Firetower — a Fortinet watch service by Cookies2
Be the first to know which Fortinet vulnerability affects you.
Firetower watches FortiGuard PSIRT, CISA KEV and NVD around the clock and tells you what to do. From Level 2 it knows your own firewalls, so the advice is about your devices, not about a product list.
Annual subscription, excl. VAT, invoiced in advance. Cancel up to a month before renewal.
This is what lands in your inbox
No dashboard to keep an eye on. You hear from Firetower when something affects Fortinet — and from Level 2, when it affects you.
Firetower · alert · 2026-10-28 07:42 ─────────────────────────────────────────────────── Critical FortiOS SSL-VPN · actively exploited (CISA KEV) CVE-2024-21762 · out-of-bounds write in sslvpnd Affects FortiOS 7.4.0–7.4.2, 7.2.0–7.2.6 (and older) Your FGT-HQ 7.2.5 vulnerable devices FGT-DC-A/B 7.4.4 not affected Advice Upgrade to 7.4.3 / 7.2.7 or later. Workaround: disable SSL-VPN. Sources FortiGuard PSIRT FG-IR-24-015 · CISA KEV · NVD
Climb as high as you need
Each level builds on the one below. Prices are per year, excluding VAT, invoiced in advance. An HA cluster counts as one firewall.
Lookout
Advisories and alerting on Fortinet security incidents: new CVEs, PSIRT advisories and actively exploited vulnerabilities, translated into what to do.
Watch
firewall connectedOn top of Lookout: firmware and CVE matching against your own devices, plus configuration advice based on best practices, as a periodic audit.
Firewatch
firewall connectedOn top of Watch: alerting from your logs — suspicious events, brute force, VPN abuse and policy deviations. Automatic, 24/7.
SOCaaS
firewall connectedOn top of Firewatch: Fortinet SOCaaS. The Fortinet SOC monitors your environment 24/7 and intervenes. Cookies2 handles onboarding and coordination.
SOCaaS + Incident Response
firewall connectedOn top of SOCaaS: Cookies2 incident response — we step in when something happens, with a fixed response time.
several firewalls? from 5: 10% off · from 15: 20% off · on Level 2 and 3, applied automatically
Levels 1 to 3 are advice and alerting, not management. Cookies2 changes nothing on your firewall. Level 3 alerts automatically, 24/7; we follow up on working days during office hours. 24/7 monitoring and intervention is what SOCaaS is for.
How it works
Subscribing takes a minute. Connecting a firewall takes about a quarter of an hour.
- 1
Choose and request
Pick a level and send the request. You get a confirmation and the invoice the same working day.
- 2
Access
Once paid, you receive your login and an onboarding email.
- 3Level 2 and up
Connect your firewall
With a read-only API token. The guide is included.
- 4Level 3
Forward your logs
Via syslog or FortiAnalyzer to your own Firetower endpoint.
Questions we get
- Can Cookies2 change anything on my firewall?
- No. The connection is read-only. Firetower reads firmware version and configuration and cannot change anything. Your API token lives in Azure Key Vault, never in a database.
- Does an HA cluster count as two firewalls?
- No, an HA cluster counts as one.
- What happens after a year?
- The subscription renews automatically. You can cancel up to one month before the renewal date with a short email — the same way you change the number of firewalls or switch levels.
- What is the difference between Level 3 and SOCaaS?
- Level 3 alerts: you get a notification and we follow up during office hours. SOCaaS monitors 24/7 and intervenes.
- Where is my data stored?
- In Microsoft Azure, West Europe region (the Netherlands). For Level 2 and up we sign a data processing agreement.
- Can I upgrade or add firewalls later?
- Yes, at any time. Send us an email; you pay pro rata for the rest of your contract year.
Not sure which level fits?
Book a short call. We look at your firewalls and at how you handle vulnerabilities today. You get a straight answer, even if that is Level 1.