Lacework
Lacework provides a unified Cloud-Native Application Protection Platform (CNAPP) using ML-driven anomaly detection, now operating as Lacework FortiCNAPP under Fortinet. It serves enterprise customers running multi-cloud workloads across AWS, Azure, and GCP.
- Company typePrivate
- Founded2015
- HeadquartersMountain View, United States
- Headcount1,001–5,000
- GTM typeB2B
- OfferingSoftware
Lacework firmographics
Firmographics- Name
- Lacework
- Legal name
- Lacework, Inc.
- Website
- https://lacework.com
- Company type
- Private
- Founded year
- 2015
- Operating status
- Acquired
- Headcount range
- 1,001–5,000 employees
- Short description
- Lacework provides a unified Cloud-Native Application Protection Platform (CNAPP) using ML-driven anomaly detection, now operating as Lacework FortiCNAPP under Fortinet. It serves enterprise customers running multi-cloud workloads across AWS, Azure, and GCP.
- Ownership category
- akta.pro rank
Lacework industry classification
Industry- Product category
- Cloud Security Software
- NAICS
- Software Publishers (5132)
- SIC
- Services-Prepackaged Software (7372)
- akta.pro primary industry
- Endpoint Security Managed Services (EDR/XDR) (BPAEADAH)
- akta.pro secondary industry
- Vulnerability Management & Penetration Testing Services (BPAEADAD)
Keywords
Where Lacework is headquartered
LocationHeadquarters
- HQ city
- Mountain View
- HQ country
- United States
- HQ region
- North America
Offices1 record
Markets served
Lacework business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Infrastructure, Operations
Revenue model
- CNAPP Subscription (SaaS): Lacework generates revenue through subscription-based licensing of its FortiCNAPP platform, offering continuous cloud security monitoring, compliance assessment, and threat detection across multi-cloud environments.
- Professional Services: Lacework offers deployment and consulting services including 3-day and 5-day quickstart engagements for implementation support.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | Enterprise subscription with comprehensive CNAPP capabilities |
Go-to-market motion3 records
Distribution channels5 records
Marketing channels5 records
Lacework product offering
Product offeringCore offering
Lacework sells the Lacework FortiCNAPP, a unified Cloud-Native Application Protection Platform that consolidates CSPM, CIEM, CWPP, Kubernetes Security, SAST, SCA, SBOM, IaC Security, Vulnerability Assessment, and Cloud Detection and Response into a single product for multi-cloud environments. The platform is built on the proprietary Polygraph Data Platform, which uses patented machine learning to automate anomaly detection across AWS, Azure, and Google Cloud without requiring customers to write rules. It is delivered as an annual enterprise SaaS subscription with professional services for deployment.
Product overview
Lacework operates as a unified cloud-native security platform now integrated into Fortinet's offerings as Lacework FortiCNAPP. The platform combines multiple security capabilities including CSPM, CIEM, CWPP, Kubernetes Security, SAST, SCA, SBOM, IaC Security, Vulnerability Assessment, and Cloud Detection and Response into a single CNAPP solution. Built on the Polygraph Data Platform technology, it delivers data-driven security across AWS, Azure, GCP, and hybrid environments from code to runtime. The architecture unifies previously fragmented tools to simplify cloud security, automatically connecting risk insights with runtime threat data for prioritized remediation.
Differentiator
Problem solved
Functional benefit
Brands
- Polygraph Data Platform: Cloud data-driven security platform that automates anomaly detection across multicloud environments.
- Lacework FortiCNAPP
Products and services
- Lacework FortiCNAPP A unified Cloud-Native Application Protection Platform (CNAPP) that combines CSPM, CIEM, CWPP, KSPM, SAST, SCA, IaC security, and Cloud Detection and Response. Built on Lacework technology and integrated into the Fortinet Security Fabric, it provides data-driven security across multi-cloud environments from code to runtime for enterprise customers.
- Polygraph Data Platform Lacework's cloud data-driven security platform that automates anomaly detection across multicloud environments to improve security operations. Available as a standalone offering on Google Cloud Marketplace and Microsoft Azure for enterprise customers seeking multi-cloud threat detection.
- Soluble Cloud infrastructure management product acquired by Lacework to add Infrastructure as Code security capabilities to the platform, enabling customers to find and fix cloud misconfigurations within IaC templates before deployment.
Quantifiable outcome
- Investigate threats 80% faster
- +5 more outcomes
Companies that use Lacework
Customer profileNamed customers4 records
Segments4 records
Ideal customer profiles3 records
Lacework technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
AI capability4 records
Feature11 records
Lacework partnerships and signals
Strategic signalPartnerships
Five partnerships are on record, tiered regional, core and flagship.
- ASEAN/South Asia RegionregionalFortinet launched a new Point-of-Presence (PoP) in Singapore to support Lacework FortiCNAPP in ASEAN and South Asia, enhancing cloud security, data residency, and compliance for businesses across the region.
- Amazon Web Services (AWS)coreLacework FortiCNAPP maintains a strategic partnership with AWS, offering continuous automated security with fewer rules. AWS Security Incident Response Specialization was achieved by Fortinet, recognizing integrated incident response capabilities backed by AWS security experts.
- FortinetflagshipFortinet completed the acquisition of Lacework, integrating its cloud-native security capabilities into the FortiCNAPP product line. The acquisition strengthened Fortinet's cloud security portfolio and positioned it against competitors like Palo Alto Networks and Cisco.
- Google CloudcoreLacework partnered with Google Cloud to offer its Polygraph Data Platform on Google Cloud Marketplace. The partnership enabled Google Cloud customers to access Lacework's cloud security capabilities through the marketplace, improving security operations with automated anomaly detection across multicloud environments.
- SolublecoreLacework acquired Soluble, a cloud infrastructure management company, to enhance its platform with Infrastructure as Code capabilities. The integration aimed to improve security practices in development workflows across multi-cloud environments, helping organizations integrate security earlier in their development process.
Scale indicators6 records
Recent moves6 records
Expansion highlights6 records
Lacework competitors and assessment
Company assessmentDirect peers
- Wiz: Cloud security posture management and CNAPP platform that competes directly with Lacework FortiCNAPP across AWS, Azure, GCP, and Kubernetes environments. Wiz is widely regarded as the category-leading independent CNAPP vendor and was acquired by Alphabet/Google in 2025, intensifying competition with Lacework.
- CrowdStrike Falcon Cloud Security: CrowdStrike's CNAPP offering extending its Falcon agent platform into cloud workload protection, CSPM, CIEM, and container/Kubernetes security. CrowdStrike competes directly with Lacework FortiCNAPP for enterprise buyers looking to consolidate endpoint and cloud security onto a single vendor platform.
- Trend Micro Cloud One: Trend Micro's cloud security platform providing workload protection, container security, file storage security, and posture management. Cloud One is a direct competitor to Lacework FortiCNAPP in multi-cloud and hybrid cloud workload protection use cases, particularly with mid-market and enterprise customers.
- Tenable Cloud Security (formerly Ermetic): Tenable's CNAPP offering combining CIEM, CSPM, and infrastructure-as-code security following its acquisition of Ermetic. Tenable Cloud Security competes directly with Lacework's CIEM, CSPM, and IaC Security modules for enterprise cloud identity and posture management use cases.
Broad incumbents
- Palo Alto Networks (Prisma Cloud): Prisma Cloud is Palo Alto Networks' CNAPP offering that directly competes with Lacework across CSPM, CIEM, CWPP, and code-to-cloud security. As part of a broader cybersecurity portfolio, Palo Alto bundles Prisma with its network and SOC platforms, creating competitive pressure on standalone CNAPP vendors like Lacework.
- Microsoft Defender for Cloud: Microsoft's CNAPP offering covering CSPM, CWPP, and CIEM capabilities natively integrated with Azure and increasingly extended to AWS and GCP. As a hyperscaler-native incumbent with deep Azure co-sell, Defender for Cloud competes with Lacework FortiCNAPP for multi-cloud security budget and benefits from default-on positioning within Azure subscriptions.
- Check Point CloudGuard: Check Point's cloud security platform providing posture management, workload protection, and network security across public cloud environments. As part of Check Point's broader cybersecurity portfolio, CloudGuard competes with Lacework FortiCNAPP for enterprise buyers seeking integrated network-to-cloud security.
Emerging players
- Aqua Security: Cloud-native application protection specialist focused on container, Kubernetes, and serverless workload security with CSPM and CIEM capabilities. Aqua Security competes with Lacework's CWPP and Kubernetes Security modules and represents an emerging pure-play alternative in cloud-native security.
- Orca Security: Agentless CNAPP platform providing cloud security posture management, workload protection, and identity security with its SideScanning technology. Orca Security competes directly with Lacework FortiCNAPP on unified multi-cloud visibility and agentless deployment positioning.
- Sysdig: Cloud security platform built on runtime threat detection and Falco open-source, offering CSPM, CIEM, CWPP, and CDR capabilities for containers, Kubernetes, and cloud workloads. Sysdig competes with Lacework's runtime detection and Kubernetes security modules.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks5 records
Key highlights7 records
Customer concentration
Lacework social profiles
Digital presenceLacework financial estimates
Financial estimateRevenue estimate
Valuation estimate
Lacework leadership team
Management profileNumber of profiles
Profiles11 records
Lacework subsidiaries and ownership
Company hierarchySubsidiaries1 record
Lacework funding detail
Funding detailFunding overview
Funding rounds6 records
Investors20 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Lacework M&A and investment
M&A and investmentM&A1 record
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Lacework
What does Lacework do?
Lacework sells the Lacework FortiCNAPP, a unified Cloud-Native Application Protection Platform that consolidates CSPM, CIEM, CWPP, Kubernetes Security, SAST, SCA, SBOM, IaC Security, Vulnerability Assessment, and Cloud Detection and Response into a single product for multi-cloud environments. The platform is built on the proprietary Polygraph Data Platform, which uses patented machine learning to automate anomaly detection across AWS, Azure, and Google Cloud without requiring customers to write rules. It is delivered as an annual enterprise SaaS subscription with professional services for deployment.
Is Lacework a public or private company?
Lacework is a private company. It is classified as corporate owned and is currently acquired.
When was Lacework founded?
Lacework was founded in 2015. It employs 1,001 to 5,000 people.
Where is Lacework based?
Lacework is headquartered in Mountain View, United States, in the North America region.
How does Lacework make money?
Two revenue lines are on record. CNAPP Subscription (SaaS) is the primary driver. The others are professional Services.
Who are Lacework's main competitors?
Direct peers on record are Wiz, CrowdStrike Falcon Cloud Security, Trend Micro Cloud One and Tenable Cloud Security (formerly Ermetic). Broad incumbents are Palo Alto Networks (Prisma Cloud), Microsoft Defender for Cloud and Check Point CloudGuard. Emerging players are Aqua Security, Orca Security and Sysdig.
Does Lacework have an API?
No public API is recorded for Lacework.
What industry is Lacework in?
Lacework's product category is Cloud Security Software. Its primary akta.pro industry code is BPAEADAH, Endpoint Security Managed Services (EDR/XDR), with a secondary code of BPAEADAD, Vulnerability Management & Penetration Testing Services. Its NAICS code is 5132 and its SIC code is 7372.