Tenable Product Update Newsletter — August 2026
Welcome to your monthly round-up of the latest Tenable product updates, platform enhancements, and community news. This month, we’re focused on agentic automation, quantum-readiness, and sharper visibility across your attack surface. Tenable One Platform Updates Tenable Hexa AI now supports Routines and Agent Center in Tenable One Introducing the next major evolution in agentic security: an always-on workforce powered by Tenable Hexa AI Routines, Agent Center, and a new Jamf integration directly within the Tenable One platform. Moving past conversational search and one-off actions, mobilize an autonomous fleet that runs in the background to seamlessly coordinate multi-step security tasks across your entire exposure landscape. Routines: Define an exposure workflow once and set a schedule. Hexa reasons through fresh context on every run and automatically delivers actionable results. Agent Center: A central workspace to track all routines to get clear visibility into what’s running, completed, queued, or awaiting user input. Jamf integration: Fetch Jamf-managed Mac context on demand and push patch policies directly back to Jamf without ever leaving Tenable One. Available now. Get started by navigating to Agent Center > Create a Routine or the Routines tab in Hexa AI. Get more details in the release notes CyberAgents Exchange CyberAgents Exchange and SWARM event recap The CyberAgents Exchange, powered by Tenable, is an open-source, vendor-agnostic hub where security practitioners and CISOs can discover, share, and collaborate on AI agents, skills, MCP servers, and playbooks built for cybersecurity. This free-to-use community infrastructure allows defenders to scale their capabilities, eliminate development silos, and outpace AI-generated threats without vendor lock-in. In conjunction with the CyberAgents Exchange launch, Tenable hosted SWARM, a hands-on cybersecurity agentic AI build event at Black Hat USA 2026 in Las Vegas. Real-world solutions: Sponsored by AWS and presented with support from Anthropic, the event challenged security practitioners to build open-source components that automate real-world security workflows. Winners: Congratulations to our first-, second-, and third-place winning teams! Your incredible builds are now on the CyberAgents Exchange for the global security community to adopt and build upon. Explore the CyberAgents Exchange today, and check out our official press release and SWARM recap blog post for complete details. Explore the CyberAgents Exchange Read the SWARM recap blog Read the press release Tenable One Vulnerability Management Accelerate software discovery and compliance reporting in Explore Seamlessly track software inventory and isolate compliance checks directly within Tenable One Vulnerability Management. The new Software and Host Audit tabs in Explore deliver dedicated views to eliminate UI clutter, track deployed application footprints, and speed up audit reporting. Use these views to: Pinpoint software exposure: Search installed software, versions, and vendors alongside risk metrics like ACR and AES to maximize SBOM value. Isolate compliance findings: Separate CIS benchmark and hardening checks from general vulnerability noise without building complex filters. Export audit evidence: Instantly group and export targeted software inventories or configuration results for internal teams and external auditors. Read the full post on Tenable Connect Tenable One AI Exposure Now covering all major AI platforms and developer tools AI adoption is outpacing most teams’ ability to govern it, and every new LLM, agent, or IDE plugin adds another blind spot to the attack surface. Tenable One AI Exposure closes that gap further, adding support for Google Gemini and extending coverage across the tools where AI actually gets used inside your environment. Expanded coverage and capabilities include: Full LLM coverage: Monitor prompts, responses, and usage patterns across Google Gemini, Anthropic Claude, OpenAI ChatGPT Enterprise, and Microsoft Copilot, with policy enforcement and detection of risky or unauthorized activity. Broader shadow AI visibility: Discover sanctioned and unsanctioned AI use across Model Context Protocol (MCP) deployments, AI-native IDEs like Cursor, Windsurf, and Trae, and AI-enabled browser extensions. Faster remediation workflows: Route policy violations straight into Jira or ServiceNow, or trigger automated alerts over email, Slack, or Teams, so issues get worked instead of just logged. Read the Tenable One AI Exposure press release Tenable One Cloud Exposure Identify non-compliant post-quantum cryptography cloud resources Encrypted traffic captured today can be stored and decrypted later, once quantum computing matures, a threat known as harvest-now-decrypt-later (HNDL). Organizations relying on outdated Transport Layer Security (TLS) configurations or non-quantum-safe encryption are exposed to this risk without even knowing it. Tenable One Cloud Exposure now helps customers identify non-compliant post-quantum cryptography (PQC) cloud resources to support future compliance regulations. We’ve added four new properties to the Network Endpoint profile for HTTPS-supported endpoints. The enhancement allows teams to: Get visibility into quantum readiness: See which endpoints already support post-quantum cryptography and which don’t, so you can prioritize upgrades ahead of emerging compliance mandates. Get all non-PQC-compliant resources listed in one query. Identify weak encryption faster: Surface outdated TLS versions and vulnerable cipher suites across your environment without manual audits or separate scanning tools. Reduce HNDL exposure: Proactively harden key exchange methods and ciphers before intercepted traffic becomes a future liability. Gain compliance evidence: Customers in regulated industries, such as healthcare and financial services, can easily prove compliance as quantum computing matures. To find these resources in your cloud environment, go to Tenable One Cloud Exposure and filter or query “non-ready PQC resources” using the Network Endpoint page or Explorer. Check out other recent releases in the product documentation Tenable One OT Exposure Deeper IT/OT visibility for every corner of your environment Our latest release of Tenable One OT Exposure 4.7 expands visibility for grid operators and disconnected environments, and introduces a variety of productivity enhancements. OT agents for isolated networks: Get asset visibility and vulnerability coverage in air-gapped and disconnected environments (no sensors or live connectivity required) with offline scan profiles and a local agent UI for field technicians. Power substation anomaly detection: Passively monitors GOOSE streams and flags anomalous activity, such as configuration revision changes, giving utilities and grid operators critical visibility. Yokogawa DCS activity detection: Surfaces critical operational changes on Yokogawa Centum VP systems, so you can spot engineering activity that may signal unauthorized access. Centralized subnet management: Define CIDR boundaries and toggle monitoring across all ICPs from a single interface in Enterprise Manager, eliminating per-site configuration. Saved Views: Save, name, and reuse custom filter combinations across asset and findings views, cutting down repetitive setup during investigations. Asset side panel: Review asset details without leaving the findings or asset grid, for faster pivoting during investigations. Upgrade today to put these new capabilities to work in your environment. Explore the release notes Tenable Security Center Sharper visibility, streamlined operations The latest release of Tenable Security Center 6.9 brings several upgrades to help you accelerate your self-hosted vulnerability management program. Updated vulnerability findings interface: Rich filtering options (severity, asset, plugin, IP-based) and surfaced Vulnerability Priority Rating (VPR) insights help you zero in on what matters most, faster. Tenable Nessus scanner support via Sensor Proxy: Link Tenable Nessus scanners through the Sensor Proxy service for more flexible deployments and horizontal scaling across large enterprise and Tenable Enclave Security environments. Windows LAPS credential support: Dynamic credential retrieval from Active Directory (AD) strengthens scan security and reduces the admin burden of credential management. Expanded PAM Kerberos authentication: Support across BeyondTrust, Delinea, and CyberArk integrations gives you tighter credential control. One-click diagnostic bundle upload: Submit diagnostic files directly to Tenable Support from within your console, so we can resolve your cases faster. (Requires a valid Tenable Nessus feed license. Not supported in air-gapped environments.) Trending data moves to PostgreSQL: A lighter disk footprint and better performance for your trend reporting. Explore the release notes Tenable Nessus Stability fixes and continued security hardening with the latest Tenable Nessus releases Tenable Nessus 10.12.2 and 10.12.3 are now available, resolving a scanner connectivity issue and rounding out a batch of stability fixes: Your scanners stay online and up to date: We’ve addressed a bug where scanners could drop offline and stop receiving plugin updates after an upgrade, so you get consistent scan coverage without needing to manually check scanner status. Fewer stuck or incomplete agent scans: Cluster-based agent scans will finish reliably, so you will not need to re-run them. More accurate reporting on linked agents: You can always trust what you see in the console (requires Tenable Agent 11.2.0 or later). Want to see Tenable Nessus in action or level up your team’s skills? View a Tenable Nessus demo or purchase our on-demand training course. What these updates mean for you: If you were experiencing scanners going offline or missing plugin updates, updating to 10.12.3 will solve it. Tenable Agent customers should update to v11.2.0 or later to get the linked-agent plugin reporting fix. Review the release notes Tenable Nessus Professional data sheet Tenable Nessus Expert data sheet Tenable Patch Management Instant patch verification and expanded Linux support This latest update focuses on saving you time and verifying your fixes faster. Instantly verify patches: Automatically trigger a Nessus Agent scan the moment a patch finishes installing. You get immediate proof of CVE remediation without waiting for your next scheduled scan window. Natively patch EPEL packages: Update community-maintained add-on software across your Enterprise Linux distributions on the exact same schedule as your core OS, eliminating the need for custom scripts. Stronger security and faster performance: Benefit from upgraded AES-GCM encryption, easier TLS certificate management directly from your console, faster dashboard load times, and fixes that keep your maintenance windows accurate to prevent unwanted reboots. Read the full details on Tenable Connect Training and Product Education Tenable One Cloud Exposure Specialist Training refreshed in Tenable University The instructor-led Tenable One Cloud Exposure Specialist product training in Tenable University is rebuilt with modernized content and hands-on lab exercises. All labs and course content now reflect the latest user interface and recent feature releases. Learn more Buy instructor-led training Tenable Events and Webinars Virtual events Tenable customer update, July 2026: Watch the most recent quarterly customer update session. This informative, fast-paced overview explores how to better secure your expanding attack surface and consolidate critical security data. Products covered include Tenable One, Tenable One AI Exposure, Tenable One Vulnerability Management, and Tenable Security Center. Watch the July customer update Live from SWARM: An announcement to shift the future of agentic AI security. Watch the replay of a special 15-minute session streaming directly from SWARM, our exclusive agentic AI build event at Black Hat USA 2026. The session dives into the realities of AI-augmented exposure management and a special announcement that will change how the infosec community collaborates on AI security. Watch on LinkedIn --- Read Tenable documentation.
New in Tenable One Vulnerability Management: Dedicated spaces for Software Inventory and Host Audits
We’ve updated the Explore section in Tenable One Vulnerability Management with two new dedicated tabs: Software and Host Audits. These updates decouple software exposure and configuration compliance from standard CVE finding workflows, giving you dedicated views built specifically to track installed software footprints and streamline compliance reporting. 1. The Software Tab: Take control of your software inventory Seamlessly track and manage your software inventory directly within Tenable One Vulnerability Management. Built on the Explore UI, the new Software Tab delivers the deep visibility needed to streamline asset management, track deployed versions across your footprint, and maximize your SBOM value Key capabilities Pinpoint specific software: Search across your environment using Vendor and Product Name filters alongside Tenable risk metrics like Asset Criticality Rating (ACR) and Asset Exposure Score (AES) to identify high-value targets running unsupported or risky applications. Organize your view: Use the left-side tree navigation to filter by product types (e.g., Databases, Operating Systems), or group software by Asset (to see everything installed on a given asset) or by Vendor (to see total software deployment across your network). Take action: Drill deep into granular software details for deeper investigation or export full/filtered software inventories to CSV for internal audits and reporting. Important operational notes for software data: Scan requirements: The Software tab relies on credentialed network scans or Tenable Agent scans to inspect host file systems. Non-credentialed scans will not populate this tab. 30-day retention window: Software data is retained for 30 days. If an asset is not re-scanned within 30 days, its software records are automatically removed to prevent stale data from cluttering your inventory. Ensure your credentialed scan schedules run at least monthly to maintain an accurate view. Documentation links: Overview of the Software Tab Using Filters and Left-Tree Navigation Exporting Software Data and CSV Keys 2. The Host Audit Tab: Isolated compliance and hardening workflows Evaluating CIS benchmarks or internal hardening policies requires a different mindset than patching missing software updates. Mixing configuration checks with vulnerability findings creates unnecessary clutter when preparing for an audit. We moved Host Audits out of Explore > Findings and gave them a dedicated top-level Host Audit tab. Key capabilities Clear result categorization: Instantly filter host audit findings by status: Passed, Failed, Warning, Info, Skipped, Error, or Unknown. Group by audit check or asset: Group by audit check to see every machine failing a specific CIS benchmark control. Group by asset to review the complete configuration posture of an individual server or workstation. Streamlined evidence exporting: Filter down to your failed audit checks and export reports or CSVs directly formatted for compliance officers and external auditors. 15-Month data retention: Audit findings are retained for 15 months, giving you historical context to demonstrate compliance posture over time. Where did my audit data go? If you previously tracked host audits under Explore > Findings, that data has transitioned entirely to the new Host Audits tab. Your historical audit data remains intact. Documentation links: Getting Started with Host Audits Grouping and Filtering Host Audit Findings Generating Host Audit Reports Questions or feedback? Try out the new tabs in Explore today. If you have feedback on how these views fit into your daily workflow, drop a comment below.
Introducing Tenable Security Center 6.9.0
We're excited to announce that Tenable Security Center 6.9.0 is now globally available. This release delivers a modernized vulnerability findings UI, expanded scanning flexibility, and stronger security foundations — built on feedback from our customer community. What's new? Explore Findings — A modernized vulnerability query interface with expanded filtering (severity, asset, plugin, IP-based) and VPR key driver fields right in the findings detail panel. The legacy Analysis view is still available alongside it. Nessus Scanners via Sensor Proxy — Link Tenable Nessus scanners through the Sensor Proxy service for more flexible deployments and horizontal scaling in large enterprise and Tenable Enclave Security environments. Diagnostic Bundle Auto-Upload — Submit Security Center diagnostic files straight to Tenable Support from the console — no more manual download/re-upload. (Requires a valid Tenable Nessus feed license; not supported in air-gapped environments.) Windows LAPS Credential Support — Scan credentials can now be retrieved dynamically from Active Directory via Windows Local Administrator Password Solution. PAM Kerberos Target Authentication — Kerberos Target Authentication is now supported for Windows and SSH credentials across integrations including BeyondTrust Password Safe, Delinea Secret Server, and CyberArk. FIPS 140-3 — SC 6.9.0 integrates OpenSSL 3.5 with the FIPS provider, moving toward full FIPS 140-3 compliance (currently undergoing NIST validation). Other notable enhancements Trending Data Migration to PostgreSQL — Trending data now lives in PostgreSQL instead of legacy file storage, reducing disk usage and paving the way for expanded trending capabilities. Existing trend data carries over automatically. Note: trend charts modified/created on 6.9.0+ will start their trend history from the edit/creation date. Freeze Window Rollover Scan Control — New option to suppress automatic rollover scan creation during freeze windows, preventing backlog buildup after large maintenance windows. Section 508 Accessibility — Improvements to screen reader support and keyboard navigation. Overall performance and stability improvements, plus 60+ customer-reported bug fixes. Upgrade considerations Upgrades are supported from Security Center version 6.5 and above. This release includes [R1] Security Center Version 6.9.0 Fixes Multiple Vulnerabilities. 8GB RAM is now a requirement — upgrades/installs will not proceed below this. Upgrade time from version 6.7+ depends heavily on the number of trending charts in your Reports; consoles with hundreds/thousands of trend components may take several hours. Running the RPM installer from a separate /tmp partition requires 10GB free space. Resources Release notes User guides Download Tenable Security Center 6.9.0 Have a question? Leave a comment below or contact your Tenable representative.
[New Release] Detect non-compliant post-quantum cryptography cloud resources
Encrypted traffic captured today can be stored and decrypted later once quantum computing matures. This is a threat known as Harvest-Now-Decrypt-Later (HNDL). Organizations relying on outdated Transport Layer Security (TLS) configurations or non-quantum-safe encryption are exposed to this risk without even knowing it. Tenable One Cloud Exposure now helps customers detect non-compliant post-quantum cryptography (PQC) cloud resources to support future compliance regulations. With this, four new properties have been added to the Network Endpoint profile for HTTPS-supported endpoints: SSL/TLS Versions, SSL/TLS Cipher Suites, SSL/TLS PQC Support, and SSL/TLS Key Exchange Groups. The Network Endpoint profile also now lists every cipher a server supports, not just what's actively in use. The enhancement allows teams to: Gain visibility into quantum-readiness: See which endpoints already support post-quantum cryptography and which don't, so you can prioritize upgrades ahead of emerging compliance mandates. Get all non-PQC-r resources listed in one query. Identify weak encryption faster: Surface outdated TLS versions and vulnerable cipher suites across your environment without manual audits or separate scanning tools. Reduce HNDL exposure: Proactively harden key exchange methods and ciphers before intercepted traffic becomes a future liability. Gain compliance evidence: This allows customers in regulated industries such as healthcare and financial services to easily prove compliance as quantum computing matures. To find these resources in your cloud environment, go to Tenable One Cloud Exposure and filter or query “non-ready PQC resources” using the Network Endpoint page or Explorer.The Tenable Patch Management July Release is live
Tenable Patch Management (v10.2.973.9) is now available for both SaaS and On-Premise environments. This release introduces real-time post-deployment rescan automation, broadening enterprise Linux package support, and hardening platform security. Here is a breakdown of key enhancements and updates included in this release. 1. Post-patch Nessus Agent scan triggers What’s new: Patch deployments can now automatically trigger a Nessus Agent scan the moment installation completes. This relies on a localized trigger file managed by the client. Why it matters: You do not have to wait for your next scheduled vulnerability scan window to verify that a patch took effect. The agent initiates a scan immediately, providing prompt confirmation that a CVE is remediated. Use case: Once a patching process completes on a client, the system creates or updates a specific file (default is patch_trigger), which prompts the Nessus Agent to initiate a Nessus agent scan. 2. Expanded fleet coverage and OS support What’s new: Added native support for Extra Packages for Enterprise Linux (EPEL) across supported Linux distributions, including RHEL, CentOS Stream, AlmaLinux, and Rocky Linux. Why this matters: You can patch community-maintained add-on software using standard patching workflows without writing custom repository scripts or manually handling updates. Use case: Admin utilities, extra developer libraries, and secondary tools pulled from EPEL stay updated on the same schedule as core operating system components. 3. Critical security & platform hardening What’s new: Default platform encryption is updated from AES-CBC to AES-GCM. Administrators can also provision additional trusted TLS certificates to clients directly from the management server. Why this matters: AES-CBC without message integrity checks leaves communications open to cipher-mode attacks. Moving to AES-GCM eliminates this vulnerability, while server-side TLS provisioning simplifies client trust updates. Use case: Meet strict enterprise cryptographic auditing requirements while seamlessly rotating endpoint TLS certificates directly from the management console. 4. Performance enhancements and bug fixes Schedule Editor Accuracy: Resolved a defect where setting the "Week of the Month" to 4 would automatically enable the "Last Week of the Month" toggle, preventing unintentional schedule overlaps. Deployment & Delay Logic: Corrected an issue where Delay Deployment routines fired prematurely following a server upgrade outside of defined maintenance windows. Deployment Request Errors: Resolved "Unable to queue deployment request patch" errors causing widespread installation failures. Maintenance Window Integrity: Fixed a defect where legacy Express license attributes persisted post-upgrade, causing unwanted reboots during maintenance hours. Dashboard Acceleration: Updated the underlying database schema to accelerate load times on the Device - CVE Detections dashboard. Integration Reliability: Resolved 502 Bad Gateway errors on the Tenable Vulnerability Management integration page by improving data request handling and session ID generation. Client Queue & Connectivity Fixes: Resolved "Unable to queue deployment request" errors during patch execution, added clearer REST API error messages for permission issues, and resolved Tailscale IP binding issues during client scans Client Installer Authenticity: Resolved an issue where the Windows Client MSI showed an "Unknown Publisher" warning in Microsoft Defender SmartScreen due to an invalid digital signature. Customized Products Bug: Resolved an issue where Duo Authentication for Windows Logon x64 configuration parameters (such as Enable UAC Elevation Protection) were missing in the Customized Products section. Upgrade instructions SaaS / Cloud deployments: No manual action is required. Your product is updated to version v10.2.973.9 automatically. On-premise deployments: Server admins can download the latest installer from the Tenable Downloads Portal. Resources Release version: 10.2.973.9 Release date: July 29, 2026 Changelog: View Release Notes Documentation: Tenable Patch Management complete documentation hub Have feedback or deployment questions? Reach out to your Tenable representative, or start a thread right here in Connect!
[GA Release] Tenable App for Splunk v6.1.1 and Tenable Add-on for Splunk v8.0.3 Now Live!
Hi everyone! Tenable App for Splunk v6.1.1 and Tenable Add-on for Splunk v8.0.3 are officially GA and available now on Splunkbase! Release Date: July 27, 2026 Download: Tenable App for Splunk on Splunkbase Tenable Add-on for Splunk on Splunkbase Docs & User Guide: Tenable App for Splunk Documentation Tenable Add-on for Splunk Documentation What’s New? Bumped the minimum required Python version to 3.13 as per Splunk standards. Compatibility Matrix: Browser: Google Chrome, Mozilla Firefox OS: Platform Independent Splunk Enterprise version: 10.2.x, 10.0.x, 9.4.x and 9.3.x Supported Splunk Deployment: Splunk Cluster, Splunk Standalone, and Distributed Deployment Questions or Feedback? If you have feedback or questions, we’d love to hear from you! - Tenable Ecosystem Product ManagementTenable Product Update Newsletter — July 2026
Check out our July newsletter to learn about the latest product and research updates, events, and educational content. Plus, this month we’re featuring the launch of the CyberAgents Exchange, powered by Tenable. Keep reading to read more about the new open-source AI exchange! Tenable One - Platform updates Integrate application security data into Tenable One for code-to-runtime security Your codebase is growing faster than your security program, and in the age of AI, developers are introducing security findings at 10 times the rate of their peers. It is critical to see code as part of your entire attack surface. Application security data now integrates directly into Tenable One to further close visibility gaps and ensure secure code development in the AI era. Whether code is human- or machine-written, you can now integrate application security risks, like those from Snyk, Claude Security, or any other application security tool via Tenable One Connectors — directly alongside your existing exposure data. What this means for you: Achieve full code-to-runtime visibility by bringing application security risks together with the rest of your exposure data in one place. Fix code flaws before they become incidents by identifying your most business-critical code flaws and fixing them early in the development lifecycle. Measure organizational exposure and transform technical static code vulnerabilities into clear risk metrics on business resilience. Read the blog post Explore the guided demo Check out Open Connector documentation and Snyk Connector documentation Improved workflow orchestration capabilities in Tenable One Vulnerability Management and Tenable One New enhancements to Tenable's workflow orchestration capabilities are now generally available. This release streamlines remediation workflows and improves operational efficiency with the following key updates: Plugin output in tickets: You can now attach Plugin Output directly to tickets, providing immediate context and critical information while eliminating the need for further navigation. Tenable Hexa AI for ServiceNow: You can now leverage Tenable Hexa AI for ServiceNow incident and initiative creation to match already available Jira functionality. Review the exposure management release notes Review the Tenable Vulnerability Management release notes Tenable unified scoring is now live Tenable has unified its risk prioritization standard, moving the high-fidelity Vulnerability Priority Rating (VPR) model out of beta to become the sole standard. To sharpen your prioritization, an updated asset classification engine also delivers more accurate Asset Criticality Ratings (ACR) for your assets. Because VPR and ACR feed directly into your Cyber Exposure Score (CES) and Asset Exposure Score (AES), your console will automatically update to reflect a precise understanding of your exposure. These recalculations occur automatically, though completion times depend on the size of your environment. To prevent errors in your saved views, you must manually update any filters or combinations that still use VPR v1. No data migration is required. Visit Tenable Connect for more details Learn more about Tenable One scoring The CyberAgents Exchange, powered by Tenable Tenable launches the industry’s first open-source AI exchange (and we want your agents on it) Security teams are building AI agents in isolation, reinventing the wheel with no neutral place to share what actually works. The CyberAgents Exchange, powered by Tenable, is the only purpose-built, cybersecurity-native registry for AI agents, skills, MCP servers, and multi-agent playbooks in the current market. Built by defenders. For defenders: Purpose-built for security teams to solve the exposure problems practitioners actually face. Collective defense for the agentic era: Anyone can contribute; everyone benefits. Agents and skills are shared under open licenses with no fees or gates. Trust through transparency: Every agent links directly to its source repository, so there are no bundled binaries or black boxes. Build your reputation. Elevate your craft: Contributing is career capital. We give practitioners a platform to earn validation and build an undeniable resume. Join the community, build your reputation, and start automating risk reduction. Explore the directory and submit your builds Tenable One Cloud Exposure Tenable One Cloud Exposure achieves FedRAMP High authorization Tenable is committed to being the trusted partner of choice for the public sector, providing the advanced protection required for the U.S. government’s most sensitive environments. We are proud to announce that Tenable One Cloud Exposure has achieved FedRAMP High and Impact Level 5 (IL5) authorization. Purpose-built for sensitive government cloud environments, this high-level authorization delivers: Unified visibility: Gain a single view across infrastructure, identities, and workloads — even in air-gapped environments. Zero-trust enforcement: Leverage advanced identity analytics to enforce least privilege principles and align with DoW CIO mandates. Blast radius reduction: Map the Web of Risk to see how vulnerabilities connect to identities and sensitive data, stopping problems before they snowball. Cost reduction: Support fiscal modernization by eliminating tool sprawl and reducing costs without compromising security. Read the press release Learn more about our FedRAMP High solutions Take control of your sensitive data When data classification engines scan the cloud, they often flag false positives, like internal test data, mock databases, or benign corporate email domains, as critical risks. With Tenable’s new data classification exclusions, customers can fine-tune their data scans to get to the bottom of what’s actually sensitive. Exclude by resource scope: Narrow exclusions to specific data types or resources using user-friendly Explorer-based queries. Exclude specific values: Filter out known text patterns or regex strings (like internal email domains). Target precise locations: Use OR logic to pinpoint exact databases, schemas, tables, file extensions, or object paths. Learn how to create a data classification exclusion Read about the recent releases here Tenable One Web App Scanning Authenticate web app scans with OAuth 2.0 You can now scan protected applications and APIs using OAuth 2.0 authentication within Tenable One Web App Scanning. Configure these options under your scan credential settings using three supported flows: Authorization code: For user-driven logins, with optional PKCE and Selenium scripting for complex identity providers. Client credentials: For machine-to-machine API scans without user interaction. Device code: For headless and device-style authentication. To prevent scans from silently losing access, authorization verification continuously validates your session via response patterns, headers, or HTTP status codes across all credential types. Integrate these capabilities immediately through your existing credentials API without changing endpoints. You can call the List Credential Types endpoint to programmatically discover the new fields. Review the documentation Review the release notes Tenable One OT Exposure Extended OT visibility for grid operators and disconnected environments Our latest Tenable One OT Exposure release expands visibility for grid operators and disconnected environments, and introduces productivity and performance enhancements to accelerate analyst workflows. OT agent for disconnected environments: Secure air-gapped and isolated networks without deploying sensors or requiring live connectivity, featuring offline scan profiles, a local agent interface tailored for field technicians, and centralized Network Areas to resolve duplicate IP conflicts across distributed sites. Power substation anomaly detection: Passively monitor GOOSE streams and alert on anomalous activity (e.g., code revision changes) to protect utility and grid operations from unauthorized modifications or replay attacks. Yokogawa DCS activity detection: Get deep visibility into engineering activities on Yokogawa Centum VP systems to detect changes to critical operations and unauthorized access, including controller start/stop, code edits, function block changes, tag writes/deletes, and more. Simplified enterprise management: Manage all ICP subnets from a single Enterprise Manager interface — define CIDR boundaries, toggle monitoring per-site, and eliminate the need for per-ICP configuration for monitoring different network areas. Analyst workflow improvements: Reuse investigations with Saved Views, review Assets and Findings details faster with a quick-access side panel, and secure syslog transport with TLS support. Explore the user guide Review the release notes Tenable Security Center Reimagined vulnerability analysis, flexible deployment, and streamlined operations Tenable Security Center 6.9, now available in early access, modernizes vulnerability analysis and expands enterprise deployment flexibility with a reimagined query experience and deeper PAM and credential integrations. Explore Findings: A redesigned vulnerability query interface with expanded filtering and VPR key drivers surfaced directly in the findings detail panel. Tenable Nessus scanners via Tenable Sensor Proxy: Deploy Tenable Nessus scanners through Tenable Sensor Proxy for flexible, scalable enterprise and Tenable Enclave Security environments. Windows LAPS and PAM Kerberos support: Dynamically retrieve scan credentials via Windows LAPS and Kerberos Target Authentication across all supported PAM integrations. Performance improvements: Submit diagnostic bundles directly to Tenable Support, suppress rollover scans during freeze windows, and benefit from a modernized data architecture that reduces disk usage. Explore the user guide Download the early access release Tenable Ecosystem Now available: PyTenable 26.6.1 PyTenable 26.6.1 has officially been released, introducing a new temporal versioning scheme (YEAR.MONTH.PATCH) to better align with rapid API changes and enable critical updates to older modules. Marshmallow v4 support: Resolved issues preventing the use of newer Marshmallow versions. APA export: Added support in the current Tenable One package. Streamlined testing: Refactored workflow processes mean you no longer need Act and Docker installed just to run the test suite. Bug fixes: Addressed various minor issues introduced by recent API changes. Moving forward, support will be provided for the current month minus three releases, so we highly recommend pinning your software to a specific release and testing against the latest. Visit the PyTenable GitHub repository Training and product education Tenable One Exposure Management Platform introduction course includes CTEM This introductory course in Tenable University now incorporates the foundations of the Continuous Threat Exposure Management (CTEM) framework to identify exposures, prioritize remediations, and reduce risk across your modern attack surface. Practitioners and partners will learn the fundamentals of continuous hybrid asset discovery, risk-based scoring, and validating critical attack paths to effectively manage security posture. This no-cost course serves as the essential primer and recommended prerequisite for the Specialist tier. Access the course on demand in Tenable University On-demand Tenable One Exposure Management Platform Specialist course now available This brand-new paid Tenable University training course provides comprehensive Continuous Threat Exposure Management (CTEM) lifecycle training across the entire Tenable One architecture. The Specialist-level course delivers deep technical coverage of the Tenable One Exposure Management Platform, including: Tenable One Vulnerability Management Tenable One Attack Surface Management Tenable One Identity Exposure Tenable One OT Exposure Tenable One Cloud Exposure Tenable One Web App Scanning Practitioners will gain proficiency in third-party data integration, advanced asset tagging, and context-aware analytics (such as Attack Path Analysis and Exposure Signals) to drive risk-based prioritization and deliver actionable executive dashboards. Eligible for Continuing Education (CE) credit. Learn more and purchase online Tenable events and webinars Customer office hours These are recurring ask-me-anything sessions for Tenable Security Center, Tenable One Vulnerability Management, Tenable One Cloud Exposure, Tenable One Identity Exposure, and Tenable One OT Exposure. Time-zone-appropriate sessions are available for the Americas, Europe (including the Middle East and Africa), and Asia-Pacific (APAC). Learn more and register Virtual events Now on demand — Tenable customer update, July 2026: Watch the most recent quarterly customer update session. This informative, fast-paced overview explores how to better secure your expanding attack surface and consolidate critical security data. Products covered include: Tenable One, Tenable One AI Exposure, Tenable One Vulnerability Management, and Tenable Security Center. Watch on demand See all upcoming live and on-demand webinars Read Tenable documentation.
Now available: Integrate application security data into Tenable One for code-to-runtime security
Your codebase is growing faster than your security program, and in the age of AI, developers are introducing security findings at 10 times the rate of their peers. It is critical to see code as part of your entire attack surface. We’re excited to announce that application security data can now be integrated in Tenable One to further close visibility gaps and ensure secure code development in the AI era. Whether code is human or machine-written, you can now integrate application security risks—like those from Snyk, Claude Security, or any other application security tool via Tenable One Connectors—directly alongside your existing exposure data. What this means for you: Achieve full code-to-runtime visibility by bringing application security risks together with the rest of your exposure data in one place. Fix code flaws before they become incidents by identifying your most business-critical code flaws and fix them early in the development lifecycle. Measure organizational exposure and transform technical static code vulnerabilities into clear risk metrics on business resilience. Ready to integrate application security data into Tenable One? Read the blog post Explore the guided demo Check out Open Connector and Snyk Connector documentationIntroducing The CyberAgents Exchange: The Open-Source Hub for Cybersecurity AI
Attackers are adopting AI alarmingly fast, while frontier models are escalating exposure at an unprecedented scale. Meanwhile, security teams are building AI agents in isolation, solving the same problems, and reinventing the same tools with no neutral place to share what works. Collective defense only works if the community can act on it together. That is why we are thrilled to announce The CyberAgents Exchange, powered by Tenable. The CyberAgents Exchange is the open-source, vendor-agnostic hub for practitioners and CISOs to discover, share, and collaborate on AI agents, skills, MCP servers, and playbooks built for cybersecurity. Why The CyberAgents Exchange? The best security solutions come from practitioners closest to the problem. The Exchange is purpose-built for security teams, providing the infrastructure to automate workflows without reinventing the wheel. Here is what you can expect: Open-source and vendor-neutral: Agents work with any stack and are not locked to one platform. Trust through transparency: Every agent on the Exchange links directly to its source repository, so there are no bundled binaries or black boxes. Community-built credibility: The Exchange is curated by security professionals, for security professionals. Completely free: There are no fees to list or use agents, and the Exchange is open to any organization. Start Building Together Whether you are looking to browse production-tested agents, install skills, connect MCP servers, or compose multi-agent playbooks, the CyberAgents Exchange gives you the tools to scale your security operations. If you are already building agents, this is your platform to share your work, earn public validation, and elevate your craft. Ready to add your expertise? Head to exchange.tenable.com to get started! Navigate to the Contribute page via the top navigation bar to see step-by-step instructions on how to easily contribute an agent, skill, MCP server, or playbook to the site.Tenable One Cloud Exposure achieves FedRAMP High and IL5 Authorization
At Tenable, we are committed to being the trusted partner of choice for the public sector, providing the advanced protection required for the U.S. government’s most sensitive environments. We are proud to announce that Tenable One Cloud Exposure has achieved FedRAMP High and Impact Level 5 (IL5) authorization. Why this matters for the federal mission This milestone significantly expands our ability to support high-security federal environments, including those used by the Department of War (DoW) and intelligence agencies. As agencies accelerate cloud modernization and AI adoption, they face an increasingly complex landscape of misconfigured workloads and fragmented security tools. Tenable One Cloud Exposure addresses these challenges by consolidating critical security functions into a single, cost-efficient platform. This authorization enables new mission-critical use cases, including classified and tactical edge deployments, ensuring operational effectiveness for the AI era. Key impact and capabilities Purpose-built for sensitive government cloud environments, this high-level authorization delivers: Unified visibility: Gain a single view across infrastructure, identities, and workloads—even in air-gapped environments. Zero trust enforcement: Leverage advanced identity analytics to enforce least privilege principles and align with DoW CIO mandates. Blast radius reduction: Map the "Web of Risk" to see how vulnerabilities connect to identities and sensitive data, stopping problems before they snowball. Cost reduction: Support fiscal modernization by eliminating tool sprawl and reducing costs without compromising security. What this means for you Starting in June, federal agencies can leverage Tenable One Cloud Exposure to protect sensitive data and mission-critical operations across all classification levels. This new authorization complements our existing FedRAMP High and IL5 authorization for Tenable Enclave Security, providing a comprehensive ecosystem for the most demanding federal security standards. Learn more about our FedRAMP High solutions here.
