Tufin

Tufin is a cybersecurity software company founded in 2005 by Ruvi Kitov and Rueven Harrison. Based in Tel Aviv, the company develops software for managing, analyzing, governing and automating security policies across complex enterprise networks. Its technology is intended to help security and network teams control changes across firewalls, routers, switches, load balancers, web proxies, private-cloud and public-cloud environments, as well as newer application and microservices infrastructures. The company emerged in a period when large organizations were operating increasingly heterogeneous networks, often with security controls supplied by multiple vendors and administered by separate teams. Tufin's central proposition is that security policy should be managed as an operational and business process rather than as a collection of isolated device configurations. Its software maps application connectivity and policy relationships, evaluates proposed changes, routes changes through approval workflows and helps implement them across supported infrastructure. This approach is intended to reduce manual work, limit configuration errors and provide an auditable record of security-policy activity. Tufin's principal product family is the Tufin Orchestration Suite. The suite has included SecureTrack for firewall operations management, auditing and compliance; SecureChange for security-change automation; SecureApp for application-connectivity management; and SecureCloud for hybrid-cloud security. The products are designed for large enterprises, managed security service providers and IT-security auditors. They support operational requirements associated with standards and regulatory frameworks including PCI DSS, NERC-related requirements and Sarbanes-Oxley controls, although the software itself does not replace an organization's broader compliance program. The company's technology has been positioned around multi-vendor and hybrid-environment support. Its partner and integration ecosystem has included major networking, firewall, cloud, service-management and automation vendors such as Check Point, Cisco, Fortinet, Juniper Networks, Palo Alto Networks, F5, VMware, Amazon Web Services, Microsoft Azure, ServiceNow and others. Tufin has also described capabilities such as automatic policy generation, traffic-informed rule refinement and application-scoped security-policy management. The Orchestration Suite has historically received quarterly updates. Tufin expanded its corporate profile when it became a public company on the New York Stock Exchange in April 2019. The company later agreed to be acquired by software-focused investment firm Turn/River Capital in 2022 in an all-cash transaction valued at approximately $570 million. The transaction closed on August 25, 2022, returning Tufin to private ownership. Before the acquisition, the company maintained operations in locations including Tel Aviv, Boston and London; in 2018 it leased office space at the ToHa building in Tel Aviv and had approximately 200 employees across those offices. After going private, Tufin continued to broaden its platform. In February 2024 it acquired Brisbane-based network-monitoring software company AKIPS for an undisclosed amount. In February 2025, Tufin appointed Raymond Brancato as chief executive officer. The same month, following the shutdown of Skybox Security, Tufin acquired selected Skybox intellectual property, trademarks and customer information and launched an Express Path migration program for former Skybox customers. These moves connected Tufin's core policy-orchestration capabilities with network visibility and an opportunity to serve organizations seeking alternatives after Skybox's closure.

Tufin was established in 2005 by Ruvi Kitov and Rueven Harrison in Israel. Its founding focus was the difficult operational problem of managing security policies across large, distributed and heterogeneous corporate networks. Enterprises commonly used firewalls and other network-security devices from multiple vendors, while changes were requested by application owners, implemented by network teams and reviewed by security or compliance personnel. Tufin developed software to connect these activities through centralized visibility, policy analysis and workflow automation. The company's platform evolved around the idea that security policy could be managed at the level of applications, services and business connectivity rather than only at the level of individual firewall rules. Its technology has included traffic analysis, policy auditing, change planning, approval workflows and automated deployment. The resulting product family became known as the Tufin Orchestration Suite. SecureTrack addressed firewall operations management, auditing and compliance; SecureChange automated security-policy changes; SecureApp focused on application connectivity; and SecureCloud addressed security policy in hybrid-cloud environments. Tufin's target customers have included large enterprises, managed security service providers and security auditors. The platform has been designed to work with a broad range of network and security technologies, including next-generation and traditional firewalls, routers, switches, load balancers, web proxies, public-cloud and private-cloud platforms, and microservices-related environments. Its integrations have included vendors such as Check Point, Cisco, Fortinet, Juniper Networks, Palo Alto Networks, F5, VMware, Amazon Web Services, Microsoft Azure and ServiceNow. The company has also promoted capabilities for automatic policy generation and traffic-informed refinement of security rules. Tufin expanded its physical and commercial presence as it grew. In 2018, it leased approximately 4,200 square meters at Tel Aviv's ToHa office building. At that time, it was reported to have about 200 employees across offices in Boston, London and Ramat Gan. The company entered the public markets in April 2019 through a listing on the New York Stock Exchange, increasing its visibility among cybersecurity and enterprise-software companies. On April 6, 2022, Tufin announced that it had entered a definitive agreement to be acquired by Turn/River Capital, a software-focused investment firm. The all-cash transaction was valued at approximately $570 million. Completion took place on August 25, 2022, after which Tufin ceased to be publicly traded and returned to private ownership under Turn/River's control. The private-company period included further expansion of the platform's capabilities. In February 2024, Tufin acquired AKIPS, a Brisbane-based company specializing in network-monitoring software. The transaction amount was not disclosed. In February 2025, Tufin named Raymond Brancato chief executive officer. Later that month, after Skybox Security shut down, Tufin acquired selected Skybox intellectual property, trademarks and customer information. It also introduced an Express Path migration program intended to help former Skybox customers move to Tufin offerings. These developments extended Tufin's role from security-policy change management toward a wider combination of policy governance, network visibility and operational automation.

1. 2025New chief executive and Skybox migration initiative

   Tufin appointed Raymond Brancato as CEO and launched an Express Path migration program after acquiring selected Skybox Security assets.

   Source
2. 2024AKIPS acquisition

   Tufin acquired Brisbane-based network-monitoring software company AKIPS for an undisclosed amount.

   Source
3. 2022Turn/River acquisition closes

   Turn/River Capital completed its acquisition of Tufin on August 25, returning the company to private ownership.

   Source
4. 2019New York Stock Exchange listing

   Tufin became publicly traded on the New York Stock Exchange in April.

   Source
5. 2018Tel Aviv office expansion

   Tufin leased approximately 4,200 square meters of space at the ToHa office building in Tel Aviv; the company had about 200 employees across offices in Boston, London and Ramat Gan.

   Source
6. 2005Tufin is founded

   Ruvi Kitov and Rueven Harrison founded Tufin in Israel to develop software for security-policy management and network-security operations.

   Source

Enterprise security-policy orchestration and automation for hybrid, multi-vendor networks, with emphasis on operational efficiency, application connectivity, governance and compliance visibility.

• Tufin Orchestration SuiteSecurity policy orchestration platform

  Tufin's principal software suite for managing and automating security policies across hybrid, multi-vendor environments. It brings together policy analysis, compliance visibility, application-connectivity management and security-change workflows for firewalls, routers, switches, cloud platforms and related infrastructure. The suite has historically been updated on a quarterly cadence and is aimed mainly at large enterprises, managed security service providers and security auditors.

• SecureTrackFirewall operations management

  SecureTrack provides centralized visibility and governance for firewall policies and related configurations. Its functions include policy analysis, auditing, compliance reporting and monitoring of changes across supported security devices. The product is intended to help organizations identify rule issues, maintain an operational record and support reviews against internal controls and external requirements.

• SecureChangeSecurity change automation

  SecureChange automates the lifecycle of security-policy changes. It can help route requests through approval and review steps, assess the effect of proposed changes and coordinate implementation across network-security devices. The objective is to reduce manual configuration work while retaining governance and auditability for changes requested by applications, infrastructure teams and business units.

• SecureAppApplication connectivity management

  SecureApp manages connectivity requirements from an application perspective. It helps teams represent the communication paths an application needs and translate those requirements into appropriate network-security policy changes. This application-scoped approach is intended to improve coordination between application owners, security teams and network operators in complex enterprise environments.

• SecureCloudHybrid-cloud security management

  SecureCloud extends Tufin's policy-management approach to hybrid environments that combine traditional networks with private and public cloud infrastructure. It is designed to provide security-policy visibility and management across cloud platforms and associated network controls, helping organizations maintain more consistent governance as workloads move between environments.

• AKIPSNetwork monitoring software

  AKIPS is network-monitoring software acquired by Tufin in 2024. The acquisition added network-observability capabilities to Tufin's broader security and policy-management portfolio. Specific product packaging, integration details and post-acquisition branding are not specified in the supplied reference material.

• 2025Appointment of Raymond Brancato as CEOOther

  Tufin entered a new phase of private ownership and continued to expand its security-operations portfolio.

  What changed. The company appointed Raymond Brancato as chief executive officer in February 2025.

  Source
• 2025Acquisition of selected Skybox Security assetsM&A

  Skybox Security shut down, leaving its customers and selected technology assets without the previous operating company.

  What changed. Tufin acquired selected Skybox intellectual property, trademarks and customer information and launched an Express Path migration program for former Skybox customers.

  Aftermath. The initiative positioned Tufin as a migration option for organizations seeking to replace Skybox-related capabilities.

  Source
• 2024Acquisition of AKIPSM&A

  Tufin sought to broaden its capabilities beyond policy management into network monitoring and visibility.

  What changed. Tufin acquired Brisbane-based network-monitoring software company AKIPS.

  Aftermath. The deal expanded Tufin's portfolio with network-monitoring technology; the purchase price was not disclosed.

  Source
• 2022Sale to Turn/River CapitalM&A

  Tufin and Turn/River Capital agreed that the software-focused investment firm would acquire Tufin in an all-cash transaction.

  What changed. The acquisition closed on August 25, 2022, and Tufin returned to private ownership.

  Aftermath. Tufin continued operating as a privately held company under Turn/River Capital.

  Transaction value. $570 million announced transaction value (2022 acquisition agreement)

  Source
• 2019Public-market listingOther

  Tufin had grown as an enterprise cybersecurity software provider and pursued access to public equity markets.

  What changed. The company listed on the New York Stock Exchange in April 2019.

  Aftermath. Tufin operated as a public company until its acquisition by Turn/River Capital in 2022.

  Source

• 2025Tufin appoints Raymond Brancato as chief executive officer

  Tufin appointed Raymond Brancato as chief executive officer in February 2025.

  Leadership change
  Source
• 2025Tufin launches migration program after acquiring selected Skybox Security assets

  Following Skybox Security's shutdown, Tufin acquired selected intellectual property, trademarks and customer information and introduced an Express Path program for former Skybox customers.

  M&AProduct launch
  Source
• 2024Tufin acquires AKIPS

  Tufin acquired Brisbane-based network-monitoring software company AKIPS for an undisclosed amount.

  M&A
  Source
• 2022Tufin agrees to acquisition by Turn/River Capital

  Tufin announced a definitive all-cash agreement to be acquired by Turn/River Capital in a transaction valued at approximately $570 million.

  M&A
  Source
• 2022Turn/River Capital completes acquisition of Tufin

  The acquisition closed on August 25, 2022, and Tufin became a privately held company.

  M&A
  Source
• 2019Tufin completes initial public offering on the New York Stock Exchange

  Tufin became a publicly traded company on the New York Stock Exchange in April 2019.

  Other
  Source

1. Tufin