Fortinet has introduced significant upgrades to its FortiCNAPP platform, aimed at enhancing cloud risk management capabilities. These improvements are designed to give organisations a better grasp of cloud risks, surpassing the capabilities of many existing CNAPP solutions.
By integrating cloud configuration, identity exposure, vulnerabilities, network enforcement, data sensitivity, and runtime behaviour into one cohesive workflow, FortiCNAPP enables security teams to concentrate on the risks most pertinent to their operations.
Understanding real-world exposure
Many cloud security teams face challenges not due to a lack of data, but because of increasing complexity, limited resources, and skills shortages, which make managing cloud risks difficult.
Nirav Shah, Senior Vice President of Products and Solutions at Fortinet, noted, “Cloud security teams aren’t struggling because they lack data. They’re struggling because growing complexity, limited resources, and skills gaps make it harder to manage risk across cloud environments.” By integrating network, data, and runtime validation, FortiCNAPP helps focus efforts on the most significant real-world exposures and their business implications.
FortiCNAPP's approach to cloud security
Nearly 70% of organisations cite tool sprawl and visibility as cloud security challengesAs organisations extend their operations across hybrid and multi-cloud environments, security teams often deal with disjointed tools that hinder visibility and slow responses. Fortinet's 2026 Cloud Security Report indicates that nearly 70% of organisations highlight tool sprawl and visibility issues as major obstacles to effective cloud security.
FortiCNAPP addresses these challenges by reinforcing the protection where it's most crucial—across network, data, and runtime layers.
Incorporating network security in risk evaluation
FortiCNAPP stands out by embedding network-level protection into its risk evaluations, offering a comprehensive view of exposure that many CNAPP solutions lack.
It employs network-aware risk scoring that identifies FortiGate solutions along internet paths to cloud workloads, incorporating this protection context into risk assessments. This approach reduces false urgency, fostering a consistent understanding of risk exposure between security and network teams.
Enhancing data risk context with DSPM
FortiCNAPP enhances risk prioritisation by integrating data sensitivity and exposure indicators directly into its assessments, eliminating the need for data relocation or export. Its native Data Security Posture Management (DSPM) supports in-place data risk visibility, identifying sensitive data and access patterns, while fulfilling privacy and governance requirements.
Crucially, risks impacting sensitive data are prioritised, aiding teams in addressing high-impact issues effectively.
Unified risk management workflow
The platform consolidates security signals into one actionable workflow, simplifying cloud risk operationsThe platform unifies disparate security signals into a single, actionable workflow, thus simplifying cloud risk operations. This unified risk management brings together insights from cloud posture, infrastructure entitlement, vulnerabilities, DSPM, and network security into one view, enabling runtime-informed prioritisation and faster issue resolution.
Contextual cloud security operations
In increasingly complex cloud environments, effective risk management demands more than correcting misconfigurations or vulnerabilities. It's essential to assess whether protections are present, the data involved, and the real-world impact.
With these FortiCNAPP enhancements, organisations can significantly reduce noise, enhance decision-making, and align their security efforts better with the actual exposure and resources available.
Real-world cloud risk prioritisation
By employing FortiCNAPP, organisations simplify their cloud security operations and gain more precise visibility into risks across intricate environments, unifying network, data, and runtime contexts on a single platform.
Huy Ly, Head of Global IT Security & Infrastructure at Monolithic Power Systems, shared, “FortiCNAPP gives us clear visibility into our cloud environment, from identity permissions and workload configurations to operating systems and vulnerabilities, so we understand exactly where risk exists and how to address it.” By acting as a continuous auditor, FortiCNAPP, in conjunction with the Fortinet Security Fabric, helps organisations proactively safeguard their cloud operations, significantly reducing associated risks.
Fortinet, the global cybersecurity leader driving the convergence of networking and security, announced new enhancements to FortiCNAPP that help organisations better understand and prioritise cloud risk beyond what is possible with many CNAPP solutions today.
By correlating cloud configuration, identity exposure, vulnerabilities, network enforcement, data sensitivity, and runtime behavior in a single workflow, FortiCNAPP enables security teams to focus on the risks that matter most.
Real-world exposure
“Cloud security teams aren’t struggling because they lack data. They’re struggling because growing complexity, limited resources, and skills gaps make it harder to manage risk across cloud environments,” said Nirav Shah, Senior Vice President, Products and Solutions at Fortinet.
“By unifying network enforcement, data sensitivity, and runtime validation within FortiCNAPP, we’re enabling customers move from alert overload to clear, prioritised action based real-world exposure and business impact.”
FortiCNAPP
As organisations expand across hybrid and multi-cloud environments, security teams are often forced to piece together risk signals from disconnected tools, resulting in fragmented visibility and slower response. According to the Fortinet 2026 Cloud Security Report, nearly 70% of organisations cite tool sprawl and visibility gaps as the top barriers to effective cloud security.
FortiCNAPP addresses this challenge by adding protection where it matters most for cloud security teams—across the network, data, and runtime layers of cloud environments.
Factoring Network Security Posture into Cloud Workload Risk
FortiCNAPP incorporates network-level protection context directly into risk evaluation, providing a more accurate picture of real exposure that many CNAPP solutions lack.
- Network-aware risk scoring: FortiCNAPP detects FortiGate solutions deployed along the internet-accessible path to cloud workloads and incorporates that protection directly into workload risk assessments, ensuring exposure is evaluated in the context of existing network enforcement.
- Reduced false urgency: Persistent protection context provides a more realistic view of risk and enables security and network teams to operate from a shared, consistent understanding of exposure.
Native Data Security Posture Management (DSPM) Adds Data Risk Context
FortiCNAPP enhances risk prioritisation by directly incorporating data sensitivity and exposure, without requiring customers to move or export their data.
- In-place data risk visibility: Built-in DSPM identifies sensitive data, access patterns, and potential malware, while supporting privacy and data governance requirements.
- Business impact-driven prioritisation: Risks affecting sensitive data are automatically elevated, helping teams focus remediation efforts on issues with the greatest potential impact.
Bringing Risk Signals together into a Unified Workflow
FortiCNAPP simplifies cloud risk operations by consolidating often siloed security signals into a single, actionable workflow.
- Unified risk management: Insights from cloud posture, infrastructure entitlement, vulnerabilities, DSPM, and network security posture into a single view.
- Runtime-informed prioritisation: Validation of vulnerable code paths helps teams distinguish theoretical findings from active, exploitable risk.
- Faster remediation: Correlated context around configuration issues, identity exposure, vulnerabilities, network reachability, data sensitivity, and runtime behavior enables faster response with fewer tools.
Enabling context-driven cloud security operations
As cloud environments grow more complex, effective risk management requires understanding not just what is misconfigured or vulnerable, but whether protections are in place, what data is involved and the likelihood of real-world impact.
With these enhancements, FortiCNAPP helps organisations reduce noise, improve decision-making, and align security efforts with actual exposure and available resources.
How organisations are prioritising real-world cloud risk
Organisations are using FortiCNAPP to simplify cloud security operations and gain clearer visibility into risk across complex cloud environments by unifying network, data, and runtime context within a single platform.
“FortiCNAPP gives us clear visibility into our cloud environment, from identity permissions and workload configurations to operating systems and vulnerabilities, so we understand exactly where risk exists and how to address it,” said Huy Ly, Head of Global IT Security & Infrastructure at Monolithic Power Systems.
“It acts like a continuous auditor, helping us assess the health of our cloud infrastructure at a glance, even without deep, hands-on cloud expertise. Combined with the Fortinet Security Fabric, FortiCNAPP helps us proactively protect our environment and reduce risk across our cloud operations.”
