We’ve updated the Explore section in Tenable One Vulnerability Management with two new dedicated tabs: Software and Host Audits.

These updates decouple software exposure and configuration compliance from standard CVE finding workflows, giving you dedicated views built specifically to track installed software footprints and streamline compliance reporting.

1. The Software Tab: Take control of your software inventory

Seamlessly track and manage your software inventory directly within Tenable One Vulnerability Management.

Built on the Explore UI, the new Software Tab delivers the deep visibility needed to streamline asset management, track deployed versions across your footprint, and maximize your SBOM value

Key capabilities

• Pinpoint specific software: Search across your environment using Vendor and Product Name filters alongside Tenable risk metrics like Asset Criticality Rating (ACR) and Asset Exposure Score (AES) to identify high-value targets running unsupported or risky applications.
• Organize your view: Use the left-side tree navigation to filter by product types (e.g., Databases, Operating Systems), or group software by Asset (to see everything installed on a given asset) or by Vendor (to see total software deployment across your network).
• Take action: Drill deep into granular software details for deeper investigation or export full/filtered software inventories to CSV for internal audits and reporting.

Important operational notes for software data:

• Scan requirements: The Software tab relies on credentialed network scans or Tenable Agent scans to inspect host file systems. Non-credentialed scans will not populate this tab.
• 30-day retention window: Software data is retained for 30 days. If an asset is not re-scanned within 30 days, its software records are automatically removed to prevent stale data from cluttering your inventory. Ensure your credentialed scan schedules run at least monthly to maintain an accurate view.

Documentation links:

• Overview of the Software Tab
• Using Filters and Left-Tree Navigation
• Exporting Software Data and CSV Keys

2. The Host Audit Tab: Isolated compliance and hardening workflows

Evaluating CIS benchmarks or internal hardening policies requires a different mindset than patching missing software updates. Mixing configuration checks with vulnerability findings creates unnecessary clutter when preparing for an audit.

We moved Host Audits out of Explore > Findings and gave them a dedicated top-level Host Audit tab.

Key capabilities

• Clear result categorization: Instantly filter host audit findings by status: Passed, Failed, Warning, Info, Skipped, Error, or Unknown.
• Group by audit check or asset:
  • Group by audit check to see every machine failing a specific CIS benchmark control.
  • Group by asset to review the complete configuration posture of an individual server or workstation.
• Streamlined evidence exporting: Filter down to your failed audit checks and export reports or CSVs directly formatted for compliance officers and external auditors.
• 15-Month data retention: Audit findings are retained for 15 months, giving you historical context to demonstrate compliance posture over time.

Where did my audit data go? If you previously tracked host audits under Explore > Findings, that data has transitioned entirely to the new Host Audits tab. Your historical audit data remains intact.

Documentation links:

• Getting Started with Host Audits
• Grouping and Filtering Host Audit Findings
• Generating Host Audit Reports

Questions or feedback?

Try out the new tabs in Explore today. If you have feedback on how these views fit into your daily workflow, drop a comment below.