Lacework FortiCNAPP vs Qualys Enterprise TruRisk Platform comparison

Fortinet and Qualys are both solutions in the Cloud-Native Application Protection Platforms (CNAPP) category. Fortinet is ranked #15 with an average rating of 7.0, while Qualys is ranked #20 with an average rating of 8.3. Fortinet holds a 2.7% mindshare in CNAP, compared to Qualys’s 0.2% mindshare. Additionally, 90% of Fortinet users are willing to recommend the solution, compared to 100% of Qualys users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Jun 22, 2025

Lacework FortiCNAPP and Qualys Enterprise TruRisk Platform compete in the cloud security and risk management sector. While Lacework emphasizes advanced security features, Qualys stands out with more comprehensive risk assessment capabilities.

Features: Lacework FortiCNAPP includes automated security monitoring, in-depth threat detection, and seamless security protocol integration. Qualys Enterprise TruRisk Platform offers extensive vulnerability assessment, sophisticated risk scoring methodologies, and broader compatibility with diverse platforms.

Ease of Deployment and Customer Service: Lacework FortiCNAPP is known for its straightforward deployment process and intuitive configurations, which make it easy to set up. By contrast, Qualys Enterprise TruRisk Platform provides deployment customization options and strong customer support, offering detailed implementation assistance.

Pricing and ROI: Lacework FortiCNAPP offers competitive pricing and focuses on rapid ROI through effective threat prevention. Qualys Enterprise TruRisk Platform has a higher upfront cost but justifies the investment with extensive tool integration and long-term security insights.

To learn more, read our detailed Lacework FortiCNAPP vs. Qualys Enterprise TruRisk Platform Report (Updated: September 2025).

Buyer's Guide

Lacework FortiCNAPP vs. Qualys Enterprise TruRisk Platform

September 2025

Download the complete report

Helped 871,469 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

SentinelOne Singularity Clo...

Mindshare comparison

As of October 2025, in the Cloud-Native Application Protection Platforms (CNAPP) category, the mindshare of SentinelOne Singularity Cloud Security is 4.6%, up from 2.1% compared to the previous year. The mindshare of Lacework FortiCNAPP is 2.7%, down from 3.2% compared to the previous year. The mindshare of Qualys Enterprise TruRisk Platform is 0.2%, up from 0.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Cloud-Native Application Protection Platforms (CNAPP) Market Share Distribution
Product	Market Share (%)
SentinelOne Singularity Cloud Security	4.6%
Lacework FortiCNAPP	2.7%
Qualys Enterprise TruRisk Platform	0.2%
Other	92.5%

Cloud-Native Application Protection Platforms (CNAPP)

Featured Reviews

Ritesh P.

Senior Manager at ICICI Lombard

It's more scalable and flexible than our previous solution because we don't need to install any agents

The reporting works well, but sometimes the severity classifications are inaccurate. Sometimes, it flags an issue as high-impact, but it should be a lower severity. For example, it might highlight an exposed AWS encryption key, a critical compliance issue, but it isn't tagged as a high-risk problem. That only happens about 10 percent of the time. It shows a true positive 80-90 percent of the time.

Read full review

Carlos Vitrano

Cloud security director at Medallia

Provides quick visibility and significantly reduces alerts

Its integrations with third-party SIEMs can be better. That is one of the things that we discussed with them. We have integrations, for instance, with Splunk. The data that we are receiving in Splunk is huge, and it is valid because Lacework has a bunch of data that they can provide to you. However, to be able to import the data and create alerts, we needed to do some work, so integration is one of the things that they can improve. For container security, how they scan images and how they provide results is something that they need to continue improving in terms of visibility. We already have visibility to several artifacts, but they can take that to the next level and see what else they can do. There can be better integrations with CI/CD pipelines. There can be improvements in terms of how we can take action or how we can report from the number of inventories they are providing to us.

Read full review

VivekSaini

IT Consultant at Aon Corporation

Comprehensive vulnerability management improves security assessments

The platform scans the entire environment and IP range, providing comprehensive vulnerability reports along with solutions to address these vulnerabilities. Its features are extensive and it produces proper results, although there may be occasional false positives. It also categorizes risks based on severity, though further evaluation is necessary for our specific environment.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The most valuable feature is the ability to gain deep visibility into the workloads inside containers."

"The GUI is one of the best features. Audit reports and documentation for alerts are also valuable."

"Singularity Cloud Security's most valuable features are its ease of scalability and comprehensive security measures."

"SentinelOne Singularity Cloud Security improved our risk posture significantly, helped reduce our mean time to detect and mean time to remediate, and enabled collaboration across cloud security, development, and AppSec teams, saving engineering time by approximately three to four hours."

"When creating cloud infrastructure, Cloud Native Security evaluates the cloud security parameters and how they will impact the organization's risk. It lets us know whether our security parameter conforms to international industry standards. It alerts us about anything that increases our risk, so we can address those vulnerabilities and prevent attacks."

"It is pretty easy to integrate with this platform. When properly integrated, it monitors end-to-end."

"Cloud Native Security's most valuable features include cloud misconfiguration detection and remediation, compliance monitoring, a robust authentication security engine, and cloud threat detection and response capabilities."

"SentinelOne Singularity Cloud Security provides email alerts and ranks issues based on severity, such as high, critical, etc., that help us prioritize issues."

More SentinelOne Singularity Cloud Security pros

"The most valuable feature is Lacework's ability to distill all the security and audit logs. I recommend it to my customers. Normally, when I consult for other customers that are getting into the cloud, we use native security tools. It's more of a rule-based engine."

"Lacework is helping a lot in reducing the noise of the alerts. Usually, whenever you have a tool in place, you have a lot of noise in terms of alerts, but the time for an engineer to look into those alerts is limited. Lacework is helping us to consolidate the information that we are getting from the agents and other sources. We are able to focus only on the things that matter, which is the most valuable thing for us. It saves time, and for investigations, we have the right context to take action."

"There are many valuable features that I use in my daily work. The first are alerts and the event dossier that it generates, based on the severity. That is very insightful and helps me to have a security cap in our infrastructure. The second thing I like is the agent-based vulnerability management, which is the most accurate information."

"The most valuable aspects are identifying vulnerabilities—things that are out there that we aren't aware of—as well as finding what path of access attackers could use, and being able to see open SSL or S3 buckets and the like."

"For the most part, out-of-the-box, it tells you right away about the things you need to work on. I like the fact that it prioritizes alerts based on severity, so that you can focus your efforts on anything that would be critical/high first, moderate second, and work your way down, trying to continue to improve your security posture."

"I find the cloud configuration compliance scanning mature. It generates a lot of data and supports major frameworks like ISO 27001 or SOC 2, providing reports and datasets. Another feature I appreciate is setting custom alerts for specific events. Additionally, I value the agent-based monitoring and scanning for compute nodes. It gives us deeper insights into our workloads and helps identify vulnerabilities across our deployed assets."

"The compliance reports are definitely most valuable because they save time and are accurate. So, instead of relying on a human going through and checking or providing me with a report, I could just log into Lacework and see for myself."

"The best feature, in my opinion, is the ease of use."

More Lacework FortiCNAPP pros

"The favorite feature of Qualys Enterprise TruRisk Platform is that it provides the whole information of a particular vulnerability, including a comprehensive summary, related CVEs and CVSS score, which helps understand potential risks and allows the output to be exported in various formats like CSV, PDF, or JSON."

"Qualys Enterprise TruRisk Platform is considered a good leader in its field."

"Qualys offers versatility. It can function both with and without agents, offering flexibility in deployment. Furthermore, it provides comprehensive support for various systems such as Windows Server, Unix servers, and databases, including SQL, Oracle, and others for development."

Cons

"The areas with room for improvement include the cost, which is higher compared to other security platforms. The dashboard can also be laggy."

"Scanning capabilities should be added for the dark web."

"The Infrastructure as Code service available in SentinelOne Singularity Cloud Security and the services available in AWS cloud security can be merged so that we can get the security data directly from AWS cloud in SentinelOne Singularity Cloud Security. This way, all the data related to security will be in one single place. Currently, we have to check a couple of things on SentinelOne Singularity Cloud Security, and we have to validate that same data on the AWS Cloud to be sure. If they can collaborate like that, it will be great."

"The documentation could be better."

"I request that SentinelOne investigate this false positive, as SentinelOne has a higher false positive rate than other XDR solutions."

"If I had to pick a complaint, it would be the way the hosts are listed in the tool. You have different columns separated by endpoint name, Cloud Account, and Cloud Instances ID. I wish there was something where we could change the endpoint name and not use just the IP address. We would like to have custom names or our own names for the instances. If I had a complaint, that would be it, but so far, it meets all the needs that we have."

"The documentation that I use for the initial setup can be more detailed or written in a more user-friendly language to avoid troubles."

"To enhance the notification system's efficiency, resolved issues should be promptly removed from the portal."

More SentinelOne Singularity Cloud Security cons

"The configuration and setup of alerts should be easier. They should make it easier to integrate with systems like Slack and Datadog. I didn't spend too much time on it, but to me, it wasn't as simple as the alerting that I've seen on other systems."

"The solution lacks a cohesive data model, making extracting the necessary data from the platform challenging. It uses its own LQL query language, and each database across different layers and modules is structured differently, complicating correlation efforts. Consequently, I had to create extensive custom reports outside Lacework because their default dashboards didn't communicate risk metrics. They're addressing these issues by redesigning their tools, including introducing the dashboard, which is a step closer to actionable insights but still needs refinement."

"There are a couple of the difficulties we encounter in the realm of cybersecurity, or security as a whole, that relate to potentially limited clarity. Having the capacity to perceive the configuration aspect and having the ability to contribute to it holds substantial advantages, in my view. It ranks high, primarily due to its role in guaranteeing compliance and the potential to uncover vulnerabilities, which could infiltrate the system and introduce potential risks. I had been exploring a specific feature that captured my interest. However, just yesterday, I participated in a product update session that announced the imminent arrival of this feature. The feature involves real-time alerting. This was something I had been anticipating, and it seems that this capability is now being integrated, possibly as part of threat intelligence. While anomaly events consistently and promptly appear in the console, certain alerts tend to experience delays before being displayed. Yet, with the recent product update, this issue is expected to be resolved. Currently, a comprehensive view of all policies is available within the console. However, I want a more tailored display of my compliance posture, focusing specifically on policies relevant to me. For instance, if I'm not subject to HIPAA regulations, I'd prefer not to see the HIPAA compliance details. It's worth noting that even with this request, there exists a filtering mechanism to control the type of compliance information visible. This flexibility provides a workaround to my preference, which is why it's challenging for me to definitively state my exact request."

"Its integrations with third-party SIEMs can be better. That is one of the things that we discussed with them."

"Lacework lacks remediation features, but I believe they're working on that. They're focused on the reporting aspect, but other features need to improve. They're also adding some compliance features, so it's not worth saying they need to get better at it."

"A feature that I have requested from them is the ability to sort alerts and policies based on a security framework. Right now, when you go into alerts, you have hundreds and hundreds of them that you have to manually pick. It would be useful to have categories for CIS Benchmark or SOC 2 and be able to display all the alerts and policies for one security framework."

"I would like to see a remote access assistance feature. And the threat-hunting platform could be better."

"The biggest thing I would like to see improved is for them to pursue and obtain a FedRAMP moderate authorization... I don't believe they have any immediate plans to get FedRAMP moderate authorized, which is a bit of a challenge for us because we can only use Lacework in our commercial environment."

More Lacework FortiCNAPP cons

"The report sometimes inaccurately identifies the corresponding operating system version."

"Once we supplied 130 URLs to it for scanning one by one, and it crashed in between. We did not have any clue what happened, so we had to reach out to support."

Pricing and Cost Advice

"SentinelOne Singularity Cloud Security is costly."

"PingSafe is less expensive than other options."

"We have an enterprise license. It is affordable. I'm not sure, but I think we pay 150,000 rupees per month."

"I am not involved in the pricing, but it is cost-effective."

"We found it to be fine for us. Its price was competitive. It was something we were happy with. We are not a Fortune 500 company, so I do not know how pricing scales at the top end, but for our cloud environment, it works very well."

"As a partner, we receive a discount on the licenses."

"SentinelOne Singularity Cloud Security is on the costlier side."

"The pricing is fair. It is not inexpensive, and it is also not expensive. When managing a large organization, it is going to be costly, but it meets the business needs. In terms of what is out there on the market, it is fair and comparable to what I have seen, so I do not have any complaints about the cost"

More SentinelOne Singularity Cloud Security pricing and cost advice

"The pricing has gotten better. That scenario was somewhat unstable. They have a rather interesting licensing structure. I believe you get 200 resources per "Lacework unit." It was difficult, in the beginning, to figure out exactly what a "resource" was... That was a problem until about a year or so ago. They have improved it and it has stabilized quite a bit."

"It is slightly expensive. It depends on how big your environment is, but it is expensive. Right now, we are spending a lot of money. We have covered all of the cloud providers and most of our colocation facilities as well, so we cannot complain, but it is slightly expensive. It is not super expensive."

"The licensing fee was approximately $80,000 USD, per year."

"My smaller deployments cost around 200,000 a year, which is probably not as expensive as Wiz."

Information not available

See which vendors are best for you

Use our free recommendation engine to learn which Cloud-Native Application Protection Platforms (CNAPP) solutions are best for your needs.

See recommendations

871,469 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

16%

Financial Services Firm

14%

Manufacturing Company

10%

Government

Computer Software Company

15%

Financial Services Firm

13%

Manufacturing Company

University

No data available

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	44
Midsize Enterprise	20
Large Enterprise	55

By reviewers
Company Size	Count
Small Business	4
Midsize Enterprise	4
Large Enterprise	3

No data available

Questions from the Community

What do you like most about PingSafe?

The dashboard gives me an overview of all the things happening in the product, making it one of the tool's best featu...

See all answers

What is your experience regarding pricing and costs for PingSafe?

I think the pricing of SentinelOne Singularity Cloud Security is a bit high.

See all answers

What needs improvement with PingSafe?

One area that could be improved in SentinelOne Singularity Cloud Security is their policies; the way they have config...

See all answers

What is your experience regarding pricing and costs for Lacework?

My smaller deployments cost around 200,000 a year, which is probably not as expensive as Wiz.

See all answers

What needs improvement with Lacework?

The solution lacks a cohesive data model, making extracting the necessary data from the platform challenging. It uses...

See all answers

What is your primary use case for Lacework?

We use the tool for two main purposes: vulnerability management and monitoring. We utilize it to scan all of our IAC ...

See all answers

What is your experience regarding pricing and costs for Qualys Enterprise TruRisk Platform?

The cost is medium to high.

See all answers

What needs improvement with Qualys Enterprise TruRisk Platform?

One thing which I really want Qualys Enterprise TruRisk Platform to improve is the UI. While it might not be the case...

See all answers

What is your primary use case for Qualys Enterprise TruRisk Platform?

I basically use Qualys Enterprise TruRisk Platform to scan my internal networks and the URLs we work on. These two ar...

See all answers

Comparisons

Prisma Cloud by Palo Alto Networks vs SentinelOne Singularity Cloud Security

Compared 12% of the time

Wiz vs SentinelOne Singularity Cloud Security

Compared 11% of the time

AWS GuardDuty vs SentinelOne Singularity Cloud Security

Compared 8% of the time

Microsoft Defender for Cloud vs SentinelOne Singularity Cloud Security

Compared 5% of the time

Orca Security vs SentinelOne Singularity Cloud Security

Compared 4% of the time

More SentinelOne Singularity Cloud Security Competitors

Wiz vs Lacework FortiCNAPP

Compared 16% of the time

Prisma Cloud by Palo Alto Networks vs Lacework FortiCNAPP

Compared 12% of the time

Tenable Cloud Security vs Lacework FortiCNAPP

Compared 6% of the time

AWS GuardDuty vs Lacework FortiCNAPP

Compared 6% of the time

Sysdig Secure vs Lacework FortiCNAPP

Compared 4% of the time

More Lacework FortiCNAPP Competitors

Prisma Cloud by Palo Alto Networks vs Qualys Enterprise TruRisk Platform

Compared 100% of the time

More Qualys Enterprise TruRisk Platform Competitors

Product Reports

Buyer's Guide

SentinelOne Singularity Cloud Security

September 2025

SentinelOne Singularity Cloud Security report

Download SentinelOne Singularity Cloud Security product report

Buyer's Guide

Lacework FortiCNAPP

October 2025

Download Lacework FortiCNAPP product report

Buyer's Guide

Cloud and Data Center Security

October 2025

Qualys Enterprise TruRisk Platform report

Download Qualys Enterprise TruRisk Platform product report

Also Known As

PingSafe

Polygraph, FortiCNP

Qualys Cloud Platform

Overview

SentinelOne Singularity Cloud Security offers a streamlined approach to cloud security with intuitive operation and strong integration capabilities for heightened threat detection and remediation efficiency.

Singularity Cloud Security stands out for its real-time detection and response, effectively minimizing detection and remediation timelines. Its automated remediation integrates smoothly with third-party tools enhancing operational efficiency. The comprehensive console ensures visibility and support for forensic investigations. Seamless platform integration and robust support for innovation are notable advantages. Areas for development include improved search functionality, affordability, better firewall capabilities for remote users, stable agents, comprehensive reporting, and efficient third-party integrations. Clarity in the interface, responsive support, and real-time alerting need enhancement, with a call for more automation and customization. Better scalability and cost-effective integration without compromising capabilities are desired.

What are SentinelOne Singularity Cloud Security's standout features?

Ease of Use: Intuitive operation simplifies navigation across platforms.
Real-Time Detection: Quick identification and response to threats.
Automated Remediation: Streamlines recovery processes with integration capabilities.
Forensic Visibility: Aids in thorough threat analysis and prevention strategies.
Comprehensive Console: Offers full visibility and historical data tracking.
Platform Integration: Supports seamless operation across cloud and hybrid environments.

What benefits should users expect from SentinelOne Singularity Cloud Security?

Enhanced Efficiency: Automation and third-party integration improve threat response.
Improved Detection: Reduces mean time to detect and respond to threats.
Operational Support: Comprehensive visibility and forensic tools aid operational decisions.
Cost Efficiency: Affordable integration with scaling capabilities without high overhead.

SentinelOne Singularity Cloud Security is deployed in industries needing robust cloud security posture management, endpoint protection, and threat hunting. Utilized frequently across AWS and Azure, it assists in monitoring, threat detection, and maintaining compliance in diverse environments while providing real-time alerts and recommendations for proactive threat management.

SentinelOne

Lacework FortiCNAPP provides robust cloud security, combining vulnerability management and multi-cloud insight with user-friendly controls, machine learning detection, and compliance support.

Lacework FortiCNAPP specializes in cloud security by merging machine learning anomaly detection with agent-based vulnerability management to offer detailed alerts and compliance reports. Its comprehensive approach allows continuous monitoring across AWS and Kubernetes, providing insights from an attacker's perspective. The platform offers automation and seamless Slack integration, facilitating collaborative and efficient cloud security management. Users value its ability to handle multi-cloud environments and scan IAC scripts, configurations, and compute nodes across AWS and GCP.

What are the key features?

Machine Learning Detection: Identifies anomalies effectively.
Compliance Reports: Provides precise compliance documentation.
Vulnerability Management: Supports agent-based vulnerability assessments.
Multi-Cloud Support: Manages and secures across multiple cloud providers.
Automation and Collaboration: Enables integration with Slack for streamlined communication.
Custom Alerts: Allows creation of personalized alerts for better focus.

What benefits do users expect?

Reduced Alert Noise: Minimizes distractions with filtered alerts.
Efficient Cloud Security: Automates processes for enhanced security management.
Collaboration Support: Integrates with tools like Slack.
Insightful Perspective: Provides insight from an attacker's viewpoint.

Organizations across sectors leverage Lacework FortiCNAPP for cloud security, focusing on compliance, security posture, and vulnerability management. It is widely used for monitoring AWS and Kubernetes environments, scanning IAC scripts, configurations, and securing compute nodes. It supports multi-cloud security posture management and log ingestion, enabling companies to maintain strong cloud infrastructures without dedicated security layers.

Fortinet

Qualys TruRisk Platform provides an end-to-end solution, allowing you to avoid the cost and complexities that come with managing multiple security vendors. Qualys TruRisk Platform automatically gathers and analyzes IT, security, and compliance data in a scalable, state-of-the-art backend. Provisioning any of Qualys’ natively integrated security and compliance apps - twenty and counting - is as easy as checking a box.

Qualys

Sample Customers

Information Not Available

J.Crew, AdRoll, Snowflake, VMWare, Iterable, Pure Storage, TrueCar, NerdWallet, and more.

Information Not Available

Buyer's Guide

Lacework FortiCNAPP vs. Qualys Enterprise TruRisk Platform

September 2025

Free Report: Lacework FortiCNAPP vs. Qualys Enterprise TruRisk Platform

Find out what your peers are saying about Lacework FortiCNAPP vs. Qualys Enterprise TruRisk Platform and other solutions. Updated: September 2025.

DOWNLOAD NOW

871,469 professionals have used our research since 2012.

See our Lacework FortiCNAPP vs. Qualys Enterprise TruRisk Platform report.

See our list of best Cloud-Native Application Protection Platforms (CNAPP) vendors.

We monitor all Cloud-Native Application Protection Platforms (CNAPP) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.