Security operations teams are drowning in cloud alerts without context, making response actions challenging, and often incomplete. Cloud security leaders spend hours chasing risks that never materialize due to the ephemeral nature of workloads, while active runtime threats are slipping through the cracks. Even worse, the reach of cloud-based threats extend further across the attack surface than ever before; from development to runtime.

To combat this, we’re excited to announce the general availability of cloud detection and response (CDR) in Tenable One Cloud Exposure Management, adding near-real time behavioral detection across multi-cloud environments. The new capabilities enable teams to significantly reduce investigation and remediation time and catch the hunter before data is exfiltrated.

Now, customers can detect active cloud attacks in near real-time with eBPF scanning, not just static scans for vulnerabilities and misconfigurations. Detections are mapped to MITRE ATT&CK across Azure, AWS, and GCP, to help teams understand tactics and techniques immediately.

CDR capabilities include: 

• AI-powered threat stories: AI-powered threat stories automatically correlate related detections by actor, resource, and tactic, transforming hundreds of raw alerts into a clear narrative of the attack, allowing teams to start investigating instantly.
• Runtime Vulnerability Validation: Uses active scanning to confirm cloud resources that are reachable from the internet, delivering validated exposure context that sharpens alert prioritization and reduces noise.
• Dual Coverage: Combines agentless detections with an optional eBPF runtime sensor, giving security teams comprehensive near-realtime visibility across cloud workloads without sacrificing deployment flexibility or coverage.
• Guided Response: As the agentic engine of Tenable One, Tenable Hexa AI is the intelligence layer that reasons across live exposure context, threat findings, and environment history to deliver a prioritized, actionable response plan, in plain language, at attacker speed.

Tenable’s CDR allows teams to leverage AI-driven pathways to investigate and remediate with speed, enabling teams to drive informed, actionable resolution, close the exposure gap, and extend attack path analysis to holistic remediation of real threats.

Learn more about Tenable’s CDR capabilities by watching the full guided demo today!