Fortinet’s Virtue AI acquisition rebalances the agentic AI security equation

Fortinet Inc. announced plans to acquire Virtue AI Inc. on Monday, with the deal's strategic significance lying in its ability to assist businesses in addressing their primary security concern: how to secure agentic artificial intelligence. As generative AI raises new concerns such as data leakage, unauthorized use, and inaccurate outputs, agentic AI presents even greater challenges due to its complexity and the potential impact of breaches.

These systems can retrieve information, call APIs, trigger workflows, interact with applications, and increasingly function as digital employees with access credentials, permissions, and the ability to affect business processes.

Traditional security measures are insufficient for agentic AI, which operates in dynamic and continuously changing environments. Unlike conventional applications with predictable behavior and well-defined parameters, agentic AI can dynamically decide which tools to invoke, what information to retrieve, and what next steps to take based on the context it receives.

This flexibility makes agentic AI valuable but also difficult to secure, as changes in its environment, model updates, new data sources, and expanded roles can significantly alter its risk profile.

Security concerns related to agentic AI include prompt injection, excessive permissions, indirect paths to critical systems, sensitive data exposure, and rapid escalation of flawed decisions. Conventional security practices, such as point-in-time assessments, are inadequate for autonomous AI. Enterprises must adopt a continuous AI protection approach that includes validating agents before deployment, monitoring their operations, reassessing them when their model, data, tools, permissions, or roles change, and moving beyond basic guardrails at the model interface to gain visibility into agent decisions, tool calls, and outcomes.

Fortinet's acquisition of Virtue AI, which brings AI runtime protection, automated AI validation, and agentic AI security capabilities, is a strategic move that bridges the gap between traditional application security and agentic AI security. By integrating Virtue AI's expertise, Fortinet can offer a more comprehensive solution for securing the full lifecycle of autonomous AI, enabling organizations to deploy agents with confidence while establishing meaningful guardrails for their behavior.