Fortinet bolstered exposure management capabilities in its FortiRecon platform, aligning with recent Gartner security recommendations.

The upgraded service sees deeper integration into Fortinet's AI-driven security operations center (SOC) platform, allowing for expanded attack surface monitoring, adversary‑centric dark web intelligence, and built‑in security orchestration.

Fortinet's update sees the inclusion of standard CVSS scores from the National Vulnerability Database (NVD). With NVD integration giving real-time risk context, security teams can see what vulnerabilities are currently being exploited in the wild instead of solely relying on Fortinet’s proprietary scoring.

The FortiRecon upgrade also folds in dark web surveillance, leaked credentials tracking, ransomware indicators, and at-risk vendor insights. Features like bulk indicators of compromise (IOCs) downloads and infection data, meanwhile, aim to streamline SOC workflows and boost breach detection capabilities.

On the brand protection front, Fortinet touts enhancements including detection and takedown of phishing domains, exposed code repositories, and open storage buckets.

The refreshed platform also offers automated playbooks to streamline investigation and response workflows.

“CISOs and security teams are overwhelmed by growing attack surfaces and an endless stream of unprioritized alerts,” Nirav Shah, SVP of products and solutions at Fortinet, explained in a statement. “With the latest enhancements to FortiRecon, we’re giving organizations an attacker’s eye view of their internal and external exposures, backed by AI-powered threat intelligence … real-world validation, and automated response.”

Gartner love-in and firewall on the outs

Fortinet reported that with the updates, FortiRecon aligns with the key tenets of Gartner’s continuous threat exposure management (CTEM) framework – scoping, discovery, prioritization, validation, and mobilization.

According to the research giant, organizations adopting CTEM – managing expanding attack surfaces, and solving both alert fatigue and fragmented security operations – will be three-times less likely to suffer from a breach.

The update to Fortinet's digital risk protection (DRP) offering comes after Gartner crowned the firm as a leader in secure access service edge (SASE), joining Palo Alto, Cato, and Netskope in the rankings.

Fortinet’s most recent financials saw increased demand for its SASE products, with a 22% growth in its Unified SASE offering.

ZK Research told SDxCentral that current SASE growth – alongside AI and SecOps offerings like FortiRecon – should help offset concern over long-term firewall revenue for Fortinet.

That concern saw Fortinet share prices fall more than 16% after the release of its quarterly results.