Lacework Acquisition Signals Valuation Reset

This deal shows how brutally fast cloud security valuations reset when growth slows before a company becomes a durable platform. Lacework reached an $8.3B valuation in November 2021 on the promise of becoming a full cloud security suite, but by the time Fortinet bought it in 2024, the price implied a business valued closer to 2 to 3 times ARR than a hypergrowth software multiple. That is the shift from venture narrative to strategic asset pricing.

• The timing matters. Fortinet announced the deal on June 10, 2024, then closed it on August 1, 2024. That means the market first saw Lacework as a standalone breakout cloud security company, then as a tuck in acquisition for an incumbent that wanted CNAPP technology and engineers more than an independent IPO story.
  1 fortinet 2 fortinet
• The numbers show how far expectations moved. Lacework disclosed a $1.3B raise at an $8.3B valuation in November 2021. Internal ARR estimates reached about $95M by 2023, while outside estimates put ARR around $70M to $90M near the sale. Even using the high end, the acquisition price was only a small fraction of the last private mark.
  3 lacework 4 forrester 5 sacra
• Strategically, Fortinet was buying a missing product block. Lacework specialized in CNAPP, software that scans cloud accounts, workloads, containers, identities, and misconfigurations in one console. Fortinet folded that into its broader Security Fabric, turning Lacework from a venture backed platform bet into a cloud module inside a larger security stack.
  1 fortinet 2 fortinet 6 fortinet

Going forward, this sale is a marker for the cloud security market. Standalone vendors now need either exceptional growth, like Wiz, or clear fit inside a larger security platform. For incumbents like Fortinet, the play is to use acquisitions like Lacework to close product gaps fast and sell cloud security through an existing enterprise channel.