# FortiCNAPP Reviews **Vendor:** Fortinet **Category:** [Cloud-Native Application Protection Platform (CNAPP)](https://www.g2.com/categories/cloud-native-application-protection-platform-cnapp) **Average Rating:** 4.4/5.0 **Total Reviews:** 386 ## About FortiCNAPP FortiCNAPP (formerly Lacework) is an AI-powered Cloud-Native Application Protection Platform that delivers unified security across your multi-cloud and hybrid environments. Built to protect the entire application lifecycle—from development to runtime—it combines posture management, workload protection, identity security, and threat detection into one integrated platform. By leveraging machine learning and behavioral analytics, FortiCNAPP helps security teams detect unknown threats, reduce noise, and accelerate response. Integrated with the Fortinet Security Fabric, it provides full-stack visibility across cloud, network, and endpoint environments—empowering teams to operate with confidence, reduce complexity, and scale securely. ## FortiCNAPP Pros & Cons **What users like:** - Users value the **robust security capabilities** of FortiCNAPP, enhancing project safety and multi-cloud visibility. (8 reviews) - Users appreciate the **effective vulnerability detection** of FortiCNAPP, which enhances security and simplifies deployment processes. (7 reviews) - Users value the **effective alerting for misconfigurations** in FortiCNAPP, enhancing their cloud security management experience. (6 reviews) - Users appreciate the **good visibility across cloud resources** provided by FortiCNAPP, enhancing security management and compliance. (6 reviews) - Users find Lacework FortiCNAPP incredibly easy to use, highlighting its **smooth setup and intuitive features** for application development. (6 reviews) - Monitoring (6 reviews) - Vulnerability Management (6 reviews) - Cloud Management (5 reviews) - Compliance (5 reviews) - Compliance Management (5 reviews) **What users dislike:** - Users find the **difficult setup** of FortiCNAPP challenging, especially for new users lacking cloud security expertise. (5 reviews) - Users find the **poor documentation** of FortiCNAPP challenging, especially those new to the platform, complicating setup. (5 reviews) - Users find the **complex setup** of FortiCNAPP challenging, especially due to overwhelming features and insufficient documentation. (4 reviews) - Users find the **setup difficulty** of FortiCNAPP challenging, often struggling with understanding the configuration process. (4 reviews) - Users find the **complex configuration** challenging, especially for newcomers lacking cloud security expertise and documentation. (3 reviews) - Users find the **insufficient information** during initial setup and overwhelming data presentation challenging for new users. (3 reviews) - Alert Overload (2 reviews) - Users find Lacework FortiCNAPP's setup to be **complicated and overwhelming** , impacting initial productivity and efficiency. (2 reviews) - Dashboard Issues (2 reviews) - Difficult Configuration (2 reviews) ## FortiCNAPP Reviews ### 1. Unified Cloud Security Visibility with Smart Risk Prioritization **Rating:** 4.0/5.0 stars **Reviewed by:** Ashenafi M. | Vulnerability Assessment and Penetration Tester, Enterprise (> 1000 emp.) **Reviewed Date:** February 18, 2026 **What do you like best about FortiCNAPP?** What I like best about FortiCNAPP is its unified visibility across cloud infrastructure, workloads, and identities in a single platform. Instead of using separate tools for CSPM, CIEM, and vulnerability management, everything is integrated, which makes monitoring and remediation much more efficient. I also appreciate the real-time risk prioritization. It doesn’t just show vulnerabilities, but helps correlate misconfigurations, exposed workloads, and identity risks to highlight what actually matters. The automation capabilities for compliance checks and policy enforcement are another strong point, especially in dynamic cloud environments. **What do you dislike about FortiCNAPP?** One area that could be improved is the user interface, especially for new users. While the platform is powerful, the number of features and dashboards can feel overwhelming at first, and it takes some time to fully understand how everything connects. The initial configuration and policy tuning also require a solid understanding of cloud security concepts, which may be challenging for smaller teams without dedicated cloud security expertise. Additionally, more detailed documentation and practical implementation examples would make onboarding smoother. **What problems is FortiCNAPP solving and how is that benefiting you?** FortiCNAPP helps solve the challenge of fragmented cloud security visibility. In modern cloud environments, risks often come from multiple areas such as misconfigurations, excessive identity permissions, vulnerable workloads, and exposed containers. Managing these risks across different tools can create blind spots and slow down response times. By consolidating CSPM, CIEM, vulnerability management, and runtime protection into a single platform, FortiCNAPP reduces complexity and improves risk prioritization. Instead of reacting to hundreds of low-impact alerts, it correlates findings to highlight the most critical attack paths. This has benefited me by improving efficiency in identifying high-risk issues, reducing manual investigation time, and strengthening overall cloud security posture. It also supports compliance monitoring, which makes reporting and audits much more manageable. ### 2. Effortless Setup with Stellar Features **Rating:** 5.0/5.0 stars **Reviewed by:** Karan B. | Full-stack Developer **Reviewed Date:** October 29, 2025 **What do you like best about FortiCNAPP?** I found Lacework FortiCNAPP incredibly smooth to set up, which was neither tricky nor difficult at all. This ease of installation was something I deeply appreciated. During my hackathon experience, it effectively helped me in publishing my app and mimicking a production-level scenario for my project. This showed me its potential to be a great tool for application development and project presentation. I also loved the peer review feature, which provided authentic previews that were immensely helpful in decision-making. The platform’s associations with reputed partners like G2, HubSpot, and Salesforce highlighted its well-established and trustworthy nature. Additionally, I remember the features like vulnerability management and the alerting and prioritizing capabilities as excellent facets of Lacework FortiCNAPP. The single entity dashboard offering comprehensive visibility across multi-cloud environments, including AWS, Azure, and Kubernetes, was remarkable, helping greatly in monitoring the security posture. These aspects were impressive and beneficial, making it easy to use and efficient for its purposes. **What do you dislike about FortiCNAPP?** {"I find that the integration experience with Lacework FortiCNAPP could be enhanced. The process of linking it up with specific software tools like Terraform, remediation code, or a normal CI/CD system could feel more comprehensive and streamlined. Improving this aspect could make these integrations more efficient and less cumbersome."} **What problems is FortiCNAPP solving and how is that benefiting you?** Lacework FortiCNAPP helped me with app deployment and mimicking production scenarios during a hackathon, facilitating authentic peer reviews and decision-making. ### 3. Diverse Apps, Trustworthy Security, and a Simple, Easy-to-Use Interface **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Internet | Small-Business (50 or fewer emp.) **Reviewed Date:** February 05, 2026 **What do you like best about FortiCNAPP?** the diversity of applications and softwares is very helpfull, also the platform security is very trustworthy, the website interface is also very simple and easy to use. **What do you dislike about FortiCNAPP?** the setup qnd configuration process is hard to understand, the lavk of documentation is also an issue specially for new users of the platform, also it would be a great change if the prices were a bit lower **What problems is FortiCNAPP solving and how is that benefiting you?** It provides a single dashboard for viewing and managing our security posture across all cloud service providers. It’s been a big help in spotting misconfigurations early, and it saves a lot of time overall. ### 4. Neutral Cloud Visibility and Compliance, but Setup and Alert Tuning Take Time **Rating:** 3.5/5.0 stars **Reviewed by:** Verified User in Food Production | Mid-Market (51-1000 emp.) **Reviewed Date:** February 17, 2026 **What do you like best about FortiCNAPP?** Good visibility across cloud resources Helpful posture management and compliance reporting Easy-to-understand dashboards Integrates well with other Fortinet security products Good alerting for misconfigurations and risky cloud permissions **What do you dislike about FortiCNAPP?** Initial setup and onboarding can take time Some reports and dashboards could be more customizable Occasionally too many alerts without proper tuning.. **What problems is FortiCNAPP solving and how is that benefiting you?** FortiCNAPP helps detect cloud misconfigurations, weak security controls, and risky permissions. It improves cloud security posture and reduces the risk of breaches by continuously monitoring cloud environments and providing actionable remediation recommendations. ### 5. Useful Data and Easy Navigation, but Setup Can Be Tedious **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Computer Software | Enterprise (> 1000 emp.) **Reviewed Date:** October 14, 2025 **What do you like best about FortiCNAPP?** The provided data is very useful, and the GUI is easy to navigate. Another great feature is the monitoring system, which enables quick detection of issues. **What do you dislike about FortiCNAPP?** The initial setup process requires some time and effort which can be tedious. Additionally l, the large volume of data presented at the start might seem overwhelming for new users. **What problems is FortiCNAPP solving and how is that benefiting you?** It really helped in maintaining the alerts for security issues and provides a secured platform. ### 6. Excellent security solution for the cloud **Rating:** 3.0/5.0 stars **Reviewed by:** omar s. | Ingénieur sécurité SRE, Small-Business (50 or fewer emp.) **Reviewed Date:** March 10, 2025 **What do you like best about FortiCNAPP?** Lacework offers complete visibility over our entire cloud infrastructure, thus facilitating threat detection and compliance with security standards. **What do you dislike about FortiCNAPP?** The initial setup can be a bit complex for new users, but once in place, the platform works perfectly. **What problems is FortiCNAPP solving and how is that benefiting you?** Lacework helps us solve visibility and compliance issues in our cloud and container environments. Thanks to its automated threat detection, we can quickly identify vulnerabilities and ensure that our infrastructure is always secure, allowing us to reduce the risk of cyberattacks while adhering to compliance standards. ### 7. Product was initially great, but major decline pre and post acquisition. **Rating:** 0.5/5.0 stars **Reviewed by:** Verified User in Computer Software | Mid-Market (51-1000 emp.) **Reviewed Date:** January 27, 2021 **What do you like best about FortiCNAPP?** The setup was very easy for teams to navigate. There were a variety of up to date templates depending on your orchestration. Very easy to deploy the agent regardless of your setup. The network diagrams (polygraphs) are really helpful when responding to an alert or just doing Threat modeling, Its nice to be able to very quickly visualize communications between your services. Integrating into the container registry was really easy and provides us Vuln visibility prior to deployments. The mapping of containers in the registry to containers at runtime is very intuitive, helps you prioritize which items to look at first. **What do you dislike about FortiCNAPP?** They have not released any meaninful features in the last 12 months and are really falling behind everyone else in this space. Every call we seem to have with them, our prior counterparts have been fired or left so you need to restart the conversation. Getting support has gone from OK to a nightmare. The vulnerability management at runtime only updates once per day and a vuln must be cleared for at-least 24 hours before it will no longer show in the platform. This makes closing out issues after a code change or dependency update a more drawn out process. Would be nice if it could be done on demand. Lacework has nice documentation on how to remediate findings in AWS, however they only provide details on how to do it in the AWS console, it would be helpful if they could also provide terraform samples, as that could greatly increase the speed of remediation. **What problems is FortiCNAPP solving and how is that benefiting you?** Vulnerability Management - Host and Containers AWS Cloud Compliance Threat Hunting The lacework setup allows us to easily run a Vulnerability Management program on our AWS images, Instances, and our Container fleet both at run and build-time. The Automatic network diagrams allow us to look at all network connections between our systems and compare them to our baselines. ### 8. The systems are easy to use and understand, and setup is simple **Rating:** 5.0/5.0 stars **Reviewed by:** Ian T. | Assistant, Small-Business (50 or fewer emp.) **Reviewed Date:** July 10, 2024 **What do you like best about FortiCNAPP?** I like implementing Lacework as it's very easy and the continuous development means you stay ahead of the curve. It can also help you gain complete visibility of your workloads in almost all security tasks that will be assigned to you. **What do you dislike about FortiCNAPP?** I think it would be great to be able to easily control what permissions the agent has on the endpoints. And to get the most value, you need to be able to write queries instead of human-readable questions. And in cases columns are unnecessarily truncated. **What problems is FortiCNAPP solving and how is that benefiting you?** The data analytics used in the platform allows for a single plane of glass at the endpoints. Furthermore, the response to the final points is excellent. With this tool we have the possibility of otaining a large amount of information from Windows endpoints and we also reduced costs. ### 9. A lot to improve considering enterprise tools like SonarQube and Snyk, way below Prowler. **Rating:** 3.0/5.0 stars **Reviewed by:** Verified User in Computer & Network Security | Small-Business (50 or fewer emp.) **Reviewed Date:** January 26, 2025 **What do you like best about FortiCNAPP?** I like the multi cloud feature of Lacework including its high reporting standards. **What do you dislike about FortiCNAPP?** If I am a business owner, I wouldn't only think of cloud security, and then there are many other respects to look into for proper security posture management or vulnerability management. So spending on such a new tool which is yet to make a mark would be a tough choice. **What problems is FortiCNAPP solving and how is that benefiting you?** Currently it helps in compliance reporting/integrations wherever required. ### 10. Lacework is a versatile product that has proven invaluable in various use cases **Rating:** 4.5/5.0 stars **Reviewed by:** Marie D. | Platform Engineer, Small-Business (50 or fewer emp.) **Reviewed Date:** July 16, 2024 **What do you like best about FortiCNAPP?** Its functions have been essential to detec anomalies, but do not cause fatigue in the control panel or tools. Additionally, I love that it gives us a single dashboard to view all of our workloads, and the daily alerts help our incident response team prioritize and address urgent issues. **What do you dislike about FortiCNAPP?** Starting to use this platform was one of the best decisions our organization has made. We were looking for an easy-to-use solution that covered all our assets in the cloud. Lacework has worked perfectly. I have nothing negative to say here about this tool. **What problems is FortiCNAPP solving and how is that benefiting you?** We use Lacework primarily for user and entity behavior analysis. Provides protection guarantee against the latest vulnerabilities and different types of threats. Additionally, they our company significantly improve its security posture in the cloud environment. ## FortiCNAPP Discussions - [What is in the pipeline for Lacework?](https://www.g2.com/discussions/24342-what-is-in-the-pipeline-for-lacework) - 2 comments, 1 upvote - [Is lacework a SIEM?](https://www.g2.com/discussions/is-lacework-a-siem) - 1 comment - [View FortiCNAPP pricing details and edition comparison](https://www.g2.com/products/forticnapp/reviews/forticnapp-review-2993810?section=pricing&secure%5Bexpires_at%5D=2026-05-29+14%3A50%3A31+-0500&secure%5Bsession_id%5D=3d259d6a-4d91-468d-b3a7-c076fe50da79&secure%5Btoken%5D=f5f008b9fae44ba88279cd6fda6c876450bc74324b018f33fd196abd570c5ea1&format=llm_user) ## FortiCNAPP Integrations - [AWS Bedrock](https://www.g2.com/products/aws-bedrock/reviews) - [AWS CloudTrail](https://www.g2.com/products/aws-cloudtrail/reviews) - [AWS Security Hub](https://www.g2.com/products/aws-security-hub/reviews) - [Azure Kubernetes Service (AKS)](https://www.g2.com/products/azure-kubernetes-service-aks/reviews) - [Google Anthos Service Mesh](https://www.g2.com/products/google-anthos-service-mesh/reviews) - [Google Kubernetes Engine (GKE)](https://www.g2.com/products/google-kubernetes-engine-gke/reviews) ## FortiCNAPP Features **Management** - Dashboards and Reports - Workflow Management - Administration Console **Administration** - Risk Scoring - Security Auditing - Configuration Management **Security** - Compliance Monitoring - Anomoly Detection - Cloud Gap Analytics **Configuration** - Configuration Monitoring - Unified Policy Management - Adaptive Access Control - API / Integrations **Access control - Cloud Infrastructure Entitlement Management (CIEM)** - Policy Management - Fine-Grained Access Control - Role-Based Access Control (RBAC) - AI-driven access control **Security - Cloud-Native Application Protection Platform (CNAPP)** - Workload and container security - Threat detection and response - DevSecOps Integrations - Unified Visibility **Cloud Visibility** - Data Discovery - Cloud Registry - Cloud Gap Analytics **Operations** - Governance - Logging and Reporting - API / Integrations **Monitoring** - Continuous Image Assurance - Behavior Monitoring **Compliance** - Governance - Data Governance - Sensitive Data Compliance **Security** - Compliance Monitoring - Risk Analysis - Reporting **Visibility** - Multicloud Visibility - Asset Discovery **Monitoring - Cloud Infrastructure Entitlement Management (CIEM)** - Monitoring - AI-based detection **Artificial Intelligence - Cloud-Native Application Protection Platform (CNAPP)** - Intelligent remediations and suggestions - Risk prioritization - Anomaly detection using machine learning **Security** - Data Security - Security Auditing **Security Controls ** - Anomaly Detection - Security Auditing - Cloud Gap Analytics **Protection** - Dynamic Image Scanning - Runtime Protection **Administration** - Policy Enforcement - Auditing - Workflow Management **Administration** - Security Integration - Multicloud Visibility **Vulnerability Management** - Threat Hunting - Vulnerability Scanning - Vulnerability Intelligence - Risk-Prioritization **Auditing - Cloud Infrastructure Entitlement Management (CIEM)** - Visibility - Compliance Reporting **Cloud Configuration Management - Cloud-Native Application Protection Platform (CNAPP)** - Multi-cloud visibility - Cloud Security Posture Management (CSPM) **Identity** - Governance - User Analytics **Agentic AI - Cloud Security Monitoring and Analytics** - Autonomous Task Execution - Proactive Assistance - Decision Making **Agentic AI - Cloud-Native Application Protection Platform (CNAPP)** - Autonomous Task Execution - Adaptive Learning ## Top FortiCNAPP Alternatives - [Wiz](https://www.g2.com/products/wiz-wiz/reviews) - 4.7/5.0 (788 reviews) - [Sysdig Secure](https://www.g2.com/products/sysdig-sysdig-secure/reviews) - 4.8/5.0 (110 reviews) - [Orca Security](https://www.g2.com/products/orca-security/reviews) - 4.6/5.0 (265 reviews)