CoreOS Clair vs Tufin Orchestration Suite comparison

Cancel
You must select at least 2 products to compare!
Red Hat Logo
728 views|582 comparisons
100% willing to recommend
Tufin Logo
254 views|154 comparisons
91% willing to recommend
Comparison Buyer's Guide
Executive Summary

We performed a comparison between CoreOS Clair and Tufin Orchestration Suite based on real PeerSpot user reviews.

Find out what your peers are saying about Palo Alto Networks, Wiz, Microsoft and others in Container Security.
To learn more, read our detailed Container Security Report (Updated: March 2024).
768,415 professionals have used our research since 2012.
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"CoreOS Clair's best feature is detection accuracy."

More CoreOS Clair Pros →

"We use Tufin to clean up our firewall policies. This makes it a lot easier to find out the things that are wrong.""The features I have found most valuable are its capability to check on the firewall and the routers. Afterwards it checks out all the configs, checks the vulnerabilities, checks the risks - it checks everything that may end up causing our router to be compromised. At the end it recommendations what we should do.""It gives our firewall administrators visibility into the total infrastructure.""The Topology Map, which feeds into our SecureChange - the latter being an automation platform - there's a lot of synergy between the two.""We find it to be flexible. If we have a change that needs to be done, it will go ahead and do it for all our devices, regardless of the manufacturer that we have associated with it.""We can get reports with Tufin at anytime. We can have automated reports, even with security and compliance.""In our current environment, the most valuable feature from Tufin is their Network Map.""The solution helps us meet our compliance needs."

More Tufin Orchestration Suite Pros →

Cons
"An area for improvement is that CoreOS Clair doesn't provide information about the location of vulnerabilities it detects."

More CoreOS Clair Cons →

"We have had a couple issues with the VMs, but I think it was just because they were starving for resources. A recommendation on what the virtual appliances should have for resources would be appreciated.""This solution would benefit from better reporting functionality with graphing so that reports can be presented to management.""Our initial setup was complex from two dimensions, because we were deploying it globally and had to have a centralized view, but a distributed approach. We had it in Asia and North America, causing a slightly complicated approach.""I would like an improved reporting module which can be flexible (custom reports) and allow us to generate our own reports, because the data is already there.""I would like to see more expansion into the cloud and documentation needs improvement. When I try to do something new in the product, the documentation is no help. Something's written there, but it's not enough to help you do what you want to do.""I would like to simplify the reports, and maybe have another view besides the charts. Possibly they could be more graphical.""The topology needs improvement. If I click on the network tab, I can go get a cup of coffee, come back, and my topology is still not painted. Maybe, it's just because we have so many devices, but looking at the topology, it is too slow. The problem is that when I click on the network tab, I do not want to see the topology. I want to click on the "Next" button, so I can put in the source and destination, so I can see the path. However, I still have to sit there and wait for the topology to load, and it's frustrating. I'll click on topology and try to click that "Next" button in time to where I can get around it. But, typically, you have to wait for that topology to paint. When it paints it, it's just a bunch of black smudges because there is just so much there. It can't paint it to where you see something. I can always zoom out, or something like that, but it's really worthless.""It would be better if they modernized the web GUI. The web interface GUI is simple and not complicated, but it's also too old."

More Tufin Orchestration Suite Cons →

Pricing and Cost Advice
  • "CoreOS Clair is open-source and free of charge."
  • More CoreOS Clair Pricing and Cost Advice →

  • "This solution helped us to reduce the time it takes to make changes. We used to spend up to an hour to do a change, and now, it's around five minutes."
  • "Tufin and AlgoSec were pretty much in the competitive price range, but this one provided us better integration into the Check Point environment."
  • "The solution has helped us to reduce the time it takes to make changes. With Tufin, it takes ten to 15 minutes. Before, it was 30 minutes or more."
  • "The solution has helped reduce the time it takes us to make changes. It helps make overall integrated changes immediately. It allows us to cut down at least a few hours in the week in regards to changes and monitoring."
  • "We've seen a decrease of about 50 percent in the overall time it takes to complete a firewall change."
  • "Tufin makes things a little easier. It lessens the amount of manual work which we have to do. It has a lot of benefits in terms of revenues, profits, employee costs, and operational costs. We have already seen return on investment."
  • "This solution helps us reduce the time it takes us to make changes. We're probably saving time by 25%."
  • "Tufin reduced the time it takes to solve a problem, which reduces the time of the outage."
  • More Tufin Orchestration Suite Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which Container Security solutions are best for your needs.
    768,415 professionals have used our research since 2012.
    Questions from the Community
    Top Answer:CoreOS Clair's best feature is detection accuracy.
    Top Answer:CoreOS Clair is open-source and free of charge.
    Top Answer:An area for improvement is that CoreOS Clair doesn't provide information about the location of vulnerabilities it detects. They should disclose these details immediately in a public database.
    Top Answer:The most valuable feature of Tufin is security auditing. We are able to check the rules and compliance of the company, for example, what is allowed or not. We are able to check the rules over… more »
    Top Answer:Tuffin is expensive, and we have to explain to our customers the benefit for them to purchase. If we explain the benefits in the correct way they do not mind the price. We typically do costing for the… more »
    Top Answer:The reporting function could improve in Tufin. For our clients with companies that have strong compliance, reporting privacy data is mostly a problem. In the IT department, private data needs a… more »
    Ranking
    26th
    out of 59 in Container Security
    Views
    728
    Comparisons
    582
    Reviews
    1
    Average Words per Review
    238
    Rating
    8.0
    20th
    out of 59 in Container Security
    Views
    254
    Comparisons
    154
    Reviews
    10
    Average Words per Review
    444
    Rating
    7.8
    Comparisons
    Also Known As
    Tufin SecureCloud
    Learn More
    Overview

    Clair is an open source project for the static analysis of vulnerabilities in appc and docker containers.

    Vulnerability data is continuously imported from a known set of sources and correlated with the indexed contents of container images in order to produce lists of vulnerabilities that threaten a container. When vulnerability data changes upstream, the previous state and new state of the vulnerability along with the images they affect can be sent via webhook to a configured endpoint. All major components can be customized programmatically at compile-time without forking the project.

    Tufin enables organizations to automate their security policy visibility, risk management, provisioning and compliance across their multi-vendor, hybrid environment. Customers gain visibility and control across their network, ensure continuous compliance with security standards and embed security enforcement into workflows and development pipelines. 

    Sample Customers
    eBay, Veritas, Verizon, SalesForce
    3M, AT&T, Blue Cross Blue Shield, BNP Parabas, ConocoPhillips, Deutsche Bank, GE, IBM, Pfizer, United States Postal Service 
    Top Industries
    VISITORS READING REVIEWS
    Financial Services Firm18%
    Computer Software Company14%
    Manufacturing Company14%
    Government7%
    REVIEWERS
    Financial Services Firm26%
    Comms Service Provider11%
    Healthcare Company7%
    Retailer7%
    VISITORS READING REVIEWS
    Financial Services Firm18%
    Computer Software Company17%
    Manufacturing Company7%
    Retailer6%
    Company Size
    VISITORS READING REVIEWS
    Small Business19%
    Midsize Enterprise8%
    Large Enterprise73%
    REVIEWERS
    Small Business14%
    Midsize Enterprise7%
    Large Enterprise79%
    VISITORS READING REVIEWS
    Small Business16%
    Midsize Enterprise14%
    Large Enterprise70%
    Buyer's Guide
    Container Security
    March 2024
    Find out what your peers are saying about Palo Alto Networks, Wiz, Microsoft and others in Container Security. Updated: March 2024.
    768,415 professionals have used our research since 2012.

    CoreOS Clair is ranked 26th in Container Security with 1 review while Tufin Orchestration Suite is ranked 20th in Container Security with 180 reviews. CoreOS Clair is rated 8.0, while Tufin Orchestration Suite is rated 8.0. The top reviewer of CoreOS Clair writes "Excellent detection accuracy". On the other hand, the top reviewer of Tufin Orchestration Suite writes "A flexible, very secure solution that works well in Layer 2 environments". CoreOS Clair is most compared with Snyk, Red Hat Advanced Cluster Security for Kubernetes, JFrog Xray, Prisma Cloud by Palo Alto Networks and Aqua Cloud Security Platform, whereas Tufin Orchestration Suite is most compared with AlgoSec, FireMon Security Manager, Skybox Security Suite, Palo Alto Networks Panorama and ManageEngine Firewall Analyzer.

    See our list of best Container Security vendors.

    We monitor all Container Security reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.