Company: TENB
Filing Date: 2025-02-24
Form Type: 10-K
Source: 0001660280-25-000034
Chunk: 0

Company: Tenable Holdings, Inc.
Filing Date: 2025-02-24
Form: 10-K
Item: Item 1
Chunk 0
---
Table of Contents

Item 1.        Business

Overview

We are a leading provider of exposure management solutions. Exposure management is the evolution of vulnerability management, advancing risk assessment and prioritization across the entire attack surface – from IT infrastructure to cloud environments to critical infrastructure. Tenable unifies security visibility, insight and action across this attack surface, equipping modern organizations to expose and close the cybersecurity gaps that erode business value, reputation and trust.

Organizations are increasingly accelerating their adoption of public and private cloud infrastructure, implementing internet-facing applications and embracing new identity management systems. This rapid digital transformation is dramatically expanding the modern attack surface and introducing new exposures – cyber risks capable of causing liability, loss and irreparable harm.

For most organizations, the modern attack surface has expanded to include:

•Complex and dynamic multi-cloud environments, which organizations are rapidly adopting even as they face a shortage of cloud security expertise;

•Artificial intelligence, or AI, including AI agents, which are programs that autonomously complete tasks to meet established goals;

•Identity and access management systems used to control machine identities, application programming interfaces, or APIs, and user privileges, which are vulnerable to misconfigurations that can open up attack pathways within an organization;

•An assortment of operational technology, or OT — such as industrial control systems, or ICS, and supervisory control and data acquisition, or SCADA, systems — which is increasingly internet-facing and is often linked to existing IT systems; 

•Personal devices, including mobile phones and tablets, internet of things, or IoT, devices and other types of “shadow IT” used by employees, often without the knowledge of the IT and security teams; and

•Virtual machines, microservices, open-source code repositories, containers and other tools used by DevOps teams. 

The complexity of the modern attack surface is a key driver behind the growing need for exposure management programs. Scattered products and siloed views have left organizations struggling to hold back threats across a fragmented attack surface. Security teams are overwhelmed by the constant influx of data from the array of point solutions they are using to manage cloud assets, interconnected vulnerabilities, web applications, and identity systems. They are also challenged with effectively analyzing all that data to make informed decisions about which exposures represent the greatest risk to the organization. 

Existing point tools cannot adequately address the central challenge of modern security: a deeply divided approach to seeing and reducing cyber risk. We believe an exposure management program can solve three distinct real-world challenges facing cybersecurity professionals and their organizations:

•The attack surface