My experiecne with Lacework, now called FortiCNAPP, has been positive. The integration with aws is pretty straightforward, and it provides a lot of useful information, though some overlaps with cloudtrail,guardduty, security hub, config. The main advantage is having evertthin centralized, plus the agen compatibility for deeper security issue

Here are some points why not five stars. Lacework has several features on paper, but some do not reflect real processes at the customer, such as Code Security. No SCIM, which one would actually expect from a security tool. Requested features are developed slowly. No coverage in China. Documentation is incomplete. No SOAR, which must be purchased separately after acquisition. No DSPM.