Tenable has announced new always-on capabilities for Tenable Hexa AI, the agentic engine powering the Tenable One Exposure Management Platform. The update introduces what Tenable describes as the industry’s first “always-on agentic fleet,” enabling security teams to run autonomous, multi-step exposure management workflows. (Note that Microsoft has announced something similar this week as well.)
Tenable Hexa AI Gains Always-On Capabilities
The new always-on capabilities cover three primary autonomous routines: the first is Autonomous Exposure Remediation, which scans for critical exposures on a daily basis, analyzes and triages risks based on exploitability and reachability, triggers remediation workflows, and verifies that patches are correctly applied. The second is Continuous Preemptive Risk Reduction Guardrails, which runs weekly drift analyses, surfaces vulnerabilities compounded by identity exposures, and generates tickets to resolve critical deviations automatically.
The third routine covers Executive and Compliance Reporting, generating weekly tailored briefings with multi-domain context. These briefings are designed to give leadership a data-driven view of the organization’s real-time security health and compliance posture without requiring manual report compilation from security teams. Beyond scheduled routines, Tenable Hexa AI is designed to reduce mean time to remediation (MTTR) by automatically analyzing scans, triaging threats, and verifying patch success as soon as an IT ticket closes.
The new Tenable Hexa AI always-on capabilities will be available to Tenable One Foundation and Advanced customers in August 2026. Hexa AI operates alongside Tenable AI Exposure, a separate capability within Tenable One that helps organizations understand and secure their use of AI. Tenable will be demonstrating Tenable One at Black Hat USA from August 4 to 7, 2026, at booth 2639.
Pokdepinion: An AI security fleet that keeps working through the weekend so your analysts don’t have to sounds genuinely useful, but the real test is whether it handles the chaos of a real enterprise environment or just the clean demo version of one.
