Tufin, the leader in agentic AI network security, announced the availability of Tufin Orchestration Suite (TOS) 5.4, expanding network visibility, policy governance and compliance across increasingly complex, multi-vendor enterprise environments. As AI accelerates business transformation and enables attackers to move at greater speed, maintaining an accurate view of network connectivity has become an important foundation for security. Continuous network visibility helps teams to identify risk, validate security controls and maintain control, even as their environments change.

The challenge is growing as enterprises distribute applications and workloads across on-premises infrastructure, public clouds, software-defined networks and cloud-managed security platforms. A 2026 Cloud Security Alliance survey found that 92% of organizations reported at least some difficulty obtaining a single, accurate view of security policies across their environments. Fragmented visibility and manual processes can make it harder to identify unintended connectivity, maintain compliance and understand the security implications of changes, particularly as AI-driven development and automation increase the pace of change across the enterprise.

TOS 5.4 addresses these challenges by extending Tufin’s coverage to three additional platforms—Stormshield Network Security, Broadcom VMware Cloud Foundation (VCF) with NSX 9.1, and FortiManager Cloud—while expanding rule recertification and compliance capabilities across cloud and multi-vendor environments. These enhancements help organizations bring more of their network under consistent governance, reduce gaps in policy visibility, and maintain security oversight as their infrastructure evolves.

“AI is changing how quickly organizations can transform their environments, and how quickly attackers can identify and exploit opportunities,” said Raymond Brancato, Tufin CEO. “Security teams cannot keep pace if they are working from fragmented views of their networks or relying on manual processes to understand the impact of every change. Many of the capabilities in TOS 5.4 came directly from our customers, who told us exactly where their visibility and compliance gaps were. This release closes those gaps across Stormshield, VMware, Fortinet, Palo Alto and the cloud.”

Expanding the Industry’s Most Comprehensive Network Security Platform

TOS 5.4 extends Tufin’s multi-vendor network security platform with new integrations and enhancements designed to provide consistent policy visibility, compliance, and automation across diverse infrastructure. Built on Tufin’s Unified Control Plane and Dynamic Network Connectivity Graph, the platform helps organizations understand connectivity and govern policy changes across heterogeneous environments. Key capabilities in this release include:

• Stormshield Network Security Support: Adds native support for Stormshield SNS firewalls, extending policy visibility, Unified Security Policy (USP) compliance, change tracking, network topology, and SecureChange access request automation. Stormshield is widely deployed across European government, defense and critical infrastructure, and this integration reduces manual audit effort for environments subject to NIS2. Organizations can bring Stormshield-managed environments into their broader network security governance processes, reducing policy blind spots and manual effort in mixed-vendor networks.
• Broadcom VMware Cloud Foundation with NSX 9.1 Support: Extends Tufin coverage to NSX 9.1 running on VMware Cloud Foundation, maintaining feature parity with previous NSX releases. Organizations undertaking the transition to VCF can preserve their existing Tufin policy management capabilities and maintain security visibility, compliance, change tracking, and automation throughout the migration.
• FortiManager Cloud Support: Extends Tufin policy management to FortiGate firewalls managed through FortiManager Cloud, providing the same visibility, topology, compliance, and automation capabilities available for on-premises FortiManager environments. This enables Fortinet customers moving to cloud-based management to maintain consistent policy governance without introducing separate manual processes.
• Improved Palo Alto Panorama Policy Analysis: Incorporates the rule Target field into policy visibility, revision comparison, shadowing detection, and traffic path simulation. By modeling the devices to which a rule actually applies, Tufin helps reduce false positives in policy cleanup and improve the accuracy of topology and connectivity analysis.
• Expanded Rule Recertification Across Cloud and Multi-Vendor Environments: Extends Tufin’s rule recertification workflow to supported cloud and multi-vendor platforms, including AWS Network Firewall, Azure Network Security Groups (NSGs) and firewall policies, Google Cloud VPC Firewall, Palo Alto Networks Strata Cloud Manager, VMware NSX-T Gateway, Cisco Meraki, Zscaler ZIA, Stormshield, and more. By bringing rules into a common review process, organizations can reduce compliance gaps, strengthen audit readiness, and identify rules that no longer meet business or security requirements.
• Enhanced Unified Security Policy Compliance: Adds application-specific blocking policies through Application ID support, enabling organizations to express and enforce application-level restrictions directly within USP. The release also introduces automated detection of next-generation firewall rules missing Security Profile Groups or Log Forwarding Profiles, helping teams identify gaps in inspection and logging controls without relying on manual rule reviews. In addition, for Akamai Guardicore and Illumio microsegmentation environments, USP compliance checks now evaluate all tags associated with an asset, including indirect tags, improving the detection of violations involving workloads with multiple classifications.

Improving Policy Accuracy, Optimization, and Change Automation

In addition to expanding platform coverage and compliance capabilities, TOS 5.4 introduces enhancements that help security teams improve policy accuracy, streamline network operations, and reduce the risk associated with infrastructure changes. Visit the Tufin Knowledge Center here for details on the additional solutions released as a part of TOS 5.4.