Fortinet FortiEDR

Connect Fortinet FortiEDR to collect endpoint detection & response evidence with automated compliance tests, switched on per workspace.

Connect with an API token

1. In Fortinet FortiEDR:

   1. In the FortiEDR Central Manager, go to Administration › Users.
   2. Click Add User.
   3. Fill in Username, Password and Confirm Password.
   4. Select the Read-Only role.
   5. Under the advanced options, tick Rest API so the user can call the API. Leave Custom script and Establish FortiEDR Connect sessions clear.
   6. Leave Require Two-Factor Authentication for this user unchecked, since Safeguard signs in through the API.
   7. Click Save.

   Where to find the other values:

   • Host: The address of your FortiEDR Central Manager console.
   • Organization (optional): In multi-tenant systems, the organization the user is assigned to when you add it under Administration › Users.

   Source: docs.fortinet.com, checked 2026-10-07.

   The permissions Safeguard needs: REST API, read-only.

2. On Compliance › Connectors, open Fortinet FortiEDR, click Connect, choose API token and fill in:

   Field	What to enter
   Host	Required. An address under fortiedr.com.
   Username	Required.
   Password	Required. Stored encrypted and never shown again.
   Organization (optional)	—

3. Click Connect with token.

Frameworks

Safeguard's automated tests read Fortinet FortiEDR and map to the controls below. When a test passes, the result is evidence toward each control it maps to, in every framework listed. It is evidence toward a control, not proof that the control is met on its own.

These tests are switched on per workspace by the Safeguard team.

Related

• Endpoint Detection & Response connectors
• Compliance connectors: how connecting works, card statuses and multiple accounts
• Connector setup reference: every connector in one table
• Frameworks and connectors: how connectors provide evidence for frameworks