Tenable Expands Tenable One to Integrate Application Security Static Code Vulnerability Data
7th article in the last 90 days, one of 18 articles referencing Tenable. Previous coverage: Tenable Holdings introduces continuous security control validation in Tenable One (Jun 2026).
Companies mentioned
Best suited for
- Seniority
- C Level / Executive Team
- Job function
- Chief Information Security Officer
- Persona
- Security Operations Leader
- Buyer role
- Decision Maker / Budget Holder
- Decision stage
- Which to buy
- Adoption curve
- Early Adopters
- Technology maturity
- Market Correction
- Industry
- Information Technology / Software & Services / IT Services / Cloud Services
Our classification, not the publisher's statement. Best suited for, not only for.
Tenable Holdings, Inc. expanded the Tenable One Exposure Management Platform by adding application security static code vulnerability data into its exposure management approach. The update connects code-level risk with broader exposure signals so security teams can assess where vulnerabilities exist and how they align with other risk data across an organization.
The company said security teams had difficulty with a code security problem in which vulnerable code reached production faster than it could be reviewed. It also cited increased pressure from generative AI, which it said can lead to higher code delivery speed and a higher rate of potential flaws, while common approaches relied on siloed tools without contextual infrastructure intelligence.
As described, Tenable One ingests, analyzes, and normalizes data from application development and security sources, including AI application security tools such as Claude Security. It connects telemetry, endpoint protection, cloud security, vulnerability management, operational technology security, and data from configuration management databases and other repositories, and then links exposure data across the code-to-runtime path.
Application security data integrations were made available for all Tenable One customers, with the expansion intended to support risk prioritization. Tenable One integrates static code vulnerability data so teams can connect code risks to runtime systems, cloud workloads, identities, and attack paths. Eric Doerr, Chief Product Officer, Tenable, said, “Bringing application security data into Tenable One, we're giving our customers the context they’ve been missing,” said Eric Doerr, Chief Product Officer, Tenable. “Security teams don’t need to wade through a sea of vulnerabilities. With Tenable One, security teams know exactly where they are exposed the moment an exposure is created – whether an agentic AI tool discovers a new zero-day in an open-source library or a human error introduces risk. For the first time, security teams can see code flaws and prioritize remediation actions alongside all other forms of risk for more effective risk reduction.”
Forward-looking statements were not included in the provided text.
Press release, provided by Globe Newswire on behalf of Tenable. Read the original.