AI raises the upside, execution sets the limit
- Q1 2026 revenue rose 9.6% to $262.1 million, and management raised full-year growth guidance to 7.4%.
- Tenable One made up 41% of new business in Q1, which supports the platform story.
- Dollar-based net expansion fell to 105%, a warning that existing customers are expanding more slowly.
- Recurring revenue was 96% of revenue in Q1 2026, so the model is still mostly subscription based.
- The big question is whether Hexa AI and AI partnerships can turn the AI threat wave into faster sales.
AI tailwind, slower base
Tenable is trying to turn a new cyber problem into a growth story. AI systems can now help find software flaws faster. Management says that makes exposure management more important because customers need to see risks across their whole attack surface and fix the worst ones first.
The bull case is that Tenable One becomes the control center for this problem. In Q1 2026, Tenable One was 41% of new business, up 8 points from Q1 2025. The company also added 406 new enterprise platform customers, up 12.5% from the prior-year quarter. If AI-discovered flaws create real budget urgency, Tenable has a clear way to sell a broader platform.
The bear case is no longer only about slowdown. It is about proving the AI story shows up in revenue. Dollar-based net expansion, which measures how much the same customer group spends over time, slipped to 105%. That means upsell is still getting softer. Full-year 2026 guidance was raised, but 7.4% growth at the midpoint still marks a step down from 11% growth in 2025.
Finn's view should read as balanced. Tenable has a strong category position and a mostly recurring model, but the company needs Hexa AI, Tenable One pricing, and AI partnerships to do more than sound exciting. The next proof point is whether Tenable One can move above 50% of new business while net expansion stops falling.
Subscriptions around cyber risk
Tenable makes money by selling software subscriptions. In Q1 2026, recurring revenue was 96% of total revenue. Customers usually buy for one year, and some buy longer contracts. Tenable often bills in advance, which helps cash flow.
The go-to-market plan starts with vulnerability management, the older core product that finds known weak spots. Then Tenable tries to move customers into Tenable One, a broader platform that covers IT systems, cloud, identity, operational technology, and AI-related assets. This is important because the broader platform should support larger deals.
The model breaks if customers do not expand. That is why the 105% dollar-based net expansion rate matters. A number above 100% means the old customer base is still spending more, but the trend is weaker than before. If the flexible per-asset pricing model helps deals move faster, it could help. If it lowers expansion, it could hurt the story.
The balance sheet is not the main bull point. At March 31, 2026, Tenable had $139.2 million of cash and cash equivalents plus $221.1 million of short-term investments, but it also had an accumulated deficit of $896.0 million and a term loan structure to manage. Buybacks are meaningful too: since the program began through March 31, 2026, Tenable had repurchased 16.7 million shares for $492.4 million.
From scanner to platform
Tenable One
This is the main platform bet. It gives customers one view of cyber exposure across assets and attack paths, and it is the product line management ties most closely to the AI opportunity.
Tenable Hexa AI
Hexa AI is an agent-style engine meant to help triage issues and run remediation workflows. It needs to prove customer adoption and pricing after general availability.
Vulnerability Management
This is Tenable's foundation. It finds and manages known software and system weaknesses, and it remains the main landing point for many customers.
Cloud Security
This product covers cloud-native application protection, data security posture, and AI security posture. The Eureka and Apex Security deals added more depth here.
Operational Technology Security
This protects industrial systems and critical infrastructure. These environments can be slow to buy, but the need is serious because outages can affect real-world operations.
Identity Security
This helps customers spot identity risks, especially in Active Directory environments. It supports the broader platform pitch because identity is a common path for attackers.
Revenue streams, not segments
Tenable reports as one operating segment. The mix below uses Q1 2026 revenue categories from the latest 10-Q because product-level segment shares are not disclosed.
What could break the thesis
Expansion keeps fading
High impact · Medium oddsDollar-based net expansion fell to 105% in Q1 2026 from 106% at year-end 2025. That means existing customers are still growing, but at a slower pace. If this drops closer to 100%, Tenable would need more new customers just to keep growth steady.
AI products do not monetize
High impact · Medium oddsThe stock story now leans on AI as a demand driver. Hexa AI must show that it can save time, improve remediation, and earn budget. If customers treat it as a feature instead of a paid product, the AI tailwind may not re-accelerate revenue.
Tenable One stalls below platform scale
High impact · Medium oddsTenable One was 41% of new business in Q1 2026. That is progress, but it still leaves most new business outside the main platform. The bull case needs Tenable One to become the default sale, not a side upgrade.
Bigger security platforms crowd the market
Medium impact · High oddsExposure management is crowded. Palo Alto Networks, Wiz, Qualys, Rapid7, and other vendors can bundle similar tools into larger security deals. Tenable must prove its depth and neutral platform value are strong enough to win.
AI and cloud supply chain risk
Medium impact · Medium oddsThe latest 10-Q adds more detail on AI risks. Tenable warns that AI outputs can be flawed, rules like the EU AI Act are still developing, and third-party AI model providers could become a supply chain risk for government customers. The filing also notes reliance on AWS and cites data center disruption risk in the UAE and Bahrain.
Public sector budget drag
Medium impact · Medium oddsTenable has called out possible U.S. government spending pressure tied to the presidential administration's priorities and department cuts. Public sector sales can already be seasonal and approval-heavy. Less funding could stretch sales cycles or reduce cybersecurity projects.
In one breath
What does Tenable actually do?
Tenable helps companies find cyber weak spots before attackers use them. Its newer pitch is exposure management, which means ranking the most dangerous risks across IT, cloud, identity, industrial systems, and AI assets.
Why does AI matter for Tenable?
AI can help find more software flaws faster, which could create more work for security teams. Tenable argues that customers will need Tenable One and Hexa AI to prioritize and fix those issues at machine speed.
What is the main metric to watch?
Dollar-based net expansion is the cleanest warning light. It was 105% in Q1 2026, so existing customers are still spending more, but the rate has been falling.
Is Tenable profitable?
In Q1 2026, Tenable reported GAAP operating income of $8.8 million and net income of $1.4 million. Management also highlighted a 24% non-GAAP operating margin on the Q1 earnings call.