Tenable Holdings, Inc. (Tenable): Tenable is a premier global enterprise founded in 2002 in Columbia, Maryland, United States. Operating under CEO Amit Yoran, the company reported $798.7 million in annual revenue in consolidated revenue and $140+ million in unlevered free cash flow in net income, managing over over 44,000 enterprise customers including 65% of the Fortune 500 in total assets. Tenable is the world's leading exposure management and vulnerability management authority, serving over 44,000 organizations globally, including 65% of the Fortune 500 and over 45% of the Global 2000.
Tenable: Company Timeline
French developer Renaud Deraison releases Nessus as a free open-source vulnerability scanner. [source]
Ron Gula, Jack Huffard, and Renaud Deraison incorporate Tenable Network Security in Columbia, MD. [source]
Transitions Nessus from open source to proprietary software to fund enterprise research and development. [source]
Introduces centralized enterprise vulnerability management console for large distributed corporate networks. [source]
Secures first institutional venture capital round to accelerate enterprise sales and product engineering. [source]
Former RSA President and US-CERT Director Amit Yoran becomes CEO, directing cloud transformation. [source]
Pioneers cloud-native vulnerability management and container security for modern hybrid enterprises. [source]
Completes successful IPO on NASDAQ, raising $288 million to fuel global market expansion. [source]
Acquires Indegy for $78M, expanding vulnerability assessment into industrial SCADA and ICS networks. [source]
Acquires French identity security pioneer Alsid for $98M to secure Active Directory infrastructures. [source]
Unifies IT, cloud, identity, and OT vulnerability telemetry into a single enterprise exposure platform. [source]
Acquires cloud native security and CIEM leader Ermetic for $265M, bolstering Tenable Cloud Security. [source]
Generates $798.7M in annual revenue, crosses 44,000 customers, and introduces ExposureAI. [source]
Deploys real-time contextual risk modeling across Fortune 500 multi-cloud and industrial environments. [source]
What Is the History of Tenable?
The foundation of Tenable is inextricably linked to the creation of Nessus, one of the most celebrated security software tools in computer history. In 1998, French software engineer Renaud Deraison created the Nessus vulnerability scanner as an open-source project to provide the internet community with an automated, free utility to audit network security configurations. Nessus rapidly achieved viral international adoption among network administrators and penetration testers. In 2002, Deraison joined forces with Ron Gula (a former NSA computer security researcher and founder of Network Security Wizards) and Jack Huffard to incorporate Tenable Network Security in Columbia, Maryland. The founders recognized that enterprise networks were growing exponentially in complexity, requiring a centralized management platform to aggregate vulnerability data across thousands of distributed Nessus scanners. In 2005, Tenable made the strategic decision to transition Nessus from an open-source model to a proprietary commercial software license, fueling rapid enterprise revenue growth. In January 2017, the board recruited Amit Yoran, the former President of RSA Security and founding director of US-CERT, as Chief Executive Officer. Under Yoran's guidance, Tenable completed a successful Initial Public Offering on the NASDAQ stock exchange in July 2018 (ticker: TENB), raising $288 million. Tenable subsequently executed landmark strategic acquisitions, including Indegy (2019) for operational technology security, Alsid (2021) for Active Directory defense, and Ermetic (2023) for cloud infrastructure entitlement management (CIEM).Tenable: Expert Analysis
Strategic Insight: Market Positioning & Economic Moat
Tenable's competitive moat is anchored by four structural market advantages: (1) The Nessus Brand and Research Monopoly: Nessus is the undisputed industry standard for vulnerability assessment, with over 2 million historical downloads and the industry's most comprehensive database of Common Vulnerabilities and Exposures (CVEs). Tenable Research publishes zero-day disclosures and vulnerability plugins faster than competitors, providing unmatched scanning accuracy; (2) Unified Exposure Management Architecture (Tenable One): While competitors focus on isolated silos (e.g. cloud security or endpoint security), Tenable One correlates vulnerability telemetry across IT, cloud, Active Directory identity, and OT into a single unified cyber exposure score; (3) Predictive Prioritization and VPR Analytics: Tenable's Vulnerability Priority Rating (VPR) leverages machine learning and threat intelligence to score vulnerabilities based on the actual probability of in-the-wild exploitation, allowing security teams to focus on the 3% of vulnerabilities that represent genuine risk; and (4) Deep Industrial OT Security: Through its acquisition of Indegy, Tenable is one of the very few enterprise security vendors capable of scanning proprietary industrial control systems (ICS) and SCADA networks without disrupting critical manufacturing operations.Tenable: Founders
Ron Gula
Co-Founder
Ron Gula co-founded Tenable Network Security in 2002 and served as Chief Executive Officer and Chairman until 2016. Prior to Tenable, Gula began his cybersecurity career at the NSA, conducting computer network attacks and diagnostics. He developed Dragon, one of the earliest commercial intrusion detection systems acquired by Enterasys Networks. Under Gula's 14 years of executive leadership, Tenable operated with world-class capital efficiency, commercialized Nessus, grew profitably to over $100M in revenue, and secured major venture rounds from Accel and Insight Partners. Today, he leads Gula Tech Adventures, investing in public cyber safety and national defense initiatives.
Renaud Deraison
Co-Founder
Renaud Deraison co-founded Tenable in 2002 and served as Chief Technology Officer until 2022. In 1998, at the age of 17, Deraison created Nessus, authoring the initial codebase to offer a free, extensible alternative to proprietary vulnerability scanners. He authored over 1,000 vulnerability plugins and led Tenable's global engineering and threat research teams for two decades. Deraison directed the transition of Nessus to Nessus 3 and guided the technological evolution that birthed Tenable.io, Tenable.sc, and Tenable One. In 2023, he was formally inducted into the Cyber Security Hall of Fame.
Jack Huffard
Co-Founder
Jack Huffard co-founded Tenable in 2002 and served as President, Chief Operating Officer, and member of the Board of Directors through the company's 2018 NASDAQ IPO until 2019. Prior to Tenable, Huffard held executive business development and sales positions at Enterasys Networks, Network Associates, and Cambridge Technology Partners. At Tenable, Huffard architected the corporate infrastructure, directed global sales expansion, spearheaded federal defense contracts, and managed international go-to-market channels. In 2023, Huffard was inducted into the Cyber Security Hall of Fame alongside his co-founders.
How Does Tenable Make Money?
Tenable generates revenue across diversified commercial and operating segments:
1. Tenable One Exposure Management SaaS Subscriptions: Licenses unified cyber exposure management scaled by asset count across corporate IT, public cloud, identity, and industrial operational technology.
2. Tenable Vulnerability Management (Tenable.io): Provides cloud-delivered vulnerability assessment, asset discovery, and compliance tracking for enterprise IT environments.
3. Tenable Cloud Security (Ermetic CNAPP & CIEM): Monetizes cloud infrastructure entitlement management, identity governance, and automated least-privilege enforcement across AWS, Azure, and GCP.
4. Nessus Professional Annual Software Subscriptions: Charges recurring annual software license fees to tens of thousands of security consultants, penetration testers, and small IT departments.
What Is Tenable's Competitive Advantage?
Tenable maintains critical economic advantages in its global industry:
Nessus Brand Monopoly & Global Benchmark Status: Nessus is the most widely adopted vulnerability scanner in cybersecurity history, backed by industry-leading zero-day plugin discovery speeds.
Unified Exposure Management Platform (Tenable One): Correlates disparate vulnerability telemetry from IT, cloud, Active Directory, and OT into a single unified corporate exposure score.
Vulnerability Priority Rating (VPR) Predictive AI: Leverages machine learning to isolate and prioritize the critical 3% of vulnerabilities that adversaries actively weaponize in real-world attacks.
Deep Operational Technology (OT) & ICS Scanning: Safely monitors sensitive industrial control systems and manufacturing SCADA infrastructure without disrupting critical operations.
Who Are Tenable's Main Competitors?
Tenable competes against major industry peers across key business sectors:
Qualys, Inc.: Cloud-native vulnerability management and compliance competitor operating the Qualys Cloud Platform.
Rapid7, Inc.: Cybersecurity provider offering InsightVM vulnerability management, Metasploit, and InsightIDR SIEM/XDR.
CrowdStrike Falcon Exposure Management: Endpoint security titan expanding into vulnerability assessment via its unified Falcon agent.
Microsoft Defender Vulnerability Management: Vulnerability assessment suite built directly into the Microsoft 365 enterprise ecosystem.
What Companies Has Tenable Acquired?
| Year | Company | Value | Strategic Purpose | Outcome |
|---|---|---|---|---|
| N/A | N/A | Undisclosed | Fully unified into Tenable Cloud Security, providing seamless contextual attack path analysis from code to multi-cloud runtimes. | |
| N/A | N/A | Undisclosed | Formed the technological bedrock of Tenable Attack Surface Management (ASM) within Tenable One. | |
| N/A | N/A | Undisclosed | Directly embedded into Tenable One's Attack Path Analysis engine to prioritize critical remediation chokepoints. | |
| N/A | N/A | Undisclosed | Branded as Tenable.cs and integrated into Tenable Cloud Security to bridge developer pipelines with runtime defense. | |
| N/A | N/A | Undisclosed | Commercialized as Tenable Identity Exposure (formerly Tenable.ad), safeguarding enterprise identity architectures globally. | |
| N/A | N/A | Undisclosed | Transformed into Tenable OT Security, extending exposure management to manufacturing, utilities, and energy sectors. |
Who Leads Tenable?
Amit Yoran
Former Chairman and Chief Executive Officer (2017–2025)
Amit Yoran directs enterprise operations, product engineering, and strategic go-to-market execution.
Steve Vintz
Co-Chief Executive Officer and Chief Financial Officer
Steve Vintz directs enterprise operations, product engineering, and strategic go-to-market execution.
Mark Thurmond
Co-Chief Executive Officer
Mark Thurmond directs enterprise operations, product engineering, and strategic go-to-market execution.
Ron Gula
Co-Founder and Former CEO (2002–2016)
Ron Gula directs enterprise operations, product engineering, and strategic go-to-market execution.
Renaud Deraison
Co-Founder and Former Chief Technology Officer (2002–2022)
Renaud Deraison directs enterprise operations, product engineering, and strategic go-to-market execution.
How Is Tenable Growing?
Under executive leadership, Tenable is executing several multi-year growth vectors:
1. Accelerating Tenable One Enterprise Platform Upgrades: Converting standalone vulnerability scanning customers onto the multi-vector Tenable One exposure management platform.
2. Expanding Cloud Infrastructure Entitlement Management (CIEM): Scaling Ermetic cloud permissions and identity management to secure complex multi-cloud enterprise deployments.
3. Securing Converged Industrial Operational Technology (OT): Protecting manufacturing plants, electrical grids, and critical national infrastructure as industrial systems connect to enterprise IT.
4. Deploying ExposureAI Generative Assistant: Empowering CISOs and security teams to query enterprise attack surfaces using natural language and receive automated remediation blueprints.
What Are the Biggest Risks Facing Tenable?
Tenable navigates industry, macroeconomic, and competitive headwinds:
Intense Competition from Qualys and Rapid7: Direct competitive pricing wars in traditional IT vulnerability scanning exert pressure on renewal margins.
Enterprise Security Vendor Consolidation: CIOs consolidating disparate security tools into broad suites from Microsoft or Palo Alto Networks threaten pure-play vendors.
Multi-Cloud Attack Surface Fragmentation: Rapid proliferation of serverless microservices, ephemeral containers, and APIs requires continuous scanner engineering updates.
Macroeconomic Software Budget Scrutiny: Economic headwinds can lengthen enterprise purchasing cycles and delay multi-product platform expansions.
Tenable: Quick Reference Q&A
Q: What is Tenable and what is its primary business focus?
A: Tenable is a premier exposure management and vulnerability assessment software company. It is best known for creating Nessus, the industry-standard scanner used by millions of practitioners to identify cyber vulnerabilities across networks, cloud workloads, Active Directory, and operational technology.
Q: How does Tenable make money?
A: Tenable generates revenue primarily through recurring Software-as-a-Service (SaaS) and term license subscriptions. Enterprises pay annual fees based on the volume of IP addresses, cloud assets, or identity accounts continuously audited across Tenable One, Nessus, and specialized modules.
Q: What was Tenable's revenue in fiscal year 2024?
A: In fiscal year 2024, Tenable achieved $860.00 million in total revenue, marking a 7.68% growth over FY2023 revenue of $798.70 million. The company reported a GAAP net loss of -$52.00 million while generating over $200 million in positive annual free cash flow.
Q: Is Tenable a profitable company?
A: On a GAAP accounting basis, Tenable recorded a net loss of -$52.00 million in FY2024, resulting in a net margin of -6.05%. However, on a non-GAAP basis and in terms of operating cash flow, Tenable is highly cash-generative and sustains strong non-GAAP operating profits.
Q: Who founded Tenable and when was it established?
A: Tenable was founded in September 2002 in Columbia, Maryland, by Ron Gula, Jack Huffard, and Renaud Deraison. Renaud Deraison had previously authored the original open-source Nessus vulnerability scanner in 1998 at age 17.
Q: Who leads Tenable as Chief Executive Officer?
A: Following the passing of longtime CEO Amit Yoran in January 2025, Tenable appointed CFO Steve Vintz and COO Mark Thurmond as permanent co-CEOs in April 2025. Amit Yoran served as Chairman and CEO from January 2017 to early 2025, guiding the company through its IPO.
Q: What is the difference between Nessus and Tenable One?
A: Nessus is a point vulnerability scanning software tool built for security professionals to audit individual subnets and hosts. Tenable One is an enterprise-wide cloud exposure management platform that correlates data across IT assets, cloud environments, Active Directory, and industrial OT.
Q: How does Tenable compete with CrowdStrike and SentinelOne?
A: CrowdStrike and SentinelOne focus primarily on endpoint detection and response (EDR) to block active attacks on endpoints. Tenable specializes in proactive preventative exposure management, mapping attack paths across agentless assets, cloud entitlements, Active Directory, and SCADA control systems.
