Tenable beats Q3 estimates, raises full-year guidance to $1.087bn

Tenable Holdings beat its own guided metrics across the board in the third quarter of 2026, reporting revenue of $276.4 million, a 9.5% increase on the same period last year. GAAP operating income rose to $16.7 million from $7.1 million a year earlier, while the non-GAAP operating margin expanded by 380 basis points to 27.1%. The Nasdaq-listed company raised its full-year revenue outlook to a range of $1.084 billion to $1.087 billion.

The quarter's cash generation was also notably strong. Net cash from operating activities came in at $72.5 million, up from $53.9 million in Q3 2025, and unlevered free cash flow reached $69.4 million. Tenable added 413 net new enterprise platform customers and 39 net new customers spending more than six figures annually, and its dollar-based net expansion rate edged up to 107% from 106% in the prior quarter, suggesting existing customers are broadening their deployments.

Platform and product moves

The quarter saw several product announcements centred on AI-assisted security operations. Tenable integrated Anthropic's Claude model into its Tenable One Exposure Management Platform to power what the company calls Adversary View, a capability designed to surface hidden attack paths and suggest remediation priorities. The company also launched CyberAgents Exchange, described as an open-source, vendor-agnostic registry for AI agents, skills, model-context-protocol servers and multi-agent playbooks. Tenable positions it as the first such registry purpose-built for cybersecurity, though that claim is difficult to verify independently.

Separately, Tenable expanded its Hexa AI agentic engine with always-on functionality, deploying a coordinated fleet of agents intended to identify exposures, orchestrate fixes and confirm remediation continuously, including when security staff are offline. The company also closed an upsized $800 million convertible senior notes offering alongside a new $400 million secured revolving credit facility, and repurchased 6.8 million shares during the quarter for approximately $223.8 million.

Co-chief executive Mark Thurmond said: "Customers are moving from conversation to commitment, and this quarter that increasingly meant expanding their relationship with Tenable One."

Market context and competitive positioning

The exposure management category, sometimes described as continuous threat exposure management (CTEM) following terminology Gartner introduced in 2022, is attracting intense competition. Traditional vulnerability management vendors such as Qualys and Rapid7 are repositioning around similar risk-prioritisation narratives, while broader security-platform players including Microsoft, CrowdStrike and Palo Alto Networks are pushing adjacent attack-surface management features into their bundled suites.

Tenable has held the top position in the IDC worldwide device vulnerability and exposure management market share report for eight consecutive years, according to an IDC report published in August 2026. Gartner also named the company the "Company to Beat" for preemptive cybersecurity in AI-powered exposure assessment in a June 2026 report, though Gartner's published research reflects its view at the time of publication and is subject to change.

The AI-agent-in-security-operations theme carries regulatory considerations worth noting. The EU AI Act's obligations for general-purpose AI systems, which begin phasing in for high-risk applications, could affect how autonomous remediation agents are classified and audited, particularly for customers in regulated sectors such as financial services and critical infrastructure. Tenable's participation in the White House-led Project Watershed initiative, focused on protecting US water and wastewater systems from cyber threats, also signals a push into critical-infrastructure verticals that carry their own compliance and procurement dynamics.

For Q4 2026, Tenable is guiding revenue of $277 million to $280 million, with non-GAAP diluted earnings per share of $0.56 to $0.58. Full-year unlevered free cash flow is expected to land between $289 million and $295 million.