AWS Security Hub vs FortiCNAPP comparison

Why PeerSpot?

Amazon Web Services (AWS) and Fortinet are both solutions in the Cloud Security Posture Management (CSPM) category. Amazon Web Services (AWS) is ranked #17 with an average rating of 7.8, while Fortinet is ranked #13 with an average rating of 7.9. Amazon Web Services (AWS) holds a 2.5% mindshare in CSPM, compared to Fortinet’s 3.6% mindshare. Additionally, 89% of Amazon Web Services (AWS) users are willing to recommend the solution, compared to 89% of Fortinet users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Feb 22, 2026

FortiCNAPP and AWS Security Hub are competitors in the realm of security solutions. FortiCNAPP appears more robust due to its comprehensive network segmentation and multi-cloud capability.

Features: FortiCNAPP offers strong network segmentation, supports automated policy recommendations, and integrates with multiple SIEM solutions to enhance security. Its machine learning features provide accurate anomaly detection and compliance reports. AWS Security Hub provides seamless integration with AWS services and offers detailed alerts and compliance checks. Its native cloud features are comprehensive but lack flexibility in third-party and multi-cloud integrations.

Room for Improvement: FortiCNAPP could improve user-friendliness, increase visibility on compliance metrics, and enhance IAM security controls and third-party integration. AWS Security Hub needs better non-native service integration, real-time scanning abilities, and more user-friendly dashboards. It also requires greater adaptability for hybrid or multi-cloud deployments.

Ease of Deployment and Customer Service: FortiCNAPP is well-suited for both public and private cloud environments with strong DevOps tool integration and proactive support. AWS Security Hub performs well in public cloud settings, particularly AWS, but lacks adaptability in private clouds. AWS customer service is extensive but notedly less proactive compared to FortiCNAPP's feedback-oriented approach.

Pricing and ROI: FortiCNAPP offers competitive pricing within the Fortinet ecosystem, yielding high ROI by enhancing security efficiency and reducing staffing needs. AWS Security Hub presents a cost-effective model within AWS with options like PAYG. It offers savings through AWS service integration, although limited multi-cloud capabilities may diminish its perceived value.

To learn more, read our detailed AWS Security Hub vs. FortiCNAPP Report (Updated: September 2026).

Buyer's Guide

AWS Security Hub vs. FortiCNAPP

September 2026

Download the complete report

Helped 915,325 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Qualys TotalCloud

Mindshare comparison

As of October 2026, in the Cloud Security Posture Management (CSPM) category, the mindshare of Qualys TotalCloud is 2.0%, up from 1.4% compared to the previous year. The mindshare of AWS Security Hub is 2.5%, down from 4.1% compared to the previous year. The mindshare of FortiCNAPP is 3.6%, up from 2.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Cloud Security Posture Management (CSPM) Mindshare Distribution
Product	Mindshare (%)
Qualys TotalCloud	2.0%
FortiCNAPP	3.6%
AWS Security Hub	2.5%
Other	91.9%

Cloud Security Posture Management (CSPM)

Featured Reviews

reviewer2859021

Sr Security Engineer at a tech vendor with 5,001-10,000 employees

Risk-based triage has transformed container security and now prioritizes high-impact threats

The best features Qualys TotalCloud offers currently include managing cloud infrastructure and container security while facing major challenges such as alert fatigue. Traditional vulnerability scanners flag hundreds of CVEs on short-lived Kubernetes containers, some of which have no internet exposure or are gone before we can even triage them. I leverage Qualys TotalCloud to move beyond static CVSS. I use it to implement runtime exposure, correlation risk reprioritization, and shift-left integration. This notifies developers to fix a base image upstream rather than patching live ephemeral instances. In my work with cloud and container security, the biggest operational hurdle was alert fatigue. I use Qualys to shift left from static CVSS severity to context-aware risk prioritization. I correlated raw vulnerability data with real-time risk factors such as public network exposure, active runtime execution, or overly permissive IAM roles. This allows us to immediately drop the priority of isolated containers and escalate lower-severity CVEs that sit on an exposed, high-risk path. We can map these findings directly back to our CI/CD pipelines so developers can patch the root base images upstream. We have drastically cut down the signal-to-noise ratio, saved a lot of manual hours doing triage work, and ensured engineering effort goes directly towards high-impact risk reduction.

Read full review

Karthik Ekambaram

Director at Scybers

Has helped identify misconfigurations and prioritize risks but lacks multi-cloud support and deeper integration features

AWS Security Hub cannot scale up to multiple different cloud environments; it only works for AWS. There are other products in the market for CSPM that can give you multi-cloud environment misconfigurations, even Microsoft for that matter. Regarding the integration of AWS Security Hub with third-party tools, I am not certain whether we can integrate them, but there is no need to do so. However, AWS Security Hub cannot integrate with other cloud providers, so it only supports the AWS environment. The compliance checks within AWS Security Hub are good, but we don't use them much. We utilize compliance frameworks such as CIS compliance frameworks and ISO 27017 framework, which are beneficial, but it can improve in other areas too, such as including NIST and other frameworks beyond just ISO and CIS. Improvements can be applicable for scalability, particularly on integration with multi-cloud environments, and compliance frameworks can be added for more variety as well. The unified dashboard in AWS Security Hub is adequate; I cannot say it is exceptional, but the content available in the dashboards is satisfactory for now.

Read full review

Charl Pinches

Solutions Sales Specialist at a outsourcing company with 1,001-5,000 employees

Cloud risk has become visible and security teams prioritize and act on threats efficiently

FortiCNAPP can be improved because the platform can feel complex at the start, especially for teams new to CNAP tooling. Some users mention that they found the interface and data models less intuitive than expected, and I have had situations where reporting and alert configurations might require time. Regarding other improvements needed for FortiCNAPP, the majority of the time is that reporting and alert configuration might require time to tune properly. This is the significant issue, combined with the fact that some users find the interface and data model less intuitive than expected. Regarding FortiCNAPP's AI capabilities, I think there might be a bit of improvement needed. However, since Fortinet is a security vendor overall, keeping the data safe is not a problem. I know they have invested a lot in getting it to a place where it is a trusted platform.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Qualys TotalCloud's most valuable feature is its ability to link clusters of assets, providing a clear model of deployments, vulnerabilities, and statuses."

"I would rate Qualys TotalCloud ten out of ten."

"The vulnerability management feature is the one I like the most because it provides a clear picture of all vulnerabilities."

"I would recommend Qualys TotalCloud to other users because it is cost-efficient and has a good return on investment."

"It is a cloud-native app that integrates with both IaaS and SaaS. It seamlessly integrates with other platforms."

"I like the web API security and IoT scanning features the most. The user-friendly design of TotalCloud's interface enables customers to navigate it and use its full potential easily"

"The agent and agentless scanning in TotalCloud, particularly the FlexScan method, is incredibly valuable. With traditional scanning approaches, we had to give IP ranges and whitelist IPs. All that is now simplified. FlexScan requires minimal intervention, and after configuration, it automatically collects data and performs necessary scans."

"The most valuable feature is the consolidated information that it provides from various platforms."

More Qualys TotalCloud pros

"Currently, our organization utilizes AWS for various purposes, including SaaS (Software as a Service), PaaS (Platform as a Service), and hosting applications in the cloud. We develop our applications and use AWS services as a platform for basic functions and secondary development needs. Additionally, we rely on PaaS for accounting services. Approximately, 50% of our applications are hosted in the cloud environment, making it a significant part of our current setup."

"The most valuable feature of AWS Security Hub is the ability to track when monitoring is not enabled on any of my resources."

"AWS Security Hub brings many features into one table that is quite useful, and the app team finds it easier to see what is missing."

"AWS Security Hub has very good integration features. It allows for AWS native services integration, and it helps us to integrate some of the services outside of AWS. They have partners, such as Amazon Preferred Network Partners (APN). If you have different security tools around APN, we can integrate those findings with AWS Security Hub reducing the need to refer to different portals or different UIs. You can have AWS Security Hub act as a single common go-to dashboard."

"The advantage is that it is cloud-native, and we do not need to install agents or sensors to find findings."

"AWS Security Hub's unified dashboard does help streamline my process of identifying vulnerabilities, but we don't use Inspector."

"I find all of the features to be highly valuable."

"Cloudposse is a valuable feature as it guarantees my security."

More AWS Security Hub pros

"The most valuable aspects are identifying vulnerabilities—things that are out there that we aren't aware of—as well as finding what path of access attackers could use, and being able to see open SSL or S3 buckets and the like."

"The automated policy recommendations when pushing any firewall policies using Fortinet were really good and performed their job effectively."

"There are many valuable features that I use in my daily work. The first are alerts and the event dossier that it generates, based on the severity. That is very insightful and helps me to have a security cap in our infrastructure. The second thing I like is the agent-based vulnerability management, which is the most accurate information."

"The best feature, in my opinion, is the ease of use, as well as some levels of machine learning anomaly detection that they have that can detect pivotal anomalies faster."

"I find the cloud configuration compliance scanning mature. It generates a lot of data and supports major frameworks like ISO 27001 or SOC 2, providing reports and datasets. Another feature I appreciate is setting custom alerts for specific events. Additionally, I value the agent-based monitoring and scanning for compute nodes. It gives us deeper insights into our workloads and helps identify vulnerabilities across our deployed assets."

"FortiCNAPP has positively impacted my organization by providing centralized visibility and consolidating our cloud security posture management, helping us identify misconfigurations and public accessibility issues, which allowed us to enhance IAM governance and visibility on vulnerabilities."

"For the most part, out-of-the-box, it tells you right away about the things you need to work on. I like the fact that it prioritizes alerts based on severity, so that you can focus your efforts on anything that would be critical/high first, moderate second, and work your way down, trying to continue to improve your security posture."

"If you want to turn your cloud findings into actionable security work, FortiCNAPP is the way to go."

More FortiCNAPP pros

Cons

"I sometimes have difficulty detecting or uninstalling certain versions of applications, which I have to do manually."

"I chose a rating of nine out of ten because there is a complex interface that sometimes overwhelms new engineers."

"Qualys TotalCloud needs to improve its accuracy for non-Windows operating systems."

"The areas in the solution that have room for improvement include the UI/UX design, which should be improved, and they should integrate more artificial intelligence into the product."

"There should be improvement from a dashboard perspective when collecting and showcasing data to lead management."

"Qualys TotalCloud's increasing complexity, due to the development and deployment of multiple solutions, is making the GUI difficult to navigate."

"The downside is only in container security, but it has not been a long time since they introduced these models."

"Regarding technical support from Qualys, they respond, but the response time can be too long. Sometimes we need to wait weeks for solutions to simple questions."

More Qualys TotalCloud cons

"Whenever my team gets some alarms from the central team, my team needs to initiate whether it's a real or false trigger. The central team needs to keep adjusting to the parameters or at least the concerned IPs, whether it's really from the company's pool of IPs, so the trigger process can be improved. In the next release of AWS Security Hub, I'd like a better dashboard that could result in better alert visibility."

"Right now, there are some difficulties we're facing with AWS Security Hub, and we need our central team to mitigate the issues."

"One aspect that could be improved in the solution is its adaptability to different markets and geopolitical restrictions. In certain regions like Thailand, specific services from certain countries or providers, such as AWS or Azure, might be limited or blocked. It also needs improvement in would require configuring the solution more adaptable to AWS infrastructure and function."

"AWS Security Hub should improve the time it takes to update. It takes a long period of time when updating. It can take 24 hours sometimes to update. Additionally, when integrating this solution with more security tools, takes time."

"Adding SIEM features would be beneficial because of the limited customization of AWS Security Hub."

"The solution should be easier to learn and use"

"It is not flexible for multi-cloud environments."

"Security Hub is currently not worth investing in, as it requires more configurations and integration with other services to work effectively."

More AWS Security Hub cons

"Lacework lacks remediation features, but I believe they're working on that. They're focused on the reporting aspect, but other features need to improve. They're also adding some compliance features, so it's not worth saying they need to get better at it."

"Its integrations with third-party SIEMs can be better. That is one of the things that we discussed with them."

"The vulnerability part is not systematically organized; it is all clumsy in the web UI, and it is not user-friendly."

"There are a couple of the difficulties we encounter in the realm of cybersecurity, or security as a whole, that relate to potentially limited clarity. Having the capacity to perceive the configuration aspect and having the ability to contribute to it holds substantial advantages, in my view. It ranks high, primarily due to its role in guaranteeing compliance and the potential to uncover vulnerabilities, which could infiltrate the system and introduce potential risks. I had been exploring a specific feature that captured my interest. However, just yesterday, I participated in a product update session that announced the imminent arrival of this feature. The feature involves real-time alerting. This was something I had been anticipating, and it seems that this capability is now being integrated, possibly as part of threat intelligence. While anomaly events consistently and promptly appear in the console, certain alerts tend to experience delays before being displayed. Yet, with the recent product update, this issue is expected to be resolved. Currently, a comprehensive view of all policies is available within the console. However, I want a more tailored display of my compliance posture, focusing specifically on policies relevant to me. For instance, if I'm not subject to HIPAA regulations, I'd prefer not to see the HIPAA compliance details. It's worth noting that even with this request, there exists a filtering mechanism to control the type of compliance information visible. This flexibility provides a workaround to my preference, which is why it's challenging for me to definitively state my exact request."

"In general, I would not recommend Lacework right now. There are more mature solutions that would be a better fit."

"A feature that I have requested from them is the ability to sort alerts and policies based on a security framework. Right now, when you go into alerts, you have hundreds and hundreds of them that you have to manually pick. It would be useful to have categories for CIS Benchmark or SOC 2 and be able to display all the alerts and policies for one security framework."

"The solution lacks a cohesive data model, making extracting the necessary data from the platform challenging. It uses its own LQL query language, and each database across different layers and modules is structured differently, complicating correlation efforts. Consequently, I had to create extensive custom reports outside Lacework because their default dashboards didn't communicate risk metrics. They're addressing these issues by redesigning their tools, including introducing the dashboard, which is a step closer to actionable insights but still needs refinement."

"I would like to see a remote access assistance feature. And the threat-hunting platform could be better."

More FortiCNAPP cons

Pricing and Cost Advice

"The cost is high, but it meets our organizational needs."

"Qualys TotalCloud offers competitive pricing given its comprehensive suite of features, including integration, assessment, remediation, and detection capabilities, all within a single platform."

"Its price seems higher compared to other tools, but it is worth it. If they could adjust the pricing and make it comparable with other tools, that would be great."

"Qualys TotalCloud offers good pricing that is affordable and competitive with the market. Our partnership also provides us with additional benefits."

"Qualys TotalCloud offers cost-effective licensing flexibility."

"As a middle management member, I do not have direct pricing knowledge, but based on the knowledge from our meetings, its pricing is competitive."

"I am not sure about the pricing. From what I understand, it is a bit on the higher side, but I do not have the exact numbers."

"Qualys TotalCloud is expensive, but it offers a premier solution with no headaches."

More Qualys TotalCloud pricing and cost advice

"The price of AWS Security Hub is average compared to other solutions."

"Security Hub is not an expensive solution."

"The price of the solution is not very competitive but it is reasonable."

"AWS Security Hub is not an expensive tool. I would consider it to be a cheap solution. AWS Security Hub follows the PAYG pricing model, meaning you will have to pay for whatever you use."

"The cost is based on the number of compliances, core checks, and services required, and for more than 10,000 recommendations, the charge is just one dollar."

"The pricing is fine. It is not an expensive tool."

"AWS Security Hub's pricing is pretty reasonable."

"There are multiple subscription models, like yearly, monthly, and packaged."

"My smaller deployments cost around 200,000 a year, which is probably not as expensive as Wiz."

"The pricing has gotten better. That scenario was somewhat unstable. They have a rather interesting licensing structure. I believe you get 200 resources per "Lacework unit." It was difficult, in the beginning, to figure out exactly what a "resource" was... That was a problem until about a year or so ago. They have improved it and it has stabilized quite a bit."

"The licensing fee was approximately $80,000 USD, per year."

"It is slightly expensive. It depends on how big your environment is, but it is expensive. Right now, we are spending a lot of money. We have covered all of the cloud providers and most of our colocation facilities as well, so we cannot complain, but it is slightly expensive. It is not super expensive."

See which vendors are best for you

Use our free recommendation engine to learn which Cloud Security Posture Management (CSPM) solutions are best for your needs.

See recommendations

915,325 professionals have used our research since 2012.

Comparison Review

it_user186927

Director of Operations at a comms service provider with 10,001+ employees

Feb 16, 2015

Cybereason vs. Interset vs. SQRRL

Capture DB - they all use NoSQL db and hence solve the ad hoc query and 'go back in time' problem with current best of breed SIEM and DLP solutions that rely on real time analysis of incoming logs (and don't store them). This means deeper and quicker iterative threat analysis and assessment…

Read full review

Top Industries

By visitors reading reviews

Comms Service Provider

16%

Outsourcing Company

12%

Manufacturing Company

11%

Financial Services Firm

10%

Financial Services Firm

12%

Manufacturing Company

10%

Computer Software Company

Comms Service Provider

10%

Construction Company

Financial Services Firm

Outsourcing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	14
Midsize Enterprise	6
Large Enterprise	35

By reviewers
Company Size	Count
Small Business	9
Midsize Enterprise	5
Large Enterprise	14

By reviewers
Company Size	Count
Small Business	9
Midsize Enterprise	5
Large Enterprise	8

Questions from the Community

What is your experience regarding pricing and costs for Qualys TotalCloud?

The price is very expensive, actually.

See all answers

What needs improvement with Qualys TotalCloud?

In terms of improvement, remediation still belongs to the cloud team, which is one of the issues we faced with Qualys...

See all answers

What is your primary use case for Qualys TotalCloud?

My main use case for Qualys TotalCloud is regarding the cloud visibility that we were not having previously. Previous...

See all answers

Which is better - Azure Sentinel or AWS Security Hub?

We like that Azure Sentinel does not require as much maintenance as legacy SIEMs that are on-premises. Azure Sentinel...

See all answers

What needs improvement with AWS Security Hub?

I do not see any areas for improvement in AWS Security Hub itself, but the cost factor is something that is the main ...

See all answers

What is your primary use case for AWS Security Hub?

AWS Security Hub is something I have used daily as it is a part of my job for cloud security purposes. If you are dea...

See all answers

What is your experience regarding pricing and costs for Lacework?

We purchased the Fortinet firewall and services from a vendor, not through any other marketplaces.

See all answers

What needs improvement with Lacework?

FortiCNAPP can be improved because the platform can feel complex at the start, especially for teams new to CNAP tooli...

See all answers

What is your primary use case for Lacework?

My main use case for FortiCNAPP, from my previous experience distributing it or now as a reseller, is for anyone who'...

See all answers

Comparisons

Wiz vs Qualys TotalCloud

Compared 11% of the time

Microsoft Defender for Cloud vs Qualys TotalCloud

Compared 7% of the time

JupiterOne vs Qualys TotalCloud

Compared 6% of the time

Orca Security vs Qualys TotalCloud

Compared 6% of the time

Snyk vs Qualys TotalCloud

Compared 3% of the time

More Qualys TotalCloud Competitors

Microsoft Sentinel vs AWS Security Hub

Compared 31% of the time

Prisma Cloud by Palo Alto Networks vs AWS Security Hub

Compared 5% of the time

Microsoft Defender for Cloud vs AWS Security Hub

Compared 4% of the time

Check Point Cloud Firewall (formerly CloudGuard Network Security) vs AWS Security Hub

Compared 4% of the time

Datadog vs AWS Security Hub

Compared 2% of the time

More AWS Security Hub Competitors

Wiz vs FortiCNAPP

Compared 4% of the time

SentinelOne Singularity Cloud Security vs FortiCNAPP

Compared 4% of the time

Prisma Cloud by Palo Alto Networks vs FortiCNAPP

Compared 3% of the time

Native vs FortiCNAPP

Compared 3% of the time

Morphisec vs FortiCNAPP

Compared 2% of the time

More FortiCNAPP Competitors

Product Reports

Buyer's Guide

Qualys TotalCloud

September 2026

Download Qualys TotalCloud product report

Buyer's Guide

AWS Security Hub

October 2026

Download AWS Security Hub product report

Buyer's Guide

FortiCNAPP

October 2026

Download FortiCNAPP product report

Also Known As

Qualys TotalCloud with FlexScan

SQRRL

Polygraph, FortiCNP, Lacework

Overview

Qualys TotalCloud enhances security posture across cloud environments with continuous monitoring, vulnerability management, and risk visualization, ensuring efficient threat assessment and automated remediation for improved cyber risk reduction.

Qualys TotalCloud offers a robust suite of security tools essential for organizations managing multi-cloud infrastructures. By integrating cloud accounts and automating workflows, it supports AWS, Azure, and GCP, offering comprehensive vulnerability management and zero-day detection. The platform's user-friendly design, combined with its extensive risk management and unified threat assessment capabilities, enables organizations to prioritize and remediate vulnerabilities effectively. TruRisk Insights provides clear insights on cyber risks, while the automation options streamline patch management and scanning processes. API integration across IaaS and SaaS environments further enhances resource allocation efficiency and saves time, addressing misconfigurations across cloud environments.

What are the most important features of Qualys TotalCloud?

Accurate Vulnerability Reports: Delivers precise and actionable insights for risk mitigation.
Zero-Day Detection: Identifies and addresses zero-day vulnerabilities proactively.
Unified Threat Assessment: Offers comprehensive evaluation of threats across the environment.
Extensive Risk Management: Manages risks effectively with advanced insights and prioritization.
Continuous Monitoring: Provides non-stop surveillance for vulnerabilities and threats.
Cloud-Native Automation: Streamlines processes and reduces manual efforts using automation.
FlexScan for Internet-Facing VMs: Scans external VMs efficiently to detect vulnerabilities.
Dashboard Risk Visualization: Clear visualization helps prioritize vulnerabilities.

What benefits and ROI should users look for?

Improved Security Posture: Enhances threat detection and response across clouds.
Time Savings: Automation reduces time spent on manual vulnerability management.
Resource Efficiency: Better allocation of resources through streamlined workflows.
Enhanced Risk Prioritization: Focus on critical vulnerabilities for effective mitigation.
Integrated Cloud Accounts: Facilitates seamless cloud management and security.

Qualys TotalCloud is deployed in sectors needing rigorous vulnerability management, such as finance and healthcare. Companies utilize it to secure multi-cloud environments like AWS, Azure, and GCP, focus on compliance, and integrate security into CI/CD pipelines to detect and remedy threats pre-deployment.

Qualys

AWS Security Hub provides multi-account management and compliance checks alongside integrations with AWS services and third-party tools. It centralizes vulnerability tracking and risk prioritization, delivering real-time alerts for proactive security management.

AWS Security Hub enhances cloud security management through a centralized dashboard that monitors infrastructure resources and compliance scores, ensuring adherence to AWS standards. With integrations for vulnerability detection and security posture management, users can streamline security operations. While the platform offers notable benefits, areas for improvement include customization options for findings suppression and integration with multi-cloud environments.

What are the key features of AWS Security Hub?

Multi-Account Management: Seamlessly manage security across numerous accounts.
Compliance Checks: Stay aligned with standards such as PCI through automated reviews.
AWS Integrations: Connect effortlessly with AWS and third-party services to enhance security posture.
Real-Time Alerts: Quickly respond to potential threats with immediate notifications.
Risk Prioritization: Focus on critical vulnerabilities to enhance resource allocation.

What benefits should users expect from using AWS Security Hub?

Proactive Security: Early threat detection enables quicker mitigation strategies.
Cloud-Native Functionality: Utilize tools tailored for cloud environments.
Compliance Insights: Simplified compliance management provides transparency.
Ease of Use: Streamlined interface facilitates efficient security management.

Industries implementing AWS Security Hub leverage its capabilities for comprehensive security across multiple accounts and regions. Health, finance, and retail sectors benefit by automating compliance checks and monitoring security infrastructures. This service aids in identifying misconfigurations, tracking alerts, and ensuring infrastructure integrity during cyber incidents.

Amazon Web Services (AWS)

FortiCNAPP is a comprehensive cloud security platform focusing on ease of use and machine learning-driven anomaly detection. It offers robust compliance reporting, seamless integration, and continuous monitoring, making it an essential tool for organizations managing multi-cloud environments and security configurations.

FortiCNAPP provides significant capabilities in cloud security, compliance, and vulnerability management. Designed for organizations needing efficient monitoring, it enables detection of anomalies across cloud infrastructures while optimizing security posture and ensuring compliance with environments like AWS and GCP. The platform offers in-depth insights through scanning of IAC scripts, host systems, and cloud configurations. Recognized for effectively managing security posture, it safeguards Kubernetes and container environments, providing comprehensive threat detection and response. However, some areas like visibility, IAM security controls, and compliance metrics need improvement. Users face challenges with alert setup and lack intuitive design, alongside issues like FedRAMP authorization absence and complexity in the data model.

What are the key features of FortiCNAPP?

Ease of Use: FortiCNAPP simplifies security management for cloud environments.
Machine Learning Anomaly Detection: Automatically identifies and prioritizes threats.
Compliance Reporting: Streamlines compliance procedures and reporting.
Seamless Integration: Ensures smooth operation across multi-cloud environments.
Continuous Monitoring: Provides ongoing oversight of security vulnerabilities.
Multi-Cloud Integration: Enables swift response to misconfigurations and vulnerabilities.

What benefits should users expect when evaluating FortiCNAPP?

Time Efficiency: Reduces time spent on compliance and threat management.
Improved Security Posture: Enhances protection for cloud and container environments.
Valuable Security Insights: Provides in-depth analysis for proactive threat response.
Noise Reduction: Distills security logs to minimize alert fatigue.
Operational Effectiveness: Facilitates seamless multi-cloud security management.

FortiCNAPP is implemented extensively by industries needing reliable cloud security, such as finance, healthcare, and technology sectors. It supports organizations in enhancing cloud infrastructure protection, ensuring compliance, and strengthening vulnerability management. By integrating with platforms like AWS and GCP, businesses can optimize security posture in their cloud deployments.

Fortinet

Sample Customers

Information Not Available

Edmunds, Frame.io, GoDaddy, Realtor.com

J.Crew, AdRoll, Snowflake, VMWare, Iterable, Pure Storage, TrueCar, NerdWallet, and more.

Buyer's Guide

AWS Security Hub vs. FortiCNAPP

September 2026

Free Report: AWS Security Hub vs. FortiCNAPP

Find out what your peers are saying about AWS Security Hub vs. FortiCNAPP and other solutions. Updated: September 2026.

DOWNLOAD NOW

915,325 professionals have used our research since 2012.

See our AWS Security Hub vs. FortiCNAPP report.

See our list of best Cloud Security Posture Management (CSPM) vendors.

We monitor all Cloud Security Posture Management (CSPM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.