FortiCNAPP Reviews & Product Details

FortiCNAPP (formerly Lacework) is an AI-powered Cloud-Native Application Protection Platform that delivers unified security across your multi-cloud and hybrid environments. Built to protect the entire application lifecycle—from development to runtime—it combines posture management, workload protection, identity security, and threat detection into one integrated platform. By leveraging machine learning and behavioral analytics, FortiCNAPP helps security teams detect unknown threats, reduce noise, and accelerate response. Integrated with the Fortinet Security Fabric, it provides full-stack visibility across cloud, network, and endpoint environments—empowering teams to operate with confidence, reduce complexity, and scale securely.

Product Website

Seller

Fortinet

Discussions

FortiCNAPP Community

Languages Supported

English

Product Description

FortiCNAPP is a comprehensive Cloud-Native Application Protection Platform (CNAPP) that consolidates Cloud Security Posture Management (CSPM), Cloud Workload Protection (CWPP), Cloud Infrastructure Entitlement Management (CIEM), Kubernetes security, and compliance into a single solution. Using AI-based anomaly detection and behavioral analytics, FortiCNAPP continuously monitors cloud environments to identify misconfigurations, vulnerabilities, and active threats in real time. The platform supports agentless and agent-based deployment models, ensuring flexible coverage across diverse architectures. FortiCNAPP also integrates with the Fortinet Security Fabric, correlating cloud data with network and endpoint insights from FortiGuard, FortiSOAR, and more, delivering full-stack threat context, faster remediation, and unified risk management.

Overview by

Frederick Harris

Value at a Glance

Averages based on real user reviews.

Time to Implement

2 months

View More Pricing Information

FortiCNAPP Integrations

(8)

Verified by FortiCNAPP

FortiCNAPP Media

This is the first view someone sees when entering the Polygraph Data Platform. From the dashboard, you can see total alerts by severity, newly detected vulnerabilities, cloud compliance by provider, and more.

FortiCNAPP Demo - High-Severity Event Card

This screenshot is of an event card associated with a Critical alert. From this card, we can determine that this alert was triggered by an anomalous activity, that it's internet exposed, and that it's already connected to a Jira ticket (LWAL-3955) for remediation. You can also explore why the ale...

FortiCNAPP Demo - High-Severity Event Polygraph Visualization

Within every event card is a visualization, mapping out the exposure path. Here, we see that the initial Critical alert mentioned in the previous screenshot (a bad external host connection) stemmed from a log4j vulnerability.

FortiCNAPP Demo - Environment-wide Polygraph Visualization

At any point, users can get a view of all application communications across an entire cloud environment, over a set period of time. In this situation, we can see how a known bad IP address connected to multiple cloud properties, including the log4j vulnerability tied to the alert in the prior 2 s...

FortiCNAPP Demo - Vulnerability Dashboard

This screenshot shows the vulnerability dashboard, which provides both a high-level view of all containers scanned and active vulnerabilities present along with the specifics for each image — which can be further explored for more information.

From the Compliance dashboard, users can get a view of compliance standing for all connected cloud accounts. This scenario shows 4 total cloud accounts across AWS, Google Cloud, and Microsoft Azure.

Introducing Fortinet's Lacework FortiCNAPP, the most comprehensive cloud-native application protection platform available. Lacework FortiCNAPP helps quickly manage risk, rapidly detect, and respond to active threats.

Official Downloads

(3)

edit

The CISO Playbook for Cloud Security

CNAPP For Dummies

Interactive Demo

edit

Try an interactive demo created by the software seller (right here on G2).

Try demo

G2 reviews are authentic and verified.

Here's how.

John S.

Enterprise (> 1000 emp.)

5/19/2023

"Making the world a more secure place"

5/5

What do you like best about FortiCNAPP?

Everybody involved wants not just what's best for themselves and/or customers, but for everybody. Review collected by and hosted on G2.com.

What do you dislike about FortiCNAPP?

This reality still has something called "time" - and getting new features involve investing this "time" in it, and somehow Lacework still hasn't found a solution to that. Hoping they invent time travel soon. Review collected by and hosted on G2.com.

Verified User in Computer & Network Security

Mid-Market (51-1000 emp.)

10/11/2023

"Lacework is easy to use and provides valuable insight"

5/5

What do you like best about FortiCNAPP?

I like the wealth of information I have. Everything is accessable through the API too which makes it amazing for analyzing data using our own tools like Tableau. Review collected by and hosted on G2.com.

What do you dislike about FortiCNAPP?

The UI can be clunky and unintuitive at times. All the data I need is there but can be hard to access to understand. Review collected by and hosted on G2.com.

Verified User in Leisure, Travel & Tourism

Enterprise (> 1000 emp.)

8/2/2023

"Powerful Tool to Manage Cloud Security"

4.5/5

What do you like best about FortiCNAPP?

AI/ML data aggregation to anyalyse huge amount of data to derive actionable insights, helps detect advanced cyber attacks quickly with a lot of context to proceed. Helps manage host and containers vulnerability management, CIEM is a powerfull feature to get started with priciple of least privileges, their flexibility with integratoin to various alert systems is good. Review collected by and hosted on G2.com.

What do you dislike about FortiCNAPP?

Lacework tools lacks to provide opion orianted insights based on the industry trend, the tool should start prompting orgarnisations with opion orianted dashboards, reports on the areas where the focus is required.

They collect a lot of info, but lack in presenting all of it with dahsboards and graphs. Review collected by and hosted on G2.com.

Kevin M.

Director of Cloud Operations

Mid-Market (51-1000 emp.)

5/16/2023

"One of the best CNAPP tools out in the market!"

5/5

What do you like best about FortiCNAPP?

Lacework has been vital in protecting our environment and giving us visibility across all domains. I like how Lacework gives you a quick summary of an alert that was recently fired. If I need to dig deeper, the dashboard with all the 5 W's, Why, When, Who, What, and Where is super beneficial too! Review collected by and hosted on G2.com.

What do you dislike about FortiCNAPP?

Coming up with something which I dislike about Lacework was a bit difficult, but if I had to say one thing, it would be to have more support for Bottlerocket, but I know it is on their roadmap. Review collected by and hosted on G2.com.

Verified User in Banking

Mid-Market (51-1000 emp.)

9/28/2022

"Straight to the point, valuable visibility"

4/5

What do you like best about FortiCNAPP?

Lacework provides valuable visibility regarding activities occuring in our environment to help detect malicious interactions that might be happening.

Lacework goes beyond and offers container security, and is a great asset overall for a cloud infrastructure.

Detailed logging and reporting regarding Network and Internal Anomalies.

Valuable vulnerability management visibility inside Containers & Hosts Review collected by and hosted on G2.com.

What do you dislike about FortiCNAPP?

I do not dislike anything at the moment. I would like a cleaner filtering system for container vulnerabilities, but the current state is not bad.

No response capabilities Review collected by and hosted on G2.com.

Verified User in Food Production

Mid-Market (51-1000 emp.)

11/9/2023

"Achieve Compliance"

5/5

What do you like best about FortiCNAPP?

The ability to verify compliance with security standards using Lacework reports. Review collected by and hosted on G2.com.

What do you dislike about FortiCNAPP?

Most of the time, I don't know why an alert is a real risk. I mean, how can someone exploit a specific alert to attack my cloud resources? Review collected by and hosted on G2.com.

Verified User in Information Technology and Services

Mid-Market (51-1000 emp.)

1/29/2024

"C&R Software Lacework Review"

4.5/5

What do you like best about FortiCNAPP?

Initially, I would have to say the Delivery Team. Lacework went through great efforts to get C&R off the ground. Review collected by and hosted on G2.com.

What do you dislike about FortiCNAPP?

I really cannot think of anything I dislike about Lacework. Review collected by and hosted on G2.com.

Response from Emily Chin of FortiCNAPP

edit

Thanks so much for your review of Lacework. We're thrilled to know our Delivery Team met your expectations and that you've experienced a smooth journey with us.If we can assist with anything in the future, you can connect with me directly by email: emily.chin@lacework.net

Alejandro G.

Mid-Market (51-1000 emp.)

11/6/2023

"Improving the security of production easily"

5/5

What do you like best about FortiCNAPP?

The services the product offers and also the support team behind the product. Finally, how easy is to implement and integrate with our system. Review collected by and hosted on G2.com.

What do you dislike about FortiCNAPP?

By now, I didn't find anything that dislike me. Review collected by and hosted on G2.com.

Grant F.

Enterprise (> 1000 emp.)

10/6/2023

"Easy to find and locate issues with numerous ways to filter threats"

3.5/5

What do you like best about FortiCNAPP?

Able to see lots of data without being overwhelmed with walls of texts and distracting information. Review collected by and hosted on G2.com.

What do you dislike about FortiCNAPP?

While there is a tab about critical alerts on the dashboard, I would like an additional tabs for new and/or severe alerts occur. Review collected by and hosted on G2.com.

Job V.

Mid-Market (51-1000 emp.)

4/20/2023

"Lacework a great tool that provides cloud security and visibility"

4.5/5

What do you like best about FortiCNAPP?

The most helpful thing about Lacework in our organization is that it gives developers and us insight in the protection and security of our cloud enviroment, which we previously didn't have. Within our organization we use different cloud enviroments and Lacework brings all of this together and we can give the responsibilities of our security standard to the developers. Is gives comprehensive cloud security, is easy to use and the onboarding of the different teams can easily be done. Review collected by and hosted on G2.com.

What do you dislike about FortiCNAPP?

Lacework can be complex for some users / developers. Because it still requires a certain level of technical knowledge and expertise to be fully utilized. Review collected by and hosted on G2.com.