Oxidized vs Tufin
Oxidized
github.comTufin
tufin.comSide by side
| Figure | Oxidized | Tufin |
|---|---|---|
| Price from | Free | — |
| Free plan | Yes | — |
| Free trial | — | — |
| Open source | — | — |
| Web | Yes | Yes |
| Linux | Yes | — |
| API | Yes | — |
| Self-hosted | Yes | Yes |
| Plans published | 1 | 3 |
| Spec score · Network Configuration Management Software | 8.0 (#7) | 6.7 (#25) |
| Integrations | Hooks support GitHub repository pushes, AWS SNS, Slack, Cisco Spark and XMPP notifications. | Tufin lists integrations across firewalls and network devices, SASE, cloud, microsegmentation, SOAR, SIEM, vulnerability management, GRC, ITSM, and IPAM. |
| Purpose | Oxidized is a network device configuration backup tool and a RANCID replacement. | Tufin provides a unified control plane for visibility, policy management, automated change control, and continuous compliance across hybrid networks. |
| Support | The project points users to Gitter, GitHub, and the LibreNMS community forum for help and support. | Standard support is available Monday through Friday from 9 a.m. to 6 p.m., while Premium Support provides 24/7 call handling and troubleshooting. |
Plans
Tufin
- EnterprisePriced on request
- SecureChange+Priced on request
- SecureTrack+Priced on request
In their own words
Oxidized
Oxidized is a network device configuration backup tool and a RANCID replacement. It supports more than 130 operating system types, with SSH and Telnet among its documented input methods. Node records can come from CSV, SQLite, MySQL, or HTTP. Backups can be written to files, Git, Git-Crypt, or HTTP; Git records a commit for each configuration change, while Git-Crypt encrypts configuration pushes using git-crypt. Oxidized adjusts its thread count to meet the configured retrieval interval. Its REST API can list nodes, retrieve configurations, show versions and diffs, reload nodes, and move a node to the front of the queue. Syslog examples can prompt a fetch after configuration changes. The web interface and API are supplied by the optional oxidized-web gem, disabled by default and configured for port 8888 by default. A setting can strip sensitive data before storage. Oxidized is free under Apache License 2.0 and is deployed on-premises; documented installation options include Linux distributions, FreeBSD, Docker, and Podman. The project says it has few maintainers and invites more involvement.