FortiCNAPP Reviews & Product Details

FortiCNAPP (formerly Lacework) is an AI-powered Cloud-Native Application Protection Platform that delivers unified security across your multi-cloud and hybrid environments. Built to protect the entire application lifecycle—from development to runtime—it combines posture management, workload protection, identity security, and threat detection into one integrated platform. By leveraging machine learning and behavioral analytics, FortiCNAPP helps security teams detect unknown threats, reduce noise, and accelerate response. Integrated with the Fortinet Security Fabric, it provides full-stack visibility across cloud, network, and endpoint environments—empowering teams to operate with confidence, reduce complexity, and scale securely.

Product Website

Seller

Fortinet

Discussions

FortiCNAPP Community

Languages Supported

English

Product Description

FortiCNAPP is a comprehensive Cloud-Native Application Protection Platform (CNAPP) that consolidates Cloud Security Posture Management (CSPM), Cloud Workload Protection (CWPP), Cloud Infrastructure Entitlement Management (CIEM), Kubernetes security, and compliance into a single solution. Using AI-based anomaly detection and behavioral analytics, FortiCNAPP continuously monitors cloud environments to identify misconfigurations, vulnerabilities, and active threats in real time. The platform supports agentless and agent-based deployment models, ensuring flexible coverage across diverse architectures. FortiCNAPP also integrates with the Fortinet Security Fabric, correlating cloud data with network and endpoint insights from FortiGuard, FortiSOAR, and more, delivering full-stack threat context, faster remediation, and unified risk management.

Overview by

Frederick Harris

Value at a Glance

Averages based on real user reviews.

Time to Implement

2 months

View More Pricing Information

FortiCNAPP Integrations

(8)

Verified by FortiCNAPP

FortiCNAPP Media

This is the first view someone sees when entering the Polygraph Data Platform. From the dashboard, you can see total alerts by severity, newly detected vulnerabilities, cloud compliance by provider, and more.

FortiCNAPP Demo - High-Severity Event Card

This screenshot is of an event card associated with a Critical alert. From this card, we can determine that this alert was triggered by an anomalous activity, that it's internet exposed, and that it's already connected to a Jira ticket (LWAL-3955) for remediation. You can also explore why the ale...

FortiCNAPP Demo - High-Severity Event Polygraph Visualization

Within every event card is a visualization, mapping out the exposure path. Here, we see that the initial Critical alert mentioned in the previous screenshot (a bad external host connection) stemmed from a log4j vulnerability.

FortiCNAPP Demo - Environment-wide Polygraph Visualization

At any point, users can get a view of all application communications across an entire cloud environment, over a set period of time. In this situation, we can see how a known bad IP address connected to multiple cloud properties, including the log4j vulnerability tied to the alert in the prior 2 s...

FortiCNAPP Demo - Vulnerability Dashboard

This screenshot shows the vulnerability dashboard, which provides both a high-level view of all containers scanned and active vulnerabilities present along with the specifics for each image — which can be further explored for more information.

From the Compliance dashboard, users can get a view of compliance standing for all connected cloud accounts. This scenario shows 4 total cloud accounts across AWS, Google Cloud, and Microsoft Azure.

Introducing Fortinet's Lacework FortiCNAPP, the most comprehensive cloud-native application protection platform available. Lacework FortiCNAPP helps quickly manage risk, rapidly detect, and respond to active threats.

Official Downloads

(3)

edit

The CISO Playbook for Cloud Security

CNAPP For Dummies

Interactive Demo

edit

Try an interactive demo created by the software seller (right here on G2).

Try demo

G2 reviews are authentic and verified.

Here's how.

Chems A.

Client Technologies Technical Lead

Mid-Market (51-1000 emp.)

3/14/2023

"Director of Client Technologies"

5/5

What do you like best about FortiCNAPP?

How you can trace the issue all the way to the exectutable. it was 2 alerts that recived indicating that there were external attempts from servers to external IPs and upon checking the details of the alert and looking at the source and destination and traffic details; I was able to easily trace it to be legitimate attempts as one systems was trying to connect to O365 and the other to SpecOps. Review collected by and hosted on G2.com.

What do you dislike about FortiCNAPP?

None at the moment. I am happy with the product so far and the support is also great. I trust the company as well as they are doing great job developing the product even more Review collected by and hosted on G2.com.

What problems is FortiCNAPP solving and how is that benefiting you?

it was 2 alerts that recived indicating that there are external attempts from servers to external IPs and upon checking the details of the alert and looking at the source and destination and traffic details; I was able to easily trace it to be legitimate attempts as one systems was trying to connect to O365 and the other to SpecOps. Review collected by and hosted on G2.com.

Response from Christine Medina of FortiCNAPP

edit

Hi Chems! Thanks for leaving us a a review with a specific example of how we've helped you. We have definitely been hard at work and will continue to innovate and deliver more value to you with new product features and enhancements.

Verified User in Security and Investigations

Mid-Market (51-1000 emp.)

4/7/2023

"A good expérience"

4.5/5

What do you like best about FortiCNAPP?

The solution is complete and helps the teams to have good insight for risk and vulnérabilities ( Host, containers...)

It's responding to most of the problems we can face Review collected by and hosted on G2.com.

What do you dislike about FortiCNAPP?

Not a dislike, but they have to improve the filtres on dashboards . Review collected by and hosted on G2.com.

Helene M.

Assistant Manager

Small-Business (50 or fewer emp.)

7/18/2024

"Amazing solution with great comprehensive security features"

5/5

What do you like best about FortiCNAPP?

I like the detailed information that is collected, the visibility that the tool gives us about our infrastructure is surprising. I like the amount of information that is collected in each scan. It gives us valuable information about our workloads. Review collected by and hosted on G2.com.

What do you dislike about FortiCNAPP?

I consider it a personal taste that the design of its infrastructure could be somewhat more striking. Queries may also take some time to understand. I don't like that you have very few options when it comes to customizing the reports. Review collected by and hosted on G2.com.

Eulalia T.

Data Analyst

Small-Business (50 or fewer emp.)

7/8/2024

"Perfect solution to protect your cloud environment"

5/5

What do you like best about FortiCNAPP?

The tool is used daily to monitor vulnerabilities and threats in our environment. Lacework provides the functionality our team needs to protect the systems and data our business depends on every day. It is a wonderful solution for assets located in public cloud hosting environments. Review collected by and hosted on G2.com.

What do you dislike about FortiCNAPP?

The truth is that there is nothing I don't like about Lacework, our team was looking for an easy-to-use solution that covered all our assets in the cloud and we are very happy with the results obtained thanks to this platform. Review collected by and hosted on G2.com.

Anna G.

Senior Cybersecurity Analyst

Management Consulting

Mid-Market (51-1000 emp.)

7/18/2024

"Enhance security in your company with this real time threat detection and reporting software"

4/5

What do you like best about FortiCNAPP?

Some of the best features that I have enjoyed using Lacework are security information and intelligent threat isolation of Lacework. It offers a high level of security since it offers insight of physical security in the cloud infrastructure to offer prompt response. Integrational with other systems like AWS and Azure has been realized to be easy and this implies that one can monitor his or her environments without having to change systems. The many reports and the dashboard allows us to be always in touch with security compliance and be ready to make sound decisions. Review collected by and hosted on G2.com.

What do you dislike about FortiCNAPP?

The one weakness that is worth mentioning about Lacework is that it may be difficult to set up and it occupy a considerable amount of time. This has however brought some inconveniences in the assimilation process of the software into our system since it has been staged in sections. Furthermore, its potential is high as to some functions it might take some time to master them so we would need training for our team. All of these have slightly impacted on our on boarding process by causing a slight lag and also the need to direct more resources in as regards to making sure everyone is on to it. Review collected by and hosted on G2.com.

What problems is FortiCNAPP solving and how is that benefiting you?

Regarding the problems of cloud security management, Lacework provides maximum monitoring and performs automatic threat related analysis and identification. It makes it easier for us to timely identify weaknesses as well as tackle events thus boosting our security level. The software also enhances our compliance prowess through provision of detailed reports and auditors that ease on regulation compliance. Therefore, the team is more effective and assured in the secure cloud environment that enhances our general business processes. Review collected by and hosted on G2.com.

Mohd Saif A.

Business Development Representative

Enterprise (> 1000 emp.)

1/23/2025

"It is a one stop security solution for my cloud environment"

3.5/5

What do you like best about FortiCNAPP?

Its threat detection is the best feature I saw, which is one of the most important thing these days for the oraganisations. Specially when you are handelling a very critical data of your clients. Review collected by and hosted on G2.com.

What do you dislike about FortiCNAPP?

It is a bit tricky to cconfigure Lacework with tools Review collected by and hosted on G2.com.

Uberto L.

Marketing And Advertising

Small-Business (50 or fewer emp.)

7/13/2024

"Coverage, security, data and compliance in a single portal automatically"

5/5

What do you like best about FortiCNAPP?

I like their Speed of innovation and continuous improvement of the solution. In addition, beign able to put the whole puzzle together helps diagnose the risk of attacks on security layers and the impact of data. The Lacework app is very intuitive and has better features than the competition. Review collected by and hosted on G2.com.

What do you dislike about FortiCNAPP?

I would like to see Lacework delve more into real-time suspicious or malicious threat analysis for virtual machines. Additioanlly, they sometimes have difficulties with historical metrics. Review collected by and hosted on G2.com.

Basso C.

IT Specialist

Small-Business (50 or fewer emp.)

7/12/2024

"We especially value the ability to quickly detect anomalies"

4.5/5

What do you like best about FortiCNAPP?

I love that it's really easy to create a panel of widgets that you think are most important and use that to display on a dedicated monitor. We were pleasantly surprised at how easy it was to implement and integrated Lacework into our environment. Review collected by and hosted on G2.com.

What do you dislike about FortiCNAPP?

It is neccessary to spend many hours becoming familiar with the tool to exploit its full potential. And in complex situations, it's sometimes difficult to determine why an alert is high or critical. Review collected by and hosted on G2.com.

Raza A.

Analyst

Small-Business (50 or fewer emp.)

7/10/2024

"Lacework enforces policies and monitors containers at runtime to prevent vulnerabilities"

5/5

What do you like best about FortiCNAPP?

I love its capabilities like centralized administration, control groups, role-based access, and auditing. Additionally, the graphical user interface is easy to understand and clearly breaks down which resources are failing or passing which policies. Review collected by and hosted on G2.com.

What do you dislike about FortiCNAPP?

I thought the initial setup process was a bit long, but we managed to do it with the help of the Lacework team. And I think some areas of the user interface require improvement. Review collected by and hosted on G2.com.

Aleksandr K.

Mid-Market (51-1000 emp.)

2/14/2023

"Good tool for the job it does"

4/5

What do you like best about FortiCNAPP?

It provides excellent documentation to integrate the tool within the workspace easily. I believe this is great when it comes down to containers specifically, as it looks in the skeleton of the image and a runtime scan. Review collected by and hosted on G2.com.

What do you dislike about FortiCNAPP?

I believe the downside of the Lacework comes from its offering of infrastructure as code scanning. It is not context aware thus when you use your IaC code with imported modules, it won't understand what you are importing from those modules thus won't give you a concrete dataflow. Review collected by and hosted on G2.com.

Response from Emily Chin of FortiCNAPP

edit

Thank you for the detailed update of your review, Aleskandr. We're thrilled to hear that Lacework has enhanced your observability and incident response capabilities. It's fantastic to know that our solution is simplifying forensic investigations and improving your container traffic flows. We appreciate you sharing about the IaC challenges you’re experiencing; our team suggests scanning the code in your CI/CD pipeline (instead of in the code repos) with a "terraform plan" file. This file resolves the nested set of files (these are places where one IaC file calls another) and generates a single file to analyze. I hope this suggestion is helpful, or if I can connect you directly with the team to chat more, please send me a note at emily.chin@lacework.net and I would be happy to facilitate.