Fortinet launches Lacework FortiCNAPP for cloud security

Fortinet has announced the general availability of Lacework FortiCNAPP, a new integrated platform designed to enhance cloud security by unifying various protection tools into one system driven by artificial intelligence.

Lacework FortiCNAPP merges Lacework's cloud-native application protection platform with the Fortinet Security Fabric, aiming to offer extensive visibility and protection across multi-cloud environments. This initiative is intended to help organisations strengthen their cloud security framework by addressing risks from code to cloud.

John Maddison, Chief Marketing Officer at Fortinet, remarked, "Lacework FortiCNAPP is based on Lacework's proven cloud-native application protection platform with tight integration with the Fortinet Security Fabric. We're pleased to expand our cloud-native security offerings and provide the industry's most comprehensive, full-stack cloud security platform that empowers teams to seamlessly eliminate risk across their multi-cloud environments."

Lacework FortiCNAPP is equipped with automated remediation processes and the ability to block active runtime threats. It also offers enhanced visibility into FortiGuard Outbreak Alerts, which supply critical information about emerging threats and their potential impact on an organisation's environment.

As more companies migrate to cloud infrastructures, traditional security solutions are often found inadequate. They lack the intrinsic capabilities needed to deal with the expansive and dynamic nature of the cloud. These challenges, coupled with a shortage of cloud security expertise and an increasing number of security alerts, complicate the adoption of cloud technologies for security teams.

To address these issues, Lacework FortiCNAPP offers a streamlined solution by providing a unified platform that brings together multiple security tools. This integration aims to reduce detection and response times for cloud-native threats, leveraging a distinct AI methodology that continuously adapts and learns.

One of the platform's key features includes AI-based anomaly detection, which can identify attack patterns that conventional rules-based systems might miss. This capability is enhanced by the use of behavioural analytics and threat intelligence data.

Integrated code security within the platform empowers teams to identify and resolve issues early in the application lifecycle, thereby reducing potential risks and costs.

Lacework FortiCNAPP also offers composite alerts by correlating various threat signals into high-confidence indications of active attacks. This functionality combines insights from real-time threat data to identify and address threats such as compromised credentials and ransomware.

Additionally, the platform's integration with the Fortinet Security Fabric enables the automation of threat response processes through integration with solutions like FortiSOAR and enhances threat understanding through FortiGuard Outbreak Alerts.

The platform facilitates cloud infrastructure entitlement management (CIEM), providing visibility into cloud identities and permissions while offering automated guidance on managing access rights.

John Turner, Senior Security Architect at LendingTree, shared their experience, stating, "Lacework FortiCNAPP helped us deal with the massive amount of information that we were getting out of all the different systems, from the native security tools and logging and alerting tools that came from cloud providers to third-party tools that we had purchased to help solve these problems."

Alberto Silveira, Head of Engineering at LawnStarter, commented on the compliance benefits, "Lacework FortiCNAPP automatically discovers and catalogues users, services, security groups, and secrets that are active within LawnStarter's AWS environment and compares them against industry frameworks and compliance requirements. LawnStarter can quickly pull customised reports created by Lacework FortiCNAPP to see which resources are compliant. As a result, LawnStarter has seen a 75 per cent decrease in compliance violations over the past year, saving the company significant time and money. LawnStarter now has a robust compliance practice that is essential to earning and maintaining trust with customers, providers, investors, and advisors."