Tenable
One

Tenable One is an exposure management platform. It helps organizations gain broad attack surface visibility, prevent attacks, and accurately communicate cyber risk to support optimal business performance.

The platform combines the broadest vulnerability, misconfiguration, and entitlement coverage spanning IT assets, OT / IoT devices, cloud resources, AI assets, containers, web apps, code repositories, and identity systems. It builds on the breadth and accuracy of vulnerability coverage from Tenable Research and adds comprehensive analytics to prioritize remediation actions and communicate cyber risk. Tenable One allows organizations to:

• Gain comprehensive visibility across the modern attack surface
• Anticipate threats and prioritize efforts to close exposures and prevent attacks
• Communicate cyber risk to make better decisions

Tenable One includes the following Tenable product domains.

• Tenable One AI Exposure
• Tenable One Vulnerability Management
• Tenable One Web App Scanning
• Tenable One Cloud Exposure
• Tenable One Identity Exposure
• Tenable One OT Exposure
• Tenable One Attack Surface Management
• Tenable One Connectors

Capabilities include:

• Exposure view enables focused security efforts through clear, concise insight into your organization’s security exposure. It helps you answer critical questions like: “How secure are we?” “Where do we stand in our preventative and mitigation efforts?” “How are we doing over time?” “What are the key events?” Custom exposure cards enable concise, flexible communication of specific security insights based on unique organizational reporting requirements.
• Unified dashboards, powered by native and third-party data, give you deep, actionable insights into exposure across the entire attack surface. With pre-built and customizable dashboards, you can analyze risk, drill into key metrics, track progress over time, and clearly communicate insights to stakeholders to drive better decisions and stronger security outcomes.
• Tag performance addresses which tags make up an exposure card and how much that group of assets contributes to a given exposure score.
• Tenable Hexa AI is the agentic orchestration engine embedded within Tenable One. Powered by Tenable’s Exposure Data Fabric, it transforms rich exposure intelligence into continuous, coordinated, and automated action across your entire attack surface at machine speed. Going beyond traditional AI chatbots that simply summarize vulnerabilities, Hexa AI executes complex, multi-step workflows—from automated asset tagging to remediation—while ensuring your team retains full oversight through built-in human-in-the-loop controls.
• Attack path analysis (APA) shows you how threat actors can exploit weaknesses to move across your environment. With more than 150 supported attack techniques, APA continuously monitors gaps across endpoint, identity, and cloud to proactively visualize attack paths and mitigate high-risk exposures. It performs this function by mapping critical risks to the MITRE ATT&CK framework to visualize all viable attack paths continuously — both on-prem and in the cloud.
• Exposure signals are a cross-domain prioritization capability designed to identify toxic combinations of vulnerabilities, identities, threats, installed software, and assets that amplify organizational risk. By fusing Tenable sensor data with risk-scoring metrics and asset context (e.g., criticality, ownership), you can surface high-exposure scenarios that require immediate remediation.
• Asset inventory provides a centralized view of all assets, weaknesses, and tags, including IT, OT, IoT, cloud, AI identities, code repos, and web apps, with the ability to create specific asset tags from a variety of sources.
• External attack surface management (EASM) offers insight into your external attack surface, empowering your organization to identify and reduce risks from the attacker’s perspective.
• News integration with Tenable Research blogs allow for creation of custom exposure cards that reflect cybersecurity developments.
• Tenable One Connectors bring in data from other vulnerability management, application security, cloud security, endpoint security, OT security, and asset inventory and management systems to provide a fully unified, contextual view of risk across your entire attack surface.

Tenable's use of AI for exposure management includes agentic AI, generative AI, deep learning, and machine learning. It empowers your security teams to make informed decisions that enhance prioritization, resilience, and democratize access to advanced threat analysis and mitigation guidance.

• Agentic AI engine: Tenable Hexa AI is the agentic orchestration engine embedded within the Tenable One that transforms contextual exposure intelligence into automated, multi-step security workflows to reduce cyber risk at machine speed.
• Generative AI assistant: Tenable One leverages generative AI and deep learning to accelerate analysis, simplify insights, and drive faster, more effective security decisions — empowering organizations to proactively manage and reduce their cyber exposure.
• Exposure prioritization: Tenable uses patented machine learning models for advanced prioritization, including vulnerability priority rating (VPR), OS prediction from network data, and predictive scoring for assets. This helps teams focus on a small percentage of vulnerabilities most likely to be exploited, improving remediation effectiveness.
• AI risk visibility and management: Tenable One AI Exposure in Tenable One unifies AI software, cloud infrastructure, identities, and data interactions into a single, risk-aware view. It maps interconnected AI risk across three core pillars:
  • Discover AI assets: provides continuous, end-to-end visibility by identifying internal shadow AI tools and plugins, mapping external internet-facing AI endpoints, and uncovering cloud-based AI infrastructure and workflows.
  • Protect AI workloads: hardens cloud-based AI infrastructure with AI-SPM, enforces least-privilege access for non-human identities and autonomous agents, and eliminates high-impact attack paths caused by misconfigurations and excessive permissions.
  • Govern AI usage: enforces policy-based guardrails on employee and agent behavior, prevents sensitive data and IP leakage across LLM interactions, and defends against adversarial threats like prompt injection and jailbreak attempts.

Tenable One offers a broad range of third-party connectors across vulnerability management, application security, cloud security, endpoint security, OT security, and asset inventory and management. We're continuously expanding our ecosystem by adding more connectors and supporting new security categories. Explore all connectors.

All data ingested into Tenable One is fed into our exposure data lake, where it is combined with Tenable sensor data and native exposure intelligence. Our AI-driven ingestion engine then correlates, normalizes, and deduplicates the data, ensuring you are left with a clean and accurate view of risk. This creates a consistent, structured semantic layer, which reduces manual intervention and enhances data accuracy, context, and usability.