Lacework / lacework.com
AI-powered cloud security platform providing behavioural anomaly detection, vulnerability management, and compliance monitoring across cloud infrastructure and container environments.
Pricing
Free
Free plan
No
Category
Developer Tools
Platforms
2
Free plan
No
API access
No
Open source
No
Platforms
2
Lacework is a cloud security platform that uses ML to establish behavioural baselines for cloud infrastructure and detect anomalous behaviour that may indicate threats or misconfigurations. Unlike signature-based security tools, Lacework's Polygraph Data Platform uses ML to understand normal behaviour patterns and flag deviations that could indicate attack or compromise.
Polygraph Data Platform is Lacework's core ML engine — continuously learning the normal behaviour of cloud accounts, workloads, containers, and user actions. When behaviour deviates from established patterns (a workload communicating with unusual external hosts, abnormal data access volumes, unexpected process execution), Polygraph flags the anomaly for investigation.
Cloud workload protection monitors container and Kubernetes workloads alongside VMs — detecting threats in the modern containerised cloud infrastructure where traditional workload protection tools have limited visibility.
Compliance monitoring tracks cloud infrastructure configuration against multiple frameworks (CIS, SOC 2, HIPAA, PCI, GDPR) providing continuous compliance posture visibility — identifying configuration drift from compliance requirements before audits.
Vulnerability management scans container images and host systems for known CVEs, prioritising by both severity and exploitability in the specific cloud environment — rather than addressing all CVEs equally, focus effort on exploitable vulnerabilities in the actual infrastructure.
Lacework AI runs as ml platform software built around data workflows. Users typically start with a prompt, upload, or connected data source, and the underlying model handles the heavy lifting before returning a result you can refine or export. It's available on web and api.
The capabilities that matter most for teams evaluating Lacework AI.
ML engine learning normal cloud infrastructure behaviour and detecting anomalous deviations — finding threats that signature-based tools miss by understanding what normal looks like first.
Runtime security monitoring for containerised workloads detecting threats in modern cloud infrastructure beyond traditional VM-focused security tools.
Continuous tracking of cloud configuration against SOC 2, HIPAA, PCI, and CIS frameworks — providing compliance posture visibility between audits and detecting configuration drift.
Enterprise licensing. No public pricing. Annual contracts. Demo available.
Model
Enterprise
Starting price
Free
Free trial
Yes
Wiz (covered) is the most widely deployed cloud security platform. Orca Security (rank 610) provides agentless cloud security with AI prioritisation. Prisma Cloud (covered) provides full lifecycle cloud security within Palo Alto ecosystems.
A side-by-side look at the closest alternative in this category.
Key facts about model providers, platforms, and team support.
Model Provider
Lacework
Platforms
Web, API
Deployment
SaaS
Integrations
AWS, Azure, GCP, Kubernetes, Jira, Slack, Splunk, API
Team Collaboration
No
Launch Year
2022
Compliance signals and data-handling notes as reported by the vendor.
SOC 2 Type II. ISO 27001. GDPR compliant. FedRAMP eligible. Enterprise data handling agreements.
Cloud infrastructure telemetry processed on Lacework's platform. Review data handling for cloud workload and activity data shared with Lacework.
Verified reviews from signed-in users, stored in the backend and averaged into this tool's rating.
Editorial Verdict
Lacework is a strong AI cloud security platform for organisations wanting behavioural ML threat detection alongside vulnerability management and compliance for containerised cloud environments.
Last verified July 24, 2026.
Enterprise licensing. No public pricing. Annual contracts. Demo available.
Enterprise licensing. No public pricing. Annual contracts. Demo available.
SOC 2 Type II. ISO 27001. GDPR compliant. FedRAMP eligible. Enterprise data handling agreements.
SOC 2 Type II. ISO 27001. GDPR compliant. FedRAMP eligible. Enterprise data handling agreements.
Cloud infrastructure telemetry processed on Lacework's platform. Review data handling for cloud workload and activity data shared with Lacework.
Cloud infrastructure data accessed via cloud API snapshot scanning. No agent required. Review data handling for sensitive cloud data accessed during security scanning.
Sign in to rate Lacework AI and leave a review.
No other reviews yet — be the first to share how this tool performs in practice.
