an intuitive drag-and-drop interface, FortiSOAR has the ability to define page layouts, fields, dropdowns, and pick lists.

  • Create dashboard templates or pages with the drag-and-drop visual layout builder
  • Use multiple widgets such as charts, listings, counters, and performance metrics to create rich views and data models
  • Use formatting options such as colors, labels, format, and configurations
web icon fortisoar widget library

Extensive Widget Library

FortiSOAR has an library of widgets that can be used to enhance dashboards

  • Download and install new widgets
  • Use a standard code editor interface for editing or customizing widgets
  • Create new widgets using the widget builder interface and implement them across dashboards, reports, and record views
web icon fortisoar custom role based dashboards 3

Granular Role-Based Access Control

Control visibility by segmenting data and duties by assigning roles to each dashboard

  • Assign roles and permissions to dashboard templates
  • Set selected dashboards as the default for all system users
  • Create user-specific dashboards and reports
web icon fortisoar reporting 1

Report Repository

Get reports set up quickly using the FortiSOAR report library, which contains many commonly used reports.

  • Access ready-to-use reports such as incident closures, alert closures, and indicators of compromise summaries
  • Access imported reports that are integrated with the support portal
  • Customize FortiSOAR reports from the repository for organization-specific metrics
  • Export reports in CSV and PDF formats
web icon fortisoar reporting 2

Role-based Reporting

Roles can be assigned to specific reporting templates
  • Make selected reports accessible to all system users
  • Create user-specific or incident-specific reports 
web icon fortisoar queue management 1

Create Dedicated Queues

Using the built-in queue management, you can set up automatic work assignments across layers of queues and teams.

  • Create multiple queues across various teams
  • Add multiple team members to each queue
  • Define logical rules to automatically assign work to a specific member or team
  • Optionally, add work tasks manually to any queue
web icon fortisoar queue management 2

Manage SOC Shift Changes with Ease

If your SOC has multiple work shifts, you can manage changes easily

  • Create multiple queues for different shifts
  • Define rules for assigning alerts and incidents based on the time zone
  • Obtain snapshots of a shift’s queue to better understand task status
  • Optionally, add manual tasks to any queue or team member

Our Customers Emphasize the Value of FortiSOAR (Formerly CyberSponse) directly and in Gartner Peer Insights Reviews

Many enterprise customers realize the power and effectiveness of FortiSOAR (formerly CyberSponse) and have provided positive feedback directly and on Gartner Peer Insights. Read what end users say about FortiSOAR.

 

★★★★★
"FortiSOAR has advanced our threat detection and response capabilities by five years"

Shawn Waldman, CEO of Secure Cyber Defense

"I have almost 30 years in IT, I have used all of Fortinet’s competitors over the course of my career, and Fortinet security is just the best. Now, I feel like FortiSOAR has advanced our threat detection and response capabilities by five years. It gives us this tremendous Swiss Army knife of functionality that we are excited to capitalize on."

★★★★★
"FortiSOAR, played a critical role in the company’s revenue growth"

Cybersecurity Team Executive, in the Finance industry >$140 billion in sales

"The timely reports the team generates through FortiSOAR have played a critical role in the company’s revenue growth, as executives are now able to track their desired metrics in greater detail."

★★★★★
"Rapid Feature Enrichment Based On Customer Feedback"

Manager, Information Risk in the Healthcare Industry, $3B – 10B company 

"CyOPS provided a completely customizable SOAR solution. Due to it's flexibility, my security operations center was able to implement a single pane of glass for visibility to alerts from over 30 different platforms. Full triage of events is made possible with manual and automatic enrichment from numerous external open source and paid threat intelligence platforms. Our feedback to improvements and enhancement to the CyOPs portal is consumed, evaluated and rapidly integrated into regular updates to the platform."


★★★★★
"Cyops is the most flexible security incident automation tool"

Platform Architect in the Services Industry, $3B – 10B company

"Cyops is one of the most flexible product, I have come across. We have achieved 99% of our highly customized requirements from ticketing to reporting and automation to orchestration."


★★★★★
"Very flexible tool that allows to automate complex tasks in a matter of hours"

Senior Cyber Security Analyst in the Healthcare Industry, $10B – 30B company

"SOAR platforms as a business, with most players being less than 10 years old, is definitely still in its infancy, but CyOps is a hypergrowing child."


★★★★★
"Implementation was easy and fast, and user friendly with live support"

Cloud Security Specialist in the Services Industry, <$50M company

"Very professional company, with great support service. The tool is self covers all the requirements of a SOAR platform and enables organization and MSSPs to move forwarded with the next generation SOC."


★★★★★
"Great Tool For SOC Orchestration And Automation"

Group Head of Information Security Operations in the Retail Industry, $1B – 3B company

"The Product is great for integrations with various SOC used tools. Using this tool for Automation of mundane tasks means the skills resources can focus on genuine incidents. Response and SLA tracking means we can judge the effectiveness of current orchestration."

 

★★★★★
"Great Blank Slate of a product."

Knowledge Specialist, $250M – 500M company

"The Support from this company is second to none - they are available when needed via multiple channels and support routine and emergency patching/repairs. the product development team are often implementing new features and are very responsive to feature requests."




Gartner Peer Insights reviews constitute the subjective opinions of individual end users based on their own experiences, and do not represent the views of Gartner or its affiliates.   

Effective best-in-class security requires timely, global intelligence combined with fast decision-making and response across all critical vectors. Fortinet offers proven and one of the most certified artificial intelligence-driven protection available in the market today powered by FortiGuard Labs.

For customers implementing FortiGates as NGFWs, here’s how FortiGuard subscriptions can help:

  • Application Control: Fortinet boasts one of the largest applications database to safeguard your organization from risky application and allows you visibility and control of applications running in your network
  • Intrusion Prevention: Stop unwanted attempts to access your network that target vulnerabilities and configuration gaps. We block over 10 million intrusion attempts per minute.
  • Advanced Threats: Stop malicious files and payloads moving into your network with FortiGuard’s leading advanced malware, antivirus, and sandboxing capabilities. We stop over 35,000 malicious files per minute.
Application Control
Antivirus
FortiSandbox Cloud
Intrusion Prevention
IP Reputation & Anti-botnet Security
Security Rating Service
Web Filtering
Indicators of Compromise
FortiGuard

FortiGuard

Industry Leading AI-driven Protection and Intelligence

FortiCare

FortiCare

World-class Global Support and Professional Services

Mission critical security-driven networks deserve the best support available.  FortiCare provides 24x7 support options to help keep your FortiGates up and running.  We also have services to help you recover in the rare moments when bigger bumps seem to come out of nowhere such as our Premium RMA options with 4-hour replacements. 

Want faster resolution?  Choose our Advanced Support option.

Need help to get going with new deployments and integrations?  FortiCare can do it, too, with Professional Services and Resident Engineers!  Contact Sales to find out how.

24x7 Support

Delivering world-class security is not all that we do! We can help our customers lower their total cost of ownership (TCO) and simplify day-to-day security operations through our FortiOps services, which provide cloud-based management, visibility, and automation across their Fortinet Security Fabric.

fortiops
fortiops
FortiManager Cloud
FortiOps

FortiOps

Cloud-based Management, Visibility, and Operations

View by:

  • Data Sheets
  • eBooks
  • Solution Guides
  • Case Studies
  • Webinars and Videos
  • Fuse Community

Data Sheets

FortiSOAR Ordering Guide

FortiSOAR Ordering Guide

FortiSOAR Data Sheet

FortiSOAR Datasheet

eBooks

Improve Security Operations Across the Security Fabric

The Security Operations Center (SOC) Automation Model is designed to help security teams identify appropriate Fortinet security products for their SOC, based on their existing investment in people ...

SOAR Through Implementation

Security operations teams face the challenge of maintaining the longevity of their security infrastructures against the evolving threat landscape and operational complexities.

Solution Guides

Amplify Security Operations Efforts and Accelerate Response With FortiSOAR

The evolving threat landscape and organizational complexities are creating obstacles for security operations center (SOC) teams and potentially leaving organizations exposed to attack.

Case Studies

Regional Hospital System

FortiDeceptor Delivers Breach Protection for Critical Healthcare Services

East Stroudsburg Area School District

Pennsylvanian School District Improves Network Visibility and Control Through the Fortinet Security Fabric

Acxiom

Data and Technology Company Protects Customer Data—and Insights into Customer Behavior—with Fortinet

Spring Branch ISD

How a Lean Team Is Keeping K-12 Students and Staff Secure

n11.com

Turkey’s Leading E-Commerce Platform Offers Flexible and Scalable Services With the Fortinet Security Fabric

Webinars and Videos

FortiSOAR Overview | Security Orchestration Automation and Response

FortiSOAR™ is a holistic and enterprise-built security orchestration and security automation workbench that empowers security operation teams. FortiSOAR™ increases a team’s effectiveness by ...

Identify, Verify, Contain: Reducing Cyber Risk in a Year of High-Profile Cyber-Attacks

In light of modern attack methodologies, learn about the importance of effective and efficient security operations that can quickly identify, verify and contain security incidents before they cause ...

SOAR Your MSSP

Join this webinar to learn how a SOAR solution can help managed security service providers (MSSPs) deal with the overwhelming number of alerts generated across client networks by integrating security ...

Fuse Community


FortiSOAR Alliance Partners

FortiSOAR provides integration with many leading IT & security vendors as part of the Fortinet Security Fabric.  Please note that over the next few months we will update the content to incorporate the integrations with the partners.

Amazon Web Services
Amazon Web Services

AWS services are trusted by more than a million active customers around the world – including the fastest growing startups, largest enterprises, and leading government agencies – to power their infrastructures, make them more agile, and lower costs.

Learn more on the Fortinet-AWS alliance

Resources
Functionalities
Cloud
Fortinet Fabric Ready Fabric Connector DevOps
Anomali
Anomali

Anomali delivers high-fidelity threat intelligence from diverse sources to Fortinet, providing the contextualized threat intelligence and triggers necessary to prioritize and initiate an incident response, and when paired with event data, allowing your SOC analysts to focus on the real threats, rather than false positives.

Functionalities
Threat Intelligence
Fortinet Fabric Ready
Attivo Networks
Attivo Networks

Attivo Networks is an award-winning innovator in cyber security defense. As the leader in deception-based threat detection technology, Attivo empowers continuous threat management using dynamic deceptions for the real-time detection, analysis, and accelerated response to cyber incidents.

Resources
Functionalities
Endpoint Security
Fortinet Fabric Ready
Axonius
Axonius

Axonius is the cybersecurity asset management platform that gives organizations a comprehensive asset inventory, uncovers security coverage gaps, and automatically enforces security policies. Together with Fortinet, customers can analyze all assets on their network and automatically enforce policies when assets deviate from policies.

Resources
Functionalities
Security Operations
Fortinet Fabric Ready
Braintrace
Braintrace

Braintrace, a leader in offering next-generation cybersecurity products and services, understands that data security and privacy are paramount. To this end, Braintrace focuses its efforts on detecting threats inside encrypted traffic. Requiring only a minimal set of datapoints, DragonflyNTA integrates with Fortinet products to identify network threats with real-time analytics.

Functionalities
Security Operations
Cisco
Cisco

Cisco is the worldwide leader in IT that helps companies seize the opportunities of tomorrow by proving that amazing things can happen when you connect the previously unconnected.

Resources
Functionalities
Orchestration, SDN-NFV & Virtualization
Learn More
CrowdStrike, Inc.
CrowdStrike, Inc.

CrowdStrike has redefined security with the world’s most advanced cloud-native platform for protecting critical areas of enterprise risk — endpoints and cloud workloads, identity, and data.

Functionalities
Cloud, Endpoint Security
Fortinet Fabric Ready
CyberArk
CyberArk

CyberArk is the global leader in privileged account security, a critical layer of IT security to protect data, infrastructure and assets across the enterprise, in the cloud and throughout the DevOps pipeline. CyberArk delivers the industry’s most complete solution to reduce risk created by privileged credentials and secrets.

Resources
Functionalities
Identity Management
Fortinet Fabric Ready
Cyberhaven
Cyberhaven

Cyberhaven automates data loss prevention with real-time surveillance of data movement and full context reporting of user actions to detect and respond to data leaks with 100% accuracy. Together with Fortinet, customers can automatically identify and alert on data leaks.

Functionalities
Data Security
Fortinet Fabric Ready
Darktrace
Darktrace

Darktrace is the global leader in cyber AI with its Immune System technology, leveraging AI to fight threats across IoT, operational technology, cloud and SaaS platforms, email applications, and on-premise or remote networks. Together with Fortinet, Immune System technology provides unified and adaptive cloud-native security.

Resources
Functionalities
Cloud, Security Operations
Fortinet Fabric Ready
Devo
Devo

Devo, the cloud-native logging and security analytics company, enables security and operations teams to realize the full potential of all their data to empower bold, confident action when it matters most. The integration with Fortinet and the Devo Platform enables your security and operations teams to achieve superior visibility, data analytics, and cybersecurity capabilities from SIEM, to compliance, fraud detection, and more.

Functionalities
Security Operations
Fortinet Fabric Ready
Digital Shadows
Digital Shadows

Digital Shadows provides Threat Intelligence that monitors and manages an organization’s digital risk across the widest range of data sources within the visible, deep, and dark web. With playbooks that leverage data from Digital Shadows, you can reduce investigation times. With data from inside your networks linked with data from the open, deep, and dark web, SOC teams gain the critical ability to quickly determine if an incident is a "one-off" versus part of a larger campaign.

Functionalities
Threat Intelligence, Security Operations
Fortinet Fabric Ready
EclecticIQ
EclecticIQ

EclecticIQ Platform is a Threat Intelligence Platform (TIP) that empowers threat analysts to perform faster, better, and deeper investigations while disseminating intelligence at machine-speed. EclecticIQ Platform connects and interprets intelligence data from open sources, commercial suppliers and industry partnerships.

Functionalities
Threat Intelligence
Fortinet Fabric Ready
Elastic
Elastic

Elastic Security equips security teams with best-in-class platforms for prevention, detection, and response to stop threats quickly at cloud scale. Together with Fortinet, data can be easily onboarded to Elastic Security and leveraged to enable analytics across years of data, automation of key processes, and correlation of disparate data from a range of sources. 

Functionalities
Security Operations, Endpoint Security
Fortinet Fabric Ready
ForeScout Technologies
ForeScout Technologies

ForeScout Technologies is transforming security through visibility. ForeScout offers a highly scalable, heterogeneous platform that provides Global 2000 enterprises and government agencies with agentless visibility and control of traditional and non-traditional devices, including IoT devices, the instant they connect to the network.

Resources
Functionalities
Operational Technology, Internet of Things
Fortinet Fabric Ready
Gigamon
Gigamon

Gigamon provides active visibility into physical and virtual network traffic, enabling stronger security, and superior performance.

Resources
Functionalities
Networking
Fortinet Fabric Ready
GreyNoise
GreyNoise

GreyNoise tells security analysts what not to worry about. We collect, analyze and label data on IPs that saturate security tools with noise. This unique perspective helps analysts confidently ignore irrelevant or harmless activity, creating more time to uncover and investigate true threats.

Resources
Functionalities
Threat Intelligence
Fortinet Fabric Ready
Guardicore
Guardicore

Guardicore solutions provide a simpler, faster way to guarantee persistent and consistent security — for any application, in any IT environment. Together with Fortinet Guardicore provides visibility and control for hybrid clouds and data centers.

Resources
Functionalities
Cloud
Fortinet Fabric Ready Fabric Connector
IBM
IBM

IBM Security offers one of the most advanced and integrated portfolios of enterprise security products and services. The portfolio enables organizations to effectively manage risk and defend against emerging threats.

Resources
Functionalities
Security Operations, Cloud, Vulnerability Management
Learn More
InfoBlox
InfoBlox

Infoblox is leading the way to next-level DDI with its Secure Cloud-Managed Network Services. Infoblox brings next-level security, reliability and automation to cloud and hybrid systems, setting customers on a path to a single pane of glass for network management. Infoblox is a recognized leader with 50 percent market share comprised of 8,000 customers, including 350 of the Fortune 500. 

Resources
Functionalities
Networking
Fortinet Fabric Ready
Infocyte
Infocyte

Infocyte is a recognized leader in proactive detection and incident response. Developed by U.S. Air Force cybersecurity officers, Infocyte’s managed detection and response platform helps security teams detect and respond to vulnerabilities and threats within their customers’ endpoints, data centers, and cloud environments. Together with Fortinet, Infocyte streamlines threat and vulnerability detection, investigation, and response initiatives, improving efficiency and reducing time to detect and respond

Functionalities
Endpoint Security
Fortinet Fabric Ready
Intezer ltd.
Intezer ltd.

Intezer has created the world's first cyber immune system against malicious code. Our technology is helping companies detect and respond to modern cloud attacks, accelerate malware analysis and DFIR. Combining Intezer Analyze advanced malware investigation platform and Fortinet's automation capabilities to help organization properly handle with the alert fatigue, get meaningful context and act fast.

Functionalities
Threat Intelligence
Fortinet Fabric Ready
Micro Focus
Micro Focus

Micro Focus is a global software company with 40 years of experience in delivering and supporting enterprise software solutions that help customers innovate faster with lower risk. Our portfolio enables our 20,000 customers to build, operate and secure the applications and IT systems that meet the challenges of change. We are a global software company, committed to enabling customers to both embrace the latest technologies and maximize the value of their IT investments. Everything we do is based on a simple idea: the fastest way to get results from new technology investments is to build on what you have–in essence, bridging the old and the new.

Resources
Functionalities
Vulnerability Management, Security Operations
Fortinet Fabric Ready
Microsoft Azure
Microsoft Azure

Microsoft is the leading platform and productivity company for the mobile-first, cloud-first world, and its mission is to empower every person and every organization on the planet to achieve more.

Resources
Functionalities
Identity Management, Cloud, Unified Communications
Learn More
Mimecast
Mimecast

Mimecast is a leading cybersecurity provider that helps tens of thousands of organizations worldwide make email safer, restore trust and strengthen cyber resilience. As a 100% cloud suite, Mimecast integrates fully with Microsoft 365, Exchange and Outlook for enhanced email security and targeted threat protection.

Functionalities
Cloud
Fortinet Fabric Ready
Nutanix
Nutanix

Nutanix makes infrastructure invisible, elevating IT to focus on the applications and services that power their business. The Nutanix enterprise cloud platform leverages web-scale engineering and consumer-grade design to natively converge compute, virtualization and storage into a resilient, software-defined solution that delivers any application at any scale.

Resources
Functionalities
SDN-NFV & Virtualization
Fortinet Fabric Ready
Okta
Okta

Okta, the leader in identity and access management, works with best of breed technology partners like Fortinet to enable seamless and secure Zero Trust access.

Functionalities
Identity Management
Fortinet Fabric Ready
Qualys
Qualys

Qualys, Inc. is a pioneer and leading provider of cloud-based security and compliance solutions with over 8,800 customers in more than 100 countries, including a majority of each of the Forbes Global 100 and Fortune 100.

Resources
Functionalities
Vulnerability Management
Fortinet Fabric Ready
Rapid7
Rapid7

Rapid7 is advancing security with visibility, analytics, and automation delivered through our Insight cloud. Our solutions simplify the complex, allowing security teams to work more effectively with IT and development to reduce vulnerabilities, monitor for malicious behavior, investigate and shut down attacks, and automate routine tasks.

Resources
Functionalities
Vulnerability Management
Fortinet Fabric Ready
Red Hat Ansible
Red Hat Ansible

The Fortinet–Red Hat partnership enables innovative and high-performance security solutions that can be easily managed and scaled with automation to reduce complexity. Integrations between multiple Fortinet and Red Hat solutions, including Ansible, Openstack and Openshift, provide options to secure applications, workloads, networks, and clouds that can adapt to evolving business needs.

Resources
Functionalities
Cloud, Automation
Fortinet Fabric Ready DevOps
SEKOIA.IO
SEKOIA.IO

SEKOIA.IO is a European cybersecurity SAAS company, whose mission is to develop the best protection capabilities against cyber attacks. The company created in France provides modern technologies, proven in the field, to enable its major account customers and cybersecurity service providers to neutralize cyber threats before they have consequences. The seamless integration between FortiSOAR and SEKOIA.IO XDR provides the best tooling to the Fortinet/SEKOIA.IO customers who wants to manage their security operations efficiently.

Functionalities
Automation, Threat Intelligence, Security Operations
Fortinet Fabric Ready
SentinelOne
SentinelOne

SentinelOne is shaping the future of endpoint security with an integrated platform that unifies the detection, prevention and remediation of threats initiated by nation states, terrorists, and organized crime. SentinelOne’s unique approach is based on deep inspection of all system processes combined with innovative machine learning to quickly isolate malicious behaviors, protecting devices against advanced, targeted threats in real time.

Resources
Functionalities
Endpoint Security
Fortinet Fabric Ready
ServiceNow
ServiceNow

ServiceNow makes work better. Our applications automate, predict, digitize and optimize business processes across IT, Customer Service, Security Operations, HR and more, for a better enterprise experience.

Resources
Functionalities
Security Operations
Fortinet Fabric Ready Fabric Connector
Skybox Security
Skybox Security

Skybox arms security leaders with a powerful set of integrated security solutions that give unprecedented visibility of the attack surface and key Indicators of Exposure (IOEs), such as exploitable attack vectors, hot spots of vulnerabilities, network security misconfigurations, and risky firewall access rules.

Resources
Functionalities
Network Operations
Fortinet Fabric Ready
Splunk
Splunk

Splunk Inc. is the market-leading platform that powers Operational Intelligence.

Resources
Functionalities
Security Operations
Fortinet Fabric Ready
Sumo Logic
Sumo Logic

Sumo Logic is a pioneer of continuous intelligence, a new category of software, which enables organizations of all sizes to address the data challenges and opportunities presented by digital transformation, modern applications and cloud computing. In addition to supporting a wide spectrum of security use cases, including compliance, Sumo Logic's Cloud SIEM integration with FortiSOAR enables security analysts to streamline workflows and automatically triage alerts—increasing human efficiencies and enabling analysts to focus on higher-value security functions.

Functionalities
Security Operations
Fortinet Fabric Ready
Symantec
Symantec

Symantec Corporation (NASDAQ:SYMC), the world’s leading cyber security company, helps organizations, governments and people secure their most important data wherever it lives. The partnership with Fortinet combines Symantec’s endpoint protection leadership with Fortinet’s best-in-class network security and Fabric integration to deliver unparalleled security protection.

Resources
Functionalities
Cloud, Endpoint Security
Fortinet Fabric Ready Fabric Connector
Tanium
Tanium

Tanium offers a proven platform for endpoint visibility and control that transforms how organizations manage and secure their computing devices with unparalleled speed and agility.

Functionalities
Endpoint Security
Fortinet Fabric Ready
Tenable
Tenable

Tenable®, Inc. is the Cyber Exposure company. Over 30,000 organizations around the globe rely on Tenable to understand and reduce cyber risk. As the creator of Nessus®, Tenable extended its expertise in vulnerabilities to deliver the world’s first platform to see and secure any digital asset on any computing platform.

Resources
Functionalities
Operational Technology, Endpoint Security
Fortinet Fabric Ready
ThreatConnect
ThreatConnect

Designed by analysts but built for the entire team, ThreatConnect’s intelligence-driven security operations platform is the only solution available today with intelligence, automation, analytics, and workflows in a single platform.

Resources
Functionalities
Threat Intelligence
Fortinet Fabric Ready
ThreatQuotient
ThreatQuotient

ThreatQuotient’s mission is to improve the efficiency and effectiveness of security operations through a threat-centric platform. Together with Fortinet, network defenders can make intelligence actionable by exporting data from ThreatQ into FortiGate firewalls to provide protection on the wire.

Functionalities
Threat Intelligence
Fortinet Fabric Ready
Trellix
Trellix

Trellix brings you a living XDR architecture that adapts at the speed of threat actors and delivers advanced cyber threat Intelligence. Trellix and Fortinet's integrated solution secures distributed environments using the latest XDR tools to deliver faster detection and response time for optimum security outcomes.

Resources
Functionalities
Threat Intelligence, Endpoint Security
Fortinet Fabric Ready
Trend Micro
Trend Micro

Trend Micro, a leader in cloud, endpoint, and email security, has partnered with Fortinet to help our mutual customers detect and respond to attacks more effectively throughout their organizations.

Resources
Functionalities
Endpoint Security
Fortinet Fabric Ready
Tufin
Tufin

Tufin leads the Security Policy Orchestration market, enabling enterprises to centrally manage, visualize, and control security policies across hybrid cloud and physical network environments.

Resources
Functionalities
Network Operations
Fortinet Fabric Ready
Vectra AI
Vectra AI

Vectra AI is the leading Cloud & Network Detection and Response (NDR) for your network, cloud, datacenter and SaaS applications. The Vectra platform blends security research with data science. Together with Fortinet, Vectra will automatically find and stop advanced attacks before they cause damage.

Resources
Functionalities
Cloud, Security Operations
Fortinet Fabric Ready
VMware
VMware

VMware is a global leader in cloud infrastructure and business mobility.

Resources
Functionalities
Cloud, SDN-NFV & Virtualization, Endpoint Security
Fortinet Fabric Ready Fabric Connector DevOps

FortiSOAR is a purpose-built product for the modern SOC. With dedicated SOC Queue Management, OOB Vulnerability management, OOB Asset Management, Indicator Repository, Enterprise grade Reporting, SLA Tracking and more.

NOC

Security Operations

To keep up with the volume, sophistication, and speed of today’s cyber threats, you need AI-driven security operations that can function at machine speed. Fortinet Security Operations enables advanced threat detection, response capabilities, centralized security monitoring, and optimization to easily be added across the entire Fortinet Security Fabric.

Find solution guides, eBooks, data sheets, analyst reports, and more. Go to Resource Center >

Learn more about FortiSOAR Contact Us >

FortiSOAR News

Quick Links

links image 1 139x100

Free Product Demo

Explore key features and capabilities, and experience user interfaces.
resource center icon 139X159

Resource Center

Download from a wide range of educational material and documents.
links image 2 139x121

Free Trials

Test our products and solutions.
contact sales icon 139x85

Contact Sales

Have a question? We're here to help.
Also of Interest