Lacework (FortiCNAPP, a Fortinet company)
Once an $8B-plus unicorn built on behavioral cloud anomaly detection, Lacework is now Fortinet's CNAPP (branded FortiCNAPP) after a 2024 acquisition.
Visit Website ↗Overview
Lacework was a cloud security startup best known for its Polygraph technology, which used machine learning to baseline normal cloud behavior and flag anomalies without hand-written detection rules. After reaching a peak valuation in the billions during the 2021 cloud-security funding boom, the company was acquired by Fortinet, announced June 10, 2024.
Under Fortinet, the product is sold as FortiCNAPP, combining Lacework’s CSPM, Kubernetes security, SCA, and SAST with Fortinet’s FortiSOAR orchestration and FortiGuard threat intelligence. Fortinet cites recognition in three KuppingerCole CNAPP Compass leadership categories and a 2025 SC Award for Best Cloud Workload Protection Solution.
Innovation Matrix Assessment
Since the June 2024 acquisition, Fortinet has actively integrated Lacework with FortiSOAR/FortiGuard and won a 2025 SC Award, showing continued but now Fortinet-paced development.
Rule-free behavioral (Polygraph) anomaly detection plus CIEM based on net-effective permissions targets both unknown threats and identity risk.
The trajectory from a reported multi-billion-dollar 2021 valuation to a 2024 acquisition rather than IPO is itself a momentum signal, offset by credibility now gained from Fortinet's public-company scale.
Rule-free, graph/ML-based behavioral anomaly detection was a genuinely novel approach to cloud threat detection when Lacework introduced it.
KuppingerCole CNAPP Compass leadership recognition and a named 2025 SC Award are credible third-party signals, though no independently documented breach-prevention case study was found.
Behavioral runtime detection remains relevant, and folding it into Fortinet's broad security fabric extends its reach, though it must now compete for roadmap priority within a much larger portfolio.
Why CISOs Should Care
Existing Fortinet customers get Lacework's behavioral, rule-free anomaly detection and CIEM wired directly into FortiSOAR and FortiGuard threat intelligence.
What Makes It Different
Its Polygraph approach baselines normal cloud behavior with machine learning and flags deviations without maintained detection rules — now operating inside a much larger network-security vendor's platform.
The Matrix Verdict
62/100 — INCREMENTAL INNOVATOR
A mid-tier entry with genuinely disruptive core technology whose independent momentum stalled into an acquisition rather than the public markets its 2021 valuation once implied.
Editorial Note: Claims vs. Verified Findings
The acquisition date, KuppingerCole recognition, SC Award, and specific performance figures come directly from Fortinet's own blog and are vendor-sourced; pre-acquisition funding total and peak valuation were not re-confirmed independently this session.
Sources
Alternatives to Lacework (FortiCNAPP, a Fortinet company)
Wiz
Agentless, graph-based cloud security platform that maps multi-cloud risk end-to-end, now owned by Google after a record $32B…
Chainguard
Provides hardened, minimal, continuously-rebuilt container images and software packages to eliminate vulnerabilities before they reach production.
Microsoft Defender for Cloud
Microsoft's built-in cloud-native application protection platform, unifying CSPM, workload protection, and DevOps security natively across Azure, AWS, and…
Sysdig
The company behind Falco, the CNCF's runtime security standard, offering an eBPF/kernel-level CNAPP built on live syscall-based threat…
Upwind Security
Fast-growing, venture-backed CNAPP startup combining agentless scanning with eBPF runtime sensors for real-time cloud and AI workload risk…
Tenable Cloud Security
An agentless, graph-based cloud identity and posture platform, born as Israeli startup Ermetic, now folded into Tenable's exposure-management…