Tufin Adds Managed Security Services Provider Program

Tufin today launched a channel program aimed squarely at managed security service providers (MSSPs) that want to consume a platform for managing firewalls in the same way they sell their services.

The Managed Security Service Provider (MSSP) Program from Tufin is based on a consumption model that enables MSPs to pay for usage of the Tufin firewall management software monthly.

The goal is to make it simpler for MSSPs to offer management services across a range of firewalls without having to commit to any upfront fees or costs, says Mike Menegay, vice president of global channels at Tufin.

“What you use is what you get charged for,” says Menegay.

Tufin has engaged a handful of MSSPs before, most of which Menegay notes preferred to acquire Tufin firewall management software so they could integrate into a larger portfolio of managed services. The MSSP Program announced today is designed to appeal to smaller MSSPs that want to set up a dedicated firewall management practice aimed largely at small-to-medium businesses, says Menegay.

To participate in the program, however, MSSPs will need to demonstrate they have at least 50 firewalls under management, notes Menegay.

In general, Menegay notes that MSSP is a relatively new phenomenon in the SMB sector. As such, it will take more time for SMBs to become more comfortable relying on external service providers. The paradox is that at the same time most SMBs don’t have the internal expertise or budget resources required to manage cybersecurity on their own.

Of course, being an MSSP is not an easy endeavor. Not only is it difficult to hire and retain cybersecurity expertise, but the costs associated with helping an organization recover from a breach can also be substantial. MSSPs need to make sure they price each level of service to account for those potential costs.

Regardless of how those security services are delivered, the one thing that is clear is that most projects these days are not going forward until someone somehow accounts for how that IT project will be secured.