What happened
Fortinet announced the launch of the FortiGuard Inline AI Security Service, a cloud‑based offering that extends AI‑specific inspection and policy enforcement to its FortiGate firewall platform. Built on the company’s FortiAIGate gateway and incorporating technology from the recent Virtue AI acquisition, the service can examine prompts, model outputs and tool calls for risks such as data leakage, malicious , or unauthorized autonomous‑agent actions. It supports inspection of text, images, audio, video and code, and adds data‑loss‑prevention checks for personally identifiable information. Customers can set granular permissions, budgets, spending caps and rate limits, and receive alerts when limits are approached. The service is available as a managed cloud subscription and also as a self‑hosted FortiAIGate deployment for organisations with strict privacy or sovereignty requirements. Fortinet positions the product as a way to curb “shadow AI” – unsanctioned consumer AI tools used by staff – by detecting and applying policies to such traffic.
Fortinet’s press release describes the FortiGuard Inline AI Security Service as a cloud‑delivered layer that integrates with the FortiGate firewall’s existing policy engine. The service inspects AI‑related traffic in real time, logging prompts, responses and tool calls for audit purposes. It also offers pre‑built policy libraries covering , privacy and industry‑specific regulations.
The offering builds on FortiAIGate, Fortinet’s AI security gateway, and incorporates technology from Virtue AI, a company the vendor acquired earlier in the year. This integration is intended to improve detection accuracy and performance when scanning large volumes of AI‑generated content.
Fortinet provides two deployment models: a managed cloud subscription that requires no additional hardware, and a self‑hosted FortiAIGate appliance for organisations with strict data‑sovereignty or latency requirements. Both models support granular controls such as per‑user or per‑project budgets, spending thresholds and rate limits, with alerts that trigger when usage approaches defined caps.
Source details: securitybrief.co.nz
Why it matters
The rollout marks one of the first major firewall vendors to embed generative‑AI risk controls directly into existing network infrastructure, rather than requiring a separate, standalone AI‑security appliance. By leveraging the large installed base of FortiGate firewalls, Fortinet can bring , cost‑control and audit capabilities to enterprises that are rapidly adopting large language models for customer service, software development and internal automation. The service also addresses a growing compliance concern: many data‑privacy regulations now consider AI‑generated outputs as personal data, so the ability to detect and block the exfiltration of such information is increasingly critical. Moreover, the inclusion of a self‑hosted option acknowledges the demand for on‑premises processing in regulated sectors, potentially expanding adoption among government and financial institutions that cannot move data to the public cloud.
Embedding AI security directly into firewalls reduces the operational complexity of managing separate AI‑specific tools, which can be a barrier for enterprises with limited security staffing.
The service’s ability to detect “shadow AI” helps organizations enforce corporate AI policies and mitigate the risk of unsanctioned tools that could expose sensitive data or introduce malicious behavior.
By supporting inspection of multiple media types (text, image, audio, video, code), Fortinet addresses a broader attack surface than solutions that focus solely on text‑based prompts.
The self‑hosted option aligns with emerging regulatory expectations that data processing for AI must sometimes remain on‑premises, making the service viable for sectors such as finance, healthcare and government.
Interactive Mechanism: How It Actually Works
Explore the underlying technology behind this development interactively.
crm_get_transaction(id='4092').An agent must create a draft calendar event for Tuesday at 2 p.m. Which evidence would establish the requested result?
What to watch next
Key indicators to monitor include: (1) adoption rates among existing FortiGate customers, especially in regulated industries; (2) how quickly competitors such as Check Point or Palo Alto roll out comparable AI‑inspection features; (3) any emerging standards or regulatory guidance that reference AI traffic inspection, which could drive broader market demand; and (4) feedback on the performance and false‑positive rates of the service, which will affect its credibility as a security control.
Adoption metrics released by Fortinet in quarterly earnings calls, especially any mention of revenue growth tied to the AI security service.
Competitive moves from other firewall vendors, which could lead to a rapid feature race and influence pricing or feature sets.
Regulatory developments, such as guidance from the EU or US agencies on AI data handling, that could make AI traffic inspection a compliance requirement.
Customer feedback on detection accuracy, especially regarding false positives that could disrupt legitimate AI workflows.