All analysis was generated autonomously, without human review. Scores are analytical opinions drawn from the cited public sources, without hands-on testing. They are not audits, certifications, investment reports, purchasing advice, or evaluations of quality.
Tenable sells Tenable One, a platform mapping security weaknesses across IT, cloud, identity, operational technology and AI, and the Nessus vulnerability scanner. Founded in 2002, it focuses on enterprises and has over 40,000 customers, including about 65% of the Fortune 500 and large government agencies. Public since 2018, it priced $725 million of convertible notes in September 2026, partly to buy back stock. Revenue grew 11% to $999.4 million in 2025, and growth slowed to 8.6% in the second quarter of 2026. Tenable’s cloud workload protection product has FedRAMP High authorization, so federal buyers replacing it would need an authorized one. CrowdStrike, Palo Alto Networks and Wiz, named by Tenable as competitors, could build similar scanning into platforms customers already license.
| Description | Public exposure-management company built on the Nessus vulnerability scanner. The Tenable One platform unifies vulnerability, cloud, identity, OT, web-app, and AI exposure across the attack surface and prioritizes risk. | [f1] |
|---|---|---|
| Founded | 2002 | [f2] |
| HQ | Columbia, Maryland, USA | [f3] |
| Latest funding | IPO July 2018 (Nasdaq: TENB) | [f2] |
| Deployment | SaaS | [f4] |
| Compliance | ISO 27001 | [f4] |
| Product | What it does |
|---|---|
| Tenable One | Exposure-management platform unifying vulnerability, cloud, identity, OT, web-app, and AI signals across the attack surface with 300-plus integrations. |
| Nessus | Vulnerability assessment scanner, trusted by tens of thousands of organizations with over 4 million downloads, that powers the Tenable One platform. |
| Tenable One Cloud Exposure | Cloud-native application protection (CNAPP) closing cloud exposure across configurations, identities, and workloads in multi-cloud environments. |
| Tenable One Identity Exposure | Agentless identity-security solution that unifies Active Directory and Entra ID, maps attack paths, and hardens identity posture. |
| Tenable One OT Exposure | Security for converged OT/IT environments, inventorying OT, IoT, and IT assets and surfacing cyber-physical exposures. |
| Tenable One AI Exposure | Discovers shadow AI usage on connected platforms, detects prompt injection and jailbreaks, and enforces AI acceptable-use policy. |
AI Defense Matrix
| Govern | Identify | Protect | Detect | Respond | Recover | |
|---|---|---|---|---|---|---|
| AI-Workload Platforms Inference servers, training platforms, vector DB platforms, and the model-loading supply chain. | ||||||
| AI Coding and Orchestration Tools AI coding tools and agentic orchestration tools on user devices, plus their plugins, skills, hooks, system prompts, scaffolding, harnesses, configuration settings, and MCP clients. | ||||||
| AI-Generated Code Code produced by AI tools, AI-assisted reviews, AI-generated infrastructure-as-code and tests, and vibe-coded apps that bypass CI/CD. | ||||||
| AI Traffic Paths to external and self-hosted AI services, MCP tool channels, agent-to-agent calls, model-registry downloads, and egress to unapproved AI services. AI gateways, LLM routers, and MCP gateways steer traffic along those paths. The steering decisions and their inputs belong here too: routing policies, MCP server registries, and agent naming and discovery services. | ||||||
| AI Model Model weights, fine-tuning checkpoints, model cards, registries, an AI bill of materials (AIBOM), and the third-party LLMs your enterprise consumes. | ||||||
| Training Data Datasets used for training, fine-tuning, and continued learning. | ||||||
| Runtime AI Data User prompts, inference inputs, RAG content, vector DB content, persistent agent memory, and interaction history. | ||||||
| AI Agent Identities AI agents as non-human principals, plus credentials, keys, permission scopes, service accounts, and delegation chains across agents and tools. |
Tenable One AI Exposure discovers how employees and agents use AI platforms, surfaces shadow AI and misconfigurations, detects attacks such as prompt injection, and enforces AI acceptable use policies. It is mapped to the AI Defense Matrix. [f5]
Cyber Defense Matrix
| Identify | Protect | Detect | Respond | Recover | |
|---|---|---|---|---|---|
| Devices Workstations, servers, phones, tablets, storage, network devices, IoT infrastructure, and similar hardware. | |||||
| Applications Software, interactions, and application flows on the devices. | |||||
| Networks Connections and traffic flowing among devices and apps, plus communication paths. | |||||
| Data Content at rest, in transit, or in use across devices, apps, and networks. | |||||
| Users The people using the devices, apps, networks, and data. |
Vulnerability Management and Patch Management cover devices, Web App Scanning covers applications, Tenable One OT Exposure covers networks, Tenable One Cloud Exposure covers data, and Tenable One Identity Exposure covers users. Tenable is mapped to the Cyber Defense Matrix. [f6]
How well the company can compete in its security market, scored across eight dimensions against public evidence.
| Dimension | Score | Rationale |
|---|---|---|
| Problem Clarity How precisely the company defines its problem, with evidence the problem exists at the scale claimed. | 3/5 | Tenable names its buyer and problem, enterprises and government agencies fixing security weaknesses across IT, cloud, identity, OT and AI. Its 10-K lists highly regulated customers among them. The pain is stated in Tenable’s own words, and no cited source measures it independently, so the problem is clear but unquantified. [s1, s29, s9] |
| Capability Depth How specific the technical capabilities are, with evidence beyond marketing claims such as docs and third-party validation. | 3/5 | Tenable documents concrete capabilities on its own pages, including more than 319,000 Nessus plugins, agentless identity scanning and native-protocol OT querying. The outside record reports those capabilities rather than testing them. SiliconANGLE reports Hexa AI’s general availability, and Gartner’s assessment reaches the record through Tenable’s own release. No independent technical evaluation of the scored capabilities is cited. [s10, s11, s12, s18, s28] |
| Market Timing Whether the market is ready for this product, with evidence that buyers are actively seeking solutions. | 3/5 | Tenable’s SEC-filed release of July 29, 2026 reports 381 new enterprise platform customers and revenue up 8.6%, a purchasing signal. The analyst notes, a June 2026 Gartner report on AI-powered exposure assessment and an August 2026 IDC market-share report, reach the record through Tenable’s own releases. They do not document a second, independent kind of buyer-side signal, so the record shows one kind rather than two. [s2, s27, s28] |
| Team Credibility Demonstrated domain expertise with public signals such as prior exits, publications, and industry recognition. | 4/5 | Tenable, founded in 2002 by Ron Gula, Jack Huffard and Renaud Deraison, went public in 2018, and Tenable says it has built an extensive Nessus user community since 1998. NVD records Tenable as the reporting source for a stack-based buffer overflow. Calcalist reports that Steve Vintz and Mark Thurmond were appointed permanent co-CEOs. [s1, s29, s5, s16, s24] |
| GTM Proof Evidence of actual traction (customers, revenue signals, partnerships) beyond stated intentions. | 5/5 | Tenable’s 10-K reports more than 40,000 customers, including about 65% of the Fortune 500, and $999.4 million of 2025 revenue in financial statements Ernst & Young audited. The customer counts are Tenable’s own figures, and IDC’s August 2026 market-share report, relayed by Tenable, puts its share of device vulnerability and exposure management at 24.6%. [s1, s29, s2, s27] |
| Funding Efficiency Whether funding matches go-to-market ambition, with signs of capital-efficient growth. | 4/5 | Tenable produced $266.8 million of operating cash flow in 2025 despite a GAAP operating loss for the year. It then reported GAAP income from operations of $12.4 million in the second quarter of 2026. Tenable generates cash at scale, and one quarter of GAAP operating income follows a full year of GAAP operating loss. [s1, s29, s2, s17] |
| Category Clarity Whether the company creates or fits a recognizable category that buyers can quickly place in their stack. | 4/5 | Tenable’s 10-K places it among vulnerability management and assessment vendors beside Qualys and Rapid7. Its SEC-filed results release reports a Leader placement in the 2025 Gartner Magic Quadrant for Exposure Assessment Platforms. Tenable announced those analyst placements itself, so the placement stays short of independent confirmation. [s1, s29, s17] |
| Incumbent Defensibility How vulnerable the core value proposition is to absorption as a feature by a platform vendor. | 3/5 | Tenable’s 10-K names CrowdStrike, Palo Alto Networks and Wiz among competitors and says many organizations build their own solutions with open-source code. A rival would need scanning across IT, cloud, identity and OT, and Tenable holds FedRAMP High authorization for Tenable One Cloud Exposure in highly sensitive federal environments. The cited record shows no structural moat beyond that friction. [s1, s29, s2, s9] |
Tenable sells exposure management, which means finding, prioritizing and fixing security weaknesses across an organization’s attack surface. Its homepage frames that surface as infrastructure, cloud, identity, OT, third-party applications and AI, and Tenable One is the product that combines those signals.
Tenable sells to organizations of all sizes, including regulated organizations, with a focus on enterprise accounts. Tenable’s 10-K reports more than 40,000 customers, including about 65% of the Fortune 500, about half of the Global 2000 and large government agencies. The same filing says many current and prospective customers work in highly regulated industries such as financial services, energy, insurance and healthcare. [s1, s29, s9]
Nessus is Tenable’s vulnerability scanner, and Tenable says it powers the Tenable One platform. Tenable also says tens of thousands of organizations use it, with over 4 million downloads. The Nessus page lists more than 319,000 plugins with over 100 added each week.
Tenable One combines those scan results with other signals. The Tenable One page lists more than 300 data integrations alongside Tenable’s own sensors, and the product lines cover cloud, identity, OT and AI. Tenable One Identity Exposure runs without agents or privileged credentials, and Tenable One OT Exposure pairs passive monitoring with patented active queries in native device protocols.
Tenable has added agent-driven automation to Tenable One. SiliconANGLE reported that Hexa AI, the agent layer inside Tenable One, reached general availability with multistep reasoning and connections to existing security and IT tools. SiliconANGLE also reported that Tenable One added static code vulnerability data to track risk from code to runtime. [s10, s11, s12, s18, s19, s22]
Tenable competes for exposure management budgets against specialist and platform vendors. Its 10-K names Qualys and Rapid7 among vulnerability management vendors, CrowdStrike among endpoint vendors with vulnerability assessment, and Palo Alto Networks and Wiz among cloud security vendors.
Tenable also competes with customers’ own builds. The 10-K says many organizations build their own solutions with open-source code rather than buying. Tenable counts those in-house efforts as competition alongside the named vendors.
Analysts rank Tenable among category leaders, according to Tenable’s own announcements. Tenable’s SEC-filed results release reports a Leader placement in the 2025 Gartner Magic Quadrant for Exposure Assessment Platforms. A separate Tenable release quotes IDC’s August 2026 report giving Tenable 24.6% of the device vulnerability and exposure management market. [s1, s29, s17, s27]
Audited filings document Tenable’s traction. Its 10-K reports revenue of $999.4 million in 2025, up 11%. Ernst & Young issued the audit opinion on those financial statements. The same filing says no single customer accounted for more than 2% of revenue.
Growth continued at a slower pace in 2026. Tenable’s second-quarter release reports revenue of $268.5 million, up 8.6%, with 381 new enterprise platform customers and 32 net new six-figure customers. [s1, s29, s2]
Tenable is a long-established public company. Ron Gula, Jack Huffard and Renaud Deraison founded Tenable in 2002, and the company went public in 2018.
Leadership changed after the death of chief executive Amit Yoran. TechCrunch reports that Yoran had been president of RSA and founding CEO of NetWitness, and Calcalist reports that Steve Vintz and Mark Thurmond became permanent co-CEOs. Tenable’s 2025 results release names Vlad Korsunsky, whom it describes as a Microsoft cloud and AI security veteran, as chief technology officer. [s7, s16, s17, s24]
Tenable holds federal authorizations that matter to government buyers. AWS reported FedRAMP Moderate authorization for Tenable Cloud Security on AWS GovCloud, extending an existing authorization for Tenable One. Tenable’s second-quarter 2026 release reports FedRAMP High and Impact Level 5 authorization for Tenable One Cloud Exposure.
Tenable discloses vulnerabilities in its own products through published advisories. SecurityWeek reported that Tenable published two advisories for CVE-2026-33694, a high-severity Nessus flaw on Windows that let an attacker delete arbitrary files with System privileges. [s2, s4, s26]
| Company | Relationship | Note | Compare |
|---|---|---|---|
| Qualys | competes with | Named with Rapid7 as a vulnerability management and assessment vendor in Tenable’s 10-K competitor list. | |
| Rapid7 | competes with | Named with Qualys as a vulnerability management and assessment vendor in Tenable’s 10-K competitor list. | |
| CrowdStrike | competes with | Named in Tenable’s 10-K as an endpoint security vendor with vulnerability assessment capabilities. | |
| Wiz | competes with | Named in Tenable’s 10-K among cloud security vendors that compete with Tenable. | |
| Palo Alto Networks | competes with | Named in Tenable’s 10-K among cloud security vendors that compete with Tenable. | N/AWe scored these companies at different scopes, so the totals measure different things. |
| Microsoft | adjacent | Adjacent platform vendor for the same enterprise security buyers. | N/AMicrosoft is scored by product line, not as a whole company, so there is no company-wide column to compare. Open its profile to compare a specific product. |
Add analyzed competitors to compare them side by side with Tenable.
A closer look at the company's product strategy, measuring how defensible it is against market forces and examining the eight areas behind it.
press the advantage
Tenable sells software its customers run to find and prioritize security weaknesses, mainly to large enterprises and government agencies, including highly regulated organizations. Tenable holds FedRAMP High authorization for Tenable One Cloud Exposure, which qualifies that product for highly sensitive federal environments. Tenable holds 53 issued US patents on network scanning, monitoring and analysis. A customer that connects several sensor types and integrations to Tenable One has migration work on exit. Tenable’s 10-K names CrowdStrike, Palo Alto Networks and Wiz as competitors. The filing says many organizations also build their own solutions with open-source code, so Tenable competes with customers’ own tools too.
| Dimension | Score | Rationale |
|---|---|---|
| Value Delivery Does the product sell software as the product, or judgment, trust, or accountability with software as the delivery mechanism. | 1/3 | Customers license Tenable One and Nessus as software. |
| Switching Cost How expensive leaving is for a customer: data portability, integrations, learned workflows, network effects, regulatory data residency. | 2/3 | A customer that deploys Tenable sensors, Nessus scans and third-party integrations into Tenable One, and runs Hexa AI remediation workflows there, has data history and workflows to rebuild on exit. The cited record documents no costlier dependence, such as inline traffic handling, hardware key custody or a proprietary policy language. It does not size the migration either. |
| Compliance Moat Whether certifications, liability acceptance, or audit trails block an easy replacement. | 2/3 | Tenable holds FedRAMP High and Impact Level 5 authorization for Tenable One Cloud Exposure, and AWS reported FedRAMP Moderate authorization for Tenable Cloud Security. A replacement for federal buyers would need its own authorization, which takes time and government review but remains feasible for other authorized vendors. |
| Problem Complexity Whether the product requires ML, optimization, real-time systems, or years of specialized expertise. | 3/3 | Scanning for more than 117,000 CVEs through over 319,000 plugins, querying OT devices in native protocols, and running agentless identity analysis takes years of specialized engineering. Tenable Research’s vulnerability work, recorded by NVD for a stack-based buffer overflow, reflects that expertise. |
| Buyer Profile Whether buyers are SMB operators, mid-market IT teams, or regulated enterprises and governments with procurement gates. | 3/3 | Tenable’s 10-K reports government agencies among its customers and revenue from US government entities. It also names financial services, energy, insurance and healthcare among the highly regulated industries of its current customers. The same filing says government and highly regulated customers often require contract terms that differ from Tenable’s standard arrangements. |
| Layer Whether the product is an end-user application, a platform with application features, or infrastructure other applications depend on. | 2/3 | Tenable One combines sensor data and integrations in an exposure management platform, and customers use its embedded Hexa AI agents to coordinate security workflows. The cited pages describe a platform customers work in, not a component their applications run through. |
| Proprietary Data, Content, or IP Whether the product accumulates datasets, content licenses, or IP that a rival cannot recreate from scratch. | 2/3 | Tenable’s 10-K reports 53 issued US patents covering network scanning, monitoring and analysis technologies, an evidenced IP asset Tenable holds. The cited record does not show the Nessus plugin catalog as non-public, and no cross-customer dataset appears in it. |
Tenable sells mainly to large enterprises and government agencies. Its 10-K reports more than 40,000 customers, including about 65% of the Fortune 500 and about half of the Global 2000. The filing says Tenable sells to organizations of all sizes with a specific focus on enterprise accounts.
Tenable’s 10-K names government and regulated buyers within that base. Part of Tenable’s revenue comes from US government entities, and many current and prospective customers work in regulated industries such as financial services, energy, insurance and healthcare. Tenable also sells Tenable One Cloud Exposure for highly sensitive federal environments under FedRAMP High and Impact Level 5 authorization.
Tenable’s products scan many asset types. The Nessus page lists more than 319,000 plugins covering over 117,000 CVEs. Tenable’s 10-K says Tenable One spans IT assets, cloud resources, containers, web apps, identity systems and AI-related assets.
Tenable’s accuracy claims for Nessus are its own. The Nessus page claims the industry’s lowest false positive rate, and no cited independent source tests that claim. Gartner’s June 2026 report, as quoted by Tenable, describes Tenable One as well integrated across IT, identity, cloud and container environments.
Tenable sells two kinds of AI capability. Tenable One AI Exposure secures customers’ use of AI platforms such as ChatGPT Enterprise and Microsoft Copilot, and detects attacks such as prompt injection. Hexa AI, which SiliconANGLE describes as an orchestration layer over Tenable’s repository of exposure data, lets customers deploy Tenable’s prebuilt agents or build their own.
Tenable sells through a sales force and channel partners at scale. Its second-quarter 2026 release reports revenue of $268.5 million, up 8.6%, with 381 new enterprise platform customers, and the new-customer figure is Tenable’s own disclosure.
Tenable also adds product lines through acquisitions. SecurityWeek reported Tenable’s agreement to buy Vulcan Cyber for roughly $150 million, and Tenable later announced it had closed the deal. Calcalist reported that Tenable was acquiring Apex Security for over $105 million to expand its exposure management platform into AI.
Tenable publishes prices for Nessus licenses and quotes the platform. Its buy page lists a one-year Nessus Professional license at $4,790, and it routes buyers of Tenable One Exposure Management and Tenable One Cloud Exposure to a customized quote.
Tenable sells Hexa AI inside Tenable One tiers. SiliconANGLE reports that Hexa AI is available to Tenable One Foundation and Tenable One Advanced customers under Tenable’s flex pricing model. A platform buyer therefore works from a customized quote.
The Nessus page says Nessus deploys on a variety of platforms, and the OT product page offers an on-premises option for highly regulated or air-gapped OT networks.
Sensor design varies by product line. Tenable One Identity Exposure runs without agents or privileged credentials, and Tenable One OT Exposure combines passive monitoring with active queries. SiliconANGLE reports that Hexa AI connects to a customer’s existing security and IT tools inside Tenable One.
Buyers assessing Tenable can check audited financials, federal authorizations and a history of product vulnerabilities. Ernst & Young audited Tenable’s 2025 financial statements. AWS reported a FedRAMP Moderate authorization for Tenable Cloud Security, and Tenable reports FedRAMP High and Impact Level 5 authorization for Tenable One Cloud Exposure.
Tenable discloses flaws in its own products through advisories. SecurityWeek reported that Tenable published two advisories for CVE-2026-33694, a high-severity Nessus vulnerability on Windows that let an attacker delete arbitrary files with System privileges.
Tenable One aggregates Tenable’s sensors and third-party data. The Tenable One page lists more than 300 data integrations. SecurityWeek wrote at the Vulcan Cyber announcement that customers would benefit from third-party data flows through integration with over 100 security products.
Tenable also courts outside developers. SecurityWeek reported that Tenable launched CyberAgents Exchange, a free, open-source exchange for AI agents built for cybersecurity teams. SiliconANGLE reports that Hexa AI lets customers deploy prebuilt agents or build their own.
Tenable describes Nessus users, enterprise customers and Tenable Research contributing data and insights in a continuous feedback loop.
Tenable is run by an established public-company team. Ron Gula, Jack Huffard and Renaud Deraison founded the company in 2002. Calcalist reports that Steve Vintz and Mark Thurmond became permanent co-CEOs. TechCrunch reported the death of chief executive Amit Yoran.
Tenable Research gives the company a record in vulnerability discovery. NVD records Tenable as the reporting source for CVE-2025-2263, a stack-based buffer overflow that an unauthenticated remote attacker could trigger.
| Id | Source | Tier | Accessed |
|---|---|---|---|
| f1 | Tenable homepage, exposure-management framing | official | 2026-09-17 |
| f2 | Tenable, Inc. (Wikipedia), founding | research | 2026-09-17 |
| f3 | SEC EDGAR: Tenable Q2 2026 results release, dateline | regulatory | 2026-09-17 |
| f4 | AI Defense Matrix Catalog entry | other | 2026-06-13 |
| f5 | AI Defense Matrix Catalog mapping | other | 2026-06-23 |
| f6 | Tenable Vulnerability Management page | official | 2026-06-12 |
This site is an experimental research aid created by Zeltser Security Corp. All its data gathering and analysis was performed autonomously without human review, and it can contain errors of fact, interpretation, and judgment that a human reviewer might catch.
The analyses are statements of opinion, not statements of fact. Machine analysis produced the scores, summaries, and matrix placements by weighing the public sources each page cites, and reasonable people can weigh the same sources differently. Where a page states a fact, it cites the public source and the date it was checked, and the statement is only as accurate as that source. Unless a profile expressly says otherwise, the analysis involves no hands-on testing and no independent validation of any company's products or services.
Nothing here is professional, security, legal, financial, investment, or purchasing advice, and nothing here is a recommendation to invest in, do business with, or avoid any company. Inclusion of a company is not an endorsement, and absence of a company is not a judgment about it. Reading this site creates no advisory or client relationship. Verify any detail you plan to act on against the vendor's current materials.
The content is provided "as is" and "as available," with all warranties disclaimed, express or implied, including merchantability, fitness for a particular purpose, accuracy, and non-infringement. No entry is warranted to be complete, current, or correct. Companies change, vendors update their claims, sources can be wrong, and automated analysis can misread them.
To the fullest extent permitted by law, the operator, Zeltser Security Corp, is not liable for any damages that arise from using this site or relying on its content, including direct, indirect, incidental, special, and consequential damages and lost profits, even if advised that such damages were possible. If you are dissatisfied with the site or disagree with these terms, your remedy is to stop using it.
Entries link to vendor pages, press coverage, and other external sites that Zeltser Security Corp does not control and is not responsible for. A link is not an affiliation with the destination or an endorsement of it. Product and company names and trademarks are the property of their owners, used here nominatively to identify the companies described. Short quotations from cited sources appear for identification and commentary.
Use, quotation, automated retrieval, and redistribution of the content are governed by the Terms of Use at cybercompanyprofiles.com/terms, which permit personal and internal business use with attribution and prohibit republication and resale.