Tenable Tackles AI Governance, Shadow AI Risks, Data Exposure

Tenable has unveiled Tenable One AI Exposure, an add-on designed to detect, map and govern the use of agentic and generative AI across cloud, SaaS and on‑premises infrastructure, in response to rising AI governance concerns and shadow AI risks. The tool is meant to detect when employees use unsanctioned AI tools or engage in activities that risk data leakage, and it correlates AI platforms and workflows with enterprise data, identity and infrastructure to enforce policy.

While initially deeper in its detection for Microsoft Copilot and OpenAI ChatGPT, Tenable plans broader support for Google Gemini in a forthcoming update, according to Tenable chief product officer Eric Doerr. Since a preview last year, the company has integrated its Apex Security Platform, following Tenable’s acquisition of Apex Technology, to gather telemetry and enforce AI policies, with Tenable AI Aware designed earlier in 2024 to detect vulnerabilities in AI applications and plugins, Doerr notes.

Tenable One AI Exposure also remediates threats via automated orchestration, with routine updates delivered through Tenable Patch Management, and its workflow features can generate tickets in ServiceNow or Jira to address issues, according to Doerr.

As analysts such as Andrew Braunberg of Omdia caution that GenAI/Agentic AI represents a new attack surface, Tenable faces competition from CrowdStrike, Rapid7 and Wiz, each expanding AI‑related discovery and remediation capabilities. according to Tenable blog post, and Jeffrey Schwartz, 30 January 2026