Fortinet has acquired Virtue AI, a pioneer in AI runtime protection and automated validation. The acquisition bolsters Fortinet’s Security for AI strategy, offering advanced tools to secure autonomous agents, mitigate prompt injections, and ensure continuous AI assurance across the enterprise lifecycle.
As organizations rapidly deploy AI applications and autonomous agents, their attack surface expands beyond traditional networks, users, endpoints, applications, and cloud workloads. It now includes prompts, models, agents, Model Context Protocol (MCP) tools, application programming interface (API) calls, and AI infrastructure. Organizations need to adopt AI with confidence, keep it secure in production, and trust it behaves as intended.
Fortinet met that need earlier this year with FortiAIGate, which safeguards large language models (LLMs) from prompt injections, data leakage, model poisoning, excessive resource consumption, and other emerging AI-specific risks. Virtue AI extends that security to AI models, applications, and agentic systems, from development through runtime, leveraging Virtue AI’s Guardian Agent abilities and key product capabilities, including:
- Agentic system red-teaming: Tests autonomous agents for exploitable weaknesses across more than 50 sandboxed environments and 14 high-stakes domains, including simulated prompt-injection and MCP-based attacks against leading agent frameworks.
- Agent protection, governance, and visibility: Provides full visibility into agents and AI tools running in their environment, discovers unsanctioned AI applications and agents, scans MCP tools and source code for hidden risks, monitors agent behavior, and blocks malicious tool calls before they act.
- Continuous AI validation: Identifies new risks across every model update and fine-tuning of policies, while generating audit-ready evidence to support security and compliance reviews. The automated red-teaming runs across hundreds of attack vectors and more than 1,000 risk categories, with multimodal testing and on-demand reporting for security, risk, and compliance teams.
- Real-time guardrails: Enforces customizable policies across text, images, video, audio, and AI-generated code to prevent harmful content, sensitive data, jailbreaks, and vulnerable code from reaching users or downstream systems.
“AI is fundamentally changing enterprise computing, and security must evolve just as quickly,” said Ken Xie, Founder, Chairman of the Board, and Chief Executive Officer at Fortinet. “Virtue AI’s technology will advance our vision for continuous AI assurance, helping customers govern and protect AI systems throughout their lifecycle while operating them confidently at enterprise scale.”
According to Gartner®, “the market for securing AI ecosystems and AI agents is rapidly expanding; products and tools are expected to expand from $2.8 billion in 2026 to $16.4 billion by 2030.”[1] Fortinet believes that anticipated market expansion reflects evolving industry demand to secure the AI era.
Customers already rely on the Fortinet AI-native Security Fabric for integrated protection across networks, endpoints, clouds, applications, and AI deployments. This acquisition complements FortiAIGate and further strengthens Fortinet’s AI runtime security capabilities with Virtue AI’s automated validation and real-time protection. Combined with coordinated enforcement and FortiGuard Labs threat intelligence, it will give organizations the confidence to secure AI systems throughout their lifecycle.
