Tenable adds OpenAI-powered vetting layer to CyberAgents Exchange

Tenable has launched an AI Inspector for its open-source security agent hub, using OpenAI GPT cyber models to vet components before enterprise deployment.

By The Datatech Times Editorial Team AI level 2 of 5
AI level 2 of 5: drafted by our AI editorial assistant from the company's announcement; fact-checked, edited and signed off by Mark Walker, Editorial Director. What the levels mean
A brightly lit data center aisle features rows of server racks with blinking blue and green LEDs, and a glowing biometric access control device on a rack in the foreground.

Tenable Holdings has expanded its CyberAgents Exchange with a new AI Inspector capability that screens open-source AI agents, skills and MCP servers before organisations deploy them in production security environments. The Exchange Inspector was developed in partnership with OpenAI as part of Tenable's involvement in the OpenAI Daybreak Defense Network, and uses OpenAI's GPT cyber models as a core element of its assessment process.

The CyberAgents Exchange itself is positioned as a vendor-agnostic, open-source hub where security practitioners can discover and share AI agents, skills and playbooks built for cybersecurity workflows. The Exchange Inspector adds a structured vetting layer on top of that catalogue, aimed at giving enterprise security teams greater confidence when adopting community-contributed AI components.

How the vetting process works

The Exchange Inspector operates in three stages. First, Tenable's own Tenable One AI Exposure skills inspection engine scans a submitted component for malicious content, including prompt-injection attempts and hardcoded secrets or customer data. Second, the component undergoes a frontier model assessment using OpenAI GPT cyber models. Third, Tenable's internal security research team conducts a manual expert review before a component is given an Inspector-vetted status.

Three vetted skills are available at launch. SOC Hunter, contributed by Tenable's enterprise security team, applies a hypothesis-driven threat hunting method across SIEM, EDR, vulnerability management, cloud security and code search tooling; Tenable reports that internal testing cut hunt times by 75%, though this figure is self-reported and has not been independently verified. A Remediation Priority and Impact Agent ingests live exposure data alongside CISA Known Exploited Vulnerabilities and MITRE ATT&CK intelligence to produce a daily vulnerability triage plan, with Tenable estimating a reduction of analyst triage time by up to 20 times per cycle. A Splunk integration skill allows security teams to query Tenable One Cloud Security posture findings already ingested in Splunk using the official Splunk MCP Server.

Vlad Korsunsky, chief technology officer at Tenable, said the Exchange Inspector "provides an additional layer of review for this rapidly growing subset of agents, skills and MCP servers before deployment."

Market context and competitive landscape

Agentic security, in which AI agents autonomously execute detection, triage and remediation tasks, is rapidly becoming a competitive battleground in enterprise cybersecurity. Vendors including CrowdStrike, Palo Alto Networks and SentinelOne have each announced or shipped agentic workflow capabilities over the past twelve months, while a number of well-funded startups are targeting specific runbook-automation and AI-driven SOC use cases. The challenge common to all these approaches is trust: security professionals are cautious about deploying AI components that may themselves introduce attack surface, a risk that the Exchange Inspector is explicitly designed to address.

The Model Context Protocol, or MCP, has emerged as an informal standard for connecting AI agents to external tools and data sources, originally developed by Anthropic. Tenable's decision to build MCP server vetting into the Exchange Inspector reflects how rapidly MCP has been adopted across the security tooling ecosystem, though the protocol remains at an early maturity stage and has not yet been standardised through a formal body such as IETF or NIST.

From a regulatory standpoint, the EU AI Act's obligations for general-purpose AI systems and the UK's emerging AI governance framework both place accountability on organisations deploying AI in high-stakes environments such as cybersecurity operations. A structured, documented vetting process of the type Tenable is describing could become part of the evidence trail enterprises need to demonstrate due diligence under these frameworks, though Tenable has not made explicit compliance claims in this release.

Tenable serves more than 40,000 customers globally. The CyberAgents Exchange and Exchange Inspector are available now, with a demo request process linked from the company's website.

Sector

Topic

Geography