Tufin

Tufin builds a single control plane that lets security teams see and govern network security policy across equipment from many different vendors. Its focus today is on keeping policy under control as automated and AI-driven processes make more changes to enterprise networks than people can review by hand.

Services

• Unified network visibility: a topology map covering routers, firewalls and SASE as well as AWS, Azure and Google Cloud.
• Misconfiguration and drift prevention: continuous monitoring of firewall, cloud, SASE and microsegmentation policy to close lateral movement paths.
• Policy clean-up: analysis that finds redundant, risky and outdated rules and enforces least-privilege access.
• Automated change control: governance of connectivity changes across complex hybrid networks.
• Continuous compliance: ongoing checks of policy against internal standards and frameworks such as PCI DSS, HIPAA, SOX, DORA and NIST to ease audits.

Customers and markets

Tufin serves enterprise security teams running hybrid networks that mix on-premises firewalls, SASE services and public cloud. It says thousands of customers use its software.

Key facts

• Platforms covered: multi-vendor firewalls, routers, SASE, AWS, Azure and Google Cloud
• Compliance frameworks: PCI DSS, HIPAA, SOX, DORA and NIST