Platform upgrades stabilize expansion while top line growth remains moderate
- Q2 2026 revenue rose 8.6% year over year to $268.5 million.
- Tenable One accounted for 50% of new business in the second quarter.
- Dollar-based net expansion accelerated to 106%, the first sequential increase in four years.
- New flexible pricing tiers for Tenable One have driven higher average deal sizes.
- The company recently achieved FedRAMP high authorization for cloud exposure.
AI tailwind, slower base
Tenable is turning a complex cyber problem into a platform upgrade story. AI systems help find software flaws faster, which management argues makes exposure management critical. Customers need to see risks across their entire attack surface and fix the worst ones first.
The bull case centers on Tenable One becoming the control center for this challenge. In Q2 2026, Tenable One reached 50% of new business. The company also rolled out Foundation and Advanced pricing tiers, which successfully pushed average deal sizes higher. If AI-discovered flaws create real budget urgency, Tenable has a clear way to sell a broader platform.
The bear case notes that total revenue growth is still stuck in the single digits at 8.6%. While dollar-based net expansion improved to 106%, it is still far below historical peaks. The company must prove that the platform shift is a durable growth driver, not just a temporary bump from a pricing change.
Finn views the stock with caution given financial health scores. Tenable holds a strong category position and a mostly recurring model. The next proof point is whether Tenable One adoption can push overall revenue growth back into double digits while fending off large competitors like Microsoft.
Subscriptions around cyber risk
Tenable makes money by selling software subscriptions. In recent periods, recurring revenue accounted for roughly 95% of total revenue. Customers usually buy for one year, and some sign longer contracts. Tenable often bills in advance, which aids cash flow generation.
The sales motion starts with vulnerability management, the older core product that finds known weak spots. Tenable then tries to move customers into Tenable One, a broader platform that covers IT systems, cloud, identity, and AI assets. This matters because the broader platform supports larger contract sizes.
The model relies on existing customers spending more over time. The 106% dollar-based net expansion rate in Q2 2026 was a positive signal, marking the first sequential increase in four years. The new flexible pricing tiers for Tenable One appear to be working.
Profitability and balance sheet leverage require attention. While Tenable generates cash, it carries significant accumulated deficits and term loan debt. Capital returns are present, with the company historically running an active share repurchase program.
From scanner to platform
Tenable One
This is the main platform bet. It gives customers one view of cyber exposure across assets and attack paths, and it now boasts FedRAMP high authorization.
Tenable Hexa AI
Hexa AI is an agentic engine meant to help triage issues and run remediation workflows across different security tools.
Vulnerability Management
This is Tenable's foundation. It finds and manages known software and system weaknesses, and it remains the main landing point for many customers.
Cloud Security (CNAPP)
This product covers cloud native application protection, data security posture, and AI security posture.
Operational Technology Security
This protects industrial systems and critical infrastructure. These environments can be slow to buy, but the need is serious.
Identity Security
This helps customers spot identity risks, especially in Active Directory environments. Identity is a common path for attackers.
Revenue streams, not segments
Tenable reports as one operating segment. The mix below uses Q1 2026 revenue categories from a prior filing because exact product-level segment shares are not regularly disclosed.
What could break the thesis
Expansion stalls again
High impact · Medium oddsDollar-based net expansion ticked up to 106% in Q2 2026. If this metric reverses and drops closer to 100%, Tenable would need significantly more new customers just to keep growth steady.
Generative AI code risks
Medium impact · Medium oddsTenable recently warned that its use of generative AI technologies could retrieve or recommend malicious code from third-party sources without appropriate review. Flawed AI outputs could damage customer trust.
Infrastructure liability limits
Medium impact · Medium oddsThe company heavily relies on AWS and Snowflake. Recent filings note that these providers limit their liability for damages, meaning Tenable might not recover costs if an outage harms its customers.
Bigger security platforms crowd the market
Medium impact · High oddsExposure management is crowded. Palo Alto Networks, Wiz, and Microsoft can bundle similar tools into larger security deals. Tenable must prove its depth and neutral platform value are strong enough to win.
Public sector budget drag
Medium impact · Medium oddsTenable has called out possible U.S. government spending pressure. Public sector sales can already be seasonal and approval heavy. Less funding could stretch sales cycles.
In one breath
What does Tenable actually do?
Tenable helps companies find cyber weak spots before attackers use them. Its newer pitch is exposure management, which means ranking the most dangerous risks across IT, cloud, identity, industrial systems, and AI assets.
Why does AI matter for Tenable?
AI can help find more software flaws faster, which could create more work for security teams. Tenable argues that customers will need Tenable One and Hexa AI to prioritize and fix those issues at machine speed.
What is the main metric to watch?
Dollar-based net expansion is a key warning light. It increased to 106% in Q2 2026, meaning existing customers are spending more, which is a positive sign after a long period of decline.
