Honest pros, cons, and verdict on this data & analytics tool
✅ Polygraph behavioral engine automatically baselines normal activity and surfaces anomalies without requiring teams to write and maintain detection rules, dramatically reducing tuning overhead
Starting Price
$50,000/year
Free Tier
No
Category
Data & Analytics
Skill Level
Enterprise
AI-powered cloud-native application protection platform providing behavioral threat detection, compliance monitoring, and vulnerability management across multi-cloud environments
Lacework, now rebranded as FortiCNAPP, is an enterprise-grade AI-powered Cloud-Native Application Protection Platform (CNAPP) in the cloud security category that provides behavioral threat detection, compliance automation, and vulnerability management, with custom pricing typically starting in the mid-five-figure annual range for mid-market deployments. Originally founded in 2015 and acquired by Fortinet in 2024 for an undisclosed sum following $1.3 billion in total venture funding, the platform pioneered the use of machine learning and behavioral analytics to automatically baseline normal cloud activity and detect anomalies indicative of threats. The Polygraph Data Platform ingests over 750 billion cloud events daily across customer environments, building behavioral models for every entity — users, processes, containers, and network flows — to surface deviations that rule-based systems miss entirely.
The platform consolidates five core cloud security disciplines into a single solution: Cloud Security Posture Management (CSPM), Cloud Workload Protection (CWPP), Cloud Infrastructure Entitlement Management (CIEM), Kubernetes security, and vulnerability management. This unified approach replaces an average of 3–5 point security tools for enterprise customers, reducing tool sprawl and the associated licensing and integration overhead. FortiCNAPP supports over 150 prebuilt compliance frameworks and policy packs — including PCI DSS 4.0, HIPAA, SOC 2 Type II, NIST 800-53, and CIS Benchmarks — enabling continuous compliance evidence collection that organizations report cuts audit preparation effort by more than half compared to manual processes.
per month
AI-powered agentless cloud security platform that provides comprehensive vulnerability management and compliance monitoring across multi-cloud environments
Starting at Enterprise
Learn more →Self-learning AI cybersecurity platform that creates an Enterprise Immune System, autonomously detecting and responding to sophisticated cyber threats without signatures or rules.
Starting at Enterprise
Learn more →Lacework (now FortiCNAPP) delivers on its promises as a data & analytics tool. While it has some limitations, the benefits outweigh the drawbacks for most users in its target market.
AI-powered cloud-native application protection platform providing behavioral threat detection, compliance monitoring, and vulnerability management across multi-cloud environments
Yes, Lacework (now FortiCNAPP) is good for data & analytics work. Users particularly appreciate polygraph behavioral engine automatically baselines normal activity and surfaces anomalies without requiring teams to write and maintain detection rules, dramatically reducing tuning overhead. However, keep in mind enterprise-only pricing with no published tiers or self-serve options makes it inaccessible for smaller teams and creates friction for evaluation.
Lacework (now FortiCNAPP) starts at $50,000/year. Check their pricing page for the most current rates and features included in each plan.
Lacework (now FortiCNAPP) is best for Enterprises running large multi-cloud footprints across AWS, Azure, and GCP that need unified visibility and posture management without deploying and correlating multiple point tools and Security teams struggling with alert fatigue from rule-based detection who need behavioral anomaly detection to surface genuine threats without constant rule tuning. It's particularly useful for data & analytics professionals who need behavioral anomaly detection.
Popular Lacework (now FortiCNAPP) alternatives include Orca Security, Darktrace. Each has different strengths, so compare features and pricing to find the best fit.
Last verified March 2026