Exposure Management · PRODUCT SUMMARY

Tenable

Tenable One Foundation combines asset inventory, vulnerability and misconfiguration prioritization, third-party data connectors, dashboards, and ticketing. Identity security is an add-on; Attack Path Analysis requires Advanced.

Assessed offering

Tenable One Foundation — base package

Identity security is a paid add-on and earns no credit. Attack Path Analysis is included in Advanced, not Foundation. Patch Management and other paid enhancements are excluded.

Strengths and evaluation fit

The retained Tenable One licensing research distinguishes Foundation inventory, third-party connectors, prioritization, and ticketing from the attack-path functions in Advanced. Those documented exposure functions are assessed without treating an add-on as a default entitlement.

Consider it when you need a consolidated exposure program and can map the required functions to the proposed Tenable One package. Trial the data sources and workflow that would actually be included in your contract.

Trade-offs and boundaries to verify

The retained licensing record places Attack Path Analysis in Advanced and identity security in an add-on. Verify those terms against a current quote. The licensing and product pages could not be retrieved in this session, so this is retained evidence rather than a new October 30 feature check.

Retained licensing research dated October 27–28, 2026. Primary-page recheck blocked October 30, 2026; reconfirm current entitlements.

Product evidence at a glance

Verified consolidates established base inclusion and documented product capability. Package evidence is reported separately. Module / integration / activation, Outside assessed base, and Not established preserve the boundaries. Missing evidence is not a finding that a product lacks the capability.

Product evidenceScroll across on smaller screens →
Research areaEvidenceSource
Asset visibilityVerifiedOfficial source ↗
Existing-tool dataVerifiedOfficial source ↗
Risk prioritizationVerifiedOfficial source ↗
Attack pathsOutside assessed baseThe assessed baseline is Tenable One Foundation. Attack Path Analysis requires Advanced; Identity Security is an add-on. Neither earns Foundation credit.
Official source ↗
Attack validationNot establishedOfficial source ↗
Control gapsNot establishedOfficial source ↗
Remediation workflowVerifiedOfficial source ↗
Person-level identity riskOutside assessed baseThe assessed baseline is Tenable One Foundation. Attack Path Analysis requires Advanced; Identity Security is an add-on. Neither earns Foundation credit.
Official source ↗

What to ask in a demonstration

Package and implementation boundaries

Tenable’s Foundation/Advanced licensing table documents Foundation asset inventory, third-party connectors, vulnerability prioritization, and ticketing. Identity security and Patch Management are add-ons; Attack Path Analysis requires Advanced.

Research date and scope

The underlying source record was checked October 27, 2026 (retained package research); eligibility checked October 28, 2026. This summary was published October 30, 2026. Source-check dates above identify retained research and any new checks separately. The publication date is not a new verification of every vendor claim. This is documentation-based buying research, not a hands-on review.

Read our research approach · Understand product and package evidence