Key Highlights

  • The move followed second-quarter results released after the close on 29 July.
  • For the June quarter, GAAP operating income was US$12.4m against a US$7.4m loss a year earlier, and GAAP net income US$3.8m, or US$0.03 a share, versus a loss of US$0.12.
  • The clearest argument is margin compounding against a modest valuation. The non-GAAP operating margin has moved from 20.4% in March 2025 to 23.6% and then 24.7%, and management's medium-term model targets a 28% operating margin and a 31% unlevered free cash flow margin by 2029.
  • Revenue grew 11% in 2025; raised full-year guidance implies roughly 8%, and the September-quarter guide of US$270m-US$273m about 7% to 8%.

Why the market is paying attention

Tenable is at a pivotal point, balancing near-term challenges against a longer-term strategic case.

The move followed second-quarter results released after the close on 29 July. Revenue for the three months to 30 June was US$268.5m, up 8.6%, and the non-GAAP operating margin reached 24.7%, up 540 basis points. Tenable (NASDAQ:TENB) lifted full-year revenue guidance to US$1.075bn-US$1.081bn, from US$1.065bn-US$1.075bn in February.

A day earlier it announced what it called the industry's first always-on agentic fleet for exposure management, autonomous routines running on Tenable Hexa AI, the agentic engine inside its platform. The claim is the company's own, but it is a dated product release, not a slogan.

What the company does

Tenable sells software that finds weaknesses across an organisation's technology estate, ranks them by how dangerous they really are, and helps close them. It began in vulnerability management and has repositioned around a broader idea it calls exposure management.

That is embodied in Tenable One, described in the FY2025 annual report as an AI-powered platform giving a single view of risk across asset types. Around it sit Tenable Vulnerability Management, Tenable Cloud Security, Tenable Identity Exposure and OT Security.

The base is broad: over 40,000 customers at the end of 2025, including about 65% of the Fortune 500, served by 1,995 staff. Revenue is subscription-based, with deferred revenue of US$849.4m at 30 June, and the United States produced 52% of March-quarter revenue. The annual report names its rivals plainly: Qualys and Rapid7 in vulnerability management, CrowdStrike in endpoint security, and Palo Alto Networks and Wiz in cloud security.

Latest financial and operating performance

For the June quarter, GAAP operating income was US$12.4m against a US$7.4m loss a year earlier, and GAAP net income US$3.8m, or US$0.03 a share, versus a loss of US$0.12. Non-GAAP diluted earnings were US$0.51. The gap is mostly share-based payment, which cost US$46.3m.

Cash generation is the sturdier measure. Operating cash flow was US$132.7m across the half, and unlevered free cash flow guidance rose to US$289m-US$295m, about 27% of guided revenue.

One metric has quietly gone. Calculated current billings grew 8% in 2025 to US$1.049bn while revenue grew 11%; in February Tenable said it was moving away from the measure, and it appeared in neither 2026 release. Remaining performance obligations, its replacement, reached US$1,026.1m at 30 June, up 15.4%.

Tenable added 381 new enterprise platform customers and 32 net new six-figure customers in the quarter, after 406 and 43 in March. Across the whole of 2025 it added just five net new six-figure accounts.

The balance sheet has tightened. Cash and short-term investments fell from US$402.2m at the end of 2025 to US$298.3m, against a term loan carried at US$352.9m, a swing from roughly US$48m of net cash to about US$55m of net debt. The debt is not convertible: it is a senior secured term loan drawn in July 2021, maturing in 2028. The cash went on buybacks, US$130.0m in March and US$100.0m in June.

The catalyst: selling autonomy as capacity

Hexa AI arrived in the first quarter of 2026 as an agentic engine turning exposure intelligence into action. The 28 July announcement made it continuous: daily autonomous remediation with patch verification, weekly drift analysis that raises tickets against agreed guardrails, and automated compliance reporting. It reaches Tenable One customers in August.

Financially, the point is the price list. At its 21 May investor day, Tenable said Tenable One carried roughly a 60% price uplift over standalone vulnerability management at the Advanced tier, generated two to three times the annual contract value of non-platform deals, and made up about a third of 2025 new bookings.

Autonomy is the argument for that uplift. Security teams do not buy more scanning; they buy fewer analyst hours per incident. No revenue has yet been attributed to Hexa AI.

The bull case

The clearest argument is margin compounding against a modest valuation. The non-GAAP operating margin has moved from 20.4% in March 2025 to 23.6% and then 24.7%, and management's medium-term model targets a 28% operating margin and a 31% unlevered free cash flow margin by 2029.

On the figure price, enterprise value of roughly US$3.65bn is close to twelve times the midpoint of guided unlevered free cash flow and about sixteen times guided non-GAAP earnings of US$1.95-US$2.00. Bookings are running ahead of the top line, with remaining performance obligations up 15.4% against revenue growth of 8.6%.

The bear case and the risks

Growth is decelerating. Revenue grew 11% in 2025; raised full-year guidance implies roughly 8%, and the September-quarter guide of US$270m-US$273m about 7% to 8%. An AI story that does not reach the growth rate is a margin story, and margin stories re-rate less generously.

Transparency narrowed at an awkward moment. Calculated current billings was growing at 8% against 11% revenue growth when Tenable stopped leaning on it. Remaining performance obligations is legitimate, but flattered by the longer contract durations management itself highlights.

The balance sheet no longer cushions. Buybacks have taken Tenable from net cash to modest net debt, with a US$375m term loan maturing in 2028. Repurchases at this pace would consume most of guided free cash flow.

Competition is not obviously losing. Qualys grew revenue 9.8% in the March quarter, to US$175.6m, marginally faster than Tenable managed. Microsoft ships vulnerability management inside its security bundles.

Governance and GAAP profitability invite scrutiny. At the 13 May annual meeting, co-founder John C. Huffard, Jr. drew 42.6 million withheld votes against 50.8 million in favour, and Tenable reported a US$36.1m net loss for 2025.

What investors should watch next

Third-quarter results, due around late October. Whether revenue meets guidance and the non-GAAP operating margin holds near 25%.

Adoption of the agentic fleet from August. The measurable proxies are net new six-figure customers - 32 in June, 43 in March, and any update on Tenable One's share of new bookings.

Remaining performance obligations. Current RPO grew 12.3% against 15.4% for the total; acceleration in the near-dated portion would make guidance look conservative.

Capital allocation. Whether repurchases continue at the first-half pace now that Tenable carries net debt.

Investor takeaway

Tenable's June-quarter print did what it needed to: modest revenue growth, a genuine step up in profitability, higher guidance and a GAAP operating profit. The agentic fleet announced on 28 July is real and dated, and gives the sales force a reason to defend platform pricing rather than compete on scanning licences.

The tension is that growth keeps easing while margins keep rising, and the market values the business at roughly twelve times guided unlevered free cash flow. That is either an opportunity, if autonomy eventually shows up in bookings, or a fair price for a maturing software franchise now carrying modest net debt after heavy buybacks.

This article is for informational purposes only and does not constitute investment advice or a recommendation to buy, sell, or hold any security. Share prices can rise or fall, and past performance does not guarantee future results. Investors should conduct independent research and consult a licensed financial adviser before making investment decisions.