Tenable

Vulnerability management and risk assessment platform for detecting, prioritizing, and remediating security risks across IT assets.

Product categories

Vulnerability management, detection, and response (VMDR)
Identifies, prioritizes, and mitigates vulnerabilities across networks, systems, and applications to strengthen security posture in cloud environments.
Cloud security posture management (CSPM)
Continuously monitors cloud infrastructures for risks and misconfigurations, ensuring adherence to security best practices and compliance requirements.
Cloud workload protection platform (CWPP)
Protects cloud workloads in multi-cloud and hybrid environments, offering tailored security for various cloud deployment models.
Cloud-native application protection platform (CNAPP)
Provides integrated security and compliance tools to protect cloud-native applications across development and runtime environments.

Supported cloud providers

Amazon Web Services
Google Cloud
Microsoft Azure
Oracle Cloud

Acquisitions

Eureka Security acquired on June 6, 2024
Cloud data security platform focusing on discovery, classification, and protection of sensitive data in multi-cloud environments.
Ermetic acquired on September 12, 2023 for $240M
Identity-first cloud infrastructure security platform managing and securing identities and entitlements across complex cloud environments.
Bit Discovery acquired on April 26, 2022 for $45M
Attack surface management platform enabling organizations to discover, monitor, and secure their internet-facing assets and reduce digital risk exposure.
Cymptom acquired on February 1, 2022
Attack path management solution simulating attack scenarios to identify and reduce risks across network and cloud environments.
Accurics acquired on September 13, 2021
Cloud-native security platform for infrastructure as code (IaC), enforcing policies and remediating risks across multi-cloud environments.
FlawCheck acquired on October 26, 2016
Container security solution providing vulnerability scanning, risk assessment, and runtime protection for containerized applications.