VIDEO HERE
Understanding the risk.
In June 2026, a large-scale credential compromise campaign affecting internet-facing Fortinet devices was disclosed. Researchers reported that administrator and VPN credentials linked to more than 73,000 Fortinet devices may have been exposed and circulating amongst threat actors. According to Fortinet, this activity was linked to previously compromised credentials rather than a newly disclosed FortiOS vulnerability.
Why it matters?
FortiBleed demonstrated that password complexity alone is no longer enough to protect critical infrastructure.
If privileged credentials are exposed, organisations need controls that limit what attackers can do next, provide visibility into privileged activity and ensure security policies remain governed and compliant.
Why partners should have this conversation NOW!
FortiBleed may have been the trigger, but the challenge is far broader than a single incident, and the lessons extend far beyond a single firewall platform.
Every Fortinet customer relies on privileged credentials and firewall policies to secure critical systems. This creates a natural opportunity to engage customers in conversations around access governance, policy management, compliance readiness and long-term cyber resilience. Rather than leading with the breach itself, lead with the question:
“If a credential was exposed tomorrow, what controls would stop it being used?”

This isn’t about replacing Fortinet.
Most organisations are happy with their Fortinet investment, and they should be. The challenge highlighted by FortiBleed isn’t replacing firewalls. Its’ strengthening the controls around them.
Our vendors, AlgoSec and Delinea address these challenges from different angles, helping organisations build a more resilient security posture around their Fortinet environment. Explore the two solutions below:
Two critical questions emerged from this incident:
“Are our firewall policies secure, compliant and properly governed?“
“If privileged credentials were exposed tomorrow, what would stop them being used?“

Strengthen Privileged Access with Delinea
The FortiBleed incident highlighted how exposed credentials can quickly become a security concern.
Delinea helps organisations reduce credential-based risk through password vaulting, automated credential rotation, MFA enforcement, privileged session management and just-in-time access controls.
Key Benefits:
- Secure privileged credentials within a protected vault
- Automate password rotation
- Enforce MFA for privileged access
- Remove dependency on shared administrator passwords
- Implement just-in-time access controls
- Record and audit privileged sessions
Best suited for organisations asking: “What happens if an administrator credential is exposed?”

Secure and Govern Firewall Policy with AlgoSec
FortiGate enforces policy. AlgoSec helps organisations ensure those policies remain secure, compliant and efficient over time.
By integrating alongside Fortinet environments, AlgoSec provides visibility into firewall policies, automates governance processes and helps security teams maintain audit readiness without relying on manual reviews.
Key Benefits:
- Identify risky, unused and duplicate firewall rules
- Simplify firewall change management
- Improve compliance and audit reporting
- Reduce policy sprawl across complex environments
- Increase visibility into policy risk before changes are made
Best suited for organisations asking: “Are our firewall rules still doing exactly what they should be?”
Conclusion? Better Together
Fortinet secures the perimeter. AlgoSec helps govern the rules. Delinea helps govern the people and credentials that can change them.
Together they provide a complementary approach that strengthens a customer’s existing Fortinet investment without requiring a rip-and-replace strategy.
Download
Firewall Security
Assessment Checklist
A practical discovery tool with your customers.
Use our downloadable checklist to help uncover opportunities within your Fortinet customer base, identifying potential areas for discussion around privileged access, firewall governance, compliance and security resilience.
Found a potential gap? Bring the findings to us and we’ll help map the right solution, scope the opportunity and support the conversation with your customer.

