Skybox Security Suite vs Tufin Orchestration Suite comparison

Skybox Security Suite vs. Tufin Orchestration Suite

Download the complete report

Helped 842,296 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Skybox Security Suite

Ranking in Firewall Security Management

7th

Average Rating

7.6

Reviews Sentiment

7.2

Number of Reviews

Ranking in other categories

Vulnerability Management (44th)

Tufin Orchestration Suite

Ranking in Firewall Security Management

2nd

Average Rating

8.0

Reviews Sentiment

7.3

Number of Reviews

183

Ranking in other categories

No ranking in other categories

Mindshare comparison

As of March 2025, in the Firewall Security Management category, the mindshare of Skybox Security Suite is 10.9%, up from 10.8% compared to the previous year. The mindshare of Tufin Orchestration Suite is 22.0%, up from 20.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Firewall Security Management

Featured Reviews

NenadMijatovic

Director of Sales at S4E Serbia

Efficient in vulnerability management, stable and easy to use

Vulnerability management is the most valuable feature because it lets you focus on the most critical vulnerabilities. That's the important thing. Here in Serbia, there are not so many companies that have too many firewalls inside one company. So, they usually don't buy this model for Firewall Assurance unless there is some compliance. So you can prove that your firewalls are compliant. So, that model is not so important here in Serbia. It's for bigger companies. So, they usually buy network assurance to build the model of the network and vulnerability management to focus on the most important vulnerabilities. Moreover, Skybox can collect data for many vendors. From the endpoint protection vendors to the network equipment vendors to other security vendors. So, it supports more than one hundred vendors to collect data from them.

Read full review

MithatBulut

Network Security Engineer at Tom

New employees can quickly grasp the various IPs, devices, and the network's logical and physical

Tufin is primarily used to orchestrate and manage network traffic and firewall devices. It is specifically useful for implementing firewall policies and handling requests from clients that require policy updates or changes Tufin simplifies understanding network topology. New employees can quickly…

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Skybox deployment is simple, and it's very useful."

"Change Manager is most important because of the impact on each other of a network change or a firewall change. We want to understand this and to know, beforehand, what the impact of a change will be. We are a large network so that is a very important tool."

"Aside from Firewall Assurance, we are using Network Assurance and Change Manager for an overview of the whole network and for documenting requests and the recertification of the ruleset."

"The solution's most valuable and unique assets are the vulnerability management and change management solutions because they identify mistakes in the network before implementation which reduces risks."

"The most valuable feature is firewall management."

"The port division management was the solution's most valuable aspect for our organization."

"The most impressive feature is optimization and clean-up."

"It can be integrated with a vulnerability management solution. When a client comes, apart from pitching network and firewall change management, we are recommending having vulnerability management. So, rather than just having the audit of the firewall, they can integrate it with their vulnerability management solution, which could be Rapid7, Qualys, or any other solution. This provides them the most value out of the platform. That is the way we are approaching our customer base."

More Skybox Security Suite pros

"The most valuable feature of this solution is that it reduces both the time required and the number of errors when making changes."

"I had been impressed with the depth of capabilities within SecureTrack, particularly, in terms of generating insights for a user and firewall operator. With SecureTrack, I've been impressed with the level of flexibility with workflow design and its ability to generate different work streams and flows through the tool that are customized for our organization processes."

"It offers automation capabilities that are very helpful, especially for network security orchestration and applying policies."

"SecureChange is the most interesting part. It all comes down to having the user request firewall access and SecureChange, based on workflows, takes care of it, sending two or three emails to the business approvers. With one click, you can automate a firewall rule."

"One of the biggest quick wins that we had with Tufin was cleaning up our firewall policies and rules. We cleaned out a lot of rules which helped our devices, longevity-wise, as well as speed-wise."

"I like the deployment and management of this solution."

"It provides a comprehensive overview of what our network looks like in terms of what is allowed and what is not, then how the traffic' is flowing with the Network Topology Map."

"The reporting on offer is very good. Tufin makes nice reports."

More Tufin Orchestration Suite pros

Cons

"There is room for improvement in the technical support."

"The solution was quite technical. It would be easier to manage if the solution was more specific about aspects of the solution and provided more advisory around how to use it effectively. It would help users a lot if they were more clear about everything."

"The support could be improved."

"They are not satisfied with the complexity of the solution and the price."

"The tool does not offer options for customization."

"There is room for improvement in the product's user interface. It could be more user-friendly."

"Skybox Security Suite's attack surface management feature needs improvement."

"The cloud site could be better. They should provide some use cases to help users."

More Skybox Security Suite cons

"The metrics need improvement. They need more consistency or understanding of automation, along lines of customization of automation."

"The product should integrate with the UTM features."

"A limitation right now for compressed firewalls is the limited ability to see above a site level in terms of the Topology Mapping in the policy display. While Tufin's actively working on a solution, or at least they have this in the queue, from being able to view this on a higher level and how all of our site networks are connected, this ability would be useful, as we expect to have these compressed firewalls in place for quite some time."

"I would like to see more expansion into the cloud and documentation needs improvement. When I try to do something new in the product, the documentation is no help. Something's written there, but it's not enough to help you do what you want to do."

"USP does not support VPNs, which is a big thing for us, so we haven't been able to utilize it."

"The GUI is limited with respect to how much you can develop and visualize the process."

"The pricing should be reviewed, as it is a little too high."

"They are sort of at the pilot stage on some of their products. I saw the Orca and Iris products yesterday. My initial impression of these products were that they were good products, but I felt like some of their features overlapped with SecureTrack and SecureChange, which they are already doing. So, I just wondered what direction they're going in? I understand that they are cloud products, but are these security products going to overlap each other's features at some point? This is my initial concern."

More Tufin Orchestration Suite cons

Pricing and Cost Advice

"I think the price is fair."

"The pricing is high, and the licensing model needs more flexibility."

"I rate the pricing two on a scale of one to ten, where one is very expensive, and ten is cost-effective."

"The solution is based on a subscription model for annual licenses."

"Fully understand the total cost of ownership. They have gone to a new model where you have to replace the hardware every X amount of years at a very substantial cost and fully understand your intended number of nodes. To operate a firewall, you have to pay two licenses, a firewall node and a network node. If you are a reasonable-sized organization, this gets expensive very quickly."

"When compared with other companies, the license is more costly."

"Licensing is normally on a yearly basis. There may also be a perpetual license. Normally, the customers ask for a lower price. If you want to sell more, you have to think about it."

"Skybox Security Suite has indeed helped us reduce costs. The prices of AlgoSec and Skybox Security Suite are approximately 50 percent different. The tool may require special vendor support from abroad, resulting in slightly higher costs. Its pricing is in the middle."

More Skybox Security Suite pricing and cost advice

"There are ways to deploy the license to different types of firewall. However, if we decide to change the physical brand of the firewall, we need to go back to Tufin and modify the licensing. This is a hassle."

"We haven't purchased the license yet for SecureChange. We do have plans to buy it next year."

"We have seen ROI from the side of operations, and we'll probably get to more of that as time goes on. However it took a while to get to that point."

"Our licensing fees are approximately $100,000 USD yearly."

"It is expensive, but as compared to other players, it's more or less okay. Their pricing is not very transparent. This is my biggest point regarding Tufin. I've never seen a price list or something like that. It's always individual, and in many cases, it's very confusing to know what is the base and what is the price."

"Tufin and AlgoSec were pretty much in the competitive price range, but this one provided us better integration into the Check Point environment."

"This solution helped us to reduce the time it takes to make changes. We used to spend up to an hour to do a change, and now, it's around five minutes."

"There is a permanent license for devices, but it's not relative to a device itself. Once you purchase 10 licenses for virtual appliances or virtual context, you can put them into different virtual firewalls, but you can reuse these licenses for other devices if you don't need them for the old ones."

More Tufin Orchestration Suite pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Firewall Security Management solutions are best for your needs.

See recommendations

842,296 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

18%

Financial Services Firm

17%

Manufacturing Company

10%

Government

Financial Services Firm

18%

Computer Software Company

15%

Manufacturing Company

10%

Retailer

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about Skybox Security Suite?

Overall, the tool has helped us reduce risks. If any step is missing, it's easier for my team or engineers to identify it. The tool provides accurate recommendations based on the data. Its integrat...

What is your experience regarding pricing and costs for Skybox Security Suite?

Skybox Security Suite has indeed helped us reduce costs. The prices of AlgoSec and Skybox Security Suite are approximately 50 percent different. The tool may require special vendor support from abr...

What needs improvement with Skybox Security Suite?

There is room for improvement in the product's user interface. It could be more user-friendly.

What do you like most about Tufin SecureCloud?

The most valuable feature of Tufin is security auditing. We are able to check the rules and compliance of the company, for example, what is allowed or not. We are able to check the rules over diffe...

What needs improvement with Tufin SecureCloud?

The design needs improvement, particularly in recognizing target devices and target files. Additionally, there's a need for an improved network map.

What is your primary use case for Tufin SecureCloud?

My primary use case involves applying firewall policies faster from a central point. Additionally, I would like to use it to generate reports, but this hasn't occurred yet.

AlgoSec vs Skybox Security Suite

Comparisons

Compared 33% of the time

FireMon Security Manager vs Skybox Security Suite

Compared 14% of the time

RedSeal vs Skybox Security Suite

Compared 5% of the time

Palo Alto Networks Panorama vs Skybox Security Suite

Compared 4% of the time

Qualys VMDR vs Skybox Security Suite

Compared 3% of the time

More Skybox Security Suite Competitors

AlgoSec vs Tufin Orchestration Suite

Compared 36% of the time

FireMon Security Manager vs Tufin Orchestration Suite

Compared 30% of the time

Palo Alto Networks Panorama vs Tufin Orchestration Suite

Compared 6% of the time

ManageEngine Firewall Analyzer vs Tufin Orchestration Suite

Compared 4% of the time

Opinnate vs Tufin Orchestration Suite

Compared 2% of the time

More Tufin Orchestration Suite Competitors

Product Reports

Skybox Security Suite

Download Skybox Security Suite product report

Tufin Orchestration Suite

Download Tufin Orchestration Suite product report

Also Known As

No data available

Tufin SecureCloud

Overview

Skybox Security Suite provides comprehensive tools for network and firewall compliance, vulnerability management, and change management, with a focus on risk reduction and network optimization.

Skybox Security Suite supports over 130 vendors with massive scalability and seamless integration, notably with Nessus and Qualys. Its features include network path analysis and offline attack simulation, which enhance management effectiveness. Despite its robust offering, improvements are needed in its UI, web interface, reporting detail, and customization. Automation, orchestration, and device policy provisioning require better support, and integration with tools like Rapid7 could be improved. Enhancements in firewall configuration checks, cloud connectivity, pricing, and marketing awareness are also called for, alongside a transition from Java GUI to a consistent web-based system.

What Are Key Features of Skybox Security Suite?

Network Assurance: Enhances visibility and optimization of network paths.
Firewall Assurance: Facilitates firewall rule set audits for compliance.
Vulnerability Management: Offers path detection and risk prioritization.
Compliance Management: Ensures adherence to standards like PCI.
Change Management: Simplifies management across extensive infrastructures.

What Benefits and ROI Can Users Expect?

Scalability: Supports numerous vendors and large-scale deployments.
Integration: Seamlessly connects with tools like Nessus and Qualys.
Risk Reduction: Improves security across network infrastructures.
Simplified Management: User-friendly interface and reporting tools enhance usability.
Network Optimization: Streamlines processes and improves performance.

Skybox Security Suite is commonly used in industries requiring strict compliance like finance and healthcare. Firms employ it for firewall audits, enhancing network visibility, and managing configurations against standards such as PCI, ensuring security and policy compliance across expansive networks.

Tufin

Tufin enables organizations to automate their security policy visibility, risk management, provisioning and compliance across their multi-vendor, hybrid environment. Customers gain visibility and control across their network, ensure continuous compliance with security standards and embed security enforcement into workflows and development pipelines.

Tufin

Sample Customers

ADP, Blue Cross Blue Shield, BT, USAID, Delta Dental, EDF Energy, EMC, HSBC, Johnson & Johnson

3M, AT&T, Blue Cross Blue Shield, BNP Parabas, ConocoPhillips, Deutsche Bank, GE, IBM, Pfizer, United States Postal Service

Skybox Security Suite vs. Tufin Orchestration Suite