FortiAnalyzer is Fortinet's security operations and log management platform. It collects telemetry from networks, endpoints and cloud environments, normalises and enriches it in a central data lake, and serves as the central data store of the Fortinet Security Fabric. It offers dashboards, threat detection using FortiGuard Labs intelligence, anomaly detection and correlation mapped to MITRE ATT&CK, and SIEM, SOAR and XDR functions with playbooks. Fortinet delivers it as a hardware appliance, a virtual machine or a cloud service.
Fortinet is a publicly listed US company headquartered in Sunnyvale, California. With an appliance or virtual machine, FortiAnalyzer runs on your own infrastructure, so you decide where logs are kept. With FortiAnalyzer Cloud you choose a region at deployment; Fortinet documentation lists Frankfurt as an example, but regions can change, and an instance cannot be redeployed in another region without being recreated. For European organisations, a US parent company remains relevant when assessing exposure to the CLOUD Act.