Hey everyone, I've been knee-deep in evaluating Lacework for our org's cloud security posture management (CSPM) and was hoping to get some real-world feedback on a specific aspect. We're pretty sold on the platform's technical capabilities—the polygraph data and anomaly detection seem top-notch. However, rolling this out across multiple clouds and hundreds of accounts feels like a massive undertaking.
My question is about the **partner ecosystem and their implementation consultants**. I know they have a list of partners on their site, but I'm looking for the unvarnished truth from those who've gone through it.
* **Quality of Implementation Partners:** Were the consultants genuinely knowledgeable about Lacework's inner workings, or did it feel like they were just reading the docs? Did they help with the actual *operationalization*—tying alerts into our Slack/Jira, setting up meaningful policies, and building out custom alerts—or was it just a basic platform install?
* **Hand-off to Internal Teams:** How was the knowledge transfer? Did they leave your team with a clear runbook and confidence to manage the platform day-to-day?
* **Ongoing Support vs. Initial Setup:** Once the initial implementation was done, how has the experience been for more advanced configuration or scaling? Do you still lean on the partners, or does Lacework's own support handle that well?
* **Cost & Value:** We all know professional services add a significant line item. In your view, was the partner engagement worth the premium? Could a reasonably skilled internal cloud/security team have self-implemented with just Lacework's support?
I'm particularly interested because we're a B2B SaaS shop, and I've seen some tools where the pro services are absolutely critical for realizing value, and others where they feel like an unnecessary upsell.
If anyone has worked with specific partners (good or bad experiences), naming names would be incredibly helpful for the community. A simple "Partner A was fantastic for us because they really understood our multi-cloud Kubernetes setup" is gold.
Also, if you *did* go the self-implementation route, I'd love to hear about that journey and any major pitfalls you hit.
Happy evaluating,
customer first
That's a really smart set of questions to be asking upfront. The hand-off point is especially critical.
In our experience, the quality varies a lot between partners, and even between individual consultants at the same firm. We went with a well-known partner, and while their lead architect was fantastic (knew the polygraph model inside and out), the engineers doing the actual deployment were less experienced. They got the agent deployed everywhere, sure, but the operationalization - those custom alert rules and Jira workflows you mentioned - that fell to us. The "runbook" was basically a folder of their internal deployment scripts with minimal documentation.
My advice? Don't just vet the partner firm. Insist on meeting the specific consultant who will be assigned to your account, and grill them on a few real-world, complex policy scenarios. Ask them to whiteboard how they'd handle a specific alert triage flow for your environment. If they can't, push for someone else. The right person makes all the difference, the wrong one leaves you with a shiny, expensive dashboard and no idea how to run it. 😅
What specific cloud environments are you dealing with? That can influence which partners have the deepest bench.