Tufin
Tufin provides an AI-powered unified control plane for network security policy management across hybrid, multi-vendor enterprise networks. Its Tufin Orchestration Suite serves approximately 2,900 customers including 25% of the Fortune 2000 across financial services, healthcare, energy, and government, monetized via tiered subscription pricing.
- Company typePublic
- Founded2019
- HeadquartersBoston, United States
- Headcount501–1,000
- GTM typeB2B
- OfferingSoftware
What Tufin does
Tufin is a network security policy management company headquartered in Boston, Massachusetts with primary engineering operations in Ramat Gan, Israel. The company offers the Tufin Orchestration Suite (TOS), a unified control plane for managing security policies across hybrid, multi-vendor enterprise networks spanning firewalls (Palo Alto, Cisco, Check Point, Fortinet, Juniper), cloud platforms (AWS, Azure, GCP), SASE architectures (Zscaler, Prisma Access, Cisco Meraki, Versa), and microsegmentation technologies (VMware NSX, Akamai Guardicore, Illumio). Tufin serves approximately 2,900 enterprise customers globally, including 25% of the Fortune 2000, with named logos spanning Société Générale, Westpac, Charter Communications, Duke Energy, TJX, SwissTXT, Johnson Controls, a top-20 global bank, a large US utilities company, and a healthcare provider operating 186 hospitals with 300,000 employees.
The company's core technical asset is the Dynamic Network Connectivity Graph, a proprietary digital twin of multi-vendor enterprise networks that models connectivity paths, access controls, segmentation logic, and security policies in real time. This graph underpins Tufin's TufinAI layer, which includes four purpose-built AI agents launched at RSA Conference 2026 (Compliance, Network Security Posture, Application Deployment, Policy Recertification), natural-language TufinAI Assistants, TufinMate assistants for IT/SOC/NetSec teams, and a TufinAI Executive Dashboard. Tufin monetizes through a tiered subscription model with three product tiers—SecureTrack+, SecureChange+, and Enterprise—priced on a usage basis for devices and applications, supplemented by add-on modules (Topology, HA, SecureApp, TufinMate, TOS Discovery) and Standard or 24/7 Premium Support. The company transitioned from perpetual licensing to subscription between 2022 and 2025, with FY2025 cited as the strongest expansion year under the new model.
Tufin distributes through enterprise direct sales augmented by an MSSP program, a tiered channel partner network with margin protection, regional distributors, and a self-service partner portal. Notable channel partners include GuidePoint Security, Optiv, World Wide Technology, Trace3, Computacenter, NTT DATA, NTT DOCOMO BUSINESS DATA, and Infinigate. The company executed two acquisitions—AKIPS in February 2024 for network monitoring and Skybox Security in February 2025 for firewall audit—and has established technology partnerships with major vendors including Akamai, HPE Aruba, and AWS. 2025 recognition included RSA Conference Best of Show, Cyber Defense Top InfoSec Innovators, Global InfoSec Awards, and a Globee Gold Medal in Cybersecurity. The company was previously publicly traded on NYSE under ticker TUFN following its April 2019 IPO and currently reports as a delisted entity.
Tufin firmographics
Firmographics- Name
- Tufin
- Legal name
- Tufin
- Website
- https://tufin.com
- Company type
- Public
- Founded year
- 2019
- Operating status
- Operating
- Headcount range
- 501–1,000 employees
- Short description
- Tufin provides an AI-powered unified control plane for network security policy management across hybrid, multi-vendor enterprise networks. Its Tufin Orchestration Suite serves approximately 2,900 customers including 25% of the Fortune 2000 across financial services, healthcare, energy, and government, monetized via tiered subscription pricing.
- Ownership category
- akta.pro rank
Tufin industry classification
Industry- Product category
- Network Security Policy Management
- NAICS
- Computer Systems Design and Related Services (54151), Computer Systems Design Services (541512)
- SIC
- Services-Computer Integrated Systems Design (7373)
- akta.pro primary industry
- IT Governance, Risk & Compliance (IT GRC) Platforms (HDAEALAK)
- akta.pro secondary industry
- IT Incident, Problem & Change Management Platforms (HDAEALAI)
Keywords
Where Tufin is headquartered
LocationHeadquarters
- HQ city
- Boston
- HQ country
- United States
- HQ region
- North America
Offices2 records
Markets served
Tufin business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure
Revenue model
- Subscription Licensing: Tiered subscription model with three product tiers: SecureTrack+, SecureChange+, and Enterprise. Usage-based pricing for devices and apps. Unlimited users across all plans with unlimited scalability.
- Subscription Transition: Company transitioned from perpetual licensing to subscription-based model, with FY2025 being the strongest expansion year under the new model.
- Support and Premium Services: Standard Support (business hours) and Premium Support (24/7) add-ons available across tiers. Additional modules include Topology Add-on, HA Add-on, SecureApp Add-on, TufinMate Add-on.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | Centralized security policy visibility, segmentation, compliance, cleanup, optimization, change tracking, and vulnerability prioritization |
| Subscription | Annual | All SecureTrack+ features plus automated change design, provisioning, risk analysis, verification, network path analysis, rule lifecycle management, and ITSM integration |
| Subscription | Annual | All SecureChange+ features plus automated change provisioning, application-centric policy management (SecureApp), high availability, and disaster recovery |
Go-to-market motion4 records
Distribution channels5 records
Marketing channels9 records
Tufin product offering
Product offeringCore offering
Tufin provides the Tufin Orchestration Suite (TOS), a unified control plane for network security policy management across hybrid and multi-vendor environments. The platform delivers centralized visibility, automated change control, and continuous compliance for firewalls, cloud, SASE, and microsegmentation technologies, augmented by the TufinAI layer (AI assistants, TufinMate, Executive Dashboard, and purpose-built security agents).
Product overview
Tufin is a network security policy management company offering the Tufin Orchestration Suite (TOS), a unified control plane for hybrid network security. The platform follows a tiered subscription model with three product tiers: SecureTrack+ (centralized security policy visibility and monitoring), SecureChange+ (network security change automation), and Enterprise (zero-touch automation and application-centric policy management at scale). The offering is augmented by TufinAI, an AI-powered layer providing natural language assistants (TufinAI Assistants, TufinMate) and an Executive Dashboard, plus purpose-built AI agents for the agentic era. Additional products include TOS Discovery for automated network topology mapping and AKIPS (acquired 2024) for network monitoring. The platform supports multi-vendor environments across firewalls, cloud, SASE, and microsegmentation technologies.
Differentiator
Problem solved
Functional benefit
Brands
- SecureTrack+: Centralized security policy visibility, network segmentation, compliance and audit, security policy cleanup and optimization, change tracking, and vulnerability exposure prioritization
- SecureChange+
- Enterprise
- TufinAI
- TufinMate
- TOS Discovery
- AKIPS
Products and services
- Tufin Orchestration Suite (TOS) Centralized firewall security management layer enabling definition and implementation of comprehensive security policies and rapid automation of network changes across hybrid multi-vendor environments. Provides unified visibility, automated change control, and continuous compliance across firewalls, cloud, SASE, and microsegmentation.
- TufinAI AI-powered network security platform built on Tufin's Dynamic Network Connectivity Graph, providing vendor-agnostic AI capabilities across the entire product portfolio including AI assistants, TufinMate, Executive Dashboards, and purpose-built security agents.
- TOS Discovery Automated network discovery tool that scans for and imports routers and switches into Tufin's Topology Map using SNMP, eliminating manual topology updates and ensuring topology stays aligned with the real network structure.
- AKIPS Network monitoring solution acquired by Tufin in February 2024 to provide end-to-end visibility and automation for network security and monitoring across hybrid and multi-cloud architectures, available on AWS.
Quantifiable outcome
- 144% ROI with payback in under 6 months
- +6 more outcomes
Companies that use Tufin
Customer profileNamed customers10 records
Segments9 records
Ideal customer profiles4 records
Tufin technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
Integration17 records
AI capability6 records
Feature7 records
Tufin partnerships and signals
Strategic signalPartnerships
21 partnerships are on record, tiered core.
- AkamaicoreJoint security solution integrating Akamai Guardicore Segmentation with Tufin's network security posture management platform. Unifies segmentation policy into a single control plane, providing centralized visibility across hybrid infrastructure, firewalls, and cloud security controls to help enterprises implement Zero Trust security.
- Hat DistributioncoreHat Distribution signed partnership deal to bring Tufin's security policy orchestration and firewall rule lifecycle management solutions to enterprise customers across hybrid and multi-cloud environments. Distributor will invest heavily in partner enablement including technical training, architecture support, and go-to-market programs.
- Amazon Web Services (AWS)coreAKIPS network monitoring platform made available on AWS, enabling enterprises to modernize monitoring infrastructure while maintaining full visibility into existing on-premises environments. Provides elastic scalability, built-in resilience, and centralized oversight for hybrid and multi-cloud architectures.
- HPE ArubacoreTufin enhanced AI data center security features by adding support for HPE Aruba networking. Integration aims to improve security capabilities within data centers.
- Palo Alto NetworkscoreTechnology partnership for firewall policy management. Tufin provides centralized visibility and unified policy enforcement across Palo Alto Networks firewalls.
- CiscocoreTechnology partnership for multi-vendor firewall support. Tufin integrates with Cisco devices for network security policy management.
- Check PointcoreTechnology partnership for firewall policy management across Check Point firewalls.
- FortinetcoreTechnology partnership for Fortinet firewall support and policy management.
- Microsoft AzurecoreCloud platform integration for unified cloud policy visibility and automation across Azure environments.
- Google Cloud Platform (GCP)coreCloud platform integration for unified cloud policy visibility and automation across GCP environments.
- ZscalercoreSASE platform integration for unified policy management across Zscaler and traditional firewall policies.
- VMware NSXcoreMicrosegmentation platform integration for network segmentation policy management.
- IllumiocoreMicrosegmentation platform integration for network segmentation policy management.
- GuidePoint Security LLCcore2025 Americas Partner Award winner recognized for delivering business value and helping customers manage complex hybrid network environments.
- Optiv Security Inc.core2025 Americas Partner Award winner recognized for delivering business value and helping customers manage complex hybrid network environments.
- World Wide Technology LLCcore2025 Americas Partner Award winner recognized for delivering business value and helping customers manage complex hybrid network environments.
- Trace3 LLCcore2025 Americas Partner Award winner recognized for delivering business value and helping customers manage complex hybrid network environments.
- NTT DOCOMO BUSINESS DATA Inc.core2025 APAC Partner Award winner recognized for delivering business value and helping customers manage complex hybrid network environments.
- Computacentercore2025 EMEA Partner Award winner recognized for delivering business value and helping customers manage complex hybrid network environments.
- NTT DATA (UK & Ireland)core2025 EMEA Partner Award winner recognized for delivering business value and helping customers manage complex hybrid network environments.
- Infinigate Germancore2025 EMEA Partner Award winner recognized for delivering business value and helping customers manage complex hybrid network environments.
Scale indicators13 records
Recent moves6 records
Expansion highlights6 records
Tufin competitors and assessment
Company assessmentDirect peers
- FireMon: FireMon is the closest direct competitor to Tufin in network security policy management, offering firewall rule analysis, change automation, and continuous compliance across hybrid environments for large enterprises—virtually identical buyer, use case, and product category.
- AlgoSec: AlgoSec provides application-centric network security policy management, firewall change automation, and risk analysis across hybrid cloud and multi-vendor estates, competing head-to-head with Tufin's SecureChange+ and Enterprise tiers in regulated enterprises.
Broad incumbents
- Palo Alto Networks (Panorama / Strata Cloud Manager): Palo Alto is a core Tufin technology partner but also a broad incumbent competitor; Panorama and Strata Cloud Manager deliver native multi-vendor and Palo Alto-centric policy management, segmentation, and compliance as part of a much larger security platform, threatening Tufin in single-vendor or Palo Alto-heavy accounts.
- Cisco (Defense Orchestrator / Secure Firewall Management Center): Cisco bundles firewall and policy management across its Security Cloud and on-prem FMC products, covering many of Tufin's use cases inside a much broader networking and security portfolio, particularly for Cisco-centric enterprises.
- Check Point Software (Infinity Portal / SmartConsole): Check Point is both a Tufin integration partner and broad incumbent, offering unified security policy management across its Infinity architecture that overlaps with Tufin's visibility and change automation for Check Point-heavy estates.
- Fortinet (FortiManager / FortiAnalyzer): Fortinet provides centralized firewall management and analytics via FortiManager and FortiAnalyzer, serving as a broader incumbent alternative for customers standardized on Fortinet's ecosystem.
- Juniper Networks (Security Director Cloud): Juniper's Security Director Cloud offers policy management across its SRX and Mist wired/wireless portfolio, competing as a broader incumbent in Juniper-centric enterprise and service provider networks that Tufin also targets.
Emerging players
- Illumio: Illumio is a Tufin integration partner for microsegmentation but an emerging competitor in Zero Trust segmentation and exposure management; its CloudSecure and ASP platforms increasingly overlap with Tufin's posture and segmentation use cases.
- Akamai (Guardicore Segmentation): Akamai's Guardicore Segmentation is a newly announced Tufin Zero Trust partner but also a competing microsegmentation and visibility offering; Akamai's global platform gives it scale advantages in hybrid workload segmentation.
- vArmour: vArmour is an emerging application-aware microsegmentation and network policy management vendor that competes with the policy and posture side of Tufin's portfolio in hybrid cloud and financial services accounts.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks5 records
Key highlights7 records
Customer concentration
Tufin social profiles
Digital presenceTufin compliance and trust
Trust signalCompliance8 records
Tufin financial estimates
Financial estimateRevenue estimate
Valuation estimate
Tufin leadership team
Management profileNumber of profiles
Profiles16 records
Tufin subsidiaries and ownership
Company hierarchySubsidiaries2 records
Tufin funding detail
Funding detailFunding overview
Funding rounds6 records
Investors6 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Tufin M&A and investment
M&A and investmentM&A1 record
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Tufin
What does Tufin do?
Tufin provides the Tufin Orchestration Suite (TOS), a unified control plane for network security policy management across hybrid and multi-vendor environments. The platform delivers centralized visibility, automated change control, and continuous compliance for firewalls, cloud, SASE, and microsegmentation technologies, augmented by the TufinAI layer (AI assistants, TufinMate, Executive Dashboard, and purpose-built security agents).
Is Tufin a public or private company?
Tufin is a public company. It is classified as public and is currently operating.
When was Tufin founded?
Tufin was founded in 2019. It employs 501 to 1,000 people.
Where is Tufin based?
Tufin is headquartered in Boston, United States, in the North America region.
How does Tufin make money?
Three revenue lines are on record. Subscription Licensing is the primary driver. The others are subscription Transition and support and Premium Services.
Who are Tufin's main competitors?
Direct peers on record are FireMon and AlgoSec. Broad incumbents are Palo Alto Networks (Panorama / Strata Cloud Manager), Cisco (Defense Orchestrator / Secure Firewall Management Center), Check Point Software (Infinity Portal / SmartConsole), Fortinet (FortiManager / FortiAnalyzer) and Juniper Networks (Security Director Cloud). Emerging players are Illumio, Akamai (Guardicore Segmentation) and vArmour.
Does Tufin have an API?
Yes. Tufin provides developer resources through its Developer Community and API capabilities. The Developer Resources page mentions access to developer tools, and the platform offers REST APIs for integration with ITSM platforms like ServiceNow through the Workflow Integrator App using REST APIs. Tufin also mentions an MCP Server bringing trusted network context into future AI workflows in a governed way. Developer documentation is at community.tufin.com.
What industry is Tufin in?
Tufin's product category is Network Security Policy Management. Its primary akta.pro industry code is HDAEALAK, IT Governance, Risk & Compliance (IT GRC) Platforms, with a secondary code of HDAEALAI, IT Incident, Problem & Change Management Platforms. Its NAICS code is 54151 and its SIC code is 7373.