FortiCNAPP vs Trellix Cloud Workload Security comparison

Fortinet and Trellix are both solutions in the Cloud Workload Protection Platforms (CWPP) category. Fortinet is ranked #17 with an average rating of 7.8, while Trellix is ranked #28. Fortinet holds a 3.8% mindshare in CWPP, compared to Trellix’s 0.6% mindshare. Additionally, 85% of Fortinet users are willing to recommend the solution, compared to 100% of Trellix users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Feb 22, 2026

FortiCNAPP and Trellix Cloud Workload Security compete in cloud security, with Trellix considered superior due to its comprehensive features.

Features: FortiCNAPP offers advanced threat detection, simplified management interfaces, and efficient support. Trellix Cloud Workload Security provides deep integration capabilities, extensive security analytics, and a data-driven approach to security.

Ease of Deployment and Customer Service: FortiCNAPP ensures straightforward deployment and responsive customer service, facilitating quick integration into current systems. Trellix Cloud Workload Security offers a robust deployment model with extensive support options, providing detailed technical guidance.

Pricing and ROI: FortiCNAPP's lower setup cost suits cost-sensitive enterprises, with positive ROI from rapid deployment. Trellix Cloud Workload Security has a higher initial cost, balanced by its extensive features, offering strong ROI in complex security environments.

To learn more, read our detailed FortiCNAPP vs. Trellix Cloud Workload Security Report (Updated: April 2026).

Buyer's Guide

FortiCNAPP vs. Trellix Cloud Workload Security

April 2026

Download the complete report

Helped 893,221 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

SentinelOne Singularity Clo...

Mindshare comparison

As of May 2026, in the Cloud Workload Protection Platforms (CWPP) category, the mindshare of SentinelOne Singularity Cloud Security is 4.9%, up from 2.8% compared to the previous year. The mindshare of FortiCNAPP is 3.8%, up from 2.4% compared to the previous year. The mindshare of Trellix Cloud Workload Security is 0.6%, up from 0.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Cloud Workload Protection Platforms (CWPP) Mindshare Distribution
Product	Mindshare (%)
SentinelOne Singularity Cloud Security	4.9%
FortiCNAPP	3.8%
Trellix Cloud Workload Security	0.6%
Other	90.7%

Cloud Workload Protection Platforms (CWPP)

Featured Reviews

Sreeraj Mohandas

Security Engineer at HashXpert

Consolidated cloud security has reduced manual work and has automated vulnerability remediation

I elaborate on my rating of SentinelOne support by mentioning that there was some time where the troubleshooting took a longer time. In fact, there were many meetings going on. The availability of the document on the internet is on a lesser side because as an engineer, I would want to know about the troubleshooting aspects of this particular tool. When I am facing a customer, I do not prefer to bring the vendor to every call and try to resolve it, as it takes months and months. It would be better to have a training session with the engineer on site to explain and train properly. This is not the case with SentinelOne, so this is the only thing I have a complaint about. I do not have any other room for improvement to suggest within SentinelOne itself. However, I would really want the AI assistant for the threat hunting part to be more accessible. They have it, but they are making it licensed, so it is a bit on the higher end.

Read full review

Mark Freeborough

Client Manager at MLL Telecom Ltd

Network segmentation has strengthened access control and now streamlines automated threat response

The most valuable features in FortiCNAPP include robust network segmentation and restricting access to network assets. It also supports security measures by leveraging security fabrics for better enforcement and policy enforcement. FortiCNAPP integrates with SIEM solutions, and we offer different SIEM options that work with Fortinet and AlienVault, among others, providing multiple scenarios.FortiCNAPP's automated policy recommendations significantly help improve security measures as part of an overall service wrap. When deploying a Fortinet SD-WAN or network, these tools provide greater visibility to vulnerabilities and enhanced security on the network. It functions as a proactive tool, enabling me to identify threats quickly and automate responses.

Read full review

Madan Mohan

Director Operations at SOFTPRO PLUS

Easy policy designing and highly scalable solution

The customers really want protection against unauthorized applications running on their servers. They should avoid installing any unknown source and use Trellix Cloud Workload Security for the best solution in workload security. It includes DNS with ransomware protection. With this, they can have complete protection for their servers. Additionally, any solution working with the database should implement change control. So, if any changes are made on the database side, they should be resolved and verified to ensure they are not made by any unknown source. This is the best solution we suggest to customers who want granular control to protect their servers. It's easy to deploy with a single agent. Overall, I would rate the solution a nine out of ten because policy designing is very easy too. And the manageability is very easy. You can easily manage it through EPO and deploy policies within five to ten minutes. No issues with that.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Cloud Native Security is user-friendly. Everything in the Cloud Native Security tool is straightforward, including detections, integration, reporting, etc. They are constantly improving their UI by adding plugins and other features."

"We really appreciate the Slack integration. When we have an incident, we get an instant notification. We also use Joe Sandbox, which Singularity can integrate with, so we can verify if a threat is legitimate."

"It gives me the information I need."

"SentinelOne Singularity Cloud Security has improved our security posture."

"SentinelOne Singularity Cloud Security drastically reduces the mean time to remediate for cloud incidents by shrinking investigation and response time from hours to seconds or minutes."

"We noted immediate benefits from using the solution."

"The most valuable feature is the ability to gain deep visibility into the workloads inside containers."

"Cloud Native Security's most valuable features include cloud misconfiguration detection and remediation, compliance monitoring, a robust authentication security engine, and cloud threat detection and response capabilities."

More SentinelOne Singularity Cloud Security pros

"For the most part, out-of-the-box, it tells you right away about the things you need to work on. I like the fact that it prioritizes alerts based on severity, so that you can focus your efforts on anything that would be critical/high first, moderate second, and work your way down, trying to continue to improve your security posture."

"The compliance reports are definitely most valuable because they save time and are accurate. So, instead of relying on a human going through and checking or providing me with a report, I could just log into Lacework and see for myself."

"The most valuable feature, from a compliance perspective, is the ability to use Lacework as a platform for multiple compliance standards. We have to meet multiple standards like PCI, SOC 2, CIS, and whatever else is out there. The ability to have reports generated, per security standard, is one of the best features for me."

"Polygraph compliance is a valuable feature. In our perspective, it delivers significant benefits. The clarity it offers, along with the ability to identify and address misconfigurations, is invaluable. When such issues arise, we promptly acknowledge and take action, effectively collaborating with our teams and the responsible parties for those assets. This enables us to promptly manage problems as soon as they arise."

"The best feature, in my opinion, is the ease of use, as well as some levels of machine learning anomaly detection that they have that can detect pivotal anomalies faster."

"I find the cloud configuration compliance scanning mature. It generates a lot of data and supports major frameworks like ISO 27001 or SOC 2, providing reports and datasets. Another feature I appreciate is setting custom alerts for specific events. Additionally, I value the agent-based monitoring and scanning for compute nodes. It gives us deeper insights into our workloads and helps identify vulnerabilities across our deployed assets."

"The best feature, in my opinion, is the ease of use."

"There are many valuable features that I use in my daily work. The first are alerts and the event dossier that it generates, based on the severity. That is very insightful and helps me to have a security cap in our infrastructure. The second thing I like is the agent-based vulnerability management, which is the most accurate information."

More FortiCNAPP pros

"The discovery feature is the most valuable. After you integrate your cloud environment, maybe an Azure or AWS, or a private environment hosted on VMware, it automatically starts discovering the number of servers that are running on that cloud and the number of services that you have done. It is a beautiful feature because, from a security standpoint, it is difficult to identify which VM is compliant or not when you keep on provisioning a number of VMs in the cloud. It also checks for compliance. It checks whether a system is compliant and whether antivirus is installed on a VM. If an antivirus is installed, it checks whether the antivirus is updated to the latest signature package or not. All these things are beautifully done by McAfee Cloud Workload Security. For communicating with the McAfee server, you need to install an agent on the VM. McAfee Cloud Workload Security gives you a direct opportunity to install an agent on a Windows machine. If you have a Windows cloud, you can directly push that agent onto the VM through your McAfee portal. It provides you a single dashboard view of all servers present in the cloud. It shows the servers on which the antivirus is already installed as well as the servers for which the antivirus installation is still pending. This dashboard view is a much-needed thing. It also has a centralized management, which makes it easy to use."

"All these things are beautifully done by McAfee Cloud Workload Security."

"The most valuable feature is the application control."

Cons

"With Cloud Native Security, we can't selectively enable or disable alerts based on our specific use case."

"We recently adopted a new ticket management solution, so we've asked them to include a connector to integrate that tool with Cloud Native Security directly. We'd also like to see Cloud Native Security add a scan for personally identifying information. We're looking at other tools for this capability, but having that functionality built into Cloud Native Security would be nice. Monitoring PII data is critical to us as an organization."

"Crafting customized policies can be tricky."

"There is one concern related to SentinelOne Singularity Cloud Security platform. They claim it as an AI-based integration that will provide runtime protection."

"One area that could be improved in SentinelOne Singularity Cloud Security is their policies; the way they have configured the policies could be enhanced."

"In some cases, the rules are strictly enforced but do not align with real-world use cases."

"In addition to our telecom and Slack channels, it would be helpful to receive Cloud Native Security security notifications in Microsoft Teams."

"For SentinelOne, improvements could be made in managing Internet dependency as cloud-based operations can pose challenges in environments with limited connectivity."

More SentinelOne Singularity Cloud Security cons

"The configuration and setup of alerts should be easier. They should make it easier to integrate with systems like Slack and Datadog. I didn't spend too much time on it, but to me, it wasn't as simple as the alerting that I've seen on other systems."

"Visibility is lacking, and both compliance-related metrics and IAM security control could be improved."

"There are a couple of the difficulties we encounter in the realm of cybersecurity, or security as a whole, that relate to potentially limited clarity. Having the capacity to perceive the configuration aspect and having the ability to contribute to it holds substantial advantages, in my view. It ranks high, primarily due to its role in guaranteeing compliance and the potential to uncover vulnerabilities, which could infiltrate the system and introduce potential risks. I had been exploring a specific feature that captured my interest. However, just yesterday, I participated in a product update session that announced the imminent arrival of this feature. The feature involves real-time alerting. This was something I had been anticipating, and it seems that this capability is now being integrated, possibly as part of threat intelligence. While anomaly events consistently and promptly appear in the console, certain alerts tend to experience delays before being displayed. Yet, with the recent product update, this issue is expected to be resolved. Currently, a comprehensive view of all policies is available within the console. However, I want a more tailored display of my compliance posture, focusing specifically on policies relevant to me. For instance, if I'm not subject to HIPAA regulations, I'd prefer not to see the HIPAA compliance details. It's worth noting that even with this request, there exists a filtering mechanism to control the type of compliance information visible. This flexibility provides a workaround to my preference, which is why it's challenging for me to definitively state my exact request."

"A feature that I have requested from them is the ability to sort alerts and policies based on a security framework. Right now, when you go into alerts, you have hundreds and hundreds of them that you have to manually pick. It would be useful to have categories for CIS Benchmark or SOC 2 and be able to display all the alerts and policies for one security framework."

"In general, I would not recommend Lacework right now. There are more mature solutions that would be a better fit."

"I would like to see a remote access assistance feature. And the threat-hunting platform could be better."

"The biggest thing I would like to see improved is for them to pursue and obtain a FedRAMP moderate authorization... I don't believe they have any immediate plans to get FedRAMP moderate authorized, which is a bit of a challenge for us because we can only use Lacework in our commercial environment."

"Lacework lacks remediation features, but I believe they're working on that. They're focused on the reporting aspect, but other features need to improve. They're also adding some compliance features, so it's not worth saying they need to get better at it."

More FortiCNAPP cons

"There is room for improvement in the pricing model."

"Its vulnerability assessment is not the best. We cannot identify the vulnerabilities that are related to the operating system by using McAfee Cloud Workload Security."

"Its vulnerability assessment is not the best. We cannot identify the vulnerabilities that are related to the operating system by using McAfee Cloud Workload Security. I wish McAfee would add a vulnerability assessment tool that will not only identify the vulnerability but will also be able to generate a report so that the required patching can be done for the servers. Currently, McAfee Cloud Workload Security only integrates with AWS and Azure. If it can also integrate with GCP, Alibaba, and other cloud services available in the market, it would be good because not all people are using Azure and AWS."

Pricing and Cost Advice

"We found it to be fine for us. Its price was competitive. It was something we were happy with. We are not a Fortune 500 company, so I do not know how pricing scales at the top end, but for our cloud environment, it works very well."

"PingSafe is less expensive than other options."

"I am personally not taking care of the pricing part, but when we moved from CrowdStrike to PingSafe, there were some savings. The price of CrowdStrike was quite high. Compared to that, the price of PingSafe was low. PingSafe is charging based on the subscription model. If I want to add an AWS subscription, I need to pay more. It should not be based on subscription. It should be based on the number of servers that I am scanning."

"It was reasonable pricing for me."

"While I'm slightly out of touch with pricing, I know SentinelOne is much cheaper than other products."

"Pricing is based on modules, which was ideal for us."

"Its pricing was a little less than other providers."

"The pricing is fair. It is not inexpensive, and it is also not expensive. When managing a large organization, it is going to be costly, but it meets the business needs. In terms of what is out there on the market, it is fair and comparable to what I have seen, so I do not have any complaints about the cost"

More SentinelOne Singularity Cloud Security pricing and cost advice

"It is slightly expensive. It depends on how big your environment is, but it is expensive. Right now, we are spending a lot of money. We have covered all of the cloud providers and most of our colocation facilities as well, so we cannot complain, but it is slightly expensive. It is not super expensive."

"My smaller deployments cost around 200,000 a year, which is probably not as expensive as Wiz."

"The pricing has gotten better. That scenario was somewhat unstable. They have a rather interesting licensing structure. I believe you get 200 resources per "Lacework unit." It was difficult, in the beginning, to figure out exactly what a "resource" was... That was a problem until about a year or so ago. They have improved it and it has stabilized quite a bit."

"The licensing fee was approximately $80,000 USD, per year."

"It is not an expensive product. I am in the Indian market, and it is one of the most reliable and cost-effective solutions."

See which vendors are best for you

Use our free recommendation engine to learn which Cloud Workload Protection Platforms (CWPP) solutions are best for your needs.

See recommendations

893,221 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

14%

Computer Software Company

11%

Manufacturing Company

Government

Financial Services Firm

11%

Computer Software Company

Manufacturing Company

Construction Company

Comms Service Provider

16%

Government

13%

Construction Company

10%

Financial Services Firm

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	52
Midsize Enterprise	23
Large Enterprise	58

By reviewers
Company Size	Count
Small Business	6
Midsize Enterprise	4
Large Enterprise	4

No data available

Questions from the Community

What do you like most about PingSafe?

The dashboard gives me an overview of all the things happening in the product, making it one of the tool's best featu...

See all answers

What is your experience regarding pricing and costs for PingSafe?

My experience with the pricing, setup costs, and licensing of SentinelOne Singularity Cloud Security is that the pric...

See all answers

What needs improvement with PingSafe?

Integration could be improved because not all solutions can be integrated with SentinelOne Singularity Cloud Security...

See all answers

What is your experience regarding pricing and costs for Lacework?

The pricing is a mediator compared to other products; it is not that much higher and not much lower than other produc...

See all answers

What needs improvement with Lacework?

Policy implementation is quite complex, and the stability will take more time for the solutions. There is definitely ...

See all answers

What is your primary use case for Lacework?

FortiCNAPP is mainly used from a security point of view. Some VPNs charge for their solutions, but Fortinet provides ...

See all answers

Ask a question

Earn 20 points

Comparisons

Wiz vs SentinelOne Singularity Cloud Security

Compared 8% of the time

Prisma Cloud by Palo Alto Networks vs SentinelOne Singularity Cloud Security

Compared 7% of the time

Microsoft Defender for Cloud vs SentinelOne Singularity Cloud Security

Compared 6% of the time

CrowdStrike Falcon Cloud Security vs SentinelOne Singularity Cloud Security

Compared 5% of the time

AWS GuardDuty vs SentinelOne Singularity Cloud Security

Compared 3% of the time

More SentinelOne Singularity Cloud Security Competitors

Wiz vs FortiCNAPP

Compared 5% of the time

Prisma Cloud by Palo Alto Networks vs FortiCNAPP

Compared 5% of the time

Native vs FortiCNAPP

Compared 3% of the time

Tenable Cloud Security vs FortiCNAPP

Compared 3% of the time

AWS GuardDuty vs FortiCNAPP

Compared 2% of the time

More FortiCNAPP Competitors

TrendAI Vision One – Cloud Security vs Trellix Cloud Workload Security

Compared 30% of the time

Microsoft Defender for Cloud vs Trellix Cloud Workload Security

Compared 26% of the time

AWS GuardDuty vs Trellix Cloud Workload Security

Compared 13% of the time

Aqua Cloud Security Platform vs Trellix Cloud Workload Security

Compared 9% of the time

Check Point CloudGuard CNAPP vs Trellix Cloud Workload Security

Compared 9% of the time

More Trellix Cloud Workload Security Competitors

Product Reports

Buyer's Guide

SentinelOne Singularity Cloud Security

April 2026

SentinelOne Singularity Cloud Security report

Download SentinelOne Singularity Cloud Security product report

Buyer's Guide

FortiCNAPP

May 2026

Download FortiCNAPP product report

Buyer's Guide

Cloud Workload Protection Platforms (CWPP)

May 2026

Download Trellix Cloud Workload Security product report

Also Known As

PingSafe

Polygraph, FortiCNP, Lacework

McAfee Cloud Workload Security

Overview

SentinelOne Singularity Cloud Security offers a streamlined approach to cloud security with intuitive operation and strong integration capabilities for heightened threat detection and remediation efficiency.

Singularity Cloud Security stands out for its real-time detection and response, effectively minimizing detection and remediation timelines. Its automated remediation integrates smoothly with third-party tools enhancing operational efficiency. The comprehensive console ensures visibility and support for forensic investigations. Seamless platform integration and robust support for innovation are notable advantages. Areas for development include improved search functionality, affordability, better firewall capabilities for remote users, stable agents, comprehensive reporting, and efficient third-party integrations. Clarity in the interface, responsive support, and real-time alerting need enhancement, with a call for more automation and customization. Better scalability and cost-effective integration without compromising capabilities are desired.

What are SentinelOne Singularity Cloud Security's standout features?

Ease of Use: Intuitive operation simplifies navigation across platforms.
Real-Time Detection: Quick identification and response to threats.
Automated Remediation: Streamlines recovery processes with integration capabilities.
Forensic Visibility: Aids in thorough threat analysis and prevention strategies.
Comprehensive Console: Offers full visibility and historical data tracking.
Platform Integration: Supports seamless operation across cloud and hybrid environments.

What benefits should users expect from SentinelOne Singularity Cloud Security?

Enhanced Efficiency: Automation and third-party integration improve threat response.
Improved Detection: Reduces mean time to detect and respond to threats.
Operational Support: Comprehensive visibility and forensic tools aid operational decisions.
Cost Efficiency: Affordable integration with scaling capabilities without high overhead.

SentinelOne Singularity Cloud Security is deployed in industries needing robust cloud security posture management, endpoint protection, and threat hunting. Utilized frequently across AWS and Azure, it assists in monitoring, threat detection, and maintaining compliance in diverse environments while providing real-time alerts and recommendations for proactive threat management.

SentinelOne

FortiCNAPP is a comprehensive cloud security platform focusing on ease of use and machine learning-driven anomaly detection. It offers robust compliance reporting, seamless integration, and continuous monitoring, making it an essential tool for organizations managing multi-cloud environments and security configurations.

FortiCNAPP provides significant capabilities in cloud security, compliance, and vulnerability management. Designed for organizations needing efficient monitoring, it enables detection of anomalies across cloud infrastructures while optimizing security posture and ensuring compliance with environments like AWS and GCP. The platform offers in-depth insights through scanning of IAC scripts, host systems, and cloud configurations. Recognized for effectively managing security posture, it safeguards Kubernetes and container environments, providing comprehensive threat detection and response. However, some areas like visibility, IAM security controls, and compliance metrics need improvement. Users face challenges with alert setup and lack intuitive design, alongside issues like FedRAMP authorization absence and complexity in the data model.

What are the key features of FortiCNAPP?

Ease of Use: FortiCNAPP simplifies security management for cloud environments.
Machine Learning Anomaly Detection: Automatically identifies and prioritizes threats.
Compliance Reporting: Streamlines compliance procedures and reporting.
Seamless Integration: Ensures smooth operation across multi-cloud environments.
Continuous Monitoring: Provides ongoing oversight of security vulnerabilities.
Multi-Cloud Integration: Enables swift response to misconfigurations and vulnerabilities.

What benefits should users expect when evaluating FortiCNAPP?

Time Efficiency: Reduces time spent on compliance and threat management.
Improved Security Posture: Enhances protection for cloud and container environments.
Valuable Security Insights: Provides in-depth analysis for proactive threat response.
Noise Reduction: Distills security logs to minimize alert fatigue.
Operational Effectiveness: Facilitates seamless multi-cloud security management.

FortiCNAPP is implemented extensively by industries needing reliable cloud security, such as finance, healthcare, and technology sectors. It supports organizations in enhancing cloud infrastructure protection, ensuring compliance, and strengthening vulnerability management. By integrating with platforms like AWS and GCP, businesses can optimize security posture in their cloud deployments.

Fortinet

Trellix Cloud Workload Security offers an advanced scalable and adaptable platform designed to secure cloud environments. It addresses cybersecurity challenges while providing seamless integration and robust protection for cloud-based applications and infrastructure.

Designed for organizations requiring efficient cloud security, Trellix Cloud Workload Security integrates advanced threat detection and protection mechanisms to ensure continuous monitoring and instant threat responses. It leverages cutting-edge technology to safeguard data integrity and maintain operational efficiency, offering a seamless experience that aligns with contemporary cloud security requirements.

What are the key features?

Continuous Threat Monitoring: Delivers real-time alerts and enhances threat detection capabilities.
Scalable Architecture: Easily adapts to changes, meeting diverse business demands.
Compliance Assurance: Aligns with industry standards to mitigate compliance risks.
Seamless Integration: Smoothly aligns with cloud services to enhance security measures.

What benefits and ROI should users consider?

Enhanced Security: Ensures peace of mind with comprehensive threat protection.
Operational Efficiency: Optimizes resources, reducing overhead costs.
Improved Compliance: Reduces the risk of regulatory penalties.
Scalability: Allows businesses to grow securely without compromising performance.

In industries like financial services and healthcare, Trellix Cloud Workload Security is implemented to protect sensitive data and manage compliance requirements effectively. Its flexible architecture and robust security features allow it to adapt to these industries' demanding environments, offering reliable protection and integration while supporting specific industry regulations.

Trellix

Sample Customers

Information Not Available

J.Crew, AdRoll, Snowflake, VMWare, Iterable, Pure Storage, TrueCar, NerdWallet, and more.

Information Not Available

Buyer's Guide

FortiCNAPP vs. Trellix Cloud Workload Security

April 2026

Free Report: FortiCNAPP vs. Trellix Cloud Workload Security

Find out what your peers are saying about FortiCNAPP vs. Trellix Cloud Workload Security and other solutions. Updated: April 2026.

DOWNLOAD NOW

893,221 professionals have used our research since 2012.

See our FortiCNAPP vs. Trellix Cloud Workload Security report.

See our list of best Cloud Workload Protection Platforms (CWPP) vendors.

We monitor all Cloud Workload Protection Platforms (CWPP) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.