https://cybertoolchain.io/tools/lacework-forticnapp New releases and features in Lacework FortiCNAPP, tracked by The Cyber Toolchain. en Wed, 04 Nov 2026 07:51:04 GMT https://docs.fortinet.com/document/lacework-forticnapp/latest/release-notes https://docs.fortinet.com/document/lacework-forticnapp/latest/release-notes Wed, 04 Nov 2026 07:51:04 GMT Lacework FortiCNAPP adds Azure identity risk coverage for resource exposure, privilege passing, and credential exposure⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Lacework FortiCNAPP now detects Azure identity risks across three new categories: resource exposure, privilege passing, and credential exposure.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/lacework-forticnapp https://docs.fortinet.com/document/lacework-forticnapp/latest/release-notes https://docs.fortinet.com/document/lacework-forticnapp/latest/release-notes Tue, 03 Nov 2026 07:50:08 GMT Lacework FortiCNAPP adds composite alert severity customization and Risk Insights in Public Preview⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Customize composite alerts by setting the severity level of each composite alert type individually, or turn off specific types entirely.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Risk Insights is now available in Public Preview. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/lacework-forticnapp https://docs.fortinet.com/document/lacework-forticnapp/latest/release-notes https://docs.fortinet.com/document/lacework-forticnapp/latest/release-notes Sun, 01 Nov 2026 07:47:56 GMT Lacework FortiCNAPP adds vulnerability assessment for Microsoft Azure Linux (CBL-Mariner) and intrusion graph connection reasoning in composite alerts⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Linux Agent 8.5.0 is now available (released October 22, 2026). Full history on Cyber Toolchain: https://cybertoolchain.io/tools/lacework-forticnapp https://docs.fortinet.com/document/lacework-forticnapp/latest/release-notes https://docs.fortinet.com/document/lacework-forticnapp/latest/release-notes Sat, 31 Oct 2026 07:43:33 GMT Lacework FortiCNAPP adds connection-reason visibility in intrusion graphs and an improved compliance evaluation engine⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Lacework FortiCNAPP's intrusion graph now shows why entities in a composite alert are connected, giving analysts direct context for relationships between flagged resources.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/lacework-forticnapp https://docs.fortinet.com/document/lacework-forticnapp/latest/release-notes https://docs.fortinet.com/document/lacework-forticnapp/latest/release-notes Wed, 30 Sep 2026 07:34:33 GMT FortiCNAPP September 2026 snapshot adds graph-based anomaly alerts, click-to-filter alerts, and cloud account rollback history.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds Polygraph v2 graph-based anomaly alerts for visualizing and detecting anomalous behavior patterns.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Enables click-to-filter alerts by category and sub-category for faster alert triage. • Adds cloud account rollback and deployment history tracking. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/lacework-forticnapp https://docs.fortinet.com/document/lacework-forticnapp/latest/release-notes https://docs.fortinet.com/document/lacework-forticnapp/latest/release-notes Sat, 26 Sep 2026 07:34:20 GMT FortiCNAPP adds risk score adjustment for inline firewall protection, vulnerability assessment for COS and Ubuntu, and Polygraph v2 graph-based anomaly alerts.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds risk score adjustment for inline FortiGate or other next-generation firewall protection.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds vulnerability assessment for Google Container-Optimized OS. • Adds vulnerability assessment for Ubuntu 25.04 through 26.10. • Adds click-to-filter alerts by category and sub-category. • Adds cloud account rollback and deployment history. • Adds resource group support for alerts. • Adds new AWS service coverage. • Adds on-demand container image scanning. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/lacework-forticnapp https://docs.fortinet.com/document/lacework-forticnapp/latest/release-notes#Platform https://docs.fortinet.com/document/lacework-forticnapp/latest/release-notes#Platform Mon, 13 Jul 2026 10:06:52 GMT FortiCNAPP adds AI-generated incident reports, FortiGuard IoC feeds, LLM skills scanning, EKS/GKE low-latency audit log alerts, and SAST for Windows across recent releases. • New Alert Dashboard: View and filter alerts by severity, category, or sub-category with an interactive time chart. • Integrates FortiGuard IoC feed as a threat intelligence source for detections. • New Vulnerability Scanner 0.29.0 released with updated scanning capabilities. • Explorer adds natural language search and a redesigned Saved Queries panel. • Cloud activity log pages unified into a single view; AWS CloudTrail and GCP/Azure cloud log pages redesigned. • AI-generated Incident Report and Remediation tabs added to alert details for composite alerts. • Low-latency EKS and GKE audit log violation policy evaluation and alerting now available. • Code Security gains advanced configuration settings, lock file generation, and LLM Skills Scanner (Public Preview). • SAST scanning support extended to Windows environments, including VS Code extension updates. • AiAssistants API adds alert context support for programmatic AI-assisted triage. • Vulnerability management now supports AlmaLinux and ChainGuard Wolfi images. • New detection: Anomalous cloud API discovery spikes for compromised AWS Keys. • CloudFormation integrations now available directly in the FortiCNAPP console. • New Azure service coverage added across multiple releases. • New AWS service coverage added, including AWS Terraform, CloudFormation, and Control Tower configuration module upgrades. • Threat Observations Policies page introduced for managing observation-based policies. • Observation process attribution added to link runtime observations to specific processes. • AI Security: Bedrock LQL policies added for detecting risks in AWS Bedrock environments. • Agent support expanded for Kubernetes on cloud platforms. • Policy exceptions can now be configured for all codespaces. • Code Security Claude Code Plugin added (Public Preview) for IDE-native security feedback. • Unified CI/CD integration for GitHub covering both IaC and SCA scanning. • Enhanced scanning configuration for PR and Git Status behaviors in Code Security. • AI-vendor secret detection added (Public Preview) to identify exposed AI provider credentials. • RiskWatch adds Runtime Vulnerability Detection and Prioritization. • Cursor IDE extension introduced for in-editor code security scanning. • Improved FortiGate integration surfaced in Explorer and Attack Path views. • Consolidated Subscription page simplifies entitlement management. • Alerts page gains inline details panel for faster triage without leaving the list view. • Detection intelligence enriched with Observation details on alert pages. • Policy aggregate status update provides rolled-up compliance posture at the policy level. • Enhanced timestamp precision added for CloudTrail logs. • Lacework ServiceNow integrations updated in the ServiceNow Store. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/lacework-forticnapp https://docs.fortinet.com/document/lacework-forticnapp/latest/release-notes#Platform https://docs.fortinet.com/document/lacework-forticnapp/latest/release-notes#Platform Mon, 13 Jul 2026 10:06:52 GMT FortiCNAPP adds AI-generated incident reports, FortiGuard IoC feeds, LLM Skills Scanner, EKS/GKE low-latency audit alerting, and SAST for Windows across recent releases. • New Alert Dashboard lets practitioners view and filter alerts by severity, category, or sub-category. • Integrates FortiGuard IoC feed to enrich threat detection with Fortinet threat intelligence. • New Vulnerability Scanner 0.29.0 released with updated scanning capabilities. • Explorer adds natural language search and a redesigned Saved Queries panel for faster investigation. • Unified view for cloud activity log pages consolidates CloudTrail and other cloud log data. • AI-generated Incident Report and Remediation tabs added to composite alert details. • Low-latency EKS audit log violation policy evaluation and alerting now available. • Low-latency GKE audit log violation policy evaluation and alerting now available. • New Code Security LLM Skills Scanner (Public Preview) detects risks in AI/LLM skill definitions. • Code Security Claude Code Plugin (Public Preview) brings FortiCNAPP scanning into Claude Code workflows. • Vulnerability management now supports AlmaLinux and ChainGuard Wolfi images. • AI Security: Bedrock LQL policies enable detection of anomalous AWS Bedrock activity. • Threat Observations Policies page provides centralized management of observation-based policies. • Agent support extended to Kubernetes on cloud platforms. • SAST scanning support added for Windows environments. • Alerts page gains inline details panel for faster triage without leaving the list view. • AiAssistants API now supports alert context, enabling AI-assisted alert analysis via API. • Policy exceptions can now be configured for all codespaces. • VS Code extension updated with Windows SAST support and UI improvements. • Supports viewing non-default branch assessments in Code Security. • New detection: Anomalous cloud API discovery spikes for compromised AWS Keys. • CloudFormation integrations now available directly in the FortiCNAPP console. • New Azure service coverage added across multiple releases. • New AWS service coverage added. • Interactive time chart added to the alert dashboard for timeline-based alert analysis. • Enhanced timestamp precision for CloudTrail logs improves forensic accuracy. • Detection intelligence expanded with Observation Details in alert context. • AI-vendor secret detection (Public Preview) identifies exposed API keys for AI services. • RiskWatch adds Runtime Vulnerability Detection and Prioritization. • Improved FortiGate integration in Explorer and Attack Path analysis. • Alerts dashboard updates with new visualization and filtering capabilities. • Consolidated Subscription page simplifies license and subscription management. • Advanced configuration settings for Code Security and CI/CD integrations. • Code security lock file generation added to secure dependency resolution. • Unified CI/CD integration documentation for GitHub IaC and SCA. • Observation process attribution links observed activity to specific processes. • Enhanced scanning configuration for PR and Git Status behaviors in Code Security. • Advanced configuration management for Code Security available in UI. • Redesigned GCP and Azure cloud log pages improve navigation and readability. • Redesigned AWS CloudTrail log page with improved layout. • Policy aggregate status update provides roll-up compliance visibility. • Lacework ServiceNow integrations updated in the ServiceNow Store. • Cursor IDE extension added for in-editor code security scanning. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/lacework-forticnapp