News
- - Knowledge base overview
Support
Ideas
Events
Groups
University

Engage

Find answers, ask questions, and share expertise about Tenable.

Home
Community

Welcome

2 Categories
5 topics

Ask the community

2 Categories
5 topics

Learn & Share

2 Categories
5 topics

Events

Join Tenable at an upcoming event! Check out upcoming events and register today.

Groups

Join Tenable’s community groups! Connect with peers, share insights

Ideas

Share your ideas with Tenable! See what’s trending and add your voice today.

Discussions and Articles

Recently active
Help others
Categories

RaphaelNew Participant

Tips & Tricks

Ideas Monthly Review – July 2025

Here’s the latest update on ideas submitted by our community.Each month, we highlight which ideas have been implemented and which are still under consideration.✅ Implemented This Month Please assign the same color to the same property in all reports – A consistent color scheme is now applied across all reports for better readability and faster analysis. Thank you to Raphael for suggesting this improvement! 💬 Under Discussion Offline Vulnerability Sync for Air-Gapped Networks – Currently under review with our product team. If you have experience managing vulnerabilities in isolated environments, please share your input. (Jenny) 🆕 New Ideas This Month Automated Privilege Creep Alerts – Alerts when user privileges increase without approval. (Josephine) Automated False Positive Review Tool – Quickly flag and review suspected false positives with automatic plugin database validation. (Eliza) ❌ Not Implemented This Month No ideas were declined this month. All submissions are either new

10

2 months ago

Customer Communities AdminNew Participant

Product Documentation

Secrets in the Open: Cloud Data Exposures That Put Your Business at RiskBlog

Despite the billions of dollars organizations are investing in cybersecurity, one of the most preventable threats persists: sensitive data and credentials exposed in publicly accessible cloud services. According to the Tenable Cloud Security Risk Report 2025, 9% of public cloud storage resources contain sensitive data — including personally identifiable information (PII), intellectual property (IP), Payment Card Industry (PCI) details, and protected health information (PHI).Even more concerning, the report shows that over half of organizations using Amazon Web Services (AWS) Elastic Container Service (ECS) task definitions and Google Cloud Platform (GCP) Cloud Run have, knowingly or not, at least one secret embedded in these services.These exposures are concerning, as they are the kind of exploitable oversights attackers are already scanning for — and weaponizing. Why this matters to security leadersExposed secrets — like API keys and encryption tokens — can open the door to attackers,

20

2 months ago

Customer Communities AdminNew Participant

General Q&A

Apache Log4j Flaw: A Fukushima Moment for the Cybersecurity Industry

Organizations around the world will be dealing with the long-tail consequences of this vulnerability, known as Log4Shell, for years to come. Update December 17: Apache has updated the severity of CVE-2021-45046, a second Log4j vulnerability, from low to critical (9.0 CVSSv3) citing possible RCE under certain configurations. For more information, please refer to this post on the Tenable Community.The discovery of a critical flaw in the Apache Log4j software is nothing short of a Fukushima moment for the cybersecurity industry.Ten years ago, an earthquake and subsequent tidal wave triggered the meltdown of the Fukushima nuclear power plant that continues to plague the region today. Similarly, the early exploitation of Log4j, during which attackers will go after the low-hanging fruit exposed by the vulnerability, will evolve over time to take the form of more complex attacks on more sensitive systems that have less exposure to the internet. And, just as Fukushima brought to light signific

20

2 months ago

Customer Communities AdminNew Participant

Company announcements

News: Tenable to Participate in Upcoming Investor EventsNews

August 12, 2025 at 9:00 AM EDTCOLUMBIA, Md., Aug. 12, 2025 (GLOBE NEWSWIRE) -- Tenable®, the exposure management company, today announced its co-chief executive officer, Steve Vintz, will attend the Stifel Tech Executive Summit and Piper Sandler Growth Frontiers Conference.Details for each event are as follows:Stifel Tech Executive SummitAugust 25-26, 2025Piper Sandler Growth Frontiers ConferenceSeptember 10, 2025For more information, visit https://investors.tenable.com/.About TenableTenable® is the exposure management company, exposing and closing the cybersecurity gaps that erode business value, reputation and trust. The company’s AI-powered exposure management platform radically unifies security visibility, insight and action across the attack surface, equipping modern organizations to protect against attacks from IT infrastructure to cloud environments to critical infrastructure and everywhere in between. By protecting enterprises from security exposure, Tenable reduces business ri

10

2 months ago

ElizaNew Participant

Product Q&A

For those using Tenable Cloud Security, how are you handling misconfiguration findings across multi-cloud environments

10

2 months ago

A

AdminTenable Ambassador

Product Q&A

What’s your go-to method for prioritizing vulnerabilities when scan results show hundreds of critical issues?

When Nessus or Tenable Vulnerability Management scans uncover hundreds of critical vulnerabilities, it can feel overwhelming to decide where to start. Do you focus on CVSS scores, exploitability, asset importance, or compliance requirements? Share your strategies, tools, and real-world tips for turning a massive list of criticals into a focused remediation plan.

00

A

2 months ago

JennyNew Participant

Product Documentation

We're a Major Player in the 2025 IDC MarketScape for CNAPP. Here's Why That Matters for Your Cloud Security.Blog

“With a strong focus on CNAPP through Tenable Cloud Security and exposure management with Tenable One, Tenable provides visibility and control over hybrid attack surfaces, including on-premises, cloud, and hybrid environments,” according to the report. To successfully tackle your cloud security challenges, you need a partner that understands the landscape and offers you a powerful, effective solution. That's why we are proud that Tenable has been positioned as a Major Player in the “IDC MarketScape: Worldwide Cloud-Native Application Protection Platform 2025 Vendor Assessment.”1. For us, this is more than just a placement on a chart; it's a validation of our commitment to helping you answer the most critical security question: "Are we exposed, and are we at risk?"Cloud security teams are overwhelmed not only by the volume of threats but by the complexity of identifying which ones truly matter. It's no longer sufficent to know what your vulnerabilities are – you need to understand your

00

2 months ago

AnthonyPioneer

Product Documentation

From Insight to Action: How Tenable One KPIs Drive Exposure Management SuccessBlog

Tenable One empowers security teams to go beyond surface-level risk tracking and drive measurable improvements across their security programs. With unified visibility and customizable dashboards, Tenable One makes it easy to monitor the KPIs that matter most, helping teams shift from reactive firefighting to proactive, strategic exposure management.The importance of KPIs in exposure managementEffective exposure management isn't just about identifying risks — it's about continuously measuring and reducing real exposure. Key performance indicators (KPIs) provide security teams with critical visibility into program effectiveness, helping them prioritize actions, monitor progress and ensure alignment with broader business objectives.In this blog, we’ll highlight the top KPIs Tenable One customers track to reduce risk, accelerate remediation and demonstrate impact to stakeholders.Essential KPIs for effective exposure management1. SLA performance metricsTracking service level agreement (SLA)

10

2 months ago

ElizaNew Participant

Platform

What does registration and login rate limit mean?Article

Have you or your users come across these error messages? validation.user_register.ratelimit or validation.user_login.ratelimit. This is due to our rate limiting feature being applied when specific users or actions exceed a defined limit. We've developed the following rate limits: Limit on failed registration: visitors from one IP cannot attempt more than 5 tries per hour when registering a user Limit on failed login: visitors from one IP cannot attempt more than 5 tries per hour when trying to login as a user You don't want this limit in your instance? No problem, just drop us a line at support@company.com and we can disable it for you. The phrase is not shown correctly? If the errors are shown as validation.user_register.ratelimit or validation.user_login.ratelimit, it can be confusing for users to figure our what is going on. You can easily change them by adding the following phrases in the control environment of your community: Module: Common, Key: validation.user_login.ratelimit

10

2 months ago

ElizaNew Participant

Integrations

Pimping your reporting using custom integrationsIntegrations

Injecting more data into your reporting takes your view on the customer journey to a whole new level. Regardless of the report or dataset you’re using—whether it’s feature adoption data or a geographical view of your customers and their support requests—smart use of more data will grant you a better view on your customer and their needs. To better enable you to customize your reporting, we have decided to start adding custom integrations. We make a distinction between two types: Platform integrations: E.g. connecting to other SaaS software like CompanyA and CompanyB Personal integrations: E.g. pieces of code or links to datasets that you have built yourself and would like to integrate in your datasets Both are currently available for all customers in the back-end of Company. DONE, RELEASED, YEAH! Example use-cases: You want to create an overview of all customer data, including demographics & usage of your platform, and then tie that into CRM data including how many times th

20

2 months ago

ElizaNew Participant

Product Q&A

For those using Tenable Cloud Security, how are you handling misconfiguration findings across multi-cloud environments

10

2 months ago

A

AdminTenable Ambassador

Product Q&A

What’s your go-to method for prioritizing vulnerabilities when scan results show hundreds of critical issues?

When Nessus or Tenable Vulnerability Management scans uncover hundreds of critical vulnerabilities, it can feel overwhelming to decide where to start. Do you focus on CVSS scores, exploitability, asset importance, or compliance requirements? Share your strategies, tools, and real-world tips for turning a massive list of criticals into a focused remediation plan.

00

A

2 months ago

Welcome

Everything you need to know about this community

Getting started in the community

3 topics

Company announcements

2 topics

Ask the community

Do you have a question? look no further

General Q&A

2 topics

Product Q&A

3 topics

Learn & Share

Share tips and best practices, show what you've created and inspire others

Tips & Tricks

4 topics

Show & Tell

1 topic

Leaderboard

Show full leaderboard

Badges

Customer Communities Adminhas earned the badge Expert
Customer Communities Adminhas earned the badge Tenable Partner Business Development and Growth Strategy
Customer Communities Adminhas earned the badge Tenable Service Delivery Partner Certification
Customer Communities Adminhas earned the badge MSSP Partner Certification Program
Adminhas earned the badge MSSP Partner Certification Program