Tenable extends AI exposure coverage to Gemini, MCPs and IDE tools
Tenable has expanded the AI security capabilities of its Tenable One Exposure Management Platform, adding support for Google Gemini alongside existing coverage of Anthropic Claude, OpenAI ChatGPT Enterprise and Microsoft Copilot. The update, announced at Black Hat USA in Las Vegas, also extends discovery to Model Context Protocol (MCP) deployments and AI-native integrated development environments including Cursor, Windsurf and Trae.
The company says its telemetry underlines the urgency. Across more than 7,000 customer organisations, Tenable detected 457 million AI-related security issues over a single 30-day period, averaging approximately 62,000 exposures per organisation. Tenable attributes that volume to what it calls the "AI exposure gap": a risk surface that emerges when authorised and shadow AI proliferates faster than security teams can track or govern it.
What is new
The Gemini integration brings monitoring of user interactions and prompt responses, policy enforcement, and detection of malicious or policy-violating activity. Alongside that, the platform now claims to double its coverage of sanctioned and shadow AI by supporting MCPs and AI-enabled browser extensions in addition to the newly listed IDEs.
On the remediation side, Tenable One can now create tickets directly in Jira and ServiceNow, and push automated alerts via Slack, Teams or email when a policy violation is detected. That last point matters operationally: security findings that stay inside a single-vendor console rarely drive action at scale, and direct integration into existing ticketing workflows is a practical requirement for enterprise security operations teams.
Eric Doerr, Tenable's chief product officer, said the expansion addresses a structural problem rather than a niche one. "There's no denying that AI attack surfaces are making defenders' jobs even harder, and legacy or siloed cybersecurity tools simply don't cut it," he said. "With today's expansion to include Google Gemini, MCP and AI-native IDE deployments, Tenable is the only exposure management platform delivering unified AI visibility and governance across all major LLMs, software, and tools."
The company also highlighted two distinct platform components: Tenable AI Exposure, which handles discovery, assessment and governance of AI usage; and Tenable Hexa AI, an agentic engine that uses AI to coordinate security tasks and accelerate remediation within the platform itself.
Market context
AI security is maturing quickly into its own sub-category within the broader exposure and vulnerability management market. Tenable competes here with Palo Alto Networks, CrowdStrike, Wiz and a growing set of specialist startups focused specifically on LLM and agentic AI risk. The rush to support MCP is notable: the protocol, backed by Anthropic, has become a de facto integration standard for agentic AI toolchains within months of its public release, and it presents a novel attack surface because MCP servers mediate access between AI agents and downstream tools or data sources.
From a regulatory standpoint, enterprise adoption of AI security tooling is increasingly shaped by the EU AI Act's requirements around risk management and human oversight for high-risk AI systems, NIST's AI Risk Management Framework and, for financial-services firms in the UK and EU, DORA's ICT third-party risk obligations. Security teams seeking to evidence compliance will need the kind of policy enforcement and audit-trail capabilities that platforms such as Tenable One are positioning themselves to provide.
Tenable did not disclose pricing for the expanded AI Exposure tier, nor did it name specific customer deployments or share independent benchmark data. The company serves over 40,000 customers globally according to its own figures. Investors and enterprise buyers will be watching for customer adoption metrics and independent validation of the 62,000-exposures-per-organisation claim as the platform scales into the next product cycle.