Introducing G2.ai, the future of software buying.Try now

FortiCNAPP Reviews & Product Details

Value at a Glance

Averages based on real user reviews.

Time to Implement

2 months

FortiCNAPP Media

FortiCNAPP Demo - FortiCNAPP Dashboard
This is the first view someone sees when entering the Polygraph Data Platform. From the dashboard, you can see total alerts by severity, newly detected vulnerabilities, cloud compliance by provider, and more.
FortiCNAPP Demo - High-Severity Event Card
This screenshot is of an event card associated with a Critical alert. From this card, we can determine that this alert was triggered by an anomalous activity, that it's internet exposed, and that it's already connected to a Jira ticket (LWAL-3955) for remediation. You can also explore why the ale...
FortiCNAPP Demo - High-Severity Event Polygraph Visualization
Within every event card is a visualization, mapping out the exposure path. Here, we see that the initial Critical alert mentioned in the previous screenshot (a bad external host connection) stemmed from a log4j vulnerability.
FortiCNAPP Demo - Environment-wide Polygraph Visualization
At any point, users can get a view of all application communications across an entire cloud environment, over a set period of time. In this situation, we can see how a known bad IP address connected to multiple cloud properties, including the log4j vulnerability tied to the alert in the prior 2 s...
FortiCNAPP Demo - Vulnerability Dashboard
This screenshot shows the vulnerability dashboard, which provides both a high-level view of all containers scanned and active vulnerabilities present along with the specifics for each image — which can be further explored for more information.
FortiCNAPP Demo - Compliance Dashboard
From the Compliance dashboard, users can get a view of compliance standing for all connected cloud accounts. This scenario shows 4 total cloud accounts across AWS, Google Cloud, and Microsoft Azure.
Introducing Fortinet's Lacework FortiCNAPP, the most comprehensive cloud-native application protection platform available. Lacework FortiCNAPP helps quickly manage risk, rapidly detect, and respond to active threats.
Play FortiCNAPP Video
Introducing Fortinet's Lacework FortiCNAPP, the most comprehensive cloud-native application protection platform available. Lacework FortiCNAPP helps quickly manage risk, rapidly detect, and respond to active threats.
Play FortiCNAPP Video
Interactive Demo
Try an interactive demo created by the software seller (right here on G2).
Product Avatar Image

Have you used FortiCNAPP before?

Answer a few questions to help the FortiCNAPP community

FortiCNAPP Reviews (384)

View 1 Video Reviews
Reviews

FortiCNAPP Reviews (384)

View 1 Video Reviews
4.4
384 reviews

Pros & Cons

Generated from real user reviews
View All Pros and Cons
Search reviews
Filter Reviews
Clear Results
G2 reviews are authentic and verified.
Karan B.
KB
Full-stack Developer
"Effortless Setup with Stellar Features"
What do you like best about FortiCNAPP?

I found Lacework FortiCNAPP incredibly smooth to set up, which was neither tricky nor difficult at all. This ease of installation was something I deeply appreciated. During my hackathon experience, it effectively helped me in publishing my app and mimicking a production-level scenario for my project. This showed me its potential to be a great tool for application development and project presentation. I also loved the peer review feature, which provided authentic previews that were immensely helpful in decision-making. The platform’s associations with reputed partners like G2, HubSpot, and Salesforce highlighted its well-established and trustworthy nature. Additionally, I remember the features like vulnerability management and the alerting and prioritizing capabilities as excellent facets of Lacework FortiCNAPP. The single entity dashboard offering comprehensive visibility across multi-cloud environments, including AWS, Azure, and Kubernetes, was remarkable, helping greatly in monitoring the security posture. These aspects were impressive and beneficial, making it easy to use and efficient for its purposes. Review collected by and hosted on G2.com.

What do you dislike about FortiCNAPP?

{"I find that the integration experience with Lacework FortiCNAPP could be enhanced. The process of linking it up with specific software tools like Terraform, remediation code, or a normal CI/CD system could feel more comprehensive and streamlined. Improving this aspect could make these integrations more efficient and less cumbersome."} Review collected by and hosted on G2.com.

Verified User in Computer Software
UC
Mid-Market (51-1000 emp.)
"All-in-One Platform That Simplifies Cloud Security and Compliance"
What do you like best about FortiCNAPP?

It is an amazing platform as how it pulls everything together in one place. We don't need to juggling separate tools for cloud security, workload monitoring and compliance, it helped us in giving us single view that actually make sense. Review collected by and hosted on G2.com.

What do you dislike about FortiCNAPP?

Overall it's an amazing platform but one thing that i didn't like much about is that some part of it feels a bit heavy and slow to move through and it happens when particularly you are trying to drill down into specific thing. Review collected by and hosted on G2.com.

Verified User in Computer Software
UC
Enterprise (> 1000 emp.)
"Useful Data and Easy Navigation, but Setup Can Be Tedious"
What do you like best about FortiCNAPP?

The provided data is very useful, and the GUI is easy to navigate. Another great feature is the monitoring system, which enables quick detection of issues. Review collected by and hosted on G2.com.

What do you dislike about FortiCNAPP?

The initial setup process requires some time and effort which can be tedious. Additionally l, the large volume of data presented at the start might seem overwhelming for new users. Review collected by and hosted on G2.com.

omar s.
OS
Ingénieur sécurité SRE
Small-Business (50 or fewer emp.)
"Excellent security solution for the cloud"
What do you like best about FortiCNAPP?

Lacework offers complete visibility over our entire cloud infrastructure, thus facilitating threat detection and compliance with security standards. Review collected by and hosted on G2.com.

What do you dislike about FortiCNAPP?

The initial setup can be a bit complex for new users, but once in place, the platform works perfectly. Review collected by and hosted on G2.com.

Verified User in Computer Software
EC
Mid-Market (51-1000 emp.)
"Product was initially great, but major decline pre and post acquisition."
What do you like best about FortiCNAPP?

The setup was very easy for teams to navigate. There were a variety of up to date templates depending on your orchestration. Very easy to deploy the agent regardless of your setup.

The network diagrams (polygraphs) are really helpful when responding to an alert or just doing Threat modeling, Its nice to be able to very quickly visualize communications between your services.

Integrating into the container registry was really easy and provides us Vuln visibility prior to deployments. The mapping of containers in the registry to containers at runtime is very intuitive, helps you prioritize which items to look at first. Review collected by and hosted on G2.com.

What do you dislike about FortiCNAPP?

They have not released any meaninful features in the last 12 months and are really falling behind everyone else in this space. Every call we seem to have with them, our prior counterparts have been fired or left so you need to restart the conversation. Getting support has gone from OK to a nightmare.

The vulnerability management at runtime only updates once per day and a vuln must be cleared for at-least 24 hours before it will no longer show in the platform. This makes closing out issues after a code change or dependency update a more drawn out process. Would be nice if it could be done on demand.

Lacework has nice documentation on how to remediate findings in AWS, however they only provide details on how to do it in the AWS console, it would be helpful if they could also provide terraform samples, as that could greatly increase the speed of remediation. Review collected by and hosted on G2.com.

IT
Assistant
Small-Business (50 or fewer emp.)
"The systems are easy to use and understand, and setup is simple"
What do you like best about FortiCNAPP?

I like implementing Lacework as it's very easy and the continuous development means you stay ahead of the curve. It can also help you gain complete visibility of your workloads in almost all security tasks that will be assigned to you. Review collected by and hosted on G2.com.

What do you dislike about FortiCNAPP?

I think it would be great to be able to easily control what permissions the agent has on the endpoints. And to get the most value, you need to be able to write queries instead of human-readable questions. And in cases columns are unnecessarily truncated. Review collected by and hosted on G2.com.

Verified User in Computer & Network Security
IC
Small-Business (50 or fewer emp.)
"A lot to improve considering enterprise tools like SonarQube and Snyk, way below Prowler."
What do you like best about FortiCNAPP?

I like the multi cloud feature of Lacework including its high reporting standards. Review collected by and hosted on G2.com.

What do you dislike about FortiCNAPP?

If I am a business owner, I wouldn't only think of cloud security, and then there are many other respects to look into for proper security posture management or vulnerability management. So spending on such a new tool which is yet to make a mark would be a tough choice. Review collected by and hosted on G2.com.

MD
Platform Engineer
Small-Business (50 or fewer emp.)
"Lacework is a versatile product that has proven invaluable in various use cases"
What do you like best about FortiCNAPP?

Its functions have been essential to detec anomalies, but do not cause fatigue in the control panel or tools. Additionally, I love that it gives us a single dashboard to view all of our workloads, and the daily alerts help our incident response team prioritize and address urgent issues. Review collected by and hosted on G2.com.

What do you dislike about FortiCNAPP?

Starting to use this platform was one of the best decisions our organization has made. We were looking for an easy-to-use solution that covered all our assets in the cloud. Lacework has worked perfectly. I have nothing negative to say here about this tool. Review collected by and hosted on G2.com.

KS
Analyst
Small-Business (50 or fewer emp.)
"Dig into the details to discover inaccurate configurations and vulnerabilities"
What do you like best about FortiCNAPP?

I love that the team actively listens to user feedback and releases new features and improvements frequently. The platform is exceptionally easy to use, making it easy to set up and integrates for teams of all size. And I love that it offers buil-in protection for cloud infrastructure, workloads, data, APIs, containers, and access management. Review collected by and hosted on G2.com.

What do you dislike about FortiCNAPP?

I would like it to be able to integrate with a great variety of applications. Also, it would be nice if they could include timely security monitoring. Plus there is room to improve the board. Review collected by and hosted on G2.com.

TF
Engineering Manager
Mid-Market (51-1000 emp.)
"True visibility for security operations"
What do you like best about FortiCNAPP?

Lacework narrows down the flood of information about our tech estate (in the cloud) to just the information that I need to know. When you're running DevOps teams with a large surface area of technology, this is critical.

The proactive monitoring has identified enough anomalous activity that I have comfort that if we ever suffer a real breach, Lacework will let me know about it. It's also generally easy to get exactly to the root cause.

The team have been excellent in supporting us - not just with onboarding, but with the continued embedment and getting as much value as possible out of the tool.

I recommend this product. Review collected by and hosted on G2.com.

What do you dislike about FortiCNAPP?

As relatively early adopters some of the features that allow us effectively segregate information were not there when we onboarded. Feels like it was initially targeted at security operations teams that sit across the whole organisation, rather than specific areas of the organisation.

However, the maturity is rapidly growing and the team have always been good at letting us know exactly what's on the roadmap and when it's coming. Review collected by and hosted on G2.com.

Pricing Insights

Averages based on real user reviews.

Time to Implement

2 months

Return on Investment

15 months

Average Discount

17%

Perceived Cost

$$$$$

How much does FortiCNAPP cost?

Data powered by BetterCloud.

Estimated Price

$$k - $$k

Per Year

Based on data from 18 purchases.

FortiCNAPP Comparisons
Product Avatar Image
Wiz
Compare Now
Product Avatar Image
Orca Security
Compare Now
Product Avatar Image
Sysdig Secure
Compare Now
FortiCNAPP Features
Risk Scoring
Policy Enforcement
Auditing
Compliance Monitoring
Anomoly Detection
Cloud Gap Analytics
Governance
Data Governance
Sensitive Data Compliance
Product Avatar Image
Product Avatar Image