Tufin launches Segmentation Intelligence in suite update

Tufin has launched Segmentation Intelligence and released version 5.3 of its Tufin Orchestration Suite.

The updates target organisations managing security policy across hybrid networks spanning cloud systems, on-premises infrastructure, firewalls, SASE and distributed environments. The new segmentation tool is designed to monitor whether network segmentation policies still match the security intent set by teams as networks change over time.

Companies use network segmentation to separate systems and workloads so a breach in one area does not easily spread to another. For security teams, the challenge is that these controls often shift gradually as infrastructure expands, applications move and policies are updated across different platforms.

Segmentation Intelligence continuously analyses policies, zones, subnets and objects to identify gaps and drift in segmentation rules. It is intended to replace periodic audits and manual validation with continuous checks across the wider network.

The launch comes as companies face pressure to show that security controls remain effective between audit cycles. Tufin cited industry research showing many cybersecurity leaders do not have a clear understanding of whether their controls are working at any given time.

Policy drift

Security teams have traditionally reviewed segmentation controls before audits, after major infrastructure changes or following an incident. That approach has become harder to sustain as businesses adopt more cloud services, use a wider range of networking products and introduce faster, automated infrastructure changes.

The new product is meant to help teams understand how their environments should be segmented, where controls should be enforced and where exposure may have opened up. It also recommends how to close identified gaps.

Raymond Brancato, Chief Executive Officer of Tufin, linked the launch to the difficulty of proving that controls still work once environments begin to shift.

"Enterprise environments change constantly, yet verification remains largely manual and periodic. It's a real struggle for security teams to prove segmentation is still working," said Raymond Brancato, Chief Executive Officer of Tufin.

He added: "Segmentation Intelligence gives organizations continuous confirmation that their strategy is protecting the business as intended: reducing risk, improving compliance, strengthening resilience, and building confidence in their security posture."

Tufin positioned the product as part of a broader shift toward continuous validation of security exposure rather than point-in-time testing. It also pointed to regulatory pressure around operational resilience and continuous controls, including rules such as NIS2 and DORA.

The product can help security teams identify vulnerabilities and neglected coverage areas before they weaken key controls. It also allows teams to prioritise remediation by business risk and likely exposure.

Platform update

Alongside the new product, Tufin released Tufin Orchestration Suite 5.3, an update to its network security management platform. The release adds integrations and automation features intended to help enterprises govern policy changes across multiple vendors and environments.

The latest version extends support for AWS Firewall environments with topology, policy and compliance visibility. It also adds broader support for Palo Alto Strata Cloud Manager, automation for VMware NSX-T distributed firewall access requests and provisioning support for Cisco Meraki deployments.

Those additions reflect a common problem in large organisations, where security policy often has to be managed across dozens of tools. Tufin cited research showing that almost half of organisations now manage more than 20 security tools, creating complexity for governance and change control.

Shay Dayan, Senior Vice President of Product and Engineering at Tufin, said the update is meant to address the reality that enterprise networks no longer sit within a single-vendor stack.

"Enterprise networks no longer operate within a single vendor ecosystem, yet security teams are still expected to govern policy consistently across all of them," said Shay Dayan, Senior Vice President of Product and Engineering at Tufin.

Dayan said the release adds more automation around policy management while keeping governance consistent across hybrid environments. He also tied the broader platform update to Segmentation Intelligence, which now sits alongside the orchestration suite as part of Tufin's effort to give customers a more continuous view of network exposure.

The orchestration platform is built around a control plane that correlates connectivity, policy and security context across different environments. In practice, that means customers can submit, validate and provision access requests across more vendor systems from a single management layer.

Tufin said its broader aim is to help organisations understand connectivity, govern change and maintain oversight of security posture across mixed environments. "Our vision extends beyond simple policy automation," said Dayan. "We're building an intelligent control layer that allows organizations to understand connectivity, govern change, and maintain continuous security posture control across every environment, regardless of vendor."