Tenable

Tenable is vulnerability management software built on the Nessus scanner, for security teams, with scanners sold per licence and Tenable One by asset count.

Tenable finds the weaknesses in an organisation's servers, laptops, cloud accounts and websites, then ranks the ones an attacker is most likely to exploit. Tenable Holdings, Inc., a Nasdaq-listed security company founded in 2002 and based in Columbia, Maryland, makes it. The line starts with Nessus, a vulnerability scanner, and extends into Tenable One, a cloud platform that pools scan results with cloud, identity and operational technology data. Both are sold from one store, so a team can begin with a scanner and add the platform later. Nessus Professional scans networks without a cap on scan count and ships audit policies that check hosts against CIS benchmarks. Nessus Expert adds web app scanning and external attack surface discovery. Tenable One Vulnerability Management merges assets found by Tenable Agents, network scans and cloud connectors into one inventory. It ranks each finding by the Vulnerability Priority Rating, shown beside EPSS and CVSS v4 scores, and weights risk by an Asset Criticality Rating. Tenable One Web App Scanning tests web applications and APIs against the OWASP Top 10. Tenable One Exposure Management adds OT and IoT security, attack surface management, AI discovery and attack path analysis. Tenable suits security teams that own vulnerability management across a mixed estate and need one ranked list of what to fix. A small team can start with a single Nessus licence and move to Tenable One as its estate grows. Organisations that keep scan data inside their own network run Tenable Security Center on premises instead of the cloud service. Businesses under PCI DSS can add Tenable PCI ASV for approved external scans. Organisations with OT and IoT devices beside office IT fit the wider Exposure Management platform. In practice, scan, agent and connector results meet in one findings table. Analysts sort it by priority, then open the Solutions view to see which patch or configuration change clears the most findings. Recast rules record an accepted risk along with the date the rule expires. Hardening audits run from the same Nessus scanners, which puts configuration gaps beside missing patches. Other systems read findings and asset data through the APIs on the Tenable Developer Portal. Tenable fits security teams that want a scanner today and a path to exposure management across IT, cloud and OT.