specification: FinOps Framework
specificationVersion: '1.0'
schema: https://www.finops.org/framework/
provider: Tufin
providerId: tufin
created: '2026-05-04'
# Provenance stamped 2026-08-11: this artifact was written by the API Evangelist
# bulk sweep dated 2026-05-04, not harvested from the provider. See roadmap#35.
method: generated
modified: '2026-05-05'
reconciled: false
tags:
  - Network Security
  - Firewall
  - FinOps
  - FOCUS
description: Tufin sells enterprise network-security policy software via direct sales; no public pricing,
  metered usage API, or FOCUS-aligned billing export is published. FinOps surface is the contracted product-license
  line.
sources:
  - https://www.tufin.com/
notes: No public pricing or usage telemetry. Trimmed to Contact Sales shape.
alignedWith:
  framework: FinOps Foundation Framework
  frameworkUrl: https://www.finops.org/framework/
  dataSpec: FOCUS
  dataSpecVersion: '1.3'
  dataSpecUrl: https://focus.finops.org/focus-specification/v1-3/
publisherName: Tufin Software Technologies
serviceCategory: Network Security Policy Management
billingModel:
  pricingCategory: Contract
  billingFrequency: Annual
  billingCurrency: USD
  chargeCategories:
    - Purchase
focusColumns:
  ServiceName: Tufin
  ServiceCategory: Network Security Policy Management
  ProviderName: Tufin
  PublisherName: Tufin Software Technologies
  InvoiceIssuerName: Tufin Software Technologies
  BillingCurrency: USD
meters:
  - name: product_license
    description: Tufin product license / subscription line (SecureTrack+, SecureChange+, Tufin Enterprise,
      etc.).
    unit: month
    aggregation: sum
    dimensions:
      - product
principles:
  - name: Visibility
    description: Visibility is limited to the contracted license invoice; usage telemetry stays inside
      the customer-managed Tufin deployment and is not exposed as a public cost API.
  - name: Allocation
    description: Allocate Tufin spend to the network-security / SecOps function that owns firewall and
      policy automation; sub-allocate by product (SecureTrack vs SecureChange vs AKIPS) where multiple
      lines are licensed.
  - name: Optimization
    description: Optimization happens at renewal — review the active product mix against actual policy
      and change-automation usage, and decide whether modules like AKIPS or TOS Discovery are pulling
      their weight before resigning.
  - name: Accountability
    description: A SecOps / network engineering owner manages the Tufin relationship and renewal; finance
      approves the annual contract.
maintainers:
  - FN: Kin Lane
    email: kin@apievangelist.com