Lacework
Data-driven cloud-native CNAPP acquired by Fortinet in June 2024 — anomaly-based detection and compliance integrated into Fortinet's security fabric
Lacework's Polygraph behavioral analysis engine learns the normal behavior of every cloud workload and automatically surfaces anomalies — delivering cloud threat detection that adapts to unique environments without requiring custom rules, making it the platform for DevSecOps teams that need cloud security to work like intelligent infrastructure, not a manual rulebook.
SWOT Analysis
- Polygraph behavioral anomaly detection adapts to each environment without manual rule authoring
- Unified coverage across cloud accounts, containers, Kubernetes, and data plane in one platform
- CSPM + CWPP + vulnerability management + compliance in a single cloud-native platform
- Infrastructure-as-code security scanning integrates cloud security into developer pipelines
- Fortinet acquisition provides distribution leverage through the Fortinet partner ecosystem
- Fortinet customer base expansion as cross-sell from Fortinet network security customers
- DevSecOps platform for engineering-driven organizations building cloud security into pipelines
- Container and Kubernetes security expansion as workload density in clusters increases
- Compliance automation expansion covering new regulatory frameworks without manual mapping
- Brand recognition below Wiz and Prisma Cloud in large enterprise cloud security evaluations
- Polygraph machine learning tuning period delays time-to-value for initial deployments
- Fortinet acquisition integration risk may slow product roadmap innovation
- Sales and marketing investment below Wiz following Fortinet acquisition
- Wiz (Google) and Orca Security dominant in agentless CNAPP market segment
- Palo Alto Prisma Cloud and CrowdStrike Falcon Cloud Security at large enterprise accounts
- Sysdig and Aqua Security competing in cloud-native container and Kubernetes security
- Fortinet integration creating platform coherence questions for non-Fortinet customers
User Sentiment
Synthesized from G2, Gartner Peer Insights, and analyst review data.
- Polygraph anomaly detection finds cloud threats that rule-based tools miss in complex environments
- IaC scanning integration into Terraform and CloudFormation pipelines surfaces misconfigurations pre-deploy
- Unified platform eliminates the multi-tool complexity of separate CSPM, CWPP, and container security
- Behavioral detection requires minimal tuning vs. signature-based alert tools
- Initial Polygraph learning period creates delayed time-to-value compared to signature-based tools
- Fortinet acquisition has created roadmap uncertainty for cloud-native customers
- Alert prioritization needs improvement — high signal environments generate too many low-priority findings
Pricing & TCO
Analyst-synthesized pricing signals — directional only, contact vendor for current terms.
Typical ACV (Mid-Enterprise)
$75K–$500K
Market Segments
Deployment
Key Cost Drivers
- Cloud resource count and workload telemetry volume
- Container and Kubernetes cluster count for CWPP coverage
- IaC scanning pipeline volume for developer security features
Lacework's consumption model is competitive with Orca and Wiz — Fortinet partnership may offer bundled pricing advantages for Fortinet customers, reducing total cost vs. standalone CNAPP procurement.
Full comparisonCustomer Profile
Typical segments
Typical buyer
DevSecOps Lead or Cloud Security Architect at an engineering-driven organization running cloud-native infrastructure
- 1Cloud threat detection using behavioral anomaly analysis across workloads and containers
- 2IaC security scanning catching cloud misconfigurations in CI/CD pipelines before deployment
- 3Kubernetes and container security monitoring across production cluster workloads
Future Focus Areas
Fortinet Security Fabric integration creating combined network + cloud security intelligence
AI workload security extending Polygraph behavioral detection to AI model runtime environments
Developer security expansion with pre-commit hooks and real-time IaC feedback in IDEs
Autonomous remediation AI closing cloud security gaps without human intervention