Try our new research platform with insights from 80,000+ expert users

Skybox Security Suite vs Tufin Orchestration Suite comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Feb 25, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Skybox Security Suite
Ranking in Firewall Security Management
7th
Average Rating
7.6
Reviews Sentiment
7.2
Number of Reviews
35
Ranking in other categories
Vulnerability Management (41st)
Tufin Orchestration Suite
Ranking in Firewall Security Management
2nd
Average Rating
8.0
Reviews Sentiment
7.3
Number of Reviews
183
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of April 2025, in the Firewall Security Management category, the mindshare of Skybox Security Suite is 11.0%, up from 10.8% compared to the previous year. The mindshare of Tufin Orchestration Suite is 22.0%, up from 20.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Firewall Security Management
 

Featured Reviews

NenadMijatovic - PeerSpot reviewer
Efficient in vulnerability management, stable and easy to use
Vulnerability management is the most valuable feature because it lets you focus on the most critical vulnerabilities. That's the important thing. Here in Serbia, there are not so many companies that have too many firewalls inside one company. So, they usually don't buy this model for Firewall Assurance unless there is some compliance. So you can prove that your firewalls are compliant. So, that model is not so important here in Serbia. It's for bigger companies. So, they usually buy network assurance to build the model of the network and vulnerability management to focus on the most important vulnerabilities. Moreover, Skybox can collect data for many vendors. From the endpoint protection vendors to the network equipment vendors to other security vendors. So, it supports more than one hundred vendors to collect data from them.
MithatBulut - PeerSpot reviewer
New employees can quickly grasp the various IPs, devices, and the network's logical and physical
Tufin is primarily used to orchestrate and manage network traffic and firewall devices. It is specifically useful for implementing firewall policies and handling requests from clients that require policy updates or changes Tufin simplifies understanding network topology. New employees can quickly…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It shows me a client's or an organization's entire network. I can see everything."
"We are currently working on rule review and compliance. The logging features are good."
"The solution offers very nice dashboards and they've recently added a very good Java-based web interface."
"instead of asking for firewall rules which may or may not be relevant, or could already be there, or could be over-permissioned, Skybox can be used to map out the resources that that application is going to use and provide the exact rules that an application would require to function correctly. If the traffic isn't able to flow for the application, if it's erring out, Skybox can be used to troubleshoot that and say, "All right, where is the traffic being stopped and why, and how do I fix that.""
"The most valuable features of Skybox Security Suite are all the modules that are provided, such as vulnerability assessments and network, and firewall assessments."
"The ability to appropriately prioritize vulnerabilities inside the environment, and then to have visibility into the traffic and rule sets of an organization, are two of the top capabilities that I recommend. Skybox is the only one that does both of those in a single platform."
"Security review is the most important feature, because it offers a single pane of glass to analyze multiple firewalls."
"Robust modules can be used for different parts of network security."
"The clarity around the auditing provides the most value for us."
"The most valuable feature is the reporting of our risk poster in our firewall."
"Tufin is our audit trail for all changes. We have to be PCI compliant, and it's the tool we go to for enforcing PCI on the network side."
"The Automatic Policy Generator saves time because we are able to identify the required policy when a client doesn't know what he needs."
"The most valuable features are the GUI interface and the API."
"The product is good at auditing the changes that we make in our environment."
"Tufin has made handling firewall rule request tickets more centralized and easier to manage."
"Our engineers save quite a bit of time that was previously spent on manual processes."
 

Cons

"The vendor's support is terrible."
"It's expensive."
"The solution needs to add more automation and orchestration capabilities. Those features would make the solution much stronger."
"They are not satisfied with the complexity of the solution and the price."
"Reporting. A lot of the reports, out of the box, are limited to a certain number of either configuration violations or access rule violations. So when you first set up a new firewall to be monitored by Skybox, you don't get a real full report. You have to really tweak it to get everything."
"There is room for improvement in pricing. It would be better, especially if a customer bought all four modules."
"There is room for improvement in the product's user interface. It could be more user-friendly."
"If anything could be improved it would be staying on top of the collector scripts, but I understand that's a very tough challenge."
"I would like to see more about the cloud in the next release. They need a large plan to deploy the cloud into the solution and a way to implement it."
"The interface is like a 1990s kind of thing. It's a little ugly. There are many things that you cannot tweak, little things like the column width and how you display the information. You end up exporting everything to an Excel file and doing your work there."
"We need to implement micro-segmentation in our infrastructure, and we are using Cisco ACI. However, we are facing an issue with Tufin, as it does not currently support integration with ACI for micro-segmentation, even though it is advertised as such."
"I needed more help getting the product to work in the lab."
"I would rate their reports as a four out of ten. I don't like the way that they are shown. It is too hard to export and send them to our clients."
"They are a little bit behind on some of their support for the Palo Alto firewall platform. I'd like to see that catch up, specifically around importing certain objects."
"This solution increases the time it takes to make changes."
"We will be using the appliance based product, which cannot be scaled as much. It is a limitation in the hardware."
 

Pricing and Cost Advice

"Licensing is normally on a yearly basis. There may also be a perpetual license. Normally, the customers ask for a lower price. If you want to sell more, you have to think about it."
"When compared with other companies, the license is more costly."
"Currently, the licensing costs me about $300 USD for the year. This is a huge amount for my environment."
"The price of the Skybox Security Suite can be expensive."
"The solution is based on a subscription model for annual licenses."
"Skybox comes with extra licenses and has a change management license. The licenses are expensive, but they come with extra value."
"I've seen the pricing of every solution on the market. When you compare apples to apples, where Skybox becomes exceedingly expensive is if you look at it compared to something like FireMon that only does a fraction of what Skybox does. But if you include everything that Skybox does, it becomes way more expensive than the competition, but you're also not comparing apples to apples. If you look at FireMon, and you look at like just the firewall assurance piece, they are fairly comparable and, actually, Skybox comes in a little bit cheaper in some cases, depending on which product you're looking at."
"The product's pricing is excellent value. In terms of licensing, make sure you understand your network components, all your hops through your network, thoroughly, before you decide on the total cost. If you want to do point-to-point flow analysis and such, you need to have the configuration of all the devices in between point A and point B. A lot of people don't realize all their network components until they start using this product."
"Our engineers are spending less time on manual processes: 20 to 30 hour plus."
"Licensing is available in both perpetual and subscription models, and it appears to be good for our scalable environments."
"While licensing varies greatly, it is about $50,000 a year."
"We have seen ROI from the side of operations, and we'll probably get to more of that as time goes on. However it took a while to get to that point."
"I believe our cost is more than $100,000 per year."
"The solution is more reasonably priced than its competitors."
"We did look at less expensive solutions than Tufin, but being a corporation, this solution made sense."
"The pricing is reasonable."
report
Use our free recommendation engine to learn which Firewall Security Management solutions are best for your needs.
844,944 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
18%
Financial Services Firm
17%
Manufacturing Company
10%
Energy/Utilities Company
6%
Financial Services Firm
19%
Computer Software Company
15%
Manufacturing Company
10%
Retailer
5%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about Skybox Security Suite?
Overall, the tool has helped us reduce risks. If any step is missing, it's easier for my team or engineers to identify it. The tool provides accurate recommendations based on the data. Its integrat...
What is your experience regarding pricing and costs for Skybox Security Suite?
Skybox Security Suite has indeed helped us reduce costs. The prices of AlgoSec and Skybox Security Suite are approximately 50 percent different. The tool may require special vendor support from abr...
What needs improvement with Skybox Security Suite?
There is room for improvement in the product's user interface. It could be more user-friendly.
What do you like most about Tufin SecureCloud?
The most valuable feature of Tufin is security auditing. We are able to check the rules and compliance of the company, for example, what is allowed or not. We are able to check the rules over diffe...
What needs improvement with Tufin SecureCloud?
The design needs improvement, particularly in recognizing target devices and target files. Additionally, there's a need for an improved network map.
What is your primary use case for Tufin SecureCloud?
My primary use case involves applying firewall policies faster from a central point. Additionally, I would like to use it to generate reports, but this hasn't occurred yet.
 

Also Known As

No data available
Tufin SecureCloud
 

Overview

 

Sample Customers

ADP, Blue Cross Blue Shield, BT, USAID, Delta Dental, EDF Energy, EMC, HSBC, Johnson & Johnson
3M, AT&T, Blue Cross Blue Shield, BNP Parabas, ConocoPhillips, Deutsche Bank, GE, IBM, Pfizer, United States Postal Service 
Find out what your peers are saying about Skybox Security Suite vs. Tufin Orchestration Suite and other solutions. Updated: March 2025.
844,944 professionals have used our research since 2012.