Try our new research platform with insights from 80,000+ expert users

FortiCNAPP vs Threat Stack Cloud Security Platform [EOL] comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Nov 18, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
7.6
SentinelOne Singularity Cloud boosts efficiency and saves costs by automating tasks, reducing vulnerabilities, and improving security compliance.
Sentiment score
6.1
FortiCNAPP enhances security, saves time and costs by automating alerts and reducing manual efforts, justifying its investment.
Sentiment score
7.3
Threat Stack Cloud Security boosted compliance and revenue, reduced staffing needs, enhanced security, and expanded infrastructure dramatically.
The detailed information PingSafe gives about how to fix vulnerabilities reduces the time spent on remediation by about 70 to 80 percent.
Security and Compliance Manager at Bidgely
After implementing SentinelOne, it takes about five to seven minutes.
Cloud engineer at a construction company with 5,001-10,000 employees
Our ability to get in and review our vulnerability stance, whether daily, monthly, weekly, or whatever it might be, has drastically improved over our prior provider.
IT Support Specialist at a non-tech company with 201-500 employees
 

Customer Service

Sentiment score
7.8
SentinelOne Singularity Cloud Security's service is praised for support, insights, and staff, though response times and knowledge vary.
Sentiment score
7.9
FortiCNAPP’s customer service is praised for responsiveness, proactive communication, and efficient issue resolution via Slack and email.
Sentiment score
7.4
Threat Stack Cloud Security Platform's support is praised for responsiveness, precise solutions, and effective communication with technical representatives.
When we send an email, they respond quickly and proactively provide solutions.
Security and Compliance Manager at Bidgely
They took direct responsibility for the system and could solve queries quickly.
Senior DevOps Engineer at a tech services company with 501-1,000 employees
Having a reliable team ready and willing to assist with any issues is essential.
Director, DevOps at Relay Network
Technical support from Fortinet is good; I get feedback and responses quickly.
Software Engineer at a university with 5,001-10,000 employees
 

Scalability Issues

Sentiment score
8.2
SentinelOne Singularity Cloud Security is scalable, user-friendly, effective, and integrates well, though improvements in manual processes are needed.
Sentiment score
7.5
FortiCNAPP is praised for scalability and adaptability, with positive integration across environments, but challenges include high-traffic scenarios.
Sentiment score
8.2
Threat Stack Cloud Security Platform is scalable, easy to deploy, and efficient across AWS accounts, with minor configuration concerns.
I would rate it a 10 out of 10 for scalability.
IT Engineer at a venture capital & private equity firm with 1,001-5,000 employees
Scalability is no longer a concern because Cloud Native Security is a fully cloud-based resource.
CISO at a computer software company with 201-500 employees
I would rate the scalability of PingSafe 10 out of 10.
Sr DevOps Engineer at a media company with 51-200 employees
 

Stability Issues

Sentiment score
8.2
SentinelOne Singularity Cloud Security is stable with occasional minor UI glitches, seamlessly integrates with AWS, and is highly rated.
Sentiment score
7.4
FortiCNAPP is stable, with occasional minor detection issues and lags, yet frequent updates maintain steady performance.
Sentiment score
7.5
Threat Stack Cloud Security Platform [EOL] is stable and efficient, with minor GUI and agent issues for some users.
SentinelOne Singularity Cloud is incredibly reliable.
Security Analyst at Intersistemi Italia s.p.a.
We contacted Cloud Native Security, and they addressed it in a day.
DevSecOps Engineer at a tech company with 1,001-5,000 employees
The only downtime we had was when switching from V1 to V2 but it was smooth.
Cloud Security Specialist at a insurance company with 10,001+ employees
 

Room For Improvement

SentinelOne Singularity Cloud needs improvements in search, cost, integration, user experience, and security features to enhance usability.
FortiCNAPP requires improvements in integration, security features, user interface, alert management, and data visibility for enhanced user experience.
Threat Stack Cloud Security Platform needs UI improvements, better API alignment, and enhanced integrations, especially for serverless and container environments.
If they can merge Kubernetes Security with other modules related to Kubernetes, that would help us to get more modules in the current subscription.
IT Engineer at a venture capital & private equity firm with 1,001-5,000 employees
As organizations move to the cloud, a cloud posture management tool that offers complete cloud visibility becomes crucial for maintaining compliance.
CISO at a computer software company with 201-500 employees
I would also like to see Cloud Native Security offer APIs that allow us to directly build dashboards within the platform.
Senior Cybersecurity Engineer at a computer software company with 11-50 employees
The vulnerability part is not systematically organized; it is all clumsy in the web UI, and it is not user-friendly.
Software Engineer at a university with 5,001-10,000 employees
 

Setup Cost

SentinelOne Singularity Cloud Security offers flexible, modular pricing, deemed fair and competitive, with discounts enhancing affordability and value.
FortiCNAPP pricing is flexible and stable, with costs ranging from $80,000 to $200,000 annually, not seen as prohibitive.
Threat Stack Cloud Security Platform offers value with transparent pricing, ranging $15-$20 monthly, seen as competitively priced by users.
With very little negotiation involved, we just let them know what we could pay and they were willing to meet us at slightly above what we paid with Sophos, which was still very fair for what we were looking at.
IT Support Specialist at a non-tech company with 201-500 employees
There are some tools that are double the cost of Cloud Native Security.
IT Engineer at a venture capital & private equity firm with 1,001-5,000 employees
I recall Cloud Native Security charging a slightly higher premium previously.
Senior Cybersecurity Engineer at a computer software company with 11-50 employees
 

Valuable Features

SentinelOne Singularity Cloud offers easy usability, automation, and integrations, enhancing security with real-time detection and response capabilities.
FortiCNAPP excels in compliance, threat detection, integration, and automation, enhancing security and efficiency in multi-cloud environments.
Threat Stack Cloud Security platform is esteemed for its configurability, integration, monitoring capabilities, and effective alert management.
This helps visualize potential attack paths and even suggests attack paths a malicious actor might take.
Security Engineer-DevSecOps at a computer software company with 51-200 employees
The infrastructure-as-code feature is helpful for discovering open ports in some of the modules.
DevSecOps Engineer at a tech company with 1,001-5,000 employees
This tool has been helpful for us. It allows us to search for vulnerabilities and provides evidence directly on the screen.
Cloud Security Specialist at a insurance company with 10,001+ employees
The machine learning capability in Lacework FortiCNAPP is used for threat detection.
Software Engineer at a university with 5,001-10,000 employees
 

Categories and Ranking

SentinelOne Singularity Clo...
Sponsored
Average Rating
8.6
Reviews Sentiment
7.7
Number of Reviews
114
Ranking in other categories
Vulnerability Management (4th), Cloud and Data Center Security (3rd), Container Security (3rd), Cloud Workload Protection Platforms (CWPP) (4th), Cloud Security Posture Management (CSPM) (3rd), Cloud-Native Application Protection Platforms (CNAPP) (3rd), Compliance Management (2nd), AI Software Development (4th), AI Observability (3rd)
FortiCNAPP
Average Rating
8.4
Reviews Sentiment
6.9
Number of Reviews
11
Ranking in other categories
Vulnerability Management (44th), Container Security (31st), Cloud Workload Protection Platforms (CWPP) (20th), Cloud Security Posture Management (CSPM) (27th), Cloud-Native Application Protection Platforms (CNAPP) (18th), Compliance Management (10th)
Threat Stack Cloud Security...
Average Rating
8.2
Reviews Sentiment
7.1
Number of Reviews
8
Ranking in other categories
No ranking in other categories
 

Featured Reviews

SC
Information Security Engineer at DataVigilant Infotech
Enables us to prioritize and effectively address critical security issues
Evidence-based reporting helps us to prioritize and solve critical security issues. The new visualization feature demonstrates how an attacker can enter the system, highlighting the potential path that can be exploited and outlining all the steps the attacker could take. With that visibility, we can ensure the perimeter is strong and attackers cannot enter, thus reducing the risk. It has helped us prioritize issues. The visibility into how an attack could happen is valuable. For example, it highlights the system vulnerability and outlines where an attack could propagate. The visualization helps me to prioritize remediation, and if I don't know where to start, I can check to see the score that enables me to prioritize issues. I am using infrastructure-as-code scanning, and it's one of the useful features. In pre-production, it identifies embedded secrets and misconfigurations, including issues with Kubernetes or some privileged containers. This feature allows us to pass the audit and secure IaC code so that it isn't easily exploitable by attackers. We can more proactively work to identify and resolve vulnerabilities by using the dashboard and the alerting system that SentinelOne provides. It helps us with audits and compliance. We can show the compliance in percentage. We can confidently say that our company or infrastructure is very secure. It has improved our security posture by 30% to 35%. It has reduced our false positives by 30%. It has helped teams collaborate better. The security team manages SentinelOne Singularity Cloud Security, and when it flags vulnerabilities, they are forwarded to DevOps for remediation. Previously, we needed to identify and report the issues, but there would be lapses in communication. Now, there is a centralized dashboard that anyone can look at and see the open issues and work on them.
SK
Software Engineer at a university with 5,001-10,000 employees
Improving security insights has been helpful but inconsistent vulnerability tracking needs attention
The vulnerability part is not systematically organized; it is all clumsy in the web UI, and it is not user-friendly. Regarding improvements, the vulnerability part, recent changes with user management, and Fortinet IM coming into place, which is not helpful at all because it cuts out the automation part, are the most important things. Lacework FortiCNAPP should have a new clean UI and ease of access for the users as that should be the main concern. There are limitations regarding the scalability of Lacework FortiCNAPP. There are also more limitations with integrations like GitHub or any other pipeline, CI/CD, or ISD. It is glitchy and works well only sometimes, and most of the time, the reports or other things are not properly calculated or circulated with the teams.
SC
Software Development Manager at Rent Dynamics
SecOps program for us, as a smaller company, is amazing; they know what to look for
They could give a few more insights into security groups and recommendations on how to be more effective. That's getting more into the AWS environment, specifically. I'm not sure if that's Threat Stack's plan or not, but I would like them to help us be efficient about how we're setting up security groups. They could recommend separation of VPCs and the like - really dig into our architecture. I haven't seen a whole lot of that and I think that's something that, right off the bat, could have made us smarter. Even as part of the SecOps Program, that could be helpful; a quick analysis. They're analyzing our whole infrastructure and saying, "You have one VPC and that doesn't make a lot of sense, that should be multiple VPCs and here's why." The architecture of the servers in whatever cloud-hosting provider you're on could be helpful. Other than that, they should continue to expand on their notifications and on what's a vulnerability. They do a great job of that and we want them to continue to do that. It would be cool, since the agent is already deployed and they know about the server, they know the IP address, and they know what vulnerability is there, for them to test the vulnerability and see if they can actually exploit it. Or, once we patch it, they could double-check that it can't be. I don't know how hard that would be to build. Thinking on it off the top off my head, it could be a little challenging but it could also be highly interesting. It would also be great if we could test a couple of other features like hammering a server with 100 login attempts and see what happens. Real test scenarios could be really helpful. That is probably more something close to what they do with the SOC 2 audit or the report. But more visualization of that, being able to test things out on our infrastructure to make sure we can or can't hit this box could be interesting.
report
Use our free recommendation engine to learn which Cloud Workload Protection Platforms (CWPP) solutions are best for your needs.
879,259 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
15%
Financial Services Firm
14%
Manufacturing Company
10%
Government
5%
Computer Software Company
13%
Financial Services Firm
13%
Manufacturing Company
7%
University
5%
Performing Arts
16%
Manufacturing Company
8%
Comms Service Provider
7%
Insurance Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business47
Midsize Enterprise20
Large Enterprise53
By reviewers
Company SizeCount
Small Business4
Midsize Enterprise4
Large Enterprise4
By reviewers
Company SizeCount
Small Business2
Midsize Enterprise5
Large Enterprise2
 

Questions from the Community

What do you like most about PingSafe?
The dashboard gives me an overview of all the things happening in the product, making it one of the tool's best featu...
What is your experience regarding pricing and costs for PingSafe?
I think the pricing of SentinelOne Singularity Cloud Security is a bit high.
What needs improvement with PingSafe?
One area that could be improved in SentinelOne Singularity Cloud Security is their policies; the way they have config...
What is your experience regarding pricing and costs for Lacework?
My smaller deployments cost around 200,000 a year, which is probably not as expensive as Wiz.
What needs improvement with Lacework?
The vulnerability part is not systematically organized; it is all clumsy in the web UI, and it is not user-friendly. ...
What is your primary use case for Lacework?
The major use case for Lacework FortiCNAPP is for security. I'm using it for security internally for my company.
Ask a question
Earn 20 points
 

Also Known As

PingSafe
Polygraph, FortiCNP, Lacework
Threat Stack, CSP,
 

Overview

 

Sample Customers

Information Not Available
J.Crew, AdRoll, Snowflake, VMWare, Iterable, Pure Storage, TrueCar, NerdWallet, and more.
StatusPage.io, Walkbase, Spanning, DNAnexus, Jobcase, Nextcapital, Smartling, Veracode, 6sense
Find out what your peers are saying about Microsoft, Wiz, Amazon Web Services (AWS) and others in Cloud Workload Protection Platforms (CWPP). Updated: December 2025.
879,259 professionals have used our research since 2012.