Tenable (TENB) Q2 2026: Tenable One Hits 50% of New Business, Driving Platform Shift Amid AI Threat Surge
Tenable’s Q2 marked a decisive platform inflection as Tenable One captured half of new business, fueled by AI-driven demand for unified exposure management. Average deal sizes and expansion rates rose as customers prioritized advanced, orchestrated remediation. The company’s platform-centric momentum, underpinned by differentiated agentic AI and deep partnerships with frontier AI labs, points to sustained tailwinds and a more durable competitive edge in the evolving threat landscape.
Summary
- Platform Shift Accelerates: Tenable One’s record adoption signals customers consolidating around unified exposure management.
- AI Tailwinds Materialize: Demand for advanced risk orchestration and remediation is driving larger deals and expansion rates.
- Competitive Moat Deepens: Integrated agentic AI and broad asset coverage reinforce Tenable’s leadership versus legacy and bundled competitors.
Business Overview
Tenable provides cybersecurity solutions focused on exposure management, helping enterprises identify, prioritize, and remediate security risks across their digital attack surface. The company’s core revenue streams are subscription-based software (recurring revenue was 95% of Q2 total), professional services, and platform upsells. Its flagship platform, Tenable One, integrates vulnerability management, cloud security, identity exposure, and AI-driven orchestration, with major segments including foundational asset visibility and advanced agentic security powered by HEXA AI.
Performance Analysis
Tenable delivered 8.6% revenue growth year-over-year, with results surpassing all guided metrics and prompting a full-year guidance raise. The standout metric was Tenable One’s leap to 50% of new business, up from 41% last quarter, reflecting a pronounced shift as customers consolidate spend onto the unified platform. This shift is not just about new logos: average deal sizes and net dollar expansion rate (NDR) both improved, with NDR rising to 106%—its first sequential increase in over four years—driven by both expansion within existing accounts and higher attach of advanced features.
Platform mix also shifted upmarket, as Tenable One Advanced outsold Foundation by a two-to-one margin, a direct result of customers demanding orchestrated remediation, attack path analysis, and expanded asset coverage. Professional services outperformed expectations, riding on the coattails of larger, more complex platform deals. The company’s non-GAAP operating margin expanded to 24.7% of revenue, reflecting both leverage and disciplined reinvestment in growth initiatives. Share repurchases continued, reducing diluted share count to a five-year low and underscoring management’s confidence in long-term free cash flow generation.
- Deal Size Expansion: Larger lands and expansions, especially within the existing base, are driving both top-line growth and improved NDR.
- Advanced SKU Mix Shift: Tenable One Advanced, with higher price points and feature depth, is outpacing Foundation adoption as customers seek more automation and risk measurement.
- Recurring Revenue Stability: 95% recurring revenue provides resilience and visibility, even as professional services attach rises with platform adoption.
Momentum is broad-based, with strong competitive displacements, especially in large enterprise and federal, and a record number of new six- and seven-figure deals. Growth in asset types—cloud, OT (operational technology), and identity—further diversified the pipeline.
Executive Commentary
"Tenable One was a record 50% of new business this quarter, continuing a strong upward trajectory. Notably, we are seeing greater than anticipated adoption of Tenable One Advanced, which reflects growing customer demand given the evolving AI threat landscape."
Steve Vintz, Co-Chief Executive Officer
"Growth in the platform and meaningful operating leverage drove second quarter results above the high end of the range for every metric we guided to for the quarter, and we are once again raising our full-year outlook across the board, reflecting the growing momentum we're seeing in the business."
Matt Brown, Chief Financial Officer
Strategic Positioning
1. Agentic AI as Differentiator
Tenable’s HEXA AI engine and harness architecture are increasingly central to its value proposition. HEXA enables continuous, autonomous remediation and orchestrated security actions, a leap from periodic, manual approaches. The harness, a layer of context and trust between AI models and customer environments, is positioned as the true moat—enabling safe, deterministic automation that competitors’ standalone AI features cannot match.
2. Unified Platform Consolidation
Customers are consolidating fragmented security tools into Tenable One, driven by the need for holistic exposure visibility and actionable insights. The new pricing and packaging, with clear migration paths from standalone VM to Foundation and Advanced, simplifies adoption and accelerates expansion. This consolidation is also a response to budget constraints, as organizations seek to do more with fewer vendors.
3. AI Threat Landscape Tailwinds
Frontier AI labs’ research (e.g., Mythos) has heightened customer urgency, as boards and CISOs react to the accelerated pace and volume of vulnerabilities. Tenable’s deep partnerships with OpenAI and Anthropic provide early insight into threat evolution and privileged model access, reinforcing both product relevance and competitive edge.
4. Asset Type and Use Case Expansion
Growth is not limited to traditional IT assets. The quarter saw strong demand for cloud, OT, and identity exposure solutions, with advanced attack path analysis and risk scoring driving upsell. Tenable’s ability to embed identity risk within attack path analysis is a key differentiator, as customers increasingly require contextualized, cross-domain risk management.
5. Competitive Displacement and International Reach
Tenable posted one of its strongest competitive quarters ever, displacing legacy VM incumbents and winning large enterprise and federal contracts, including FedRAMP High authorization. The international pipeline, particularly in Europe and federal markets, is expanding as customers seek unified platforms with proven accuracy and coverage.
Key Considerations
This quarter’s performance underscores Tenable’s successful pivot to platform-led growth, but also surfaces new dynamics that investors must track as the AI and exposure management landscape evolves.
Key Considerations:
- Deal Complexity and Sales Cycles: Larger, multi-asset platform deals can lengthen procurement cycles even as they drive higher value per customer.
- Tokenization and Monetization: HEXA usage is driving incremental revenue via token overages, a new monetization lever as automation adoption deepens.
- Competitive Encroachment: Large platform vendors, including Microsoft, are embedding VM features, but Tenable’s differentiated coverage and orchestration remain key defenses.
- Operating Leverage vs. Growth Investment: Management is adding more sales and product capacity in 2H26 than in the past two years, balancing margin gains with growth reinvestment.
- Revenue Recognition Lag: Subscription accounting means recent deal momentum will phase into revenue over future quarters, muting immediate top-line acceleration.
Risks
Platform adoption and expansion trends are positive, but revenue remains a lagging indicator due to ratable recognition, which could mask near-term acceleration. Competitive threats from bundled or low-cost VM offerings by hyperscalers and large security vendors persist, especially as AI commoditizes the intelligence layer. Customer budgets are not expanding rapidly, so platform consolidation must continue to win wallet share. Execution risk exists as Tenable scales hiring and invests in international and federal markets, where sales cycles and procurement hurdles can be significant.
Forward Outlook
For Q3 2026, Tenable guided to:
- Revenue of $270 to $273 million (7.6% YoY growth at midpoint)
- Non-GAAP operating income of $66 to $69 million (24.9% margin at midpoint)
- Non-GAAP EPS of $0.49 to $0.52 (20.2% YoY growth at midpoint)
For full-year 2026, management raised guidance:
- Revenue of $1.075 to $1.081 billion (7.9% YoY growth at midpoint)
- Non-GAAP operating income of $258 to $264 million (24.2% margin at midpoint)
- Non-GAAP EPS of $1.95 to $2.00 (24.2% YoY growth at midpoint)
- Unlevered free cash flow of $289 to $295 million (27.1% of revenue at midpoint)
Management cited pipeline strength, competitive win rates, and expansion momentum as drivers of the raised outlook, while reiterating that revenue recognition lags bookings and the majority of improved short-term billings will benefit the second half of the year.
- Platform mix expected to rise toward 40% of total revenue by year-end
- Sales capacity and product investment to ramp in 2H26
Takeaways
Tenable’s Q2 marks a pivotal moment in its transition from point-solution provider to platform leader, with AI-driven urgency translating into real commercial gains.
- Platform Inflection: Tenable One’s 50% share of new business, larger deal sizes, and expansion rates all validate the company’s strategy and set the stage for durable growth.
- AI and Orchestration Moat: HEXA AI, harness architecture, and deep AI lab partnerships differentiate Tenable in a crowded, increasingly commoditized market.
- Watch for Revenue Lag: Investors should monitor how quickly platform momentum translates into reported revenue, and whether competitive encroachment or execution missteps slow the current trajectory.
Conclusion
Tenable’s Q2 2026 results provide clear evidence that its unified exposure management strategy is resonating with customers amid escalating AI-driven threats. The company’s ability to drive larger, more complex deals and expand within its base—while maintaining profitability and investing in growth—positions it well for the next phase of platform-led cybersecurity competition.
Industry Read-Through
Tenable’s results highlight a major inflection in cybersecurity buying behavior: organizations are moving quickly from fragmented, reactive vulnerability management to consolidated, preemptive exposure platforms that orchestrate AI-driven remediation across hybrid environments. Bundled “free” features from hyperscalers and legacy vendors are not slowing this shift, but the competitive bar is rising as customers demand unified visibility, contextual risk scoring, and automation that is both trustworthy and actionable. Other security vendors must prioritize differentiated orchestration, cross-domain asset coverage, and deep AI integration, or risk being displaced as customers consolidate spend. The surge in platform adoption and the growing importance of agentic AI orchestration are likely to shape security market dynamics well into 2027 and beyond.