Skybox Security Suite vs Tufin Orchestration Suite comparison

Skybox Security and Tufin are both solutions in the Firewall Security Management category. Skybox Security is ranked #7 with an average rating of 7.3, while Tufin is ranked #2 with an average rating of 8.0. Skybox Security holds a 10.8% mindshare in Firewall Security Management, compared to Tufin’s 21.8% mindshare. Additionally, 82% of Skybox Security users are willing to recommend the solution, compared to 91% of Tufin users who would recommend it.

Skybox Security Suite

Read 35 Skybox Security Suite reviews

3,183 Views
2,387 Comparison Views

82% willing to recommend

Tufin Orchestration Suite

Read 183 Tufin Orchestration Suite reviews

8,202 Views
4,775 Comparison Views

91% willing to recommend

Skybox Security Suite

Tufin Orchestration Suite

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Jan 8, 2025

Tufin Orchestration Suite and Skybox Security Suite are competitors in network security management. Tufin holds a slight advantage in automating firewall rule management, whereas Skybox excels in vulnerability management and threat context correlation.

Features: Tufin Orchestration Suite offers automation of firewall management with SecureTrack and SecureChange, allows comprehensive policy audits across multiple vendors, and provides enhanced policy visualization tools beneficial for DevOps workflows. Skybox Security Suite focuses on providing network assurance, advanced threat context correlation, and robust vulnerability management, which offer enterprises broad threat exposure visibility.

Room for Improvement: Tufin Orchestration Suite should improve its user interface and data visualization capabilities while enhancing support for devices from additional vendors. Skybox Security Suite could benefit from advancing its network modeling accuracy and expanding integration capabilities with more security tools.

Ease of Deployment and Customer Service: Tufin offers on-premises and hybrid cloud deployment options, emphasizing strong customer support with hands-on assistance. Skybox provides deployment flexibility, targeting a wider multi-cloud framework. Both solutions ensure robust customer service, although Tufin is recognized for more direct client involvement.

Pricing and ROI: Tufin Orchestration Suite is a premium option with high licensing costs, justified by extensive features and quick return on investment through timesaving in firewall management. Skybox Security Suite, while also expensive, provides a scalable and cost-effective solution for comprehensive network visibility and risk management, contributing to favorable ROI by streamlining operations.

To learn more, read our detailed Skybox Security Suite vs. Tufin Orchestration Suite Report (Updated: January 2025).

Buyer's Guide

Skybox Security Suite vs. Tufin Orchestration Suite

January 2025

Download the complete report

Helped 831,158 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Skybox Security Suite

Ranking in Firewall Security Management

7th

Average Rating

7.6

Reviews Sentiment

7.2

Number of Reviews

Ranking in other categories

Vulnerability Management (43rd)

Tufin Orchestration Suite

Ranking in Firewall Security Management

2nd

Average Rating

8.0

Reviews Sentiment

7.3

Number of Reviews

183

Ranking in other categories

Container Security (24th)

Mindshare comparison

As of January 2025, in the Firewall Security Management category, the mindshare of Skybox Security Suite is 10.8%, up from 10.4% compared to the previous year. The mindshare of Tufin Orchestration Suite is 21.8%, up from 21.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Firewall Security Management

Featured Reviews

NenadMijatovic

Director of Sales at S4E Serbia

Efficient in vulnerability management, stable and easy to use

Vulnerability management is the most valuable feature because it lets you focus on the most critical vulnerabilities. That's the important thing. Here in Serbia, there are not so many companies that have too many firewalls inside one company. So, they usually don't buy this model for Firewall Assurance unless there is some compliance. So you can prove that your firewalls are compliant. So, that model is not so important here in Serbia. It's for bigger companies. So, they usually buy network assurance to build the model of the network and vulnerability management to focus on the most important vulnerabilities. Moreover, Skybox can collect data for many vendors. From the endpoint protection vendors to the network equipment vendors to other security vendors. So, it supports more than one hundred vendors to collect data from them.

Read full review

MithatBulut

Network Security Engineer at Tom

New employees can quickly grasp the various IPs, devices, and the network's logical and physical

Tufin is primarily used to orchestrate and manage network traffic and firewall devices. It is specifically useful for implementing firewall policies and handling requests from clients that require policy updates or changes Tufin simplifies understanding network topology. New employees can quickly…

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"It can be integrated with a vulnerability management solution. When a client comes, apart from pitching network and firewall change management, we are recommending having vulnerability management. So, rather than just having the audit of the firewall, they can integrate it with their vulnerability management solution, which could be Rapid7, Qualys, or any other solution. This provides them the most value out of the platform. That is the way we are approaching our customer base."

"We use Network Assurance for network visualisation and troubleshooting."

"Correlates logs and threats and prioritizes; provides network maps;p provides change result context and resulting vulnerability."

"It has a good policy management feature and can provide customers with good quality outputs."

"I am impressed with the tool's change management, firewall and network assurance."

"The initial setup process was easy."

"This type of tool does a great job of reaching into those other devices producing risk recommendations, compliance recommendations, and a single plane of glass to do your queries, so you can find where these rules might exist."

"Change Manager is most important because of the impact on each other of a network change or a firewall change. We want to understand this and to know, beforehand, what the impact of a change will be. We are a large network so that is a very important tool."

More Skybox Security Suite pros

"Valuable features include a central pane of management for all the firewalls and the ability to do queries on the rules and understand in which files the rules are configured."

"The automated reporting on a regular basis is helping us to be compliant with legal requirements."

"The technical support is pretty good."

"The best feature for me is being able to look up objects within all of our policies, because we have a little over 12,000 rules and over 30,000 objects. When one person says, 'Hey, where's my server?' I can just go to Tufin and say, 'Hey, where is that server?' and very quickly it tells you where it is, what policy it's on. That is a life saver."

"The time that we require to makes changes has been reduced from weeks to days."

"A customer is able to submit a request for access and Tufin will automatically analyze the system to find out where the rule needs to go, and then design the rule for you."

"Our engineers save quite a bit of time that was previously spent on manual processes."

"Tufin allows our say junior guys to learn how to view policies. It gives them a tool that will help them consolidate and optimize."

More Tufin Orchestration Suite pros

Cons

"There is room for improvement in the technical support."

"The vendor's support is terrible."

"There are multiple dashboards but no custom dashboard. It would be good to include a custom dashboard so that we can actually choose which field and what kinds of things we want to look at."

"Modifications and the deletion of existing policies are currently unavailable."

"During implementation, we realised approximately 30 devices were not supported by the Skybox platform."

"There is room for improvement in the product's user interface. It could be more user-friendly."

"The most recent update was not tested with all of the vendors before it was released, so some of the features are misbehaving."

"Skybox Security Suite's attack surface management feature needs improvement."

More Skybox Security Suite cons

"We would like to see automation metrics, from a reporting standpoint. We would also like to see automation of site-to-site VPN tunnels. We would like to see automation of Check Point application-based firewall rules."

"The hardest piece is getting the matrix built."

"We had a discussion in the Customer Advisory Board yesterday around use of SecureChange. We would like to have an opportunity for an engineer to choose if you want to make or take the policy which has been suggested by the designer functionality, making it more human readable or less human readable (more or less granular). This would be huge for the customers who are using SecureChange. They said this was one of their issues with it, especially for anything that was going into a regulator's or auditor's hands. The more human readable, the better that it would be, and this would definitely be applicable to our industry. It sounds like they are working on this issue, or they took the feedback, but that would be a big one for us in being able to make the jump to SecureChange."

"The older version that we have doesn't support some newer firewall vendors."

"At least in our environment, the dynamic learning of the topology needs improvement."

"We need to implement micro-segmentation in our infrastructure, and we are using Cisco ACI. However, we are facing an issue with Tufin, as it does not currently support integration with ACI for micro-segmentation, even though it is advertised as such."

"While Tufin is suitable for small businesses, issues can arise in larger enterprises, particularly concerning policy-based forwarding and NAT traffic."

"One feature that is missing is the ability to assign a step in the workflow to a specific user at a specific time, based on how the previous steps of the workflow have been handled."

More Tufin Orchestration Suite cons

Pricing and Cost Advice

"The licensing fee is paid yearly and is approximately $100,000."

"Fully understand the total cost of ownership. They have gone to a new model where you have to replace the hardware every X amount of years at a very substantial cost and fully understand your intended number of nodes. To operate a firewall, you have to pay two licenses, a firewall node and a network node. If you are a reasonable-sized organization, this gets expensive very quickly."

"I think for the cost, what we got definitely is worth it. The only caution I would give is that whenever you license for Firewall Assurance at the same time, for some weird reason, you have to get one Network Assurance license, just to manage one firewall. That's a little bit of overkill. But otherwise, in general, the pricing is fairly okay."

"I would rate the tool's pricing an eight out of ten."

"It's expensive."

"Skybox Security Suite has indeed helped us reduce costs. The prices of AlgoSec and Skybox Security Suite are approximately 50 percent different. The tool may require special vendor support from abroad, resulting in slightly higher costs. Its pricing is in the middle."

"I think the price is fair."

"The price is not expensive."

More Skybox Security Suite pricing and cost advice

"The seller of Tufin, when I wanted the solution, was very flexible because the cost on the lease was very high in Latin America. So, he was able to reduce the cost."

"For us, the pricing was six out of ten, with ten being the most expensive and one being the cheapest."

"We have seen ROI in operational aspects, in terms of how long it takes to resolve incidences which arise."

"Our licensing fees are approximately $100,000 USD yearly."

"There are ways to deploy the license to different types of firewall. However, if we decide to change the physical brand of the firewall, we need to go back to Tufin and modify the licensing. This is a hassle."

"I believe our cost is more than $100,000 per year."

"We haven't purchased the license yet for SecureChange. We do have plans to buy it next year."

"Our licensing costs are pretty low. We were grandfathered in, so we are at about $35,000 per year."

More Tufin Orchestration Suite pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Firewall Security Management solutions are best for your needs.

See recommendations

831,158 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

18%

Financial Services Firm

16%

Manufacturing Company

11%

Government

Financial Services Firm

20%

Computer Software Company

16%

Manufacturing Company

10%

Retailer

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about Skybox Security Suite?

Overall, the tool has helped us reduce risks. If any step is missing, it's easier for my team or engineers to identify it. The tool provides accurate recommendations based on the data. Its integrat...

See all answers

What is your experience regarding pricing and costs for Skybox Security Suite?

Skybox Security Suite has indeed helped us reduce costs. The prices of AlgoSec and Skybox Security Suite are approximately 50 percent different. The tool may require special vendor support from abr...

See all answers

What needs improvement with Skybox Security Suite?

There is room for improvement in the product's user interface. It could be more user-friendly.

See all answers

What do you like most about Tufin?

The most valuable feature of Tufin is security auditing. We are able to check the rules and compliance of the company, for example, what is allowed or not. We are able to check the rules over diffe...

See all answers

What is your experience regarding pricing and costs for Tufin?

Tuffin is expensive, and we have to explain to our customers the benefit for them to purchase. If we explain the benefits in the correct way they do not mind the price. We typically do costing for ...

See all answers

What needs improvement with Tufin?

The reporting function could improve in Tufin. For our clients with companies that have strong compliance, reporting privacy data is mostly a problem. In the IT department, private data needs a fun...

See all answers

Comparisons

AlgoSec vs Skybox Security Suite

Compared 34% of the time

FireMon Security Manager vs Skybox Security Suite

Compared 15% of the time

RedSeal vs Skybox Security Suite

Compared 5% of the time

Palo Alto Networks Panorama vs Skybox Security Suite

Compared 4% of the time

Qualys VMDR vs Skybox Security Suite

Compared 3% of the time

More Skybox Security Suite Competitors

AlgoSec vs Tufin Orchestration Suite

Compared 36% of the time

FireMon Security Manager vs Tufin Orchestration Suite

Compared 29% of the time

Palo Alto Networks Panorama vs Tufin Orchestration Suite

Compared 6% of the time

ManageEngine Firewall Analyzer vs Tufin Orchestration Suite

Compared 4% of the time

Opinnate vs Tufin Orchestration Suite

Compared 2% of the time

More Tufin Orchestration Suite Competitors

Product Reports

Buyer's Guide

Skybox Security Suite

December 2024

Download Skybox Security Suite product report

Buyer's Guide

Tufin Orchestration Suite

December 2024

Download Tufin Orchestration Suite product report

Also Known As

No data available

Tufin SecureCloud

Learn More

Skybox Security

Tufin

Overview

The Skybox Security Suite platform combines firewall and network device data with vulnerability and threat intelligence, prioritizing security issues in the context of your unique environment. Powerful attack vector analytics reduce response times and risks, bringing firewall, vulnerability and threat management processes for complex networks under control.

Firewall Assurance brings all firewalls into one normalized view, continuously monitoring policy compliance, optimizing firewall rulesets and finding attack vectors that others miss. Skybox covers the most comprehensive list of firewall vendors, complex rulesets, even virtual and cloud-based firewalls. With proven scalability in 1,500+ firewall deployments, Firewall Assurance keeps rules optimized and ensures changes don’t introduce new risk.

Gain total visibility of the vulnerabilities in your attack surface without waiting for a scan. Leverage Skybox Research Lab's vulnerability and threat intelligence, and automatically correlate it to your unique environment. With network modeling and advanced simulations, pinpoint exposed vulnerabilities and other attack vectors. And use context to prioritize vulnerabilities in terms of actual risk and respond to threats with accuracy and efficiency.

For more information or to view a demo, visit www.skyboxsecurity.com.

Tufin enables organizations to automate their security policy visibility, risk management, provisioning and compliance across their multi-vendor, hybrid environment. Customers gain visibility and control across their network, ensure continuous compliance with security standards and embed security enforcement into workflows and development pipelines.

Sample Customers

ADP, Blue Cross Blue Shield, BT, USAID, Delta Dental, EDF Energy, EMC, HSBC, Johnson & Johnson

3M, AT&T, Blue Cross Blue Shield, BNP Parabas, ConocoPhillips, Deutsche Bank, GE, IBM, Pfizer, United States Postal Service

Buyer's Guide

Skybox Security Suite vs. Tufin Orchestration Suite

January 2025

Free Report: Skybox Security Suite vs. Tufin Orchestration Suite

Find out what your peers are saying about Skybox Security Suite vs. Tufin Orchestration Suite and other solutions. Updated: January 2025.

DOWNLOAD NOW

831,158 professionals have used our research since 2012.

See our Skybox Security Suite vs. Tufin Orchestration Suite report.

See our list of best Firewall Security Management vendors.

We monitor all Firewall Security Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.