WillItSurvive
Cybersecurity companies · subsidiary of Turn/River Capital · Israel

Tufin

Tufin manages firewall and cloud security rules across many vendors' systems.

Hard to displace
Assessed 21 July 2026 · Evidence as of 21 July 2026
Strong structural protection; the business model survives ai pressure.
On the recordSince 21 July 2026 · Checkable from May 2026 · Every call on the record Checkpoint: Tufinnovate 2026 conference unveiling next product and AI roadmap
The call

Tufin's cross-vendor firewall policy niche stays intact, held up by deep integrations and regulated workflows, with no AI lab building a rival yet.

Tufin is software that lets large companies control security rules across firewalls made by different vendors, Palo Alto, Cisco, Check Point, and others, all from one place. It is hard to copy because big regulated companies have locked it into their change-approval processes and would face real risk rewriting that work, and because Palo Alto and Cisco, which make the competing single-brand versions, have no reason to build a genuinely neutral tool that customers could use with rival firewalls. The one thing that could change the picture is if Palo Alto or Cisco decides to build a real cross-vendor orchestrator and backs it with serious investment; that would put real pressure on Tufin's defensibility.

Why
01
AI pressure: None apparent. No frontier AI lab is building network policy orchestration; Tufin bakes AI agents into its own tool instead of getting replaced. Could AI do the core job? Only partly.
02
Bigger players: Palo Alto Networks and Cisco. Both sell single-vendor firewall consoles; if either ships a truly neutral multi-vendor AI orchestrator, Tufin's role gets squeezed. Could a giant copy it? Probably.
03
What protects it. Deep integrations across Palo Alto, Cisco, Check Point, Fortinet, and cloud platforms lock Tufin into regulated change workflows.
What would change this call
Palo Alto Networks or Cisco announces a neutral, cross-vendor AI policy orchestrator. Would show incumbents entering Tufin's core niche despite conflicted single-vendor P&L incentives.
Customer migration results from AKIPS and Skybox asset integrations reported in 2026. Would reveal whether Tufin's acquisitions are adding retained revenue or causing churn.
Turn/River Capital announces a sale, secondary buyout, or re-IPO of Tufin. Would signal the PE hold cycle ending, affecting ownership stability and equity terms.
Key numbers
  • New business grew 30% year over year in 2025 (2025-12-31)
  • Net revenue retention hit 107% in 2025 (2025-12-31)
  • Turn/River Capital bought Tufin for ~$570M (2022-08-25)
Named risks
  • Palo Alto or Cisco could bundle a neutral cross-vendor AI policy orchestrator into their platforms, eroding standalone NSPM demand. Severity: medium
  • Turn/River Capital's PE exit (resale, secondary buyout, or re-IPO) could occur mid-hold-cycle, affecting equity terms for employees. Severity: medium
  • Growth and retention metrics (NRR, NPS, new-business growth) are self-reported and unaudited as a private company. Severity: low
  • Core rule-analysis and compliance-reporting workflows are structured tasks that customer-built in-house AI tooling could partially automate. Severity: medium
Rivals, as read in July 2026
RivalDirectionEvidence
AlgoSeccontestingNamed direct NSPM rival in vendor comparison pages updated 2026-05-20
FireMoncontestingHead-to-head NSPM comparisons published as of 2026-05-08
Skybox Securitygaining onSkybox shut down; Tufin acquired its IP and customer data in Feb 2025
Palo Alto Networks (Panorama)contestingSingle-vendor console named as alternative; potential AI-bundling threat, per 2026-05-08 comparisons
Cisco (Defense Orchestrator)contestingNamed alternative to Tufin, structurally tied to single-vendor lock-in
Questions people ask
Is Tufin still publicly traded as NYSE: TUFN?
No. Tufin delisted from NYSE after Turn/River Capital's all-cash acquisition closed on August 25, 2022, valuing the company at roughly $570 million ($13.00/share, ~44% premium). It has operated as a private, PE-owned company ever since.
Is Tufin profitable in 2025?
Tufin does not disclose audited financials as a private company. In its own February 5, 2026 release, Tufin claims a 'Rule of 45+' (combined revenue growth plus margin) for 2025 alongside 107% net revenue retention, but these are vendor-reported, unaudited figures.
Who owns Tufin now?
Turn/River Capital, a software-focused private equity firm, owns Tufin after completing an all-cash acquisition on August 25, 2022 for approximately $570 million, with Lion Investment Partners co-investing. No new external funding rounds have been reported since.
Could AI replace Tufin's product?
Tufin argues its 'Dynamic Network Connectivity Graph,' a multi-vendor network digital twin built from two decades of deployments, cannot be replicated by adding an LLM to a point product. It is instead layering AI agents (launched March 17, 2026) onto this integration moat rather than being displaced by it.
Who is Tufin's biggest competitor?
In network security policy management, Tufin's closest rivals are AlgoSec and FireMon, per comparison pages updated May 2026. Legacy rival Skybox Security shut down, and Tufin acquired its IP, trademarks and customer data in February 2025.
Has Tufin laid off employees recently?
No layoffs are reported. Tufin's own site states over 500 employees worldwide as of November 15, 2025, and the company describes 2025 as a record year for new-business growth, though this headcount claim comes from the company itself, not an audited filing.
Timeline
  • 2026-03-17Tufin unveils four autonomous 'Agentic Network Security' AI agents, demoed at RSA Conference 2026
  • 2026-03-04Tufin launches four new TufinAI assistants plus a TufinAI Executive Dashboard
  • 2026-02-05Tufin announces vendor-claimed 2025 record results: 30% new-business growth, 107% NRR, NPS 71
  • 2025-04-23Tufin formally introduces TufinAI engine with roadmap toward autonomous network security by 2027
  • 2025-02-01Tufin acquires select IP, trademarks and customer data from shut-down Skybox Security
  • 2025-01-09Tufin launches TufinAI engine and its first application, TufinMate
  • 2025-01-01Raymond Brancato appointed CEO of Tufin
  • 2024-02-01Tufin acquires AKIPS, a Brisbane-based network monitoring software company
  • 2022-08-25Turn/River Capital completes all-cash acquisition of Tufin; Tufin delists from NYSE
  • 2022-04-06Tufin agrees to be acquired by Turn/River Capital for roughly $570 million
  • 2019-04-01Tufin IPOs on the NYSE under ticker TUFN
Revision history
21 July 2026
First assessed. Hard to displace. The text above is fixed as of this date and is not edited afterwards.
In the same band
Sources