# Tufin

**Canonical:** https://apis.io/providers/tufin/  
**Website:** https://www.tufin.com  
**APIs profiled:** 14

Tufin provides security policy orchestration solutions for managing network security policies across hybrid cloud environments, including firewalls, SDN, and cloud security controls. The Tufin Orchestration Suite (TOS) includes SecureTrack for network topology and policy analysis, SecureChange for automated policy change workflows, SecureApp for application-centric policy management, and SecureCloud for cloud-native security posture management. Tufin offers comprehensive REST APIs and GraphQL APIs for integrating with ITSM, SIEM, and other security tools.

## Kin Score — 45.9 / 100 (developing)

Scored 2026-08-21 under rubric 0.12.0. Trend: flat (+0.4 from 45.5).

| Facet | Score |
|---|---|
| Discoverability | 81.5 |
| Contract Quality | 56.6 |
| Governance | 28.8 |
| Contract Governance | 28.8 |
| Operational Transparency | 7.9 |
| Developer Ergonomics | 61.9 |
| Commercial Clarity | 30.3 |
| Access Clarity | 30.3 |

Regulatory layer — **Insurance**: 31.8 (matched via tags).

## Agent readiness — 29.1 (agent-aware)

| Dimension | Value |
|---|---|
| Spec Presence | yes |
| Agentic Access | derived |
| Reversibility Documented | no |
| MCP Server | no |
| Auth Clarity | yes |
| Idempotency | no |
| Error Semantics | no |
| OpenAPI Examples | no |
| Rate Limit Signal | documented |
| Event Surface Described | no |
| Agent Skills | no |
| Well Known Catalog | no |
| Consent Identity | no |
| Agent Card | no |
| Dry Run Mode | no |

## Access

Enterprise · Self-serve signup — onboarding: self-serve, pricing: enterprise, trial: no (confidence: high).

## APIs (14)

- **Tufin SecureApp API** — API for application-centric security policy management and micro-segmentation. SecureApp enables teams to manage security policies at the application level, define connectivity ...
- **Tufin SecureTrack GraphQL API** — GraphQL API for the Tufin Orchestration Suite providing flexible querying capabilities for security policy data, network topology, and compliance information. Uses OAuth2 authen...
- **Tufin SecureCloud API** — REST API for Tufin SecureCloud, the cloud-native security policy management platform. Provides endpoints for managing cloud accounts, applications, assets, Kubernetes clusters, ...
- **Tufin Compliance API** — Policy compliance and risk analysis
- **Tufin Devices API** — Manage network devices and firewalls
- **Tufin Objects API** — Network objects, services, and address groups
- **Tufin Revisions API** — Device policy revisions and change history
- **Tufin Rules API** — Query and manage firewall rules and policies
- **Tufin Tasks API** — Workflow tasks and approvals
- **Tufin Tickets API** — Create and manage security change tickets
- **Tufin Topology API** — Network topology analysis and path queries
- **Tufin Users API** — User and group management
- **Tufin Workflow Definitions API** — Workflow template definitions
- **Tufin Zones API** — Security zones and zone-to-zone matrix

## Agentic access (1)

- **Tufin Agentic Access** — 23 operations · 5 acting

## Security (2)

- **Tufin Authentication** — http · 1 scheme
- **Tufin Domain Security** — TLSv1.3 · HSTS · DMARC

## Plans (1)

- **Tufin Plans Pricing**

## Tags

Cloud Security, Compliance, Firewall Management, Network Security, Network Topology, Policy Orchestration, Risk Management, Security Policy Management, Zero Trust

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/tufin/). Scores are computed from the provider's own public artifacts under a published rubric.