CyberIndexBeta

Fortinet Endpoint Detection and Response

FortinetEnterprise Antimalware (primary)Compare with others in Enterprise Antimalware

Product

FortiEDR is Fortinet's endpoint detection and response product. It uses a lightweight agent to detect and stop breaches in real time on workstations, servers and cloud workloads. Fortinet Endpoint Detection and Response covers Android, iOS, Linux, macOS and Windows. It is recorded as supporting behavioral detection and malware detection. The stated market is Enterprise. Fortinet Endpoint Detection and Response is sold on a quoted basis rather than at a published price.

Current Version
6.2.0.1425
Product Page
fortinet.com/…/endpoint-security
Market
Enterprise
Licence
Paid
Price
Quote
Record Created
2026-08-20
Last Updated
2026-10-12

Vendor

Fortinet was founded in 2000 by the brothers Ken and Michael Xie and is one of the largest security companies in the world by units shipped — a Fortune 500 company with more than a million customers and over 17 million appliances shipped. Ken Xie had previously founded NetScreen, so the firewall lineage runs back further than the company does. FortiGate, the firewall appliance, is the centre of the business and runs FortiOS; the strategy around it is what the company calls the Fortinet Security Fabric, which is the argument that the pieces are worth more when bought together than separately. Its range is unusually wide — over 50 products, nearly all named Forti-something: FortiEndpoint (formerly FortiClient) and FortiEDR at the endpoint, FortiSandbox for detonation, FortiWeb, FortiMail, FortiAuthenticator, FortiSIEM, FortiSOAR, FortiNDR and FortiDeceptor among them. FortiGuard Labs supplies the threat intelligence the subscriptions deliver. What appears in this index is the firewall and endpoint end of that range. For a buyer, the thing to weigh is that Fortinet sells an integrated stack rather than a best-of-breed component, and its pricing and management assume you are buying more than one part of it. Vendor page →

Website
fortinet.com
Country
United States
Headquarters
Sunnyvale, United States
Year Established
2000
Customers
1M organisations
Users
17M devices protected
Revenue
$6.8B (2025)

Platforms

Androidnative
iOSnative
Linuxnative
macOSnative
Windowsnative

Target Market

Enterprise secondary

Capabilities

Malware Detectionkeynative
Ransomware ProtectionkeyNot known
Behavioral Detectionkeynative
Web ProtectionkeyNot known
Email ProtectionNot known
Host FirewallNot known
Sandbox AnalysisNot known
Cloud-Assisted ScanningNot known
Heuristic DetectionNot known
Device ControlNot known
Vulnerability ShieldingNot known
Central Management ConsoleNot known

10 of 12 not yet known — not recorded, which is not the same as not supported.

Pricing

PlanLicencePriced perBilledPrice
SummaryPrice on requestnot statedno recurring chargeQuote

Versions

  • 6.2.0.1425Linux
  • 5.2.5.0037Windows
  • 3.1.0 201macOS

The newest release each source names per platform, not every release the vendor has shipped. A release date is shown only where one is recorded.

Independent Tests

At a glance — latest result per lab test

MITRE ATT&CK Evaluations (Enterprise)

2023-09-20lab report ↗

Each bar is one lab’s own figure on that lab’s own scale. Labs test different models at different times, so the figures are not combined into one score.

MITRE ATT&CK Evaluations (Enterprise)MITRE ATT&CK Evaluations — Enterprise 2023 (Turla)2023-09-20
Technique-level detection: 82.5%Any detection: 88.1%Attack sub-steps evaluated: 143

Certifications

OESIS Framework SupportSupported1 activeSupported
OPSWAT Certified Security ApplicationGold1 activeGold

Change History

This record was created 2026-08-20. Everything below is what has changed since.

  • 2026-10-12Test result addedNew MITRE ATT&CK Evaluations (Enterprise) resultevidence
  • 2026-09-22Product updatedListed in Enterprise Antimalwareevidence
  • 2026-09-22Product updatedListed in Home Antimalwareevidence
  • 2026-09-20New versionNew version: 6.2.0.1425 (Linux)evidence
  • 2026-09-19Platform addedRuns on iOSevidence
  • 2026-09-19Platform addedRuns on Androidevidence
  • 2026-09-19Platform addedRuns on Linuxevidence
  • 2026-09-19Product updatedNo longer sold to: Consumerevidence
  • 2026-09-19Pricing plan addedPrice: price on requestevidence
  • 2026-09-09New versionNew version: 3.1.0 201 (macOS)evidence
  • 2026-09-09New versionNew version: 5.2.5.0037 (Windows)evidence
  • 2026-08-20Platform addedRuns on macOSevidence
  • 2026-08-20Certification addedCertified: OESIS Framework Support (Supported)evidence
  • 2026-08-20New versionNew version: 3.1.0 201evidence
  • 2026-08-20Capability addedBehavioral Detection: built inevidence
  • 2026-08-20Capability addedMalware Detection: built inevidence
  • 2026-08-20Pricing plan addedPrice: paidevidence
  • 2026-08-20Product updatedAlso sold to: Enterpriseevidence
  • 2026-08-20Product updatedAlso sold to: Consumerevidence
  • 2026-08-20Pricing plan addedPrice: paidevidence
  • 2026-08-20Product updatedAlso sold to: Enterpriseevidence
  • 2026-08-20Product updatedAlso sold to: Consumerevidence
  • 2026-08-20New versionNew version: 5.2.5.0037evidence
  • 2026-08-20Platform addedRuns on Windowsevidence
  • 2026-08-20Certification addedCertified: OPSWAT Certified Security Application (Gold)evidence
  • 2026-08-20Product createdNew product listedevidence
Something wrong? Suggest a correction →

May we count your visit? CyberIndex would like to use Google Analytics to see which pages are read. It sets cookies and sends your visit to Google. Decline and nothing is loaded — the site works the same either way. Privacy.