Tenable
Acquisitions
6
Major Deals Covered
$646M
Disclosed Deal Value
Tenable's largest disclosed acquisition here is Ermetic for $240M in 2023. This page covers 6 major deals from 2019 to 2023, each with its price where disclosed and the reason behind it.
| Company | Year | Price | Purpose |
|---|---|---|---|
| Ermetic | 2023 | $240.0M | Acquired a leading cloud-native application protection platform (CNAPP) and cloud infrastructure entitlement management (CIEM) innovator. |
| Bit Discovery | 2022 | $44.5M | Acquired premier external attack surface management (EASM) pioneer founded by Jeremiah Grossman and Robert Hansen. |
| Cymptom | 2022 | $25.0M | Acquired automated attack path mapping technology to model adversarial movement across enterprise networks. |
| Accurics | 2021 | $160.0M | Acquired cloud-native infrastructure-as-code (IaC) security pioneer to enable shift-left security enforcement for DevOps teams. |
| Alsid | 2021 | $98.0M | Acquired French market leader in Active Directory (AD) security to neutralize identity-based attack vectors and credential theft. |
| Indegy | 2019 | $78.0M | Acquired Israeli industrial cybersecurity company to protect industrial control systems (ICS) and operational technology (OT). |
2023
$240M
Acquired a leading cloud-native application protection platform (CNAPP) and cloud infrastructure entitlement management (CIEM) innovator.
Integrated deep multi-cloud identity entitlement analysis and container workload posture into Tenable Cloud Security and Tenable One.
Fully unified into Tenable Cloud Security, providing seamless contextual attack path analysis from code to multi-cloud runtimes.
2022
$45M
Acquired premier external attack surface management (EASM) pioneer founded by Jeremiah Grossman and Robert Hansen.
Enabled Tenable to automatically discover, inventory, and classify unknown Internet-facing enterprise digital assets.
Formed the technological bedrock of Tenable Attack Surface Management (ASM) within Tenable One.
2022
$25M
Acquired automated attack path mapping technology to model adversarial movement across enterprise networks.
Empowered Tenable to visually chart how attackers chain isolated vulnerabilities and identity misconfigurations to compromise crown jewel assets.
Directly embedded into Tenable One's Attack Path Analysis engine to prioritize critical remediation chokepoints.
2021
$160M
Acquired cloud-native infrastructure-as-code (IaC) security pioneer to enable shift-left security enforcement for DevOps teams.
Allowed developers to detect and fix cloud misconfigurations in Terraform, Kubernetes, and CloudFormation before runtime deployment.
Branded as Tenable.cs and integrated into Tenable Cloud Security to bridge developer pipelines with runtime defense.
2021
$98M
Acquired French market leader in Active Directory (AD) security to neutralize identity-based attack vectors and credential theft.
Provided continuous, non-intrusive monitoring of domain controller configurations and Active Directory privilege escalation risks.
Commercialized as Tenable Identity Exposure (formerly Tenable.ad), safeguarding enterprise identity architectures globally.
2019
$78M
Acquired Israeli industrial cybersecurity company to protect industrial control systems (ICS) and operational technology (OT).
Delivered device-level visibility and vulnerability management across PLCs, RTUs, and SCADA industrial environments.
Transformed into Tenable OT Security, extending exposure management to manufacturing, utilities, and energy sectors.
Tenable is executing a multi-faceted corporate growth strategy under CEO Amit Yoran: (1) Driving Tenable One Platform Upgrades: Migrating existing single-product vulnerability management customers onto the multi-module Tenable One platform, significantly expanding annual contract values (ACV); (2) Scaling Cloud Native Security (CNAPP) via Ermetic: Capitalizing on the rapid migration of corporate workloads to multi-cloud environments by deploying unified Cloud Security Posture Management (CSPM) and Cloud Infrastructure Entitlement Management (CIEM); (3) Expanding Operational Technology (OT) Protection: Securing critical infrastructure across energy, manufacturing, and healthcare sectors as industrial control systems converge with corporate IT networks; and (4) Generative AI SecOps with ExposureAI: Embedding generative AI capabilities into Tenable One to enable security leaders to query their attack surface in plain natural language and receive automated mitigation roadmaps.
Tenable operates a subscription-based Software-as-a-Service (SaaS) and software licensing business model with predictable, high-visibility recurring revenue: (1) Tenable One Exposure Management Platform (~40% of new bookings), billed as an annual SaaS subscription scaled by the number of licensed assets across IT, cloud, identity, and OT environments; (2) Tenable Vulnerability Management (formerly Tenable.io) and Tenable Security Center (~45% of revenue), providing core vulnerability scanning, compliance auditing, and risk-based prioritization for corporate IT infrastructure; (3) Specialized Cloud and Identity Modules (~10% of revenue), securing public cloud entitlements (Ermetic technology) and Active Directory configurations (Alsid technology); and (4) Nessus Professional Licenses (~5% of revenue), sold as annual recurring desktop and server licenses to independent consultants, penetration testers, and small security teams. Tenable generates gross margins exceeding 77% and maintains high customer retention rates driven by deep integration into corporate risk compliance workflows.
Tenable pursues a disciplined, strategic M&A approach focused on acquiring proprietary technologies, expanding customer distribution reach, and unlocking operational cost synergies rather than pursuing unselective scale.
Transformative transactions in Tenable's history include pivotal mergers and acquisitions that secured key regional footprints, consolidated core market share, and brought proprietary software intellectual property in-house.
Tenable deploys dedicated integration teams to harmonize core software stacks, align regulatory compliance systems, and unite company cultures while preserving entrepreneurial agility.
Yes, Tenable periodically evaluates its corporate portfolio, strategically divesting non-core or non-strategic assets to redeploy capital into high-margin core operational divisions.
Compare corporate acquisition records, deal values, and strategic targets
Explore Tenable
Core profile pages, founders and related research hubs for this company.