Fortinet Acquires Virtue AI as Cybersecurity Companies Race to Secure the AI Era

Artificial intelligence is changing cybersecurity from both sides.

Attackers are using AI to automate reconnaissance, vulnerability discovery and other parts of cyber operations.

Defenders are responding by developing AI-powered security systems capable of detecting and responding to threats faster.

The latest sign of this shift comes from Fortinet, which has acquired AI security company Virtue AI to strengthen its cybersecurity portfolio.

The acquisition highlights a growing trend: cybersecurity companies are increasingly treating AI security as a core market rather than a niche product category.

Why AI Security Is Becoming Important

Traditional cybersecurity was built around networks, endpoints, applications and identities.

AI introduces another layer.

Organizations now need to secure:

AI models

AI agents

Data used by models

APIs

AI applications

Model access

Agent permissions

AI-generated actions

The security challenge becomes particularly complicated when AI systems are given the ability to act autonomously.

AI Agents Create New Attack Surfaces

An AI agent can interact with software and external tools.

That makes it useful.

It also creates risk.

If an agent has access to sensitive systems, an attacker could potentially manipulate its instructions or exploit vulnerabilities in the tools it uses.

Prompt injection is one example.

A malicious webpage or document could contain instructions designed to influence an AI system.

For a normal chatbot, the result might simply be a misleading response.

For an autonomous agent, it could potentially trigger an action.

Why Fortinet Is Buying AI Security Capabilities

Fortinet's acquisition of Virtue AI reflects the increasing demand for technology designed specifically around AI-related risks.

Traditional security platforms can detect many conventional threats.

But AI systems behave differently.

Security products need to understand model interactions, AI-generated traffic, agent behavior and new forms of application risk.

This is creating opportunities for specialized startups.

Large cybersecurity companies can acquire those capabilities rather than developing every technology internally.

AI Security Is Becoming a New Market

The investment environment reinforces the trend.

Crunchbase data reported that startups operating at the intersection of AI and cybersecurity had raised $855 million across more than 150 reported seed-stage rounds during 2026, indicating strong investor interest in the category.

That suggests AI security is becoming a distinct startup ecosystem.

Entrepreneurs are building products focused on model security, AI governance, agent monitoring, data protection and automated threat detection.

Security Teams Need to Think Differently

AI security cannot simply be added to an organization's existing cybersecurity checklist.

Companies need to understand how their AI systems work.

That includes identifying:

What data does the model access?

Which tools can the agent use?

What actions can it perform?

Who can change its permissions?

How are its decisions logged?

Can the system be stopped immediately?

These questions become especially important as companies deploy AI agents in business-critical environments.

The Role of Zero Trust

Zero-trust principles are increasingly relevant to AI.

Instead of assuming that an AI agent is trustworthy because it was created internally, companies should verify its identity and restrict its permissions.

An agent should have only the access necessary to perform its assigned task.

High-risk actions should require additional authorization.

This can limit the damage caused by an agent that is compromised or behaves unexpectedly.

AI Can Also Improve Defense

The AI security story is not only about protecting AI.

AI can strengthen cybersecurity itself.

Security teams can use AI to analyze huge volumes of data, detect unusual patterns, investigate incidents and prioritize vulnerabilities.

This is becoming increasingly important because human security teams cannot manually analyze every event generated by modern infrastructure.

The Bigger Picture

Fortinet's acquisition illustrates how quickly AI security is becoming strategically important.

The cybersecurity market is moving toward a world where AI is part of almost every layer of the digital environment.

That means security companies need to protect AI.

At the same time, they need to use AI to protect everything else.

The winners may be companies that can do both.

As AI becomes more autonomous, cybersecurity is no longer simply about keeping hackers out.

It is also about ensuring that AI systems themselves remain trustworthy, controlled and secure.