FortiCWP – Cloud Security Analytics & Posture Management
Visibility. Compliance. Protection.
FortiCWP helps organizations secure their cloud environments by delivering real-time visibility, threat detection, and compliance monitoring across AWS, Azure, and Google Cloud.
Fortinet Products
FortiCWP Container Guardian Subscription License
| FortiCNP Container Protection. 1 Year FortiCNP Container Protection. Subscription per 4 container host/work nodes. (Replaces FortiCWP Container Guardian) | #FC1-10-FCWPC-327-02-12 | Get a Quote |
| FortiCNP Container Protection. 3 Year FortiCNP Container Protection. Subscription per 4 container host/work nodes. (Replaces FortiCWP Container Guardian) | #FC1-10-FCWPC-327-02-36 | Get a Quote |
| FortiCNP Container Protection. 5 Year FortiCNP Container Protection. Subscription per 4 container host/work nodes. (Replaces FortiCWP Container Guardian) | #FC1-10-FCWPC-327-02-60 | Get a Quote |
Simplify Multi-Cloud Security with Visibility, Control, and Automation
As organizations adopt multiple public cloud platforms, security management becomes increasingly complex. Each cloud provider offers different
built-in tools, making it difficult to maintain consistent visibility, policy enforcement, and risk management across environments.
FortiCWP helps solve this by enabling security teams and DevOps to:
Evaluate cloud security posture
Detect misconfigurations and potential threats
Analyze traffic within and across cloud environments
Audit against security best practices and compliance standards
Integrate remediation into DevOps workflows
FortiCWP provides a centralized view of cloud risk across AWS, Azure, and Google Cloud, helping organizations secure rapidly growing cloud
environments with automation and efficiency. Reduce risk. Maintain compliance. Secure the cloud at scale.
FortiCWP Videos
See Cloud Security in Action
As cloud adoption grows, many organizations face the challenge of managing disparate tools and inconsistent security policies across platforms. Fortinet’s cloud security solutions, including FortiCWP, provide unified visibility, control, and compliance—from data center to multi-cloud environments.Watch how FortiCWP simplifies cloud security and strengthens your multi cloud posture.
.
Visibility & Insight for IaaS Workloads and Storage
Cloud-Native Security Monitoring for AWS, Azure, and Google Cloud
FortiCWP is Fortinet’s cloud-native Cloud Workload Protection (CWP) service that connects directly to public cloud APIs including AWS, Azure,
and Google Cloud to provide deep visibility across your cloud infrastructure. It monitors critical components like configurations, user activity, and
traffic logs, while scanning cloud storage for sensitive or malicious data. FortiCWP also generates compliance reports for frameworks such as
PCI, HIPAA, SOX, GDPR, ISO 27001, and NIST.
Monitored Security Risks:
Malicious Traffic
Sensitive Data & Malware
Suspicious User Activity
Compliance Violations
Vulnerabilities & Misconfigurations
FortiCWP Capabilities
Risk Management – Prioritize and remediate the highest-risk issues quickly
Data Security – Scan and assess cloud storage for sensitive content
Traffic Analysis – Monitor cloud traffic to detect abnormal behaviors
Threat Detection & Response – Continuous security monitoring across workloads
Automated Compliance Reporting Out-of-the-box templates for major standards
FortiCWP helps you secure your cloud infrastructure from the inside out—with full visibility, proactive defense, and built-in compliance support.
Note:
Pricing and product availability are subject to change without notice.
Feature Highlights:
Using an API-based approach, FortiCWP is tightly integrated with leading IaaS providers to access usage and data stored in various clouds. FortiCWP gives IT security professionals the ability to scan provisioned cloud resource configurations, data and usage for potential threats, misconfigurations and compliance violations. This approach also ensures that all users of the organization’s IaaS resources are monitored and protected by FortiCWP no matter where they are or what device they are using.
Built from the “Fabric-up”, FortiCWP is designed for deep integration into the Fortinet Security Fabric to provide consolidated cloud usage management and reporting.
Central Visibility
FortiCWP provides central visibility and reporting for multi-cloud environments. FortiCWP provides dashboards, logs, and reports that make it easy to understand your security status at a glance. User activity, cloud resources, files and data, policies and much more can be centrally viewed. User activities can be displayed as a list or on a map. Relationships between resources are graphically displayed so administrators to quickly understand infrastructures of all monitored cloud accounts and so that the relationship between cloud resource instances and services can easily be understood.
On-Demand Data Scanning
Unlike a proxy-based service or hardware device, FortiCWP directly connects to the cloud provider to access data and files stored in an organization’s accounts. New information is validated against data leakage policies and scanned for threats. Existing information or “data at rest” is also scanned to ensure it meets business policies. If a business policy is updated, it can be easily applied to data stored in the cloud by the administrator.
User Insights and Policies
FortiCWP offers many tools to provide insights into user behaviors and their activities on cloud-based applications. Administrators can monitor usage as needed and have the ability to view user entitlements, dormant users, and conduct detailed configuration assessments.
Compliance and DLP
FortiCWP offers a highly customizable suite of data loss prevention tools that defend against data breaches and provides a set of predefined compliance reports. Using industry-standard regular expressions, FortiCWP can be configured for nearly any policy to meet data protection needs and provide tailored reports on DLP activities. For organizations that must meet compliance standards, FortiCWP offers predefined reports for standards including PCI, HIPPA, SOX, GDPR, ISO 27001, and NIST which allows organizations to generate compliance reports instantly for auditing teams, so policy violations can be identified remediated.
Threat Protection and Response
FortiCWP uses User Entity Behavior Analytics (UEBA) to look for suspicious or irregular user behavior. It also sends out alerts for malicious behavior. User and entity behavior analytics is a security process that monitors the normal actions of users. FortiCWP uses risk scoring techniques and advanced algorithms to detect anomalies over time.
Risk Assessment and Account Scores
FortiCWP’s deep risk assessment and continuous analysis solution enables security teams to focus on the highest priority issues, take quick remediation as well as utilizing auto fixing option to effectively manage and address risk. Actionable alerts enable organizations to prioritize response based on the severity of issues. To help assess risks, FortiCWP generates a security risk score.
FortiGuard Integration for Advanced Threat Detection
FortiCWP automatically includes award-winning FortiGuard antivirus services to scan files stored in the cloud. This service is at no extra cost to FortiCWP subscribers.
Configuration Assessments and Compliance Reports
FortiCWP performs hundreds of IaaS configuration assessments across the organization’s global IaaS deployment on AWS, Azure, and GCP. FortiCWP identifies risks associated with the unsecure provisioning and configuration of cloud resources. Using the information that is gathered by continuously evaluating existing cloud configurations, FortiCWP generates compliance reports that list gaps from regulation requirements of supported reports. FortiCWP provides out-of-the-box policies for standards such as PCI, HIPPA, SOX, GDPR, ISO 27001, and NIST.
Pricing Notes:
- Pricing and product availability subject to change without notice.
Features and Benefits:
Independently Top-Rated
NSS Labs “Recommended” for sandbox-powered breach detection and breach prevention, and ICSA Labs certified for advanced threat defense
Improved Efficacy and Performance
Leverages two machine learning models that enhance static and dynamic malware analysis of zero-day threats
Accelerated Threat Investigation
Built-in MITRE ATT&CK matrix identifies a variety of malware techniques
Broad Integration
Extends zero-day threat detection to a next-generation firewall, web application firewall, secure email gateway, and endpoint protection platform
Automated Breach Protection
Speeds mitigation by sharing real-time updates to disrupt threats at the origin and subsequent immunization across the entire organization
Unified IT-OT-Zero-Day Threat Protection
Protects across both IT and OT environments and assets from malware
Pricing Notes:
- Pricing and product availability subject to change without notice.
Use Cases:
Risk Management
Continuous configuration assessments and risk analysis presents actionable information enabling security teams to focus on the highest priority issues, take quick remediation actions, and automatically fix known configuration errors to manage and mitigate risk. Protect public clouds including: Amazon S3, Amazon Elastic Compute Cloud, Amazon EKS, IBM Identity and Access Manager roles, and more.
- Reduce risk with central visibility and control in distributed/multi-cloud environments.
- Prioritize vulnerabilities based on individual risk score.
Data Security
FortiCWP analyzes configurations, files, and documents in cloud storage services to identify and monitor insecure configurations, sensitive data, and malware. By drilling down to document profiles from generated alerts, customers can monitor and analyze sensitive data activity to investigate data leakage in their environment.
- Identify sensitive data, assess data leakage, and discover misconfigurations across the cloud environment.
- Assess risk by drilling down to document profiles from alerts to investigate data leakage and misconfigurations.
Traffic Analysis and Investigation
Obtain comprehensive visibility into all network resource topologies. FortiCWP also identifies and monitors network traffic for attacks, with drill-down capabilities on resource profiles. It provides contextual understanding of the cloud environment, helping eliminate blind spots, reduce incident response time, and analyze incident impact to improve security posture.
Gain complete visibility and visualize Infrastructure-as-a-Service (IaaS) environments to:
- Quickly implement effective control and security policies.
- Protect resources against inside or outside threats in major public cloud infrastructures.
Threat Detection and Response
Continuously monitor/track all security activity, including configurations, user activity, traffic flow logs, and data storage in public cloud environments. Predefined policies detect any potential risk such as: malicious traffic, suspicious user activity, vulnerability configuration, and sensitive data leaks and malware.
- Detect complex threats and user activity in public cloud environments.
- Identify suspicious host/IP and provide details on violated policies.
- Rapid response to identified threats based on contextual alerts.
Compliance
For organizations operating in a highly regulated industry, FortiCWP provides out-of-the-box policies for standards and mandates, and allows organizations to quickly generate compliance reports for auditing teams so they can identify policy violations and take necessary remedial actions.
- Enhanced visibility and control maintains historical snapshots of public cloud environments.
- Continuous monitoring of security and compliance assessment policies.
- Comprehensive reporting to stay compliant and reduce risk.
Pricing Notes:
- Pricing and product availability subject to change without notice.
Screenshots:
FortiCWP continuously monitors and tracks all security components, including configurations, user activities, traffic flow logs, and data storage uses in public cloud environments. Combining with out-of-the-box predefined policies, FortiCWP detects potential risk factors such as malicious traffic, suspicious user activities, configurations that contain vulnerabilities, sensitive data transmission (potential data leakage), and malware infections.
Pricing Notes:
- Pricing and product availability subject to change without notice.
Documentation:
Download the Fortinet FortiCWP Datasheet (.PDF)
Pricing Notes:
- Pricing and product availability subject to change without notice.
Fortinet Products
| FortiCWP Container Guardian Subscription License | ||
| FortiCNP Container Protection. 1 Year FortiCNP Container Protection. Subscription per 4 container host/work nodes. (Replaces FortiCWP Container Guardian) | #FC1-10-FCWPC-327-02-12 | Get a Quote |
| FortiCNP Container Protection. 3 Year FortiCNP Container Protection. Subscription per 4 container host/work nodes. (Replaces FortiCWP Container Guardian) | #FC1-10-FCWPC-327-02-36 | Get a Quote |
| FortiCNP Container Protection. 5 Year FortiCNP Container Protection. Subscription per 4 container host/work nodes. (Replaces FortiCWP Container Guardian) | #FC1-10-RCWPC-327-02-60 | Get a Quote |
| FortiCWP Workload Guardian – Cloud Workload Protection Subscription License | ||
| FortiCNP Cloud Native protection 1 Year Multi-cloud compliance solution for applications with up to 100 resources. Report compliance against multiple frameworks. Find misconfiguration vulnerabilities, prioritize, and fix through SIEM, SOAR, and issue tracker integrations. Covers AWS, Azure, and GCP. Stack to cover required resource count | #FC2-10-RCWPW-315-02-12 | Get a Quote |
| FortiCNP Cloud Native protection 3 Year Multi-cloud compliance solution for applications with up to 100 resources. Report compliance against multiple frameworks. Find misconfiguration vulnerabilities, prioritize, and fix through SIEM, SOAR, and issue tracker integrations. Covers AWS, Azure, and GCP. Stack to cover required resource count | #FC2-10-FCWPW-315-02-36 | Get a Quote |
| FortiCNP Cloud Native protection 5 Year Multi-cloud compliance solution for applications with up to 100 resources. Report compliance against multiple frameworks. Find misconfiguration vulnerabilities, prioritize, and fix through SIEM, SOAR, and issue tracker integrations. Covers AWS, Azure, and GCP. Stack to cover required resource count | #FC2-10-FCWPW-315-02-60 | Get a Quote |
| FortiCWP Storage Guardian Basic Subscription License (per 100GB data) | ||
| FortiCNP Data Protection 1 Year FortiCNP Data Protection Standard. License for malware and anti-virus scanning of 100GB of data. Requires FortiCNP protected resource license. Cannot be combined with FortiCNP Data Protection, Advanced. (Replaces FortiCWP Storage Guardian, Basic) | #FC2-10-FCWPS-316-02-12 | Get a Quote |
| FortiCNP Data Protection 3 Year FortiCNP Data Protection Standard. License for malware and anti-virus scanning of 100GB of data. Requires FortiCNP protected resource license. Cannot be combined with FortiCNP Data Protection, Advanced. (Replaces FortiCWP Storage Guardian, Basic) | #FC2-10-FCWPS-316-02-36 | Get a Quote |
| FortiCNP Data Protection 5 Year FortiCNP Data Protection Standard. License for malware and anti-virus scanning of 100GB of data. Requires FortiCNP protected resource license. Cannot be combined with FortiCNP Data Protection, Advanced. (Replaces FortiCWP Storage Guardian, Basic) | #FC2-10-FCWPS-316-02-60 | Get a Quote |
| FortiCWP Storage Guardian Basic Subscription License (per 1TB data) | ||
| FortiCNP Data Protection 1 Year FortiCNP Data Protection Standard. License for malware and anti-virus scanning of 1TB of data. Requires FortiCNP protected resource license. Cannot be combined with FortiCNP Data Protection, Advanced. (Replaces FortiCWP Storage Guardian, Basic) | #FC5-10-FCWPS-316-02-12 | Get a Quote |
| FortiCNP Data Protection 3 Year FortiCNP Data Protection Standard. License for malware and anti-virus scanning of 1TB of data. Requires FortiCNP protected resource license. Cannot be combined with FortiCNP Data Protection, Advanced. (Replaces FortiCWP Storage Guardian, Basic) | #FC5-10-FCWPS-316-02-36 | Get a Quote |
| FortiCNP Data Protection 5 Year FortiCNP Data Protection Standard. License for malware and anti-virus scanning of 1TB of data. Requires FortiCNP protected resource license. Cannot be combined with FortiCNP Data Protection, Advanced. (Replaces FortiCWP Storage Guardian, Basic) | #FC5-10-FCWPS-316-02-60 | Get a Quote |
| FortiCWP Storage Guardian Advanced Subscription License (per 100GB data) | ||
| FortiCNP Data Protection 1 Year FortiCNP Data Protection Advanced (Standard plus DLP scanning) – License for pattern-matching (DLP), malware and anti-virus scanning of 100GB of data. Requires FortiCNP protected resource license. Cannot be combined with FortiCNP Data Protection, Standard. (Replaces FortiCWP Storage Guardian, Advanced) | #FC2-10-FCWPS-317-02-12 | Get a Quote |
| FortiCNP Data Protection 3 Year FortiCNP Data Protection Advanced (Standard plus DLP scanning) – License for pattern-matching (DLP), malware and anti-virus scanning of 100GB of data. Requires FortiCNP protected resource license. Cannot be combined with FortiCNP Data Protection, Standard. (Replaces FortiCWP Storage Guardian, Advanced) | #FC2-10-FCWPS-317-02-36 | Get a Quote |
| FortiCNP Data Protection 5 Year FortiCNP Data Protection Advanced (Standard plus DLP scanning) – License for pattern-matching (DLP), malware and anti-virus scanning of 100GB of data. Requires FortiCNP protected resource license. Cannot be combined with FortiCNP Data Protection, Standard. (Replaces FortiCWP Storage Guardian, Advanced) | #FC2-10-FCWPS-317-02-60 | Get a Quote |
| FortiCWP Storage Guardian Advanced Subscription License (per 1TB data) | ||
| FortiCNP Data Protection 1 Year FortiCNP Data Protection Advanced (Standard plus DLP scanning) – License for pattern-matching (DLP), malware and anti-virus scanning of 1TB of data. Requires FortiCNP protected resource license. Cannot be combined with FortiCNP Data Protection, Standard. (Replaces FortiCWP Storage Guardian, Advanced) | #FC5-10-FCWPS-317-02-12 | Get a Quote |
| FortiCNP Data Protection 3 Year FortiCNP Data Protection Advanced (Standard plus DLP scanning) – License for pattern-matching (DLP), malware and anti-virus scanning of 1TB of data. Requires FortiCNP protected resource license. Cannot be combined with FortiCNP Data Protection, Standard. (Replaces FortiCWP Storage Guardian, Advanced) | #FC5-10-FCWPS-317-02-36 | Get a Quote |
| FortiCNP Data Protection 5 Year FortiCNP Data Protection Advanced (Standard plus DLP scanning) – License for pattern-matching (DLP), malware and anti-virus scanning of 1TB of data. Requires FortiCNP protected resource license. Cannot be combined with FortiCNP Data Protection, Standard. (Replaces FortiCWP Storage Guardian, Advanced) | #FC5-10-FCWPS-317-02-60 | Get a Quote |
Talk to a Specialist Right Now: 224-625-8340