Tenable Expands Exposure Management Platform to Address AI Attack Surface

As artificial intelligence becomes deeply embedded across enterprise systems, Tenable has expanded its exposure management platform with the launch of Tenable One AI Exposure, aimed at helping enterprises identify, manage and govern AI-related security risks.

According to Tenable, AI adoption has introduced an “AI Exposure Gap” — a growing but often invisible layer of risk created by AI models, agents, APIs and data flows that span cloud, SaaS and on-premise environments. Following are the features of the platform, where, Tenable One AI Exposure aims to address this challenge by integrating AI-related risks into the same exposure management framework enterprises already use to manage cyber risk.:

• The platform continuously discovers both sanctioned and shadow AI usage across internal and external environments, including applications, workloads, APIs and agents, providing security teams with a consolidated view of AI activity and associated exposure.

• The platform also correlates AI usage with infrastructure, identity and data context to help security leaders understand how risk is created across interconnected systems. 

• This contextual approach is intended to reduce alert fatigue, highlight potential AI-driven attack paths and prioritise remediation based on business impact rather than isolated technical findings.

• In addition, Tenable One AI Exposure supports exposure reduction and governance by helping organisations remediate misconfigurations, close exposed services, enforce acceptable-use policies for AI, limit sensitive data exposure and generate audit-ready evidence to support compliance requirements.

Eric Doerr, Chief Product Officer at Tenable, said “AI exposure cannot be managed in isolation. By bringing AI risk into a unified exposure management model, security leaders can better understand how AI impacts overall business risk and take proactive steps to reduce it.”

With CIOs now accountable for AI enablement and risk, Tenable’s move reflects a shift toward integrating AI security into broader enterprise risk management.