Tufin

What Tufin does

Tufin is a network security policy management company headquartered in Boston, Massachusetts with primary engineering operations in Ramat Gan, Israel. The company offers the Tufin Orchestration Suite (TOS), a unified control plane for managing security policies across hybrid, multi-vendor enterprise networks spanning firewalls (Palo Alto, Cisco, Check Point, Fortinet, Juniper), cloud platforms (AWS, Azure, GCP), SASE architectures (Zscaler, Prisma Access, Cisco Meraki, Versa), and microsegmentation technologies (VMware NSX, Akamai Guardicore, Illumio). Tufin serves approximately 2,900 enterprise customers globally, including 25% of the Fortune 2000, with named logos spanning Société Générale, Westpac, Charter Communications, Duke Energy, TJX, SwissTXT, Johnson Controls, a top-20 global bank, a large US utilities company, and a healthcare provider operating 186 hospitals with 300,000 employees.

The company's core technical asset is the Dynamic Network Connectivity Graph, a proprietary digital twin of multi-vendor enterprise networks that models connectivity paths, access controls, segmentation logic, and security policies in real time. This graph underpins Tufin's TufinAI layer, which includes four purpose-built AI agents launched at RSA Conference 2026 (Compliance, Network Security Posture, Application Deployment, Policy Recertification), natural-language TufinAI Assistants, TufinMate assistants for IT/SOC/NetSec teams, and a TufinAI Executive Dashboard. Tufin monetizes through a tiered subscription model with three product tiers—SecureTrack+, SecureChange+, and Enterprise—priced on a usage basis for devices and applications, supplemented by add-on modules (Topology, HA, SecureApp, TufinMate, TOS Discovery) and Standard or 24/7 Premium Support. The company transitioned from perpetual licensing to subscription between 2022 and 2025, with FY2025 cited as the strongest expansion year under the new model.

Tufin distributes through enterprise direct sales augmented by an MSSP program, a tiered channel partner network with margin protection, regional distributors, and a self-service partner portal. Notable channel partners include GuidePoint Security, Optiv, World Wide Technology, Trace3, Computacenter, NTT DATA, NTT DOCOMO BUSINESS DATA, and Infinigate. The company executed two acquisitions—AKIPS in February 2024 for network monitoring and Skybox Security in February 2025 for firewall audit—and has established technology partnerships with major vendors including Akamai, HPE Aruba, and AWS. 2025 recognition included RSA Conference Best of Show, Cyber Defense Top InfoSec Innovators, Global InfoSec Awards, and a Globee Gold Medal in Cybersecurity. The company was previously publicly traded on NYSE under ticker TUFN following its April 2019 IPO and currently reports as a delisted entity.

Name

Tufin

Legal name

Tufin

Website

https://tufin.com

Company type

Public

Founded year

2019

Operating status

Operating

Headcount range

501–1,000 employees

Short description

Tufin provides an AI-powered unified control plane for network security policy management across hybrid, multi-vendor enterprise networks. Its Tufin Orchestration Suite serves approximately 2,900 customers including 25% of the Fortune 2000 across financial services, healthcare, energy, and government, monetized via tiered subscription pricing.

Ownership category

akta.pro rank

Product category

Network Security Policy Management

NAICS

Computer Systems Design and Related Services (54151), Computer Systems Design Services (541512)

SIC

Services-Computer Integrated Systems Design (7373)

akta.pro primary industry

IT Governance, Risk & Compliance (IT GRC) Platforms (HDAEALAK)

akta.pro secondary industry

IT Incident, Problem & Change Management Platforms (HDAEALAI)

Keywords

• Network security policy management
• Firewall orchestration software
• Security compliance automation
• Hybrid cloud security
• Zero trust segmentation

Headquarters

HQ city

Boston

HQ country

United States

HQ region

North America

Offices2 records

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure

Revenue model

1. Subscription Licensing: Tiered subscription model with three product tiers: SecureTrack+, SecureChange+, and Enterprise. Usage-based pricing for devices and apps. Unlimited users across all plans with unlimited scalability.
2. Subscription Transition: Company transitioned from perpetual licensing to subscription-based model, with FY2025 being the strongest expansion year under the new model.
3. Support and Premium Services: Standard Support (business hours) and Premium Support (24/7) add-ons available across tiers. Additional modules include Topology Add-on, HA Add-on, SecureApp Add-on, TufinMate Add-on.

Pricing tiers

Go-to-market motion4 records

Distribution channels5 records

Marketing channels9 records

Core offering

Tufin provides the Tufin Orchestration Suite (TOS), a unified control plane for network security policy management across hybrid and multi-vendor environments. The platform delivers centralized visibility, automated change control, and continuous compliance for firewalls, cloud, SASE, and microsegmentation technologies, augmented by the TufinAI layer (AI assistants, TufinMate, Executive Dashboard, and purpose-built security agents).

Product overview

Tufin is a network security policy management company offering the Tufin Orchestration Suite (TOS), a unified control plane for hybrid network security. The platform follows a tiered subscription model with three product tiers: SecureTrack+ (centralized security policy visibility and monitoring), SecureChange+ (network security change automation), and Enterprise (zero-touch automation and application-centric policy management at scale). The offering is augmented by TufinAI, an AI-powered layer providing natural language assistants (TufinAI Assistants, TufinMate) and an Executive Dashboard, plus purpose-built AI agents for the agentic era. Additional products include TOS Discovery for automated network topology mapping and AKIPS (acquired 2024) for network monitoring. The platform supports multi-vendor environments across firewalls, cloud, SASE, and microsegmentation technologies.

Differentiator

Problem solved

Functional benefit

Brands

• SecureTrack+: Centralized security policy visibility, network segmentation, compliance and audit, security policy cleanup and optimization, change tracking, and vulnerability exposure prioritization
• SecureChange+
• Enterprise
• TufinAI
• TufinMate
• TOS Discovery
• AKIPS

Products and services

• Tufin Orchestration Suite (TOS) Centralized firewall security management layer enabling definition and implementation of comprehensive security policies and rapid automation of network changes across hybrid multi-vendor environments. Provides unified visibility, automated change control, and continuous compliance across firewalls, cloud, SASE, and microsegmentation.
• TufinAI AI-powered network security platform built on Tufin's Dynamic Network Connectivity Graph, providing vendor-agnostic AI capabilities across the entire product portfolio including AI assistants, TufinMate, Executive Dashboards, and purpose-built security agents.
• TOS Discovery Automated network discovery tool that scans for and imports routers and switches into Tufin's Topology Map using SNMP, eliminating manual topology updates and ensuring topology stays aligned with the real network structure.
• AKIPS Network monitoring solution acquired by Tufin in February 2024 to provide end-to-end visibility and automation for network security and monitoring across hybrid and multi-cloud architectures, available on AWS.

Quantifiable outcome

• 144% ROI with payback in under 6 months
• +6 more outcomes

Named customers10 records

Segments9 records

Ideal customer profiles4 records

Technology focussed Yes

API detail

Has API

Yes

API docs

API detail

Core technology

AI maturity

App detail

Integration17 records

AI capability6 records

Feature7 records

Partnerships

21 partnerships are on record, tiered core.

• AkamaicoreTechnology or Integration · 18 March 2026Joint security solution integrating Akamai Guardicore Segmentation with Tufin's network security posture management platform. Unifies segmentation policy into a single control plane, providing centralized visibility across hybrid infrastructure, firewalls, and cloud security controls to help enterprises implement Zero Trust security.
• Hat DistributioncoreChannel Partner/ Reseller/ Distributor · 9 March 2026Hat Distribution signed partnership deal to bring Tufin's security policy orchestration and firewall rule lifecycle management solutions to enterprise customers across hybrid and multi-cloud environments. Distributor will invest heavily in partner enablement including technical training, architecture support, and go-to-market programs.
• Amazon Web Services (AWS)coreTechnology or Integration · 16 December 2025AKIPS network monitoring platform made available on AWS, enabling enterprises to modernize monitoring infrastructure while maintaining full visibility into existing on-premises environments. Provides elastic scalability, built-in resilience, and centralized oversight for hybrid and multi-cloud architectures.
• HPE ArubacoreTechnology or Integration · 28 October 2025Tufin enhanced AI data center security features by adding support for HPE Aruba networking. Integration aims to improve security capabilities within data centers.
• Palo Alto NetworkscoreTechnology or IntegrationTechnology partnership for firewall policy management. Tufin provides centralized visibility and unified policy enforcement across Palo Alto Networks firewalls.
• CiscocoreTechnology or IntegrationTechnology partnership for multi-vendor firewall support. Tufin integrates with Cisco devices for network security policy management.
• Check PointcoreTechnology or IntegrationTechnology partnership for firewall policy management across Check Point firewalls.
• FortinetcoreTechnology or IntegrationTechnology partnership for Fortinet firewall support and policy management.
• Microsoft AzurecoreTechnology or IntegrationCloud platform integration for unified cloud policy visibility and automation across Azure environments.
• Google Cloud Platform (GCP)coreTechnology or IntegrationCloud platform integration for unified cloud policy visibility and automation across GCP environments.
• ZscalercoreTechnology or IntegrationSASE platform integration for unified policy management across Zscaler and traditional firewall policies.
• VMware NSXcoreTechnology or IntegrationMicrosegmentation platform integration for network segmentation policy management.
• IllumiocoreTechnology or IntegrationMicrosegmentation platform integration for network segmentation policy management.
• GuidePoint Security LLCcoreChannel Partner/ Reseller/ Distributor2025 Americas Partner Award winner recognized for delivering business value and helping customers manage complex hybrid network environments.
• Optiv Security Inc.coreChannel Partner/ Reseller/ Distributor2025 Americas Partner Award winner recognized for delivering business value and helping customers manage complex hybrid network environments.
• World Wide Technology LLCcoreChannel Partner/ Reseller/ Distributor2025 Americas Partner Award winner recognized for delivering business value and helping customers manage complex hybrid network environments.
• Trace3 LLCcoreChannel Partner/ Reseller/ Distributor2025 Americas Partner Award winner recognized for delivering business value and helping customers manage complex hybrid network environments.
• NTT DOCOMO BUSINESS DATA Inc.coreChannel Partner/ Reseller/ Distributor2025 APAC Partner Award winner recognized for delivering business value and helping customers manage complex hybrid network environments.
• ComputacentercoreChannel Partner/ Reseller/ Distributor2025 EMEA Partner Award winner recognized for delivering business value and helping customers manage complex hybrid network environments.
• NTT DATA (UK & Ireland)coreChannel Partner/ Reseller/ Distributor2025 EMEA Partner Award winner recognized for delivering business value and helping customers manage complex hybrid network environments.
• Infinigate GermancoreChannel Partner/ Reseller/ Distributor2025 EMEA Partner Award winner recognized for delivering business value and helping customers manage complex hybrid network environments.

Scale indicators13 records

Recent moves6 records

Expansion highlights6 records

Direct peers

• FireMon: FireMon is the closest direct competitor to Tufin in network security policy management, offering firewall rule analysis, change automation, and continuous compliance across hybrid environments for large enterprises—virtually identical buyer, use case, and product category.
• AlgoSec: AlgoSec provides application-centric network security policy management, firewall change automation, and risk analysis across hybrid cloud and multi-vendor estates, competing head-to-head with Tufin's SecureChange+ and Enterprise tiers in regulated enterprises.

Broad incumbents

• Palo Alto Networks (Panorama / Strata Cloud Manager): Palo Alto is a core Tufin technology partner but also a broad incumbent competitor; Panorama and Strata Cloud Manager deliver native multi-vendor and Palo Alto-centric policy management, segmentation, and compliance as part of a much larger security platform, threatening Tufin in single-vendor or Palo Alto-heavy accounts.
• Cisco (Defense Orchestrator / Secure Firewall Management Center): Cisco bundles firewall and policy management across its Security Cloud and on-prem FMC products, covering many of Tufin's use cases inside a much broader networking and security portfolio, particularly for Cisco-centric enterprises.
• Check Point Software (Infinity Portal / SmartConsole): Check Point is both a Tufin integration partner and broad incumbent, offering unified security policy management across its Infinity architecture that overlaps with Tufin's visibility and change automation for Check Point-heavy estates.
• Fortinet (FortiManager / FortiAnalyzer): Fortinet provides centralized firewall management and analytics via FortiManager and FortiAnalyzer, serving as a broader incumbent alternative for customers standardized on Fortinet's ecosystem.
• Juniper Networks (Security Director Cloud): Juniper's Security Director Cloud offers policy management across its SRX and Mist wired/wireless portfolio, competing as a broader incumbent in Juniper-centric enterprise and service provider networks that Tufin also targets.

Emerging players

• Illumio: Illumio is a Tufin integration partner for microsegmentation but an emerging competitor in Zero Trust segmentation and exposure management; its CloudSecure and ASP platforms increasingly overlap with Tufin's posture and segmentation use cases.
• Akamai (Guardicore Segmentation): Akamai's Guardicore Segmentation is a newly announced Tufin Zero Trust partner but also a competing microsegmentation and visibility offering; Akamai's global platform gives it scale advantages in hybrid workload segmentation.
• vArmour: vArmour is an emerging application-aware microsegmentation and network policy management vendor that competes with the policy and posture side of Tufin's portfolio in hybrid cloud and financial services accounts.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks5 records

Key highlights7 records

Customer concentration

• Xx.com/tufintech
• YouTubeyoutube.com/@tufin
• Facebookfacebook.com/Tufintech
• LinkedInlinkedin.com/company/tufin-technologies
• Instagraminstagram.com/lifeattufin

Compliance8 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles16 records

Subsidiaries2 records

Funding overview

Funding rounds6 records

Investors6 records

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A1 record

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Tufin