No more typing reviews! Try our Samantha, our new voice AI agent.

FortiCNAPP vs Proofpoint Intelligent Compliance Platform comparison

Why PeerSpot?
Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Feb 22, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Qualys TotalCloud
Sponsored
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
46
Ranking in other categories
Vulnerability Management (10th), Container Security (11th), Cloud Workload Protection Platforms (CWPP) (9th), Cloud Security Posture Management (CSPM) (8th), SaaS Security Posture Management (SSPM) (2nd), Cloud-Native Application Protection Platforms (CNAPP) (7th)
FortiCNAPP
Average Rating
8.2
Reviews Sentiment
6.7
Number of Reviews
17
Ranking in other categories
Vulnerability Management (29th), Container Security (18th), Cloud Workload Protection Platforms (CWPP) (13th), Cloud Security Posture Management (CSPM) (13th), Cloud-Native Application Protection Platforms (CNAPP) (11th), Compliance Management (9th)
Proofpoint Intelligent Com...
Average Rating
8.6
Reviews Sentiment
6.6
Number of Reviews
2
Ranking in other categories
Email Archiving (6th), eDiscovery (12th), Compliance Management (14th)
 

Featured Reviews

reviewer2859021 - PeerSpot reviewer
Sr Security Engineer at a tech vendor with 5,001-10,000 employees
Risk-based triage has transformed container security and now prioritizes high-impact threats
The best features Qualys TotalCloud offers currently include managing cloud infrastructure and container security while facing major challenges such as alert fatigue. Traditional vulnerability scanners flag hundreds of CVEs on short-lived Kubernetes containers, some of which have no internet exposure or are gone before we can even triage them. I leverage Qualys TotalCloud to move beyond static CVSS. I use it to implement runtime exposure, correlation risk reprioritization, and shift-left integration. This notifies developers to fix a base image upstream rather than patching live ephemeral instances. In my work with cloud and container security, the biggest operational hurdle was alert fatigue. I use Qualys to shift left from static CVSS severity to context-aware risk prioritization. I correlated raw vulnerability data with real-time risk factors such as public network exposure, active runtime execution, or overly permissive IAM roles. This allows us to immediately drop the priority of isolated containers and escalate lower-severity CVEs that sit on an exposed, high-risk path. We can map these findings directly back to our CI/CD pipelines so developers can patch the root base images upstream. We have drastically cut down the signal-to-noise ratio, saved a lot of manual hours doing triage work, and ensured engineering effort goes directly towards high-impact risk reduction.
Charl Pinches - PeerSpot reviewer
Solutions Sales Specialist at a outsourcing company with 1,001-5,000 employees
Cloud risk has become visible and security teams prioritize and act on threats efficiently
FortiCNAPP can be improved because the platform can feel complex at the start, especially for teams new to CNAP tooling. Some users mention that they found the interface and data models less intuitive than expected, and I have had situations where reporting and alert configurations might require time. Regarding other improvements needed for FortiCNAPP, the majority of the time is that reporting and alert configuration might require time to tune properly. This is the significant issue, combined with the fact that some users find the interface and data model less intuitive than expected. Regarding FortiCNAPP's AI capabilities, I think there might be a bit of improvement needed. However, since Fortinet is a security vendor overall, keeping the data safe is not a problem. I know they have invested a lot in getting it to a place where it is a trusted platform.
reviewer2842215 - PeerSpot reviewer
Associate at a legal firm with 201-500 employees
Centralized archiving has transformed how we manage compliance, audits, and investigations
Overall Proofpoint Intelligent Compliance Platform is a strong platform for compliance and information governance, but there are a few areas where it could improve in the future. One improvement area is the user experience and interface consistency across different modules. Some workflows can feel complex, especially for a new user or the team managing multiple compliance functions simultaneously. Community feedback has also highlighted that certain administrative interfaces and navigation flows could be more modern and streamlined. I also think there is room for improvement in support responsiveness and operational simplicity for complex deployments. Some users in the community have mentioned challenges around the ticket response time and troubleshooting efficiency for advanced configurations that needs to be improved. From a product perspective, a continued investment in AI-driven detection, the reduction of false positives, and easier policy tuning would make the platform even more effective at scale. Proofpoint already provides strong automation and machine learning capabilities, but a highly regulated environment still requires significant tuning and oversight to optimize the workflow. One additional improvement for Proofpoint Intelligent Compliance Platform would be making policy configurations and workflow management more intuitive, especially for organizations with complex compliance structures and multiple regulatory requirements. I also think more customizable dashboards and reporting capabilities would help teams gain faster operational insight and improve visibility into the compliance trends, investigations, and reliable workload.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Qualys TotalCloud has significantly reduced our workload in terms of managing risks, helping us to be more efficient and save substantial resources."
"Qualys TotalCloud is an excellent platform, and the beauty of the platform is that we can get all the vulnerabilities, see all the reports in a single dashboard, view them segregated, and easily learn about critical, high, and medium findings with appropriately provided remediation steps."
"Qualys TotalCloud helps you not just to identify misconfigurations, but you can actually also fix issues."
"Qualys TotalCloud provides a single, prioritized view of risk, reducing the workload associated with consolidating multiple sources for risk prioritization."
"I would rate Qualys TotalCloud ten out of ten."
"Qualys TotalCloud has positively impacted our bank's performance, and we have definitely seen benefits after implementing this solution."
"I would definitely recommend Qualys TotalCloud to other customers."
"The biggest strengths of Qualys TotalCloud are that it is pretty good at cloud visibility, has easy integration, and also has multi-cloud compatibility."
"The compliance reports are definitely most valuable because they save time and are accurate. So, instead of relying on a human going through and checking or providing me with a report, I could just log into Lacework and see for myself."
"FortiCNAPP has positively impacted my organization by providing centralized visibility and consolidating our cloud security posture management, helping us identify misconfigurations and public accessibility issues, which allowed us to enhance IAM governance and visibility on vulnerabilities."
"What I personally appreciate about FortiCNAPP is that I think it is a good product and a good firewall because it usually offers many options for the company."
"The most valuable feature is Lacework's ability to distill all the security and audit logs. I recommend it to my customers. Normally, when I consult for other customers that are getting into the cloud, we use native security tools. It's more of a rule-based engine."
"For the most part, out-of-the-box, it tells you right away about the things you need to work on. I like the fact that it prioritizes alerts based on severity, so that you can focus your efforts on anything that would be critical/high first, moderate second, and work your way down, trying to continue to improve your security posture."
"There are many valuable features that I use in my daily work. The first are alerts and the event dossier that it generates, based on the severity. That is very insightful and helps me to have a security cap in our infrastructure. The second thing I like is the agent-based vulnerability management, which is the most accurate information."
"If you want to turn your cloud findings into actionable security work, FortiCNAPP is the way to go."
"The machine learning capability in Lacework FortiCNAPP is used for threat detection, and automated policy recommendation helps to improve my security measures in general."
"Our experience with the platform has been positive as it has maintained consistent control over spam and malware threats."
"Overall, Proofpoint Intelligent Compliance Platform is a very strong and reliable platform for compliance, archiving, supervision, and information governance."
 

Cons

"Customer support with Qualys TotalCloud needs a little improvement with the response times."
"With the growing integration of AI, I would like Qualys to enhance its service offerings to better accommodate AI-related risks."
"In a future release, I suggest that zero-day vulnerabilities should be predicted in advance using AI technologies. The system is not 100% secure yet, so proactive threat hunting could be enhanced to be more proactive than the current system."
"We encountered challenges identifying the correct resource category for certain items, such as those in containers or storage."
"TotalCloud could improve the classification of vulnerabilities. Specifically, it could enhance the categorization of what aspects fall under patches resolved by OS or software updates and what pertains to configuration adjustments."
"Enhancing clarity regarding its compliance capabilities would be beneficial, as the current scope is limited in geographic coverage."
"I would like the ability to disable certain default built-in policies as they can be misleading when creating dashboards. That is the top one."
"Although TotalCloud is a helpful tool, some of its advanced features are still under development."
"Policy implementation is quite complex, and the stability will take more time for the solutions."
"The configuration and setup of alerts should be easier. They should make it easier to integrate with systems like Slack and Datadog. I didn't spend too much time on it, but to me, it wasn't as simple as the alerting that I've seen on other systems."
"I am not fully satisfied with FortiCNAPP because the product has limited functions and it requires the use of other Fortinet tools for complete capabilities."
"A feature that I have requested from them is the ability to sort alerts and policies based on a security framework. Right now, when you go into alerts, you have hundreds and hundreds of them that you have to manually pick. It would be useful to have categories for CIS Benchmark or SOC 2 and be able to display all the alerts and policies for one security framework."
"Visibility is lacking, and both compliance-related metrics and IAM security control could be improved."
"The solution lacks a cohesive data model, making extracting the necessary data from the platform challenging. It uses its own LQL query language, and each database across different layers and modules is structured differently, complicating correlation efforts. Consequently, I had to create extensive custom reports outside Lacework because their default dashboards didn't communicate risk metrics. They're addressing these issues by redesigning their tools, including introducing the dashboard, which is a step closer to actionable insights but still needs refinement."
"However, the solution could be more user-friendly and intuitive."
"The vulnerability part is not systematically organized; it is all clumsy in the web UI, and it is not user-friendly."
"The Proofpoint Intelligent Compliance Platform does not provide features that help reduce manual efforts, so additional human resources are still required to manage security."
"Some workflows can feel complex, especially for a new user or the team managing multiple compliance functions simultaneously."
 

Pricing and Cost Advice

"Qualys TotalCloud offers good pricing that is affordable and competitive with the market. Our partnership also provides us with additional benefits."
"The pricing is comparable. It is built into our other product, so I cannot piecemeal it. It is a part of our subscription."
"As a middle management member, I do not have direct pricing knowledge, but based on the knowledge from our meetings, its pricing is competitive."
"Qualys TotalCloud is expensive, but it offers a premier solution with no headaches."
"The pricing for TotalCloud is attractive and competitive in the market. Given the features, especially the dashboard, I have no concerns regarding pricing."
"Qualys TotalCloud offers competitive pricing given its comprehensive suite of features, including integration, assessment, remediation, and detection capabilities, all within a single platform."
"Qualys TotalCloud is expensive."
"The cost is high, but it meets our organizational needs."
"My smaller deployments cost around 200,000 a year, which is probably not as expensive as Wiz."
"The pricing has gotten better. That scenario was somewhat unstable. They have a rather interesting licensing structure. I believe you get 200 resources per "Lacework unit." It was difficult, in the beginning, to figure out exactly what a "resource" was... That was a problem until about a year or so ago. They have improved it and it has stabilized quite a bit."
"It is slightly expensive. It depends on how big your environment is, but it is expensive. Right now, we are spending a lot of money. We have covered all of the cloud providers and most of our colocation facilities as well, so we cannot complain, but it is slightly expensive. It is not super expensive."
"The licensing fee was approximately $80,000 USD, per year."
Information not available
report
Use our free recommendation engine to learn which Compliance Management solutions are best for your needs.
915,341 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Comms Service Provider
16%
Outsourcing Company
12%
Manufacturing Company
11%
Financial Services Firm
10%
Comms Service Provider
10%
Construction Company
8%
Financial Services Firm
8%
Outsourcing Company
7%
Legal Firm
13%
Construction Company
13%
Comms Service Provider
11%
Financial Services Firm
10%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business14
Midsize Enterprise6
Large Enterprise35
By reviewers
Company SizeCount
Small Business9
Midsize Enterprise5
Large Enterprise8
No data available
 

Questions from the Community

What needs improvement with Qualys TotalCloud?
In terms of improvement, remediation still belongs to the cloud team, which is one of the issues we faced with Qualys...
What is your primary use case for Qualys TotalCloud?
My main use case for Qualys TotalCloud is regarding the cloud visibility that we were not having previously. Previous...
What is your experience regarding pricing and costs for Lacework?
We purchased the Fortinet firewall and services from a vendor, not through any other marketplaces.
What needs improvement with Lacework?
FortiCNAPP can be improved because the platform can feel complex at the start, especially for teams new to CNAP tooli...
What is your primary use case for Lacework?
My main use case for FortiCNAPP, from my previous experience distributing it or now as a reseller, is for anyone who'...
What needs improvement with Proofpoint Intelligent Compliance Platform?
Overall Proofpoint Intelligent Compliance Platform is a strong platform for compliance and information governance, bu...
What is your primary use case for Proofpoint Intelligent Compliance Platform?
My main use case of Proofpoint Intelligent Compliance Platform is supporting compliance, information governance, and ...
What advice do you have for others considering Proofpoint Intelligent Compliance Platform?
Overall, Proofpoint Intelligent Compliance Platform is a very strong and reliable platform for compliance, archiving,...
 

Also Known As

Qualys TotalCloud with FlexScan
Polygraph, FortiCNP, Lacework
Proofpoint e-discovery and Analytics, Proofpoint Enterprise Archive
 

Overview

 

Sample Customers

Information Not Available
J.Crew, AdRoll, Snowflake, VMWare, Iterable, Pure Storage, TrueCar, NerdWallet, and more.
The Guardian Life Insurance Company of America
Find out what your peers are saying about FortiCNAPP vs. Proofpoint Intelligent Compliance Platform and other solutions. Updated: September 2026.
915,341 professionals have used our research since 2012.