WatchGuard has expanded Rai, its agentic AI platform for managed service providers, adding AI-driven investigation, auditing, customer risk assessment, and a natural-language interface, per Channel Insider. The announcements landed at the company's IMPACT North America conference, and the new capabilities start rolling out in October through WatchGuard's Unified Security Platform.
The real story is not the AI. It is consolidation. WatchGuard is folding network, identity, access, and threat management into one platform, and Rai is the layer meant to do work across it. For MSPs — the outside firms that run security for small and midsize businesses — that could mean fewer separate tools to manage. Whether it actually means fewer staff hours is something WatchGuard has not demonstrated: the company did not provide specific staffing or cost-reduction figures in its announcement. Readers following this should also see The essential names of hand tools every beginner should know.
That gap between promise and proof is worth holding onto, and it is a habit worth applying to any vendor announcement you read this year. For more of this kind of coverage, see our AI news section.
What did WatchGuard actually announce?
Five additions to Rai, per the Channel Insider report. Hey Rai is a natural-language interface for talking to what WatchGuard calls the Rai Workforce. Rai Analyst gets AI-driven incident investigation, analysis, and prioritization. Rai Auditor does continuous security posture and compliance assessment. Rai Customer Success identifies customer risks and spots where protection could be stronger. And MCP integration brings WatchGuard security intelligence into external AI platforms.
The distinction WatchGuard draws matters. It says Rai is not a traditional AI assistant that helps an analyst finish tasks. It is positioned as an agent that can handle assessment, investigation, prioritization, reporting, and other security workflows on its own. That is a bigger claim, and bigger claims deserve bigger evidence — which, on staffing and cost savings, was not supplied. This connects to our earlier piece, Which Claude tier for which work? A decision guide from Anthropic's own pricing page.
Why does the consolidation push matter more than the AI?
Because the pitch is structural, not technical. WatchGuard CEO Joe Smolarski told the conference, "We've been led to believe that the answer to every security challenge is another product. But more products don't create better security. AI-native integrated platforms do."
There is a fair reading of that argument. MSPs juggling a firewall console, an identity tool, an access broker, and a threat feed spend real hours just switching between them. If one platform handles all of it, the switching cost drops. The unproven part is whether an AI agent can safely take over judgment-heavy work — prioritizing incidents, assessing customer risk — without a human checking its calls. WatchGuard's own framing says Rai can do these tasks; the announcement offers no independent validation of how well.
What else shipped alongside Rai?
Several network security updates, per Channel Insider:
- Firebox T175 — a new appliance with full-scan security performance, 10G connectivity, and multigigabit networking.
- WatchGuard Prime Security Suite — a new mid-tier offering meant to give MSPs another option for matching coverage to customer needs.
- Expanded Network Management — more visibility and monitoring.
- Application Risk Assessments — tools for spotting vulnerable or risky applications.
- Vulnerability scanning — new capabilities available through WatchGuard MDR, its managed detection and response service.
One detail deserves attention: shadow AI discovery. Customers on Prime Security Suite or Total Security Suite get the Network Shadow AI dashboard at no additional licensing charge. It combines OAuth grants, email metadata, FireCloud work-device telemetry, and Firebox network visibility into a single inventory of discovered applications, and it can flag misconfigurations and suspicious sign-ins through CloudDR.
This is the quietly practical piece. Shadow AI — employees using AI apps the IT team never approved — is exactly the kind of sprawling, invisible problem that a single dashboard can actually help with. Making it free for existing suite customers suggests WatchGuard sees it as a retention lever, which is fine; the feature itself is the kind of unglamorous visibility work that tends to matter more than agent demos.
What does the Access App change for everyday users?
WatchGuard also introduced the WatchGuard Access App, which merges its AuthPoint and FireCloud capabilities into one client, one sign-in, and one management portal. The idea is to stop treating authentication and connectivity as separate workflows — identity security and SASE (secure access service edge, a way of delivering network security from the cloud) in a single experience.
The rationale WatchGuard cited is its own 2026 Cyber Hygiene Report, which found that only 22% of employees use multifactor authentication everywhere it is available. The argument: less friction, more adoption. That stat comes from WatchGuard's own report, so treat it as the vendor's data rather than an independent survey. Still, the friction point it names is a real one, and simplifying sign-in is a defensible response.
Chief product officer Vincent Hwang framed the platform logic: "The real power of a platform is what happens when every capability makes every other capability smarter and more streamlined."
What should MSPs — and anyone watching AI tools — take from this?
Three things. First, the agentic AI pattern is spreading from productivity software into security operations, and WatchGuard is one of the louder examples. Second, the value proposition rests on consolidation, which is measurable in principle — tools retired, hours saved — and WatchGuard has not yet supplied those numbers. Third, availability begins in October, so real-world results will take time to surface.
The evidence so far establishes what was announced and how WatchGuard positions it. It does not establish that Rai's agents outperform human analysts, that the platform cuts costs, or that consolidation delivers the outcomes the quotes promise. Those are the questions worth asking when the first customer results appear — and the same questions worth asking of any AI tool that claims to do your work for you.
