cybersecurityGraveyard archive2015–2024

Lacework

Lacework was the cloud-security boom's most spectacular round trip. Founded in 2015 in San Jose by Vikram Kapoor and Sanjay Kalra, it built a data-driven CNAPP whose signature 'Polygraph' used machine learning to baseline normal cloud behavior and flag anomalies across configuration, vulnerability and runtime. Riding the same wave that made Wiz a category king, Lacework raised staggering sums: a $525 million Series C in January 2021 — then the largest round in security history — followed just ten months later by a $1.3 billion Series D at an $8.3 billion valuation, a cybersecurity funding record. It hired aggressively and promised 'code to cloud' security to roughly a thousand customers. Then the market reset.

Years active

2015–2024

Peak valuation

$8.3B

Total raised

$1.8B

Peak headcount

1000

The Polygraph and a data-first pitch

Lacework was founded in 2015 by Vikram Kapoor and Sanjay Kalra, incubated inside Sutter Hill Ventures, with a thesis that cloud security should be driven by data rather than hand-written rules. Its core technology, the Polygraph Data Platform, ingested telemetry from cloud accounts, workloads and Kubernetes and used machine learning to build a behavioral baseline of how each environment normally operated; deviations from that baseline surfaced as potential threats. Around that it layered posture management, vulnerability scanning and runtime detection, marketing the whole as security 'from code to cloud.' The pitch — less rule-writing, more automatic anomaly detection — was compelling to a market drowning in cloud alerts, and it made Lacework one of the buzziest names in the CNAPP category.

Two record-breaking rounds in one year

The capital came in torrents. In January 2021 Lacework raised a $525 million Series C led by Sutter Hill Ventures and Altimeter Capital — at the time the largest funding round in security-industry history — with Coatue, D1, Dragoneer, Tiger Global and Snowflake Ventures piling in at a valuation above $1 billion. Ten months later, in November 2021, it shattered its own record: a $1.3 billion Series D at an $8.3 billion valuation, the largest round cybersecurity had ever seen, led again by Sutter Hill and Altimeter with D1, Tiger Global, Counterpoint Global, Durable, Franklin Templeton, General Catalyst and XN. Lacework had raised more than $1.8 billion total and was, on paper, one of the most valuable private security companies in the world.

The market turns, and execution cracks

Then the era of free money ended. The 2022 rate shock reset software multiples across the board, and richly valued, cash-burning growth companies were hit hardest. Lacework had scaled headcount and spending for a world of infinite capital that no longer existed. Worse, its execution wobbled just as the competition sharpened: a dual-CEO leadership structure and a rocky go-to-market drew criticism, sales productivity disappointed, and the company's rule-light, ML-heavy approach struggled to keep pace with agentless rivals — above all Wiz, whose graph-based platform was winning the category head-to-head. The $8.3 billion mark, set at the top of the cycle, quickly looked untethered from reality.

Layoffs and a collapsing valuation

The retrenchment came in waves. Lacework laid off a reported 20% of staff in May 2022 as it warned of a tougher funding climate, and cut again in subsequent rounds. It raised a down round in 2023 — a $230 million convertible-note financing led by existing backers at a valuation reported to have crashed to roughly $1.6–1.7 billion, an implosion from $8.3 billion — as it tried to buy time and reach profitability. Employees who had joined for equity watched their paper wealth evaporate. The company that had set two funding records inside a year had become the cautionary tale of the cloud-security bubble.

The Wiz talks that never closed

By spring 2024 Lacework was shopping itself. In April 2024, reports emerged that Wiz — the very rival that had beaten it in the market — was in talks to acquire Lacework for just $150 million to $200 million, a humbling figure against the $1.8 billion-plus its investors had poured in. The talks captured the whole arc of the CNAPP wave in a single line: the category's winner circling to pick up the category's most-funded loser for pennies on the dollar. But the Wiz deal did not happen; Wiz walked, and Lacework was left looking for another buyer with its valuation in freefall and its runway shrinking.

Fortinet's fire sale, and FortiCNAPP

The buyer that materialized was Fortinet. On June 10, 2024, Fortinet agreed to acquire Lacework for undisclosed terms — widely estimated by analysts at roughly $200–230 million — and the deal closed on August 1, 2024. Lacework's Polygraph platform was folded into the Fortinet Security Fabric and rebranded FortiCNAPP, giving Fortinet a cloud-security offering it had lacked. For Lacework's backers it was a near-total loss of a massive investment; for the industry it was the definitive bookend to the cloud-security boom-and-bust. Lacework had raised more money faster than almost any security startup in history and been valued at $8.3 billion — and still ended, three years later, absorbed into a networking-security incumbent for a small fraction of what it had taken in. It is in the graveyard not because the technology failed to work, but because the business could never grow into the price the market once put on it.

What worked, what broke

What worked

Built the Polygraph Data Platform, a data-driven CNAPP that used machine learning to baseline normal cloud behavior and detect anomalies without relying solely on hand-written rules.
Raised a $525 million Series C in January 2021 — the largest funding round in security-industry history at the time — led by Sutter Hill Ventures and Altimeter Capital.
Broke its own record ten months later with a $1.3 billion Series D at an $8.3 billion valuation, the largest cybersecurity funding round ever recorded.
Reached roughly a thousand customers with a 'code to cloud' platform and became one of the highest-profile names in the emerging CNAPP category.
Its technology was durable enough to be acquired and productized by Fortinet as FortiCNAPP, giving a major incumbent a cloud-security platform.

What broke

Scaled headcount and spending for an era of unlimited capital, then got caught by the 2022 rate shock that reset software multiples and punished cash-burning growth companies hardest.
Lost the CNAPP category head-to-head to agentless rivals — above all Wiz — whose graph-based platform out-executed Lacework's rule-light, ML-heavy approach.
Go-to-market and leadership missteps, including a criticized dual-CEO structure and disappointing sales productivity, undercut growth just as competition intensified.
The $8.3 billion valuation was set at the very top of the 2021 cycle and proved untethered from the business's actual trajectory, forcing a brutal down round and repeated layoffs.
A collapsing valuation and shrinking runway left it selling into weakness — a proposed Wiz acquisition at $150–200M fell through — culminating in a Fortinet fire sale estimated near $200–230 million versus $1.8B-plus raised.

Sources

Obituary authored Jul 2, 2026 via Sonnet 4.5 + web_search.

What’s new

Join affiliate network