Lacework
Data-driven cloud-native CNAPP acquired by Fortinet in June 2024 — anomaly-based detection and compliance integrated into Fortinet's security fabric
Lacework's Polygraph behavioral analysis engine learns the normal behavior of every cloud workload and automatically surfaces anomalies — delivering cloud threat detection that adapts to unique environments without requiring custom rules, making it the platform for DevSecOps teams that need cloud security to work like intelligent infrastructure, not a manual rulebook.
SWOT Analysis
- Polygraph behavioral anomaly detection adapts to each environment without manual rule authoring
- Unified coverage across cloud accounts, containers, Kubernetes, and data plane in one platform
- CSPM + CWPP + vulnerability management + compliance in a single cloud-native platform
- Infrastructure-as-code security scanning integrates cloud security into developer pipelines
- Fortinet acquisition provides distribution leverage through the Fortinet partner ecosystem
- Fortinet customer base expansion as cross-sell from Fortinet network security customers
- DevSecOps platform for engineering-driven organizations building cloud security into pipelines
- Container and Kubernetes security expansion as workload density in clusters increases
- Compliance automation expansion covering new regulatory frameworks without manual mapping
- Brand recognition below Wiz and Prisma Cloud in large enterprise cloud security evaluations
- Polygraph machine learning tuning period delays time-to-value for initial deployments
- Fortinet acquisition integration risk may slow product roadmap innovation
- Sales and marketing investment below Wiz following Fortinet acquisition
- Wiz (Google) and Orca Security dominant in agentless CNAPP market segment
- Palo Alto Prisma Cloud and CrowdStrike Falcon Cloud Security at large enterprise accounts
- Sysdig and Aqua Security competing in cloud-native container and Kubernetes security
- Fortinet integration creating platform coherence questions for non-Fortinet customers
User Sentiment
Synthesized from G2, Gartner Peer Insights, and analyst review data.
- Polygraph anomaly detection finds cloud threats that rule-based tools miss in complex environments
- IaC scanning integration into Terraform and CloudFormation pipelines surfaces misconfigurations pre-deploy
- Unified platform eliminates the multi-tool complexity of separate CSPM, CWPP, and container security
- Behavioral detection requires minimal tuning vs. signature-based alert tools
- Initial Polygraph learning period creates delayed time-to-value compared to signature-based tools
- Fortinet acquisition has created roadmap uncertainty for cloud-native customers
- Alert prioritization needs improvement — high signal environments generate too many low-priority findings
Pricing & TCO
Analyst-synthesized pricing signals — directional only, contact vendor for current terms.
Typical ACV (Mid-Enterprise)
$75K–$500K
Market Segments
Deployment
Key Cost Drivers
- Cloud resource count and workload telemetry volume
- Container and Kubernetes cluster count for CWPP coverage
- IaC scanning pipeline volume for developer security features
Consumption model competitive with Orca and Wiz — Fortinet partnership may add bundle discounts for its customers.
Full comparisonCustomer Profile
Typical segments
Typical buyer
DevSecOps Lead or Cloud Security Architect at an engineering-driven organization running cloud-native infrastructure
- 1Cloud threat detection using behavioral anomaly analysis across workloads and containers
- 2IaC security scanning catching cloud misconfigurations in CI/CD pipelines before deployment
- 3Kubernetes and container security monitoring across production cluster workloads
Future Focus Areas
Fortinet Security Fabric integration creating combined network + cloud security intelligence
AI workload security extending Polygraph behavioral detection to AI model runtime environments
Developer security expansion with pre-commit hooks and real-time IaC feedback in IDEs
Autonomous remediation AI closing cloud security gaps without human intervention