Tenable
Tenable makes software that finds security holes in company networks and cloud systems.
On the record
Checkpoint: Q2 2026 earnings, watch new-logo growth and net-new ARR mix for bundling damage
The call
Tenable still makes money and keeps most customers, but Microsoft and CrowdStrike are folding its core function into tools companies already pay for.
Tenable sells software that finds and catalogs security holes in corporate systems. It has been very profitable, keeps most of its customers happy (96% stay year to year), and has gathered 25+ years of data about known problems that would be hard for a newcomer to rebuild. However, Microsoft and CrowdStrike are now throwing this same capability into the security tools they already sell to big companies. Since many companies already have Microsoft Defender or CrowdStrike, they can add vulnerability scanning without paying Tenable extra, which is making it much harder for Tenable to add new customers. The key question is whether Tenable can sell its AI-powered advanced version at a much higher price than what customers would pay for the bundled version, or whether its growth will keep slowing as the big platforms squeeze more customers for free.
Why
01
AI pressure: Microsoft MDASH and CrowdStrike using AI for automated vulnerability discovery bundled into existing agents. AI-driven scanning bundled free into agents rivals already deploy could make Tenable's standalone scanner less necessary to buy separately. Could AI do the core job? Only partly.
02
Bigger players: Microsoft Defender Vulnerability Management (bundled with E5) and CrowdStrike Falcon Exposure Management. Both bundle vulnerability scanning into agents already sitting on customer machines, undercutting the case to pay Tenable separately. Could a giant copy it? Probably.
03
What protects it. 25 years of vulnerability data, deep workflow integrations, and 40,000 customers who would need to rebuild reporting and compliance processes to leave.
What would change this call
Tenable's Q2 2026 earnings call (late July/early August 2026) reports new-logo growth and net-new ARR mix. A slowdown would show Microsoft/CrowdStrike bundling is displacing Tenable in new deals, not just slowing overall growth.
Tenable discloses whether its Advanced-tier AI pricing (about 60% premium) is adopted or discounted in coming quarters. Failure to monetize the premium tier would show bundled rivals are capping Tenable's pricing power.
Tenable's net revenue retention rate in the next 2-3 quarterly reports. A decline would indicate existing customers are shifting spend toward bundled Microsoft or CrowdStrike offerings.
Tenable discloses whether its Advanced-tier AI pricing (about 60% premium) is adopted or discounted in coming quarters. Failure to monetize the premium tier would show bundled rivals are capping Tenable's pricing power.
Tenable's net revenue retention rate in the next 2-3 quarterly reports. A decline would indicate existing customers are shifting spend toward bundled Microsoft or CrowdStrike offerings.
Key numbers
- Q1 2026 revenue $262.1M, up 9.6% YoY
- FY26 guidance implies only 7-10% growth
- 40,000+ customers, 65% of Fortune 500
Named risks
- Microsoft and CrowdStrike bundling VM into installed agents could compress new-logo growth.
- Revenue growth decelerating from 13% CAGR to 7-10% FY26 guidance.
- Monetization risk on new Advanced-tier AI pricing (~60% premium) versus bundled free alternatives.
- Integration risk from recent acquisitions Apex Security and Vulcan Cyber plus new Hexa AI rollout.
- Leadership transition following founder CEO Amit Yoran's death in January 2025.
Rivals, as read in July 2026
| Rival | Direction | Evidence |
|---|---|---|
| Microsoft (Defender Vulnerability Management) | gaining on | Bundles VM into pre-deployed E5 agents, zero-friction distribution as of 2026 |
| CrowdStrike (Falcon Exposure Management) | gaining on | Bundles exposure scanning into existing EDR agent, cited as active threat in 2026 |
| Wiz | contesting | Agentless cloud-native CNAPP challenger noted in 2026 competitive landscape |
| Qualys | contesting | Longstanding VM/TruRisk peer competitor cited in 2026 buyer guides |
| Rapid7 | contesting | InsightVM peer; Rapid7 cut 21 staff in July 2026 amid sector pressure |
Questions people ask
- Is Tenable profitable in 2026?
- On a non-GAAP basis, yes: Q1 2026 non-GAAP EPS was $0.47 (up 30.6% YoY), non-GAAP operating margin hit 24%, and unlevered free cash flow reached a record $88.6 million, reported April 29, 2026. GAAP profitability has historically lagged, with a $78M net loss in FY2023.
- Could AI replace Tenable?
- Unlikely to fully replace it: Tenable's Hexa AI (GA May 2026) layers Anthropic's Claude atop its own 25+ year exposure data fabric and workflows across 40,000+ customers, feeding the product rather than replacing it. The bigger threat is Microsoft and CrowdStrike bundling basic vulnerability scanning into agents they've already deployed.
- Who owns Tenable?
- Tenable Holdings, Inc. is a public company (Nasdaq: TENB) with no parent, listed since its July 26, 2018 IPO at $23/share which raised about $250 million and gave it a market cap above $3 billion on debut. As of July 20, 2026 its market cap was roughly $4.4 billion.
- Is Tenable's biggest competitor Microsoft or CrowdStrike?
- Both are pressuring Tenable by bundling vulnerability/exposure scanning into pre-deployed agents (Microsoft Defender VM in E5, CrowdStrike Falcon Exposure Management in Falcon EDR), giving zero-friction distribution versus Tenable's standalone-scanner model. Wiz's agentless approach adds a third competitive front as of mid-2026.
- Is Tenable's growth slowing down?
- Yes. Tenable's revenue grew at a 13% CAGR from Q1 2023 to Q1 2026 (reaching $1.0223 billion trailing twelve months), but FY2026 guidance issued April 29, 2026 points to only 7-10% growth ($1.068B-$1.078B), reflecting competitive bundling pressure from Microsoft and CrowdStrike.
- What happened to Tenable's CEO?
- Founder and CEO Amit Yoran took medical leave in December 2024 and died in January 2025. Co-CEOs Steve Vintz (also CFO) and Mark Thurmond have run Tenable since, with Art Coviello serving as chairman, a transition confirmed through 2026 reporting.
Timeline
- 2026-06-03Tenable joined Anthropic's Project Glasswing AI-defense initiative
- 2026-05-20Tenable Hexa AI, agentic remediation engine, reached general availability
- 2026-04-29Q1 2026 earnings: revenue $262.1M (+9.6% YoY), record FCF $88.6M
- 2026-01-28Tenable AI Exposure product reached general availability
- 2025-05-29Announced intent to acquire Apex Security (~$105M) for AI-attack-surface security
- 2025-01-31Acquired Vulcan Cyber for approximately $150 million
- 2025-01Founder and CEO Amit Yoran died after medical leave; co-CEOs take over
- 2018-07-26Tenable IPO at $23/share, raising ~$250M, market cap over $3B
Revision history
21 July 2026
First assessed. Protection under test. The text above is fixed as of this date and is not edited afterwards.
In the same band
Sources
- AI platform drives earnings beat, 41% new business (2026-04-29)
- AI innovation drives earnings beat, margin expansion (2026-05-03)
- Tenable (TENB) Q1 2026 Earnings Transcript (2026-04-30)
- Tenable, Inc. (2026-04-09)
- Maryland cybersecurity firm Tenable jumps 48 percent in its IPO (2018-07-26)
- gurufocus.com (2026-07-20)
- Tenable acquires Apex Security to Secure AI (2025-05-29)
- Tenable AI Exposure 2026 Release Notes (2026-01-27)
- Tenable Hexa AI powers agentic vulnerability remediation (2026-05-20)
- Tenable CTO Q&A: Countering AI threat multipliers (2026-06-03)
- Tenable Holdings Number of Employees 2026 (2026-06-29)
- Tenable Stock Analysis: Hexa AI, Anthropic Partnership, and a $37 Target (2026-06-26)