FortiCNAPP Reviews & Product Details

FortiCNAPP (formerly Lacework) is an AI-powered Cloud-Native Application Protection Platform that delivers unified security across your multi-cloud and hybrid environments. Built to protect the entire application lifecycle—from development to runtime—it combines posture management, workload protection, identity security, and threat detection into one integrated platform. By leveraging machine learning and behavioral analytics, FortiCNAPP helps security teams detect unknown threats, reduce noise, and accelerate response. Integrated with the Fortinet Security Fabric, it provides full-stack visibility across cloud, network, and endpoint environments—empowering teams to operate with confidence, reduce complexity, and scale securely.

Seller

Fortinet

Discussions

FortiCNAPP Community

Languages Supported

English

Solution Type

All-in-One

Value at a Glance

Averages based on real user reviews.

Time to Implement

2 months

Return on Investment

14 months

View More Pricing Information

Top-Rated Alternatives

View All Alternatives

User Insights

Average based on 386 real user reviews.

Implementation Time

2 months

Perceived Cost

$$$$$

Typical contract price

$0k - $0k

Per Year

FortiCNAPP Integrations

(6)

Integration information sourced from real user reviews.

FortiCNAPP Reviews FAQs

Generated using AI

Last updated: Nov 04, 2026

What is FortiCNAPP, and what problem is it built to solve?

FortiCNAPP is used to bring cloud security visibility and monitoring together across cloud infrastructure, workloads, and containers. It helps teams identify vulnerabilities, misconfigurations, unusual activity, and compliance gaps without relying on separate tools for each area.

What languages does FortiCNAPP support?

FortiCNAPP supports 1 language: English.

What company sizes and industries is FortiCNAPP the best fit for?

FortiCNAPP appears to fit teams across small businesses, mid-market organizations, and enterprises, with positive experiences also spanning several industries. The most represented segments include:

Company size — Mid-market: A prominent group of positive users.
Company size — Enterprise: Also strongly represented, including teams managing extensive cloud environments.
Company size — Small business: Positive users also include smaller organizations.
Industry — Computer software and IT services: Among the most represented industry groups.
Industry — Financial services: A recurring industry segment.
Industry — Healthcare: Also represented among positive users.

How long does it take to implement FortiCNAPP across a team?

Implementation time varies with the environment and deployment approach, but getting FortiCNAPP live in under a month is the most commonly reported experience. Longer rollouts also occur, particularly where setup or onboarding is more involved.

Time to go live	Relative frequency
Under 1 month	Most common
1–3 months	Also common
3 months or longer	Less common

What customer support options does FortiCNAPP provide, and how do users find the overall support experience?

FortiCNAPP’s support experience is often described as helpful and responsive, especially during onboarding and technical questions. Experiences can vary, with some teams encountering slower troubleshooting or finding that guidance and documentation could be clearer.

What is the experience like for teams switching to FortiCNAPP from another tool?

Teams switching to FortiCNAPP often describe the change as a move toward broader cloud and container visibility, more consolidated security workflows, or less alert noise. Prior tools mentioned include Prisma Cloud, Aqua Security, and Qualys, as well as cloud monitoring and security products such as Datadog and Alert Logic. The reasons for switching include gaps in container coverage, integration or usability challenges, cost, and a desire for stronger alert prioritization; the transition can be straightforward, though some environments need additional configuration and tuning.

What tools and platforms does FortiCNAPP integrate with, and how do these integrations help users get more value from the product?

FortiCNAPP offers 6 integrations spanning cloud services and Kubernetes environments. These connections can help teams bring cloud activity and security findings into a more unified monitoring workflow.

AWS services: AWS Bedrock, AWS CloudTrail, and AWS Security Hub.
Azure Kubernetes: Azure Kubernetes Service (AKS).
Google Cloud and Kubernetes: Google Anthos Service Mesh and Google Kubernetes Engine (GKE).

What features or capabilities could make FortiCNAPP even more useful?

FortiCNAPP could be more useful with clearer ways to find, interpret, and act on the information it surfaces. Frequently requested improvements include:

More customizable dashboards and reports: Make it easier to tailor views, filters, and reporting for different teams and audit needs.
Clearer alert context and tuning: Explain why findings matter and make it simpler to reduce false positives and notification noise.
Smoother investigation and navigation: Improve search, filtering, and movement between related findings and resources.
More streamlined remediation and workflow automation: Expand ways to route findings into existing tools and automate follow-up actions.
More practical guidance: Add clearer documentation, examples, and learning materials for setup and advanced use.

How useful do FortiCNAPP users find its AI features in everyday use?

FortiCNAPP’s machine-learning and behavioral analysis capabilities are useful for spotting unusual activity and helping teams focus on higher-priority alerts. Users describe the baseline-based approach as reducing alert noise and investigation effort, although some find it difficult to understand why a particular alert fired, and false positives or delays can still occur.

Is FortiCNAPP considered safe and secure for handling data?

FortiCNAPP can give teams a broader view of cloud activity, vulnerabilities, and configuration or compliance issues, helping them investigate risks and prioritize follow-up. That visibility can support security operations, but it is not a guarantee that every threat will be detected; users also describe alert noise, occasional false positives, and delays in some detection workflows.

G2 reviews are authentic and verified.

Here's how.

Ashenafi M.

Vulnerability Assessment and Penetration Tester

Enterprise (> 1000 emp.)

2/18/2026

"Unified Cloud Security Visibility with Smart Risk Prioritization"

4/5

What do you like best about FortiCNAPP?

What I like best about FortiCNAPP is its unified visibility across cloud infrastructure, workloads, and identities in a single platform. Instead of using separate tools for CSPM, CIEM, and vulnerability management, everything is integrated, which makes monitoring and remediation much more efficient. I also appreciate the real-time risk prioritization. It doesn’t just show vulnerabilities, but helps correlate misconfigurations, exposed workloads, and identity risks to highlight what actually matters. The automation capabilities for compliance checks and policy enforcement are another strong point, especially in dynamic cloud environments. Review collected by and hosted on G2.com.

What do you dislike about FortiCNAPP?

One area that could be improved is the user interface, especially for new users. While the platform is powerful, the number of features and dashboards can feel overwhelming at first, and it takes some time to fully understand how everything connects. The initial configuration and policy tuning also require a solid understanding of cloud security concepts, which may be challenging for smaller teams without dedicated cloud security expertise. Additionally, more detailed documentation and practical implementation examples would make onboarding smoother. Review collected by and hosted on G2.com.

What problems is FortiCNAPP solving and how is that benefiting you?

FortiCNAPP helps solve the challenge of fragmented cloud security visibility. In modern cloud environments, risks often come from multiple areas such as misconfigurations, excessive identity permissions, vulnerable workloads, and exposed containers. Managing these risks across different tools can create blind spots and slow down response times.

By consolidating CSPM, CIEM, vulnerability management, and runtime protection into a single platform, FortiCNAPP reduces complexity and improves risk prioritization. Instead of reacting to hundreds of low-impact alerts, it correlates findings to highlight the most critical attack paths. This has benefited me by improving efficiency in identifying high-risk issues, reducing manual investigation time, and strengthening overall cloud security posture. It also supports compliance monitoring, which makes reporting and audits much more manageable. Review collected by and hosted on G2.com.

Karan B.

Full-stack Developer

10/29/2025

"Effortless Setup with Stellar Features"

5/5

What do you like best about FortiCNAPP?

I found Lacework FortiCNAPP incredibly smooth to set up, which was neither tricky nor difficult at all. This ease of installation was something I deeply appreciated. During my hackathon experience, it effectively helped me in publishing my app and mimicking a production-level scenario for my project. This showed me its potential to be a great tool for application development and project presentation. I also loved the peer review feature, which provided authentic previews that were immensely helpful in decision-making. The platform’s associations with reputed partners like G2, HubSpot, and Salesforce highlighted its well-established and trustworthy nature. Additionally, I remember the features like vulnerability management and the alerting and prioritizing capabilities as excellent facets of Lacework FortiCNAPP. The single entity dashboard offering comprehensive visibility across multi-cloud environments, including AWS, Azure, and Kubernetes, was remarkable, helping greatly in monitoring the security posture. These aspects were impressive and beneficial, making it easy to use and efficient for its purposes. Review collected by and hosted on G2.com.

What do you dislike about FortiCNAPP?

{"I find that the integration experience with Lacework FortiCNAPP could be enhanced. The process of linking it up with specific software tools like Terraform, remediation code, or a normal CI/CD system could feel more comprehensive and streamlined. Improving this aspect could make these integrations more efficient and less cumbersome."} Review collected by and hosted on G2.com.

Verified User in Internet

Small-Business (50 or fewer emp.)

2/5/2026

"Diverse Apps, Trustworthy Security, and a Simple, Easy-to-Use Interface"

5/5

What do you like best about FortiCNAPP?

the diversity of applications and softwares is very helpfull, also the platform security is very trustworthy, the website interface is also very simple and easy to use. Review collected by and hosted on G2.com.

What do you dislike about FortiCNAPP?

the setup qnd configuration process is hard to understand, the lavk of documentation is also an issue specially for new users of the platform, also it would be a great change if the prices were a bit lower Review collected by and hosted on G2.com.

Verified User in Food Production

Mid-Market (51-1000 emp.)

2/17/2026

"Neutral Cloud Visibility and Compliance, but Setup and Alert Tuning Take Time"

3.5/5

What do you like best about FortiCNAPP?

Good visibility across cloud resources

Helpful posture management and compliance reporting

Easy-to-understand dashboards

Integrates well with other Fortinet security products

Good alerting for misconfigurations and risky cloud permissions Review collected by and hosted on G2.com.

What do you dislike about FortiCNAPP?

Initial setup and onboarding can take time

Some reports and dashboards could be more customizable

Occasionally too many alerts without proper tuning.. Review collected by and hosted on G2.com.

Verified User in Computer Software

Enterprise (> 1000 emp.)

10/14/2025

"Useful Data and Easy Navigation, but Setup Can Be Tedious"

4.5/5

What do you like best about FortiCNAPP?

The provided data is very useful, and the GUI is easy to navigate. Another great feature is the monitoring system, which enables quick detection of issues. Review collected by and hosted on G2.com.

What do you dislike about FortiCNAPP?

The initial setup process requires some time and effort which can be tedious. Additionally l, the large volume of data presented at the start might seem overwhelming for new users. Review collected by and hosted on G2.com.

omar s.

Ingénieur sécurité SRE

Small-Business (50 or fewer emp.)

3/10/2025

"Excellent security solution for the cloud"

3/5

What do you like best about FortiCNAPP?

Lacework offers complete visibility over our entire cloud infrastructure, thus facilitating threat detection and compliance with security standards. Review collected by and hosted on G2.com.

What do you dislike about FortiCNAPP?

The initial setup can be a bit complex for new users, but once in place, the platform works perfectly. Review collected by and hosted on G2.com.

What problems is FortiCNAPP solving and how is that benefiting you?

Lacework helps us solve visibility and compliance issues in our cloud and container environments. Thanks to its automated threat detection, we can quickly identify vulnerabilities and ensure that our infrastructure is always secure, allowing us to reduce the risk of cyberattacks while adhering to compliance standards. Review collected by and hosted on G2.com.

Verified User in Computer Software

Mid-Market (51-1000 emp.)

Originally submitted 1/27/2021

"Product was initially great, but major decline pre and post acquisition."

0.5/5

What do you like best about FortiCNAPP?

The setup was very easy for teams to navigate. There were a variety of up to date templates depending on your orchestration. Very easy to deploy the agent regardless of your setup.

The network diagrams (polygraphs) are really helpful when responding to an alert or just doing Threat modeling, Its nice to be able to very quickly visualize communications between your services.

Integrating into the container registry was really easy and provides us Vuln visibility prior to deployments. The mapping of containers in the registry to containers at runtime is very intuitive, helps you prioritize which items to look at first. Review collected by and hosted on G2.com.

What do you dislike about FortiCNAPP?

They have not released any meaningful features in the last 12 months and are really falling behind everyone else in this space. Every call we seem to have with them, our prior counterparts have been fired or left so you need to restart the conversation. Getting support has gone from OK to a nightmare.

The vulnerability management at runtime only updates once per day and a vuln must be cleared for at least 24 hours before it will no longer show in the platform. This makes closing out issues after a code change or dependency update a more drawn out process. Would be nice if it could be done on demand.

Lacework has nice documentation on how to remediate findings in AWS, however they only provide details on how to do it in the AWS console, it would be helpful if they could also provide terraform samples, as that could greatly increase the speed of remediation. Review collected by and hosted on G2.com.

What problems is FortiCNAPP solving and how is that benefiting you?

Vulnerability Management - Host and Containers

AWS Cloud Compliance

Threat Hunting

The lacework setup allows us to easily run a Vulnerability Management program on our AWS images, Instances, and our Container fleet both at run and build-time.

The Automatic network diagrams allow us to look at all network connections between our systems and compare them to our baselines. Review collected by and hosted on G2.com.

Ian T.

Assistant

Small-Business (50 or fewer emp.)

7/10/2024

"The systems are easy to use and understand, and setup is simple"

5/5

What do you like best about FortiCNAPP?

I like implementing Lacework as it's very easy and the continuous development means you stay ahead of the curve. It can also help you gain complete visibility of your workloads in almost all security tasks that will be assigned to you. Review collected by and hosted on G2.com.

What do you dislike about FortiCNAPP?

I think it would be great to be able to easily control what permissions the agent has on the endpoints. And to get the most value, you need to be able to write queries instead of human-readable questions. And in cases columns are unnecessarily truncated. Review collected by and hosted on G2.com.

Verified User in Computer & Network Security

Small-Business (50 or fewer emp.)

1/26/2025

"A lot to improve considering enterprise tools like SonarQube and Snyk, way below Prowler."

3/5

What do you like best about FortiCNAPP?

I like the multi cloud feature of Lacework including its high reporting standards. Review collected by and hosted on G2.com.

What do you dislike about FortiCNAPP?

If I am a business owner, I wouldn't only think of cloud security, and then there are many other respects to look into for proper security posture management or vulnerability management. So spending on such a new tool which is yet to make a mark would be a tough choice. Review collected by and hosted on G2.com.

Marie D.

Platform Engineer

Small-Business (50 or fewer emp.)

7/16/2024

"Lacework is a versatile product that has proven invaluable in various use cases"

4.5/5

What do you like best about FortiCNAPP?

Its functions have been essential to detect anomalies, but do not cause fatigue in the control panel or tools. Additionally, I love that it gives us a single dashboard to view all of our workloads, and the daily alerts help our incident response team prioritize and address urgent issues. Review collected by and hosted on G2.com.

What do you dislike about FortiCNAPP?

Starting to use this platform was one of the best decisions our organization has made. We were looking for an easy-to-use solution that covered all our assets in the cloud. Lacework has worked perfectly. I have nothing negative to say here about this tool. Review collected by and hosted on G2.com.