Check out our July newsletter to learn about the latest product and research updates, events, and educational content.

Plus, this month we’re featuring the launch of the CyberAgents Exchange, powered by Tenable. Keep reading to read more about the new open-source AI exchange!

Tenable One - Platform updates

Integrate application security data into Tenable One for code-to-runtime security

Your codebase is growing faster than your security program, and in the age of AI, developers are introducing security findings at 10 times the rate of their peers. It is critical to see code as part of your entire attack surface.

Application security data now integrates directly into Tenable One to further close visibility gaps and ensure secure code development in the AI era. Whether code is human- or machine-written, you can now integrate application security risks, like those from Snyk, Claude Security, or any other application security tool via Tenable One Connectors — directly alongside your existing exposure data.

What this means for you:

• Achieve full code-to-runtime visibility by bringing application security risks together with the rest of your exposure data in one place.
• Fix code flaws before they become incidents by identifying your most business-critical code flaws and fixing them early in the development lifecycle.
• Measure organizational exposure and transform technical static code vulnerabilities into clear risk metrics on business resilience.

Read the blog post
Explore the guided demo
Check out Open Connector documentation
and Snyk Connector documentation

Improved workflow orchestration capabilities in Tenable One Vulnerability Management and Tenable One

New enhancements to Tenable's workflow orchestration capabilities are now generally available. This release streamlines remediation workflows and improves operational efficiency with the following key updates:

• Plugin output in tickets: You can now attach Plugin Output directly to tickets, providing immediate context and critical information while eliminating the need for further navigation.
• Tenable Hexa AI for ServiceNow: You can now leverage Tenable Hexa AI for ServiceNow incident and initiative creation to match already available Jira functionality.

Review the exposure management release notes 

Review the Tenable Vulnerability Management release notes

Tenable unified scoring is now live

Tenable has unified its risk prioritization standard, moving the high-fidelity Vulnerability Priority Rating (VPR) model out of beta to become the sole standard. 

To sharpen your prioritization, an updated asset classification engine also delivers more accurate Asset Criticality Ratings (ACR) for your assets. Because VPR and ACR feed directly into your Cyber Exposure Score (CES) and Asset Exposure Score (AES), your console will automatically update to reflect a precise understanding of your exposure. These recalculations occur automatically, though completion times depend on the size of your environment.

To prevent errors in your saved views, you must manually update any filters or combinations that still use VPR v1. No data migration is required.

Visit Tenable Connect for more details 

Learn more about Tenable One scoring

 

The CyberAgents Exchange, powered by Tenable

Tenable launches the industry’s first open-source AI exchange (and we want your agents on it)

Security teams are building AI agents in isolation, reinventing the wheel with no neutral place to share what actually works. The CyberAgents Exchange, powered by Tenable, is the only purpose-built, cybersecurity-native registry for AI agents, skills, MCP servers, and multi-agent playbooks in the current market.

• Built by defenders. For defenders: Purpose-built for security teams to solve the exposure problems practitioners actually face.
• Collective defense for the agentic era: Anyone can contribute; everyone benefits. Agents and skills are shared under open licenses with no fees or gates.
• Trust through transparency: Every agent links directly to its source repository, so there are no bundled binaries or black boxes.
• Build your reputation. Elevate your craft: Contributing is career capital. We give practitioners a platform to earn validation and build an undeniable resume.

Join the community, build your reputation, and start automating risk reduction. 

Explore the directory and submit your builds

Tenable One Cloud Exposure

Tenable One Cloud Exposure achieves FedRAMP High authorization

Tenable is committed to being the trusted partner of choice for the public sector, providing the advanced protection required for the U.S. government’s most sensitive environments. We are proud to announce that Tenable One Cloud Exposure has achieved FedRAMP High and Impact Level 5 (IL5) authorization.

Purpose-built for sensitive government cloud environments, this high-level authorization delivers:

• Unified visibility: Gain a single view across infrastructure, identities, and workloads — even in air-gapped environments.
• Zero-trust enforcement: Leverage advanced identity analytics to enforce least privilege principles and align with DoW CIO mandates.
• Blast radius reduction: Map the Web of Risk to see how vulnerabilities connect to identities and sensitive data, stopping problems before they snowball.
• Cost reduction: Support fiscal modernization by eliminating tool sprawl and reducing costs without compromising security.

Read the press release
Learn more about our FedRAMP High solutions

Take control of your sensitive data

When data classification engines scan the cloud, they often flag false positives, like internal test data, mock databases, or benign corporate email domains, as critical risks. With Tenable’s new data classification exclusions, customers can fine-tune their data scans to get to the bottom of what’s actually sensitive.

• Exclude by resource scope: Narrow exclusions to specific data types or resources using user-friendly Explorer-based queries.
• Exclude specific values: Filter out known text patterns or regex strings (like internal email domains).
• Target precise locations: Use OR logic to pinpoint exact databases, schemas, tables, file extensions, or object paths.

Learn how to create a data classification exclusion
Read about the recent releases here

 

Tenable One Web App Scanning

Authenticate web app scans with OAuth 2.0

You can now scan protected applications and APIs using OAuth 2.0 authentication within Tenable One Web App Scanning. Configure these options under your scan credential settings using three supported flows:

• Authorization code: For user-driven logins, with optional PKCE and Selenium scripting for complex identity providers.
• Client credentials: For machine-to-machine API scans without user interaction.
• Device code: For headless and device-style authentication.

To prevent scans from silently losing access, authorization verification continuously validates your session via response patterns, headers, or HTTP status codes across all credential types.

Integrate these capabilities immediately through your existing credentials API without changing endpoints. You can call the List Credential Types endpoint to programmatically discover the new fields.

Review the documentation

Review the release notes

Tenable One OT Exposure

Extended OT visibility for grid operators and disconnected environments

Our latest Tenable One OT Exposure release expands visibility for grid operators and disconnected environments, and introduces productivity and performance enhancements to accelerate analyst workflows.

• OT agent for disconnected environments: Secure air-gapped and isolated networks without deploying sensors or requiring live connectivity, featuring offline scan profiles, a local agent interface tailored for field technicians, and centralized Network Areas to resolve duplicate IP conflicts across distributed sites.
• Power substation anomaly detection: Passively monitor GOOSE streams and alert on anomalous activity (e.g., code revision changes) to protect utility and grid operations from unauthorized modifications or replay attacks.
• Yokogawa DCS activity detection: Get deep visibility into engineering activities on Yokogawa Centum VP systems to detect changes to critical operations and unauthorized access, including controller start/stop, code edits, function block changes, tag writes/deletes, and more.
• Simplified enterprise management: Manage all ICP subnets from a single Enterprise Manager interface — define CIDR boundaries, toggle monitoring per-site, and eliminate the need for per-ICP configuration for monitoring different network areas. 
• Analyst workflow improvements: Reuse investigations with Saved Views, review Assets and Findings details faster with a quick-access side panel, and secure syslog transport with TLS support.

Explore the user guide
Review the release notes

 

Tenable Security Center

Reimagined vulnerability analysis, flexible deployment, and streamlined operations

Tenable Security Center 6.9, now available in early access, modernizes vulnerability analysis and expands enterprise deployment flexibility with a reimagined query experience and deeper PAM and credential integrations.

• Explore Findings: A redesigned vulnerability query interface with expanded filtering and VPR key drivers surfaced directly in the findings detail panel.
• Tenable Nessus scanners via Tenable Sensor Proxy: Deploy Tenable Nessus scanners through Tenable Sensor Proxy for flexible, scalable enterprise and Tenable Enclave Security environments.
• Windows LAPS and PAM Kerberos support: Dynamically retrieve scan credentials via Windows LAPS and Kerberos Target Authentication across all supported PAM integrations.
• Performance improvements: Submit diagnostic bundles directly to Tenable Support, suppress rollover scans during freeze windows, and benefit from a modernized data architecture that reduces disk usage.

Explore the user guide
Download the early access release

 

Tenable Ecosystem

Now available: PyTenable 26.6.1

PyTenable 26.6.1 has officially been released, introducing a new temporal versioning scheme (YEAR.MONTH.PATCH) to better align with rapid API changes and enable critical updates to older modules.

• Marshmallow v4 support: Resolved issues preventing the use of newer Marshmallow versions.
• APA export: Added support in the current Tenable One package.
• Streamlined testing: Refactored workflow processes mean you no longer need Act and Docker installed just to run the test suite.
• Bug fixes: Addressed various minor issues introduced by recent API changes.

Moving forward, support will be provided for the current month minus three releases, so we highly recommend pinning your software to a specific release and testing against the latest.

Visit the PyTenable GitHub repository

Training and product education

Tenable One Exposure Management Platform introduction course includes CTEM

This introductory course in Tenable University now incorporates the foundations of the Continuous Threat Exposure Management (CTEM) framework to identify exposures, prioritize remediations, and reduce risk across your modern attack surface.

• Practitioners and partners will learn the fundamentals of continuous hybrid asset discovery, risk-based scoring, and validating critical attack paths to effectively manage security posture.
• This no-cost course serves as the essential primer and recommended prerequisite for the Specialist tier.

Access the course on demand in Tenable University

On-demand Tenable One Exposure Management Platform Specialist course now available

This brand-new paid Tenable University training course provides comprehensive Continuous Threat Exposure Management (CTEM) lifecycle training across the entire Tenable One architecture. The Specialist-level course delivers deep technical coverage of the Tenable One Exposure Management Platform, including:

• Tenable One Vulnerability Management
• Tenable One Attack Surface Management
• Tenable One Identity Exposure
• Tenable One OT Exposure
• Tenable One Cloud Exposure
• Tenable One Web App Scanning

Practitioners will gain proficiency in third-party data integration, advanced asset tagging, and context-aware analytics (such as Attack Path Analysis and Exposure Signals) to drive risk-based prioritization and deliver actionable executive dashboards. Eligible for Continuing Education (CE) credit.

Learn more and purchase online

Tenable events and webinars

Customer office hours

These are recurring ask-me-anything sessions for Tenable Security Center, Tenable One Vulnerability Management, Tenable One Cloud Exposure, Tenable One Identity Exposure, and Tenable One OT Exposure. Time-zone-appropriate sessions are available for the Americas, Europe (including the Middle East and Africa), and Asia-Pacific (APAC).

Learn more and register

 

Virtual events

Now on demand — Tenable customer update, July 2026: Watch the most recent quarterly customer update session. This informative, fast-paced overview explores how to better secure your expanding attack surface and consolidate critical security data. Products covered include: Tenable One, Tenable One AI Exposure, Tenable One Vulnerability Management, and Tenable Security Center.

Watch on demand

See all upcoming live and on-demand webinars

Read Tenable documentation.