What FortiCNAPP is
Lacework built on top of an alert based approach rather than more traditional scanning models. That has the benefit of reduced noise and a faster reactive approach, but at the cost of surfacing a lot of alerts to security that they don't have the ability to fix. The vendor site is www.fortinet.com. This profile is an entry in the oneNorma directory, not a vendor landing page.
What FortiCNAPP covers
FortiCNAPP is in the catalog for these capabilities. Categories: CDR, CNAPP, and CSPM. Catalog tags: Hands-on and Best for Enterprise.
How to evaluate FortiCNAPP in a security program
Use FortiCNAPP as a stack candidate, not as diligence evidence. The oneNorma score for FortiCNAPP is 4/10 (percentile 15). If the real gap is in CDR, CNAPP, and CSPM, a dashboard does not replace a pentest or a control mapped to Law 21.663 or ISO 27001. Compare this profile with what www.fortinet.com publishes. Contrast it with pentesting and Security Cloud & Compliance.
