Tenable Announces Expansion of Open Security Ecosystem

Tenable announced the expansion of its open technology and partner ecosystem to accelerate integrated security workflows across the entire tech stack. Tenable OPEN for AI delivers validated, ready-to-use AI workflows, enabling organizations to use Tenable’s deep exposure intelligence with their preferred AI models, agents and tools. Tenable OPEN for AI launch partners include BeyondTrust, Cohesity, Command Zero, Corelight, Infoblox, Recorded Future, Securonix, SentinelOne, Setyl, Snyk, Sparkle In and Splunk.

As part of the Tenable Open Partner Exchange Network (OPEN), the company’s technology partner program, Tenable OPEN for AI connects the security stack and helps security teams use AI to investigate risk, prioritize exposures and take action faster.

“Tenable is the only exposure management provider offering a truly unrestricted, vendor-agnostic ecosystem of validated AI use cases, based on customer demand,” said Eric Doerr, Chief Product Officer, Tenable. “By supporting both standardized MCP connectors and direct APIs, Tenable OPEN for AI provides security teams complete freedom to integrate their AI tools of choice and build custom, agentic workflows without artificial restrictions or forcing reliance on a single proprietary platform.”

By connecting the Tenable Hexa AI MCP Server with partner MCP servers via the AI tools customers already use, customers can interact with datasets across vendors simultaneously, unlocking cross-platform visibility and action, without custom software development. Each use case is available in two forms: as a documented workflow that security teams can replicate with the AI tool of their choice through the Tenable Hexa AI MCP Server, or as a ready-to-use skill on the CyberAgents Exchange, the vendor-agnostic AI agent marketplace powered by Tenable.

Featured OPEN for AI use cases available today include:

Cross-Platform Security Triage (SentinelOne): Engineered for security teams to investigate alerts, vulnerable assets and misconfigurations in natural language, from a single AI chat window.

Network Threat & Blast Radius Mapping (Corelight): Designed to combine Corelight network telemetry with live Tenable asset context to rapidly triage active network threats and prioritize investigations and remediation based on the potential blast radius of exposed assets.

Code-to-Runtime Risk Correlation (Snyk): Joins Snyk developer-first application security findings with Tenable runtime exposure data to quickly confirm whether code-level vulnerabilities are deployed in production.

Identity-Enriched Exposure Triage (BeyondTrust): Combines BeyondTrust privileged account, session, and entitlement data with Tenable findings to risk-rank assets based on complete identity context.