
Lacework FortiCNAPP
Fortinet's AI-powered CNAPP with Polygraph behavioral analytics — cloud security from code to runtime
Gallery
4 items




About Lacework FortiCNAPP
Lacework FortiCNAPP was evaluated by our editorial lab for workflow efficiency and practical value. Lacework FortiCNAPP is Fortinet\u2019s cloud-native application protection platform, built on Lacework technology following Fortinet\u2019s acquisition in August 2024. Originally founded in 2015 by Nick Hoffman and Vikram Kapoor, Lacework raised $1.876 billion in total funding an...
Lacework FortiCNAPP is Fortinet\u2019s cloud-native application protection platform, built on Lacework technology following Fortinet\u2019s acquisition in August 2024. Originally founded in 2015 by Nick Hoffman and Vikram Kapoor, Lacework raised $1.876 billion in total funding and reached an $8.3 billion peak valuation in 2021 before a difficult market environment led to multiple rounds of layoffs and ultimately the Fortinet acquisition at an undisclosed price. Fortinet acquired 225 cloud security and AI patents from Lacework, expanding its IP portfolio to over 1,800 patents.
Lacework\u2019s defining technical innovation is its Polygraph behavioral analytics engine \u2014 a baseline-then-detect approach that continuously learns normal patterns of cloud activity (user behavior, API calls, network connections, container processes) and surfaces deviations as potential threats without relying on predefined rules or signatures. This behavioral philosophy, similar to Darktrace\u2019s Self-Learning AI but applied to cloud infrastructure, makes Lacework FortiCNAPP particularly strong at detecting novel threats and insider attacks that rule-based CNAPPs miss. The platform covers the full CNAPP scope: CSPM, CWPP (agent and agentless), CIEM, CDR, Code Security, and DSPM (added January 2026) across AWS, Azure, GCP, OCI, and Kubernetes. It now integrates natively with the Fortinet Security Fabric \u2014 FortiGate firewalls, FortiWeb, and FortiSOAR \u2014 providing meaningful value for Fortinet-standardized enterprises seeking unified network and cloud security.
Lacework FortiCNAPP is the right choice for enterprises already running Fortinet products who want cloud security integrated into their existing Security Fabric, and for security teams that prioritize behavioral anomaly detection for containers and Kubernetes runtime security over pure posture management depth.
Key Features
- Polygraph behavioral analytics — builds behavioral baselines of cloud activity and detects anomalous deviations without predefined signatures
- CSPM (Cloud Security Posture Management) — continuous misconfiguration detection across AWS, Azure, GCP, OCI, and Kubernetes
- CWPP (Cloud Workload Protection) — both agent and agentless protection for VMs, containers, and serverless workloads
- CIEM (Cloud Infrastructure Entitlement Management) — net-effective permission analysis and overprivileged identity remediation
- CDR (Cloud Detection and Response) — behavioral threat detection across cloud environments with automated response
- Code Security — IaC scanning, SAST, SCA, and shift-left security across CI/CD pipelines
- DSPM (Data Security Posture Management) — sensitive data discovery, classification, and access monitoring (added January 2026)
- Container and Kubernetes Security — deep container runtime detection, admission control, and Kubernetes security posture
- Fortinet Security Fabric integration — native integration with FortiGate firewalls, FortiWeb, and FortiSOAR
- 225 cloud security and AI patents — transferred to Fortinet at acquisition, powering continued R&D investment
Pros
- Polygraph behavioral analytics — unique baseline-then-detect approach catches novel cloud threats that rule-based tools miss
- Deep container runtime security — among the most mature container detection and admission control capabilities in any CNAPP
- Fortinet Security Fabric integration — strong value for Fortinet-standardized enterprises combining network and cloud security
- 225 AI and cloud security patents — substantial IP portfolio backing continued platform innovation under Fortinet
- KuppingerCole 2025 CNAPP Leadership Compass Leader — strong independent analyst recognition
- DSPM added January 2026 — completing the full CNAPP capability set (CSPM + CWPP + CIEM + CDR + Code + DSPM)
- Fortinet backing provides financial stability — removes standalone startup uncertainty for enterprise buyers
Cons
- Post-acquisition strategic uncertainty — roadmap deceleration is a common risk in security M&A integrations
- Acquired at a fraction of peak $8.3B valuation — history of financial distress (multiple layoff rounds pre-acquisition)
- CIEM and DSPM features less mature than Wiz or Orca equivalents
- lacework.com redirects to fortinet.com — branding and product name transition still ongoing
- Pre-acquisition reputation for premium pricing with below-average support response times — verify on current contracts
Pricing
Lacework FortiCNAPP uses enterprise-only, usage-based pricing with no publicly listed rates. All contracts require direct engagement with Fortinet sales.
Pre-acquisition, Lacework had a reputation for premium pricing relative to its feature maturity. Post-acquisition, Fortinet may bundle FortiCNAPP with existing Fortinet product contracts \u2014 verify current bundling and pricing on active Fortinet enterprise agreements.
Contact Fortinet through fortinet.com/products/lacework-forticnapp for a custom quote and bundling discussion based on your cloud workload footprint and existing Fortinet infrastructure.
Claim Verified Creator Badge
Are you the founder of Lacework FortiCNAPP? Display this listing's verified badge on your website to show your customers that your product has been vetted and listed on AI Central Resources.
<a href="https://www.aicentralresources.com/tool/lacework-forticnapp" target="_blank" rel="noopener"> <img src="https://www.aicentralresources.com/badges/featured-badge-dark.svg" alt="Featured on AICentralResources" width="200" height="54" style="border: none;" /> </a>
* Place this HTML snippet in your website's footer, landing page, or press section. This creates a search-friendly backlink directly to your verification page.
Connect with Lacework FortiCNAPP
Frequently Asked Questions
Yes — Fortinet announced the acquisition of Lacework on June 10, 2024 and completed it in August 2024. The product is now called Lacework FortiCNAPP and operates as part of the Fortinet Security Fabric. Fortinet acquired 225 cloud security and AI patents from Lacework, bringing Fortinet’s total patent portfolio to over 1,800. The acquisition price was not disclosed.
Polygraph is Lacework’s core behavioral analytics engine. It continuously learns normal patterns of cloud activity — user behavior, API calls, network connections, process activity, and more — and detects deviations from that baseline as potential threats. This signature-free approach catches novel and insider threats that rule-based CNAPP tools miss, similar to how Darktrace’s Self-Learning AI works for enterprise networks.
Lacework FortiCNAPP covers the full CNAPP scope: CSPM (cloud misconfiguration detection across AWS, Azure, GCP, OCI, Kubernetes), CWPP (agent and agentless workload protection), CIEM (identity entitlement management), CDR (behavioral cloud detection and response), Code Security (IaC, SAST, SCA), DSPM (data security posture management, added January 2026), and deep container and Kubernetes security.
Lacework FortiCNAPP wins on container runtime detection depth, Fortinet ecosystem integration, and Polygraph behavioral analytics. Wiz wins on Security Graph context, simplicity, and Google Cloud backing. Orca wins on agentless SideScanning breadth and AI-SPM. Lacework FortiCNAPP is best for organizations already running Fortinet products who need cloud security that integrates with their existing FortiGate and FortiSOAR investment.
Lacework raised $1.876 billion in total funding and reached an $8.3 billion peak valuation in 2021 — making it one of the most valuable cloud security startups ever. However, the company went through multiple rounds of layoffs (20% in 2023) as the market environment tightened. Fortinet acquired Lacework in August 2024 at an undisclosed price widely described as a significant down-round from the peak valuation, representing a fire sale of Lacework’s technology.
Similar AI Tools to Lacework FortiCNAPP
View all alternatives of Lacework FortiCNAPP
Wiz
Agentless cloud security that connects code, cloud, and runtime into one graph

Orca Security
Agentless CNAPP with patented SideScanning — 100% cloud coverage without installing a single agent

Prisma Cloud
Palo Alto Networks CNAPP — broadest cloud security coverage across CSPM, CWPP, code, and AI security

AccuKnox
Gen-AI Zero Trust CNAPP with eBPF kernel enforcement — built on SRI patents and open-source KubeArmor

CrowdStrike Falcon
World\u2019s leading AI-native cybersecurity platform — Charlotte AI, EDR/XDR, and $5.25B ARR on one Falcon agent

Checkmarx
Unified enterprise AppSec with SAST, SCA, DAST and agentic AI security for Fortune 500
Compared with Lacework FortiCNAPP
Direct head-to-head feature matrices, pricing, and category breakdowns