Tenable is a valuation-led exposure-management underwrite: cheap enough to deserve work, but still waiting for Tenable One and Hexa to show up as durable revenue acceleration.
The stock is priced like a slower software company, while management is arguing that AI-driven vulnerability growth can move Tenable One from platform migration into a broader exposure-management system of action. That can work, but current guidance still says high single-digit growth. S1 S2 S3
The decision hinge is whether Tenable One plus Hexa can move the business from high single-digit revenue growth toward low double-digit growth while keeping free cash flow high and reducing reliance on stock-based compensation.
All figures are United States dollars unless noted. Currency conversion note: no exchange rate was used and no figures were converted because TENB reports in USD.
Current market context, normalized Fiscal.ai fundamentals, and the key source conflict are shown upfront because valuation is central to both TENB and the peer comparison.
| Latest quarter | Q1 2026 revenue was $262.1M, up 9.6% year-over-year; non-GAAP operating margin was 23.6%; non-GAAP earnings per share was $0.47. |
| Customer / platform signals | Tenable One was about 41% of new business. Tenable added 406 enterprise platform customers and 43 net new six-figure customers. |
| Cash and capital return | Q1 unlevered free cash flow was $88.6M. The company repurchased $130M of stock in Q1 and had $207.6M remaining authorization at quarter end. |
| Market data conflict | Live quote-derived market capitalization differs from Fiscal.ai snapshot market capitalization; the report uses the live quote for opening market context and Fiscal.ai for normalized multiples. |
Overall score: 32/45. This is a research-priority score, not a rating or target price.
| Factor | Score / 5 | Evidence |
|---|---|---|
| Revenue growth | 3/5 | Q1 revenue grew 9.6%, but full-year guidance implies about 7.4% growth at the midpoint. |
| Earnings growth | 3/5 | Non-GAAP earnings per share is guided to grow about 22% in 2026, helped by margin expansion and share repurchases. |
| Durability | 4/5 | More than 40,000 customers, 96% recurring revenue, and broad sensor/telemetry coverage support durability. |
| Margin quality | 3/5 | Non-GAAP margins are strong, but GAAP operating margin and stock-based compensation need scrutiny. |
| Cash generation | 4/5 | Unlevered free cash flow was $88.6M in Q1 and 27.3% of trailing revenue. |
| Balance sheet | 3/5 | Cash and short-term investments are meaningful, but Fiscal.ai shows modest net debt after obligations. |
| Valuation | 4/5 | Fiscal.ai NTM valuation screens inexpensive versus software peers. |
| Competitive position | 4/5 | Tenable has a credible exposure-management position, but competition from Qualys, Rapid7, CrowdStrike, Palo Alto, and cloud-native tools is real. |
| Market timing | 4/5 | AI-driven vulnerability discovery is a plausible demand catalyst, but still early in reported numbers. |
The decision hinge is whether Tenable One plus Hexa can move the business from high single-digit revenue growth toward low double-digit growth while keeping free cash flow high and reducing reliance on stock-based compensation.
Current market fit is good. Artificial-intelligence systems can increase vulnerability discovery and attack-path complexity, which makes prioritization and remediation more urgent. The market problem is that investors have heard this story before from vulnerability-management vendors, so reported bookings, net expansion, and platform mix need to confirm the narrative.
Watch Q2 and Q3 current remaining performance obligation, Tenable One percentage of new business, net dollar expansion, six-figure customer adds, and whether Hexa is sold as a paid expansion rather than a feature included to defend renewals.
Tenable sells cyber exposure management software. In plain English, it helps organizations find assets, vulnerabilities, misconfigurations, identity risks, cloud exposures, operational-technology exposures, and attack paths before attackers exploit them. The strategic product is Tenable One, with Hexa AI intended to turn exposure insights into orchestrated remediation workflows. S3
The long-term company case is that platform revenue grows in the mid-teens while legacy vulnerability management grows mid-single digits, lifting total company growth from high single digits toward low double digits by 2029. That is a company claim and not yet a verified financial trend.
The growth products to watch are Tenable One Foundation, Tenable One Advanced, Hexa AI, AI Exposure, cloud exposure management, identity exposure, operational-technology discovery, and flexible asset-based platform pricing. Management says platform customers have higher contract duration, higher annual contract value, stronger expansion, and materially higher pricing when customers move to advanced packages.
Good growth investment if Tenable One mix continues to rise, net dollar expansion moves above 110%, revenue growth reaccelerates, and buybacks are funded by true free cash flow rather than merely offsetting dilution.
Not a good setup if revenue remains around 7%-8%, customer expansion stays near 105%, and non-GAAP margins depend on stock-based compensation that remains a high-teens percentage of revenue.
Watch Q2 and Q3 current remaining performance obligation, Tenable One percentage of new business, net dollar expansion, six-figure customer adds, and whether Hexa is sold as a paid expansion rather than a feature included to defend renewals.
Current market fit is good. Artificial-intelligence systems can increase vulnerability discovery and attack-path complexity, which makes prioritization and remediation more urgent. The market problem is that investors have heard this story before from vulnerability-management vendors, so reported bookings, net expansion, and platform mix need to confirm the narrative.
Market data: live share price was $27.53, quote-derived market capitalization was $3.17B, and quote-derived enterprise value was about $3.23B. Fiscal.ai's normalized snapshot reported market capitalization of $2.96B, so the valuation table treats market value as approximate. S1 S2
Ten-quarter view: six reported quarters, one company-guided quarter, and the next three quarters from analyst estimates. Q2 2026 guidance midpoint: revenue $264.5M and non-GAAP diluted earnings per share $0.47. Earnings are non-GAAP diluted earnings per share because that is the guidance and consensus basis available in the earnings packages. Revenue is in United States dollars. S1 S3
| Quarter | Status | Revenue | Revenue year-over-year | Non-GAAP earnings per share | Earnings year-over-year | Basis |
|---|---|---|---|---|---|---|
| 2024 Q4 | Reported | $235.7M | +10.5% | $0.41 | +64.0% | Reported revenue and actual non-GAAP earnings per share from Fiscal.ai estimate history. |
| 2025 Q1 | Reported | $239.1M | +10.7% | $0.36 | +44.0% | Reported revenue and actual non-GAAP earnings per share from Fiscal.ai estimate history. |
| 2025 Q2 | Reported | $247.3M | +11.8% | $0.34 | +9.7% | Reported revenue and actual non-GAAP earnings per share from Fiscal.ai estimate history. |
| 2025 Q3 | Reported | $252.4M | +11.2% | $0.42 | +31.2% | Reported revenue and actual non-GAAP earnings per share from Fiscal.ai estimate history. |
| 2025 Q4 | Reported | $260.5M | +10.5% | $0.48 | +17.1% | Reported revenue and actual non-GAAP earnings per share from Fiscal.ai estimate history. |
| 2026 Q1 | Reported | $262.1M | +9.6% | $0.47 | +30.6% | Reported revenue and actual non-GAAP earnings per share from Fiscal.ai estimate history. |
| 2026 Q2 | Company guide midpoint | $264.5M | +7.0% | $0.47 | +38.2% | Company Q2 2026 guidance midpoint from the Q1 earnings package. |
| 2026 Q3 | Analyst estimate | $270.1M | +7.0% | $0.49 | +15.8% | Fiscal.ai consensus mean estimate. |
| 2026 Q4 | Analyst estimate | $277.2M | +6.4% | $0.52 | +8.1% | Fiscal.ai consensus mean estimate. |
| 2027 Q1 | Analyst estimate | $279.6M | +6.7% | $0.51 | +7.5% | Fiscal.ai consensus mean estimate. |
Three-year consensus estimates use Fiscal.ai annual revenue and non-GAAP earnings-per-share feeds. The table includes 2025 actuals as the base year and 2026-2028 consensus estimates. S1
| Year | Revenue | Revenue growth | Non-GAAP earnings per share | Earnings growth | Estimate count |
|---|---|---|---|---|---|
| 2025A | $999.4M | base | $1.59 | base | 22 revenue / 23 earnings |
| 2026E | $1.1B | +7.4% | $1.96 | +23.1% | 22 revenue / 23 earnings |
| 2027E | $1.2B | +7.2% | $2.17 | +10.9% | 22 revenue / 23 earnings |
| 2028E | $1.2B | +7.1% | $2.41 | +11.0% | 7 revenue / 6 earnings |
The peer group is intentionally mixed. QLYS, TENB, and RPD are closer vulnerability/exposure-management comps; VRNS is data-risk adjacent; OKTA is identity-adjacent; ZS, CRWD, and PANW show what faster security platforms cost.
| Ticker | Product position | Past growth | Expected growth | Valuation | Read |
|---|---|---|---|---|---|
| TENB subject | Exposure management, vulnerability management, cloud, identity, operational technology, and AI-security workflow orchestration through Tenable One and Hexa. | 3-year revenue CAGR +12.8% | 2-year forward revenue CAGR +7.3% | NTM EV/sales 2.7x; NTM price/earnings 13.2x; FCF margin +25.4% | Cheaper multiple, credible exposure-management narrative, but reacceleration must be proven. |
| QLYS | Vulnerability management, asset inventory, Enterprise TruRisk Management, patching, cloud security, and autonomous remediation through TruRisk Eliminate and Agent Val. | 3-year revenue CAGR +10.5% | 2-year forward revenue CAGR +7.7% | NTM EV/sales 4.7x; NTM price/earnings 14.1x; FCF margin +42.4% | Best profitability and balance sheet in this peer set, but revenue growth is still only high single digit to low double digit. |
| RPD | Vulnerability management, detection and response, application security, and managed threat services. Smaller and more turnaround-like than TENB or QLYS. | 3-year revenue CAGR +6.5% | 2-year forward revenue CAGR -1.3% | NTM EV/sales 0.9x; NTM price/earnings 4.2x; FCF margin +18.1% | Low multiple reflects weak forward growth and execution concern, not a quality benchmark. |
| VRNS | Data security posture, data access analytics, data threat detection, and data-centric remediation. Adjacent to exposure management but focused on sensitive data. | 3-year revenue CAGR +10.9% | 2-year forward revenue CAGR +18.0% | NTM EV/sales 4.4x; NTM price/earnings 155.8x; FCF margin +18.1% | Higher expected growth than TENB/QLYS but valuation is not cheap on earnings; data-security relevance is adjacent. |
| OKTA | Identity and access management. Relevant because identity exposure is a major risk signal, but less direct in vulnerability management. | 3-year revenue CAGR +15.2% | 2-year forward revenue CAGR +9.6% | NTM EV/sales 4.3x; NTM price/earnings 20.1x; FCF margin +30.4% | Identity comp with better scale and cash flow; more comparable as a platform-budget alternative than a product substitute. |
| ZS | Zero-trust access, secure web gateway, cloud security, and data protection. Broader secure-access platform rather than a pure vulnerability-management comp. | 3-year revenue CAGR +29.0% | 2-year forward revenue CAGR +20.8% | NTM EV/sales 7.6x; NTM price/earnings 31.9x; FCF margin +30.4% | Faster growth and strong free cash flow, but investors pay a higher sales multiple. |
| CRWD | Endpoint, cloud, identity, threat intelligence, security operations, and exposure modules on the Falcon platform. Larger, faster-growth platform benchmark. | 3-year revenue CAGR +27.7% | 2-year forward revenue CAGR +22.6% | NTM EV/sales 32.4x; NTM price/earnings 93.2x; FCF margin +29.5% | Premium platform benchmark with much faster growth and much higher valuation. |
| PANW | Broad security platform across network security, cloud security, and security operations. Useful budget-consolidation benchmark, less pure as a comp. | 3-year revenue CAGR +17.8% | 2-year forward revenue CAGR +22.2% | NTM EV/sales 18.6x; NTM price/earnings 50.2x; FCF margin +35.8% | Large platform consolidator; stronger forward growth but far larger, less comparable operating base. |
The decision hinge is whether Tenable One plus Hexa can move the business from high single-digit revenue growth toward low double-digit growth while keeping free cash flow high and reducing reliance on stock-based compensation.
Fiscal.ai shows NTM enterprise value to sales of 2.7x, NTM price-to-earnings of 13.2x, NTM price to free cash flow of 10.8x, and NTM enterprise value to EBITDA of 10.4x. A target price is deliberately not included because a credible return frame would need a full model of renewal cohorts, share count, stock-based compensation, debt or net cash, and downside multiples. S1
Tenable is not just a vulnerability scanner if Tenable One becomes the operating layer for exposure data and Hexa becomes a workflow automation layer.
Platform attach must expand fast enough to offset legacy vulnerability-management maturity, and customers must pay for advanced packages rather than only migrate existing spend.
Full-year revenue guidance remains high single digit, net dollar expansion is only 105%, and GAAP profitability is far below non-GAAP profitability.