Fortinet

In September 2021, Fortinet pledged to train one million people in support of President Joe Biden's call to action to address the talent shortage in American cybersecurity.

In March 2022, Fortinet announced the termination of operations in Russia. The company has stopped all sales, support, and professional services within Russia.

The same year, NetworkWorld reported that Fortinet had introduced AI and ML-based security services utilizing telemetry from its network.

In June 2025, Fortinet was added to Investor's Business Daily's Big Cap 20 list of top-rated large-cap growth stocks.

In 2017, Fortinet announced the addition of switches, access points, analyzers, sandboxes and cloud capabilities to the Security Fabric, in addition to endpoints and firewalls. Later in 2017, Fortinet created a standalone subsidiary, Fortinet Federal, to develop cybersecurity products for government agencies. Fortinet has received security effectiveness certifications through NSS Labs.

In 2019, Fortinet grew to 21,000 WAN edge customers, according to a Gartner report.

In February 2020, Fortinet released FortiAI, a threat-detection program that uses artificial intelligence. In July 2020, Fortinet launched multi-cloud SD-WAN. That year, BT Security selected Fortinet and other Threat Alliance members as Critical Partners.

Vulnerabilities and credential leaks

In September 2021, almost 500,000 login names and passwords for Fortinet VPN devices were published on a hacking forum. The credentials were allegedly scraped from devices vulnerable to a 2018 exploit (CVE-2018-13379).

In January 2025, the credentials and configuration files of over 15,000 FortiGate devices were leaked on a hacking forum. The data is believed to have been obtained from devices vulnerable to a 2022 exploit (CVE-2022–40684).

In November 2025, a critical vulnerability (CVE-2025-64446, 9.1 CVSS) became public affecting FortiWeb Web Application Firewall. The vulnerability allowed attackers to gain full control over the device by exploiting a path traversal vulnerability combined with an authentication bypass.

In June 2026, security researcher Volodymyr "Bob" Diachenko of SecurityDiscovery.com reported that he had gained access to a threat actor's infrastructure containing credentials for about 74,000 internet-facing FortiGate firewalls and VPN gateways across 194 countries, associated with 21,632 domains; the dataset was dubbed "FortiBleed". According to researchers, a Russian-speaking, financially motivated group sprayed FortiGate login endpoints with password combinations, intercepted SSL VPN authentication hashes and cracked them on a 45-GPU cluster, then used the recovered passwords to move into victims' internal networks, including Active Directory environments. Hudson Rock said the affected organizations included large corporations, government agencies and a Turkish NATO defense contractor from which classified documents had been exfiltrated. The cybersecurity firm SOCRadar later raised its estimate to 86,644 affected devices and linked the operation's infrastructure to the Lynx and INC ransomware groups. The US Cybersecurity and Infrastructure Security Agency, the UK National Cyber Security Centre and the Australian Cyber Security Centre issued advisories urging affected organizations to reset credentials and enable multi-factor authentication. Fortinet stated that the activity did not involve a new vulnerability, attributing it to the reuse of credentials from earlier incidents and to brute-force attacks against devices with weak passwords and no multi-factor authentication.

Cybersecurity research

In 2005, Fortinet created the FortiGuard Labs internal security research team.

By 2014, Fortinet had four research and development centers in Asia, as well as others in the US, Canada and France.

In March 2014, Fortinet founded the Cyber Threat Alliance (CTA) with Palo Alto Networks in order to share security threat data across vendors. It was later joined by McAfee and Symantec. In 2015, the CTA published a white paper on the CryptoWall ransomware, which detailed how attackers obtained $325 million through ransoms paid by victims to regain access to their files.

In April 2015, Fortinet provided threat intelligence to Interpol in order to help apprehend the ringleader of several online scams based in Nigeria. The scams, which resulted in compromise of business emails and CEO fraud, had cost one business over $15 million. The following year, in March 2016, Fortinet and Cisco joined NATO in a data-sharing agreement to improve their information security capabilities.

Fortinet researchers discovered a spyware that scammed victims by impersonating the IRS. Also in 2017, researchers helped identify malware, called Rootnik, and ransomware, called MacRansom, that targeted Android and MacOS systems respectively.

In 2015 Fortinet acquired Wi-Fi hardware company Meru Networks.

In June 2016, Fortinet acquired IT security, monitoring, and analytics software vendor AccelOps.

In June 2018, Fortinet acquired Bradford Networks, a maker of access control and IoT security solutions.

In October 2018, Fortinet acquired ZoneFox, a threat analytics company.

In late 2019, Fortinet acquired enSilo and CyberSponse.

In 2020, Fortinet acquired SASE cloud provider OPAQ Networks, and automated incident management company Panopta.

In March 2021, Fortinet acquired cloud and network security firm ShieldX.

In July 2021, Fortinet acquired application security company Sken.Ai to offer continuous application security testing.

In June 2024, Fortinet acquired Lacework, a data-driven cloud security company for an undisclosed amount.

In August 2024, Fortinet acquired Next DLP, a cloud based DLP provider company for an undisclosed amount.

In 2025, Fortinet acquired Everest, an Indian company focus in WIFI access points for high density environments.