Tenable OPEN for AI expands security integrations by enabling organizations to connect Tenable’s exposure intelligence with their preferred AI models, agents and tools. The initiative introduces validated, ready-to-use AI workflows to improve security visibility, risk investigation and response across technology environments.

Tenable Holdings, Inc. (NASDAQ: TENB), the exposure management company, announced the expansion of its open technology and partner ecosystem to support integrated security workflows across the technology stack.

The launch partners for Tenable OPEN for AI include BeyondTrust, Cohesity, Command Zero, Corelight, Infoblox, Recorded Future, Securonix, SentinelOne, Setyl, Snyk, Sparkle In and Splunk.

As part of the Tenable Open Partner Exchange Network (OPEN), the program connects security technologies and helps teams use AI to investigate risks, prioritize exposures and accelerate response. It allows organizations to work with their preferred AI tools rather than rely on a single proprietary platform.

“By supporting both standardized MCP connectors and direct APIs, Tenable OPEN for AI provides security teams complete freedom to integrate their AI tools of choice and build custom, agentic workflows without artificial restrictions or forcing reliance on a single proprietary platform,” said Eric Doerr, chief product officer at Tenable.

The program connects the Tenable Hexa AI MCP Server with partner MCP servers through AI tools already used by customers. This allows security teams to interact with datasets from multiple vendors simultaneously, enabling cross-platform visibility and action without requiring custom software development.

Each use case is available in two formats. Security teams can follow documented workflows using their preferred AI tools through the Tenable Hexa AI MCP Server. Alternatively, they can access ready-to-use skills through the CyberAgents Exchange, an AI agent marketplace powered by Tenable that supports vendor-agnostic integrations.

The available use cases address several security operations requirements. SentinelOne’s Cross-Platform Security Triage enables teams to investigate alerts, vulnerable assets and misconfigurations using natural language through a single AI chat interface.

Corelight’s Network Threat and Blast Radius Mapping combines network telemetry with live Tenable asset context. This helps security teams assess active network threats, evaluate potential impact and prioritize investigations and remediation based on the possible blast radius of exposed assets.

Meanwhile, Snyk’s Code-to-Runtime Risk Correlation combines application security findings with Tenable runtime exposure data. The workflow helps teams determine whether code-level vulnerabilities are present in production environments.

BeyondTrust’s Identity-Enriched Exposure Triage integrates privileged account, session and entitlement data with Tenable findings. This enables security teams to rank asset risks using identity context alongside exposure information.

Partner representatives also highlighted how the integrations could support security investigations and response.

Melissa K. Smith, SVP Global Strategic Partnerships & Initiatives at SentinelOne, said combining endpoint analysis with enterprise exposure intelligence allows security teams to coordinate actions using contextual insights. She noted that the integration enables cross-platform triage without complex custom integrations.

Robert Rossetti, Partner Engineer at Splunk, highlighted the importance of understanding whether an asset associated with a security alert is actually vulnerable. Through the integration, analysts can use natural language queries to retrieve Splunk alerts with Tenable vulnerability context, helping them assess risks and respond more quickly.

Matt Landry, Senior Vice President of Product Management at Infoblox, said AI-driven security workflows require reliable network context to generate actionable results. By combining Infoblox network identity data with Tenable exposure intelligence through an open protocol, teams can understand device identities and exposure levels together, supporting asset prioritization and response.

Dov Yoran, co-founder and CEO of Command Zero, highlighted the connection between exposure findings and security investigations. He said priority findings from Tenable can feed directly into Command Zero investigations, providing additional context for analysts. The workflow records each step for review, while approved investigation verdicts are returned to Tenable, reducing the need to switch between platforms.

Through these integrations, Tenable OPEN aims to help organizations connect exposure intelligence with existing AI tools and security platforms, supporting contextual risk assessment and coordinated security workflows.

The available use cases and program details can be accessed through Tenable’s OPEN for AI program.

Related post

View all