Which assets across cloud, identity, OT, and application layers carry the most exploitable risk right now?

correlates scan data from agents, cloud connectors, and passive monitoring into a single exposure score per asset, so remediation effort goes to what is actually reachable and damaging rather than what merely has a CVE

Which unmanaged or forgotten internet-facing systems could an attacker find before the security team does?

continuously discovers internet-connected assets from the outside in and flags the ones absent from existing inventories as blind spots

Is anyone actively attacking our Active Directory right now?

watches identity infrastructure for attack techniques in real time and surfaces the affected accounts and paths as they happen, rather than waiting on a scheduled scan

Can a given exposure be scoped, patched, and re-scanned without a person doing each step by hand?

an automated routine chains the scoping, policy targeting, patch deployment, and confirmation re-scan into one sequence, stopping at a human approval gate before any change is applied

Did the automated remediation actually fix what it targeted?

the routine's final step re-scans the asset it patched and reports back whether the exposure it was scoped to closed, rather than assuming success from a completed deployment

What is a given automated fix allowed to touch before it runs?

the agentic routine's actions are bound to the permissions of the user account it runs under, so its reach never exceeds what that account could already do manually

Tenable release history — The Cyber Toolchain

changelog Oct 21, 2026 · issue 116

Updated detection Tenable One AI Exposure multilingual threat detection

docs update Oct 4, 2026 · issue 094

New integration Keeper Commander integration
New integration Oracle Cloud Infrastructure integration

Tenable One OT Exposure 2026 Release Notes — Tenable One OT Exposure 4.7.56 SP1 (2026-09-30) Sep 30, 2026 · release notes

Tenable One OT Exposure 4.7.56 SP1 syncs assets, findings and policy violations via the v3 Pipeline for unified IT/OT management.

Assets, findings, and policy violations now synchronize using the v3 data format and APIs instead of the legacy pipeline.
OT assets are now displayed within Tenable One with asset tags, role-based access control (RBAC), and cross-product correlation for a unified IT/OT view.

2 details in Everything

Tenable Exposure Management 2026 Release Notes — September 30, 2026 Sep 30, 2026 · release notes

Adds Chrome OS third-party connector to ingest managed device assets via Google Admin SDK API.

Tenable One Vulnerability Management 2026 Release Notes — September 29, 2026 Sep 29, 2026 · release notes

Tenable One adds granular platform settings role privileges and OAuth 2.0 for Jira Cloud/ServiceNow connectors

Adds export and access control users privileges to custom platform roles
Adds OAuth 2.0 (Authorization Code grant) authentication for Jira Cloud and ServiceNow connectors

2 details in Everything

Tenable Exposure Management 2026 Release Notes — September 23, 2026 Sep 23, 2026 · release notes

Tenable Exposure Management adds automated database ingestion and Invicti DAST connector

Adds Automated Pull from Database option to Tenable One Open Connector for BigQuery or Oracle sources, eliminating file exports by pulling a SQL query result on every sync.
Adds new Invicti third-party connector within Tenable Exposure Management that ingests inventory and findings via the Invicti Platform Inventory API and scores runtime web risk.

2 details in Everything

Tenable Exposure Management 2026 Release Notes — September 17, 2026 Sep 17, 2026 · release notes

Adds on-demand scan failure and plugin misfire diagnosis via Tenable Hexa AI in the UI.

Tenable One Vulnerability Management 2026 Release Notes — September 14, 2026 Sep 14, 2026 · release notes

Custom roles with per-tab permissions for Tenable One PCI Workbench

Adds custom role support to the Tenable One PCI ASV Workbench, allowing administrators to grant granular View, Write, and Delete permissions for each tab (including ASV Review) without broader platform access.

1 detail in Everything

Tenable Exposure Management 2026 Release Notes — September 2, 2026 Sep 2, 2026 · release notes

Tenable Exposure Management adds Azure Blob Storage and Google Cloud Storage to Open Connector automated pulls, plus Black Duck SCA integration.

Adds Azure Blob Storage as a provider for Automated Pull from Cloud Storage in the Tenable One Open Connector
Adds Google Cloud Storage (GCS) as a provider for Automated Pull from Cloud Storage in the Tenable One Open Connector
Enables ingestion of Black Duck SCA findings via the Tenable One Open Connector

3 details in Everything

Tenable Exposure Management 2026 Release Notes — August 26, 2026 Aug 26, 2026 · release notes

New GitLab, GitHub Dependabot, and GitHub Code Scanning connectors added, plus solution data retrieval for 30+ existing third-party integrations.

Adds the GitLab third-party connector to ingest SAST, Secret detection, and Dependency scanning findings from GitLab groups and projects into a unified exposure view under the Source Code finding type.
Adds the GitHub Dependabot third-party connector to ingest asset and findings data from GitHub organizations and personal repositories, correlating insecure open-source dependencies with the broader asset inventory as SCA subcategory findings.
Adds the GitHub Code Scanning third-party connector to ingest alerts from CodeQL and other static analysis tools, surfacing code-level and secret exposure as SAST subcategory findings under the Source Code finding type.
Enables retrieval of solution data from additional third-party connectors (including Acunetix360, Armis, AWS Inspector, BitSight, BlackDuck, Bright, CrowdStrike, Cycognito, Microsoft TVM, Orca, Outpost 24, PrismaCloud CSPM, PrismaCloud CWPP, Qualys, Rapid7 Insight AppSec/VM/CVM Cloud, Red Hat Insights, RiskRecon, SecurityScorecard, Tanium, Tenable One VM, Veracode, Wiz Configurations/Issues/Vulnerabilities) to display in the Solution column on the Weaknesses and Findings pages.

4 details in Everything

Tenable One Vulnerability Management 2026 Release Notes — August 24, 2026 Aug 24, 2026 · release notes

Tenable Hexa AI scan creation now supports Paranoid Mode and Thorough Tests accuracy settings via steps

Tenable One Attack Surface Management 2026 Release Notes — August 17, 2026 Aug 17, 2026 · release notes

Adds elastic asset patterns for tracking hosts with changing IPs as single assets in Tenable One ASM

Introduces Elastic Asset Patterns to track hosts with changing or multiple IP addresses as a single continuously tracked asset
Enables matching on hostname, IP address, or CNAME/MX record value within these patterns
Provides global baseline patterns for widely used provider infrastructure that can be inherited or copied into inventory

3 details in Everything

Tenable One Vulnerability Management 2026 Release Notes — August 17, 2026 Aug 17, 2026 · release notes

Tenable One adds custom trending widgets with configurable trend lines for findings and assets in dashboards.

Tenable Exposure Management 2026 Release Notes — August 17, 2026 Aug 17, 2026 · release notes

Adds Google SCC Open Connector with Full/Incremental Fetch support

Tenable Security Center 2026 Release Notes — Tenable Security Center 6.9.0 Release Notes (2026-08-13) Aug 13, 2026 · release notes

Tenable Security Center 6.9.0 adds Explore Findings UI, Nessus Scanner via Sensor Proxy, Windows LAPS and PAM Kerberos auth, FIPS 140-3, and diagnostic auto-upload

Adds Explore Findings view with VPR key driver fields in the findings details panel.
Enables linking Tenable Nessus scanners via Sensor Proxy for flexible deployment.
Adds Windows Local Administrator Password Solution (LAPS) credential support retrieved from Active Directory.
Adds Kerberos Target Authentication option in credential settings for PAM integrations.
Upgrades to OpenSSL 3.5 with FIPS provider; adds path to enable via System > Configuration > Security.

+2 more show less

Adds ability to submit diagnostic files directly to Tenable Support from within the console.
Adds freeze window option to suppress automatic rollover scan creation.

7 details in Everything

└──▷ BREAKING ON UPGRADE

!Kubernetes support ended in version 6.6.0; migration to Tenable Enclave Security is required.
!Web App Scanning using Tenable Nessus was deprecated in version 6.7.0; move to Tenable Core or Docker-based scanners.
!Tenable Log Correlation Engine is end of life (EOL); Trending data presentation for LCE-backed dashboard queries is no longer supported.

changelog Aug 5, 2026 · issue 037

Tenable Hexa AI automates exposure-to-patch remediation using intent-driven Routines with human approval guardrails.

Introduces Tenable Hexa AI, an agentic capability within Tenable One that automates the full remediation cycle — scoping, patch deployment, and verification — across integrated platforms such as Jamf.
Adds intent-driven Routines that encode the multi-step remediation workflow (asset scoping, policy targeting, patch execution, status check, re-scan confirmation) into a single automated sequence.
Enforces safety guardrails by binding AI autonomy strictly to defined user permissions within the Tenable One harness, with human approval gates before changes are applied.

3 details in Everything

Tenable Exposure Management 2026 Release Notes — August 4, 2026 Aug 4, 2026 · release notes

Tenable Exposure Management adds Agent Center for routine oversight and a Jamf Pro integration with approval workflows.

Adds Agent Center page to manage routines at scale
Adds Jamf Pro integration for device inventory, patch status, and group membership correlation
Adds approval step for actions that change something in Jamf Pro

3 details in Everything

Tenable One Vulnerability Management 2026 Release Notes — August 4, 2026 Aug 4, 2026 · release notes

Tenable adds Agent Center for Hexa AI routine management and a new Jamf Pro integration.

Adds Agent Center page for managing Tenable Hexa AI routines at scale

1 detail in Everything

Tenable Exposure Management 2026 Release Notes — August 3, 2026 Aug 3, 2026 · release notes

Veracode SAST integration via Open Connector; Hexa AI routine improvements

Adds Veracode SAST data ingestion to Tenable Exposure Management via the Tenable One Open Connector with Full Fetch and Incremental Fetch modes
Hexa AI provides accurate task-completion guidance instead of pointing to unrelated features

2 details in Everything

Tenable Exposure Management 2026 Release Notes — July 30, 2026 Jul 30, 2026 · release notes

Tenable Exposure Management adds 34 new vulnerability filter fields in Hexa AI

Tenable One Vulnerability Management 2026 Release Notes — July 30, 2026 Jul 30, 2026 · release notes

Tenable Hexa AI adds 34 new vulnerability filter fields for CVSSv3/v4, VPR, exploit dates, and EPSS.

Tenable One Vulnerability Management 2026 Release Notes — July 27, 2026 Jul 27, 2026 · release notes

New Software tab in Explore for asset software inventory and export capabilities

Adds a new Software tab in Explore that provides a centralized inventory of software discovered across assets from credentialed and agent scans.
Enables filtering by vendor, product name, version, and product type, as well as grouping results by asset or vendor within the new Software view.

2 details in Everything

Tenable One Attack Surface Management 2026 Release Notes — July 15, 2026 Jul 15, 2026 · release notes

Tenable One ASM now detects WAFs via a new column and API field

Adds wtech.Web Application Firewall column (visible in UI and API) to detect Web Application Firewalls using passive techniques only.

1 detail in Everything

Tenable One Vulnerability Management 2026 Release Notes — July 14, 2026 Jul 14, 2026 · release notes

New Host Audits tab in Explore; Hexa AI can create Jira/ServiceNow tickets and Exposure Response initiatives with auto-attached plugin output.

Adds Host Audits tab in Explore for browsing, filtering, grouping, and exporting host audit results
Enables Hexa AI to create Jira or ServiceNow tickets and Exposure Response initiatives from findings via natural language prompts
Automatically attaches plugin output as a .txt file to created Jira or ServiceNow tickets

3 details in Everything

Tenable Exposure Management 2026 Release Notes — July 14, 2026 Jul 14, 2026 · release notes

Hexa AI ticket creation, plugin output attachment in tickets, and Microsoft Defender for Cloud connector.

Adds Hexa AI ability to create Jira or ServiceNow tickets and Exposure Response initiatives directly from findings data
Automatically attaches plugin output as a .txt file when creating Jira or ServiceNow tickets
Adds Microsoft Defender for Cloud third-party connector within Tenable Exposure Management

3 details in Everything

Tenable Exposure Management 2026 Release Notes — July 8, 2026 Jul 8, 2026 · release notes

Export privilege added to Tenable Exposure Management custom roles in July 8, 2026 release

Adds Export as a generally available privilege option for Tenable Exposure Management when creating or editing a custom role.

1 detail in Everything

Tenable One Vulnerability Management 2026 Release Notes — July 7, 2026 Jul 7, 2026 · release notes

New Software tab in Explore for centralized software inventory and export.

Tenable Exposure Management 2026 Release Notes — July 01, 2026 Jul 1, 2026 · release notes

New Older than dashboard filter and unified VPR-based risk scoring in Exposure Management.

Adds an "Older than" filter option to Exposure Management dashboards to surface findings or patches exceeding a specified age threshold.
Replaces separate filter modes with a flattened filter chip workflow aligned with the Inventory page, and clearly distinguishes widget-level from dashboard-level filter scope.
Consolidates risk scoring models into a single standard (formerly VPR v2), updating the underlying calculation for Cyber Exposure Score (CES) and Asset Exposure Score (AES).

3 details in Everything

└──▷ BREAKING ON UPGRADE

!Combinations previously using VPR v1 as a filter will show errors and must be manually updated to resolve them.

Tenable One Attack Surface Management 2026 Release Notes — July 1, 2026 Jul 1, 2026 · release notes

Automatic Elastic Asset Handling for hostnames with large associated IP counts

Consolidates cloud scanner IP addresses into a smaller set of CIDR blocks

1 detail in Everything

Tenable One Vulnerability Management 2026 Release Notes — June 29, 2026 Jun 29, 2026 · release notes

New default automated data hygiene settings with configurable asset age-out and agent auto-unlink durations in new containers.

Adds Asset Age-Out setting (default 180 days, configurable 14–730 days) to automatically remove aged assets from license counts
Adds Agent Auto-Unlink setting (default 60 days, configurable 5–365 days) to automatically unlink agents and remove them from license counts

2 details in Everything

Tenable One Web App Scanning 2026 Release Notes — June 25, 2026 Jun 25, 2026 · release notes

Tenable One Web App Scanning adds OAuth 2.0 auth type with Authorization Code, Client Credentials, and Device Code flows.

Adds OAuth as a selectable authentication type in scan credentials for supported web application targets
Supports three OAuth 2.0 flow options: Authorization Code, Client Credentials, and Device Code
Enables configurable session verification using response body pattern, header inspection, or HTTP response code within the new auth configuration

3 details in Everything

Tenable One Identity Exposure 2026 On-Premises Release Notes — On-Premises — Tenable One Identity Exposure 3.93.5 (2026-06-23) Jun 23, 2026 · release notes

Version 3.93.5 includes improvements to IoA time precision and deployment workflow support, along with numerous bug fixes for stability and accuracy.

Granular time filtering for Indicators of Attack (hour, minute, second) in syslog alerts.
New capability to retrieve listenerLauncher.ps1 hash from the IoA deployment script for EDR whitelisting.

2 details in Everything

Tenable One OT Exposure 2026 Release Notes — Tenable One OT Exposure 4.7.44 (2026-06-23) Jun 23, 2026 · release notes

Tenable One OT Exposure 4.7.44 adds centralized subnet management, IEC 61850 GOOSE detection, Yokogawa DCS activity visibility, air-gapped agent support, saved views, and TLS

Adds MonitoredNetwork types, IemMonitoredNetworks/IemMonitoredNetworksRaw Query fields, and bulk enable/disable Mutations for centralized enterprise subnet management.
Adds GooseStream, GOOSEAnomalyDetails, and gooseStreamsByAssetId Query field to expose IEC 61850 GOOSE traffic and anomaly details in the asset view.
Adds PolicyEventType values YokogawaDcsStart, YokogawaDcsStop, YokogawaFunctionBlockChange, YokogawaSnapshotSave, YokogawaSnapshotLoad, YokogawaTagWrite, and YokogawaDcsStep for Yokogawa Centum VP DCS activity detection.
Adds OtdScan and OtdScanProfile types, otdScans/otdScanProfiles Query fields, and createOtdScan/downloadOtdScans Mutations to support offline/scanned OT Agent deployments in disconnected environments.
Adds the networkAreaId field to OtAgentDetails, SensorDetails, Mutation.editOtAgent, and Mutation.testAdHoc*Credentials for centralized network area anchoring.

+2 more show less

Adds My Saved Views capability allowing analysts to save, name, and reuse custom filter combinations across sessions.
Adds TCP with TLS support for Syslog forwarding by introducing tlsEnabled: Boolean and caCert: String arguments to Mutation.newSyslogServer, Mutation.setSyslogServer, and testAdHocSyslogServer, and tlsEnabled/caCert fields on the SyslogServer type.

7 details in Everything

Tenable Exposure Management 2026 Release Notes — June 11, 2026 Jun 11, 2026 · release notes

Tenable Exposure Management adds MITRE Heatmap JSON/CSV export and Security Controls visibility/filtering in Attack Path.

Adds MITRE Navigator-compliant .json export from the MITRE ATT&CK Heatmap tab for overlay in external tools
Adds CSV export from the MITRE ATT&CK Heatmap tab containing technique names, priorities, asset counts, and deep links
Surfaces detected EDR and firewall security controls data across Top Attack Techniques, Top Attack Paths, and Attack Path Graph
Adds Security Controls filter in Attack Path to scope investigations to paths with or without active coverage

4 details in Everything

Tenable One Vulnerability Management 2026 Release Notes — June 10, 2026 Jun 10, 2026 · release notes

Tenable One VM 2026 adds a new VM Custom Role with granular navigation and action-based RBAC toggles

Adds VM Custom Role to Tenable One Vulnerability Management for role-based access control (RBAC)
Enables navigation-based permissions by mirroring the UI navigation bar into permission settings
Provides granular toggles to enable or disable specific areas like scans, sensors, or reports
Introduces an action-based matrix allowing precise read vs. full write access with restricted actions removed from the UI

4 details in Everything

Tenable One Vulnerability Management 2026 Release Notes — June 9, 2026 Jun 9, 2026 · release notes

ASM findings (SSL/TLS, HTTP Metadata, WHOIS) now visible in Tenable Explore with filtering and grouping.

Surfaces External Attack Surface (ASM) findings directly in Explore alongside existing vulnerability data for Host and Web Application assets
Adds SSL/TLS, HTTP Metadata, and WHOIS finding subtypes to Explore with detailed attributes like cipher suites, security headers, and registrant details
Enables filtering, searching, and grouping of ASM findings in Explore using the same query builder as other finding types without running a scan

3 details in Everything

Tenable Exposure Management 2026 Release Notes — June 4, 2026 Jun 4, 2026 · release notes

Tenable Exposure Management adds Full vs. Incremental sync modes and Remap Columns to Tenable One Open Connector

Full Fetch data update mode for Tenable One Open Connector fully overrides previous ingested data on every sync.
Incremental Fetch data update mode processes only new or updated records after an initial baseline.
Three Incremental Fetch delta modes: Additive Only, Strict Inventory, and Dynamic Remediation to handle absent records.
New Remap Columns option on the connector setup page to revise field mappings without re-uploading files.

4 details in Everything

Tenable One Vulnerability Management 2026 Release Notes — May 27, 2026 May 27, 2026 · release notes

New Mixed severity display and tooltip in Group By Plugin view for partial rule applications.

The Severity column in the Group By Plugin view now displays Mixed for rows with findings at multiple severity levels due to partial recast or accept rule application.
Hovering over the Mixed badge in the Group By Plugin view shows a tooltip listing each severity level and the count of findings at that level.

2 details in Everything

Tenable One Vulnerability Management 2026 Release Notes — May 26, 2026 May 26, 2026 · release notes

Adds continuous assessment scanning support for Windows agents via Agent Profile settings.

Enable Continuous Assessment Scan option added to the Agent Profile menu for Windows hosts

1 detail in Everything

Tenable Exposure Management 2026 Release Notes — May 20, 2026 May 20, 2026 · release notes

Adds Recorded Future connector and license type selection for Microsoft TVM integration.

Introduces the Recorded Future connector to ingest third-party threat intelligence directly into the workflow.
Microsoft TVM connector now supports specific license types via Cloud Environment and AuthentServer configuration fields.

2 details in Everything

Tenable Exposure Management 2026 Release Notes — May 19, 2026 May 19, 2026 · release notes

Tenable Exposure Management GA release adds Tenable Hexa AI agentic engine with UI agents and MCP server.

Tenable Hexa AI agentic engine is generally available, enabling multi-step actions beyond chat-based Q&A.
New Hexa UI surface embedded in Tenable One platform provides out-of-the-box pre-built agents for asset management, visualization, configuration, risk adjustment, remediation, and attack path analysis.
New Hexa MCP server at cloud.tenable.com/mcp/ exposes Tenable's Exposure Data Fabric via Model Context Protocol for custom agent orchestration.

3 details in Everything

Tenable One Vulnerability Management 2026 Release Notes — May 19, 2026 May 19, 2026 · release notes

Tenable Hexa AI GA introduces pre-built agents and a hosted MCP server for agentic vulnerability management.

Adds Hexa UI pre-built agents for Contextual Asset Management, Dynamic Visualization, Assessment Configuration, Risk Adjustment, and Remediation Workflows embedded in Tenable One

1 detail in Everything

Tenable Exposure Management 2026 Release Notes — May 18, 2026 May 18, 2026 · release notes

Tenable Exposure Management adds Attack Path statuses, risk acceptance with audit log, and Inbox Zero workflow for APA lifecycle management.

Attack Path Lifecycle Management introduces Technique Statuses (To Do, In Progress, In Review, Done, Accepted) to track real progress on attack path techniques.
New Intelligent Path Logic automatically calculates Attack Path statuses, marking the entire path as Chain Prevented when a technique is marked Done.

2 details in Everything

└──▷ BREAKING ON UPGRADE

!Existing User Archived items are moved to the Open state with a status of Accepted.

Tenable One Vulnerability Management 2026 Release Notes — May 12, 2026 May 12, 2026 · release notes

Tenable One adds manual ticket creation from findings, automatic ticket closure, and continuous assessment scanning for Windows agents.

Adds the ability to manually create Jira or ServiceNow tickets directly from the Explore > Findings page
Adds automatic Jira or ServiceNow ticket closure when a finding reaches a fixed state
Adds an Enable Continuous Assessment Scan option in the Agent Profile menu for Windows agents to enable continuous software inventory monitoring

3 details in Everything

Tenable One Vulnerability Management 2026 Release Notes — April 28, 2026 Apr 28, 2026 · release notes

Tenable One VM 2026 adds an AI Aware filter for findings.

Tenable One Vulnerability Management 2026 Release Notes — April 27, 2026 Apr 27, 2026 · release notes

Tenable One Vulnerability Management adds the capability to use VPR for risk scoring in settings.

Allows selecting Vulnerability Priority Rating (VPR) as the primary severity metric via General Settings

1 detail in Everything

Tenable One OT Exposure 2026 Release Notes — Tenable One OT Exposure 4.6.34 (2026-04-16) Apr 16, 2026 · release notes

Tenable One OT Exposure 4.6.34 adds bulk subnet management, Nessus credential mode, and new GraphQL mutations/fields.

Monitored Networks page added with bulkAddMonitoredNetwork mutation for bulk subnet configuration
Mutation.editNessusUserScan and Mutation.newNessusUserScan gain credentials and credentialsMode arguments (type NessusUserScanCredentialsMode) to control credential usage in active scans
GraphQL API adds Config.otAgentAutoUpdate field, OtAgentAction.RollbackUpdate enum value, and OtAgentSelectField.autoInstallUpdates, scoutAvailableVersion, scoutBackupAvailable, scoutBackupVersion, scoutCheckedForUpdatesTs, scoutUpdatedTs for remote agent update management
GraphQL API adds Query.monitoredNetworks and Query.monitoredNetworksRaw fields plus Mutation.addMonitoredNetwork, deleteMonitoredNetworks, disableMonitoredNetwork, enableMonitoredNetwork, and editMonitoredNetwork for subnet lifecycle control

4 details in Everything

└──▷ BREAKING ON UPGRADE

!PolicyFindingFilterField replaced DetailedPolicyFindingField as the type for input fields PolicyFindingsExpressionsParams.field, PolicyFindingsSortParams.field, PolicyFindingsSortParamsComplexFields.field, RawPolicyFindingsComplexFieldParams.field, RawPolicyFindingsComplexFieldParamsComplexFields.field, RawPolicyFindingsComplexGroupingParams.field, and RawPolicyFindingsComplexGroupingParamsComplexFields.field.

Tenable Exposure Management 2026 Release Notes — April 15, 2026 Apr 15, 2026 · release notes

Tenable Exposure Management 2026 adds automated AWS S3 ingestion via Open Connector Phase 2 and a PrismaCloud CSPM connector.

Adds automated pull from AWS S3 buckets to the Tenable One Open Connector (Phase 2) for continuous, scheduled data pipelines of asset and vulnerability data
Adds availability of the PrismaCloud CSPM Third-Party Connector to ingest cloud resources and security findings directly into Tenable Exposure Management

2 details in Everything

Tenable One Identity Exposure 2026 On-Premises Release Notes — On-Premises — Tenable One Identity Exposure 3.77.17 (2026-04-08) Apr 8, 2026 · release notes

Tenable One Identity Exposure 3.77.17 enables Security Profile customizations during initialization and post-login

Tenable One Vulnerability Management 2026 Release Notes — March 31, 2026 Mar 31, 2026 · release notes

Adds passkey support for user authentication to replace traditional passwords

Enables configuring passkeys in account settings for phishing-resistant sign-in

1 detail in Everything

Tenable One Attack Surface Management 2026 Release Notes — March 31, 2026 Mar 31, 2026 · release notes

Users can now set a default inventory for automatic loading.

Adds ability to designate a default inventory by selecting the star icon next to an inventory name

1 detail in Everything

Tenable Exposure Management 2026 Release Notes — March 26, 2026 Mar 26, 2026 · release notes

Tenable Exposure Management adds full Attack Path export (CSV/JSON), API access, and AWS/Azure AI service mapping

Adds global export button for Attack Path Top Paths and Top Attack Techniques supporting CSV and JSON output formats with granular scope selection
Enables programmatic extraction of Attack Path data via the Tenable Public API for SIEM/SOAR integration
Adds discovery and visualization support for AWS AI services (Amazon Bedrock, SageMaker) and Azure AI services (Azure Cognitive Services, Azure Machine Learning)

3 details in Everything

Tenable One Vulnerability Management 2026 Release Notes — March 4, 2026 Mar 4, 2026 · release notes

Tenable One adds OT Discovery with a dedicated scan template and non-intrusive scanning toggle to map industrial assets without disrupting processes.

Tenable Security Center 2026 Release Notes — Tenable Security Center 6.8.0 Release Notes (2026-2-18) Feb 18, 2026 · release notes

Asset Repository consolidation, per-host scan timeouts, VPR LLM insights, and Delinea/CyberArk integration enhancements.

Consolidates IPv4, IPv6, Agent, and Universal repositories into a single Asset repository type that can target any data including agent, network scan, and passive data.
Adds Scan Per-Host Timeout configuration in advanced scan policies to prevent single hosts from increasing overall scan time.
Introduces AI-Driven Insights for VPR using Large Language Model (LLM) explanations of exposure significance, weaponization, and mitigation guidance.
Adds Delinea Secret Server auto-discovery feature that removes the requirement to manually add specific targets to a scan.
Adds Delinea Authentication Method API key support for the Delinea integration.

+2 more show less

Enables BeyondTrust Password Safe and Delinea integrations to retrieve database credentials from the safe.
Adds CyberArk Vault options to query credentials with advanced parameters (Get credential by > Parameters) or fetch separate passwords by username, including Get Escalation Credential By for escalation credentials.

7 details in Everything

└──▷ BREAKING ON UPGRADE

!Upgrade requires adding an ed25519 key for authorization to successfully sync remote repositories; synchronization will fail without it.

Tenable One Identity Exposure 2026 Release Notes — SaaS — Tenable One Identity Exposure 3.113 (2026-02-18) Feb 18, 2026 · release notes

Tenable One Identity Exposure 3.113 adds IoE detection for dynamic AD objects and a new health check reason in Domain Installation

Adds IoE detection and monitoring of dynamic objects within Active Directory to identify misconfigurations.
Adds a new Multiple Tenable IoA GPO EVT Subscribe Listener files exist in the SYSVOL reason in the Domain Installation health check to flag duplicate listener configurations.

2 details in Everything

Tenable Exposure Management 2026 Release Notes — February 17, 2026 Feb 17, 2026 · release notes

Tenable Exposure Management 2026 February adds hybrid GCP attack path linking and exploitable CVE-only mapping.

Attack Path now links on-prem JSON credential files to GCP Service Accounts for hybrid lateral movement detection.
Attack Path maps paths exclusively for verified exploitable CVEs using TVDB V3 intelligence, purging non-exploitable noise.

2 details in Everything

Tenable One Identity Exposure 2026 On-Premises Release Notes — On-Premises — Tenable One Identity Exposure 3.77.16 (2026-02-03) Feb 3, 2026 · release notes

Tenable One Identity Exposure 3.77.16 adds Attack ID column for IoA events and resource monitoring logging for on-premises deployments.

Adds unique Attack ID to the dedicated column in the IoA page for all detected IoA attacks.
Adds resource monitoring logging for on-premises deployments under Relay & Ceti monitoring.

2 details in Everything

Tenable One Vulnerability Management 2026 Release Notes — February 2, 2026 Feb 2, 2026 · release notes

Unified Asset Classification naming aligns VM and Exposure Management terminology.

Renames Device Class to Asset Category for asset classification in the UI
Renames Device Subclasses to Asset Function for asset classification in the UI
Unifies profile confidence labels under Categorization Confidence/Drivers across platforms

3 details in Everything

Tenable Exposure Management 2026 Release Notes — January 28, 2026 Jan 28, 2026 · release notes

New Orca Security connector, Open Connector for static file ingestion, multi-tenant Tenable One aggregation, and dashboard widget drill-down capabilities

Adds Orca Security third-party connector to ingest assets and findings from agentless platform
Introduces Tenable Open Connector (Phase 1) for manual ingestion of asset and vulnerability data via static file upload (CSV, JSON)
Enables connecting multiple distinct Tenable One Vulnerability Management accounts into a single workspace for centralized risk assessment
Adds Widget Drill Down capability allowing click-through from dashboard widgets to Assets or Findings Inventory pages with persistent filtering
Adds Dashboard Grid Mode with toggleable gridlines and Snap to Grid alignment in the dashboard creator/editor

5 details in Everything

Tenable One Vulnerability Management 2026 Release Notes — January 27, 2026 Jan 27, 2026 · release notes

Adds global Plugin Download Concurrency settings and Agent Profile CPU Utilization Controls

Adds Plugin Download Concurrency global setting for linked Tenable Nessus scanners to limit simultaneous plugin downloads
Adds Plugin Download Concurrency global setting for linked Tenable Agents to limit simultaneous plugin downloads
Adds CPU Utilization Controls setting to agent profiles to configure maximum CPU percentage used by agents on Windows or Linux

3 details in Everything

Tenable One Vulnerability Management 2026 Release Notes — January 23, 2026 Jan 23, 2026 · release notes

New Tenable Data Stream Finding Enriched Attributes stream exports manual risk adjustments and host audit overrides to AWS S3.

Tenable One Vulnerability Management 2026 Release Notes — January 22, 2026 Jan 22, 2026 · release notes

Adds FedRAMP Moderate availability for mobilization services with bi-directional Jira Cloud and ServiceNow ticket creation via Exposure Response initiatives.

Adds FedRAMP Moderate availability for mobilization services in Tenable One Vulnerability Management.
Enables automatic or manual bi-directional ticket creation via Exposure Response initiatives, synchronizing security findings with Jira Cloud or ServiceNow.

2 details in Everything

Tenable One Vulnerability Management 2026 Release Notes — January 13, 2026 Jan 13, 2026 · release notes

Adds Plugin Download Concurrency settings and CPU Utilization Controls to agent profiles.

Adds two global settings for Plugin Download Concurrency (one for linked Tenable Nessus scanners, one for linked Tenable Agents) to manage simultaneous plugin download rates
Adds CPU Utilization Controls setting to agent profiles in the UI to configure max CPU percentage for Windows or Linux hosts

2 details in Everything

Tenable Exposure Management 2026 Release Notes — January 8, 2026 Jan 8, 2026 · release notes

Adds ORDR third-party connector for OT asset and findings data ingestion

Enables configuration of the new ORDR connector within the Connectors section of Tenable Exposure Management

1 detail in Everything

Tenable One OT Exposure 2025 Release Notes — Tenable One OT Exposure 4.5.54 (2025-12-18) Dec 18, 2025 · release notes

Adds dynamic asset tagging, IEC 61850 support, Genetec VMS integration, and EM role sync to OT Exposure.

Adds rule-based dynamic asset tagging using filters like type, risk score, or criticality
Adds automatic synchronization of Enterprise Manager (EM) ICP-Access user groups for role-based access control
Adds Saved Filters functionality on the Inventory, Findings > Vulnerability, and Findings > Policy Violations pages
Adds Resource Center section within Enterprise Manager interface
Adds support for passive detection and classification of IEC 61850 protocol traffic for electrical substation visibility

+5 more show less

Adds new compliance dashboard mapping for IEC 62443-3-3 and NIST-CSF frameworks
Enables viewing Tenable One OT Exposure policy violations directly within Tenable Security Center dashboards
Adds infrastructure support for feature flags to enable or disable specific features dynamically
Adds Genetec Video Management System (VMS) integration via Remote API
Adds filtering on Asset ID field across Asset Inventory and Findings interfaces

10 details in Everything

Tenable Exposure Management 2025 Release Notes — December 16, 2025 Dec 16, 2025 · release notes

New ServiceNow ITSM ticketing integration for automated remediation workflows in Tenable Exposure Management.

Adds automatic ticket creation for data mobilization via a new ServiceNow ITSM integration

1 detail in Everything

Tenable One Identity Exposure 2025 Release Notes — SaaS — Tenable One Identity Exposure 3.109 (2025-12-10) Dec 10, 2025 · release notes

Attack Path queries now enforce a 3-minute timeout with shortest-path fallback

Attack Path queries between two nodes time out after three minutes and revert to the shortest path if they exceed that limit.

1 detail in Everything

Tenable One Vulnerability Management 2025 Release Notes — December 10, 2025 Dec 10, 2025 · release notes

New Read-Only role and custom roles for Tenable Exposure Management in RBAC update

Adds a Read-Only role to Tenable Exposure Management that restricts users to viewing and drilling down into data without affecting it.
Adds a new custom role capability for Tenable Exposure Management to consolidate access controls into a single location.

2 details in Everything

Tenable Exposure Management 2025 Release Notes — December 10, 2025 Dec 10, 2025 · release notes

New Read-Only and custom RBAC roles with tag enforcement and Inventory section disablement in Tenable Exposure Management.

Adds a new Read-Only role for viewing and drilling down into data without affecting it, scrubbing action-related elements from the UI
Introduces a new custom role for consolidating access across different areas within Tenable Exposure Management for granular control
Enables tag enforcement allowing tags created in Tenable Exposure Management to be available on the Permissions page in Tenable One Vulnerability Management
Adds ability to disable the Inventory navigation item, removing its widget from the Home page and related fields/tabs from Asset Details

4 details in Everything

Tenable Security Center 2025 Release Notes — Tenable Security Center 6.7.2 Release Notes (2025-12-8) Dec 8, 2025 · release notes

Tenable Security Center 6.7.2 adds improved upgrade workflow for non-critical failures and requires manual IP range entry for DNS assets in offline universal repositories.

Allows non-critical upgrade failures to complete with a warning and in-product instructions instead of aborting
Requires manual entry of the IP range when editing an offline universal repository to enable DNS assets after upgrading from 6.6.x or earlier

2 details in Everything

Tenable One Vulnerability Management 2025 Release Notes — December 4, 2025 Dec 4, 2025 · release notes

New Jira Cloud integration in Exposure Response enables bi-directional ticket synchronization

Adds initial release of Mobilization services with Jira Cloud ticketing integration for Tenable One Vulnerability Management

1 detail in Everything

Tenable Exposure Management 2025 Release Notes — December 4, 2025 Dec 4, 2025 · release notes

Initial release of mobilization services for Tenable Exposure Management, starting with Jira Cloud integration to create tickets from findings.

Tenable One Vulnerability Management 2025 Release Notes — December 3, 2025 Dec 3, 2025 · release notes

Adds configurable session timeouts (5 min to 12 hrs) per user and query-based dynamic asset tagging in Explore

Allows admins to configure session timeouts from 5 minutes to 12 hours when creating or updating users.
Enables converting existing Explore > Assets queries into dynamic tags.

2 details in Everything

Tenable Exposure Management 2025 Release Notes — December 3, 2025 Dec 3, 2025 · release notes

New Claroty xDome OT connector and in-dashboard widget editing for Tenable Exposure Management

Adds the Claroty xDome third-party connector to pull asset and findings data from OT devices
Enables direct editing of built-in and custom widget configuration parameters (Widget Type, Categories, Values, Data Labels, Stacking, Filters) within dashboards

2 details in Everything

Tenable One Identity Exposure 2025 On-Premises Release Notes — On-Premises — Tenable One Identity Exposure 3.77.15 (2025-11-26) Nov 26, 2025 · release notes

Tenable One Identity Exposure 3.77.15 adds granular time filtering for Indicators of Attack.

Introduces granular time filtering to Indicators of Attack, allowing specification of hour, minute, and second via the attacksFilters[0].dateStart and attacksFilters[0].dateEnd parameters in the URL.

1 detail in Everything

Tenable One Identity Exposure 2025 Release Notes — SaaS — Tenable One Identity Exposure 3.108 (2025-11-26) Nov 26, 2025 · release notes

Tenable One Identity Exposure 3.108 adds IoE-specific explanation paragraphs and time-based Syslog alert URLs

Adds dedicated paragraphs for each Indicator of Exposure (IoE) reason in Dangerous Kerberos Delegation findings to explain reported issues and fixes more clearly.
Enables IOA_url key in Syslog alerts with a time-based URL linking directly to incident details in Tenable One Identity Exposure.

2 details in Everything

Tenable One Attack Surface Management 2025 Release Notes — November 20, 2025 Nov 20, 2025 · release notes

Tenable One ASM adds Top-Level Domain (TLD) as a configurable source via the new UI.

Tenable One Identity Exposure 2025 Release Notes — SaaS — Tenable One Identity Exposure 3.107 (2025-11-13) Nov 13, 2025 · release notes

Tenable One Identity Exposure 3.107 introduces renamed Dangerous Kerberos Delegation indicators and improved shadow credential descriptions for SaaS users.

Enhances accuracy and clarity of Dangerous Kerberos Delegation Indicators of Exposure by updating names such as Unsafe Permissions on Resource-Based Constrained Delegation (RBCD) Attributes and Dangerous Kerberos Unconstrained Delegation.
Updates descriptions for Shadow Credential indicators including Permitted Trustees List and Permitted Trustees List (by Group Membership) to provide clearer explanations.

2 details in Everything

Tenable One Attack Surface Management 2025 Release Notes — November 3, 2025 Nov 3, 2025 · release notes

Tenable One Attack Surface Management now allows users to customize visible columns in the new Explore and Asset Inventory pages.

Tenable Exposure Management 2025 Release Notes — October 29, 2025 Oct 29, 2025 · release notes

New Inventory export formats and Attack Path filters for Tenable Exposure Management.

Adds CSV and JSON export options for asset and finding information in the Inventory section
Adds MITRE ID filtering to Attack Path analysis
Adds Archived by User filtering to Attack Path analysis

3 details in Everything

Tenable One Identity Exposure 2025 Release Notes — SaaS — Tenable One Identity Exposure 3.106 (2025-10-29) Oct 29, 2025 · release notes

Enhanced detection content for password weaknesses via C-PASSWORD-HASHES-ANALYSIS indicator.

Tenable One Vulnerability Management 2025 Release Notes — October 29, 2025 Oct 29, 2025 · release notes

Adds Scanner Profiles to configure settings for groups of linked Tenable Nessus scanners.

Adds the ability to create and configure scanner profiles in Tenable One Vulnerability Management.

1 detail in Everything

Tenable One Vulnerability Management 2025 Release Notes — October 17, 2025 Oct 17, 2025 · release notes

Adds Tenable One OT Exposure license usage to the License Information page

Tenable One Vulnerability Management 2025 Release Notes — October 15, 2025 Oct 15, 2025 · release notes

Tenable One Vulnerability Management adds an Early Access feature called Scanner Profiles. Accessed via the UI under Sensors > Nessus Scanners > Profiles, this capability allows administrators to manage settings for groups of linked Tenable Nessus scanners. Key controls include enforcing specific scanner versions and dictating how and when those scanners receive plugin updates, as well as which plugins are installed during daily synchronization.

Tenable Security Center 2025 Release Notes — Tenable Security Center 6.7.0 Release Notes (2025-10-08) Oct 8, 2025 · release notes

Tenable Security Center 6.7.0 adds Explore-Assets preview, Triggered Agent Scans UI, Credential Verification policy template, and BeyondTrust Domain field support

Explore - Assets technology preview enables a new data grid view with group-by tools for Asset-based information.
Configure Triggered Agent Scans directly in the Tenable Security Center UI (requires Nessus Manager 10.9.0+).
New Credential Verification Scan Policy template reports on success of provided host credential pairs.

3 details in Everything

└──▷ BREAKING ON UPGRADE

!Web App Scanning using Tenable Nessus is deprecated; move scanners to Tenable Core or Docker-based scanners.
!LCE (Log Correlation Engine) functionality has been removed from the application.

Tenable One Vulnerability Management 2025 Release Notes — October 8, 2025 Oct 8, 2025 · release notes

Adds Accelerate plugin updates setting to Tenable One agent profiles for immediate detection

Tenable One Attack Surface Management 2025 Release Notes — October 2, 2025 Oct 2, 2025 · release notes

Tenable One ASM adds bulk management of subscription alerts in the UI.

└──▷ BREAKING ON UPGRADE

!Bulk modifications overwrite any existing alert settings for the selected subscriptions.

Tenable One Web App Scanning 2025 Release Notes — September 30, 2025 Sep 30, 2025 · release notes

Tenable One Web App Scanning now supports scanning SOAP APIs in addition to REST and GraphQL

Adds SOAP API assessment capability to extend existing REST and GraphQL support for broader API attack surface coverage

1 detail in Everything

Tenable Exposure Management 2025 Release Notes — September 30, 2025 Sep 30, 2025 · release notes

Adds Information Order Configuration for asset data prioritization, Findings Global Search with custom queries, and ServiceNow Asset Enrichment options

Adds Information Order Configuration to customize default information order per asset class and control connector data prioritization across the Tenable One platform
Adds direct navigation to configuration settings via the Information Order section on the Asset Details page
Enables filtering of the entire Findings inventory with advanced custom queries using blocks of property filters, findings criteria, operators, selectors, properties, and workflow in Findings Global Search
Adds Asset Enrichment options to the ServiceNow third party connector to enrich asset details with ServiceNow attributes

4 details in Everything

Tenable One OT Exposure 2025 Release Notes — Tenable One OT Exposure 4.4.39 (2025-09-25) Sep 25, 2025 · release notes

Tenable One OT Exposure 4.4.39 adds PLC project file import, asset merging, auto subnet discovery, and a Policy Violations dashboard

Supports importing PLC project files (Rockwell Automation) to enrich asset inventory without active queries.
Adds the ability to merge duplicate assets directly from the inventory UI.
Introduces Auto Subnet Discovery using a new active query and a Subnet column in Inventory.
Replaces the legacy Network Segments column and configuration page with a CIDR-based Asset Groups model.
Adds a Policy Violations dashboard and workflow for managing findings like PLC Start/Stop and Intrusion Detection.

+5 more show less

Transmits dynamic OT asset tags to Tenable One and Tenable Security Center for cross-platform alignment.
Enables passive fingerprinting of Foxboro DCS components for asset discovery and monitoring.
Adds support for VXLAN traffic analysis within virtual and cloud network segments.
Simplifies ICP sensor management by supporting multi-port sniffing via a simplified configuration option.
Enhances Yokogawa support with online code download operations and fixes offline code download issues.

10 details in Everything

└──▷ BREAKING ON UPGRADE

!The Network Segments column and its configuration page are removed; existing groups are automatically converted to Asset Groups.
!The GraphQL field Mutation.resolveEvent is deprecated and replaced with resolveFindings.
!The GraphQL field Mutation.resolveEvents is deprecated and replaced with resolveFindings.
!The enum value FindingStatus.Fixed has been removed.

Tenable One Identity Exposure 2025 On-Premises Release Notes — On-Premises — Tenable One Identity Exposure 3.93.3 (2025-09-24) Sep 24, 2025 · release notes

Adds ACSC Five Eyes dashboard template and signed listener launcher for Identity Exposure on-prem

New dashboard template adds a pre-built view for monitoring compliance with ACSC cybersecurity standards based on the Five Eyes Active Directory compromise report.

1 detail in Everything

Tenable One Identity Exposure 2025 Release Notes — SaaS — Tenable One Identity Exposure 3.102 (2025-09-04) Sep 4, 2025 · release notes

Tenable One Identity Exposure 3.102 merges Exposure Center views and introduces signed IoA deployment via GPO

Merges Exposure Overview and Exposure Instances pages into a single unified view with quick-filtering options
Adds launcher.ps1 to SYSVOL as the new signed listener launcher for Indicator of Attack (IoA) module deployment
Automates Tenable certificate deployment via Group Policy (GPO) to support the signed launcher.ps1 script

3 details in Everything

Tenable Exposure Management 2025 Release Notes — August 27, 2025 Aug 27, 2025 · release notes

Tenable Exposure Management adds on-prem connector support, findings weakness grouping, and enhanced tagging and dashboards

Tenable On-Prem Connector availability allows ingesting data from on-premises assets into Tenable One.
Findings page now supports grouping individual findings by their associated Weakness for root-cause analysis.
Global asset search on the Assets page enables creating a tag directly without leaving the view.
Asset Details page now shows the source sequence used to populate deduplicated asset properties.

4 details in Everything

Tenable One OT Exposure 2025 Release Notes — Tenable One OT Exposure 4.3.74 (2025-08-19) Aug 19, 2025 · release notes

Tenable One OT Exposure 4.3.74 adds Windows OT Agent, asset tags, policy findings in Tenable One, and new GraphQL mutations for agent management.

Adds the installable OT Agent for Windows to extend active OT asset discovery
Adds OT Agent Management page to configure IP ranges, schedules, and credentials for agent-based discovery
Reports policy events from Tenable One OT Exposure as Tenable.ot Violations Findings in Tenable One
Adds Tags to Assets Groups for searchable organization of assets outside the event policy editor
Enables Enterprise Manager to centrally schedule or perform bulk content updates (plugins, IDS, DFE) for ICPs

+8 more show less

Adds remote unlock capability for expired administrative accounts in Tenable Core
Displays Serial Number column on Inventory page and includes it in CSV exports
Enables search by BACnet Instance ID on the Inventory quick search bar
Adds responsive side panels for drilling down on Vulnerability Findings while retaining context
Adds version-switcher dropdown to switch product documentation versions via header shortcuts
Updates DFE coverage for additional OT vendor devices including Cisco Catalyst, Eaton Power Xpert Gateways, and Schneider Electric devices
Removes AbbRtu500 from enum BasicCredentialsTypes
Removes Gateway from enum RelationshipType

13 details in Everything

Tenable Exposure Management 2025 Release Notes — July 30, 2025 Jul 30, 2025 · release notes

New Settings page, asset deduplication, VPR scores in Inventory, findings context on assets, public Inventory APIs, and new OT/Cloud exposure signals.

Adds a dedicated Settings page for managing Tenable One-specific configurations, accessible via the button at the top of any Tenable Exposure Management page
Enables automatic merging of duplicate assets from the same source into an asset cluster through the new Settings page capability
Allows creating an Exposure Signal query directly from a global search on the Assets page
Adds VPR (Beta) scores to both the Weaknesses and Findings pages within Inventory
Displays active findings with severity breakdown and drill-down capability on each asset in Inventory

+5 more show less

Shows merging criteria (hostname, IP, MAC, etc.) and reasons for merges when viewing third-party asset details
Introduces public Inventory APIs for Export Findings, Export Assets, and Search Assets
Adds new built-in Exposure Signals for OT and Cloud exposure including OT Assets with Discontinued Support, Critical OT System Status Changed, and several cloud-based signals
Adds Treemap and Matrix chart types to dashboards with limits of 20 widgets per dashboard
Exposes a Home Page Total Active Findings widget showing breakdown by type and severity

10 details in Everything

Tenable One Vulnerability Management 2025 Release Notes — July 22, 2025 Jul 22, 2025 · release notes

Tenable One adds enhanced VPR scoring with AI-driven insights to Explore views and Vulnerability Intelligence.

Enhanced Tenable Vulnerability Priority Rating (VPR) is now generally available in Explore views and the Vulnerability Intelligence section.
New metadata fields add industry and regional targeting context to vulnerability prioritization.
Enhanced VPR scores can now be queried and filtered directly in the new Explore views.

3 details in Everything

Tenable One Identity Exposure 2025 On-Premises Release Notes — On-Premises — Tenable One Identity Exposure 3.77.12 (2025-07-21) Jul 21, 2025 · release notes

Tenable One Identity Exposure 3.77.12 adds SMTP OAuth alerting support

Tenable One Attack Surface Management 2025 Release Notes — July 14, 2025 Jul 14, 2025 · release notes

Tenable One ASM adds Explore Dashboard with new asset inventory view and export capabilities.

Adds the Explore page for discovering and managing externally exposed assets with sections for security risk categories, saved queries, grouping, source management, and export.

1 detail in Everything

Tenable One Identity Exposure 2025 Release Notes — SaaS — Tenable One Identity Exposure 3.98 (2025-07-09) Jul 9, 2025 · release notes

Adds Exposure Center allowlist exclusions and optional SMB file-sharing mode for IoA event log collection

SMB File Sharing provides an optional file-sharing mode in the Indicator of Attack (IoA) module for collecting Windows event log files via a dedicated SMB share.

1 detail in Everything

Tenable Exposure Management 2025 Release Notes — July 1, 2025 Jul 1, 2025 · release notes

Tenable Exposure Management July 2025 adds public APIs, Intune connector, findings export, and signal priority management

Adds Tags, Software Inventory, and Exposure View Cards List & by ID endpoints to the Tenable One Public API for programmatic data access.
Adds support for viewing and managing color-coded priorities of Tenable-provided exposure signals via the UI.
Adds export capability for Findings inventory data in JSON and CSV formats.

3 details in Everything

Tenable One Identity Exposure 2025 On-Premises Release Notes — On-Premises — Tenable One Identity Exposure 3.93 (2025-06-30) Jun 30, 2025 · release notes

Tenable One Identity Exposure 3.93 adds Exposure Center/Identity 360 UI, new AD IoEs, CSV export separator option, and TrustType/AAD support.

Exposure Overview feature for Active Directory and/or Entra ID data
Exposure Instances feature (Entra ID only)
Identity 360 identity inventory across Active Directory and Entra ID
New Sensitive Exchange Permissions IoE
New Exchange Group Members IoE

+8 more show less

New Unsupported or Outdated Exchange Servers IoE
New Exchange Dangerous Misconfigurations IoE
New ADCS Dangerous Misconfigurations IoE
New Domain Without Computer-Hardening GPOs IoE checking Block NTLM over SMB
New Health Check domain health monitoring
trustType attribute now supports TTAAD (TRUST_TYPE_AAD) value
trustAttributes attribute now supports TDAV (TRUST_ATTRIBUTE_DISABLE_AUTH_TARGET_VALIDATION) value
CSV export separator option (comma or semicolon)

13 details in Everything

Tenable One Vulnerability Management 2025 Release Notes — June 13, 2025 Jun 13, 2025 · release notes

Adds PCI Internal Nessus Agent scan template for internal PCI DSS 4.0 credentialed scanning

Tenable One Vulnerability Management 2025 Release Notes — June 12, 2025 Jun 12, 2025 · release notes

Tenable Agent now auto-enters safe mode on error, maintaining connection for remote recovery

Agent Safe Mode automatically activates when Tenable Agent encounters an error, disabling plugin compilation and scans while keeping the connection to Tenable One Vulnerability Management active.
Agents running version 10.9.0 or later are required to utilize this new safe mode capability.

2 details in Everything

Tenable One Identity Exposure 2025 Release Notes — SaaS — Tenable One Identity Exposure 3.96 (2025-06-11) Jun 11, 2025 · release notes

Adds Entra ID Indicators of Exposure for password expiration and MFA device requirements

New IoE Password Expiration Enforced detects domains enforcing password expiration policies that may lead to weak, predictable, or reused passwords.
New IoE Managed Devices Not Required for MFA Registration detects tenants lacking Conditional Access Policies requiring managed devices for MFA registration.

2 details in Everything

Tenable Exposure Management 2025 Release Notes — June 11, 2025 Jun 11, 2025 · release notes

Adds ability to delete third-party connectors from the UI and enhances Analytics dashboard filtering.

Enables deletion of third party connectors directly from the Connectors page in the Tenable Exposure Management console
Adds filter properties at both visual and dashboard levels for more granular control in the Analytics view

2 details in Everything

Diagnostics Tool Release Notes — Tenable One Identity Exposure Diagnostics Tool 1.1.0 (2025-06-10) Jun 10, 2025 · release notes

Diagnostics Tool 1.1.0 adds log sources for Relay, Envoy, ELD, and more

Adds new log sources for the Relay component to enable diagnostic data collection
Adds new log sources for the Relay MSI installer to enable diagnostic data collection
Adds new log sources for Envoy (client/server) to enable diagnostic data collection
Adds new log sources for ELD (Extended Log Data) to enable diagnostic data collection
Adds new log sources for ELS (Extended Log Service) to enable diagnostic data collection

+1 more show less

Adds new log sources for Health Check functionality to enable diagnostic data collection

6 details in Everything

Tenable One Vulnerability Management 2025 Release Notes — June 5, 2025 Jun 5, 2025 · release notes

Tenable Data Stream adds support for Tenable One Host Audit and Web App Scanning data, new payload fields, and optimized AWS S3 grouping.

Tenable Data Stream now supports streaming of Tenable One Vulnerability Management host audit findings data.
Tenable Data Stream now supports streaming of Tenable One Web App Scanning assets, tags, and findings data.
Adds Resurfaced Date and Time Taken to Fix fields to Tenable One Vulnerability Management findings payload.

3 details in Everything

Tenable One Identity Exposure 2025 Release Notes — SaaS — Tenable One Identity Exposure 3.95 (2025-06-02) Jun 2, 2025 · release notes

Adds detection for BadSuccessor privilege escalation in Active Directory dMSAs

BadSuccessor Dangerous dMSA Permissions indicator of exposure detects the BadSuccessor privilege escalation vulnerability in Windows Server 2025 dMSAs

1 detail in Everything

Tenable One Attack Surface Management 2025 Release Notes — June 2, 2025 Jun 2, 2025 · release notes

Adds Cloud Connector Manager role for managing cloud integrations.

Tenable One Attack Surface Management 2025 Release Notes — May 28, 2025 May 28, 2025 · release notes

Tenable One ASM adds Google Cloud Platform integration and keyless auth for AWS, Azure, GCP

Integrate with Google Cloud Platform (GCP) to add assets from your GCP accounts
Support keyless authentication for integrations with AWS, Azure, and GCP

2 details in Everything

Tenable One Identity Exposure 2025 Release Notes — SaaS — Tenable One Identity Exposure 3.94 (2025-05-26) May 26, 2025 · release notes

Tenable One Identity Exposure 3.94 adds 5 new Entra ID IoEs and expands AD coverage with Exchange group tracking

Managed Devices Not Required for Authentication IoE flags tenants not requiring managed devices for auth.
Risky Users Without Enforcement IoE identifies accounts flagged as risky but lacking Conditional Access enforcement.
Authentication Methods Migration Not Complete IoE detects incomplete migration to new authentication policies.
Dangerous Application Permissions Affecting Data IoE finds app permissions threatening user data in Entra ID.
Users Allowed to Join Devices IoE flags tenants allowing unrestricted device joining.

+1 more show less

Exchange Group Members IoE tracks members of sensitive Exchange groups.

6 details in Everything

Tenable One Vulnerability Management 2025 Release Notes — May 20, 2025 May 20, 2025 · release notes

Tenable Agent now enters safe mode on error to maintain connection for remote recovery

Tenable Exposure Management 2025 Release Notes — May 15, 2025 May 15, 2025 · release notes

Tenable Exposure Management adds native dashboards with cloning/export and a unified Findings Inventory view across all data sources.

Adds Dashboards menu with new analytics view for Exposure View and dashboard capabilities
Supports themed built-in dashboards, widget library, customization, cloning, editing, and container-level sharing
Enables exporting dashboards as files in multiple formats via the UI
Adds Connectors menu and landing page for configuring third-party integrations and viewing ingestion logs
Introduces Findings Inventory view for unified visibility across all data sources

5 details in Everything

Tenable One Vulnerability Management 2025 Release Notes — May 13, 2025 May 13, 2025 · release notes

Tenable Data Stream now supports host audit and web app scanning data streaming with new payload fields.

Adds Tenable One Vulnerability Management host audit findings data streaming via Tenable Data Stream (TDS)
Adds Tenable One Web App Scanning assets, tags, and findings data streaming via Tenable Data Stream (TDS)
Adds new fields to VMM findings payload: Resurfaced Date and Time Taken to Fix

3 details in Everything

Tenable One OT Exposure 2025 Release Notes — Tenable One OT Exposure 4.2.38 SP 2 (2025-05-09) May 9, 2025 · release notes

Tenable One OT Exposure 4.2.38 SP 2 updates Nessus to 10.8.4 and adds filenames/checksums to downloads

Nessus engine updated to version 10.8.4 for Tenable One OT Exposure.
Tenable One OT Exposure Downloads page now publishes filenames alongside MD5 or SHA-256 checksums.

2 details in Everything

Tenable One Vulnerability Management 2025 Release Notes — May 8, 2025 May 8, 2025 · release notes

Tenable One May 2025 adds Product Utilization percentage and Trial Status visibility in Workspace UI

Adds a utilization feature showing subscription usage percentage with a link to the License Information page
Displays trial status (In Trial or Trial Expired) directly in the Workspace for recent evaluations

2 details in Everything

Tenable Exposure Management 2025 Release Notes — May 8, 2025 May 8, 2025 · release notes

Workspace page now shows product utilization percentages and trial status directly.

Adds a feature that shows the percentage of subscribed products currently in use, linking directly to the License Information page
Adds display of trial status (In Trial or Trial Expired) for users evaluating products within the past year

2 details in Everything

Tenable One Identity Exposure 2025 Release Notes — SaaS — May 8, 2025 May 8, 2025 · release notes

Tenable One Workspace adds product utilization percentage and trial status visibility

Adds Product Utilization feature showing subscription usage percentage to the Workspace page

1 detail in Everything

Tenable One Attack Surface Management 2025 Release Notes — May 8, 2025 May 8, 2025 · release notes

Workspace UI gains product utilization %, trial status visibility and More Details demo links

Adds a product utilization feature to the Workspace Page that shows the percentage of subscribed products in use
Adds Trial Status Visibility to the Workspace Page, displaying In Trial or Trial Expired for active or past-year trials
Adds a More Details link on the Detailed Product Information section for direct product demos

3 details in Everything

Tenable One OT Exposure 2025 Release Notes — May 8, 2025 May 8, 2025 · release notes

Workspace Page Enhancements for better visibility and trial status in Tenable One OT Exposure

Adds Product Utilization feature to workspace showing subscription usage percentage.
Adds Trial Status Visibility to workspace displaying In Trial or Trial Expired status.

2 details in Everything

Tenable One Vulnerability Management 2025 Release Notes — May 7, 2025 May 7, 2025 · release notes

Tenable One VM adds custom widget updates in reports, shared dashboard re-sharing dialog, and dashboard ownership transfer on user deletion.

Adds Custom widgets in custom reports to allow adding custom widgets to custom reports
Adds Shared dashboard editing via a new dialog to easily re-share dashboards with other users
Adds Dashboard ownership enhancements so deleted user dashboards transfer to a new owner

3 details in Everything

Tenable Security Center 2025 Release Notes — Tenable Security Center 6.6.0 Release Notes (2025-05-06) May 6, 2025 · release notes

Tenable Security Center 6.6.0 adds plugin attachments, dark mode toggle, TLS for external Postgres, and agent scan triggers.

Analysis > Vulnerabilities > Vulnerability Detail List view now displays Plugin Attachments for Nessus and Agent scans to provide additional informational data, controlled by the Import Additional Scan Data setting under Settings > Configuration > Miscellaneous.
License activation can now use a machine UUID instead of the OS hostname, enabling licensing in air-gapped or restricted environments via the new SC License by UUID method.
Agent scans can now be configured to run when triggered by a file added to the agent trigger directory, using the Triggered Agent Scans configuration option under Agent Scan Settings.
Analysis top navigation bar now includes a toggle for Dark Mode, with an option to follow OS settings via User Account Options.
External PostgreSQL connections now support TLS encryption, expanding supported versions to 13 through 17 and allowing customer-created databases without DBcreate permissions.

5 details in Everything

└──▷ BREAKING ON UPGRADE

!Upgrade from version 6.2.1 or earlier with more than 10,000 active IPs requires updating the Apache configuration file; failure to do so may cause upgrade issues.
!External PostgreSQL database must be running and reachable before upgrading to 6.6.0.

Tenable One Vulnerability Management 2025 Release Notes — April 30, 2025 Apr 30, 2025 · release notes

New Explore UI replaces legacy Assets and Findings with pivot-style grouping, query builder, new filters, and software vulnerability columns.

Adds the Explore unified interface (preview) alongside Assets and Findings, featuring a streamlined design for attack surface visibility.
Introduces Grouped resources allowing users to group assets or findings into drop-downs styled like spreadsheet pivot tables.
Adds a Query builder to the new Assets/Findings pages, enabling creation, saving, and sharing of custom lists with filters from Exposure Response and Vulnerability Intelligence.
Enables viewing new asset types by profile or operating system on the new Assets page.
Introduces new asset filters: Device Class, Device Subclass, and OS Category on the new Assets page.

+3 more show less

Adds capability to include assets from the new Assets page into existing scans.
Adds Findings by category grouping (VPR, severity, state) on the new Findings page, plus audit result grouping for host audit findings.
Adds new columns for software vulnerabilities on the Findings page: Product, Vendor, Product Type, Version, Path, Fix Type, and Fix.

8 details in Everything

Tenable One OT Exposure 2025 Release Notes — Tenable One OT Exposure 4.2.32 (2025-04-16) Apr 16, 2025 · release notes

SNMP-based discovery engine, Windows sensor deployment (Beta), VMS credential support for IoT Connectors, and Hyper-V/KVM platform support.

Adds SNMP-based network discovery engine to map Layer 2 OT topology via switch ports
Introduces Beta support for deploying Tenable One OT Exposure sensors directly on Windows devices
Expands IoT Connectors with support for VMS credentials, doubling the supported Video Management Systems matrix
Enables deployment of OT Exposure as a VM using .zip files on Microsoft Hyper-V and qcow2 images for KVM/Proxmox/Nutanix/libvirt

4 details in Everything

Tenable One Vulnerability Management 2025 Release Notes — April 9, 2025 Apr 9, 2025 · release notes

Adds shared scan collections for team sharing and new beta ACR/AES scoring metrics with filter support.

Adds Shared Collections to the Scans menu to create, edit, delete, and manage scan configuration sharing groups.
Introduces new Asset Criticality Rating (ACR) (Beta) metric that rates asset importance from 1 to 10 based on business/device function.
Introduces new Asset Exposure Score (AES) (Beta) metric weighing VPR and ACR for a score of 1 to 1000, available as new filters and columns.

3 details in Everything

Tenable One Web App Scanning 2025 Release Notes — April 9, 2025 Apr 9, 2025 · release notes

Adds new Asset Criticality Rating (ACR) and Asset Exposure Score (AES) metrics as filters and columns on the Scanned Applications page.

Updates ACR and AES algorithms for refined scoring, with legacy metrics scheduled to be replaced in June.

1 detail in Everything

Tenable One Identity Exposure 2025 Release Notes — SaaS — Tenable One Identity Exposure 3.91 (2025-04-02) Apr 2, 2025 · release notes

Tenable One Identity Exposure 3.91 introduces Non-Essential Group IoE

Adds the Non-Essential Group Indicator of Exposure (IoE) to report empty groups and groups with only one member
Removes the /Default suffix from Exposure Instance names

2 details in Everything

Tenable One Web App Scanning 2025 Release Notes — April 2, 2025 Apr 2, 2025 · release notes

Tenable One Web App Scanning adds Pause Windows and manual Pause/Resume controls for multi-FQDN scans via API and UI.

Adds Pause Windows configuration to define automatic scan pause times during peak hours
Adds manual Pause and Resume controls for scans, accessible via the user interface or API

2 details in Everything

Tenable Exposure Management 2025 Release Notes — March 27, 2025 Mar 27, 2025 · release notes

Tenable Exposure Management introduces a new Overview page with exposure scores and a dedicated Installed Software page for vendor/version discovery.

Adds an Overview page showing exposure scores, assets, attack path matrix, and weakness breakdowns
Adds an Installed Software page to view software vendors, versions, devices, and file paths

2 details in Everything

Tenable One Vulnerability Management 2025 Release Notes — March 19, 2025 Mar 19, 2025 · release notes

Adds ability to export CVE details to password-protected PDF and schedule/email those exports in Vulnerability Intelligence

Tenable One Identity Exposure 2025 Release Notes — SaaS — Tenable One Identity Exposure 3.90 (2025-03-19) Mar 19, 2025 · release notes

New IoE for unsupported Exchange servers and ESC9 ADCS misconfiguration reporting

Adds Unsupported or Outdated Exchange Servers Indicator of Exposure (IoE) to detect Microsoft unsupported Exchange versions and missing Cumulative Updates.
Enhances ADCS Dangerous Misconfigurations IoE to report the ESC9 vulnerability for certificate templates with the unsecured CT_FLAG_NO_SECURITY_EXTENSION flag as a deviance.

2 details in Everything

Tenable One Vulnerability Management 2025 Release Notes — March 17, 2025 Mar 17, 2025 · release notes

Tenable One adds CVSSv4 support with new filters and columns across Findings, Explore, and Exposure Response.

Adds CVSSv4 filtering and column support in the Findings workbench
Adds CVSSv4 filtering and column support on the new Explore > Findings page
Adds CVSSv4 filtering and column support on Vulnerability Intelligence Overview tabs (CVEs, Findings, My Affected Assets)
Adds CVSSv4 filtering and column support in Exposure Response (My Findings and Affected Assets, Combinations)

4 details in Everything

Tenable One Identity Exposure 2025 Release Notes — SaaS — Tenable One Identity Exposure 3.89 (2025-03-10) Mar 10, 2025 · release notes

Expanded Mapped Certificates IoE with new X509 mappings and AD CS ESC14 detection; improved group member counting.

Mapped Certificates on Accounts IoE now includes X509RFC822, X509IssuerSerialNumber, X509SKI, and X509SHA1PublicKey mappings in addition to original types.
Mapped Certificates on Accounts IoE now reports weak explicit certificate mappings for AD CS ESC14 Abuse Technique detection.
Single Member AD / Entra Group IoE now counts only direct members for accurate results.
Empty Group IoE now counts only direct members for accurate results.

4 details in Everything

Tenable One Web App Scanning 2025 Release Notes — March 6, 2025 Mar 6, 2025 · release notes

New integration between Tenable One Web App Scanning and Attack Surface Management for external context.

Tenable One OT Exposure 2025 Release Notes — Tenable One OT Exposure 4.1.38 (2025-02-20) Feb 20, 2025 · release notes

Tenable One OT Exposure 4.1.38 adds overlapping IP support, IEC substation SCD import, AI detections, NERC-CIP dashboard, and bulk Nessus scan controls.

Supports IEC 61850 protocol analysis for OT asset discovery
Displays CVSSv3 scores on the Findings and Vulnerabilities tables via a new column
Allows bulk enabling or disabling of sensor active query behavior
Maps NERC CIP controls in the Compliance dashboard
Enables centralized updates for paired ICPs from the Enterprise Manager

5 details in Everything

└──▷ BREAKING ON UPGRADE

!Field ntpChange is removed from object type FlagList
!Field ntpFault is removed from object type FlagList
!Field ntpServersUnreachable is removed from object type FlagList
!Argument keepNetworkConfig: Boolean! is removed from field Mutation.factoryReset
!Field setSystemTime is removed from object type Mutation

Tenable One Identity Exposure 2025 Release Notes — SaaS — Tenable One Identity Exposure 3.88 (2025-02-20) Feb 20, 2025 · release notes

Tenable One Identity Exposure 3.88 adds AD Exchange misconfiguration detection and improved UI export/localization

Adds Indicator of Exposure (AD) — Exchange Dangerous Misconfigurations to list misconfigurations impacting Exchange resources or underlying Active Directory schema objects.
Allows selection of custom columns in the Exposure Overview for data export.

2 details in Everything

Tenable One Identity Exposure 2025 Release Notes — SaaS — Tenable One Identity Exposure (2025-02-05) Feb 5, 2025 · release notes

Tenable One Identity Exposure adds new IoE detections and the Exposure Center interface for identity security posture.

Introduces Exposure Center, a new feature within Tenable One Identity Exposure that provides an Exposure Overview, Exposure Instances, and Findings view to identify identity security weaknesses.

1 detail in Everything

Tenable One Vulnerability Management 2025 Release Notes — January 29, 2025 Jan 29, 2025 · release notes

Host Audit widgets now support Multi-series/Stacked bar/column charts and Matrix views

Adds Multi-series bar chart type for custom Host Audit widgets.
Adds Multi-series column chart type for custom Host Audit widgets.
Adds Stacked bar chart type for custom Host Audit widgets.
Adds Stacked column chart type for custom Host Audit widgets.
Adds Matrix chart type for custom Host Audit widgets.

5 details in Everything

Tenable Exposure Management 2025 Release Notes — January 27, 2025 Jan 27, 2025 · release notes

FedRAMP Moderate release adds Weakness Tab, Tags, Exposure Cards, Asset Classes view, and Score Toggle to Inventory and Lumin views.

[Weakness Tab] Access a comprehensive view of all weaknesses associated with your asset for better risk management
[Tags] Explore asset-related tags to understand their context and relationships with other assets
[Exposure Cards] View all Lumin Exposure View associated with an asset
[Devices] (Restricted By Asset Class) View devices associated with an account or identity's class asset
[Score Toggle] Toggle Asset Exposure Score and Asset Criticality Rating scoring options in Inventory Asset and Exposure Views

5 details in Everything

Tenable One Identity Exposure 2025 Release Notes — SaaS — Tenable One Identity Exposure 3.86 (2025-01-23) Jan 23, 2025 · release notes

Tenable One Identity Exposure 3.86 adds Hybrid Entra ID IoE, CSV export separator control, and trust attribute support

└──▷ HOW TO FIND IT

Configure object ownership rules for security principals via group membership

📍Permitted Object Owner (by Group Membership)

Adds Hybrid Entra ID Information Indicator of Exposure to provide insights into Microsoft Entra ID data replicated to on-premises Active Directory
Adds Permitted Object Owner (by Group Membership) option to allow security principals to be designated as object owners through their group membership
Adds Permitted Trustees List (by Group Membership) option to enable assignment of special permissions to security principals based on their group membership
Adds ability to choose CSV export separator (comma or semicolon) in the export function

4 details in Everything

Tenable One Vulnerability Management 2025 Release Notes — January 15, 2025 Jan 15, 2025 · release notes

Findings workbench and Asset Details now show all IPv4 addresses for an affected asset.

Adds an All IPV4 Addresses column to the Findings workbench
Displays all IPv4 addresses for an affected asset on the Asset Details page under Asset Information
Includes all IPv4 addresses when using findings filters

3 details in Everything

Tenable One Identity Exposure 2025 Release Notes — SaaS — Tenable One Identity Exposure (2025-01-10) Jan 10, 2025 · release notes

Introduces Identity 360 for unified identity inventory and risk ranking across AD and Entra ID.

Adds Identity 360, a new identity-centric view that unifies inventories of Active Directory and Entra ID identities ranked by risk.
Enables drilling down into contextual lenses such as accounts, weaknesses, and devices associated with each identity within Identity 360.

2 details in Everything

Tenable One Vulnerability Management 2025 Release Notes — January 9, 2025 Jan 9, 2025 · release notes

Tenable introduces Data Stream for continuous AWS S3 export and custom role recasting of Host Audit findings

Adds Data Stream integration to continuously send vulnerability data (assets, findings, tags payloads and manifest) to a configured AWS S3 bucket in JSON format as an alternative to export APIs.
Enables custom roles to recast or accept Host Audit data for Tenable One Vulnerability Management, Tenable One Web App Scanning, and Host Audit findings.

2 details in Everything

Tenable One Identity Exposure 2025 Release Notes — SaaS — Tenable One Identity Exposure 3.85 (2025-01-08) Jan 8, 2025 · release notes

Adds domain health check to validate Indicator of Attack deployment configuration.

New Health Check feature identifies errors in Indicator of Attack deployment on a per-domain basis.

1 detail in Everything

Tenable One 2024 Release Notes — Tenable One December 30, 2024 Dec 30, 2024 · release notes

Tenable One Dec 30 2024 adds Attack Path and Choke Point columns to Tenable Inventory pages

Adds Attack Path column on the Assets and Weaknesses pages in Tenable Inventory to provide clickable links to attack path details
Adds Choke Point column on the Assets page in Tenable Inventory to highlight choke point data with direct navigation capabilities

2 details in Everything

Tenable One Attack Surface Management 2024 Release Notes — December 18, 2024 Dec 18, 2024 · release notes

Tenable One ASM gains Last Metadata Change filter types and Azure Cloud Connector integration.

Adds before <date> and more than <x> days ago filter types to the Last Metadata Change column in the Tenable One Attack Surface Management console
Adds support for integrations with Azure to add assets from your Azure accounts via the Azure Cloud Connector

2 details in Everything

Tenable One Attack Surface Management 2024 Release Notes — December 12, 2024 Dec 12, 2024 · release notes

Extended Domain column filtering and clearer Ingestion Filters management in UI

Domain column now supports extended text-based filtering options consistent with other columns
Ingestion Filters box x button clears overrides to default global settings
Ingestion Filters section displays a Match all assets link to reset filters

3 details in Everything

Tenable One Identity Exposure 2024 Release Notes — SaaS — Tenable One Identity Exposure 3.84 (2024-12-12) Dec 12, 2024 · release notes

Tenable One Identity Exposure 3.84 adds flexibility to IoE allowlists and improves password policy correlation

The Permitted Object Owner allowlist in the Local Administrative Account Management Indicator of Exposure profile now accepts both SID and DistinguishedName formats.
Improved accuracy of correlation for the DCSync Indicator of Attack in basic mode.

2 details in Everything

Tenable One OT Exposure 2024 Release Notes — Tenable One OT Exposure 4.0.30 (2024-12-12) Dec 12, 2024 · release notes

Tenable One OT Exposure 4.0.30 adds a Findings page, Asset Sources column, Overview Hubs, Honeywell policies and Tenable One software sync.

Adds a dedicated Findings page to view vulnerability instances across all assets with filtering and grouping options
Adds a new Sources column on the asset inventory and single asset pages to indicate detection methods such as Sensors, ERSPAN, Local (ICP SPAN), Packet Capture, CSV Import, IoT Connectors, and Active OT
Introduces new Overview Hubs in Tenable One OT Exposure and Tenable One OT Exposure EM for reviewing inventory and risks via interactive widgets
Adds HoneyForce Enable and Honey Force Disable policies to detect input forcing changes on Honeywell C300 assets
Enables synchronization of installed software details (name, version, install date) from Windows assets via WMI queries into Tenable One

5 details in Everything

Tenable Security Center 2024 Release Notes — Tenable Security Center 6.5.0 Release Notes (2024-12-05) Dec 5, 2024 · release notes

Tenable Security Center 6.5.0 adds Vulnerability Intelligence, EPSS/CVSSv4 filtering, Workspace ONE MDM integration, and ECDSA key support.

Adds Vulnerability Intelligence data (VPR, EPSS trends, notable events) to every CVE in the console for risk prioritization
Supports Web App Scanning sensors from Tenable Core + Tenable One and Docker images for scalable web application assessment
Enables filtering and reporting on findings using EPSS and CVSSv4 scores
Adds Workspace ONE MDM integration to collect mobile device information, replacing the AirWatch integration
Supports ECDSA SSH keys for remote repository synchronization in addition to existing key types

5 details in Everything

└──▷ BREAKING ON UPGRADE

!If you have more than 10,000 active IPs and upgrade from version 6.2.1 or earlier, you must update values in the Apache configuration file during the upgrade.

Tenable One Attack Surface Management 2024 Release Notes — December 03, 2024 Dec 3, 2024 · release notes

Tenable One ASM adds asset origin attribution and integration with Tenable One VM for external attack surface context.

Asset Details page now includes an Origin field providing chronological information of attribution events.
New integration with Tenable One Vulnerability Management to provide continuous external attack surface monitoring and ingest data for host enrichment.

2 details in Everything

Tenable One Vulnerability Management 2024 Release Notes — December 2, 2024 Dec 2, 2024 · release notes

Adds Account Details tab to Settings > License for viewing account, Tenable One, and standalone license info.

Tenable One Identity Exposure 2024 Release Notes — SaaS — Tenable One Identity Exposure 3.83 (2024-11-29) Nov 29, 2024 · release notes

Adds Windows Server 2025 functional level to Domain IoE; prevents container switching on license upload

Domains with an Outdated Functional Level IoE now integrates the new Active Directory functional level for Windows Server 2025
Prevents switching Tenable One containers when uploading a new license file

2 details in Everything

└──▷ BREAKING ON UPGRADE

!Uploading a new license file now prevents switching to a different Tenable One container

Tenable One 2024 Release Notes — Tenable One November 20, 2024 Nov 20, 2024 · release notes

Tenable One adds quick filter buttons to the Attack Path Discover page and improves performance on Inventory and Attack Path pages.

Adds quick filter buttons to the Discover page in Attack Path to automatically filter the top attack paths list in one click.
Improves performance on the Tenable Inventory Asset Details page, the Attack Path Findings page, the Discover page Top Attack Paths section, and the Discover page Node Search section.

2 details in Everything

Tenable One Vulnerability Management 2024 Release Notes — November 19, 2024 Nov 19, 2024 · release notes

New scan and remediation attributes (columns/fields) for Findings and Assets workbenches.

Adds Remediation Type column on the Findings Details page to show Patch or Workaround
Adds Workaround Type field on the Findings Details page with values Configuration Change or Disable Service
Adds Workaround Published date field on the Findings Details page
Adds Last Scan Target column on the Findings Details, Asset Details, Findings workbench, and Assets workbench pages
Adds Last Authentication Attempt timestamp on the Asset Details page

+3 more show less

Adds Last Successful Authentication timestamp on the Asset Details page
Adds Last Authentication Status boolean on the Asset Details page
Adds Network Device Serial ID field on the Findings Details and Asset Details pages for network devices

8 details in Everything

Tenable One Identity Exposure 2024 Release Notes — SaaS — Tenable One Identity Exposure 3.82 (2024-11-13) Nov 13, 2024 · release notes

Tenable One Identity Exposure 3.82 adds Five Eyes dashboard template and new Service Accounts misconfigurations IoE

Adds a Dashboard template for Five Eyes alliance guidance on Active Directory compromises
Introduces a new Service Accounts Misconfigurations Indicator of Exposure (IoE) for domain service account bad practices

2 details in Everything

Tenable One Attack Surface Management 2024 Release Notes — November 12, 2024 Nov 12, 2024 · release notes

Tenable One ASM now supports AWS Route 53 and OpenSearch sources, plus RBAC assignment during user creation.

Adds Amazon Route 53 as a supported source for asset inventories
Adds Amazon OpenSearch / ElasticSearch as a supported source for asset inventories
Enables assigning Tenable-provided roles to ASM users at creation time in Vulnerability Management

3 details in Everything

Tenable One Vulnerability Management 2024 Release Notes — November 12, 2024 Nov 12, 2024 · release notes

Linux agents now support continuous assessment scanning for persistent software inventory monitoring

Tenable One Vulnerability Management 2024 Release Notes — November 7, 2024 Nov 7, 2024 · release notes

Tenable One adds Zero Day filter and column in Vulnerability Intelligence

Adds a Zero Day filter to the Vulnerability Intelligence Overview page
Adds a Zero Day column to the Vulnerability Intelligence Overview table
Adds a Vulnerability Profile field indicating zero-day status in the Risk Profile section

3 details in Everything

Tenable One Identity Exposure 2024 On-Premises Release Notes — On-Premises — Tenable One Identity Exposure 3.77.3 (2024-11-06) Nov 6, 2024 · release notes

Tenable One Identity Exposure 3.77.3 adds Shadow Credentials and Managed Service Account IoEs, proxy support, and new LAPS validation.

Adds Shadow Credentials Indicator of Exposure to detect backdoors in Windows Hello for Business key credentials.
Adds Managed Service Accounts Dangerous Misconfigurations Indicator of Exposure to verify proper deployment and configuration.
Adds proxy connection capability during installation or upgrade to enable on-premises environments to work with Tenable One features.
Supports the krbtgt_AzureAD account in Windows Hello for Business (Cloud Trust deployment) for Last Password Change on KRBTGT Account IoE.
Adds validation for reversible passwords defined by PSO with attribute msDS-PasswordReversibleEncryptionEnabled.

+4 more show less

Adds LAPS version installed option to validate Local Administrative Account Management configuration.
Adds Privileged Authentication Silo Configuration Indicator of Exposure to assist AD administrators in setting up authentication silos for Tier-0 accounts.
Adds Property Sets Integrity Indicator of Exposure to check for misconfigurations within Active Directory Property Set objects and attributes.
Adds Privileged AD User Accounts Synchronized to Microsoft Entra ID Indicator of Exposure to check synchronization status.

9 details in Everything

└──▷ BREAKING ON UPGRADE

!Email alerting now only supports TLS 1.2 and TLS 1.3; overrides using deprecated SMTP encryption standards like SSLv3 must be removed, otherwise the relay will fail to start.

Tenable One Attack Surface Management 2024 Release Notes — November 04, 2024 Nov 4, 2024 · release notes

Tenable ASM adds manual TXT record entry and improved public list API docs.

Allows users to add missing TXT records manually to extend discovery capabilities when auto-detection fails
Adds extensive documentation to the public list API endpoint for more comprehensive usage instructions

2 details in Everything

Tenable One 2024 Release Notes — Tenable One October 30, 2024 Oct 30, 2024 · release notes

Tenable One adds Exposure Signals module and extends Lumin, Inventory, and Attack Path with cloud security capabilities.

Adds the Exposure Signals module within Tenable Inventory for prioritization, including a library of pre-built signals, custom signal creation via query capabilities, AI explainability, and drill-down to Inventory view or Asset Details pages
Updates Lumin Exposure View to include Cloud Security data in Global and Tenable-provided exposure cards
Expands Tenable Inventory with Cloud asset support (excluding EntraID/OCI), a Cloud Security quick filter, 3 new Tenable queries, 2 new Exposure Insights, and new cloud asset properties for searching/tagging
Extends Attack Path to include cloud assets, internet-based attack paths, hybrid corporate-to-cloud attack paths, and policy-based privilege escalation paths

4 details in Everything

Tenable One Vulnerability Management 2024 Release Notes — October 21, 2024 Oct 21, 2024 · release notes

Adds Resurfaced Date and Vulnerability Age fields/filters to the Findings workbench

Tenable One Identity Exposure 2024 Release Notes — SaaS — Tenable One Identity Exposure 3.81 (2024-10-21) Oct 21, 2024 · release notes

Tenable One Identity Exposure 3.81 adds IOE reasons for Credential Guard, Point and Print, LDAP signing; customizes dormant account days; excludes MSOL accounts; UPN/SID allo

Dormant Accounts Indicator of Exposure now supports a customizable number of days to determine dormancy based on lastLogonTimestamp.
Root Objects Permissions Allowing DCSync-Like Attacks IOE adds a Keep MSOL_* accounts option (default disabled) to exclude these accounts from deviations.
Protected Users Group Not Used Indicator of Exposure Allowed Users option now accepts User Principal Name (UPN), SID, and sAMAccountName in addition to Distinguished Name.

3 details in Everything

Tenable One Vulnerability Management 2024 Release Notes — October 16, 2024 Oct 16, 2024 · release notes

New CVE tab filters for asset-present vulnerabilities and per-CVE asset views; Linux agent continuous assessment scanning in early access.

Adds a checkbox on the CVEs tab to filter for only the vulnerabilities present on your assets
Adds a dropdown in any row of the CVEs tab to view assets containing that vulnerability
(Early Access) Enables continuous assessment scanning for Linux hosts via Agent Profiles, controlled by Enable Continuous Assessment module and Baseline scan frequency

3 details in Everything

Tenable One Attack Surface Management 2024 Release Notes — October 14, 2024 Oct 14, 2024 · release notes

Tenable ASM gains rule deletion attribution and source copying via API

Adds target_inventory_id parameter to the create source API endpoint to copy sources across inventories
Enables soft deletion of Automation Rules for better attribution capabilities

2 details in Everything

Tenable One Vulnerability Management 2024 Release Notes — October 8, 2024 Oct 8, 2024 · release notes

Redesigned License Information page with usage trends and (Tenable One) per-component snapshots.

Tenable One Vulnerability Management 2024 Release Notes — October 3, 2024 Oct 3, 2024 · release notes

Adds an Exposure Response Summary page in the Tenable MSSP Portal for high-level child container vulnerability overview.

Tenable One Vulnerability Management 2024 Release Notes — October 2, 2024 Oct 2, 2024 · release notes

Tenable One adds redesigned sidebar navigation with renamed items and direct shortcuts for Assets, Findings, Solutions, Reports, Remediation, Sensors, and Exports.

Renames My Dashboards to Dashboards in the left sidebar
Adds Vulnerability Intelligence entry to review vulnerabilities from Tenable's database against environment findings
Adds Exposure Response entry to create and manage projects addressing vulnerabilities
Moves Assets view to top-level sidebar item (previously under Explore)
Moves Findings view to top-level sidebar item (previously under Explore)

+6 more show less

Adds Solutions entry for reviewing Tenable-recommended vulnerability solutions (moved from Act)
Adds Sensors entry with shortcut to Settings > Sensors for managing cloud and linked Nessus sensors
Moves Reports view to top-level sidebar item (moved from Act)
Adds Exports entry with shortcut to Settings > Exports for managing scheduled exports
Moves Remediation view to top-level sidebar item (moved from Act)
Marks Container Security Legacy as End of Life on September 30, 2024

11 details in Everything

Tenable One Vulnerability Management 2024 Release Notes — October 1, 2024 Oct 1, 2024 · release notes

Tenable introduces Data Stream to continuously send assets, findings, and tags payloads to an AWS S3 bucket.

Tenable One 2024 Release Notes — Attack Path October 1, 2024 Oct 1, 2024 · release notes

Attack Path dashboard renamed, filter relabeled to Data Source with OT and ASM integration

Adds support for Tenable One OT Exposure and Tenable One Attack Surface Management as data sources in the Top Attack Path Matrix
Renames the Attack Path Matrix view to Top Attack Path Matrix and restricts paths to those leading to critical assets
Renames the UI filter labeled Target Filter to Data Source to reflect its broader scope

3 details in Everything

Tenable One 2024 Release Notes — Tenable One September 30, 2024 Sep 30, 2024 · release notes

Tenable One introduces Tenable Inventory with asset classes, dynamic tagging, NLP search, and dual-score views

Adds Tenable Inventory application for viewing Assets, Tags, and Weaknesses.
Introduces asset classes and new asset properties to expand inventory data model.
Enables creation of static and dynamic tags leveraging new asset properties.
Adds Weakness Inventory view to inspect Misconfigurations and CVEs.
Provides Advanced Search with natural language processing (NLP) and a new query builder using asset classes.

+4 more show less

Introduces editable Tenable Queries and Bookmarks for saving queries.
Enhances Asset Details with new data fields, related attack paths, exposure cards, and relationships.
Adds Asset Explainability to summarize high-level asset and risk information.
Releases dual score versions (Score & Score (Beta)) in Tenable Inventory and Lumin Exposure View.

9 details in Everything

Tenable One OT Exposure 3.19.70 SP (2024-09-24) Sep 24, 2024 · release notes

Tenable One OT Exposure 3.19.70 SP adds Compliance dashboard and new API types/fields for asset aggregation

Compliance dashboard enables alignment of security measures with regulatory requirements (CAF Principles, OTCC Sub Domains, ISO 27001 Controls, NIS 2 Directive) to track progress over time.
Phoenix Contact ILC Snapshots support for FOX TLS, including Audit Log tracking changes to FOX TLS configuration.
New API types and fields added: AggregationsAssetsExpressionsParams, AssetMapTimeFrame, eventAggregationsAssetsRaw, and pluginHits field on Query object.

3 details in Everything

Tenable One 2024 Release Notes — Attack Path September 17, 2024 Sep 17, 2024 · release notes

Adds link from Attack Path CVE nodes to Vulnerability Intelligence UI

Tenable One 2024 Release Notes — Attack Path September 12, 2024 Sep 12, 2024 · release notes

Tenable One Attack Path adds sorting on choke points, origin support for history/queries, and product dropdown filters.

choke point column in weaknesses is now sortable to prioritize critical bottlenecks.
origin field added to history records and Tenable queries for tracking attack path provenance.
Filter dropdown now lists all Tenable products directly instead of requiring free-text input.
Navigation and UI of the Attack Path dashboard's matrix have been adjusted.

4 details in Everything

Tenable One Vulnerability Management 2024 Release Notes — September 10, 2024 Sep 10, 2024 · release notes

Adds AI/LLM monitoring via AI Inventory button on Findings workbench, custom dashboard, and three new reports.

Adds AI Inventory button to Findings workbench tabs for filtering AI-related informational findings
Adds new AI Inventory section on AI/LLM finding detail pages
Adds new AI/LLM Dashboard accessible via Template Library for viewing top AI browser extensions and applications
Adds three new reports in the Reports section focused on AI/LLM-related findings

4 details in Everything

Tenable One Vulnerability Management 2024 Release Notes — September 3, 2024 Sep 3, 2024 · release notes

Adds Change Result and Accept (for host audits) recast rule types to modify or hide host audit findings.

Tenable One Attack Surface Management 2024 Release Notes — September 02, 2024 Sep 2, 2024 · release notes

Adds bd.last_metadata_change API filter to assets and increases dashboard row limits

Adds bd.last_metadata_change property as a new API filter for asset lookups to support time-windowed queries
Increases the maximum row count displayed in dashboards and custom dashboards from the previous limit to 20

2 details in Everything

Tenable One 2024 Release Notes — Attack Path August 29, 2024 Aug 29, 2024 · release notes

Adds Data Source attribution to Attack Paths in Discover and Findings tabs

Data Source attribution is now displayed in the Attack Path summary section when exploring an attack path's details

1 detail in Everything

Tenable One Identity Exposure 2024 Release Notes — SaaS — Tenable One Identity Exposure 3.78 (2024-08-27) Aug 27, 2024 · release notes

Tenable One Identity Exposure 3.78 updates default IoE logic, restricts Secure Relay encryption to TLS 1.2/1.3, and refines Indicators of Attack.

Sets the default value of the Skip registry key check option to true for the default profile in the Unsecured Configuration of Netlogon Protocol indicator.

1 detail in Everything

└──▷ BREAKING ON UPGRADE

!The Secure Relay now only supports Tls12, Tls13, or Tls12, Tls13 for encryption; forcing deprecated standards like SSL v3 prevents the relay from starting.

Tenable One Attack Surface Management 2024 Release Notes — August 26, 2024 Aug 26, 2024 · release notes

Tenable One ASM adds Suggestion Blocklist to exclude domains and hosts from recommended scans.

Tenable One 2024 Release Notes — Attack Path August 26, 2024 Aug 26, 2024 · release notes

Tenable One adds Microsoft Entra ID data source support to Attack Path with new search and detection filters.

Tenable One Vulnerability Management 2024 Release Notes — August 14, 2024 Aug 14, 2024 · release notes

New Agent Health Events tab and Health column expose agent diagnostics directly in Tenable One VM.

Adds a new Agent Health Events tab to the agent details page that records available disk space, plugin update failures, integrity check failures, and compilation failures
Adds a new Health column to the Linked Agents page to quickly identify agents with recent negative health events

2 details in Everything

Tenable One Attack Surface Management 2024 Release Notes — August 14, 2024 Aug 14, 2024 · release notes

Tenable ASM adds Activity Logs and custom dashboards with new widgets

Adds Activity Logs page showing system events grouped by timestamp and actor.
Enables creation of custom dashboards, adding new widgets, or customizing the default Dashboard.

2 details in Everything

Tenable One Attack Surface Management 2024 Release Notes — August 13, 2024 Aug 13, 2024 · release notes

Tenable One ASM adds configurable JWT token expiration for application tokens.

JWT tokens issued to the application may now have a configurable expiration time.

1 detail in Everything

Tenable One Vulnerability Management 2024 Release Notes — August 13, 2024 Aug 13, 2024 · release notes

Custom roles can now manage Web App Scanning (WAS) scans in Tenable One Vulnerability Management.

Tenable One Vulnerability Management 2024 Release Notes — August 8, 2024 Aug 8, 2024 · release notes

Tenable One VM enhances Plugin Output search with top plugin list and filter suggestions on Findings workbench.

Adds Top plugins display showing the top ten Plugin IDs when searching Plugin Output in the Findings workbench.
Adds Search prompt suggesting Plugin ID and Last Seen filters to refine Plugin Output search results.

2 details in Everything

Tenable One Vulnerability Management 2024 Release Notes — August 6, 2024 Aug 6, 2024 · release notes

Adds Tenable FedRAMP Moderate Cloud Sensor IP ranges for cloud network scans and scanner/agent communications.

Tenable One Vulnerability Management 2024 Release Notes — August 1, 2024 Aug 1, 2024 · release notes

New Exposure Response section for tracking remediation initiatives with SLAs and report cards

Adds the Exposure Response section to track identification of critical exposures and responses via initiatives.
Adds ability to apply SLAs and target specific vulnerabilities when creating initiatives.
Adds customizable dashboards for reviewing initiatives.
Adds a custom query builder to drill down to specific findings or assets within initiatives.
Adds Export initiative data capability to share lists of findings or assets.

+1 more show less

Adds report cards to view and export visual reports of remediation progress.

6 details in Everything

Tenable One 2024 Release Notes — Tenable Inventory July 31, 2024 Jul 31, 2024 · release notes

Tenable Inventory adds Attack Path choke points to the Weaknesses page.

Tenable One 2024 Release Notes — Attack Path July 31, 2024 Jul 31, 2024 · release notes

Tenable One adds OT Exposure data as a source for Attack Path with new search filters and navigation options.

Adds OT Exposure (OT data) as a data source within the Attack Path application
Adds OT data source search filters to refine OT attack path results
Adds OT weakness search filters to narrow results by specific weaknesses
Adds OT detection filters to filter detections within the OT context
Adds OT Technique filters to filter by specific techniques in OT paths

+2 more show less

Enables searching Attack Paths by number of steps
Enables searching Attack Paths by Asset ID

7 details in Everything

Tenable One OT Exposure 3.19.51 (2024-07-30) Jul 30, 2024 · release notes

New IoT Connectors engine for VMS/IoT integration, Nested OT device detection, and DFE cloud updates

Adds IoT Connectors engine to integrate IoT or VMS servers via remote API or agent for device import.
Enables visual tracking of asset relationships using the Related Assets tab on the single asset page.
Adds detection of nested OT devices (e.g., PLC modules behind a backplane) for Rockwell connection types like CIP, DirectNet, and ControlNet.
Allows Dynamic Fingerprinting Engine (DFE) updates to be downloaded and applied directly from the cloud.
Adds PDF export capability for Executive Summary reports via Dashboards > Executive Report.

+5 more show less

Enables bulk or single asset diagnostic report exports for support purposes via Export Diagnostics.
Introduces a separate Ping query based on ICMP to test asset routability in Active Queries Management.
Adds Try Anyway button in Active Queries Management to override limits on the number of active query attempts during troubleshooting.
Allows viewing Tenable customer ID in the About view accessed via the username drop-down menu.
Synchronizes open ports on monitored assets when integrated with Tenable One for dynamic tagging.

10 details in Everything

└──▷ BREAKING ON UPGRADE

!The ActiveQueriesOpType type was removed; fields like ActiveQuery.operation, AssetDiscovery.operation, and PortScan.operation now use OpType! instead of ActiveQueriesOpType!.
!Field PingEnabled was removed from the Config object type.
!Enum values PingType, NessusAdvancedScan2Type, NessusAdvancedScanType, DnsType, InactiveAssetProbe, PortScanAssetEnrichment, and PortScanQueryType were removed from their respective enums.
!Default value for argument countTimeout on fields like Asset.eventAggregations, Mutation.bulkEditAssets, Query.assets, etc. changed from 700 to 3000.

Tenable One Attack Surface Management 2024 Release Notes — July 29, 2024 Jul 29, 2024 · release notes

Tenable One ASM adds Effective TLDs as asset discovery sources; Automation Rules appear in Activity Logs.

Displays automation rule state changes as system tasks in the User Activity Logs page

1 detail in Everything

Tenable One Identity Exposure 2024 Release Notes — SaaS — Tenable One Identity Exposure 3.76 (2024-07-25) Jul 25, 2024 · release notes

Tenable One Identity Exposure 3.76 adds IoE for conflicting principals and dangerous delegation SPN checks.

Adds Indicator of Exposure (IoE) check to identify duplicated (conflicting) security principals such as users, computers, or groups
Adds new IoE reason report that flags accounts where constrained delegation's msDS-AllowedToDelegateTo attribute references a non-existent Service Principal Name (SPN)
Increases the size limit for Active Directory objects managed by Tenable One Identity Exposure

3 details in Everything

Tenable One Vulnerability Management 2024 Release Notes — July 24, 2024 Jul 24, 2024 · release notes

New Exposure Response section for creating and tracking remediation initiatives with SLAs and report cards.

Adds Exposure Response as a new main section in Tenable One Vulnerability Management to manage remediation projects.
Adds initiatives feature allowing administrators to create, assign, apply SLAs, and target specific vulnerabilities using queries.
Adds Custom query builder within Exposure Response to drill down to resources and save searches.
Adds Export initiative data capability to share lists of findings or affected assets.
Adds report cards feature in Exposure Response to view and export visual reports on remediation progress.

5 details in Everything

Tenable One Identity Exposure 2024 Release Notes — SaaS — Tenable One Identity Exposure 3.75 (2024-07-16) Jul 16, 2024 · release notes

Tenable One Identity Exposure 3.75 adds Shadow Credentials IoE and groups Password Spraying alerts

Adds an Indicator of Exposure for shadow credentials in Windows Hello for Business to detect backdoors and misconfigurations of associated key credentials.
Suppresses Password Spraying alerts for DC Sync sources linked to Azure ADConnect (basic mode), NTDS Extraction from VSS Requestor or Veeam, Enumeration of Local Administrators when source user SID is unavailable (basic mode), Petit Potam when logon event retrieval fails, and Golden Ticket when source vectors cannot be fetched (basic mode).

2 details in Everything

Tenable One Vulnerability Management 2024 Release Notes — July 10, 2024 Jul 10, 2024 · release notes

Adds hundreds of new compliance report templates, dashboards, widgets, and findings filters for Host Audits in Tenable FedRAMP Moderate.

Adds new Report template categories on the Reports page containing new templates under Host Audits
Adds Dashboard templates in the Template Library (via New Dashboard > Template Library) for Host Audits
Adds Dashboard widgets in the Widget Library for Host Audits
Adds new benchmarking and compliance filters in the Findings workbench under the Host Audits tab

4 details in Everything

Tenable One Vulnerability Management 2024 Release Notes — July 9, 2024 Jul 9, 2024 · release notes

Tenable One allows editing scheduled exports and reassigning them during user deletion

Adds ability to edit scheduled export options via Settings > Exports UI pane
Automatically reassigns scheduled exports to a new owner when deleting a user

2 details in Everything

Tenable One Vulnerability Management 2024 Release Notes — July 1, 2024 Jul 1, 2024 · release notes

Adds Configure Plugin Update Plan setting to Agent Profiles menu for delayed or specific plugin set selection.

Tenable One Identity Exposure 2024 Release Notes — SaaS — Tenable One Identity Exposure 3.74 (2024-06-26) Jun 26, 2024 · release notes

Adds Whitelisted Processes IoA option and refines Basic mode alert logic.

Adds Whitelisted Processes active option in basic and aggressive modes to exempt legitimate processes flagged during attacks
Refines IoA Basic mode to suppress alerts for event loss or ingestion delays
Refines IoA Basic mode to suppress alerts when attack source cannot be identified due to missing data

3 details in Everything

Tenable One 2024 Release Notes — Tenable Inventory June 18, 2024 Jun 18, 2024 · release notes

Tenable Inventory adds AI Asset Summaries, new tabs for weaknesses and accounts, and attack path visibility in June 2024 release.

Adds an AI Asset Summary button to asset details that provides an AI-generated summary of the asset and its top identified weaknesses.
Introduces a Weakness Tab on asset details to access a comprehensive view of all weaknesses associated with the asset.
Adds an Account Tab to view all accounts associated with a selected asset.
Enables viewing of primary Attack Paths for an asset to help prioritize risks effectively.

4 details in Everything

Tenable Security Center 6.4.0 Release Notes (2024-06-10) Jun 10, 2024 · release notes

Tenable Security Center 6.4.0 adds QiAnXin PAM integration, millisecond log timestamps, CVE ID filtering, and static asset list size increase.

Adds qi as a supported credential source in the SSH/Wins Credentials configuration for QiAnXin Privileged Access Management (PAM) integration
Enables exact and contains operators on CVE IDs in the Analysis filter UI/API
Increases static asset list size limit to 50,000 characters in the Static Asset Lists configuration
Renames the export field Solution to Steps to Remediate in CSV/PDF exports for remediation summaries and vulnerability details

4 details in Everything

└──▷ BREAKING ON UPGRADE

!The export field Solution is renamed to Steps to Remediate in .csv and PDF exports for remediation summaries, vulnerability details, WAS Vulnerability details, Mobile Vulnerability details, and plugin listing.

Tenable One Vulnerability Management 2024 Release Notes — June 5, 2024 Jun 5, 2024 · release notes

Adds Source IP Address Restriction for public APIs in Tenable One Vulnerability Management

Adds the ability to define IPv4 and IPv6 addresses (discrete, range, or CIDR) that can access Tenable One Vulnerability Management public APIs
Adds a new UI section named Access Control where administrators manage API source IP restrictions

2 details in Everything

Tenable One Vulnerability Management 2024 Release Notes — June 4, 2024 Jun 4, 2024 · release notes

Tenable One adds Vulnerability Intelligence section with curated categories, custom query builder, and CSV/JSON export

Adds Vulnerability Intelligence main section to compare Tenable database vulnerabilities against your exposure
Adds support for seven curated vulnerability categories based on risk indicators and research insights in the Vulnerability Intelligence section
Adds a custom query builder in the Vulnerability Intelligence section to drill down to specific vulnerabilities, findings, or assets
Adds ability to export findings or affected assets from the Vulnerability Intelligence section to CSV or JSON

4 details in Everything

Tenable One Identity Exposure 2024 Release Notes — SaaS — Tenable One Identity Exposure 3.72 (2024-05-30) May 30, 2024 · release notes

Adds configurable IoA event gathering duration and Golden Ticket false positive reduction.

Users can now set the event gathering duration for Indicators of Attack (IoA) before triggering analysis, with values ranging from 30 seconds to 9 minutes (a trade-off between latency and accuracy)
Golden Ticket IoA — To reduce false positives, Tenable One Identity Exposure implemented a 10-hour deferral period during which it automatically allowlists legitimate users

2 details in Everything

Tenable One Vulnerability Management 2024 Release Notes — May 22, 2024 May 22, 2024 · release notes

Tenable One introduces combined Port filter and new Port Last Detected Open filter on Assets workbench; enhanced search on Findings workbench.

Adds Port filter on the Assets workbench to search host or domain inventory assets by specific ports or port ranges, combining previous Open Ports and Port filters
Adds Port Last Detected Open filter on the Assets workbench to search for all assets with detected open ports as of a date or a date range
Enhances Findings workbench search to include asset name, IPv4 address or range, or Classless Inter-Domain Routing (CIDR) block

3 details in Everything

Tenable One Identity Exposure 2024 Release Notes — SaaS — Tenable One Identity Exposure 3.71 (2024-05-22) May 22, 2024 · release notes

Tenable One Identity Exposure 3.71 adds Golden Ticket detection and new KRBTGT exposure indicators to IoE reports.

Adds Golden Ticket detection engine to identify Windows Event Log loss scenarios
Adds Protected Users Group Not Used reason to Indicators of Exposure (IoE) reports to flag privileged users not in the group

2 details in Everything

└──▷ BREAKING ON UPGRADE

!The options Keep Disabled Accounts and Keep Deleted Accounts are removed from the security profile customization for the Last Password Change on KRBTGT account Indicator of Exposure.

Tenable One Web App Scanning 2024 Release Notes — May 16, 2024 May 16, 2024 · release notes

General Availability of filtering Tenable One Web App Scanning findings by tags in the Findings and Explore views.

Adds Tag filter support in the WAS Findings view query builder
Adds Asset Tag filter to the Vulnerability Management Explore Findings view

2 details in Everything

Tenable One Vulnerability Management 2024 Release Notes — May 13, 2024 May 13, 2024 · release notes

Adds Open Agent Port setting to agent profiles for automatic asset merging.

Adds Open Agent Port setting in Tenable One Vulnerability Management to allow scanners to detect Tenable Agents on targets.
Enables automatic asset merging to prevent host duplication between network scans and agent-based scans.

2 details in Everything

Tenable One Vulnerability Management 2024 Release Notes — April 23, 2024 Apr 23, 2024 · release notes

Tenable One adds hundreds of new compliance report templates, dashboard widgets, and host audit data filters for the April 2024 release.

Adds dozens of new compliance-focused report templates organized by category on the Reports page
Adds new dashboard templates under Host Audits via Dashboards > New Dashboard > Template Library
Adds new dashboard widgets under Host Audits via Dashboards > Widget Library
Enables host audit data inclusion in custom widgets created via Create a Custom Widget
Adds benchmarking and compliance filters to the Findings workbench Host Audits tab

5 details in Everything

Tenable One Identity Exposure 2024 Release Notes — SaaS — Tenable One Identity Exposure 3.69 (2024-04-18) Apr 18, 2024 · release notes

Adds four new IoEs and enhances existing detection logic in Tenable One Identity Exposure 3.69

Managed Service Accounts Dangerous Misconfigurations IoE added to ensure proper deployment and configuration of Managed Service Accounts.
Enabled Guest Account IoE added to check that the built-in guest account is disabled.
Domain Without Computer-Hardening GPOs IoE enhanced with null session checks for domain computers.

3 details in Everything

Tenable One 2024 Release Notes — Attack Path April 18, 2024 Apr 18, 2024 · release notes

Tenable One Attack Path adds Asset ID, Weakness ID, Technique, and Finding ID filters plus global application navigator.

Adds Asset ID and Weakness ID filter controls to the Findings page in Attack Path to map weaknesses to choke points
Adds Technique and Finding ID filter controls to the Discover page in Attack Path to filter paths by MITRE technique or specific findings
Introduces a global application navigator in Attack Path to search for pages, queries, and MITRE ATT&CK Heatmap categories

3 details in Everything

Tenable One Identity Exposure 2024 Release Notes — SaaS — Tenable One Identity Exposure 3.68 (2024-04-08) Apr 8, 2024 · release notes

New IoE checks for obsolete OS logon timestamps and domain controller hardening; RSoP aggregation for privileged users.

Adds 'lastLogonTimestamp' value to show the last successful user logon timestamp in Inactive obsolete OS deviances
Adds new checks for computers running an obsolete OS, distinguishing dormant accounts by two new reasons for privileged vs regular users
Adds new domain controller hardening checks including hardened UNC paths for SYSVOL/NETLOGON shares and print spooler service status
Enhances SMB signing enforcement validation on domain controllers and other servers via the Default Domain Controllers Policy parameter check
Aggregates buffered events over a short duration (default 1 minute) for RSoP IoEs to reduce change analysis, specifically for Logon Restrictions for Privileged Users

5 details in Everything

Tenable One Vulnerability Management 2024 Release Notes — April 3, 2024 Apr 3, 2024 · release notes

Adds Info-level Reporting scan setting to Nessus Agent templates to reduce processing time for unchanged findings.

Tenable One Attack Surface Management 2024 Release Notes — April 2, 2024 Apr 2, 2024 · release notes

Tenable One ASM adds Robust Filtering with nested AND/OR queries, new AWS and Cloudflare integrations.

Adds Robust filtering option allowing multiple query filters with AND/OR operators and two levels of nesting.
Adds AWS integration to add assets from AWS accounts.
Adds Cloudflare integration.

3 details in Everything

Tenable One Vulnerability Management 2024 Release Notes — April 2, 2024 Apr 2, 2024 · release notes

Tenable One adds Time Taken to Fix and Last Fixed fields to the Findings Workbench for SLA tracking.

Adds Time Taken to Fix field (hours/days) to Findings Details page and as a filter in the Findings workbench for fixed vulnerabilities
Adds Last Fixed field showing when a vulnerability was last noted as absent from an asset, available as a column in the Findings workbench and on the Findings Details page

2 details in Everything

Tenable One Identity Exposure 2024 Release Notes — SaaS — Tenable One Identity Exposure 3.67 (2024-03-21) Mar 21, 2024 · release notes

Tenable One Identity Exposure 3.67 adds password spraying detection intervals and IoA deny lists for NTDS extraction and credential dumping.

Adds Password guessing detection time interval option to specify minutes over which failed logins classify as a potential attack in progress
Adds Filtered access rights in aggressive mode option for Enumeration of Local Administrators IoA to restrict checks to specific event types
Changes default value for Heuristic for Domain Controllers using versions before Windows Server 2016 to False
Changes default value for Allow unknown source in DCSync to False
Adds Deny list in Basic mode for NTDS Extraction including diskshadow, ntdsutil, esentutl and others

+1 more show less

Adds Deny list in Basic mode for Credential Dumping LSASS Memory including mimikatz, taskmgr, powershell and others

6 details in Everything

Tenable One Vulnerability Management 2024 Release Notes — March 20, 2024 Mar 20, 2024 · release notes

Adds password protection for Findings reports and report categories for better organization

Generates Findings workbench reports with AES 128-bit encrypted passwords via the Generate a Findings Report dialog.
Organizes templates in new categories within the Act > Reports section when creating reports.

2 details in Everything

Tenable One OT Exposure 3.18.51 (2024-03-15) Mar 15, 2024 · release notes

Tenable One OT Exposure 3.18.51 adds Honeywell/RTU detection, RBAC zones, classification banners, and Syslog caching.

Adds Honeywell C300 policy detections for Honeywell Code Download and Honeywell Code Upload
Adds Siemens SICAM 8050 RTU support over SNMP v3 for active fingerprinting
Adds RediscoveredAsset policy to track offline assets, configured via Policies > Network Events > Rediscovered Asset
Adds Syslog message caching (store and forward) for TCP connections, enabled via the Allow syslog message caching option when creating a Syslog Server
Adds configurable RBAC Zones in Local Settings > Users Management to limit user visibility by asset groups

+6 more show less

Adds SAML, LDAP, and AD authentication provider support in Enterprise Manager Local Settings > Users Management
Adds ICP-EM pairing via API key or username/password using the new step-by-step guide in Local Settings > System Configuration > Enterprise Manager
Adds persistent Classification Banner for compliance (e.g., DFARS), configured in Local Settings > Device page with color and text options
Enables viewing and prioritizing Tenable One OT Exposure vulnerabilities directly within Tenable One without further configuration
Adds support for manually uploading IDS-specific Indicators of Compromise (IoCs) and importing Suricata formatted IDS rules via the command line
Adds Active Query multi-port configuration to check all possible ports for a single protocol on devices

11 details in Everything

└──▷ BREAKING ON UPGRADE

!Backup and Restore capabilities moved from Tenable One OT Exposure to Tenable Core; configure backups under Backup/Restore in Tenable Core.
!DNS server configuration moved from Tenable One OT Exposure to the Networking page in Tenable Core.
!EM-ICP Pairing Migration: After upgrading to version 3.18, all previously linked sites or ICPs must be re-paired as the upgraded Enterprise Manager has no linked sites.

Tenable One Vulnerability Management 2024 Release Notes — March 14, 2024 Mar 14, 2024 · release notes

Adds Asset Tags filter and column in Remediation section for Tenable One

Adds Asset Tags filter in the Remediation section to narrow remediation projects by tag.
Adds Asset Tags column in the Remediation section to display associated tags.

2 details in Everything

Tenable One 2024 Release Notes — Attack Path March 12, 2024 Mar 12, 2024 · release notes

Tenable One Attack Path adds AI assistant for asset/attack explainability.

Adds MITRE ATT&CK Remote Access Software technique support to the MITRE Att&ck page

1 detail in Everything

Tenable One Identity Exposure 2024 Release Notes — SaaS — Tenable One Identity Exposure 3.66 (2024-03-11) Mar 11, 2024 · release notes

Adds Aggressive mode and interval controls for Suspicious DC Password Change and DCSync IoAs; adds Entra ID tenant visibility limits in roles permissions.

Adds Aggressive mode (default False) to all IoAs on security profiles to control detection strictness
Adds Password change interval option for Suspicious DC Password Change IoA in Aggressive mode (30 days default)
Adds Aggressive mode option to DCSync IoA to trigger rules generating false positives or restrict to non-domain machines
Adds support for limiting data visibility for Entra ID tenants in roles permissions management

4 details in Everything

Tenable One Vulnerability Management 2024 Release Notes — March 6, 2024 Mar 6, 2024 · release notes

License Information page clarifies cloud asset licensing and Explore workbenches support multiple browser tabs

License Ratio field appears in the Cloud Security section of the License Information page to show the ratio applied to licensed assets when one is configured
Right-clicking a row in the Findings or Assets workbenches exposes the View all Details in New Tab option for opening details in a separate browser tab

2 details in Everything

Tenable One Identity Exposure 2024 Release Notes — SaaS — Tenable One Identity Exposure 3.65 (2024-02-27) Feb 27, 2024 · release notes

Tenable One Identity Exposure 3.65 adds Aggressive Mode tuning for IoAs and two new IoEs.

Adds Aggressive Mode toggle with allowlisting controls for the OS Credential Dumping: LSASS Memory Indicators of Attack
Adds Aggressive Mode toggle with allowlisting controls for the NTDS Extraction Indicators of Attack
Introduces the new Privileged Authentication Silo Configuration Indicator of Exposure
Introduces the new Privileged AD User Accounts Synchronized to Microsoft Entra ID Indicator of Exposure

4 details in Everything

Tenable One Web App Scanning 2024 Release Notes — February 22, 2024 Feb 22, 2024 · release notes

Tenable One Web App Scanning now generally available supports CI/CD integration via Docker images.

General availability of CI/CD scanning integration allows integration with GitHub, GitLab, Jenkins, CircleCI, or Bamboo.

1 detail in Everything

Tenable One 2024 Release Notes — Attack Path February 20, 2024 Feb 20, 2024 · release notes

Adds three built-in Attack Path queries to the Query Library and SecurityControlAgent search support on the Discover page

Internet to Critical Assets built-in query added to the Attack Path Query Library
Computers without SMB Signing built-in query added to the Attack Path Query Library
Computers with LLMNR enabled built-in query added to the Attack Path Query Library
Discover page now supports SecurityControl/SecurityControlAgent search parameters

4 details in Everything

Tenable One 2024 Release Notes — Lumin Exposure View February 15, 2024 Feb 15, 2024 · release notes

Initial OT Exposure Card in Lumin Exposure View with Overall Score, Trend, and Tag Performance metrics.

Adds the OT Exposure Card to the Exposure Card Library > Category section for Operational Technology asset visibility.
The new OT card displays Overall Score, Trend, and Tag Performance metrics for OT assets.
Enables drilling down from Lumin Exposure View into Cyber Asset Management to inspect specific OT assets.
Introduces quick filters in Inventory to easily find all OT assets.

4 details in Everything

Tenable One 2024 Release Notes — Attack Path February 15, 2024 Feb 15, 2024 · release notes

Tenable One adds ransomware threat queries for LPHV Blackat, CL0P, LockBit, 8base, and Akira to the Query Library.

Tenable Security Center 6.3.0 Release Notes (2024-02-14) Feb 14, 2024 · release notes

Tenable Security Center 6.3.0 adds Kubernetes deployment, multi-target web app scans, software EOL filtering, and new credential types.

Adds support for deploying Tenable Security Center in a Kubernetes cluster
Adds scanning multiple URL targets in Web Application Scans
Adds Software End of Life date filtering on vulnerabilities and plugins
Adds Accept/Recast Risk Rules permission to modify user ability to delete accept/recast risk rules created by other users
Adds support for Arcon Database Credentials

+2 more show less

Adds support for OpenShift Container Platform Credentials
Adds support for CyberArk Auto-Discovery Credentials

7 details in Everything

Tenable One 2024 Release Notes — Attack Path February 12, 2024 Feb 12, 2024 · release notes

Attack Path Query Library now shows bookmark creator/Updater; MITRE ATT&CK SSH/VNC support expanded; Discover panel layout changes

Attack Path Query Library bookmarks now display the user who created or updated them in the UI.
MITRE ATT&CK technique support extended to include SSH and VNC protocols for external remote services.
All additional information on Discover/Findings pages now renders in the side details panel instead of inline.
Discover page no longer displays the Tactics List in the canvas bracket, reducing text clutter.

4 details in Everything

Tenable One Vulnerability Management 2024 Release Notes — February 12, 2024 Feb 12, 2024 · release notes

Adds custom role-based access control (RBAC) for Vulnerability Management Scan Management tasks.

Tenable One 2024 Release Notes — Attack Path January 30, 2024 Jan 30, 2024 · release notes

Tenable One adds Path Priority Rating metric, Attack Path Summarization via GenAI, and Asset Query Builder for discovery.

Introduces the Path Priority Rating metric which prioritizes attack paths based on source exposure, target criticality, and path step count
Adds Attack Path Summarization capability to transform graphical attack paths into natural language titles and executive summaries via Generative AI
Enables separate asset node search within the Discover landing page using the new Asset Query Builder interface
Changes the default view of the Discover landing page to display top attack paths

4 details in Everything

└──▷ BREAKING ON UPGRADE

!Path Priority Rating has been renamed to Choke Point Priority and now prioritizes attack techniques rather than attack paths

Tenable One Vulnerability Management 2024 Release Notes — January 23, 2024 Jan 23, 2024 · release notes

New License Information page with visual overviews, snapshots, and resource counts.

Adds a redesigned License Information page available to all users in Tenable One.

1 detail in Everything

Tenable One 2024 Release Notes — Tenable One January 23, 2024 Jan 23, 2024 · release notes

Tenable One adds a redesigned License Information page with visual product/time-based overviews.

Adds a redesigned License Information page available to all users in Tenable One for viewing cloud license details.

1 detail in Everything

Tenable One Web App Scanning 2024 Release Notes — January 23, 2024 Jan 23, 2024 · release notes

Tenable One Web App Scanning adds a redesigned License Information page with visual trends and usage snapshots.

Adds a redesigned License Information page accessible in the cloud console for all users.

1 detail in Everything

Tenable One 2024 Release Notes — Attack Path January 22, 2024 Jan 22, 2024 · release notes

Tenable One adds support for Windows Credential Manager techniques and APT28, APT33, Scattered Spider, Lockbit_3.0, Medusa trending attack paths.

Adds MITRE ATT&CK technique detection for Windows Credential Manager to Attack Path analysis

1 detail in Everything

Tenable One Vulnerability Management 2024 Release Notes — January 18, 2024 Jan 18, 2024 · release notes

Tenable One adds Compute and Serverless field visibility to the redesigned License Information page.

Tenable One Web App Scanning 2024 Release Notes — January 16, 2024 Jan 16, 2024 · release notes

Adds vulnerability state tracking to WAS Findings and purges non-VM data older than 90 days

Adds vulnerability state tracking to WAS Findings, allowing users to see whether vulnerabilities are new, active, fixed, or resurfaced

1 detail in Everything

└──▷ BREAKING ON UPGRADE

!Non-VM data older than 90 days is no longer displayed in WAS Findings (only available in historical scan results)

Tenable One Vulnerability Management 2024 Release Notes — January 16, 2024 Jan 16, 2024 · release notes

Redesigned global header in Tenable One Vulnerability Management streamlining access to profile and platform settings.

Global header restyled to align with new branding and improve navigation to personal profile and platform settings.

1 detail in Everything

Tenable One Vulnerability Management 2024 Release Notes — January 12, 2024 Jan 12, 2024 · release notes

Adds single-line command installation and linking for Nessus scanners and Agents.

Supports a single-line command installation method for Tenable Nessus scanners and Tenable Agents.
Allows specifying sensor name and group assignment within the single-line command.

2 details in Everything

Tenable One OT Exposure 3.17.40 SP (2024-01-05) Jan 5, 2024 · release notes

Tenable One OT Exposure 3.17.40 SP adds Oracle Linux 8 support with ERSPAN passive monitoring and Network Monitor 6.3.1 integration.

Adds Oracle Linux 8 as a supported installation platform for Tenable Core
Enables ERSPAN traffic feeds for passive monitoring on Oracle Linux 8

2 details in Everything

Tenable One Vulnerability Management 2023 Release Notes — December 18, 2023 Dec 18, 2023 · release notes

Adds sensor.cloud.tenablecloud.cn host for Tenable Agents and Nessus Scanners in mainland China

Tenable One Identity Exposure 2023 Release Notes — SaaS — Tenable One Identity Exposure 3.60 (2023-12-13) Dec 13, 2023 · release notes

Tenable One Identity Exposure 3.60 adds IoEs for missing MFA and unsecure dynamic DNS zone updates.

Indicator of Exposure (IoE): Missing MFA for Non-Privileged Account detects accounts without registered MFA methods or those with enforced MFA but no registration, alerting to potential account takeover via attacker-registered MFA.
Indicator of Exposure (IoE): Unsecure Dynamic DNS Zone Updates Allowed identifies unsecure dynamic DNS zone update configurations that allow unauthenticated editing of DNS records.

2 details in Everything

Tenable One Vulnerability Management 2023 Release Notes — December 5, 2023 Dec 5, 2023 · release notes

Asset Details page now shows First Detected Open, Last Detected Open, and Service columns in the Open Ports tab.

Adds the Relocate Open Port Findings toggle under Settings > General > Scanning to control visibility of the Open Ports tab.

1 detail in Everything

Tenable One Identity Exposure 2023 Release Notes — SaaS — Tenable One Identity Exposure 3.59 (2023-11-29) Nov 29, 2023 · release notes

Adds Property Sets Sanity IoE detection for AD schema misconfigurations; Auto-renewing API keys.

Property Sets Sanity new Indicator of Exposure (IoE) checks for misconfigurations or backdoors in AD schema property sets and attributes
API key renews automatically with each SaaS release

2 details in Everything

Tenable One Vulnerability Management 2023 Release Notes — November 8, 2023 Nov 8, 2023 · release notes

Windows OS names standardized to <vendor> <os> <version> <edition> <update> format in UI and scans.

Tenable One Vulnerability Management 2023 Release Notes — November 1, 2023 Nov 1, 2023 · release notes

Tenable One adds Cloud Tags support for AWS, Azure, and GCP with new Host Assets columns and Asset Filter parameters.

Host Assets table now includes Resource Tags, Cloud Provider, and updated Source columns to display imported cloud metadata.
Asset Filters gains Cloud Provider, Resource Tags (By Key), and Resource Tags (By Value) filters for querying cloud assets.

2 details in Everything

└──▷ BREAKING ON UPGRADE

!Queries utilizing AWS, GCP, or Azure as sources must be updated to use Cloud Discovery Connector for the Source parameter, while using Cloud Provider to distinguish between providers.

Tenable One Identity Exposure 2023 Release Notes — SaaS — Tenable One Identity Exposure 3.58 (2023-11-01) Nov 1, 2023 · release notes

New hybrid privileged Entra ID indicator, isPrivileged role analysis, and Relay LDAP auth configuration.

Adds a new Indicator of Exposure check for hybrid accounts synchronized from Active Directory that hold privileged roles in Entra ID.
Enhances Entra ID security analysis by incorporating the Microsoft property isPrivileged to determine role privilege status.
Enables Secure Relay users to configure LDAP authentication by selecting one of their Relays to connect to the LDAP Server.

3 details in Everything

Tenable One Identity Exposure 2023 Release Notes — SaaS — Tenable One Identity Exposure 3.57 (2023-10-18) Oct 18, 2023 · release notes

WSUS dangerous misconfiguration checks and domain search in Tenable One Identity Exposure 3.57

Adds new Indicator of Exposure checks for Windows Server Update Services (WSUS) to detect misconfigured settings leading to privilege escalation.
Adds a new search function on the System --> Forests or Domains page to locate forest and domain configurations.

2 details in Everything

Tenable One Vulnerability Management 2023 Release Notes — October 18, 2023 Oct 18, 2023 · release notes

Adds OT Connectors to ingest OT Exposure assets and findings into Vulnerability Management.

Adds OT Connectors tab in the Sensors menu to create, modify, and delete connectors for transmitting OT Exposure data to Vulnerability Management.

1 detail in Everything

Tenable One OT Exposure3.17.24 (2023-10-18) Oct 18, 2023 · release notes

Tenable One OT Exposure v3.17.24 adds integration with Tenable One Vulnerability Management via a linking key

Adds support for Tenable Network Monitor 6.2.3.

1 detail in Everything

Tenable One Vulnerability Management 2023 Release Notes — October 12, 2023 Oct 12, 2023 · release notes

Plugin Output filter in Findings workbench switches from regex to operators

The Plugin Output filter now uses operators instead of regular expressions

1 detail in Everything

Tenable One Vulnerability Management 2023 Release Notes — October 11, 2023 Oct 11, 2023 · release notes

New Open Ports tab, filters, tag rules and export capability in Tenable One VM

Adds the Relocate Open Port Findings setting (under Settings > General > Scanning) to reorganize open port data display and scan performance.
Adds a new Open Ports tab on the Asset Details page for host assets.
Adds a new Open Ports asset filter to the Assets workbench.
Adds a new Open Ports tag rule to the Tags page.
Adds the ability to export open port data from the Assets workbench.

5 details in Everything

└──▷ BREAKING ON UPGRADE

!The High-Traffic Info Plugins setting is now disabled.

Tenable Security Center 2023 Release Notes — Tenable Security Center 6.2.0 (2023-10-10) Oct 10, 2023 · release notes

Tenable Security Center 6.2.0 adds Domain Inventory asset lists, Tenable One Web App scanning, custom classification banners, and in-UI patch updates.

Create a Domain Inventory Asset List from findings in the Domain Inventory
Web App Scanning support via Tenable Nessus integration with Tenable One
Asset Criticality Rating (ACR) and Asset Exposure Score (AES) scoring algorithm update to match Tenable One
Custom Classification Banner creation with user-defined text and color in Security Settings
Auto discovery support for managed VMware ESXi hosts and VMs in authenticated scans

+3 more show less

Senhasegura PAM credential support in authenticated scans
Kerberos target authentication with CyberArk and Hashicorp in authenticated scans
Checkpoint Gaia Expert privilege escalation support in authenticated scans

8 details in Everything

Tenable One Identity Exposure 2023 Release Notes — SaaS — Tenable One Identity Exposure 3.56 (2023-10-04) Oct 4, 2023 · release notes

Updated UI design for Trail Flow and drawer; new option for Dangerous Trust Delegation IoE.

The user interface's Trail Flow and drawer functions now feature the updated Tenable design.
A new option is now available for the Dangerous Trust Delegation IoE to allow you to specify that the check is unnecessary because the domain controllers' operating systems are up to date.

2 details in Everything

Tenable One Web App Scanning 2023 Release Notes — September 20, 2023 Sep 20, 2023 · release notes

Tenable One Web App Scanning adds Workspace role controls, UI reports, and scan categories

Adds Make Default Login option to set the Workspace page app that appears on login
Allows administrators to control which custom roles can access which Tenable One apps via new role settings
Adds Executive Summary with OWASP, Vuln Findings by Plugins, and Vuln Findings by Asset report variants to the Findings view
Adds a query builder in the Scan Management view to search scan information

4 details in Everything

Tenable One Vulnerability Management 2023 Release Notes — September 20, 2023 Sep 20, 2023 · release notes

Adds Workspace page default app configuration and custom role access controls for Tenable One apps

Adds Make Default Login option on the Workspace page to set a default app that appears at login
Adds Remove Default Login Page option on the Workspace page to remove the default app
Adds new custom role settings to control which Tenable One apps each role can access

3 details in Everything

Tenable One Identity Exposure 2023 Release Notes — SaaS — Tenable One Identity Exposure Tenable One Platform Updates (2023-9-20) Sep 20, 2023 · release notes

Adds ability to set default login app via Workspace and control custom role access to Tenable One apps.

Allows administrators to configure which custom roles have access to specific Tenable One apps through new role settings
Enables setting a default application on the Workspace page by selecting Make Default Login from an app tile's options

2 details in Everything

Tenable One Vulnerability Management 2023 Release Notes — September 18, 2023 Sep 18, 2023 · release notes

Adds Untruncated Data toggle to disable trimming of cells in Findings CSV exports.

Adds Untruncated Data option to control cell length truncation in Findings CSV exports

1 detail in Everything

Tenable One Vulnerability Management 2023 Release Notes — September 11, 2023 Sep 11, 2023 · release notes

New ability to set a default Tenable App on login to bypass the Workspace page

Make Default Login option added to Workspace and app tiles to set the app launched after sign-in.
Remove Default Login Page option added to restore the default Workspace launch behavior.

2 details in Everything

Tenable One Web App Scanning 2023 Release Notes — September 11, 2023 Sep 11, 2023 · release notes

Adds ability to set a default Tenable One app for login via Make Default Login and Remove Default Login Page options on the Workspace page.

Adds Make Default Login option to set a selected app as the default login landing page, replacing the Workspace page upon sign-in
Adds Remove Default Login Page option to clear the current default app setting and revert to the Workspace page

2 details in Everything

Tenable One Web App Scanning 2023 Release Notes — August 29, 2023 Aug 29, 2023 · release notes

Tenable One Web App Scanning adds integrated Tenable One UI, OWASP Executive Summary reports, and application technology views.

Updated Applications view shows the software technologies running on each web application
Findings view can now generate three report variants: Executive Summary with OWASP, Vuln Findings by Plugins, and Vuln Findings by Asset
Scan Management includes a query builder to enable users to quickly find the scan information needed

3 details in Everything

Tenable One Identity Exposure 2023 Release Notes — SaaS — Tenable One Identity Exposure 3.53 (2023-08-23) Aug 23, 2023 · release notes

Tenable One Identity Exposure 3.53 adds new Indicator of Exposure for Active Directory password weaknesses.

Tenable One Identity Exposure 2023 Release Notes — SaaS — Tenable One Identity Exposure 3.51 (2023-07-31) Jul 31, 2023 · release notes

Tenable One Identity Exposure 3.51 adds DFS-based SYSVOL replication detection to IoE checks.

DFS Misconfiguration Indicator of Exposure now detects when SYSVOL uses Distributed File System Replication (DFSR)
Indicator of Exposure now recognizes sAMAccountNames and UPNs as dangerous sensitive privileges before raising deviances

2 details in Everything

Tenable One Vulnerability Management 2023 Release Notes — July 31, 2023 Jul 31, 2023 · release notes

Agent Profiles for version control; Custom Role app toggles and SAML auto-provisioning with role mapping/reset

Adds Agent Profiles to Settings > Sensors > Nessus Agents allowing specific agent versions to be applied to subsets of linked agents.
Enables access toggles for Custom Roles to control which licensed applications (Tenable Inventory, Attack Surface Management, Attack Path, etc.) each role can use.
Supports auto-provisioning SAML users with Role Mappings from the IdP and adds an option to reset a SAML user's role back to the IdP configuration at each login.

3 details in Everything

Tenable One OT Exposure 3.16.55 (2023-07-25) Jul 25, 2023 · release notes

Tenable One OT Exposure 3.16.55 adds AS-P passive detection, SNMP OID customization, credential types, GraphQL Playground toggle, centralized sensor updates, and Active Queri

Adds passive detection support for Schneider Electric AS-P (SmartX) controllers.
Adds customizable SNMP OIDs that are actively queried for all devices and an expandable configuration for custom SNMP queries mapped to names and OID.
Adds new credential types: SEL, ABB, Siemens SICAM, Siprotec5, Concept, and Bachmann.
Adds a Settings toggle to enable or disable the GraphQL Playground API testing interface.
Adds centralized sensor updates where sensors receive updates directly from Tenable One OT Exposure and can be upgraded via the Sensors tab in the interface.

+5 more show less

Adds granular control over the types of queries, groups of assets queried, or restrictions to queries in the redesigned Active Queries page.
Adds support for multiple authentication servers (SSO or LDAP) across the organization.
Adds an IDS policy and rule group in response to the Rockwell ControlLogix advisory.
Adds notification when the /opt disk partition is running low on space.
Adds syslog heartbeat messages sent to the SIEM for easier monitoring of Tenable One OT Exposure uptime.

10 details in Everything

└──▷ BREAKING ON UPGRADE

!Active Queries 2.0 redesign removes numerous GraphQL types and fields (e.g., AllOpType, AssetOpType, NetworkInterfaceOpType, GroupedScanQueries) and mutations/queries related to active scanning, breaking existing API automation.
!DNS configuration is removed from the Tenable One OT Exposure application; it must now be configured in Tenable Core under Networking.
!All queries are disabled by default after upgrading to version 3.16; users must manually re-enable them via the Active Queries page.

Tenable One Vulnerability Management 2023 Release Notes — July 24, 2023 Jul 24, 2023 · release notes

Explore workbenches now display exact finding or asset counts when exceeding 1,000.

Tenable One Vulnerability Management 2023 Release Notes — July 19, 2023 Jul 19, 2023 · release notes

Adds UI and plugin language settings in Tenable One VM July 2023 release

Settings > Language panel now lets account owners switch the user interface between English, French, or Japanese
Settings > General panel allows container administrators to change plugin display languages (English, Japanese, Simplified Chinese, Traditional Chinese) for all users

2 details in Everything

Tenable One Identity Exposure 2023 Release Notes — SaaS — Tenable One Identity Exposure 3.49 (2023-06-28) Jun 28, 2023 · release notes

Tenable One Identity Exposure 3.49 adds Platform Health Checks, Reporting Center export, IoE exclusions, and Dashboard templates.

Platform health check capabilities lists performed checks in a consolidated view to investigate configuration anomalies.
Integrates Reporting Center feature allowing streamlined report creation for key stakeholders.
Enables Exclusion allowed for deviant objects in selected Indicators of Exposure (IoE) such as Logon Restrictions for Privileged Users and Computers Running an Obsolete OS.
Adds Dashboard templates for prioritizing issues related to compliance, risk, password management, and user/admin monitoring.
Introduces Workspace feature to access all Tenable products in one location.

5 details in Everything

Tenable One Identity Exposure 2023 Release Notes — SaaS — Tenable One Identity Exposure 3.48 (2023-06-14) Jun 14, 2023 · release notes

Tenable One Identity Exposure 3.48 adds built-in health checks and search in Relay/Roles Management

Adds Health Checks for real-time visibility into domain and service account configuration anomalies.
Adds Search function to Relay Management and Roles Management interfaces.

2 details in Everything

Tenable Security Center 6.1.1 (2023-06-07) Jun 7, 2023 · release notes

Tenable Security Center 6.1.1 adds MaaS360 MDM mobile repository creation.

Adds the ability to create MaaS360 MDM mobile repositories.

1 detail in Everything

Tenable One Vulnerability Management 2023 Release Notes — May 22, 2023 May 22, 2023 · release notes

Adds Change Result and Accept rules for Host Audit findings via Settings or Explore.

Adds Settings > Change Result/Accept configuration path to create rules that alter host audit finding results
Adds new rule types Change Result and Accept specifically for Host Audit findings

2 details in Everything

Tenable One Identity Exposure 2023 Release Notes — SaaS — Tenable One Identity Exposure 3.46 (2023-05-17) May 17, 2023 · release notes

Adds new Zerologon Indicator of Attack detection and optional SYSLOG alert profiles for Indicators of Attack.

Indicators of Attack now includes a new detection that identifies failures in the Netlogon authentication process indicative of Zerologon exploitation attempts.
Configuring SYSLOG alerts for Indicators of Attack now requires a mandatory profile, allowing structured alerting configuration.
The Indicator of Attack deployment script accepts a new -EventLogsFileWriteFrequency X parameter to mitigate issues with slow or broken Distributed File System (DFS) replication.

3 details in Everything

Tenable One Web App Scanning 2023 Release Notes — May 9, 2023 May 9, 2023 · release notes

Adds optional session token config in Tenable One Web App Scanning to speed up authentication when editing scans

Adds an optional configuration field for a session token that accelerates authentication during scan editing operations.
Session token configuration is only accessible and applicable while currently editing an existing scan.

2 details in Everything

Tenable One Vulnerability Management 2023 Release Notes — May 8, 2023 May 8, 2023 · release notes

Tenable One VM introduces redesigned Explore workbenches with asset tiles and interactive visualizations.

Adds Asset tiles to filter data by asset type
Enables interactive Data visualizations on the Assets page via Show Visualizations
Adds Include Info Severity toggle to view information-level severity findings

3 details in Everything

Tenable One Vulnerability Management 2023 Release Notes — May 5, 2023 May 5, 2023 · release notes

RBAC for Tenable One Applications and Frictionless Assessment scan frequency limit

Canned roles (Administrators, Scan Managers, Standard, Scan Operators, Basic) can now access all licensed Tenable One applications including Inventory, Lumin Exposure View, and Attack Path.
Custom Roles can be configured to control user access level to Tenable Inventory, Lumin Exposure View, and Attack Path applications.

2 details in Everything

Tenable One Identity Exposure 2023 Release Notes — SaaS — Tenable One Identity Exposure 3.45 (2023-05-03) May 3, 2023 · release notes

Tenable One Identity Exposure 3.45 adds Syslog and SMTP alerting via Secure Relay

Secure Relay now supports Syslog and SMTP alerting to send alerts to private servers

1 detail in Everything

Tenable One Identity Exposure 2023 Release Notes — SaaS — Tenable One Identity Exposure 3.44 (2023-04-19) Apr 19, 2023 · release notes

Tenable One Identity Exposure 3.44 adds LSA RPC backup key detection and IoA calibration recommendations

Adds Indicator of Attack detection for LSA RPC calls accessing backup keys.
Adds calibration recommendations for Indicator of Attacks based on environment size.

2 details in Everything

Diagnostics Tool Release Notes — Tenable One Identity Exposure Diagnostics Tool 1.0.2 (2023-04-17) Apr 17, 2023 · release notes

New --commands output shows readable registry keys and orders processes by RAM usage in v1.0.2.

--commands output now lists the specific registry keys that the tool can read
Processes are ordered by descending RAM usage in diagnostics output
Installed applications are recovered and stored as installed-applications.txt under the System folder

3 details in Everything

Tenable One Web App Scanning 2023 Release Notes — April 6, 2023 Apr 6, 2023 · release notes

Tenable One WAS adds Request Redirect Limit to PCI ASV template and a new Quick Scan template.

Request Redirect Limit in the Advanced > Limits sub-menu of the Tenable One PCI ASV scan template now allows users to modify the limit for assessing web application compliance
A new Quick Scan scanning template has been added to Tenable One Web App Scanning for quick setup of basic web application scans

2 details in Everything

Tenable Security Center 6.1.0 (2023-03-22) Mar 22, 2023 · release notes

Tenable Security Center 6.1.0 adds Global Search, domain inventory filtering, linked users for non-admins, bulk ACR edits, recast expiration dates, and Delinea Secret Server

Adds Global Search for host assets by IPv4
Adds ability to create linked users for Security Manager user accounts
Adds Bulk ACR Edit capability to edit multiple values at once
Adds Recast Expiration Date setting for recast rules
Adds Delinea Secret Server PAM as a supported authentication method

5 details in Everything

Tenable One Identity Exposure 2023 Release Notes — SaaS — Tenable One Identity Exposure 3.43 (2023-03-22) Mar 22, 2023 · release notes

Tenable One Identity Exposure 3.43 adds Unauthenticated Kerberoasting IoA, HTTP proxy support for Secure Relay, and forced password change on first login.

Unauthenticated Kerberoasting new Indicator of Attack detects stealthy Kerberoasting attacks that bypass numerous detections
Secure Relay now supports HTTP proxy without authentication if your network requires a proxy server to reach the internet
Onboarding process now requires that users change the default credentials provided for the initial login when they log in for the first time

3 details in Everything

Tenable One Identity Exposure 2023 Release Notes — SaaS — Tenable One Identity Exposure 3.42 (2023-03-08) Mar 8, 2023 · release notes

Tenable One Identity Exposure 3.42 extends dashboard data availability to a 1-year time span and adds IoA explanation reasons for weak password policy misconfigurations.

Enables reporting on compliance scores, deviances count, and users count values over a new maximum 1-year time span (from one month).
Introduces two new reasons to explain better two cases where you may think the GPO applies but in fact does not: An Organizational Unit that contains computers may block the GPO inheritance. A security filtering prevents the GPO from applying to computers.

2 details in Everything

Tenable One Vulnerability Management 2023 Release Notes — March 3, 2023 Mar 3, 2023 · release notes

Triggered Scan History now displays entries for each 12-hour window over the past 7 days.

Tenable One OT Exposure 3.15.39 SP (2023-02-24) Feb 24, 2023 · release notes

Tenable One OT Exposure 3.15.39 adds Phoenix Contact/Profinet CM support, Nessus scan management, dark mode, and new API fields.

Adds basic passive and active support for Phoenix Contact (PCWorx and ProConOS protocols) to identify device model, family, type, and firmware version
Adds basic passive and active support for Profinet CM (Context Manager) to identify device firmware version, hardware version, order number, and type
Enables snapshot capability for Rockwell ControlLogix L8X and CompactLogix 538X controller families
Adds ability to merge Siemens S7-300 and S7-400 with FW 2.6.7 and older via API (disabled by default)
Introduces user-defined Nessus Scans page for management, visibility, and IP range scanning of network assets

+21 more show less

Adds Dark Mode toggle in the top bar for color scheme switching
Enables dashboard export to PDF with dark mode format support
Adds new Authentication Servers page under Local Settings - Users and Roles for Active Directory and LDAP configuration
Enhances Open Ports mechanism to show all identified ports and allow control of aged-out period via Local Settings - System Configuration
Makes Sensor BPF visible in the Cockpit UI
Configures dedicated port 28304 for authenticated sensors instead of SSH port 22
Adds new asset types: BMS Controller, Backplane Module, Robot, Security Appliance, Tenable EM, Tenable ICP, and Tenable Sensor
Enhances HTTP/HTTPS banner grabbing to query more ports and parse HTTPS certificates
Allows download of compressed system backup files from Local Settings - System Actions page
Adds custom range filter for IP addresses in the Inventory table
Enables viewing Enterprise Manager (EM) System Log under Local Settings menu
Performs factory reset on Enterprise Manager (EM) via administrator interface
Removes ServiceNow integration from API enum types and mutations
Adds extendedRunStatus to AssetField and Asset enums/types
Adds new asset type enums: BackplaneModule, Bms, Robot, TenableEm, TenableIcp, TenableSensor
Adds NessusUserScan, ReadUpdates, WriteUpdates to Capability enum
Adds input fields bindDn, bindPw, domainAppend, groupBaseDn, host, port, userBaseDn to ProviderOptionsParams
Changes AdProviderOptions.rootCa type from String to String!
Adds new mutation types for Nessus user scans: newNessusUserScan, editNessusUserScan, deleteNessusUserScan, nessusUserScanAction
Adds new query fields for Suricata rules: canOfflineUpdateSuricataRuleSet, canOnlineUpdateSuricataRuleSet, suricataRuleSetDownloadUrl, suricataRuleSetInfo
Adds updateSuricataRuleSet mutation for updating Suricata rule sets

26 details in Everything

└──▷ BREAKING ON UPGRADE

!The enum value ServiceNow was removed from enum ActionType
!Member ServiceNowServer was removed from Union type ActionUnion
!Field serviceNowServers was removed from object type Integration
!Field archiveServiceNowServer was removed from object type Mutation
!Argument servicenowActions: [ID!] was removed from field Mutation.editPolicies
!Field newServiceNowServer was removed from object type Mutation
!Field setServiceNowServer was removed from object type Mutation
!Field testAdHocServiceNowServer was removed from object type Mutation
!Field testServiceNowServer was removed from object type Mutation
!Field serviceNowServer was removed from object type Query
!Field serviceNowServers was removed from object type Query
!Type ServiceNowServer was removed
!Type ServiceNowServerConnection was removed
!Type ServiceNowServerEdge was removed

Tenable One Vulnerability Management 2023 Release Notes — February 24, 2023 Feb 24, 2023 · release notes

Adds ability to export cloud misconfigurations in CSV or JSON format.

Tenable One Web App Scanning 2023 Release Notes — February 21, 2023 Feb 21, 2023 · release notes

New web app scan import capability, VPR scoring for assets and findings, and a modern UI with quick scan creation.

Adds the ability to import previously exported scans back into Tenable One Web App Scanning
Includes debugging information in scan exports to assist with troubleshooting
Supports Tenable’s Vulnerability Priority Rating (VPR) scores for findings in the Explore Workbench
Provides a new landing page showing high-level statistics and 2021 OWASP Top 10 vulnerability readouts
Allows viewing discovered domains from the Assets view and Actions menu to quickly create a new scan

+1 more show less

Enables creating a scan from any Tenable One Web App Scanning view via the Quick Scan button in the top navigation bar

6 details in Everything

Tenable One Vulnerability Management 2023 Release Notes — February 20, 2023 Feb 20, 2023 · release notes

February 2023 update introduces custom widget creation capabilities within Tenable One Vulnerability Management.

Tenable One Web App Scanning 2023 Release Notes — February 2023 Feb 2023 · release notes

Tenable One Web App Scanning 2023 adds forensic logging and Multiple Element Location Selectors.

Adds Forensic logging capability to Scanner version 1.52.1

1 detail in Everything

Tenable One Web App Scanning 2023 Release Notes — January 31, 2023 Jan 31, 2023 · release notes

Adds a UI checkbox to deduplicate similar pages during web app scans.

Tenable Security Center 6.0.0 (2023-01-25) Jan 25, 2023 · release notes

Tenable Security Center 6.0 adds Universal Repositories, Wallix PAM auth, CVE global search, patch feed installs, and Oracle/RHEL 9 support.

Adds Universal repository type to store data from IPv4, IPv6, and Agent sources
Adds Wallix Bastion PAM as a supported Database Credentials Authentication Method
Adds CVE filtering in the Global Search feature
Enables direct download and installation of patches via the console feed, including an automatic install option
Supports Oracle Linux 9 and Red Hat Enterprise Linux 9 for scanner deployment

+3 more show less

Adds Current Year and Last Year options to the Time filter in Vulnerability Analysis
Allows filtering vulnerabilities by NetBIOS name in Vulnerability Analysis
Enables setting password expiration for administrative users via User Account Options

8 details in Everything

└──▷ BREAKING ON UPGRADE

!X.509 certificates signed using SHA1 are no longer allowed at security level 1 or higher by default due to OpenSSL 3.0.x upgrade

Tenable One Vulnerability Management 2023 Release Notes — January 25, 2023 Jan 25, 2023 · release notes

Adds ability to share report templates with other users within an organization.

Tenable One Identity Exposure 2023 Release Notes — SaaS — Tenable One Identity Exposure 3.39 (2023-01-25) Jan 25, 2023 · release notes

Tenable One Identity Exposure 3.39 introduces automated Indicators of Attack deployment and Relay configuration access control in Roles.

Adds automatic deployment of Indicators of Attack to configured domain controllers without manual intervention
Adds Relay configuration access setting within the Roles UI

2 details in Everything

Tenable One Vulnerability Management 2023 Release Notes — January 16, 2023 Jan 16, 2023 · release notes

Adds email notifications on export completion with password-protected download links in Tenable One.

Adds the ability to configure Tenable One Vulnerability Management to send email notifications when an export completes
Allows recipients to download exported results via a link in the notification email using a password

2 details in Everything

Tenable One Vulnerability Management 2023 Release Notes — January 5, 2023 Jan 5, 2023 · release notes

Tenable One adds Publishing Results scan status and enhanced hover tooltips for scan progress monitoring.

Adds a new Publishing Results scan status in the vulnerability management UI to indicate when scan results are being processed and stored.
Enhances scan status bar hover tooltips with detailed metrics including the number of targets scanned, elapsed time, and final scan duration.

2 details in Everything

Tenable One Identity Exposure 3.37 (2022-12-28) Dec 28, 2022 · release notes

Introduces Secure Relay for TLS-based Active Directory data transfer, removing VPN dependency.

Tenable One Vulnerability Management Platform Release Notes - December 2022 Dec 2022 · release notes

Adds live vulnerability results for agentless scans and clipboard copy to Assets/Findings tables

Displays whether vulnerabilities in the Findings > Vulnerabilities page are based on live results from the most recent agentless scan snapshot without running a new scan
Enables copying the value of any cell within an Assets or Findings table to the clipboard by right-clicking

2 details in Everything

Tenable One Identity Exposure 3.34 (2022-11-17) Nov 17, 2022 · release notes

Release adds Tier 0 asset visibility. Bug fixes improve performance on multi-valued attributes and SYSVOL fault tolerance.

Tenable One Identity Exposure 3.33 (2022-11-03) Nov 3, 2022 · release notes

Release 3.33 for Tenable One Identity Exposure introduces the ability to whitelist organizational units for accounts with non-expiring passwords, alongside DNS record fixes.

Tenable One Vulnerability Management Platform Release Notes - November 2022 Nov 2022 · release notes

Adds cell-based filtering for Assets/Findings tables, report asset filters, and unlimited pagination for Group By tables in Tenable One.

Adds the ability to filter by or filter out values directly from Asset and Findings table cells via right-click context menu
Adds report filtering options for all assets, assets by tag, and custom assets
Removes the 200-row limit on Group By tables, enabling pagination similar to the search (list) table

3 details in Everything

Tenable One Identity Exposure 3.32 (2022-10-20) Oct 20, 2022 · release notes

Tenable One Identity Exposure 3.32 adds control over privileged data collection to Tenable Cloud

Privileged Analysis feature enables controlling whether privileged data collection is sent to the Tenable Cloud service (default: do not send)

1 detail in Everything

Tenable One Web App Scanning Release Notes - October 2022 Oct 2022 · release notes

Tenable One WAS adds performance telemetry for scan profiling and Docker image deployment with env var config.

Adds Performance Telemetry plugin to help users understand where scans spend time and modify configuration settings to improve performance
Enables deployment of Tenable One Web App Scanning as a Docker image based on Oracle Linux 8, configurable via environment variables

2 details in Everything

Tenable One Vulnerability Management Platform Release Notes - October 2022 Oct 2022 · release notes

New custom role privileges, Docker deployment for Web App Scanning, and API access limiting in Tenable One Oct 2022

Adds Explore > Assets, Explore > Findings, Dashboards, and Accept/Recast privilege options to Custom Roles.
Enables deploying Tenable One Web App Scanning via a Docker image with automatic configuration through environment variables.
Adds the ability to limit new user access scope (interface only or API only) during creation in Tenable One Vulnerability Management.

3 details in Everything

Tenable One OT Exposure 3.14.25 (3.14 SP1) Release Notes (2022-09-20) Sep 20, 2022 · release notes

Tenable One OT Exposure adds SAML SSO support for IDP integration

SAML Single Sign-On (SSO) authentication is now supported, allowing Identity Providers such as Azure AD to manage login for Tenable One OT Exposure.

1 detail in Everything

└──▷ BREAKING ON UPGRADE

!Starting with version 3.13, Tenable One OT Exposure no longer supports Atomic OS; users must upgrade to Tenable Core.

Tenable Security Center 5.23.1 Release Notes (2022-09-15) Sep 15, 2022 · release notes

Tenable Security Center 5.23.1 adds Vuln Routing Rules, Nutanix credential support, Host Assets export, and AES filtering.

Vuln Routing Rules feature allows routing vulnerabilities to specific users with configurable filters
Nutanix Credential Integration enables local, remote, and agent-based scans for Nutanix AOS/AHV infrastructure
Host Assets Export adds the ability to export a list of hosts and their attributes on the Host Assets page
Asset Exposure Score (AES) Filtering allows filtering by AES and AES Severity on vulnerabilities, dashboards, and reports

4 details in Everything

Tenable One Vulnerability Management Platform Release Notes - September 2022 Sep 2022 · release notes

Tenable One adds debugging and authentication enhancements for web application scans.

Adds debug flag option to Web Application Scans in Tenable One for troubleshooting.
Supports Client Certificate Authentication credentials for Web Application Scans in Tenable One.

2 details in Everything

Tenable One OT Exposure 3.14.15 Release Notes (2022-08-08) Aug 8, 2022 · release notes

Tenable One OT Exposure 3.14.15 adds authenticated sensor pairing, ICCP protocol detection, new asset management tools, and API-based asset deletion.

Adds authenticated sensor capability with SSH tunnel communication and virtual machine support.
Adds new sensor page and widget in the ICP to manage sensor state (pause, resume, delete, unpair, edit name).
Enables active asset querying by managed sensors over specific networks via the ICP interface.
Adds passive monitoring for ICCP protocol with detections for MMS Define Named Variable List, MMS Delete Named Variable List, ICP Create Dataset, and ICP Bilateral Table Exchange.
Adds predefined policies for ICCP commands.

+9 more show less

Adds standard passive support for Bosch PSI Controllers to detect Bosch PSI Connect, Bosch PSI Disconnect, Bosch PSI Download Config, and Bosch PSI Reset.
Adds predefined policies for Bosch PSI events.
Adds basic passive identification for Schneider ION Power Meters (model, family, type, firmware version).
Adds basic passive identification for Wago 750 Controllers (model, family, type, firmware/hardware version, serial number).
Adds API endpoint to permanently delete assets by IP addresses or CIDRs.
Adds interface localization for French, German, Japanese, and Chinese.
Adds IdleAssets Hider tool to hide inventory assets unavailable for a configured duration.
Adds Hidden Assets Deletion tool to permanently remove hidden assets.
Moves port configuration settings to a new dedicated page under System Configuration.

14 details in Everything

└──▷ BREAKING ON UPGRADE

!Starting with version 3.13, Tenable One OT Exposure only supports Tenable Core and no longer supports Atomic OS.

Tenable One Vulnerability Management Platform Release Notes - August 2022 Aug 2022 · release notes

Tenable One adds Kerberos auth for web scans, Quick Scan template, finding grouping, scheduled export filters, rollover scans, and SAML user provisioning.

Adds Kerberos Credential Authentication for web application scans
Adds a new Quick Scan template for web app scanning
Enables grouping of web application findings by asset name or plugin ID
Adds search and filter capabilities for scheduled exports
Adds rollover scans to resume incomplete scans and download remaining targets

+1 more show less

Automatically provisions user accounts via SAML application assignment

6 details in Everything

Tenable One Identity Exposure 3.26 (2022-07-27) Jul 27, 2022 · release notes

Tenable One Identity Exposure 3.26 redesigns UI header, sidebars, Attack Path, and Activity Logs screens.

Redesigned header and sidebars in Tenable One Identity Exposure for UI harmonization with other Tenable products
New Attack Path screen added to the interface
New Activity Logs screen added to the interface

3 details in Everything

Tenable One Identity Exposure 3.25 (2022-07-13) Jul 13, 2022 · release notes

Tenable One Identity Exposure 3.25 expands Group Policy analysis to Groups.xml derivatives outside the standard policies folder.

Indicator of Exposure for Reversible passwords in GPO now analyzes all derivatives of Groups.xml files regardless of their exact location, including outside the \Policies folder.

1 detail in Everything

Tenable One Vulnerability Management Platform Release Notes - July 2022 Jul 2022 · release notes

New API allows converting access groups to permission configurations, deprecating UI management of those groups.

Adds ability to convert one or more access groups into permission configurations via the Tenable One API

1 detail in Everything

└──▷ BREAKING ON UPGRADE

!When all access groups are converted, the Access Groups page and tile disappear from the interface

Tenable One Identity Exposure 3.24 (2022-06-29) Jun 29, 2022 · release notes

Tenable One Identity Exposure 3.24 adds attack path pinning, activity log filters, and removes DnsAdmins privilege status.

Adds pin path interaction to Attack Path view to highlight specific nodes.

1 detail in Everything

Tenable One Identity Exposure 3.22 (2022-06-01) Jun 1, 2022 · release notes

Tenable One Identity Exposure 3.22 adds OWASP-secured risk interface, full activity breadcrumbs, and updated admin group exposure indicators.

Adds a secured web interface for security risks according to OWASP
Activity logs provide full breadcrumbs for visited pages
Updates the reported deviances for the Native administrative group members Indicator of Exposure

3 details in Everything

Tenable One Vulnerability Management Platform Release Notes - June 2022 Jun 2022 · release notes

New remediation projects/goals, unified scan config, cloud/host grouping, view-only roles, and CSV/JSON export.

Create Remediation Projects and Goals to prioritize, distribute, and track vulnerability tasks.
Export Remediation Projects and Goals data in CSV and JSON format.
Group cloud findings by policy ID or resource type.
Group host vulnerability findings by asset name or plugin ID.
Unified Scan Configuration (Beta) available via the Scans menu for both Tenable One Vulnerability Management and Web App Scanning.

+2 more show less

Create a custom role with view-only privileges for Explore assets and findings.
Rename linked scanners and agents from the user interface.

7 details in Everything

Tenable One OT Exposure 3.13.36 Release Notes (2022-05-22) May 22, 2022 · release notes

Tenable One OT Exposure 3.13.36 adds Triton attack signatures, DIGEST banner grabbing, and Core proxy usage.

Supports banner grabbing for assets using the DIGEST authentication method

1 detail in Everything

└──▷ BREAKING ON UPGRADE

!Tenable One OT Exposure only supports Tenable Core and no longer supports Atomic OS starting with version 3.13.

Tenable One OT Exposure 3.13 Enterprise Manager Release Notes (2022-05-19) May 19, 2022 · release notes

Tenable One OT Exposure 3.13 adds Enterprise Management dashboards, a setup wizard, and integrations with Tenable One VM and Security Center.

New dashboard for aggregated insights into assets, risks, and vulnerabilities across all connected sites.
GUI-based Enterprise Management Setup Wizard for configuration.
New integration support connecting multiple ICPs to Tenable One Vulnerability Management and Tenable Security Center.

3 details in Everything

└──▷ BREAKING ON UPGRADE

!Starting with v.3.13, Tenable Core is required; Atomic OS is no longer supported.

Tenable One OT Exposure 3.13.35 Release Notes (2022-05-19) May 19, 2022 · release notes

Tenable One OT Exposure 3.13.35 adds Suricata signatures for Triton, HTTP proxy support, and DIGEST banner grabbing.

Adds new Suricata signatures to detect exploitation attempts from the Triton attack
Grabs banners that use the DIGEST authentication method

2 details in Everything

Tenable One Identity Exposure 3.21 (2022-05-18) May 18, 2022 · release notes

Adds IOA for ServerLevelPluginDll registry editing, ransomware exposure indicators, side drawer for sibling nodes, and platform activity logs

Adds DNS Admins Indicator of Attack (IOA) that detects successful editing of the ServerLevelPluginDll registry key.
Adds Ransomware Hardening Indicator of Exposure covering common ransomware infection vectors.
Adds an Activity Logs feature for precise traceability of all platform actions.
Adds a side navigation drawer for nodes with excessive siblings.

4 details in Everything

Tenable One Vulnerability Management Platform Release Notes - May 2022 May 2022 · release notes

Tenable One adds scheduled exports, advanced filtering, RBAC for tags, and Networks/Tags in findings exports

Adds the ability to schedule recurring export jobs from the UI with options to view, enable, disable, or delete them
Adds Network and Tag fields to Findings Exports so exported data includes this context

2 details in Everything

Tenable One Identity Exposure 3.19 On-Premises (2022-04-20) Apr 20, 2022 · release notes

Tenable One Identity Exposure 3.19 adds IoA indicators, Attack Path views, LDAP SASL bindings, and API object retrieval.

Adds workload quota configuration to adjust the limit on the number of Indicators of Attack running simultaneously
Adds Indicator of Attack (IoA) detections: DPAPI Domain Backup Key Extraction, Massive Computers Reconnaissance, Enumeration of Local Administrators, NTDS Extraction, SAM Name Impersonation, and Kerberoasting
Adds API Endpoint for retrieval of Active Directory objects from the database
Enables LDAP SASL bindings enable/disable via Administrator Guide settings for authentication configuration
Adds Workload quota config key to control concurrent Indicators of Attack execution limit

+3 more show less

Adds Attack Path UI sections: Blast Radius, Attack Path, and Asset Exposure visualizations
Adds support for Windows Server 2022 on-premise installations
Enables Honey Accounts detection via Kerberoasting Indicator of Attack configuration

8 details in Everything

└──▷ BREAKING ON UPGRADE

!Retirement of InfluxDB & Equuleus causes loss of historical data in dashboards during upgrade; line chart widgets will only have one data point and recover progressively.

Tenable One Identity Exposure 3.19 (2022-04-20) Apr 20, 2022 · release notes

Tenable One Identity Exposure 3.19 adds domain connectivity testing and dynamic IoE activation/deactivation

domain connectivity tests allow verifying LDAP and SYSVOL connectivity before adding or modifying a domain.
Dynamic activation and deactivation of Indicators of Exposure (IoEs).

2 details in Everything

Tenable One Identity Exposure 3.18 (2022-04-06) Apr 6, 2022 · release notes

Tenable One Identity Exposure 3.18 adds samAccountName support for allow lists and auto-renewal for SYSVOL connections.

samAccountName format is now accepted in the allow lists for Credentials Roaming users and groups
SYSVOL connection auto-renews upon breakage to allow the listener to fetch new events

2 details in Everything

Tenable One Identity Exposure 3.11.7 (2022-04-06) Apr 6, 2022 · release notes

Adds samAccountName support for allow lists and fixes SYSVOL connection renewal logic in Tenable.ad 3.11.7

allow lists for Credentials Roaming users and groups now accept the samAccountName format instead of requiring legacy formats

1 detail in Everything

Tenable One Vulnerability Management Platform Release Notes - April 2022 Apr 2022 · release notes

New export capabilities for permissions, roles, groups, and freeze windows; Scan Window setting for Nessus scans.

Adds ability to export access control permission configurations in CSV and JSON format
Adds new Scan Window setting in Vulnerability Management Nessus scan configuration to halt scans after a time limit
Adds Scanner Type drop-down for Tenable One Web App Scanning to choose between cloud and internal/local scanners
Adds ability to export user roles in CSV and JSON format
Adds ability to export user group data in CSV and JSON format

+2 more show less

Adds ability to export freeze window data in CSV and JSON format
Adds domain selection for MSSP impersonation when logging into customer accounts

7 details in Everything

Tenable One Identity Exposure 3.17 (2022-03-23) Mar 23, 2022 · release notes

Tenable One Identity Exposure 3.17 adds DPAPI Domain Backup Key Extraction IoA and maintenance page

Adds the DPAPI Domain Backup Key Extraction Indicator of Attack to detect LSA RPC calls used by attack tools to access backup keys.
Displays a dedicated maintenance page during upgrades for general access users.

2 details in Everything

└──▷ BREAKING ON UPGRADE

!Retires the dedicated InfluxDB database for dashboard data; the platform now uses SQLServer directly.

Tenable One Identity Exposure 3.16 (2022-03-11) Mar 11, 2022 · release notes

Tenable One Identity Exposure 3.16 adds NTDS Extraction and SAM Name Impersonation detections.

Adds detection for NTDS Extraction (NTDS.dit database exfiltration)

1 detail in Everything

Tenable One Vulnerability Management Platform Release Notes - March 2022 Mar 2022 · release notes

New Collect Inventory scan template for lightweight scanning; self-service SAML and MFA settings for admins.

Adds Collect Inventory agent scan template leveraging Frictionless Assessment for lightweight OS-level checks with a footprint under 200MB.
Enables administrators to configure self-service SAML single sign-on (SSO) without opening a Support ticket.
Adds admin-configurable multi-factor authentication requirements and API key generation permissions via security settings.
Adds Scanner dropdown on Nessus Scanner > Basic Settings page to select between cloud or internal/local scanners.

4 details in Everything

Tenable One OT Exposure 3.13.21 Release Notes (2022-02-28) Feb 28, 2022 · release notes

Tenable One OT Exposure 3.13.21 adds CLI diagnostics download, asset CSV upload, HTTPs cert upload via UI, and NUCLEUS:13 detection

Adds CLI command to download diagnostics files when the user interface is not accessible
Adds ability to upload asset data via the user interface using a CSV file
Adds ability to upload an HTTPS certificate via the user interface instead of only generating a self-signed one
Adds detection of NUCLEUS:13 exploitation attempts using Suricata signatures
Adds standard passive support for Bachmann M1 controllers

+2 more show less

Adds new dashboard widgets: Most common vulnerabilities, Most common plugin families, Vulnerabilities by severity, Most severe vulnerabilities, and Most common policies
Adds Japanese and Chinese language options in the user interface

7 details in Everything

└──▷ BREAKING ON UPGRADE

!Starting with version 3.13, Tenable One OT Exposure only supports Tenable Core and no longer supports Atomic OS
!The Risk tab is replaced by a single new vulnerabilities tab; CVEs and old vulnerabilities sub-tabs are removed
!The SNMP agent on Tenable One OT Exposure is no longer available; users must use the SNMP Agent on Tenable Core

Tenable One Identity Exposure 3.15 (2022-02-09) Feb 9, 2022 · release notes

Tenable One Identity Exposure 3.15 adds Attack Path and Blast Radius capabilities for AD visualization.

Adds graphical representations to explore Active Directory relationships via the Attack Path feature.
Introduces Blast Radius evaluation of lateral movements in Active Directory from a potentially compromised asset.
Adds Asset Exposure measurement using asset exposure visualization to tackle all escalation paths.

3 details in Everything

Tenable One Vulnerability Management Platform Release Notes - February 2022 Feb 2022 · release notes

New Analysis pages (Explore, Findings, Assets, Reports), custom cert upload API, report scheduling, universal filtering, tag-based target groups, and centralized RBAC with cu

Advanced Settings in Vulnerability Management Scans now supports uploading custom certificates to scan policies via the Advanced Network Scan template.
Adds report scheduling capability to configure reports to run on a customizable schedule.
Adds new pages in the Analysis section: Explore, Findings, Assets, and Reports.
Adds Universal Filter Component enabling multi-dimensional filtering with and/or stipulations, wild cards, and exists/does not exists values.
Makes Tags the primary way to organize assets, allowing them to be used for discovery scans without configuring separate target groups.

+2 more show less

Adds centralized access control in Role-based access control (RBAC) enhancements, allowing administrators to create custom user roles from one central location.
Enables exporting nearly all data sets on the platform, including asset, vulnerability, user, scanner, and agent management data, via a unified export experience.

7 details in Everything

Tenable One Identity Exposure 3.14 (2022-01-26) Jan 26, 2022 · release notes

Tenable One Identity Exposure 3.14 adds workload quota adjustment and two new Indicators of Attack.

Adds ability to adjust the Indicators of Attack workload quota limiting simultaneous executions
Adds Massive Computers Reconnaissance Indicator of Attack for detecting AD reconnaissance
Adds Enumeration of Local Administrators Indicator of Attack for detecting AD data enumeration

3 details in Everything

Tenable Security Center 5.20.1 Release Notes (2022-01-24) Jan 24, 2022 · release notes

Tenable Security Center 5.20.1 adds a Host View table for asset details, findings, and software inventory.

Tenable One Identity Exposure 3.13 (2022-01-12) Jan 12, 2022 · release notes

Tenable One Identity Exposure 3.13 adds Blast Radius/Attack Path visualizations and new IoA indicators.

Adds Blast Radius, Attack Path, and Asset Exposure graphical representations for exploring Active Directory lateral movement and privilege escalation
Adds a UI control to adjust the workload quota limiting simultaneously running Indicators of Attack
Adds a new API endpoint to extract Active Directory objects from the database
Adds Massive Computers Reconnaissance Indicator of Attack to detect high-volume authentication reconnaissance
Adds Enumeration of Local Administrators Indicator of Attack to detect AD data enumeration

5 details in Everything

Tenable One Identity Exposure 3.12 (2022-01-12) Jan 12, 2022 · release notes

Tenable One Identity Exposure 3.12 adds Kerberoasting detection with Honey Accounts and LDAP SASL toggle

sasl configuration option to enable/disable SASL bindings in the LDAP configuration
New Kerberoasting Indicator of Attack to detect attacks targeting Active Directory service account credentials
honey_accounts configuration option to allow the Kerberoasting Indicator of Attack to detect login or service requests

3 details in Everything

Tenable Security Center 5.20.0 Release Notes (2022-01-05) Jan 5, 2022 · release notes

Tenable Security Center 5.20.0 adds Asset Host View, automatic ACR calculation, Nessus scanner management, config backup/restore, and advanced agent scan policy support.

Asset Criticality Rating (ACR) now supports automatic calculation to be used as part of a Risk Based Approach to Vulnerability Management
Backup and restore Tenable Security Center Configuration Data capability added to allow backing up configuration data
Advanced Agent Scan Policy support added to add scan policies directly in Tenable Security Center UI
Tenable Security Center File Integrity Check added to check integrity of critical files
Enhanced Diagnostics with additional output items

5 details in Everything

└──▷ BREAKING ON UPGRADE

!Support for Shibboleth 1.3 is removed (only Shibboleth 2.0 continues to be supported)
!Scan policy templates for Badlock detection, Bash Shellshock detection, DROWN detection, and Shadow Brokers Scan are deprecated and cannot be used to create new scan policies

Tenable One Vulnerability Management Platform Release Notes - January 2022 Jan 2022 · release notes

New frictionless Azure VM scanning, agent scan triggers, new dashboards, and brute-force credential setting for web scans.

Adds scan triggers to Agent scans, allowing agents to initiate scans based on a specified time interval or file name
Introduces Frictionless Assessment for Azure, enabling VM vulnerability assessment without pre-installed software
Adds three new dashboards: 2021 Threat Landscape Retrospective, Asset Inventory and Detection (SEE), and Defending Against Ransomware (ACT)
Adds Credentials Bruteforcing setting to Web Application scans to control whether plugins perform bruteforcing
Enables creation of dashboard groups for bulk sharing instead of individual dashboards

+1 more show less

Adds eval account creation capability in the MSSP Portal for 30-day customer trial access

6 details in Everything

Tenable One OT Exposure 3.12.24 (3.12 SP2 / Log4Shell) Release Notes (2021-12-21) Dec 21, 2021 · release notes

Tenable One OT Exposure 3.12.24 adds manual Log4Shell scan and Suricata detection for CVE-2021-44228

Adds new Suricata signatures to detect exploration attempts on the Log4Shell vulnerability

1 detail in Everything

Tenable One Identity Exposure 3.10 (2021-12-01) Dec 1, 2021 · release notes

Adds Windows PKI dangerous permissions and misconfigured parameters indicator to Identity Exposure

Tenable One Vulnerability Management Platform Release Notes - December 2021 Dec 2021 · release notes

New log4shell dashboard, scan templates, and Azure Frictionless Assessment for Tenable One

Adds log4shell Critical Vulnerability dashboard template for visualizing recent log4shell findings.
Introduces three new scan templates: Log4Shell, Log4Shell Remote Checks, and Log4Shell Vulnerability Ecosystem to detect the log4shell vulnerability.
Enables Microsoft Azure Frictionless Assessment feature providing real-time visibility and inventory of assets in Microsoft Azure accounts.

3 details in Everything

Tenable One Identity Exposure 3.11 (2021-12-01) Dec 1, 2021 · release notes

Tenable One Identity Exposure v3.11 introduces Windows PKI detection coverage and improves the resilience of the C-PASSWORD-POLICY indicator.

Adds a new Indicator of Exposure for dangerous permissions and misconfigured parameters in Windows PKI.

1 detail in Everything

Tenable One Identity Exposure 3.11 — On-premise & SaaS (2021-12-01) Dec 1, 2021 · release notes

Tenable One Identity Exposure 3.11 adds PKI exposure indicators, TLS/MSI on-prem, lockout policy, and native SMB mapping.

Adds a new indicator of exposure listing dangerous permissions and misconfigured parameters related to the Windows Public Key Infrastructure (PKI)
Enables secure communications between components via TLS using Tenable One Identity Exposure's self-signed auto-generated certificate or a custom certificate for dedicated on-premises deployments
Provides a dedicated MSI for the security probe installation in dedicated on-premises environments
Introduces a lockout policy to mitigate brute force attacks against authentication mechanisms by locking out user accounts after too many failed login attempts
Adds a product licensing feature to allow updating your Tenable.ad license

+4 more show less

Allows disabling certain indicators of exposure without restarting the security engine node
Supports the localization process
Adds single domain recrawling capability to force the refreshing of data for a domain
Uses native Server Message Block (SMB) mapping

9 details in Everything

Tenable One OT Exposure 3.12.16 Release Notes (2021-11-18) Nov 18, 2021 · release notes

Tenable One OT Exposure 3.12.16 adds S7-300/400 backplane scan support, new dashboard widgets, and Palo Alto v10 firewall integration.

Adds brand new user-configurable dashboard with risk, asset inventory, and events/policies widgets
Enhances S7-300/400 Backplane Scan to identify all backplane modules in addition to CP and CPU detection
Expands Palo Alto Networks Firewall DAGs Based integration to support NGW v9.1 and v10
Adds FirstSeen column to the Inventory tables UI
Enables direct license reinitialization without deleting the existing license code

5 details in Everything

Tenable One Vulnerability Management Platform Release Notes - November 2021 Nov 2021 · release notes

New Azure Sentinel integration, OWASP Top 10 2021 support, and API auth for web scans.

Adds Microsoft Azure Sentinel integration for Tenable One Vulnerability Management
Adds OWASP Top 10 2021 profile support in Tenable One Web App Scanning
Adds support for OWASP ASVS, NIST, HIPAA, PCI DSS, ISO, CAPEC, and DISA STIG data sources in web scan plugin details
Enables API Key and Bearer Token credentials in Tenable One Web App Scanning scans
Introduces data list view with column selection, resizing, reordering, and improved pagination on the Cloud Connectors page

5 details in Everything

Tenable One Identity Exposure 3.7 (2021-10-07) Oct 7, 2021 · release notes

Tenable One Identity Exposure 3.7 adds single-domain recrawling, privileged untrusted auth detection, and Japanese language support.

Adds single domain recrawling to force refreshing of data for a specific domain
Adds new Indicator of Exposure to detect when privileged users authenticate on non-trusted systems
Adds Japanese language support to the user interface

3 details in Everything

Tenable One Vulnerability Management Platform Release Notes - October 2021 Oct 2021 · release notes

Tenable One achieved FedRAMP authorization and improved web scanning scalability with multi-target support.

Tenable One Vulnerability Management achieved authorization from the Federal Risk and Authorization Management Program (FedRAMP).

1 detail in Everything

Tenable One Identity Exposure 3.1.8 (2021-09-27) Sep 27, 2021 · release notes

Tenable One Identity Exposure 3.1.8 adds password spraying detection and fixes IoA parsing.

Adds new detection capability for password spraying attacks against identities.
Improves Indicator of Attack (IoA) file parsing to handle various formats correctly.
Enhances Sysvol crawling robustness to complete successfully with special characters in filenames.
Refines Golden Ticket attack detection logic to eliminate false positives during high event volume.

4 details in Everything

Tenable One Identity Exposure 3.6 (2021-09-22) Sep 22, 2021 · release notes

New lockout policy, PETIT-POTAM IoA detection, and license update capability in Tenable One Identity Exposure 3.6

Adds a lockout policy to mitigate brute force attacks by locking out user accounts after too many failed login attempts
Adds new Indicator-of-Attack: PETIT-POTAM to detect attempts by PETIT-POTAM to coerce remote servers to authenticate with another machine on the network due to a Windows vulnerability
Adds a licensing feature to allow you to update your Tenable One Identity Exposure license

3 details in Everything

Tenable One OT Exposure 3.11.23 Release Notes (2021-09-03) Sep 3, 2021 · release notes

Tenable One OT Exposure 3.11.23 adds PwnedPiper detection, Profibus fault detection for Siemens controllers, and refined asset creation heuristics

Adds additional Suricata signatures to detect exploitation attempts on PwnedPiper vulnerabilities.
Enables detection of Profibus faults in Siemens Controllers.
Refines automated asset creation heuristics so assets with IP addresses outside monitored ranges are not automatically created.

3 details in Everything

Tenable One Vulnerability Management Platform Release Notes - September 2021 Sep 2021 · release notes

Adds Nessus Agent support in Custom Networks, IPv6 discovery, CSV dashboard exports, Activity Logs tile, web scan Exclude Binaries setting, and copy-to-folder capability.

Adds Activity Logs tile on the Administrator Settings page to view organization-wide user events
Enables exporting and scheduling dashboards in CSV format
Supports discovery and access of IPv6 assets
Adds Exclude Binaries setting to all web application scan templates
Updates File Extensions to Exclude default value with .exe, .msi, and .zip extensions for web scans

+1 more show less

Allows selecting a destination folder when copying a web application scan configuration

6 details in Everything

Tenable Security Center 5.19.1 Release Notes (2021-09-01) Sep 1, 2021 · release notes

Tenable Security Center 5.19.1 adds MongoDB credential scanning and Oracle Linux 8 support.

Adds the ability to scan a MongoDB database using a username, password, and port number.
Adds support for Oracle Linux 8 (RedHat compatible kernel only) as an alternative to CentOS 8.

2 details in Everything

Tenable One Identity Exposure 3.3 (2021-08-11) Aug 11, 2021 · release notes

Tenable One Identity Exposure 3.3 adds time zone selection for PDF/PPTX/CSV reports and a new event details pane.

Adds the ability to define time zones for PDF, PPTX, and CSV report exports in Tenable One Identity Exposure.

1 detail in Everything

Tenable One Vulnerability Management Platform Release Notes - August 2021 Aug 2021 · release notes

Bulk Nessus Agent settings, agent export selection, linked scanner asset creation, dashboard search expansion, Splunk fedcloud support, and notification panel

Agents Settings page allows bulk editing of log levels, performance levels, update plans, and hostname updates for multiple Nessus Agents
Agents Settings export now supports selective agent export instead of exporting all records by default
Linked Nessus Agent creation generates an asset record with OS, network info, and Tenable UUID prior to the first scan
Dashboard and Widget library search now matches text in both title and description fields
Splunk integration adds support for fedcloud.tenable.com endpoint with improved CIM parsing

5 details in Everything

Tenable One Identity Exposure 3.1 - On-prem and SaaS (2021-07-28) Jul 28, 2021 · release notes

Tenable One Identity Exposure 3.1 adds IoA detection views, TrailFlow query history and bookmarks.

Adds Indicators of Attacks detection engine to identify live AD security incidents
Adds Setup View UI for quick attack detection configuration in selected domains
Adds Consolidated View UI to list security incidents across monitored infrastructures over time
Adds Investigation View UI to display the incident timeline of a specific resource
Adds new checker: C-GPO-EXEC-SANITY

+2 more show less

Adds query history in the TrailFlow View
Adds query bookmarks in the TrailFlow View

7 details in Everything

Tenable Security Center Q2 2021 Feed Update Release Notes (2021-07-22) Jul 22, 2021 · release notes

Tenable Security Center adds Qatar 2022 Cybersecurity Framework dashboards and reports, Exchange ProxyLogon detection assets, and CIS benchmarks.

Adds Qatar 2022 Cybersecurity Framework executive summary, data protection, network security, endpoint security, application security, change and patch management, and operations technology security monitoring dashboards.
Adds Microsoft Exchange Server ProxyLogon/Hafnium Detection Report and corresponding dashboard for specific vulnerability tracking.
Adds CIS Linux and Unix Benchmark Reports and CIS Microsoft Workstations Benchmark Reports to the report template library.
Adds CIS Control 11: Secure Network Devices dashboard to the standard dashboard set.

4 details in Everything

Tenable Security Center 5.19.0 Release Notes (2021-07-22) Jul 22, 2021 · release notes

Tenable Security Center 5.19.0 adds dark mode, WAL support, ZTE plugin audits, and more granular Lumin sync.

Adds the ability to view Tenable Security Center in dark mode via UI settings.
Increases the maximum repository size from 32GB to 64GB and adds a view for repository capacity.
Adds the ability to enable Write-Ahead Logging (WAL) mode to reduce database lock issues.
Adds support for database backup of metadata related to WAL.
Adds the ability to synchronize Tenable Security Center repositories to individual networks in Tenable One Vulnerability Management instead of the default network.

+3 more show less

Adds a widget to the Tenable Security Center Director Insights dashboard to show license usage across multiple instances.
Adds the ability to view system logs for managed Tenable Security Center instances from a centralized Director.
Adds generic SSH compliance checks regardless of underlying platform.

8 details in Everything

Tenable One Vulnerability Management Platform Release Notes - July 2021 Jul 2021 · release notes

Centralized widget management and new severity color palette in Tenable One Vulnerability Management

Adds centralized Widget Library Management to manage all widgets from one place instead of drilling into a dashboard.
Implements a new severity color palette using green for success/pass/complete and yellow/orange/red/maroon for severity levels.

2 details in Everything

Tenable One OT Exposure 3.11.18 Release Notes (2021-06-24) Jun 24, 2021 · release notes

Tenable One OT Exposure 3.11.18 adds network segmentation, IEM limits, SICAM A8000 extraction, GraphQL API, and backup file size visibility

Adds Network Segmentation to automatically assign assets to segments based on IP address and asset type, or allows manual adjustments for network topology.

1 detail in Everything

Tenable One Vulnerability Management Platform Release Notes - June 2021 Jun 2021 · release notes

ServiceNow domain separation support, web app scan processing state, and PCI debug mode.

domain-separated ServiceNow instances are now supported in the Tenable One integration
New Processing scan status added to indicate backend data collection is in progress for web app scans
Debug mode enabled for Tenable One Web App Scanning PCI scan templates
Manual ordering of business context tags is now available on the Lumin dashboard

4 details in Everything

Tenable One Vulnerability Management Platform Release Notes - May 2021 May 2021 · release notes

New Created At column for scan history, CVE summary on Recommended Actions, and enhanced Clone Dispute history.

Adds Created At column to the Tenable One Web App Scanning scan history table to show when the scan launch action was requested by the user
Includes CVE-level summary data on the Tenable Lumin Recommended Actions page
Enables tag switcher on the Tenable Lumin Recommended Actions page for switching between business contexts
Adds import status progress indicator in the Scans tab for scans being imported in the Tenable One PCI ASV workbench

4 details in Everything

Tenable One Web App Scanning Scanner 1.13.0 (2021-04-21) Apr 21, 2021 · release notes

Tenable One Web App Scanning Scanner 1.13.0 adds detection for Selligent Message Studio and new plugins

Tenable One Web App Scanning Scanner 1.12.2 (2021-04-07) Apr 7, 2021 · release notes

Adds detections for phpBB, Security.txt, Facebook WP plugin, Struts RCEs, and SharePoint.

Added detection for phpBB
Added 112723 - Security.txt File Detected
Added 112724 - Facebook Plugin for WordPress plugins
Added 112726 - Apache Struts 2.3.5 - 2.3.31 / 2.5.x < 2.5.10.1 Jakarta Multipart Parser RCE detection
Added 112727 - Apache Struts 2 S2-057 Remote Code Execution detection

+1 more show less

Added 112728 through 112740 - Microsoft SharePoint vulnerabilities detections

6 details in Everything

Tenable One OT Exposure 3.10.30 Release Notes (2021-04-02) Apr 2, 2021 · release notes

Tenable One OT Exposure 3.10.30 adds vendor support, CSV asset editing, new RBAC roles, and FortiGate integration.

Adds hyperlink custom field type for navigation to remote network locations
Enables use of external CSV editor for bulk export, edit, and upload of All-Assets grid data via the asset settings sub-tab
Introduces supervisor, security manager, security analyst, and site manager roles with user group support for Role Based Access Control
Adds FortiGate integration to automatically create enforcement policies (firewall rules) from Tenable One OT Exposure events

4 details in Everything

└──▷ BREAKING ON UPGRADE

!Starting in version 3.10, external users (Active Directory users and any other authenticated external users) won't be able to create API keys.
!Active Directory Admins (External Admins) will not be able to manage local users, change the AD settings or perform factory resets to the device.

Tenable One Vulnerability Management Platform Release Notes - April 2021 Apr 2021 · release notes

Tenable One April 2021 introduces new ProxyLogon widget, Web App Scanning UI migration with scan templates, dashboard export improvements, and Cyber Exposure Score drill-down

Adds a dedicated Tenable One Vulnerability Management widget for the Microsoft Exchange Server ProxyLogon/Hafnium vulnerability to the Vulnerability Management Overview dashboard and widget library.
Enables one-click export and flexible scheduling for dashboards, including specific user, day, week, or month configurations.
Migrates all Tenable One Web App Scanning users to a new UI with Advanced Searches, Dashboard Drilldown Support, a dedicated Scan Templates section, and a Scans Tools button for configuring templates, credentials, scanners, and exclusions.
Allows changing the user-defined template selected during scan creation within Scan Configurations.
Adds clickable Change Factors for any 14-day data point on the Cyber Exposure Score Trend widget to drill down into filtered Asset or Vulnerabilities views.

5 details in Everything

└──▷ BREAKING ON UPGRADE

!Tenable One Web App Scanning Chrome Extension 1.2.2 removes support for the Classic UI and redirects users to the Scans section instead of the Tools sections when reviewing scan configuration.

Tenable Security Center 5.18.0 Release Notes (2021-04-01) Apr 1, 2021 · release notes

Tenable Security Center 5.18.0 adds Nessus scanner management in Director, LDAP user provisioning, and per-repository data expiration.

Adds ability for Tenable Security Center Director administrators to add, edit, and delete Tenable Nessus scanners and scan zones on managed instances.
Adds automatic creation of LDAP-authenticated users in Tenable Security Center by importing attributes from Microsoft Active Directory.
Adds the ability to set data expiration at a repository level instead of globally.
Adds export option for Solution Details fields as a .csv file.

4 details in Everything

Tenable One Web App Scanning Scanner 1.11.0 (2021-03-15) Mar 15, 2021 · release notes

Tenable One Web App Scanning Scanner 1.11.0 adds a new browser interception engine with improved protocol support and performance.

Introduces the New Browser Interception Engine to improve request/response interception logic, reduce scan delays, and add support for modern HTTP technologies.
Updates session validation to use case-insensitive logic.
Optimizes session pattern validation by removing extra timeout overhead during exact string matching fallback.

3 details in Everything

Tenable One Web App Scanning Scanner 1.10.5 (2021-03-02) Mar 2, 2021 · release notes

Scanner now parses the externalDocs property in OpenAPI files.

externalDocs properties in OpenAPI specification files are now processed.

1 detail in Everything

Tenable One Vulnerability Management Platform Release Notes - March 2021 Mar 2021 · release notes

Tenable One March 2021 adds DOM element exclusions in web scanning, Cyber Exposure Alerts widget in Tenable Lumin, and attestation submission reasons for PCI.

Adds DOM Element Exclusions to Web App Scanning templates (Scan, Overview, PCI) to specify elements by CSS attributes or displayed text
Adds Cyber Exposure Alerts Widget in Tenable Lumin to display threats from the Tenable Research Team and their % of total assets impacted
Updates default MAX RESPONSE SIZE (500kb to 5Mb), NETWORK TIMEOUT (5s to 30s), and BROWSER TIMEOUT (30s to 60s) for Tenable One Web App Scanning templates

3 details in Everything

Tenable One OT Exposure 3.9.25 Release Notes (2021-02-18) Feb 18, 2021 · release notes

Tenable One OT Exposure 3.9.25 adds Basic Active Support for Sofrel Lacroix, Illustra, Netgear, Sierra Wireless, and password-protected Bachmann PLCs.

Tenable One Web App Scanning Scanner 1.10.0 (2021-02-04) Feb 4, 2021 · release notes

Tenable One WAS 1.10.0 adds DOM exclusion, iframe auth, HTTP header access, WS UTF-8, request priority.

Engine support for specifying a list of DOM elements to not interact with during scans
Enhanced support for frame and iframes elements during authentication

2 details in Everything

Tenable One Vulnerability Management Platform Release Notes - February 2021 Feb 2021 · release notes

Tenable One February 2021 adds dashboard sharing, tag-based filtering, license page, scan folder support, and export capabilities.

Adds ability to share any dashboard with a user, group, or everyone in the container
Adds filter-by-tags capability to segment dashboards and widgets
Adds new License page showing expiration info and licensed assets distribution per scan source
Adds folder and trash support for organizing scans in Tenable One Web App Scanning
Adds Last Launched column to the Scans page

+2 more show less

Updates Assessment Maturity Details and Remediation Maturity Detail pages with PDF, PNG, or JPG export capability
Adds user-selectable industry setting for Lumin benchmarks

7 details in Everything

Tenable One Web App Scanning Scanner 1.9.6 (2021-01-07) Jan 7, 2021 · release notes

Tenable One Web App Scanning Scanner 1.9.6 adds DNS retry logic to mitigate resolution failures.

Increases DNS resolution retry attempts from the previous default to 5 times on failure.

1 detail in Everything

Tenable One Vulnerability Management Platform Release Notes - January 2021 Jan 2021 · release notes

Tenable One January 2021: Frictionless Assessment GA, Lumin PDF export, PCI attestations and scan deletion improvements.

Frictionless Assessment is generally available for all sites
Add Input Type and Input Name elements to the Vulnerability Identification tab
Truncate Input Name element value when too large
Export Business Context Details page or individual widgets to PDF, PNG, or JPG in Tenable Lumin
Tenable Lumin Business Context Table now supports up to 50 tags

+6 more show less

Add scan date display on PCI attestations and failures pages
Improve PCI scan deletion for scans with no attestation created yet
Attestations default to the name of the associated scan
PCI scan templates include Target format guidance (FQDN vs IP)
Sort Executive Summary Section 3.a Vulnerabilities Noted by IP and CVSS score
Add CVSS vector link on plugin information page

11 details in Everything

Tenable Security Center 5.17.0 Release Notes (2020-12-21) Dec 21, 2020 · release notes

Tenable Security Center 5.17.0 adds Director view, CVSS v2/v3 organizational management, and new credential integrations for Centrify and Thycotic.

Adds Tenable Security Center Director for centralized multi-console vulnerability management
Enables organizational-level management of severity based on CVSS rating version 2 or version 3
Adds support for Sybase database credentials
Adds the ability to use Centrify to lookup passwords for Windows and Linux machines
Adds support for Thycotic Secret Server privilege escalation for SSH credentials

5 details in Everything

└──▷ BREAKING ON UPGRADE

!CentOS 6 and RHEL 6 are end of life and are not supported on Tenable Security Center 5.17 and later.

Tenable One Web App Scanning Scanner 1.9.0 (2020-12-15) Dec 15, 2020 · release notes

Tenable One WAS 1.9.0 adds flexible session verification pattern matching and expanded Selenium IDE command support.

Session Verification Pattern option now accepts simple text for exact matching in addition to regular expressions across all credentials
Added processing capability for OpenAPI / Swagger files containing control characters or non-ASCII characters

2 details in Everything

Tenable One OT Exposure 3.9.14 Release Notes (2020-12-15) Dec 15, 2020 · release notes

Tenable One OT Exposure 3.9.14 adds IoT visibility, new asset types, Saia PCD support, on-demand sync to Security Center/Vuln Mgmt, and expanded conversations log.

Adds new sub-tab for identified IoT devices in the Network Map
Supports detection of Access Control System, HVAC Module, Lighting Control, Smart Hub, Smart TV, Tablet, and Medical Device assets
Supports detection of Barcode Scanner, IndustrialSensor, and Drive field devices
Supports detection of Domain Controller server assets
Supports detection of Repeater network device assets

+5 more show less

Supports detection of IndustrialRouter, IndustrialSwitch, IndustrialGateway, and IndustrialNetwork Device OT assets
Adds Saia PCD - Standard Active Support for detecting model, firmware version, hardware version, CPU state, and project name
Adds Basic active support for Schneider PowerLogic EGX100 Gateway, Digi One SP Serial-Ethernet Bridge, Westermo EDW-1x0 Serial-Ethernet Bridge, Tait Communications TB9x00 DMR Base Station, and Eaton 5PX UPS
Enables on-demand push of data from Tenable One OT Exposure to Tenable Security Center and Tenable One Vulnerability Management via the UI
Increases conversations log capacity to 10,000 records

10 details in Everything

Tenable One Vulnerability Management Platform Release Notes - December 2020 Dec 2020 · release notes

Tenable One adds API scanning beta, Splunk Mission Control plugin, ServiceNow Paris support, and WOFF exclusion.

Version 3.0 of the Tenable apps for ServiceNow with Add ServiceNow Paris Support
Move from custom CI matching/create engine to ServiceNow IR
API Scanning is in Beta using a new API template that parses Swagger or OpenAPI specification files
New Path Parameter element enabled by default for API scan templates to audit dynamic parameters inside endpoint paths
Export functionalities for the Tenable One Web App Scanning landing page to PDF, PNG or JPEG formats

+7 more show less

New HTTP Request Body in vulnerability details presenting contents submitted in the HTTP request
Aborted Scans Export Functionality allowing export of scans marked as aborted in all possible formats
Response Max Size Setting Updates increasing default from 500Kb to 5Mb and available to PCI scan templates
WOFF Fonts Excluded from Scans by adding Web Open Font Format file extensions to the default exclusion list
Tenable Lumin Dashboard UI Refresh and exporting allowing export of entire dashboard or widgets to PDF, PNG, or JPG
Asset Exposure Score Column in Asset Views displaying AES information labeled Exposure in Asset View and under Asset Exposure Score in Asset Details
Mitigations breakdown on Tenable Lumin dashboard and list of detected mitigations with covered assets

12 details in Everything

Tenable One Web App Scanning Scanner 1.8.3 (2020-11-10) Nov 10, 2020 · release notes

Tenable One WAS 1.8.3 adds detection plugins for Swagger and Flash files.

Adds 112615 plugin to detect Swagger files during web app scanning
Adds 112630 plugin to detect Flash files during web app scanning

2 details in Everything

Tenable One Web App Scanning Scanner 1.8.0 (2020-11-02) Nov 2, 2020 · release notes

Tenable One WAS 1.8.0 adds SSTI detection, REST API plugin detection, and login form auth improvements.

Adds Server Side Template Injection Vulnerability Detection plugin (ID: 112614) to report SSI vulnerabilities in targets.
Adds Swagger File Detected (plugin ID 112615) and API Detected (plugin ID 112616) plugins for REST API discovery, enabling assessment via the new Tenable One Web App Scanning API scan template.
Expands usage of Aborted scan status in the new UI for scans stopped due to authentication failures, previously marked as Completed.
Enhances login form authentication logic to identify potential submit elements (anchors, buttons, inputs) instead of relying solely on the JavaScript submit() function, with debug details added to plugin 98034 (Login Form Authentication Failed).
Improves Selenium authentication by testing all possible locators specified in the script to identify interaction elements.

+2 more show less

Adds support for new Asian fonts to ensure proper page rendering and element interaction.
Upgrades the scanner's internal Chrome browser to version 85, updating the default User-Agent header to Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4158.0 Safari/537.36.

7 details in Everything

Tenable One Vulnerability Management Platform Release Notes - November 2020 Nov 2020 · release notes

Tenable One adds IPv6 communication support for agents/scanners and new CES Trending by Business Context in Lumin.

Nessus Agent 8.1.0+ and Nessus Scanner 8.12.0+ now support communicating with Tenable One via IPv6.
New Remediation Maturity view in Tenable Lumin quantifying organizational remediation performance with grades compared to industry peers.
New CES Trending by Business Context features: 6-month sparkline, 14-day trend in the Business Context table, and a CES trendline on the tag details page.

3 details in Everything

Tenable One Web App Scanning Scanner 1.7.0 (2020-10-16) Oct 16, 2020 · release notes

Adds SSRF detection, path param assessment, Swagger UI fingerprinting, and proxy char support

Plugin 112439 detects Server-Side Request Forgery vulnerabilities
Scanner assesses path parameters in RESTful API URLs
New fingerprinter plugin 98059 identifies installed Swagger UI components
Proxy configuration now supports non-alphanumerical characters including '#' in credentials

4 details in Everything

Tenable One OT Exposure 3.8.13 Release Notes (2020-10-08) Oct 8, 2020 · release notes

Tenable One OT Exposure 3.8.13 adds predictive attack analysis UI tab, Wibu CodeMeter detection policy, and syslog TCP caching.

Adds a new Attack Vectors sub-tab on the single asset details page for predictive attack analysis
Adds a predefined Suricata-based policy to detect vulnerabilities in Wibu's CodeMeter license manager
Enables caching of Syslog messages sent over TCP (up to 10,000 messages) during communication failures
Allows configuring integrations with Tenable Security Center and Tenable One Vulnerability Management via the ICP local settings tab
Adds basic passive and standard active support for ABB AC500 assets

+1 more show less

Enables leveraging FTP responses for asset fingerprinting and classification

6 details in Everything

Tenable Security Center 5.16.0 Release Notes (2020-10-06) Oct 6, 2020 · release notes

Tenable Security Center 5.16 adds Linked Users, SAML/Shibboleth provisioning, HashiCorp Vault support, IBM DataPower creds, and agent scan scheduling via One VM.

Adds the ability for an administrator to log in once and switch between linked user accounts without re-entering credentials, with full audit logging for all linked user activity.
Enables automatic creation and modification of users from SAML 2.0 or Shibboleth 1.3-based identity providers via SAML User Provisioning.
Adds support for HashiCorp Vault Active Directory, Key/Values 1, and Key/Values 2 secrets engines for credential authentication.
Adds support for IBM DataPower Gateway credentials for API Gateway integration.
Allows configuration, scheduling, and launch of basic agent scans in Tenable Security Center that are executed through a linked Tenable One Vulnerability Management instance.

5 details in Everything

└──▷ BREAKING ON UPGRADE

!The ability to provide a password when using the Import method for Oracle Database credentials is removed.
!User/password bulk imports can now only be performed via the API.

Tenable One Vulnerability Management Platform Release Notes - October 2020 Oct 2020 · release notes

Tenable One VM adds Resource Center, custom dashboards with export API support, and Web App Scanning notification configuration via API.

Adds the Resource Center UI component to consolidate documentation, notifications, releases, and help content in one location
Enables creation of new custom dashboards from scratch or customization from templates with a selectable default dashboard
Adds summary snapshot widgets with click-to-apply quick filters on Asset and Vulnerability landing pages
Redesigns the Vulnerability Details page to prominently display key information and output details
Allows adding or editing recast rules directly from the vulnerability details page within an asset view

+8 more show less

Adds a Quick Action button to the global menu bar for rapid access to key actions
Introduces Event History feature for AWS and Azure Cloud Connectors to track connector setup, debugging, and health events
Changes Hostname and IP search filtering on the Asset Affected tab of the Vulnerability Details page to use begins with operator by default while keeping contains available in filters
Sets /vulns/export public API endpoint to return 30 days worth of data when no date-based filters are applied
Provides a centralized Dashboard Management experience for creating, editing, duplicating, and deleting dashboards plus searching templates
Enables email notification setup upon completion of Tenable One Web App Scanning scans via scan configuration
Updates the Tenable One Web App Scanning v2 API to return specific error messages for invalid fields during scan configuration validation
Releases Chrome Extension 1.1.0 allowing specification of scan type, scanner, and description for new scans

13 details in Everything

Tenable One Web App Scanning Scanner 1.6.0 (2020-09-14) Sep 14, 2020 · release notes

Tenable One WAS Scanner 1.6 adds exclusion list enforcement and cookie collection plugins.

Scanner uses Tenable One Vulnerability Management user account exclusions to block scans on excluded assets or HTTP requests during a scan
Plugin 98007 (URI Blocked Due to Exclusion Rule) is available when excluded assets are identified
Plugin 98061 (Cookies Collected) provides all cookies identified during the scan

3 details in Everything

Tenable One Vulnerability Management Platform Release Notes - September 2020 Sep 2020 · release notes

Tenable One adds general availability for Scan Routing and new Asset Criticality/Exposure scores to the bulk asset export API

Adds general availability of the Scan Routing feature to minimize manual scanner selection and reduce configuration overhead.
Adds Asset Criticality Score and Asset Exposure Score fields to the public bulk asset export API output.
Adds new filters for deleted and terminated assets in the Asset Workbench UI and public asset export API.

3 details in Everything

Tenable One OT Exposure 3.7.18 Release Notes (2020-08-10) Aug 10, 2020 · release notes

Tenable One OT Exposure 3.7.18 adds Emerson/Siemens support, Nessus integration, VPR display, Purdue levels, and PCAP player

Adds Emerson Ovation - Standard Active Support for vendor asset detection
Adds Siemens S7+ - Premium Support Including Full Backplane Inventory
Adds HART Protocol - Basic Passive Support
Expands asset classification catalog with new types including Controller, PLC, DCS, IED, RTU, and others
Enables Nessus scan integration from Tenable One OT Exposure for non-OT specific assets

+8 more show less

Adds new scan capability for Ripple20 vulnerabilities identification based on Nessus plugins
Introduces User Managed Intrusion Detection Rule Groups allowing creation of user-defined policies and adding/removing rules from existing policies
Adds PCAP Player feature to upload and play network capture files (.pcap, .pcapng, .pcap.gz, .pcapng.gz) for simulation and analysis
Displays VPR scores for each identified CVE in the CVEs tab on single asset pages and the general CVEs table under the Risk tab
Presents CVSSv3 scores alongside CVSSv2 in the CVEs page on the Risk tab and single asset CVEs tab
Presents NVD Base Scores per identified CVE in the CVEs views
Labels every asset with its Purdue Level according to the Purdue Model for Computer Integrated Manufacturing, allowing sort, filter, group, and edit capabilities
Enables extraction of event-based PCAPs from Enterprise Manager single site view

13 details in Everything

Tenable One Vulnerability Management Platform Release Notes - August 2020 Aug 2020 · release notes

New scan creation API endpoint, Lumin asset tagging insights, and improved vulnerability export filtering

v2 POST API endpoint for creating web app scans is now available in Tenable One Web App Scanning.
Vulnerability export results can now be filtered by plugin ID via the API in Tenable One Vulnerability Management.
Web App Scans page now supports multi-select to launch multiple scans simultaneously.
Web App Scans page now includes a Copy scan action for faster template reuse.
Tenable Lumin dashboard now displays Assessment Maturity grade and details for any tagged group of assets.

+2 more show less

Tenable Lumin dashboard now shows Highest Impact Recommended Actions for any tagged group of assets.
Scan status and completion date are now included in JSON scan exports for web app scans.

7 details in Everything

Tenable Security Center 5.15.0 Release Notes (2020-07-16) Jul 16, 2020 · release notes

Tenable Security Center 5.15.0 adds Nessus Agent scan scheduling and migration enhancements

Adds the ability to configure, schedule, and launch basic agent scans in Tenable Security Center that run on a linked Tenable Nessus Manager.
Improves upgrade reliability by adding alerts for file permissions, ownership, available disk space, and PHP memory, plus command line error messages during upgrade.

2 details in Everything

Tenable One OT Exposure 3.6.33 Release Notes (2020-07-14) Jul 14, 2020 · release notes

Tenable One OT Exposure 3.6.33 adds ABB RTU support, VM integration, Ripple20 detection, and new API header.

Adds Premium Support for ABB RTU 540/560 assets
Adds integration capabilities to Tenable One Vulnerability Management requiring an Access Key and Secret Key
Adds an Intrusion Detection rulegroup to detect Ripple20 exploit attempts over the network

3 details in Everything

Tenable One Vulnerability Management Platform Release Notes - July 2020 Jul 2020 · release notes

Tenable One adds HashiCorp secret store support, Unicode display setting, web app template copying, and Lumin widget updates

Adds Hashicorp AD secret store and Hashicorp KV V2 secret store integration for credential management.
Adds Display Unicode characters setting under Settings/Report to improve UTF-16 string handling on Windows targets via SMB, WMI, and SSL protocols.
Enables copy functionality for all user defined templates in Tenable One Web App Scanning.
Limits scan names to 128 characters in Tenable One Web App Scanning.
Adds Asset Distribution by Asset Exposure Score widget to the Business Context Asset Details page, replacing Cyber Exposure Score Distribution and Vulnerability Age widgets.

+1 more show less

Merges Assets, Vulnerabilities, and Solutions views in the Tenable Lumin workspace with Tenable One Vulnerability Management views.

6 details in Everything

└──▷ BREAKING ON UPGRADE

!The links to assets, vulnerabilities, and solutions have been removed from the Tenable Lumin area and are now only within VM area.
!Historical vulnerability and asset data in the Cyber Exposure Score details panel has been removed temporarily.
!The Vulnerability Age > 7 days column has been removed from the Cyber Exposure by Business Context table on the Tenable Lumin dashboard.

Tenable One OT Exposure 3.6.26 Release Notes (2020-06-17) Jun 17, 2020 · release notes

Tenable One OT Exposure 3.6.26 adds DNP3, unsecure login, ABB Data Plane detections; BPF support; risk widget and event exclusions.

Adds detection for DNP3 events including Select, Operate, restart commands and error conditions.
Adds alerts for Non-secure FTP and Telnet login attempts with success/failure status.
Adds detection of unauthorized MMS write events to ABB 800xA controllers via API.
Adds a Risk Widget showing asset risk score breakdowns (events, vulnerabilities, criticality).
Adds ability to exclude events from policies directly from the events grid to reduce false positives.

+2 more show less

Implements Berkeley Packet Filter (BPF) on the ICP for filtering inbound traffic.
Adds bulk edit capability for asset details in the UI using Shift key range selection.

7 details in Everything

Tenable MSSP Portal 1.0 Release Notes (2020-06-11) Jun 11, 2020 · release notes

Tenable MSSP Portal adds logo management interface for partner branding.

Exposes the MSSP Logo Management interface, enabling partners to view, upload, name, and delete logo files and assign logos to customer instances.

1 detail in Everything

Tenable One Vulnerability Management Platform Release Notes - June 2020 Jun 2020 · release notes

Adds CSV asset export in the UI; completes Can Scan permission migration to Access Groups.

Tenable One OT Exposure 3.5.29 Release Notes (2020-05-07) May 7, 2020 · release notes

Adds Siemens S7-1200/1500 support, Niagara AX/4 support, basic active support for Schneider Electric PowerLogic and other OT devices

Standard Active Support for Niagara AX & Niagara 4
Basic Active Support for Multiple OT/IOT Devices - Schneider Electric PowerLogic, Bosch IndraControl, Siemens Scalance, Siemens RS900, Moxa EDS, Moxa NPort, Moxa MGate, Cisco Stratix5700, Cisco Catalyst, Cisco IE-2000, Cisco IE-5000, Lantronix and others

2 details in Everything

Tenable One Vulnerability Management Platform Release Notes - May 2020 May 2020 · release notes

Tenable One May 2020 adds Solutions API for Lumin, ACR, new Web App Scanning UI with V2 API and RBAC.

Adds public API support for Solutions in Tenable One Vulnerability Management for Lumin customers
Adds Asset Criticality Rating (ACR) in the Vulnerability Management pages for Lumin customers
Launches Tenable One Web App Scanning in new UI, available for new users only
Includes Tenable One Web App Scanning reporting templates and widgets in the shared dashboard system
Applies Tenable One Web App Scanning RBAC & Scan permissions to all data views

+3 more show less

Adds 2 new scan templates (SSL/TLS & Config Audit) to the new UI
Adds scan notes that provide context and troubleshooting steps for a scan's progress or performance
Updates Tenable One Web App Scanning API to V2 for use with the new UI only

8 details in Everything

Tenable Security Center 5.14.1 Release Notes (2020-04-20) Apr 20, 2020 · release notes

Tenable Security Center 5.14.1 adds Hashicorp Vault, Arcon PAM, SAML metadata import, and dynamic asset tag sync to Lumin.

Adds support for using Hashicorp Vault PAM SSH, Windows, and database credentials in active scans.
Adds support for using Arcon PAM SSH and Windows credentials in active scans.
Allows admin users to upload identity provider metadata for SAML configuration instead of manual entry.
Adds dynamic asset tags support in the Tenable Security Center to Lumin Connector alongside static tags.
Adds automatic daily sync of asset tag information from Tenable Security Center to Lumin.

5 details in Everything

Tenable One OT Exposure 3.5.13 Release Notes (2020-04-08) Apr 8, 2020 · release notes

Tenable One OT Exposure 3.5.13 adds PCAP extraction, manual asset removal, on-demand discovery, sensor setup wizard

Download event-specific .pcap capture files via row action to investigate traffic or share with non-users.
Manually initiate on-demand Asset Discovery queries via Settings > Queries > Asset Discovery instead of waiting for scheduled runs.
Configure sensor connectivity (sensor IP and platform destination IP) using the new Sensor Set-up Wizard.

3 details in Everything

Tenable One Vulnerability Management Platform Release Notes - April 2020 Apr 2020 · release notes

Tenable One April 2020 adds CSV field selection, Container UI fixes, and Selenium debug mode

Adds the ability to select which fields appear in the .csv export of vulnerability data
Adds debug mode for selenium authentication in Tenable One Web App Scanning

2 details in Everything

Tenable MSSP Portal 1.0 Release Notes (2020-03-24) Mar 24, 2020 · release notes

New Tenable MSSP Portal 1.0 enables single-login multi-client management with SS0 and license views.

Adds Accounts page to view and manage multiple client instances through a single login
Adds Single Sign On capability to log in to any customer Tenable One Vulnerability Management instance via the portal
Adds License Data Display to view allocation and utilization for customer instances
Adds Custom Notes feature to create searchable notes for each customer instance
Adds Search bar to filter by customer container name, site name, and custom notes fields

+1 more show less

Adds User Management capability to create, update, enable, and disable users

6 details in Everything

Tenable One OT Exposure 3.4.25 Release Notes (2020-03-18) Mar 18, 2020 · release notes

Tenable One OT Exposure 3.4.25 adds API-based PCAP simulation capabilities for traffic modeling.

Adds the ability to simulate traffic via API using local PCAP files (pcap, pcap.gz, pcapng, pcapng.gz)
Includes Reports in the main navigation tree within the user interface

2 details in Everything

Tenable One Vulnerability Management Platform Release Notes - March 2020 Mar 2020 · release notes

Tenable One adds GCP and AWS automation support to Container Scanner with whitelist/blacklist controls

Adds GCP support to the Container scanner for scanning images in Google Cloud Platform

1 detail in Everything

Tenable One OT Exposure 3.4.9 Release Notes (2020-02-01) Feb 1, 2020 · release notes

Tenable One OT Exposure 3.4.9 adds OT device/protocol detections, Asset Risk Score, Health Check API, and token auth.

Supports Yokogawa Prosafe, Honeywell C300, PLC5, Serial DH+ Connection, and Cognex In-Sight Cameras
Introduces OT Asset Risk Criticality field with user-configurable values (Low/Medium/High/none)
Introduces OT Asset Risk Score field ranging from 0 to 100
Allows configuring time window and sensitivity for Network Traffic & Conversations Spikes alerts via policy
Allows configuring frequency of USB Configuration Changes alerts separately from other WMI queries

+5 more show less

Maps switch interface details including MAC address, name, status, alias, description, and type
Controls asset drill-down in reports via configuration options (exclude or specific asset types)
Adds GET https://<IP>/v1/healthcheck API endpoint for system health state
Enables token-based authentication using Authorization: Key <API token> header or apikey URL parameter
Sends system log messages over Syslog to SIEM products

10 details in Everything

└──▷ BREAKING ON UPGRADE

!The Alerts DrillDown chapter has been removed from the report
!Showing the diagnostic buffer of Siemens Controllers is no longer supported and removed from the UI

Tenable One Vulnerability Management Platform Release Notes - February 2020 Feb 2020 · release notes

Tenable Lumin Assessment Maturity feature with Scan Frequency/Depth metrics; Splunk V3.1 support added.

Adds Assessment Maturity metric in Tenable Lumin to quantify scanning frequency and depth with industry peer comparisons
Updates Splunk App to version 3.1, adding support for Splunk 8 and Python 3

2 details in Everything

└──▷ BREAKING ON UPGRADE

!Scan results older than 90 days are no longer visible in the UI History tab; they must be exported via API or CSV format from the History tab.

Tenable One Vulnerability Management Platform Release Notes - January 2020 Jan 2020 · release notes

Tenable Lumin dashboard adds historical Asset and Vulnerability percentages to the Cyber Exposure Score Trend widget.

Tenable Security Center 5.13.0 Release Notes (2019-12-30) Dec 30, 2019 · release notes

Adds Lumin sync, API key auth, and SSL passphrase protection for scanners

Lumin Synchronization sends Tenable Security Center data to Tenable Lumin for Cyber Exposure risk analysis and benchmarking against industry peers.
Admin users can authorize individual users to access the product via API Key Authentication instead of standard credentials.
Scanning engines (Nessus, Tenable Network Monitor, Industrial Security) can now use SSL certificates protected by a passphrase.

3 details in Everything

└──▷ BREAKING ON UPGRADE

!FIPS compliance is no longer supported because OpenSSL has been upgraded to 1.1.1.

Tenable One Vulnerability Management Platform Release Notes - December 2019 Dec 2019 · release notes

Adds Centrify and Arcon PAM credential pulling, Azure Security Center integration, SCCC update, and Splunk add-on v3.

Added the ability to pull Windows and Unix credentials from Centrify PAM for scan targets
Added the ability to pull Windows and Unix credentials from Arcon PAM for scan targets
Updated Google Cloud Security Command Center integration
Released version 3 of Tenable Add-On for Splunk

4 details in Everything

Tenable One Vulnerability Management Platform Release Notes - November 2019 Nov 2019 · release notes

Tenable One November 2019 adds custom widget tag filters, Asset Assessed filter, and Hashicorp Vault KV support.

Adds Asset Assessed filter in the assets workbench to identify unscanned assets
Adds dynamic tagging rules for automated asset classification
Adds Hashicorp Vault KV as a credential provider for authenticated scanning
Allows tags to be applied on both Assets and Vulnerabilities grids
Enables creation of Custom Widgets using tag filters

5 details in Everything

Tenable Security Center 5.12.0 Release Notes (2019-10-03) Oct 3, 2019 · release notes

Tenable Security Center 5.12.0 adds privileged account auditing logs, a new Solutions view, license usage dashboard graph, and Nessus log/health retrieval.

Adds Privileged Account Auditing logging for admin user lock/unlock, create/edit/delete, password complexity changes, login attempts limit, login banner, session management, login notification, data expiration fields, and header text
Adds Admin License Component Overview Dashboard graph of license usage over time relative to current license maximum
Adds Nessus Log Retrieval capability to download Nessus logs directly from Tenable Security Center
Adds Nessus Health Status display to assist in troubleshooting scanner health
Adds additional health check fields on the existing Tenable Security Center Diagnostics page

+2 more show less

Introduces new Solutions View to assess Cyber Exposure and prioritize actions
Adds ability to disable PHP serialization export functionality (dashboard/report export)

7 details in Everything

Tenable One Vulnerability Management Platform Release Notes - October 2019 Oct 2019 · release notes

Tenable One Oct 2019 adds Network Monitor Asset Discovery mode, SSO-only API controls, ACR bulk edit, and Lumin CSV export.

Added Tenable Network Monitor Asset Discovery Mode to build asset inventory without consuming VM licenses
Added API and WUG admin controls to disable username/password login when requiring SSO
Added support for bulk editing Asset Criticality Rating (ACR) scores via the API and UI
Added .csv export for recommended solutions in Tenable Lumin via UI

4 details in Everything

Tenable One Vulnerability Management Platform Release Notes - September 2019 Sep 2019 · release notes

Tag-based scanning, Sensor Management in new UI, and Network support for Access Groups added to Tenable One.

Adds Tag-based Scanning which allows customers to use asset tags to define targets for Nessus vulnerability scans

1 detail in Everything

Tenable One Vulnerability Management Platform Release Notes - August 2019 Aug 2019 · release notes

Tenable One Vulnerability Management Platform August 2019 release enhances asset management and dashboard capabilities.

Added installed software as an asset attribute for better organization.

1 detail in Everything

Tenable Security Center 5.11.0 Release Notes (2019-07-29) Jul 29, 2019 · release notes

Tenable Security Center 5.11.0 adds VPR sorting, SELinux enforcement support, Group Preference for Sample Content, Scan ID in reports, and additional feed support.

Adds VPR sorting capability to dashboards, reports, and the Vulnerability Analysis page
Adds Group Preference setting to control whether a group receives default sample content objects
Adds SELinux enforcing mode support for the Linux kernel security module
Adds Scan ID display on the cover page of generated reports
Adds support for F5, Acatel Lucent TiMOS, and NetApp 9 audit files in Feed Refresh

5 details in Everything

Tenable One Vulnerability Management Platform Release Notes - July 2019 Jul 2019 · release notes

Tenable One July 2019 adds Dynamic VPR GA, Networks container support, and new interface widgets.

General Availability of Dynamic VPR provides daily plugin-level VPR scores for vulnerability prioritization without requiring a scan
General Availability of Networks allows asset collection across overlapping IP environments without multiple containers
New Interface supports creating Vulnerabilities or Asset widgets defined by supported filters

3 details in Everything

Tenable One Vulnerability Management Platform Release Notes - June 2019 Jun 2019 · release notes

Tenable One adds custom widgets to the Widget Library in the New Interface

Tenable Security Center 5.10.0 Release Notes (2019-05-06) May 6, 2019 · release notes

Tenable Security Center 5.10 adds VPR detail fields, API key auth, IP randomization, Touch Debugging UI, and scan suspension.

Adds Vulnerability Age, CVSS v3 Impact Score, Exploit Code Maturity, Product Coverage, Threat Intensity, Threat Recency, and Threat Sources fields to the Vulnerability Detail Listview for better VPR Score context
Enables users logged in as Admin to enable Touch Debugging via System /Diagnostics UI, simplifying debug log collection
Switches data transfer authentication from Security Certificates to API Keys, eliminating certificate timeout issues
Adds Suspend and Resume capability for Scheduled Active Scans
Adds IP Randomization setting under Miscellaneous Configuration page to send randomized blocks of IPs to Nessus scanners

+1 more show less

Moves telemetry collection to an Opt-out policy configurable in Miscellaneous Configuration section

6 details in Everything

Tenable One Vulnerability Management Platform Release Notes - May 2019 May 2019 · release notes

Tenable One adds General Availability for Predictive Prioritization and Vulnerability Trending.

Tenable One Vulnerability Management Platform Release Notes - April 2019 Apr 2019 · release notes

New Scan Operator and Scan Manager roles; AWS connector multi-account support; configurable plugin output size; saved filters in Industrial Security

Adds Scan Operator role to limit users to creating/running scans with existing policies only.
Adds Scan Manager role granting scanner, agent, and exclusion management privileges.
Enables multiple AWS accounts on a single AWS connector configuration.
Adds plugin_output_max_size_kb Advanced Setting (default 1MB) to control XML element size in .nessus reports.
Allows creating and saving filters by name in Industrial Security for IP address input fields.

5 details in Everything

└──▷ BREAKING ON UPGRADE

!Audit Trail and KB data are now disabled by default in Nessus Manager agent deployments to improve performance.

Tenable One Vulnerability Management Platform Release Notes - March 2019 Mar 2019 · release notes

New Chrome extension for Web App Scanning, SSL plugin coverage, on-prem Container Security Scanner, Agent CPU priority via nessuscli

Adds a Chrome extension for creating Tenable One Web App Scans directly in the browser.
Adds 600+ SSL configuration assessment plugins to Tenable One Web App Scanning.
Enables on-prem Container Security scanning via the new CS Scanner without uploading images to the cloud platform.
Adds nessuscli options to set relative CPU priority (standard, lowered, elevated) for Nessus Agent 7.3 and its child processes.

4 details in Everything

Tenable Security Center 5.9.0 Release Notes (2019-02-11) Feb 11, 2019 · release notes

Tenable Security Center 5.9.0 adds SAML/Shibboleth SSO, VPR predictive prioritization, and Industrial Security integration

Adds SAML 2.0 and Shibboleth 1.3 authentication support via SimpleSAMLPHP 1.16.3 for one-click login and centralized identity management.
Introduces Vulnerability Priority Rating (VPR) to rank vulnerabilities by exploitation likelihood in the next 28 days, augmenting CVSS scores with threat intelligence.
Enables import of Industrial Security data into Tenable Security Center for unified reporting and dashboarding.
Adds a toggle for Automatic Scan Zone Distribution Restrictions to force scanners to honor organization-level IP restrictions in overlapping zones.
Adds the ability to filter by a combination of assets for agent data.

5 details in Everything

Tenable One Vulnerability Management Platform Release Notes - February 2019 Feb 2019 · release notes

Tenable One Feb 2019 adds JIRA plugin auto-close for deleted assets and Chrome Extension for scan setup with Lieberman PAM support

Updated JIRA Plug-in automatically closes tickets for deleted or terminated assets
Chrome Extension enables easier creation, setup, and modification of existing scans from within the browser
Added support for Lieberman PAM in Tenable One Web App Scanning for instances installed in a sub-directory

3 details in Everything

Tenable One Vulnerability Management Platform Release Notes - January 2019 Jan 2019 · release notes

New Interface adds multi-select bulk actions for Vulnerabilities and Assets, a License Information page with visualizations, and a Widget Library for dashboards.

Adds Multi-Select and Bulk-Action Toolbar to Vulnerabilities and Assets Grids in the New Interface
Adds License Information Page with visualizations and filters for licensed asset count transparency
Adds Widget Library in the New Interface for adding preconfigured vulnerability widgets to dashboards

3 details in Everything

Tenable One Vulnerability Management Platform Release Notes - December 2018 Dec 2018 · release notes

Tenable IO adds Access Groups for asset compartmentalization and scan export improvements.

Adds Access Groups to compartmentalize assets within users or groups based on asset attributes
Improves scan exports to support large amounts of data for vulnerability scan data
Adds the ability to stop or pause an import for Tenable Network Monitor

3 details in Everything

└──▷ BREAKING ON UPGRADE

!API rate limits are introduced; users exceeding the limit per minute receive a message indicating when they can make another attempt.

Tenable Security Center (Formerly SecurityCenter) 5.8.0 Release Notes (2018-11-07) Nov 7, 2018 · release notes

Tenable Security Center 5.8.0 adds parallel DNS resolution, agent data lifecycle controls, and PDF report scan ID.

Accept and recast agent data from supported integrations.
Expire agent data on its own independent schedule separate from the main asset list.
Reassign scanned objects to other users when an admin deletes the original owner.
Set a date threshold to filter which agent scan results are imported.
View the scan ID directly in the component titles of generated PDF reports.

5 details in Everything

Tenable One Vulnerability Management Platform Release Notes - November 2018 Nov 2018 · release notes

Adds Access Groups for asset segmentation and disables fast network discovery by default in scan templates

Adds Access Groups to segment assets into logical groupings based on FQDNs, IPs, AWS, GCP, or Azure properties.
Changes default for Use fast network discovery to off for all new scan templates starting 10/22/2018.

2 details in Everything

SecurityCenter 5.7.1 Release Notes (2018-09-17) Sep 17, 2018 · release notes

SecurityCenter 5.7.1 adds Lieberman credentials System Name, Mobile Iron Admin URL, and offline agent repo sync

Adds System Name field for Lieberman credentials to allow better credential identification
Adds Admin URL configuration option for Mobile Iron MDM mobile repositories
Adds Remote Repo Sync & Offline Repo Support for agent repositories

3 details in Everything

Tenable One Vulnerability Management Platform Release Notes - September 2018 Sep 2018 · release notes

Centralized credentials for policy-based scans and ServiceNow integration

Adds centralized credential management for scans created from user-defined policies, allowing scan-level override of policy credentials
Replaces per-scan Credential Type Settings with policy-level authentication settings under Settings > Basic > Authentication
Releases Tenable One Vulnerability Management for ServiceNow ITSM integration to the ServiceNow App Store

3 details in Everything

Tenable One Vulnerability Management Platform Release Notes - August 2018 Aug 2018 · release notes

Tenable One Aug 2018: Backup/restore, CVSSv2/v3 in plugins, Selenium delays, PHP fingerprinter, Container Security UX redesign

Adds backup and restore capability for Tenable One Vulnerability Management on-premises deployments, including pre-flight installation checks.

1 detail in Everything

SecurityCenter 5.7.0 Release Notes (2018-07-31) Jul 31, 2018 · release notes

SecurityCenter 5.7.0 adds Lieberman and BeyondTrust credential support, CVSS v3, and agent repository types.

Added the None option to the vulnerability analysis Patch Published filter to identify vulnerabilities without a patch.
Added more options to vulnerability analysis time filters (Patch Published, Plugin Modified, Plugin Published, Vulnerability Published, Vulnerability Discovered, Vulnerability Last Observed, and Vulnerability Mitigated).
Redesigned the credentials module.
Added support for Lieberman credentials.
Added support for BeyondTrust credentials.

+2 more show less

SecurityCenter can now recognize unique agents from the same IP address using agent IDs.
New agent repository type for agent scan data.

7 details in Everything

Tenable One Vulnerability Management Platform Release Notes - July 2018 Jul 2018 · release notes

Tenable One adds centralized credential management, new UI preview, and enhanced Splunk integration.

Adds Centralized Credential Management under Settings → Credentials to define and share credentials across scans.
Enables Customer Preview of New Interface accessible via the New Interface button or Application Switcher, exposing Vulnerability Management Overview and Grids.
Adds Tenable Add-On for Splunk to manage vulnerability state directly in Splunk with Adaptive Responses.
Adds Tenable App for Splunk providing a pre-configured overview dashboard for vulnerability information.
Enhances Asset export API with page chunking and unbounded results via the /api/exports/assets-request-export endpoint.

5 details in Everything

Tenable One Vulnerability Management Platform Release Notes - June 2018 Jun 2018 · release notes

Tenable One adds on-prem Web App Scanning, NTLM auth, Selenium support, proxy installation, refined licensing logic, and paginated vulnerability export API

On-prem Tenable One Vulnerability Management now supports the Tenable One Web App Scanning app for scanning web vulnerabilities.
Adds support for various new Selenium commands including asserts that elements are present on page in Web App Scanning.
Proxy Support - Support for installation and updates via proxies is now supported for on-prem deployments.
Vulnerability export API enhanced with page chunking and unbounded results.
Licensing calculation model refined: assets seen with non-discovery plugins (IDs 10180, 10287, etc.) in the last 90 days are now considered licensed; AWS Connector license reclamation day after decommission.

5 details in Everything

Tenable One Vulnerability Management Platform Release Notes - May 2018 May 2018 · release notes

Tenable One adds dynamic asset tagging rules, Lieberman RED Suite credential integration, Selenium web app support, and new CMS configuration backup detections.

Adds Dynamic Asset Tagging: automate tag application/removal via rules based on asset criteria using the UI
Enables querying Lieberman RED Suite for credentials to authenticated scans
Introduces detection plugins for CMS configuration backup files (WordPress ID 98204, Drupal ID 98210, Joomla! ID 98211) and directory listings (WordPress ID 98212)

3 details in Everything

Tenable One Vulnerability Management Platform Release Notes - April 2018 Apr 2018 · release notes

Tenable One adds five new dashboards, URL inclusion scoping for web app scans, asset tagging/deletion, and pre-Sept scan drilling.

Adds five new pre-configured dashboards: Executive Summary, Exploitable Framework, Measuring Vulnerability Management, Mitigation Summary, and Security Management Summary
Adds URL inclusion scoping option to Tenable One Web App Scanning to define additional URLs to crawl during a scan
Enables asset tagging capability for managed assets

3 details in Everything

Tenable One Vulnerability Management Platform Release Notes - March 2018 Mar 2018 · release notes

Tenable One adds PDF dashboard export, AWS auto-scan, CyberArk cert auth, and web app scan progress

Adds Ability to export PDF for Dashboard templates in the Dashboard section.
Adds Ability to schedule an email with PDF attachment on set frequency for dashboards.
Adds Option to schedule email for existing Report templates.
Enables Assets and their vulnerabilities can now be deleted from the asset workbench to remove data while preserving license counts.
Configures The AWS pre-authorized scanner to scan all available assets automatically.

+8 more show less

Adds CyberArk Integration allowing authentication using certificates.
Adds BeyondTrust Integration allowing BeyondTrust PasswordSafe as a credential source for Windows credentials.
Adds BeyondTrust Integration allowing BeyondTrust PasswordSafe as a credential source for Linux (ssh) credentials.
Shows Scan Progress including metadata, statistics and scan results while a scan is running in Tenable One Web App Scanning.
Includes a screenshot of the web application home page via plugin 98138 during web scans.
Notifies users when HTTP server authentication has been detected on the web application during scans (plugin 98024).
Notifies users when HTTP server authentication credential led to successful or failed authentication (plugins 98025, 98026).
Extends CMS support by fingerprinting Wordpress and Drupal, and detects Wordpress admin panel via plugin 98144.

13 details in Everything

Tenable One Vulnerability Management Platform Release Notes - February 2018 Feb 2018 · release notes

Dashboard component filtering and static asset tagging in Tenable One VM.

Adds component-level filters (All Assets, Target Group, Custom) to Dashboard Analytics components
Adds layout customization for dashboard components: reorder, duplicate, delete, and save as default
Adds static asset tagging via category:value pairs configurable in the tag management view or asset workbench

3 details in Everything

Tenable One Vulnerability Management Platform Release Notes - January 2018 Jan 2018 · release notes

Adds AWS Instance Owner ID import, Advanced Search filter persistence/sharing, expanded CSV export fields, and scanner 0.16/0.17 updates.

Added support for automatically importing the AWS Instance Owner ID for display on the Asset Workbench
Ability to save and quickly access an Advanced Search filter query for the Vulnerabilities, Assets, and Scans sections
Ability to share a saved Advanced Search filter to users and/or groups
Added fields to .csv exports: IP Address, FQDN, NetBios, OS, MAC Address, Plugin Family, CVSS Base Score, CVSS Temporal Score, CVSS Temporal Vector, CVSS Vector, CVSS3 Base Score, CVSS3 Temporal Score, CVSS3 Temporal Vector, CVSS3 Vector, System Type, Host Start, Host End
Tenable One Web App Scanning: Scanner (0.16.0, 0.17.0) updates

5 details in Everything

SecurityCenter 5.6.0 Release Notes (2017-11-02) Nov 2, 2017 · release notes

SecurityCenter 5.6.0 adds Pendo analytics opt-in, multi-threaded performance boosts, and plugin family filtering.

Adds ability to enable anonymous Pendo data acquisition in SecurityCenter privacy settings to guide roadmap prioritization.
Introduces multi-threading that provides up to 50% reduction in dynamic asset preparation time for larger data sets.
Adds plugin filtering capability to scan only specific plugin families (e.g., Backdoors, Brute Force) via advanced scanning.

3 details in Everything

SecurityCenter 5.5.2 Release Notes - 10/2/2017 Oct 2, 2017 · release notes

SecurityCenter 5.5.2 adds support for multiple LDAP servers

Enables setting up multiple LDAP Query assets for use in scanning, dashboards, and reports.

1 detail in Everything

SecurityCenter 5.5.1 Release Notes - 7/25/2017 Jul 25, 2017 · release notes

SecurityCenter 5.5.1 adds support for uploading SCAP-OVAL audit files via the UI.

Adds ability to upload SCAP-OVAL audit files with Benchmark Type OVAL Unix or OVAL Windows

1 detail in Everything

└──▷ BREAKING ON UPGRADE

!APIs created using SecurityCenter 4.x have been deprecated due to changes in API architecture.

SecurityCenter 5.5.0 Release Notes - 6/6/2017 Jun 6, 2017 · release notes

SecurityCenter 5.5.0 adds Thycotic Secret Server integration, password control settings, and translated plugin support.

Adds Thycotic Secret Server credential management integration for scanning credentials
Adds customer-controlled password expiration and complexity policies in SecurityCenter
Adds support for selecting plug-in languages (Japanese, Chinese Simplified, Chinese Traditional) in SecurityCenter

3 details in Everything

└──▷ BREAKING ON UPGRADE

!All APIs created using SecurityCenter 4.x have been deprecated.

SecurityCenter 5.4.1 Release Notes - 11/28/2016 Nov 28, 2016 · release notes

SecurityCenter 5.4.1 adds ability to reposition report components and improves Nessus Agent error handling.

Improves error handling for communication between Nessus Agents and SecurityCenter/Nessus Cloud

1 detail in Everything

└──▷ BREAKING ON UPGRADE

!APIs created using SecurityCenter 4.x have been deprecated due to changes in API architecture.

SecurityCenter 5.4 Release Notes - 7/20/2016 Jul 20, 2016 · release notes

SecurityCenter 5.4 adds STIG severity filtering, asset tagging, CyberArk privilege escalation, dashboard-to-report generation, and FIPS UI mode.

STIG Severity filtering on the analysis screen or during report/dashboard generation for issues rated I, II, or III
Create Tags capability to assign a single tag to asset lists, queries, credential management, or scan policies for improved search and scan management
Support for privilege escalation to CyberArk credentials as the authentication record source for scanning
Ability to create a scheduled report directly from the dashboards setting drop-down menu
FIPS-140-2 User Interface Mode allowing configuration of the SecurityCenter UI to only allow connections via FIPS-140-2 cryptographic modules

5 details in Everything

SecurityCenter 5.3 Release Notes - 3/28/2016 Mar 28, 2016 · release notes

SecurityCenter 5.3 adds configurable session limits, logon notifications, and scanner distribution details in scan status.

Configurable user session limits: Administrators can now set a maximum number of concurrent sessions per user for login to the SecurityCenter UI.
User account logon notification: Displays a notification at logon time including the last successful logon time, last failed logon attempt, and total failed logons count.
Scan status displays scanner distribution information: Users can now view detailed scan status including which scanners are utilized and the number of IP addresses distributed to each scanner.

3 details in Everything

SecurityCenter 5.2 Release Notes - 12/16/2015 Dec 16, 2015 · release notes

SecurityCenter 5.2 adds dashboard drag-and-drop, text filters in LCE, and group object sharing.

Adds drag and drop capability to quickly rearrange dashboard components
Adds support for typing text strings as filters when building queries in the Log Correlation Engine (LCE)
Adds ability to share policies, assets, reports, etc. with a Group at creation or editing time

3 details in Everything

└──▷ BREAKING ON UPGRADE

!All APIs created using SecurityCenter 4.x have been deprecated; use SecurityCenter 5 API instead.

SecurityCenter 5.1 Release Notes - 10/22/2015 Oct 22, 2015 · release notes

SecurityCenter 5.1 adds Nessus Agent import support, per-asset blackout windows, unlimited scan credentials, and CVSS/exploit filtering.

Adds automated import of scan data from Nessus agents for centralized vulnerability management
Introduces per-asset or per-IP address blackout windows for scheduling scans
Removes restrictions on the number of SSH and Windows credentials that can be added to a scan
Enables filtering on CVSS vector, cross-reference, and exploit frameworks in vulnerability analysis, dashboards, and reports
Adds enhanced event analysis views: Summary by Source IP, Summary by Destination IP, and Connection Summary

5 details in Everything

SecurityCenter 5.0.1 Release Notes - 7/21/2015 Jul 21, 2015 · release notes

SecurityCenter 5.0.1 adds HTML5 UI, CyberArk integration, unlimited credentials and plugin DB search

Adds HTML5-based Vulnerability Analysis screen allowing remediation scans and report launches from individual scan results.
Adds new Assurance Report Cards including updates to the Five Cyber Critical Controls layout for business objective alignment.
Adds CyberArk Credential Vault integration for centralized credential management during credentialed scans.
Adds Plugin database search with filter support to locate specific plugins in the database.
Enables unlimited SSH and Windows credentials for active scans via configuration.

5 details in Everything

└──▷ BREAKING ON UPGRADE

!API architecture change: all APIs created using SecurityCenter 4.x are deprecated and no longer supported.

SecurityCenter 5.0 Release Notes - 4/30/2015 Apr 30, 2015 · release notes

SecurityCenter 5.0 adds HTML5 UI, Blackout Windows per asset, CVSS vector filtering, up to 5 SSH creds, and a new RESTful API.

Adds the HTML5 UI, replacing the previous interface with a fast and flexible user experience.
Introduces Blackout Windows that can now be specified per asset or per IP instead of system-wide to skip scanning certain devices while continuing data collection on others.
Enables filtering by CVSS Vector, cross-reference, and exploit frameworks for vulnerability analysis, dashboards, and reports; adds summary views by Source IP, Destination IP, and Connection Summary.
Allows scan jobs to use up to 5 SSH username and password combinations per job via improved SSH credential support.
Provides programmatic access via the new RESTful API replacing deprecated SecurityCenter 4.x APIs.

5 details in Everything

└──▷ BREAKING ON UPGRADE

!All APIs created using SecurityCenter 4.x have been deprecated and are no longer supported in version 5.0.
!Upgrades to SecurityCenter 5.0 are only supported for users currently running SecurityCenter 4.8 or higher; previous versions must upgrade to at least 4.8 first.

SecurityCenter 4.8.2 Release Notes - 12/16/2014 Dec 16, 2014 · release notes

SecurityCenter 4.8.2 adds PDF report bookmarks, scan names in report titles, and larger file upload support.

Report PDFs now contain bookmarks for easier navigation through large reports
Generated reports now include the scan name from which they were generated
New installations support a larger default file upload setting of 500MB

3 details in Everything

SecurityCenter 4.8.1 Release Notes - 5/29/2014 May 29, 2014 · release notes

SecurityCenter 4.8.1 adds PCRE filtering, .k5login SSH creds, and Nessus scan tuning.

Adds full PCRE support when filtering vulnerability text in Vulnerability Analysis, Dashboard, Reporting, and Alerts
Adds .k5login as a selectable option in the privilege escalation drop-down for SSH credentials to support new Nessus functionality
Streamlines Nessus Enterprise Cloud scan settings with larger scan chunks, increased out-of-service threshold, and increased status polling interval

3 details in Everything

└──▷ BREAKING ON UPGRADE

!SecurityCenter 4.8.1 only supports Nessus scanners version 5.x or later; earlier versions will not work
!The Passive Vulnerability Scanner must be upgraded to version 4.0 or higher for compatibility
!If leveraging the Log Correlation Engine (LCE) for log processing, LCE must be running a minimum of version 3.6.1 for compatibility purposes

SecurityCenter 4.8 Release Notes - 3/20/2014 Mar 20, 2014 · release notes

SecurityCenter 4.8 introduces HTML5 Analysis screen, combination dynamic asset lists with PCRE support, and a revamped group-based user model.

Adds Analysis screen to the HTML5 application UI for streamlined vulnerability exploration
Enables merging multiple dynamic asset lists into a single dynamically updated parent list in Combination Asset Support
Adds set logic filtering (AND/OR/NOT) against multiple assets via the Analysis screen
Supports Perl Compatible Regular Expressions (PCRE) for defining dynamic asset lists, enabling negative operators previously limited to POSIX

4 details in Everything

└──▷ BREAKING ON UPGRADE

!User hierarchy is replaced by user groups; managers are now defined via Manage Users access to a group rather than OrgHead accounts
!SecurityCenter 4.8 only supports Nessus scanners 5.x or later and Passive Vulnerability Scanner (PVS) version 4.0 or higher

SecurityCenter 4.7.1 Release Notes - 10/16/2013 Oct 16, 2013 · release notes

SecurityCenter 4.7.1 adds exact match for Dynamic Asset is equal to operator and updated remediation summary.

Modified is equal to operator for Dynamic Asset clauses to be exact match instead of contains
Updated Remediation Summary tool in Vulnerability Analysis to provide a more descriptive resolution

2 details in Everything

SecurityCenter 4.7.0 Release Notes - 8/29/2013 Aug 29, 2013 · release notes

SecurityCenter 4.7 introduces mobile vulnerability management, OVAL/XCCDF SCAP support, and new dashboard/report template interfaces.

Scan, import, summarize, filter, report on, and create dashboard components for mobile device vulnerability data from Apple MDM, ActiveSync, and Good MDM.
Download raw OVAL/XCCDF results files after a scan completes.
Upload OVAL/XCCDF audit files as a new type of audit file.
Run scans with OVAL/XCCDF files exactly like current audit files and browse the results.
Add a set of dashboard components from a dashboard collection template or pre-defined single component templates.

+13 more show less

Create custom dashboard components from scratch within the new template interface.
Configure dashboard templates to target specific assets/repositories/IP addresses.
Create custom report components from scratch within the new template interface.
Filter report templates using tags.
Configure report templates to target specific assets/repositories/IP addresses.
Create an asset using Tenable supplied templates.
Create custom assets from scratch within the new template interface.
Filter asset templates using tags.
Export dashboards into a report.
Create a report from an individual scan result using an existing template.
View vulnerabilities remediated, risk reduced, MS Bulletins remediated, CVEs remediated, and number of hosts affected via the Remediation Report.
Manage accepted and re-casted risk rules as a user.
Set an expiration date for Accept Risk rules.

18 details in Everything

SecurityCenter 4.6.2 Release Notes - 2/7/2013 Feb 7, 2013 · release notes

SecurityCenter 4.6.2 adds Publishing Sites (CMRS/HTTP), repository splitting CLI, ASR/ARF/CyberScope report generation, and LCE vulnerability import.

Adds Publishing Sites with CMRS (using WS-Notify to export ARF/ASR) and HTTP Publishing (simple HTTP POST with BASIC Auth) capabilities for moving reports to third-party systems
Introduces a command-line tool to split Repository data exceeding 4GB thresholds into a new Repository (requires Tenable Support access)
Enables default v2 Nessus data download on new installs via a global setting, allowing users to disable v1 options
Adds ARF (Asset Reporting Format) report generation capability with configurable operational attributes
Adds ASR (Assessment Summary Report) generation capability for project-specific reporting needs

+4 more show less

Adds direct CyberScope/LASR report generation from the application, removing the need for the external xTool utility
Adds vulnerability data import from Log Correlation Engine (LCE) via logs (requires LCE v4.2)
Enables compression of SSL communication between SecurityCenter and Nessus scanners to optimize scan result transfers over slow links
Adds support for Palo Alto Compliance checks managed from SecurityCenter

9 details in Everything

└──▷ BREAKING ON UPGRADE

!SecurityCenter now only supports Nessus scanners version 4.2 or later; older scanner versions are no longer compatible.
!If leveraging the Log Correlation Engine (LCE), LCE must be running a minimum of version 3.6.1 for compatibility.

SecurityCenter 4.6.0 Release Notes - 12/4/2012 Dec 4, 2012 · release notes

SecurityCenter 4.6 adds IPv6 scanning, LDAP asset queries, CoSign auth, HTML5 dashboard, and alert-based reporting.

Adds full support for IPv6 scanning, including host discovery, passive detection, and range scanning up to a Class A network equivalent
Adds Asset LDAP queries to pull host information from an LDAP directory (e.g., Active Directory) for scan policies
Adds CoSign authentication support as a new server authentication method for single sign-on
Adds StartTLS support for LDAP connections to encrypt the protocol without using LDAPS
Adds an HTML5 read-only dashboard as part of the front-end redesign with default components

+7 more show less

Adds the ability to generate reports at the end of a specific scan or on an Alert based on any query
Adds report results sharing within SecurityCenter users instead of emailing attachments
Adds plugin date filters with five pre-defined ranges for vulnerability analysis
Adds And/Or/Not filter options and start/end time range settings for raw log queries in Event Analysis
Adds the ability to create Alerts from raw log events gathered by the Log Correlation Engine
Adds support for Cisco IOS compliance check preferences, including auditing Saved, Running, and Startup configurations
Adds support for Juniper and CheckPoint firewall compliance checks

12 details in Everything

SecurityCenter 4.4.0 Release Notes - 4/17/2012 Apr 17, 2012 · release notes

SecurityCenter 4.4.0 adds hostname scanning, Nessus v2 export, IAVA/DNS summary tools, and SSL client cert auth.

Adds support for scanning targets by FQDNs in addition to IPs
Supports up to 256 unique hostnames on a single IP via the new Virtual Host scan capability
Adds Nessus v2 export format with download options, deprecating .NSR
Introduces Info severity level and IAVA Summary analysis tool for vulnerability queries
Enables integration with Tenable Nessus Perimeter Service for cloud-based outside-in scanning

+1 more show less

Adds Static Asset type to support persistent hostname resolution

6 details in Everything

└──▷ BREAKING ON UPGRADE

!Scanner proxy is deprecated; SecurityCenter now uses the Nessus XMLRPC API on port 8834 instead of 1241
!Only Nessus scanners 4.2 or later are supported
!Log Correlation Engine must be version 3.6.1 or later for compatibility

Provider product	Target product	Workflow	Evidence
Qualys Enterprise TruRisk Management (ETM) · Product without a Toolchain page	Tenable.io · Product without a Toolchain page	Import host assets, Import vulnerability findings Data flows into the provider · Availability unknown	Source 1 not confirmed
Tenable One	Amazon EC2 · Product without a Toolchain page	Import asset inventory Data flows into the provider · Availability unknown	Source 1 not confirmed
Tenable One	Amazon Inspector V2 · Product without a Toolchain page	Import assets, Import vulnerability findings Data flows into the provider · Availability unknown	Source 1 not confirmed
Tenable One	GitHub Dependabot · Product without a Toolchain page	Import repositories, Import dependency vulnerability findings Data flows into the provider · Availability unknown	Source 1 not confirmed
Tenable One	Microsoft Defender for Cloud	Import cloud assets, Import security recommendations Data flows into the provider · Availability unknown	Source 1 not confirmed
Tenable One	Microsoft Intune	Import managed-device inventory Data flows into the provider · Availability unknown	Source 1 not confirmed
Tenable One	Qualys Web Application Scanning (WAS) · Product without a Toolchain page	Import web applications, Import web vulnerability findings Data flows into the provider · Availability unknown	Source 1 not confirmed
Tenable One	ServiceNow CMDB · Product without a Toolchain page	Import CMDB assets Data flows into the provider · Availability unknown	Source 1 not confirmed

Tenable

Summary

How Tenable helps

Languages

Features

What Tenable offers you

release 40 total

release 18 total

release 16 total

release 11 total

release 8 total

release 8 total

release 7 total

release

release

release

release

release

release

release

release

release 54 total

release

release

release

release

release

release

release

release 18 total

release 12 total

release 11 total

release

release

release

release

release

release

release

release

release

release

release

release 28 total

release 61 total

release 56 total

release 45 total

release 36 total

release 35 total

release 33 total

release 30 total

docs

release 24 total

release 23 total

release 21 total

release 18 total

example

release 19 total

release 19 total

release 17 total

release 16 total

release 16 total

release 16 total

release 15 total

release 15 total

release 15 total

release 14 total

release 14 total

release 13 total

release 12 total

release 11 total

release 10 total

release 10 total

release 10 total

release 9 total

release 9 total

release 9 total

release 9 total

release 9 total

release 8 total