FortiCNAPP Reviews & Product Details

FortiCNAPP (formerly Lacework) is an AI-powered Cloud-Native Application Protection Platform that delivers unified security across your multi-cloud and hybrid environments. Built to protect the entire application lifecycle—from development to runtime—it combines posture management, workload protection, identity security, and threat detection into one integrated platform. By leveraging machine learning and behavioral analytics, FortiCNAPP helps security teams detect unknown threats, reduce noise, and accelerate response. Integrated with the Fortinet Security Fabric, it provides full-stack visibility across cloud, network, and endpoint environments—empowering teams to operate with confidence, reduce complexity, and scale securely.

Product Website

Seller

Fortinet

Discussions

FortiCNAPP Community

Languages Supported

English

Product Description

FortiCNAPP is a comprehensive Cloud-Native Application Protection Platform (CNAPP) that consolidates Cloud Security Posture Management (CSPM), Cloud Workload Protection (CWPP), Cloud Infrastructure Entitlement Management (CIEM), Kubernetes security, and compliance into a single solution. Using AI-based anomaly detection and behavioral analytics, FortiCNAPP continuously monitors cloud environments to identify misconfigurations, vulnerabilities, and active threats in real time. The platform supports agentless and agent-based deployment models, ensuring flexible coverage across diverse architectures. FortiCNAPP also integrates with the Fortinet Security Fabric, correlating cloud data with network and endpoint insights from FortiGuard, FortiSOAR, and more, delivering full-stack threat context, faster remediation, and unified risk management.

Overview by

Frederick Harris

Value at a Glance

Averages based on real user reviews.

Time to Implement

2 months

View More Pricing Information

FortiCNAPP Integrations

(8)

Verified by FortiCNAPP

FortiCNAPP Media

This is the first view someone sees when entering the Polygraph Data Platform. From the dashboard, you can see total alerts by severity, newly detected vulnerabilities, cloud compliance by provider, and more.

FortiCNAPP Demo - High-Severity Event Card

This screenshot is of an event card associated with a Critical alert. From this card, we can determine that this alert was triggered by an anomalous activity, that it's internet exposed, and that it's already connected to a Jira ticket (LWAL-3955) for remediation. You can also explore why the ale...

FortiCNAPP Demo - High-Severity Event Polygraph Visualization

Within every event card is a visualization, mapping out the exposure path. Here, we see that the initial Critical alert mentioned in the previous screenshot (a bad external host connection) stemmed from a log4j vulnerability.

FortiCNAPP Demo - Environment-wide Polygraph Visualization

At any point, users can get a view of all application communications across an entire cloud environment, over a set period of time. In this situation, we can see how a known bad IP address connected to multiple cloud properties, including the log4j vulnerability tied to the alert in the prior 2 s...

FortiCNAPP Demo - Vulnerability Dashboard

This screenshot shows the vulnerability dashboard, which provides both a high-level view of all containers scanned and active vulnerabilities present along with the specifics for each image — which can be further explored for more information.

From the Compliance dashboard, users can get a view of compliance standing for all connected cloud accounts. This scenario shows 4 total cloud accounts across AWS, Google Cloud, and Microsoft Azure.

Introducing Fortinet's Lacework FortiCNAPP, the most comprehensive cloud-native application protection platform available. Lacework FortiCNAPP helps quickly manage risk, rapidly detect, and respond to active threats.

Official Downloads

(3)

edit

The CISO Playbook for Cloud Security

CNAPP For Dummies

Interactive Demo

edit

Try an interactive demo created by the software seller (right here on G2).

Try demo

G2 reviews are authentic and verified.

Here's how.

Luqmaan M.

Security Analyst

Enterprise (> 1000 emp.)

5/22/2024

"Swiss Army Knife On Steroids"

5/5

What do you like best about FortiCNAPP?

I love the AI feature that gives a direction on how to triage some alerts. I also love the polygraph Review collected by and hosted on G2.com.

What do you dislike about FortiCNAPP?

It has too much information,and little workshops Review collected by and hosted on G2.com.

Response from Emily Chin of FortiCNAPP

edit

Thanks very much for your positive review! It's great to hear that you find the AI feature and Polygraph valuable! I’m very excited to share that we have weekly workshops available and regular live webinars with our technical team: https://community.lacework.com/p/events-live-sessions. If a one-on-one conversation would be beneficial, I’d be happy to connect you with someone directly. Please let me know at emily.chin@lacework.net.

Abhilash T.

Mid-Market (51-1000 emp.)

4/3/2023

"The Lacework experience"

4/5

What do you like best about FortiCNAPP?

its a great swiss knife tool combining vulnerabilities with attack paths and reporting based on various international standards like ISO27001. Review collected by and hosted on G2.com.

What do you dislike about FortiCNAPP?

the attack path does not work for our infrastructure design unfortunately..or at least not completely Review collected by and hosted on G2.com.

Deivydas R.

Mid-Market (51-1000 emp.)

11/17/2023

"Quick way to catch vulnerabilities"

2.5/5

What do you like best about FortiCNAPP?

Our team installed Lacework on AWS ECS instances and it showed a lot of potential vulnerabilities. There were some packages that we would have never considered as malicious ones and Lacework showed us those.

Also, it is pretty to launch on services like EC2. Review collected by and hosted on G2.com.

What do you dislike about FortiCNAPP?

Not so easy to install Lacework on ECS machines.

Our Devops team did some extra mile job to allow us to run Lacework on our ECS tasks. However, that run of the sidecar resulted in longer start time of the ECS and bigger resource consumption.

Also the pricing is too aggresive in my oppinion. The value it gives is great, but the cost we are paying for it - is way too much. Review collected by and hosted on G2.com.

Response from Emily Chin of FortiCNAPP

edit

Thank you so much for taking the time to share your experience with Lacework. We appreciate your thorough and thoughtful review. It’s great to hear that our platform has been effective in identifying potential vulnerabilities and enhancing visibility into your environment. If you need any additional help or want to meet with the team, please feel free to reach out to me any time: emily.chin@lacework.net.

Verified User in Computer Software

Enterprise (> 1000 emp.)

6/3/2024

"Lacework: A Very Good Cloud Security Tool"

4/5

What do you like best about FortiCNAPP?

Lacework is fully featured. It contains all of what we need for a cloud security platform, from alerting to CSPM. Review collected by and hosted on G2.com.

What do you dislike about FortiCNAPP?

The Lacework global search does not always find what I need. I wish it were more intuitive to search for resources. Review collected by and hosted on G2.com.

Verified User in Computer Software

Enterprise (> 1000 emp.)

10/26/2023

"Lacework CNAPP tool"

3.5/5

What do you like best about FortiCNAPP?

Lacework's ability to provide insights from major CSP's is great as it provides single pane of glass for all findings from all cloud.

Lacework's integration is good for small to medium size cloud footprint companies but requires engineering work for enterprise and very large cloud footprint companies. Review collected by and hosted on G2.com.

What do you dislike about FortiCNAPP?

Ability to export data to SIEM environment out of the box. It is tough and requires considerable work to export data from Lacework. Review collected by and hosted on G2.com.

Jonatan G.

Mid-Market (51-1000 emp.)

9/18/2023

"A great Cibersecurty monitoring platform"

4.5/5

What do you like best about FortiCNAPP?

We use Lacework as our Cibersecurty Cloud activity monitoring tool. Lacework give us alerts about suspecious activities happening in our clouds and provides us relevant information for investigations. Also, vulnerabilities management for hosts and containers are very valuable as we use the reports as our baseline to drive our security releases. Finally, we use Security Compliance information to evaulate our security posture and is has been very useful to enforce our security policies. Review collected by and hosted on G2.com.

What do you dislike about FortiCNAPP?

We have found some issues dealing with the volume of information that we have with the user interface; nevertheless the support team has helped us to find the way to use the Lacework API to retrieve the reports that we need. Review collected by and hosted on G2.com.

What problems is FortiCNAPP solving and how is that benefiting you?

Lecework help us to unify and centralize several securty features instead using different brands and tools. Lacework gives visibility to our security issues and the main benefit for us is that we can track and follow them. The dashboards and insigths can help us to understand our progress and help us to prioritize our security improvement projects. Review collected by and hosted on G2.com.

Benjamin T.

Cyber Security Consultant

Enterprise (> 1000 emp.)

3/7/2024

"Lacework Review"

4.5/5

What do you like best about FortiCNAPP?

Lacework puts many things like logs and events in a single portal that is easy to monitor and manage. A bonus is also making sure the security processes meet compliance as well as the vulnerability scanner. Review collected by and hosted on G2.com.

What do you dislike about FortiCNAPP?

The "Resources" section could be a little cluttered, altough it provides a ton of information. Review collected by and hosted on G2.com.

What problems is FortiCNAPP solving and how is that benefiting you?

Lacework has helped to streamline the security processes. Instead of going through multiple logs from many different places, it is now possible to access all of them in a single place in Lacework. That helps a lot with monitoring and exactly what we needed to stay alert at the frontline for defence. Review collected by and hosted on G2.com.

Response from Emily Chin of FortiCNAPP

edit

We're glad to hear that Lacework has streamlined your security processes and enhanced your monitoring and management of logs and events. Thank you for leaving us a positive review. We appreciate your feedback about the 'Resources' section and if you have any additional questions or suggestions, please send them to us directly: emily.chin@lacework.net.

Pankaj P.

Security Architect

Enterprise (> 1000 emp.)

5/28/2024

"Lacework CSPM and Cloud workload protection"

4/5

What do you like best about FortiCNAPP?

Lacework product offers AI components that reduce the number of alerts for managing security operations, offering great ease of use. Their client engagement team truly partners with us to provide great support and ease of implementation. Review collected by and hosted on G2.com.

What do you dislike about FortiCNAPP?

Slow progression on troubleshooting technical issue. Review collected by and hosted on G2.com.

Michael E.

Senior Information Security Analyst

Mid-Market (51-1000 emp.)

5/22/2024

"Great product. No issues using it so far in the day to day task"

4/5

What do you like best about FortiCNAPP?

The UI. It's simple and easy to navigate. Review collected by and hosted on G2.com.

What do you dislike about FortiCNAPP?

Sometimes the platform can be slow which leads to draging out simple tasks. Review collected by and hosted on G2.com.

Response from Emily Chin of FortiCNAPP

edit

It’s great to hear that you find the UI simple and easy to navigate and appreciate your feedback on our platform’s performance and speed. If I can offer any additional support, please don't hesitate to email me at emily.chin@lacework.net

Maurice H.

IT-Systemadministrator

Mid-Market (51-1000 emp.)

5/23/2024

"Easy to use after a short time of working with it"

4.5/5

What do you like best about FortiCNAPP?

The GUI its super intuitive, im not missing any feature. I also do like that Laceworks is listing every CVE related to each case. Review collected by and hosted on G2.com.

What do you dislike about FortiCNAPP?

We had smaller issues with integrating it into our enviroment but that could be fixed in no time! Review collected by and hosted on G2.com.

Response from Emily Chin of FortiCNAPP

edit

Thanks for sharing your insights on your experience with our platform. Our team will be so happy to hear that you find it easy to use and intuitive. We're committed to ensuring you get the most out of Lacework, so if there’s anything I can assist, please email any time at emily.chin@lacework.net