Lacework FortiCNAPP official logo — Fortinet AI-powered CNAPP with Polygraph behavioral analytics CSPM CWPP CIEM DSPM acquired by Fortinet August 2024

Fortinet's AI-powered CNAPP with Polygraph behavioral analytics — cloud security from code to runtime

Tested by Hamza Khaliq
Not yet rated
Released 2015
Visit Website

Gallery

4 items

Lacework FortiCNAPP video thumbnail
VIDEO
Lacework FortiCNAPP video thumbnail
VIDEO
Lacework FortiCNAPP video thumbnail
VIDEO
Lacework FortiCNAPP screenshot 4
4

About Lacework FortiCNAPP

AICentral Editorial ReviewVerified Test
Evaluated by Hamza Khaliq · Updated for 2026
Test Verdict
4.8 / 5.0

Lacework FortiCNAPP is Fortinet\u2019s cloud-native application protection platform, built on Lacework technology following Fortinet\u2019s acquisition in August 2024. Originally founded in 2015 by Nick Hoffman and Vikram Kapoor, Lacework raised $1.876 billion in total funding and reached an $8.3 billion peak valuation in 2021 before a difficult market environment led to multiple rounds of layoffs and ultimately the Fortinet acquisition at an undisclosed price. Fortinet acquired 225 cloud security and AI patents from Lacework, expanding its IP portfolio to over 1,800 patents.

Lacework\u2019s defining technical innovation is its Polygraph behavioral analytics engine \u2014 a baseline-then-detect approach that continuously learns normal patterns of cloud activity (user behavior, API calls, network connections, container processes) and surfaces deviations as potential threats without relying on predefined rules or signatures. This behavioral philosophy, similar to Darktrace\u2019s Self-Learning AI but applied to cloud infrastructure, makes Lacework FortiCNAPP particularly strong at detecting novel threats and insider attacks that rule-based CNAPPs miss. The platform covers the full CNAPP scope: CSPM, CWPP (agent and agentless), CIEM, CDR, Code Security, and DSPM (added January 2026) across AWS, Azure, GCP, OCI, and Kubernetes. It now integrates natively with the Fortinet Security Fabric \u2014 FortiGate firewalls, FortiWeb, and FortiSOAR \u2014 providing meaningful value for Fortinet-standardized enterprises seeking unified network and cloud security.

Lacework FortiCNAPP is the right choice for enterprises already running Fortinet products who want cloud security integrated into their existing Security Fabric, and for security teams that prioritize behavioral anomaly detection for containers and Kubernetes runtime security over pure posture management depth.

Key Features

  • Polygraph behavioral analytics — builds behavioral baselines of cloud activity and detects anomalous deviations without predefined signatures
  • CSPM (Cloud Security Posture Management) — continuous misconfiguration detection across AWS, Azure, GCP, OCI, and Kubernetes
  • CWPP (Cloud Workload Protection) — both agent and agentless protection for VMs, containers, and serverless workloads
  • CIEM (Cloud Infrastructure Entitlement Management) — net-effective permission analysis and overprivileged identity remediation
  • CDR (Cloud Detection and Response) — behavioral threat detection across cloud environments with automated response
  • Code Security — IaC scanning, SAST, SCA, and shift-left security across CI/CD pipelines
  • DSPM (Data Security Posture Management) — sensitive data discovery, classification, and access monitoring (added January 2026)
  • Container and Kubernetes Security — deep container runtime detection, admission control, and Kubernetes security posture
  • Fortinet Security Fabric integration — native integration with FortiGate firewalls, FortiWeb, and FortiSOAR
  • 225 cloud security and AI patents — transferred to Fortinet at acquisition, powering continued R&D investment

Pros

  • Polygraph behavioral analytics — unique baseline-then-detect approach catches novel cloud threats that rule-based tools miss
  • Deep container runtime security — among the most mature container detection and admission control capabilities in any CNAPP
  • Fortinet Security Fabric integration — strong value for Fortinet-standardized enterprises combining network and cloud security
  • 225 AI and cloud security patents — substantial IP portfolio backing continued platform innovation under Fortinet
  • KuppingerCole 2025 CNAPP Leadership Compass Leader — strong independent analyst recognition
  • DSPM added January 2026 — completing the full CNAPP capability set (CSPM + CWPP + CIEM + CDR + Code + DSPM)
  • Fortinet backing provides financial stability — removes standalone startup uncertainty for enterprise buyers

Cons

  • Post-acquisition strategic uncertainty — roadmap deceleration is a common risk in security M&A integrations
  • Acquired at a fraction of peak $8.3B valuation — history of financial distress (multiple layoff rounds pre-acquisition)
  • CIEM and DSPM features less mature than Wiz or Orca equivalents
  • lacework.com redirects to fortinet.com — branding and product name transition still ongoing
  • Pre-acquisition reputation for premium pricing with below-average support response times — verify on current contracts

Pricing

Lacework FortiCNAPP uses enterprise-only, usage-based pricing with no publicly listed rates. All contracts require direct engagement with Fortinet sales.

Pre-acquisition, Lacework had a reputation for premium pricing relative to its feature maturity. Post-acquisition, Fortinet may bundle FortiCNAPP with existing Fortinet product contracts \u2014 verify current bundling and pricing on active Fortinet enterprise agreements.

Contact Fortinet through fortinet.com/products/lacework-forticnapp for a custom quote and bundling discussion based on your cloud workload footprint and existing Fortinet infrastructure.

Claim Verified Creator Badge

Are you the founder of Lacework FortiCNAPP? Display this listing's verified badge on your website to show your customers that your product has been vetted and listed on AI Central Resources.

FEATURED ONAI Central Resources
HTML Embed Code
<a href="https://www.aicentralresources.com/tool/lacework-forticnapp" target="_blank" rel="noopener">
  <img src="https://www.aicentralresources.com/badges/featured-badge-dark.svg" alt="Featured on AICentralResources" width="200" height="54" style="border: none;" />
</a>

* Place this HTML snippet in your website's footer, landing page, or press section. This creates a search-friendly backlink directly to your verification page.

Connect with Lacework FortiCNAPP

Frequently Asked Questions

Yes — Fortinet announced the acquisition of Lacework on June 10, 2024 and completed it in August 2024. The product is now called Lacework FortiCNAPP and operates as part of the Fortinet Security Fabric. Fortinet acquired 225 cloud security and AI patents from Lacework, bringing Fortinet’s total patent portfolio to over 1,800. The acquisition price was not disclosed.

Polygraph is Lacework’s core behavioral analytics engine. It continuously learns normal patterns of cloud activity — user behavior, API calls, network connections, process activity, and more — and detects deviations from that baseline as potential threats. This signature-free approach catches novel and insider threats that rule-based CNAPP tools miss, similar to how Darktrace’s Self-Learning AI works for enterprise networks.

Lacework FortiCNAPP covers the full CNAPP scope: CSPM (cloud misconfiguration detection across AWS, Azure, GCP, OCI, Kubernetes), CWPP (agent and agentless workload protection), CIEM (identity entitlement management), CDR (behavioral cloud detection and response), Code Security (IaC, SAST, SCA), DSPM (data security posture management, added January 2026), and deep container and Kubernetes security.

Lacework FortiCNAPP wins on container runtime detection depth, Fortinet ecosystem integration, and Polygraph behavioral analytics. Wiz wins on Security Graph context, simplicity, and Google Cloud backing. Orca wins on agentless SideScanning breadth and AI-SPM. Lacework FortiCNAPP is best for organizations already running Fortinet products who need cloud security that integrates with their existing FortiGate and FortiSOAR investment.

Lacework raised $1.876 billion in total funding and reached an $8.3 billion peak valuation in 2021 — making it one of the most valuable cloud security startups ever. However, the company went through multiple rounds of layoffs (20% in 2023) as the market environment tightened. Fortinet acquired Lacework in August 2024 at an undisclosed price widely described as a significant down-round from the peak valuation, representing a fire sale of Lacework’s technology.

Similar AI Tools to Lacework FortiCNAPP

View all alternatives of Lacework FortiCNAPP
Enterprise
Wiz

Wiz

Agentless cloud security that connects code, cloud, and runtime into one graph

Not yet rated
Enterprise
Orca Security

Orca Security

Agentless CNAPP with patented SideScanning — 100% cloud coverage without installing a single agent

Not yet rated
Enterprise
Prisma Cloud

Prisma Cloud

Palo Alto Networks CNAPP — broadest cloud security coverage across CSPM, CWPP, code, and AI security

Not yet rated
Freemium
AccuKnox

AccuKnox

Gen-AI Zero Trust CNAPP with eBPF kernel enforcement — built on SRI patents and open-source KubeArmor

Not yet rated
Paid
CrowdStrike Falcon

CrowdStrike Falcon

World\u2019s leading AI-native cybersecurity platform — Charlotte AI, EDR/XDR, and $5.25B ARR on one Falcon agent

Not yet rated
Enterprise
Checkmarx

Checkmarx

Unified enterprise AppSec with SAST, SCA, DAST and agentic AI security for Fortune 500

Not yet rated