Tenable Expands Tenable One to Integrate Application Security Static Code Vulnerability Data

Tenable Holdings, Inc. expanded the Tenable One Exposure Management Platform by adding application security static code vulnerability data into its exposure management approach. The update connects code-level risk with broader exposure signals so security teams can assess where vulnerabilities exist and how they align with other risk data across an organization.

The company said security teams had difficulty with a code security problem in which vulnerable code reached production faster than it could be reviewed. It also cited increased pressure from generative AI, which it said can lead to higher code delivery speed and a higher rate of potential flaws, while common approaches relied on siloed tools without contextual infrastructure intelligence.

As described, Tenable One ingests, analyzes, and normalizes data from application development and security sources, including AI application security tools such as Claude Security. It connects telemetry, endpoint protection, cloud security, vulnerability management, operational technology security, and data from configuration management databases and other repositories, and then links exposure data across the code-to-runtime path.

Application security data integrations were made available for all Tenable One customers, with the expansion intended to support risk prioritization. Tenable One integrates static code vulnerability data so teams can connect code risks to runtime systems, cloud workloads, identities, and attack paths. Eric Doerr, Chief Product Officer, Tenable, said, “Bringing application security data into Tenable One, we're giving our customers the context they’ve been missing,” said Eric Doerr, Chief Product Officer, Tenable. “Security teams don’t need to wade through a sea of vulnerabilities. With Tenable One, security teams know exactly where they are exposed the moment an exposure is created – whether an agentic AI tool discovers a new zero-day in an open-source library or a human error introduces risk. For the first time, security teams can see code flaws and prioritize remediation actions alongside all other forms of risk for more effective risk reduction.”

Forward-looking statements were not included in the provided text.

Provided by Globe Newswire on behalf of Tenable. Click to read original content.