Updated:
Lacework
Lacework started as a cloud security startup founded in 2015 by former Cisco and IBM security engineers.
Lacework
Lacework started as a cloud security startup founded in 2015 by former Cisco and IBM security engineers. The company developed an AI-driven platform that combined cloud security posture management (CSPM), workload protection, identity management, and software composition analysis into a single product known as FortiCNAPP after its acquisition. FortiCNAPP targets enterprises running workloads across AWS, Azure, and Google Cloud. The platform uses machine learning to detect zero-day threats, prioritize vulnerabilities, and automate compliance mapping to frameworks like PCI DSS, HIPAA, SOC 2, and ISO 27001. Lacework raised major funding rounds from Sutter Hill Ventures, Altimeter Capital, and Tiger Global before being acquired. Fortinet acquired Lacework in 2024 for an undisclosed sum, integrating the technology into its Fortinet Security Fabric. The combined entity now sells FortiCNAPP as a single platform that consolidates what had been a fragmented set of cloud security tools. In 2025, FortiCNAPP won the SC Award for Best Cloud Workload Protection Solution. Lacework's structural differentiator lies in its acquisition by Fortinet — a large cybersecurity vendor — which gives the former startup access to an existing global sales channel and customer base. Rather than operating independently, Lacework now functions as the cloud security engine within a broader security portfolio, a model that contrasts with standalone cloud security firms.
General information
Firm type
Asset Manager
Year founded
—
AUM
Undisclosed
Location
Region
North America
Country
United States
City
Mountain View
Corporate office
Mountain View, CA, United States
Additional offices
San Mateo, CA, United States
Sector focus
Frequently asked questions
Who runs investment decisions at Lacework?
Lacework operates as a product unit within Fortinet. Strategic decisions are made by Fortinet's executive team, including CEO Ken Xie, rather than by Lacework itself as an independent firm. No dedicated Lacework investment committee exists.
What investment stages does Lacework target?
Lacework does not make investments. It is a cybersecurity product company, not an asset manager or investment vehicle.
Does Lacework participate in fund commitments or only direct deals?
Lacework does not participate in fund commitments or direct deals. It develops and sells cloud security software.
How is Lacework related to Fortinet?
Fortinet acquired Lacework in 2024. Lacework's technology was rebranded as FortiCNAPP and integrated into the Fortinet Security Fabric. The acquisition gave Fortinet a cloud-native application protection platform to rival offerings from Palo Alto Networks and CrowdStrike.
What sectors does Lacework explicitly avoid?
Lacework's published materials do not list sectors it avoids. The platform is designed for any enterprise using cloud infrastructure across AWS, Azure, and GCP.
Who are Lacework's primary competitors?
Lacework competes in the CNAPP market against Palo Alto Networks' Prisma Cloud, CrowdStrike Falcon, Wiz, Orca Security, and Sysdig. Its positioning emphasizes unified visibility and AI-driven threat detection.
Does Lacework maintain philanthropic structures or a foundation?
Lacework does not publicly disclose any philanthropic structure or foundation. It operates solely as a for-profit software business within Fortinet.
Profile maintained by Altss using OSINT (open-source intelligence), regulatory filings, licensed data partners, and verified direct submissions. Read the methodology. Last updated: . Continuous refresh with full update cycles at least every 30 days.
Need institutional-grade insight on family offices?
Altss delivers:
Prefer a guided tour?
We’ll walk you through: