Q1 2026 Tenable Holdings Inc Earnings Call

April 29, 2026

Speaker #1: If anyone should require operator assistance during the conference, please press star zero on your telephone keypad. As a reminder, this conference is being recorded.

Speaker #1: It is now my pleasure to introduce your host, Erin Karney, Vice President, Investor Relations. Thank you. You may begin. Thank you, operator, and thank you all for joining us on today's conference call to discuss Tenable's first quarter and full year 2026 financial results.

Speaker #1: With me on the call today are Co-Chief Executive Officers Steve Vintz and Mark Thurmond, and Chief Financial Officer Matt Brown. Prior to this call, we issued a press release announcing our financial results for the quarter.

Operator: Greetings, welcome to the Tenable Q1 2026 Earnings Conference Call. At this time, all participants are in a listen-only mode. A brief question and answer session will follow the formal presentation. If anyone should require operator assistance during the conference, please press star zero on your telephone keypad. As a reminder, this conference is being recorded. It is now my pleasure to introduce your host, Erin Karney, Vice President, Investor Relations. Thank you. You may begin.

Speaker #1: You can find the press release on our IR website at tenable.com. We will make forward-looking statements during the course of this call, including statements relating to our guidance and expectations for the second quarter and full year 2026, growth and drivers in our business, changes in the threat landscape in the security industry, particularly regarding AI security, the expected impact of frontier AI models like Anthropic Mythos on accelerated vulnerability discovery.

Erin Karney: Thank you, operator, and thank you all for joining us on today's conference call to discuss Tenable's Q1 and full year 2026 financial results. With me on the call today are Co-Chief Executive Officers Steve Vintz and Mark Thurmond, and Chief Financial Officer Matthew Brown. Prior to this call, we issued a press release announcing our financial results for the quarter. You can find the press release on our IR website at tenable.com.

Erin Karney: Thank you, operator, and thank you all for joining us on today's conference call to discuss Tenable's Q1 and full year 2026 financial results. With me on the call today are Co-Chief Executive Officers Steve Vintz and Mark Thurmond, and Chief Financial Officer Matt Brown. Prior to this call, we issued a press release announcing our financial results for the quarter. You can find the press release on our IR website at tenable.com.

Speaker #1: And the shift to preemptive security. Our competitive position in the market, growth, and customer demand for and adoption of our solutions, including Tenable One, our exposure management platform, and the expansion of Tenable One, including agentic AI security and orchestration through Hexa AI, and OT Discovery.

Speaker #1: Research and development investments in Tenable One and our future results of operations and financial position. These forward-looking statements involve risks and uncertainties, some of which are beyond our control, which could cause actual results to differ materially from those anticipated by these statements.

Erin Karney: We will make forward-looking statements during the course of this call, including statements relating to our guidance and expectations for Q2 and full year 2026, growth and drivers in our business, changes in the threat landscape in the security industry, particularly regarding AI security, the expected impact of frontier AI models like Anthropic Mythos on accelerated vulnerability discovery and the shift to preemptive security, our competitive position in the market, growth and customer demand for and adoption of our solutions, including Tenable One, our exposure management platform, the expansion of Tenable One, including agentic AI security and orchestration through Hexa AI and OT Discovery, research and development investments in Tenable One, and our future results of operations and financial position.

Speaker #1: You should not rely upon forward-looking statements as a prediction of future events. Forward-looking statements represent our beliefs and assumptions only as of today and should not be considered representative of our views as of any subsequent date.

Speaker #1: And we disclaim any obligation to update any forward-looking statements or outlook. For further discussion of the material risks and other important factors that could affect our actual contained in our most recent annual report on Form 10-K and subsequent reports that we file with the SEC.

Speaker #1: In addition, all of the financial results we will discuss today are non-GAAP financial measures, with the exception of revenue. These non-GAAP financial measures are in addition to and not a substitute for or superior to measures of financial performance prepared in accordance with GAAP.

Erin Karney: These forward-looking statements involve risks and uncertainties, some of which are beyond our control, which could cause actual results to differ materially from those anticipated by these statements. You should not rely upon forward-looking statements as a prediction of future events. Forward-looking statements represent our beliefs and assumptions only as of today and should not be considered representative of our views as of any subsequent date. We disclaim any obligation to update any forward-looking statements or outlook. For a further discussion of the material risks and other important factors that could affect our actual results, please refer to those contained in our most recent annual report on Form 10-K and subsequent reports that we file with the SEC. In addition, all of the financial results we will discuss today are non-GAAP financial measures, with the exception of revenue.

Speaker #1: There are a number of limitations related to the use of these non-GAAP financial measures versus their closest GAAP equivalents. Our press release includes GAAP to non-GAAP reconciliations for these measures.

Speaker #1: I'll now turn the call over to Steve. Thanks, Erin. In Q1, we exceeded all of our guided metrics with 10% year-over-year revenue growth and a 24% operating margin.

Speaker #1: Tenable One, our AI-powered exposure management platform, was 41% of new business this quarter and 8-point increase from Q1 last year. In addition, we added 406 new enterprise platform customers and 43 net new six-figure customers.

Erin Karney: These non-GAAP financial measures are in addition to, and not a substitute for or superior to, measures of financial performance prepared in accordance with GAAP. There are a number of limitations related to the use of these non-GAAP financial measures versus their closest GAAP equivalents. Our press release includes GAAP to non-GAAP reconciliations for these measures. I'll now turn the call over to Steve.

Speaker #1: New customer ads and large deals with Tenable One continue to underscore our strong financial performance and balanced growth approach. The rapid advancement of frontier AI models is having a profound impact on cybersecurity, and there is understandably a lot of noise in the market.

Speaker #1: Recent announcements, including Anthropic Mythos, have demonstrated that AI can now autonomously discover software vulnerabilities at a scale and speed we have not seen before. As a result, the number one question we are getting from investors is, "What does this mean for the future of cybersecurity, and what does it mean for Tenable in particular?" To start, as part of our ongoing research and development efforts, we are actively engaging with leading frontier AI model providers, including Anthropic, to better understand these advancements and help customers prepare for what's next in the cybersecurity industry.

Steve Vintz: Thanks, Erin. In Q1, we exceeded all of our guided metrics with 10% year-over-year revenue growth and 24% operating margin. Tenable One, our AI-powered exposure management platform, was 41% of new business this quarter, an 8-point increase from Q1 last year. In addition, we added 406 new enterprise platform customers and 43 net new 6-figure customers. New customer adds and large deals with Tenable One continue to underscore our strong financial performance and balanced growth approach. The rapid advancement of frontier AI models is having a profound impact on cybersecurity, and there's understandably a lot of noise in the market. Recent announcements, including Claude Mythos, have demonstrated that AI can now autonomously discover software vulnerabilities at scale and speed we have not seen before.

Speaker #1: This is top of mind for customers as we've seen a significant increase in inbound inquiry from our customers over the past couple of weeks, which Mark will cover later on the call.

Speaker #1: Our view is this: AI models are incredibly proficient at discovering previously unknown vulnerabilities. Number two, AI is also changing low-risk vulnerabilities in software quickly and at scale.

Steve Vintz: As a result, the number one question we are getting from investors is: What does this mean for the future of cybersecurity, and what does it mean for Tenable in particular? To start, as part of our ongoing research and development efforts, we are actively engaging with leading frontier AI model providers, including Anthropic, to better understand these advancements and help customers prepare for what's next in the cybersecurity industry. This is top of mind for customers, as we've seen a significant increase in inbound inquiries from our customers over the past couple of weeks, which Mark will cover later on the call. Our view is this: AI models are incredibly proficient at discovering previously unknown vulnerabilities. Number two, AI is also changing low-risk vols in software quickly and at scale.

Speaker #1: And third, and finally, these two things will lead to a proliferation of new vulnerabilities and attack paths in customers' environments, overloading operational workloads for defenders.

Speaker #1: On that note, let me be precise. About where these models operate and where we operate because the distinction matters here. Frontier models like Mythos read and reason about source code, they find vulnerabilities such as logic flaws, injection weaknesses, and authentication bypasses by tracing data flows through a code base that is application security research at the source code layer.

Speaker #1: It is genuinely impressive. And it is one stage of a much longer life cycle for managing risk. Tenable operates on the other stages of that life cycle.

Steve Vintz: Third, and finally, these two things will lead to a proliferation of new vulnerabilities and attack paths in customers' environments, overloading operational workloads for defenders. On that note, let me be precise about where these models operate and where we operate because the distinction matters here. Frontier models like Mythos read and reason about source code. They find vulnerabilities such as logic flaws, injection weaknesses, and authentication bypasses by tracing data flows through a code base. That is application security research at the source code layer. It is genuinely impressive, and it is one stage of a much longer life cycle for managing risk. Tenable operates on the other stages of that life cycle, the ones that determine whether a vulnerability actually creates risk in a real customer environment. Specifically, customers need to understand their entire digital footprint and then assess for critical exposures. Exposures are much broader than vulnerabilities.

Speaker #1: The ones that determine whether a vulnerability actually creates risk in a real customer environment. Specifically, customers need to understand their entire digital footprint and then assess for critical exposures.

Speaker #1: Exposures are much broader than vulnerabilities. They include over-privileged access, misconfigurations, shadow AI, and the real-world impact of vulnerabilities as they exist in our customers' environment.

Speaker #1: From there, Tenable works across all of these signals to prioritize and identify the likely and most critical paths of exploit by threat actors. So let me put this in pragmatic terms.

Steve Vintz: That is application security research at the source code layer. It is genuinely impressive, and it is one stage of a much longer life cycle for managing risk. Tenable operates on the other stages of that life cycle, the ones that determine whether a vulnerability actually creates risk in a real customer environment. Specifically, customers need to understand their entire digital footprint and then assess for critical exposures. Exposures are much broader than vulnerabilities.

Speaker #1: There will be a window where adversaries hold a clear advantage in the AI era, because we will see more exploits due to a tsunami of new vulnerabilities.

Speaker #1: That's exactly why the urgency for exposure management has never been higher. Organizations need to understand what exposures exist and which ones create real immediate risk in their environment.

Steve Vintz: They include overprivileged access, misconfigurations, shadow AI, and the real-world impact of vulnerabilities as they exist in our customer's environment. From there, Tenable works across all of these signals to prioritize and identify the likely and most critical paths of exploit by threat actors. Let me put this in pragmatic terms. There will be a window where adversaries hold a clear advantage in the AI era because we will see more exploits due to a tsunami of new vulnerabilities. That's exactly why the urgency for exposure management has never been higher. Organizations need to understand what exposures exist and which ones create real immediate risk in their environment, and then ensure those risks are remediated and verified. That is exactly what Tenable One is designed to deliver.

Speaker #1: And then ensure those risks are remediated and verified. That is exactly what Tenable One is designed to deliver. For over two decades, we have built one of the industry's most comprehensive and proprietary data sets, across IT, cloud, OT, which we have also expanded to AI infrastructure and apps and third-party data to solve the hardest problems in cybersecurity.

Speaker #1: Tenable One leverages this expansive data set of exposure intelligence to unify visibility across assets. Vulnerabilities, identities, and misconfigurations then applies business context and drives prioritized remediation across the environment.

Speaker #1: And that brings me to Tenable Hexa AI. Our new agentic engine. Which we announced in Q1. Hexa is designed to take the prioritized exposures we identified, primarily in runtime infrastructure, and turn them into a coordinated action and operates as an orchestration layer across the security ecosystem, automating triage and executing multi-step remediation workflows across a wide range of domains.

Steve Vintz: For over two decades, we have built one of the industry's most comprehensive and proprietary datasets across IT, cloud, OT, which we have also expanded to AI infrastructure and apps and third-party data to solve the hardest problems in cybersecurity. Tenable One leverages this expansive dataset of exposure intelligence to unify visibility across assets, vulnerabilities, identities, and misconfigurations, applies business context and drives prioritized remediation across the environment. That brings me to Tenable Hexa AI, our new agentic engine, which we announced in Q1. Hexa is designed to take the prioritized exposures we identified primarily in runtime infrastructure and turn them into a coordinated action. It operates as an orchestration layer across the security ecosystem, automating triage and executing multi-step remediation workflows across a wide range of domains.

Speaker #1: Where Tenable One serves as the system of record for risk management, at its core, Hexa serves as a system of action for proactive risk reduction, coordinating work across humans and agents autonomously.

Speaker #1: It determines what matters most in the broader security context and drives the steps required to reduce exposure. This is a critical shift. Security teams today are not just dealing with more vulnerabilities.

Speaker #1: They are managing fragmented workloads across tools, teams, and systems. Hexa brings all of that together: transforming exposure intelligence into coordinated execution at scale. Hexa is built to execute, automating complex tasks and orchestrating the right fixes across the enterprise before exposures are exploited.

Steve Vintz: Where Tenable One serves as the system of record for risk management, at its core, Hexa serves as a system of action for proactive risk reduction, coordinating work across humans and agents autonomously. It determines what matters most in the broader security context and drives the steps required to reduce exposure. This is a critical shift. Security teams today are not just dealing with more vulnerabilities, they are managing fragmented workloads across tools, teams, and systems. Hexa brings all of that together, transforming exposure intelligence into coordinated execution at scale. Hexa is built to execute automating complex tasks and orchestrate the right fixes across the enterprise before exposures are exploited. The result is a move from reactive response where you wait for vulnerabilities to come to consistent machine speed risk reduction, enabling defenders to operate with the speed and precision required in an AI-driven threat landscape.

Speaker #1: The result is a move from reactive response where you wait for vulnerabilities to come to consistent machine-speed risk reduction enabling defenders to operate with the speed and precision required in an AI-driven threat landscape.

Speaker #1: Now, with that said, we're also continuing the broadener capability across asset types. We recently announced OT discovery to secure cyber-physical systems. These systems have historically required time-consuming deployments of specialized hardware, new agents, and bolt-on software to gain visibility.

Steve Vintz: Hexa brings all of that together, transforming exposure intelligence into coordinated execution at scale. Hexa is built to execute automating complex tasks and orchestrate the right fixes across the enterprise before exposures are exploited. The result is a move from reactive response where you wait for vulnerabilities to come to consistent machine speed risk reduction, enabling defenders to operate with the speed and precision required in an AI-driven threat landscape.

Speaker #1: We've eliminated this friction by integrating OT discovery directly into our core solutions inside the Tenable One platform. This is particularly important as the number of OT devices explodes with AI data centers and build-outs.

Speaker #1: And finally, before I turn the call over to Mark, I want to remind everyone we will be hosting an Investor Day as part of our Exposure 2026 industry conference.

Speaker #1: Investor day will take place the afternoon of May 21st in Boston. We hope to see you there. With that, I'll turn the call over to Mark to walk through what we are seeing with our customers.

Steve Vintz: Now, with that said, we're also continuing to broaden our capabilities across asset types. We recently announced OT Discovery to secure cyber physical systems. These systems have historically required time-consuming deployments of specialized hardware, new agents, and bolt-on software to gain visibility. We've eliminated this friction by integrating OT Discovery directly into our core solution inside the Tenable One platform. This is particularly important as the number of OT devices explodes with AI data centers and build-outs. Finally, before I turn the call over to Mark, I want to remind everyone we will be hosting an Investor Day as part of our EXPOSURE 2026 Industry Conference. Investor Day will take place the afternoon of 21 May in Boston. We hope to see you there. With that, I'll turn the call over to Mark to walk through what we are seeing with our customers.

Speaker #2: Thanks, Steve. As Steve outlined, the cyber landscape is shifting at an unprecedented pace. And the conversations we are having with customers and partners reflect that shift.

Speaker #2: We are seeing a level of urgency that is different from even a month ago. Not just at the practitioner level, but across the C-suite and the board.

Steve Vintz: This is particularly important as the number of OT devices explodes with AI data centers and buildouts. Finally, before I turn the call over to Mark, I want to remind everyone we will be hosting an Investor Day as part of our EXPOSURE 2026 Industry Conference. Investor Day will take place the afternoon of 21 May in Boston. We hope to see you there. With that, I'll turn the call over to Mark to walk through what we are seeing with our customers.

Speaker #2: Initiatives like OpenAI TAC program and Anthropic Mythos have triggered a surge of inbound strategic customer conversations as organizations work to understand how to prepare for a world where vulnerabilities are discovered and exploited at machine speed.

Speaker #2: And the concerns we are hearing are consistent. First, customers are preparing for a massive increase in the volume of discovered vulnerabilities. They're concerned about the real possibility that AI models like Mythos can potentially chain multiple flaws into full system compromise.

Mark Thurmond: Thanks, Steve. As Steve outlined, the cyber landscape is shifting at an unprecedented pace, and the conversations we are having with customers and partners reflect that shift. We are seeing a level of urgency that is different from even a month ago, not just at the practitioner level, but across the C-suite and the board. Initiatives like OpenAI TAC program and Anthropic Mythos have triggered a surge of inbound strategic customer conversations as organizations work to understand how to prepare for a world where vulnerabilities are discovered and exploited at machine speed. The concerns we are hearing are consistent. First, customers are preparing for a massive increase in the volume of discovered vulnerabilities. They're concerned about the real possibility that AI models like Mythos can potentially chain multiple flaws into full system compromise.

Speaker #2: Second, they are realizing that their current remediation process will not scale to meet this new reality. A reoccurring theme from the hundreds of customer conversations we've had since these announcements is that our customers now see an increased urgency to prioritize and remediate exposures.

Speaker #2: Importantly, this is not just our perspective. Industry leaders in cybersecurity experts have been aggressively validating these points. For example, JPMorgan Chase published a blog that highlighted that AI is compressing the time from vulnerability discovery to exploitation.

Speaker #2: While Pat Cycles are often exceeding organizations' capacity. They also recommended that organizations need to focus effort where risk is highest rather than chasing volume indiscriminately.

Mark Thurmond: Second, they are realizing that their current remediation process will not scale to meet this new reality. A reoccurring theme from the hundreds of customer conversations we've had since these announcements is that our customers now see an increased urgency to prioritize and remediate exposures. Importantly, this is not just our perspective. Industry leaders and cybersecurity experts have been aggressively validating these points. For example, JPMorgan Chase published a blog that highlighted that AI is compressing the time from vulnerability discovery to exploitation, while patch cycles are often exceeding organizations' capacity. They also recommended that organizations need to focus effort where risk is highest rather than chasing volume indiscriminately. Additionally, a highly respected cybersecurity consulting firm recently noted that in an AI-driven world, sustainable advantage will belong to companies that own differentiated data and are embedded in mission-critical workflows.

Speaker #2: Additionally, a highly respected cybersecurity consulting firm recently noted that in an AI-driven world, sustainable advantage will belong to companies that own differentiated data and are embedded in mission-critical workflows.

Speaker #2: They also highlighted a shift from software that helps users do work to platforms that automate and execute that work directly. As Steve discussed earlier, this is where we believe Tenable is uniquely positioned.

Speaker #2: Our differentiation is rooted in four main pillars. First, our unmatched breadth of telemetry, combining native and third-party signals across the modern attack surface. Second, our proprietary exposure data fabric, which transforms fragmented signals into authoritative context.

Speaker #2: Third, our market-leading research and exposure intelligence, which continuously enriches and prioritizes the exposures that matter most. And fourth, Tenable Hexa AI within our platform, which is designed to help automate prioritization in remediation workflows to drive action at scale.

Mark Thurmond: They also highlighted a shift from software that helps users do work to platforms that automate and execute that work directly. As Steve Vintz discussed earlier, this is where we believe Tenable is uniquely positioned. Our differentiation is rooted in four main pillars. First, our unmatched breadth of telemetry, combining native and third-party signals across the modern attack surface. Second, our proprietary exposure data fabric, which transforms fragmented signals into authoritative context. Third, our market-leading research and exposure intelligence, which continuously enriches and prioritizes the exposures that matter most. Fourth, Tenable Hexa AI within our platform, which is designed to help automate prioritization and remediation workflows to drive action at scale. Taken together, these advantages help position Tenable to lead as the market shifts towards exposure management. We believe this creates a meaningful tailwind for Tenable.

Speaker #2: Taken together, these advantages help position Tenable to lead as the market shifts towards exposure management. We believe this creates a meaningful tailwind for Tenable.

Speaker #2: As organizations adapt to this new environment, we see evidence that many organizations are recognizing that traditional siloed tools are no longer sufficient and that consolidating onto a platform that provides unified visibility contextual prioritization and increasingly automated remediation is even more essential.

Speaker #2: We saw that play out in the quarter in several ways. First, our largest new logo of the quarter for Tenable One was a seven-figure transaction with a major financial institution in the Middle East.

Speaker #2: In this case, the customer displaced an incumbent competitor and chose Tenable One because they needed a more unified approach to understanding and prioritizing exposures across a large and complex environment.

Mark Thurmond: As organizations adapt to this new environment, we see evidence that many organizations are recognizing that traditional siloed tools are no longer sufficient, and that consolidating onto a platform that provides unified visibility, contextual prioritization, and increasingly automated remediation is even more essential. We saw that play out in the quarter in several ways. First, our largest new logo of the quarter for Tenable One was a $7-figure transaction with a major financial institution in the Middle East. In this case, the customer displaced an incumbent competitor and chose Tenable One because they needed a more unified approach to understanding and prioritizing exposures across a large and complex environment. Second, we secured a new $6-figure Tenable One deal driven by the need to secure the company's use of AI.

Speaker #2: Second, we secured a new six-figure Tenable One deal, driven by the need to secure the company's use of AI. This organization is proactively investing to prepare for the wave of AI-driven threats and vulnerabilities that we've been discussing.

Speaker #2: And to ensure they can identify and remediate AI risk faster. And third, we closed a significant six-figure OT deal with a large public sector organization responsible for critical infrastructure.

Speaker #2: As AI accelerates vulnerability discovery and exploitation, we are seeing more organizations focused on securing operational environments where the consequences of disruption extend well beyond IT.

Speaker #2: These wins reinforce what we see as a broader market shift. Customers are moving away from tools that create more noise and toward exposure management platforms that provide context, prioritization, and automated action.

Mark Thurmond: This organization is proactively investing to prepare for the wave of AI-driven threats and vulnerabilities that we've been discussing and to ensure they can identify and remediate AI risks faster. Third, we closed a significant six-figure OT deal with a large public sector organization responsible for critical infrastructure. As AI accelerates vulnerability discovery and exploitation, we are seeing more organizations focused on securing operational environments where the consequences of disruption extend well beyond IT. These wins reinforce what we see as a broader market shift. Customers are moving away from tools that create more noise and toward exposure management platforms that provide context, prioritization, and automated action. This is a key area of differentiator for Tenable One.

Speaker #2: This is a key area of differentiator for Tenable One. Our current momentum reinforces our conviction that our strategy is aligned to where the market is going with Tenable One and Hexa AI at the forefront of this shift towards exposure management and automated action.

Speaker #2: And finally, this week we announced an important step forward in how customers buy and adopt Tenable One, with new, flexible pricing and packaging. As AI drives an explosion in vulnerability discovery and increases the urgency to prioritize and remediate exposures at scale, customers are looking for platforms that can deliver value quickly without adding complexity to procurement or budgeting.

Speaker #2: Our new Flex model continues to price per asset; however, pricing will be consistent across all asset types, which creates predictable spend and removes frictions as customers scale their exposure management program across their entire attack surface.

Mark Thurmond: Our current momentum reinforces our conviction that our strategy is aligned to where the market is going with Tenable One and Hexa AI at the forefront of this shift towards exposure management and automated action. Finally, this week we announced an important step forward in how customers buy and adopt Tenable One with new flexible pricing and packaging. As AI drives an explosion in vulnerability discovery and increases the urgency to prioritize and remediate exposures at scale, customers are looking for platforms that can deliver value quickly without adding complexity to procurement or budgeting. Our new flex model continues to price per asset. However, pricing will be consistent across all asset types, which creates predictable spend and removes frictions as customers scale their exposure management program across their entire attack surface.

Speaker #2: Ultimately, we believe this new Flex pricing will help us reach more customers, accelerate options, and create a clear path to broader platform deployments over time.

Speaker #2: With that, I'll turn the call over to Matt to discuss our financial results.

Speaker #3: Thanks, Mark. Q1 was another quarter of very strong and steady execution. Revenue increased year over year by nearly 10%, and even more impressive, we converted more than half of that increase into operating income, once again demonstrating our ability to balance growth and profitability.

Speaker #3: We were pleased to have exceeded the high end of the range on every metric we guided to for the quarter, and we're raising our full-year outlook.

Mark Thurmond: Ultimately, we believe this new flex pricing will help us reach more customers, accelerate adoption, and create a clear path to broader platform deployments over time. With that, I'll turn the call over to Matt to discuss our financial results.

Speaker #3: Let's dive into the details. Revenue for the quarter was $262.1 million, representing growth of 9.6% year over year. The year-over-year growth in revenue for the quarter, as well as outperformance relative to guidance, was underpinned by a solid foundation of renewal business and an increase in new business growth.

Matthew Brown: Thanks, Mark. Q1 was another quarter of very strong and steady execution. Revenue increased year-over-year by nearly 10%, and even more impressive, we converted more than half of that increase into operating income, once again demonstrating our ability to balance growth and profitability. We were pleased to have exceeded the high end of the range on every metric we guided to for the quarter and are raising our full year outlook. Let's dive into the details. Revenue for the quarter was $262.1 million, representing growth of 9.6% year-over-year. The year-over-year growth in revenue for the quarter, as well as outperformance relative to guidance, was underpinned by a solid foundation of renewal business and an increase in new business growth. Professional services also drove upside to expectations.

Matt Brown: Thanks, Mark. Q1 was another quarter of very strong and steady execution. Revenue increased year-over-year by nearly 10%, and even more impressive, we converted more than half of that increase into operating income, once again demonstrating our ability to balance growth and profitability. We were pleased to have exceeded the high end of the range on every metric we guided to for the quarter and are raising our full year outlook. Let's dive into the details. Revenue for the quarter was $262.1 million, representing growth of 9.6% year-over-year. The year-over-year growth in revenue for the quarter, as well as outperformance relative to guidance, was underpinned by a solid foundation of renewal business and an increase in new business growth. Professional services also drove upside to expectations.

Speaker #3: Professional services also drove upside to expectations. Our percentage of recurring revenue remained high at 96% for the quarter. We're continuing to see growing momentum in Tenable One, with 41% of new business coming from the platform, an increase from Q1 in the prior year.

Speaker #3: Customers are increasingly turning to our platform as their solution of choice to manage risk across their attack surface, including AI. We added $406 new enterprise customers in the quarter.

Speaker #3: An increase of 12.5% compared to Q1 in the prior year. Many of which came directly into Tenable One. We added 43 net new six-figure deals and our net dollar expansion rate landed at 105%.

Matthew Brown: Our percentage of recurring revenue remained high at 96% for the quarter. We're continuing to see growing momentum in Tenable One, with 41% of new business coming from the platform, an increase from Q1 in the prior year. Customers are increasingly turning to our platform as their solution of choice to manage risk across their attack surface, including AI. We added 406 new enterprise customers in the quarter, an increase of 12.5% compared to Q1 in the prior year, many of which came directly into Tenable One. We added 43 net new six-figure deals, and our net dollar expansion rate landed at 105%. Non-GAAP gross margin was 82.2% for the quarter, an increase from 81.9% in Q1 2025.

Matt Brown: Our percentage of recurring revenue remained high at 96% for the quarter. We're continuing to see growing momentum in Tenable One, with 41% of new business coming from the platform, an increase from Q1 in the prior year. Customers are increasingly turning to our platform as their solution of choice to manage risk across their attack surface, including AI. We added 406 new enterprise customers in the quarter, an increase of 12.5% compared to Q1 in the prior year, many of which came directly into Tenable One. We added 43 net new six-figure deals, and our net dollar expansion rate landed at 105%. Non-GAAP gross margin was 82.2% for the quarter, an increase from 81.9% in Q1 2025.

Speaker #3: Non-GAAP gross margin was 82.2% for the quarter. An increase from 81.9% in Q1 2025. Once again, we've demonstrated our ability to slowly but steadily increase non-GAAP gross margin year over year.

Speaker #3: While sales within the Tenable One platform continue to represent a larger share of the total. Non-GAAP income from operations for the quarter was 61.9 million.

Speaker #3: Or 23.6% of revenue. Compared to 48.7 million, in Q1 2025. An increase of 27.1%. We're beginning to see the first signs of AI-driven operational efficiencies.

Speaker #3: As our internal use of AI capabilities expands, we're able to minimize headcount growth due to the increased productivity the technology is offering. Which is a trend we expect to continue throughout year.

Matthew Brown: Once again, we've demonstrated our ability to slowly but steadily increase non-GAAP gross margin year over year, while sales within the Tenable One platform continue to represent a larger share of the total. Non-GAAP income from operations for the quarter was $61.9 million or 23.6% of revenue compared to $48.7 million in Q1 2025, an increase of 27.1%. We're beginning to see the first signs of AI-driven operational efficiencies. As our internal use of AI capabilities expands, we're able to minimize headcount growth due to the increased productivity the technology is offering, which is a trend we expect to continue throughout the year. Non-GAAP earnings per share for the quarter was $0.47 compared to $0.36 in Q1 2025, an increase of 30.6%.

Matt Brown: Once again, we've demonstrated our ability to slowly but steadily increase non-GAAP gross margin year over year, while sales within the Tenable One platform continue to represent a larger share of the total. Non-GAAP income from operations for the quarter was $61.9 million or 23.6% of revenue compared to $48.7 million in Q1 2025, an increase of 27.1%. We're beginning to see the first signs of AI-driven operational efficiencies. As our internal use of AI capabilities expands, we're able to minimize headcount growth due to the increased productivity the technology is offering, which is a trend we expect to continue throughout the year. Non-GAAP earnings per share for the quarter was $0.47 compared to $0.36 in Q1 2025, an increase of 30.6%.

Speaker #3: Non-GAAP earnings per share for the quarter was 47 cents. Compared to 36 cents, in Q1 2025. An increase of 30.6%. The increase year over year reflects the increase in profitability combined with the decrease in diluted shares outstanding.

Speaker #3: Turning to the balance sheet. Cash and short-term investments totaled $360.3 million. We generated 88.6 million of unlevered free cash flow during the quarter, which is an all-time record.

Speaker #3: And represents 33.8% of revenue. During the first quarter, we repurchased 6.1 million shares for $130 million and have $207.6 million remaining on our current share repurchase authorization as of the end of the quarter.

Speaker #3: We continue to believe that our current share price trades at a discount relative to our true value. And that utilizing our strong balance sheet and cash flow generation to more aggressively repurchase shares is an effective use of capital.

Matthew Brown: The increase year over year reflects the increase in profitability combined with a decrease in diluted shares outstanding. Turning to the balance sheet. Cash and short-term investments totaled $360.3 million. We generated $88.6 million of unlevered free cash flow during the quarter, which is an all-time record and represents 33.8% of revenue. During Q1, we repurchased 6.1 million shares for $130 million and have $207.6 million remaining on our current share repurchase authorization as of the end of the quarter. We continue to believe that our current share price trades at a discount relative to our true value, and that utilizing our strong balance sheet and cash flow generation to more aggressively repurchase shares is an effective use of capital.

Matt Brown: The increase year over year reflects the increase in profitability combined with a decrease in diluted shares outstanding. Turning to the balance sheet. Cash and short-term investments totaled $360.3 million. We generated $88.6 million of unlevered free cash flow during the quarter, which is an all-time record and represents 33.8% of revenue. During Q1, we repurchased 6.1 million shares for $130 million and have $207.6 million remaining on our current share repurchase authorization as of the end of the quarter. We continue to believe that our current share price trades at a discount relative to our true value, and that utilizing our strong balance sheet and cash flow generation to more aggressively repurchase shares is an effective use of capital.

Speaker #3: We're realizing the benefit of these share repurchases, as our weighted average diluted shares outstanding in Q1 decreased 5% year over year and is now the lowest it has been in more than three years.

Speaker #3: Turning to the financial outlook for Q2 and full-year 2026. For Q2, we expect revenue to be in the range of $263 to $266 million, representing a year-over-year increase of 7.0% at the midpoint.

Speaker #3: For full-year 2026, we are raising our guidance range to $1.068 to $1.078 billion. Representing a year-over-year increase of 7.4% at the midpoint. We expect non-GAAP income from operations for Q2 to be in the range of $61 to $64 million.

Matthew Brown: We are realizing the benefit of these share repurchases as our weighted average diluted shares outstanding in Q1 decreased 5% year over year and is now the lowest it has been in more than 3 years. Turning to the financial outlook for Q2 and full year 2026. For Q2, we expect revenue to be in the range of $263 to 266 million, representing a year over year increase of 7.0% at the midpoint. For full year 2026, we are raising our guidance range to $1.068 to 1.078 billion, representing a year over year increase of 7.4% at the midpoint. We expect non-GAAP income from operations for Q2 to be in the range of $61 to 64 million or 23.6% of revenue at the midpoint.

Matt Brown: We are realizing the benefit of these share repurchases as our weighted average diluted shares outstanding in Q1 decreased 5% year over year and is now the lowest it has been in more than 3 years. Turning to the financial outlook for Q2 and full year 2026. For Q2, we expect revenue to be in the range of $263 to 266 million, representing a year over year increase of 7.0% at the midpoint. For full year 2026, we are raising our guidance range to $1.068 to 1.078 billion, representing a year over year increase of 7.4% at the midpoint. We expect non-GAAP income from operations for Q2 to be in the range of $61 to 64 million or 23.6% of revenue at the midpoint.

Speaker #3: Or 23.6% of revenue at the midpoint. For full-year 2026, we are raising our guidance range for non-GAAP operating income to $252 million to $262 million.

Speaker #3: Or 24.0% of revenue at the midpoint. Representing a year-over-year increase of $210 basis points. We expect non-GAAP net income for Q2 to be in the range of $53 to $56 million.

Speaker #3: Representing a year-over-year increase of 31.5% at the midpoint. For full-year 2026, we are raising our guidance range for non-GAAP net income to $222 to $232 million.

Speaker #3: Representing a year-over-year increase of 16.8% at the midpoint. We expect non-GAAP earnings per share for Q2 to be in the range of $0.46 to $0.48 per share.

Matthew Brown: For full year 2026, we are raising our guidance range for non-GAAP operating income to $252 to 262 million or 24.0% of revenue at the midpoint, representing a year over year increase of 210 basis points. We expect non-GAAP net income for Q2 to be in the range of $53 to 56 million, representing a year over year increase of 31.5% at the midpoint. For full year 2026, we are raising our guidance range for non-GAAP net income to $222 to 232 million, representing a year over year increase of 16.8% at the midpoint.

Matt Brown: For full year 2026, we are raising our guidance range for non-GAAP operating income to $252 to 262 million or 24.0% of revenue at the midpoint, representing a year over year increase of 210 basis points. We expect non-GAAP net income for Q2 to be in the range of $53 to 56 million, representing a year over year increase of 31.5% at the midpoint. For full year 2026, we are raising our guidance range for non-GAAP net income to $222 to 232 million, representing a year over year increase of 16.8% at the midpoint.

Speaker #3: Representing a year-over-year increase of 38.2% at the midpoint. For full-year 2026, we are raising our guidance range for non-GAAP earnings per share to $1.90 to $1.98 per share.

Speaker #3: Representing a year-over-year increase of 22.0% at the midpoint. We're pleased to have been able to carry forward the momentum we saw in the second half of 2025 into the first quarter.

Speaker #3: And are excited about the growing opportunity we are seeing as customers lean into exposure management to reduce risk. Demand continues to be driven by Tenable One, where we see tremendous benefits both for our customers and as a foundation to continue to drive balanced growth.

Matthew Brown: We expect non-GAAP earnings per share for Q2 to be in the range of $0.46 to $0.48 per share, representing a year-over-year increase of 38.2% at the midpoint. For full year 2026, we are raising our guidance range for non-GAAP earnings per share to $1.90 to $1.98 per share, representing a year-over-year increase of 22.0% at the midpoint.

Matt Brown: We expect non-GAAP earnings per share for Q2 to be in the range of $0.46 to $0.48 per share, representing a year-over-year increase of 38.2% at the midpoint. For full year 2026, we are raising our guidance range for non-GAAP earnings per share to $1.90 to $1.98 per share, representing a year-over-year increase of 22.0% at the midpoint.

Speaker #3: We hope to see you all at Investor Day on May 21st in Boston. Where we will provide even more context around the impact of AI, our roadmap, and midterm financial expectations.

Speaker #3: Finally, thank you to the entire Tenable team for their contribution to our strong results. With that, we are happy to open the call up for questions.

Mark Thurmond: We're pleased to have been able to carry forward the momentum we saw in H2 2025 into Q1 and are excited about the growing opportunity we are seeing as customers lean into exposure management to reduce risk. Demand continues to be driven by Tenable One, where we see tremendous benefits both for our customers and as a foundation to continue to drive balanced growth. We hope to see you all at Investor Day on 21 May in Boston, where we will provide even more context around the impact of AI, our roadmap, and midterm financial expectations. Finally, thank you to the entire Tenable team for their contribution to our strong results. With that, we are happy to open the call up for questions. Operator?

Matt Brown: We're pleased to have been able to carry forward the momentum we saw in H2 2025 into Q1 and are excited about the growing opportunity we are seeing as customers lean into exposure management to reduce risk. Demand continues to be driven by Tenable One, where we see tremendous benefits both for our customers and as a foundation to continue to drive balanced growth. We hope to see you all at Investor Day on 21 May in Boston, where we will provide even more context around the impact of AI, our roadmap, and midterm financial expectations. Finally, thank you to the entire Tenable team for their contribution to our strong results. With that, we are happy to open the call up for questions. Operator?

Speaker #3: Operator?

Speaker #1: Thank you. We will now be conducting a question and answer session. If you would like to ask a question, please press star one on your telephone keypad.

Speaker #1: A confirmation tone will indicate that your line is in the question queue. You may press star two if you would like to remove your question from the queue.

Speaker #1: For participants using speaker equipment, it may be necessary to pick up your handset before pressing the star keys. We ask that analysts limit themselves to one question so that others may have the opportunity to do so as well.

Speaker #1: One moment, please, while we pull for questions. Our first question comes from Sakit Kalia with Barclays. Please proceed with your question.

Speaker #2: Okay, great. Hey, guys, thanks for taking my question here. I'll keep it to one. Stephen, Mark, it's clear that the newly discovered vulnerabilities through Methos are driving more interest and exposure management.

Operator: Thank you. We will now be conducting a question and answer session. If you would like to ask a question, please press star one on your telephone keypad. A confirmation tone will indicate that your line is in the question queue. You may press star two if you would like to remove your question from the queue. For participants using speaker equipment, it may be necessary to pick up your handset before pressing the star keys. We ask that analysts limit themselves to one question so that others may have the opportunity to do so as well. One moment please while we pull for questions. Our first question comes from Saket Kalia with Barclays. Please proceed with your question.

Operator: Thank you. We will now be conducting a question-and-answer session. If you would like to ask a question, please press star one on your telephone keypad. A confirmation tone will indicate that your line is in the question queue. You may press star two if you would like to remove your question from the queue. For participants using speaker equipment, it may be necessary to pick up your handset before pressing the star keys. We ask that analysts limit themselves to one question so that others may have the opportunity to do so as well. One moment please while we pull for questions. Our first question comes from Saket Kalia with Barclays. Please proceed with your question.

Speaker #2: I think that shows in a lot of your commentary. But I want to zoom out from some of your prepared remarks. I guess I'm curious how you think about frontier models longer term.

Speaker #2: In the exposure management space—and maybe specifically—do you think customers are going to look to these models as alternatives to VM tools? Or do they actually heighten awareness of exposure management tools, and therefore, is this maybe more of a complement to the industry long term?

Saket Kalia: Okay, great. Hey, guys. Thanks for taking my question here. I'll keep it to one. Steve and Mark, it's clear that the newly discovered vulnerabilities through Mythos are driving more interest in exposure management. I think that shows in a lot of your commentary. I wanna zoom out from some of your prepared remarks. I guess I'm curious how you think about frontier models longer term in the exposure management space. Maybe specifically, do you think customers are gonna look to these models as alternatives to VM tools, or do they actually heighten awareness on exposure management tools, therefore this is maybe more of a complement to the industry long term? Sorry, I know there's a lot there, does that make sense?

Speaker #2: Sorry, I know there's a lot there, but does that make sense?

Speaker #3: Yes, Sakit. Hi, this is Steve. I'll take a stab at this. First and foremost, AI is a massive opportunity for Tenable. I want to be very clear about that.

Speaker #3: Mark and I cannot be more excited, more energized about the opportunity that's in front of us. We are, and will, partner with the frontier model companies to help our customers reduce risk at machine speed.

Speaker #3: It is not AI versus security or AI versus Tenable. It is AI enables Tenable. In the AI era, it's going to be more infrastructure, more identities, more applications, more agents.

Speaker #3: And therefore more speed and more exposures. And that's why exposure management is more important now than ever. And so the frontier model companies make us better.

Speaker #3: It starts with our data. It's something I talked about earlier in the call, the breadth and depth of the data we've collected. Over two-plus decades is unparalleled.

Steve Vintz: Yes, Saket. Hi, this is Steve. I'll take a stab at this. First and foremost, AI is a massive opportunity for Tenable. I want to be very clear about that. Mark and I cannot be more excited, more energized about the opportunity that's in front of us. We are and will partner with the frontier model companies to help our customers reduce risk at machine speed. It is not AI versus security or AI versus Tenable. It is AI enables Tenable. In the AI era, it's going to be more infrastructure, more identities, more applications, more agents, and therefore more speed and more exposures. That's why exposure management is more important now than ever. The frontier model companies make us better. It starts with our data. It's something I talked about earlier in the call.

Speaker #3: We're deeply embedded behind the garden wall in runtime infrastructure. The data we collect is unique. It's based on domain expertise, years of trust, continuous scanning and exposure analysis.

Speaker #3: This is something that general models can't replicate. And at its core, the frontier model companies are reasoning engines. They're not in the business to deploy an agents and sensors on your network.

Speaker #3: And they're not in the business of deploying those in your OT and industrial control systems environments or auditing configs and scanning images in your public cloud environment.

Speaker #3: But we are. And that's something that we want to make clear. And the last comment I'll say here is that we're applying AI. AI makes us better, allows us to reimagine the value that we can deliver to customers and the bigger problem that we can solve.

Steve Vintz: The breadth and depth of the data we've collected over two-plus decades is unparalleled. We're deeply embedded, behind the garden wall, in runtime infrastructure. The data we collect is unique. It's based on domain expertise, years of trust, continuous scanning and exposure analysis. This is something the general models can't replicate. At its core, the frontier model companies are reasoning engines. They're not in the business of deploying agents and sensors on your network, and they're not in the business of deploying those in your OT and industrial control systems environments or auditing configs and scanning images in your public cloud environment. We are, and that's something that we wanna make clear. You know, the last comment I'll say here is that we're applying AI.

Speaker #3: The data we have delivers valuable insights to customers so they can take action to determine ethically to reduce risk. And for that, AI is at the center of what we do to not only augment human operators, but also gives us the critical context to develop a deeper understanding of exposure.

Speaker #3: So we can help our customers provide and orchestrate the fixes and move at machine speed. And move at the speed of trust. Yeah. And listen, I'll just add from the field perspective, literally having hundreds of calls here over the last few weeks.

Speaker #3: This is a force multiplier for us. The amount of feedback we're getting from our customers this is a massive opportunity. This is like a game-changing opportunity for us in the exposure management space.

Steve Vintz: AI makes us better, allows us to reimagine the value that we can deliver to customers and the bigger problem that we can solve. The data we have delivers valuable insights to customers so they can take action deterministically to reduce risk. For that, AI is at the center of what we do to not only augment human operators, but also gives us the critical context to develop a deeper understanding of exposure, so we can help our customers provide and orchestrate the fixes and move at machine speed and move at the speed of trust.

Steve Vintz: AI makes us better, allows us to reimagine the value that we can deliver to customers and the bigger problem that we can solve. The data we have delivers valuable insights to customers so they can take action deterministically to reduce risk. For that, AI is at the center of what we do to not only augment human operators but also gives us the critical context to develop a deeper understanding of exposure, so we can help our customers provide and orchestrate the fixes and move at machine speed and move at the speed of trust.

Speaker #3: And, as Steve discussed, it needs to be very clear. We are partnering with Anthropic, and we are partnering with OpenAI. We are building Claude into Hexa.

Speaker #3: Right? So when you look at this partnership, it is just going to strengthen Tenable and Tenable One. And it will drive more demand. Right?

Speaker #3: There is no question about that. And we're kind of seeing that in these initial conversations. And then when you take what the frontier labs are doing and then building out and continuing to drive our innovation with Tenable One, focused on the entire attack surface, focused on world-class pinpoints prioritization, because now when you're dealing with thousands or hundreds of thousands of vulnerabilities, you need to be damn accurate.

Mark Thurmond: Yeah. Listen, I'll just add from the field perspective, you know, literally having hundreds of calls here over the last few weeks. This is a force multiplier for us. You know, the amount of feedback we're getting from our customers, this is a massive opportunity. This is like a game-changing opportunity for us in the exposure management space. As Steve Vintz discussed, it needs to be very clear, we are partnering with Anthropic and we are partnering with OpenAI. We are building Claude into Hexa, right? When you look at this partnership, it is just gonna strengthen Tenable and Tenable One, and it will drive more demand, right? There is no question about that, and we're kind of seeing that in these initial conversations.

Speaker #3: Where you need to apply your resources. And prioritization has never ever been more important in one of the massive gold standards we have here at Tenable.

Speaker #3: You take a look at the reporting and the governance, the compliance needs you need when you get this massive tsunami of bonds coming in.

Speaker #3: The agentic workflows we're now doing with Hexa. The remediation capability going into OT environments. So it's a bit long-winded, but we've been dealing with this for the last few weeks with customers.

Mark Thurmond: When you take what, you know, what the frontier labs are doing, and then building out and continuing to drive our innovation with Tenable One, focused on the entire attack surface, focused on world-class pinpoint prioritization. Because now when you're dealing with thousands or hundreds of thousands of vulnerabilities, you need to be damn accurate where you need to apply your resources. Prioritization has never, ever been more important, and one of the massive gold standards we have here at Tenable. You take a look at the reporting and the governance, the compliance needs you need when you've got this massive tsunami of bots coming in.

Speaker #3: And I'm telling you, we feel unbelievably optimistic that this is going to be a force multiplier for the exposure management category moving forward.

Speaker #2: That's super helpful, guys. Thanks very much. And look forward to the analyst day.

Speaker #1: Our next question comes from Brian Essex with JPMorgan. Please proceed with your question.

Speaker #4: Hi. Good afternoon. And thank you for taking the question. Steve, question for you. We're hearing a lot about security software getting access to budgets outside of traditional IT security budgets.

Mark Thurmond: The agentic workflows we're now doing with Hexa, the remediation capability, going into OT environments. It's a bit long-winded, but we've been dealing with this, you know, for the last few weeks with customers, and I'm telling you, we feel unbelievably optimistic that this is going to be a force multiplier for the exposure management category moving forward.

Speaker #4: Particularly as business unit leaders slap AI on top of their budgets and get more allocation. And I think you guys alluded to it a bit last quarter.

Speaker #4: We heard it from Veronis last night. But I wonder if you could update us to your conversations and what you're seeing maybe the puts and takes involved.

Speaker #4: Are you getting meaningful incremental budget in is this a tailwind to close rates? Or are the additional stakeholders extending sales cycles? We'd love just a little you.

Saket Kalia: That's super helpful, guys. Thanks very much and look forward to the Analyst Day.

Operator: Our next question comes from Brian Essex with J.P. Morgan. Please proceed with your question.

Operator: Our next question comes from Brian Essex with JPMorgan. Please proceed with your question.

Speaker #3: Sure. I think a couple of things here. Certainly, with Mithos and other frontier model companies, we have to acknowledge the offense just got an upgrade.

Brian Essex: Hi, good afternoon, and thank you for taking the question. You know, Steve, question for you. You know, we're hearing a lot about security software getting access to budgets outside of traditional IT security budgets, particularly as business unit leaders, you know, slap AI on top of their budgets and get more allocation. I think you guys alluded to it a bit last quarter. We heard it from Varonis last night. I wonder if you could update us to your conversations and what you're seeing, maybe the puts and takes involved. Are you getting meaningful incremental budget? Is this a tailwind to close rates, or are the additional stakeholders extending sales cycles? Would just love just a little bit more color on that. Thank you.

Speaker #3: And I think we all know that. But our customers know that. I think boards and CEOs also realize that outside of the security community.

Speaker #3: And so consequently, it means more vulnerabilities, more threats, more exploits. And so there's a window here where adversaries hold an early advantage. And that's exactly why the urgency around exposure management has never been higher.

Speaker #3: I will tell you this. The threat of and the impending tsunami of new vulnerabilities we're talking about an order of magnitude of 10 or 20 X more than what we currently have today.

Steve Vintz: Sure, I think a couple things here. Certainly with Mythos and other frontier model companies, we have to acknowledge the offense just got an upgrade. I think we all know that, our customers know that. I think boards and CEOs also realize that outside of the security community. Consequently, it means more vulnerabilities, more threats, more exploits. There's a window here where adversaries hold an early advantage, and that's exactly why the urgency around exposure management's never been higher. I will tell you this, you know, the threat of and the impending tsunami of new vulnerabilities, we're talking about an order of magnitude of 10 or 20x more than what we currently have today. There's roughly 300,000 CVEs.

Speaker #3: There's roughly 300,000 CVEs who are likely to see 3 million, maybe 6 million over the course of time. An increase in the known depths.

Speaker #3: I think people realize that the threat's real. This is a security challenge with boards and CEOs are getting involved, number one. Number two, we will likely see this is not tied to guidance or anything like that that we're providing today.

Speaker #3: But we will likely see sizable increases in security budgets. We will likely see a healthy spending environment. We will likely see the acceleration of security projects.

Speaker #3: Not only in the private sector, but also in the public sector. We're having regular and ongoing conversations with the ONCD, the Office of the National Cybersecurity Director.

Speaker #3: They arguably have the best intel on Anthropic and some of the other frontier model companies. I think they realize what's potentially coming our way.

Steve Vintz: We're likely to see $3 million, maybe $6 million over the course of time, an increase in the known CVEs. I think people realize that the threat's real. This is a security challenge, and boards and CEOs are getting involved, number one. Number two, we will likely see. This is not tied to guidance or anything like that we're providing today, but we will likely see cyclical increases in security budgets. We'll likely see a healthy spending environment. We will likely see the acceleration of security projects, not only in the private sector, but also in the public sector. We're having regular and ongoing conversations with the ONCD, the Office of the National Cyber Director. They arguably have the best intel on Anthropic and some of the other frontier model companies. I think they realize what's potentially coming our way, and they're moving quickly.

Speaker #3: And they're moving quickly. So I think all of this creates an incredible opportunity for us in exposure management. And yes, I think it's fair to say Mark can provide more perspective here, factoring into every sales conversation.

Speaker #4: Yeah. No question. One of the we highlighted it on one of the deals that we discussed. Right? There is definitely spend. And I'll call it there is security, AI spend that is becoming clean and you can see it when you're talking to CISOs.

Steve Vintz: We will likely see the acceleration of security projects, not only in the private sector, but also in the public sector. We're having regular and ongoing conversations with the ONCD, the Office of the National Cyber Director. They arguably have the best intel on Anthropic and some of the other frontier model companies. I think they realize what's potentially coming our way, and they're moving quickly. I think all of this creates incredible opportunity for us in exposure management. Yes, I think it's fair to say Mark can provide more perspective here, factoring into every sales conversation.

Speaker #4: But there's also discretionary spend, right? We saw this in a bunch of deals where we're working with the security contacts that we have, especially around AI exposure—looking at discovering shadow AI, looking at protecting and configuration and best practices for AI-related deployments in the cloud, and looking at governing.

Steve Vintz: I think all of this creates incredible opportunity for us in exposure management. Yes, I think it's fair to say Mark can provide more perspective here, factoring into every sales conversation.

Speaker #4: There was budget that they pulled in to add on to these Tenable One deals. So I think that will become more mainstream over time.

Speaker #4: It won't be so much discretionary. It will be built in and moved in to the cybersecurity budget. But there's no question, as Steve said, it's every single call starts off with the AI security discussion.

Mark Thurmond: Yeah, no question. One of the, you know, we highlighted it on one of the deals that we discussed, right? There is definitely spend, you know, and I'll call it there is security AI spend that is becoming clean, and you can see it when you're talking to CISOs. There's also discretionary spend, right? We saw in a bunch of deals, right, where we're working with the security contacts that we have, where they would when we start talking about especially, you know, AI exposure, looking at discovering shadow AI, looking at protecting and configuration best practices for AI-related deployments in the cloud, looking at governing. There was budget that they pulled in to add on to these Tenable One deals. I think that will become more mainstream over time. It won't be so much discretionary.

Speaker #4: It's that omnipresent. Great. That's helpful color. And Mark, thank you for I'm sure our CISO appreciates you flagging his blog. So thank you on behalf of him.

Speaker #3: Very, very, very well done blog, by the way. A lot of people downloaded it. Phenomenal information there.

Speaker #4: All.

Speaker #1: Our next question comes from Rob Owens with Piper Sandler. Please proceed with your question. Rob Owens with Piper Sandler. Okay. We'll move on.

Mark Thurmond: There was budget that they pulled in to add on to these Tenable One deals. I think that will become more mainstream over time. It won't be so much discretionary. It will be built in and moved into the cybersecurity budget. There's no question, as Steve Vintz said, it's every single call starts off with the AI security discussion. It's that omnipresent.

Mark Thurmond: It will be built in and moved in to the cybersecurity budget. There's no question, as Steve Vintz said, it's every single call starts off with the AI security discussion. It's that omnipresent.

Speaker #5: Sorry about that. Are you there? Hello?

Speaker #1: Oh, there you go.

Speaker #5: I apologize. I had the mute on. I think I'd learn after all this time. Mark Steve, very bullish comments from both of you. And clearly, this could be a watershed moment for the industry overall.

Brian Essex: Great. That's helpful color. Mark, thank you. I'm sure our CISO appreciates you flagging his blog. Thanks on behalf of him.

Mark Thurmond: Very, very, very well done blog, by the way. A lot of people downloaded. Phenomenal information there.

Mark Thurmond: Very, very, very well-done blog, by the way. A lot of people downloaded. Phenomenal information there.

Speaker #5: But I wanted to pivot a little bit to sales capacity. And noting sales and marketing growing less than 5% year over year this quarter, maybe help us understand where you guys are from a capacity standpoint as this opportunity is in front of you right now.

Brian Essex: I'll pass-

Operator: Our next question comes from Rob Owens with Piper Sandler. Please proceed with your question. Rob Owens with Piper Sandler? Okay. We'll move on.

Speaker #5: And what are your intentions with the new CRO in place to maybe lean in a little bit in terms of that sales and marketing line as we move forward?

Speaker #5: Because I think investors would prefer points of growth over points of margin at this point in your life cycle. Thanks.

Rob Owens: Sorry about that. Are you there? Hello?

Speaker #4: Yeah, no. Awesome question. And yeah, no question. And as we discussed numerous times, we are laser focused on growth, right? Number one factor here at Tenable is getting the growth accelerated.

Operator: Oh, there you go.

Rob Owens: I apologize. I had the mute on. You'd think I'd learn after all this time. Mark, Steve, very bullish comments from both of you, and clearly this could be a watershed moment for the industry overall. I wanted to pivot a little bit towards sales capacity and noting sales and marketing growing, you know, less than 5% year-over-year this quarter. Maybe help us understand, you know, where you guys are from a capacity standpoint as this opportunity's in front of you right now, and what are your intentions with the new CRO in place to maybe lean in a little bit in terms of that sales and marketing line as we move forward? I think investors would prefer points of growth over points of margin at this point in your life cycle. Thanks.

Speaker #4: Yeah, super excited to have a new CRO, Dino DiMarino, who joined Tenable. Our CRO, Dave Faringa, had retired. He did an incredible job here at Tenable.

Speaker #4: But Dino is phenomenal. And has been here for a short time period, but already making an impact. And when we look at sales capacity, it's something literally we look at on a weekly basis.

Speaker #4: We made some decisions coming into 2026 to add some incremental capacity. And we're actually seeing that pay off, which is great. We are evaluating some of the faster-growing regions and countries to look at adding additional sales capacity.

Steve Vintz: Yeah.

Speaker #4: Especially when we start seeing some of the pipeline growth. And we see some of the Tenable One activity and some of these faster-growing regions.

Mark Thurmond: No, awesome question. Yeah, no question. As we discussed numerous times, we are laser-focused on growth, right? Number one factor here at Tenable is getting the growth accelerated. Yeah, super excited to have a new CRO, Dino DiMarino, who joined Tenable. Our CRO, David Feringa, had retired, who did an incredible job here at Tenable. Dino is phenomenal and, you know, has been here for a short time period but already making an impact. When we look at sales capacity, it's something literally we look at on a weekly basis. We made some decisions coming into 2026 to add some incremental capacity, and we're actually seeing that pay off, which is great.

Speaker #4: So, it is something we are absolutely evaluating. We also, though, are spending a huge amount of time on productivity per seller. So, we're using a bunch of AI technology to get more efficiency out of our sellers.

Speaker #4: So our sellers can produce more at a lower cost, taking away a massive amount of manual processes and tasks that slowed them down, that took away from customer-facing time.

Speaker #4: We're removing those obstacles, and we're literally returning a significant amount of time back, where our sellers are in front of more customers and partners on a daily basis.

Mark Thurmond: We are evaluating some of the faster-growing regions and countries to look at adding additional sales capacity, especially, you know, when we start seeing some of the pipeline growth and we see some of the Tenable One activity in some of these faster-growing regions. It is something we are absolutely evaluating. We also, though, are spending a huge amount of time on productivity per seller. We're using a bunch of AI technology to get more efficiency out of our sellers, so our sellers can produce more at a lower cost, taking away a massive amount of manual processes and tasks that slowed them down, that took away from customer-facing time. We're removing those obstacles, and we're literally returning a significant amount of time back where our sellers are in front of more customers and partners on a daily basis. We are all over it. We're evaluating it.

Speaker #4: So, we are all over it. We're evaluating it. We made that move to add some capacity, and we're going to continue to tweak that as we see kind of the productivity improve.

Speaker #4: And we see pipeline build continue to grow.

Speaker #5: Yeah. And Rob, this is Matt. I'll just add on to what Mark was saying there. You heard in some of my prepared remarks, I'd called out our use of AI in the beginning to see the impact on the efficiency that we're gaining there.

Speaker #5: That's exactly what Mark is talking about there—where we're able to actually increase sales capacity and quota capacity, while reducing costs overall because we're rotating those dollars out of other non-quota-carrying areas. And that's helping. We're able to do that through the use of some AI technology.

Mark Thurmond: We're removing those obstacles, and we're literally returning a significant amount of time back where our sellers are in front of more customers and partners on a daily basis. We are all over it. We're evaluating it. We made that move to add some capacity, and we're gonna continue to tweak that as we see kind of the productivity improve and we see pipeline builds continue to grow.

Speaker #6: All right. Thank you.

Mark Thurmond: We made that move to add some capacity, and we're gonna continue to tweak that as we see kind of the productivity improve and we see pipeline builds continue to grow.

Speaker #1: Our next question comes from Adam Board with Steeple. Please proceed with your question.

Matthew Brown: Rob, this is Matthew. I'll just add on what Mark was saying there. You heard in some of my prepared remarks, I'd called out our use of AI, and it's beginning to see the impact on the efficiency gain in there. That's exactly what Mark is talking about there, where we're able to actually increase sales capacity and quota capacity, while reducing costs overall because we're rotating those dollars out of other non-quota carrying areas. That's helping, we're able to do that through the use of some AI technology.

Speaker #7: Great. And thanks so much for taking the question. Maybe just building off the last question around some of the operational efficiencies. Matt, maybe a follow-up is as you continue to introduce Hexa and introduce more AI into the offerings, and maybe we'll hear a lot more about this at the analyst day in a month.

Matt Brown: Rob, this is Matt. I'll just add on what Mark was saying there. You heard in some of my prepared remarks, I'd called out our use of AI, and it's beginning to see the impact on the efficiency gain in there. That's exactly what Mark is talking about there, where we're able to actually increase sales capacity and quota capacity, while reducing costs overall because we're rotating those dollars out of other non-quota carrying areas. That's helping, we're able to do that through the use of some AI technology.

Speaker #7: But how do we think about the flip side to the efficiencies with higher spend, and the impact that could have on gross margin? Thanks.

Speaker #5: Sure. Yeah. As you know, cloud costs are one of our largest expenditures. And it's something that we focus quite a bit on optimizing. But the truth is today, we get a better trade in leaning into AI spend and compute power.

David Brown: All right. Thank you.

Rob Owens: All right. Thank you.

Operator: Our next question comes from Adam Borg with Stifel. Please proceed with your question.

Speaker #5: There's a bigger payoff there on the extra efficiency and capacity that we're able to gain. So as you look in total, at our P&L, that model that I laid out in terms of adding incremental margin, I think I've said this over the past couple of quarters, and it holds true today.

Adam Borg: Great, thanks so much for taking the question. Maybe just building off the last question around some of the operational efficiencies, Matt. Maybe a follow-up is, you know, as you continue to introduce Hexa and introduce more AI into the offerings, and maybe we'll hear a lot more about this at the Analyst Day in a month. How do we think about the flip side to the efficiencies with higher spend and the impact that could have on gross margin? Thanks.

Speaker #5: Where that's going to show up is mostly in G&A, a little bit in sales and marketing. Tiny bit in gross margin. And then R&D is probably going to be roughly consistent as a percentage of revenue.

Matthew Brown: Sure. Yeah, as you know, cloud costs are one of our, one of our largest expenditures, and it's something that we focus quite a bit on optimizing. The truth is today, we get a better trade in leaning into AI spend and compute power. There's a bigger payoff there on the extra efficiency and capacity that we're able to gain. As you look, in total at our P&L, that model that I laid out in terms of adding incremental margin, I think I've said this over the past couple quarters, and it holds true today. Where that's gonna show up is mostly in G&A, a little bit in sales and marketing, tiny bit in gross margin, and then R&D is probably gonna be roughly consistent as a percentage of revenue.

Matt Brown: Sure. Yeah, as you know, cloud costs are one of our, one of our largest expenditures, and it's something that we focus quite a bit on optimizing. The truth is today, we get a better trade in leaning into AI spend and compute power. There's a bigger payoff there on the extra efficiency and capacity that we're able to gain. As you look, in total at our P&L, that model that I laid out in terms of adding incremental margin, I think I've said this over the past couple quarters, and it holds true today. Where that's gonna show up is mostly in G&A, a little bit in sales and marketing, tiny bit in gross margin, and then R&D is probably gonna be roughly consistent as a percentage of revenue.

Speaker #5: And we're doing that through making sure that we're optimizing our cloud costs for sure. And that gross margin remains strong. But also just optimizing some of the tools that we have at our disposal now, which is really powerful.

Speaker #7: Great. Thanks so much.

Speaker #1: Our next question comes from Mike, who is with Needham & Co. Please proceed with your question.

Speaker #8: Hey, team. Thanks for taking the questions here and congrats on a strong start to the year. I just wanted to come back to the I know CCP is a weaker indicator here.

Speaker #8: But we've been looking, obviously, at the CCP versus the CRPO. And that delta that's widened in recent quarters. It seemed to converge this quarter.

Speaker #8: And I just wanted to get a better sense of how CCP/CRPO played out in Q1. Should we expect this convergence to play out? Or no, we should expect a widening now over the rest of the year.

Matthew Brown: We're doing that through, making sure that we're optimizing our cloud costs for sure, and that gross margin remains strong, but also just optimizing some of the tools that we have at our disposal now, which is really powerful.

Matt Brown: We're doing that through, making sure that we're optimizing our cloud costs for sure, and that gross margin remains strong, but also just optimizing some of the tools that we have at our disposal now, which is really powerful.

Speaker #8: Any color there would be beneficial. Thank you.

Speaker #5: Sure. Yeah. Yeah. You're going to continue to see some fluctuation there. And the delta between CCB and CRPO will likely bounce around a bit because number one, seasonality plays a role.

Adam Borg: Great. Thanks so much.

Operator: Our next question comes from Mike Cikos with Needham & Company. Please proceed with your question.

Operator: Our next question comes from Mike Cikos with Needham & Co. Please proceed with your question.

Mike Cikos: Hey, team. Thanks for taking the questions here and congrats on a strong start to the year. I just wanted to come back to the I know CCB is a weaker indicator here, but we've been looking obviously at the CCB versus the CRPO and that delta that's widened in recent quarters. It seemed to converge this quarter, and I just wanted to get a better sense of how CCB/CRPO played out in Q1. Should we expect this convergence to play out or no, we should expect a widening now over the rest of the year? Any color there would be beneficial. Thank you.

Speaker #5: And number two, we're continuing to work through an anniversary some of the noise that we saw in both billing duration and contract duration. So it narrowed this quarter.

Speaker #5: It will likely widen again next quarter. There's not much to read into there, actually. Having said all of that, we're happy with where our billing came in, our commitment came in this quarter.

Speaker #5: Which gave us the confidence to not only beat revenue for the quarter, but then to take up the guidance for the full year. So we're happy with where things are coming in.

Matthew Brown: Sure. I, you're gonna continue to see some fluctuation there in the delta between CCB and CRPO will likely bounce around a bit because, number one, seasonality plays a role, and number two, we're continuing to work through and anniversary some of the noise that we saw in both billing duration and contract duration. It narrowed this quarter. It will likely widen again next quarter. There's not much to read into there, actually. Having said all of that, we're happy with where our billings came in and our commitments came in this quarter, which gave us the confidence to not only beat revenue for the quarter but then to take up the guidance for the full year. We're happy with where things are coming in.

Matt Brown: Sure. I, you're gonna continue to see some fluctuation there in the delta between CCB and CRPO will likely bounce around a bit because, number one, seasonality plays a role, and number two, we're continuing to work through and anniversary some of the noise that we saw in both billing duration and contract duration. It narrowed this quarter. It will likely widen again next quarter. There's not much to read into there, actually. Having said all of that, we're happy with where our billings came in and our commitments came in this quarter, which gave us the confidence to not only beat revenue for the quarter but then to take up the guidance for the full year. We're happy with where things are coming in.

Speaker #8: Terrific. Thank you.

Speaker #1: Our next question comes from MetaMarshall with Morgan Stanley. Please proceed with your question.

Speaker #9: Great. Thanks. Maybe just coming back to the influx of business that you guys are seeing for Tenable One and exposure management. Just driven by the AI risk headlines, customers are seeing do you think that they have enough knowledge of what that customers have enough knowledge of what they need or what the potential weaknesses are to speed up decision-making processes?

Speaker #9: Or are they still are some of these sales cycles potentially longer just as they try to evaluate kind of what the changes to the environment are?

Speaker #9: Just any reflection on sales cycle.

Speaker #5: Yeah. No, no. Totally. Very, very good question. A couple of points there. We are still doing a lot of education. As we hit on the beginning of this call, we've taken hundreds of calls over the last few weeks with customers literally asking for our advice, giving them guidance, getting on the phone, and Zoom sessions with our CISO, and getting guidance and leadership from that perspective.

Mike Cikos: Terrific. Thank you.

Operator: Our next question comes from Meta Marshall with Morgan Stanley. Please proceed with your question.

Meta Marshall: Great. Thanks. Maybe just coming back to the influx of business that you guys are seeing for Tenable One and Exposure Management.

Meta Marshall: Great. Thanks. Maybe just coming back to the influx of business that you guys are seeing for Tenable One and Exposure Management. Just driven by the AI risk headlines customers are seeing. Do you think that they have enough knowledge of what, you know, what they need or what the potential weaknesses are to speed up decision-making processes? Are they still, you know, are some of these sales cycles potentially longer just as they try to evaluate kind of what the changes to the environment are? Yeah. Just any reflection on sales cycle?

Meta Marshall: Just driven by the AI risk headlines customers are seeing. Do you think that they have enough knowledge of what, you know, what they need or what the potential weaknesses are to speed up decision-making processes? Are they still, you know, are some of these sales cycles potentially longer just as they try to evaluate kind of what the changes to the environment are?

Speaker #5: Just to put a small example, we're actually doing a webinar in 24 hours in regards to doing some education around the frontier AI models.

Speaker #5: And we have over 1,000 people registered. It's one of the fastest 1,000-person webinars we've generated since the last 12 to 13 months. So incredible amount of evangelizing and education.

Mark Thurmond: Yeah.

Mark Thurmond: Just any reflection on sales cycle?

Mark Thurmond: Yeah. No, no. Totally. Very, very good question. We are still doing a lot of education. You know, as we hit on the beginning of this call, you know, we've taken hundreds of calls over the last few weeks with customers literally asking for our advice, giving them guidance, you know, getting on the phone and Zoom sessions with our CISO and getting guidance and leadership from that perspective. Just to put a small example, we're actually doing a webinar, you know, in the, in 24 hours, in regards to doing some education around the frontier AI models, and we have over 1,000 people registered. It's one of the fastest, 1,000-person webinars we've generated, since the last 12 to 13 months. Incredible amount of evangelizing and education. We are sensing now that people are getting it.

Speaker #5: We are sensing now that people are getting these conversations are going from less of an enablement and education to saying, "Okay. Let's come in here.

Speaker #5: Let's talk about exposure management. Let's talk about Tenable One. What would be the deployment strategy? How do we get full visibility across the entire attack surface?" And then digging in on some of the relationships and partnerships that we've got with Anthropic and OpenAI and building some of that capability in the product.

Speaker #5: So there's still some evangelizing education, but customers are definitely getting smarter. And as I said before, right, we see it as a tailwind here in 2026.

Speaker #9: Great. Thanks so much.

Speaker #1: Our next question comes from Johnson Rex Heather with Cantor Fitzgerald. Please proceed with your question.

Mark Thurmond: Like, these conversations are going from less of an enablement and education to saying, Okay, let's come in here. Let's talk about exposure management. Let's talk about Tenable One. What would be the deployment strategy? How do we get full visibility across the entire attack surface? Then digging in on some of the relationships and partnerships that we've got with Anthropic and OpenAI and building some of that capability in the product. There's still some evangelizing education, but customers are definitely getting smarter and, as I said before, right, we see it as a tailwind here in 2026.

Speaker #10: Yeah. Nice execution. So I'm just curious if you could comment on the platform expansion opportunity relative to new ads. You did see a nice uptick in six-figure customers sequentially.

Speaker #10: So how should we be thinking of that platform customer growth versus expansion? It does seem like there's a nice opportunity as well to drive our incrementally higher as we move through the year.

Speaker #10: So how are you looking about those two growth drivers?

Speaker #5: Hi. This is Steve, Jonathan. I would say, look, in any given quarter, the there's always some variability between expansion opportunities and opportunity pipeline opportunities for new customers.

Meta Marshall: Great. Thanks so much.

Operator: Our next question comes from Jonathan Ruykhaver with Cantor Fitzgerald. Please proceed with your question.

Jonathan Ruykhaver: Nice execution. I'm just curious if you could comment on the platform expansion opportunity relative to new ads. You did see a nice uptick in six-figure customers, sequentially. How should we be thinking of that platform customer growth versus expansion? It does seem like there's a nice opportunity as well to, you know, to drive and are incrementally higher as we move through the year. How are you looking to balance those two growth drivers?

Speaker #5: This quarter, a number of new customers was extraordinarily strong. It was 400-plus. It was one of our strong quarters specifically here in Q1. We're off to a great start.

Speaker #5: So we're really pleased with the ability to continue to take and win customers that we've never had a relationship with—customers who recognize and appreciate the importance of exposure management in the agentic era.

Speaker #5: The expansion rate maximum provides more color about it, but played out as expected. But expansion remains certainly a big opportunity for us. We have one of the largest customer bases in all of security.

Steve Vintz: Hi, this is Steve, Jonathan. I would say, look, in any given quarter, there's always some variability between expansion opportunities and pipeline opportunities for new customers. This quarter, the number of new customers was extraordinarily strong. It was 400+. It was, you know, one of our stronger quarters. Specifically here in Q1, we're off to a great start. We're really pleased with the ability to continue to take and win customers that we've never had a relationship with, customers who recognize and appreciate the importance of exposure management in the AI era. You know, the expansion rate, Mac can provide more color about it, played out as expected. Expansion remains, you know, certainly a big opportunity for us. We have one of the largest customer bases in all of security.

Speaker #5: We have certainly demonstrated an ability to move customers into the exposure management platform into Tenable One to drive higher selling prices. And it remains certainly a focus for us going forward.

Speaker #10: Yeah. I would just add there. We were pleased with the new business, which includes new and expansion business into Tenable One in Q1. We saw 41% of that new business coming into the platform, which is an increase year over year, of about 8 percentage points.

Speaker #10: So it was a nice it was a nice uptick there. And we expect to continue to carry that momentum forward.

Steve Vintz: Expansion remains, you know, certainly a big opportunity for us. We have one of the largest customer bases in all of security. Have certainly demonstrated ability to move customers into the exposure management platform into Tenable One to drive higher selling prices and remains certainly a focus for us going forward.

Speaker #8: Helpful. Thank you.

Speaker #1: Our next question comes from Michelle Isle with TD Cohen. Please proceed with your question.

Mark Thurmond: have certainly demonstrated ability to move customers into the exposure management platform into Tenable One to drive higher selling prices and remains certainly a focus for us going forward.

Speaker #11: Congrats on the performance and the little beat and race. Steve, on that seven-digit mere win, can I ask how many vendors did you displace or consolidate?

Matthew Brown: Yeah. I would just add there, we were pleased with the new business, which includes new and expansion business into Tenable One in Q1. We saw 41% of that new business coming into the platform, which is an increase year over year, of about 8 percentage points. It was a nice uptick there, and we expect to continue to carry that momentum forward.

Matt Brown: Yeah. I would just add there, we were pleased with the new business, which includes new and expansion business into Tenable One in Q1. We saw 41% of that new business coming into the platform, which is an increase year over year, of about 8 percentage points. It was a nice uptick there, and we expect to continue to carry that momentum forward.

Speaker #5: Yeah. Hey, Mark here. Yeah. So we consolidated one major player. That was in there. That was an incumbent that was in this account for multiple years.

Speaker #5: This was a strategic decision that they were working on. Out of the Middle East, and you guys everyone knows all of the distractions and the geopolitical situation over there.

Jonathan Ruykhaver: Helpful. Thank you.

Operator: Our next question comes from Shaul Eyal with TD Cowen. Please proceed with your question.

Speaker #5: So for them to make a move off an incumbent player, an incumbent VM player, and move to Tenable One, I think shows you the power that we are able to show and be able to give this customer around not just Tenable One, the platform, but being able to evaluate and look at all of those incremental assets that they're struggling to get visibility on, which is one of the biggest drivers.

Shaul Eyal: Congrats on the performance and the little beat and raise. Steve, on that 7-digit EMEA win, can I ask how many vendors did you displace or consolidate?

Mark Thurmond: Yeah. Hey, Mark here. Yeah. We consolidated one major player that was in there that was an incumbent that was in this account for multiple years. This was a strategic decision that they were working on out of the Middle East. Everyone knows all of the distractions and the geopolitical situation over there. For them to make a move off an incumbent player, an incumbent VM player, and move to Tenable One, I think shows you the power that we are able to show and be able to give this customer around not just Tenable One the platform, but being able to evaluate and look at all of those incremental assets that they're struggling to get visibility on, which is one of the biggest drivers.

Speaker #5: And so it was a one-vendor situation that we replaced—an incumbent that was in there for multiple years. Great Tenable One victory.

Speaker #8: Thank you so much for that. Appreciate it.

Speaker #1: Our next question comes from Rudy Kissinger with DA Davidson. Please proceed with your question.

Mark Thurmond: For them to make a move off an incumbent player, an incumbent VM player, and move to Tenable One, I think shows you the power that we are able to show and be able to give this customer around not just Tenable One the platform, but being able to evaluate and look at all of those incremental assets that they're struggling to get visibility on, which is one of the biggest drivers. It was a 1-vendor situation that we replaced an incumbent that was in there for multiple years. Great Tenable One victory.

Speaker #5: Hey, guys. Thanks for taking my question. Matt, I want to ask about CRPOs. I know the CRPO growth has actually been trending ahead of revenue growth, basically for the same reason as why CCP has been below.

Speaker #5: But we saw that DCEL 3 points from 13% last quarter to 10% this quarter. So any comment there you can or color you can provide in just what drove that DCEL and how that line should trend throughout the year.

Mark Thurmond: It was a 1-vendor situation that we replaced an incumbent that was in there for multiple years. Great Tenable One victory.

Speaker #12: Yeah. Thanks for the question. There is seasonality at play. So if you look at kind of growth rate quarter on quarter from Q4 to Q1 in any year, typically, there is a downward tick.

Shaul Eyal: Thank you so much for that. Appreciate it.

Operator: Our next question comes from Rudy Kessinger with D.A. Davidson. Please proceed with your question.

Speaker #12: On CRPO, and so that's at play. And then there's also the normalization of some of the contract duration noise that was in that number.

Rudy Kessinger: Hey, guys. Thanks for taking my question. Matt, I wanna ask about CRPOs. I know the CRPO growth has actually been trending ahead of revenue growth, basically for the same reason as why CCP has been below. We saw that Varonis 3 points. From 13% last quarter to 10% this quarter. Any commentary you can, or color you can provide and just what drove that decel and how that line should trend throughout the year?

Speaker #12: That starts to work its way through as we anniversary some of the policy changes that we had. And so that creates some noise in there as well.

Steve Vintz: From 13% last quarter to 10% this quarter. Any commentary you can, or color you can provide and just what drove that decel and how that line should trend throughout the year?

Speaker #12: I do expect that that number is going to continue to fluctuate quarter to quarter throughout the year. And as I mentioned a few moments ago, the delta between CCP, let's say, and CRPO is likely to continue to fluctuate as well.

Matthew Brown: Yeah. Thanks for the question. There is seasonality at play. If you look at kind of growth rate quarter-on-quarter from Q4 to Q1 in any year, typically there is a downward tick on CRPO. That's at play. There's also the normalization of some of the contract duration noise that was in that number. That starts to work its way through as we anniversary some of the policy changes that we had. That creates some noise in there as well. I do expect that number is going to continue to fluctuate quarter-to-quarter throughout the year.

Matt Brown: Yeah. Thanks for the question. There is seasonality at play. If you look at kind of growth rate quarter-on-quarter from Q4 to Q1 in any year, typically there is a downward tick on CRPO. That's at play. There's also the normalization of some of the contract duration noise that was in that number. That starts to work its way through as we anniversary some of the policy changes that we had. That creates some noise in there as well. I do expect that number is going to continue to fluctuate quarter-to-quarter throughout the year. As I mentioned a few moments ago, the delta between CCB, let's say, and CRPO is likely to continue to fluctuate as well.

Speaker #1: Our next question comes from Gray Powell with BPIG. Please proceed with your question.

Speaker #8: Okay. Great. Thank you very much for taking the question. So as I listened to this call, I mean, I got to say that the commentary around customer conversations and everything that you're saying about the elevated demand for exposure management just in the last month, it sounds really good.

Speaker #8: At the same time, the second half revenue guide is at about 6 and a half percent versus a little over 9 and a half percent in Q1.

Matthew Brown: As I mentioned a few moments ago, the delta between CCB, let's say, and CRPO is likely to continue to fluctuate as well.

Speaker #8: And I get that you're normally conservative. I understand that a lot of these developments are very recent. So you probably don't want to bake it in.

Speaker #8: But I guess I’m just trying to think, how should we think of the conservatism within guidance, and then are there any underlying metrics we should be focused on going forward to prove out the bull case thesis?

Operator: Our next question comes from Gray Powell with BTIG. Please proceed with your question.

Gray Powell: Okay. Great. Thank you very much for taking the question. As I listen to this call, I mean, I gotta say that the commentary around customer conversations and everything that you're saying about the elevated demand for exposure management just in the last month, it sounds really good. At the same time, the H2 revenue guide is at about 6.5% versus a little over 9.5% in Q1. I get that you're normally conservative. I understand that a lot of these developments are very recent, so you probably don't wanna bake it in. I guess I'm just trying to think, like how should we think of the conservatism within guidance?

Speaker #8: I hope that was okay.

Speaker #12: Yeah, sure. Sure, yeah. I think the way to think of it is that we came in over the top of guidance for revenue in Q1.

Speaker #12: And then we're raising for the full year, which should hopefully communicate a level of conviction that we have on the rest of the year.

Speaker #12: At the midpoint, we took it up well, actually, across the entire range, we took up the full year revenue guide. And the reason we're able to do that is because of a lot of the commentary that you've heard here.

Speaker #12: It gives us that confidence. Now, of course, when you have the midpoint of the guide for revenue at 7.4% and you have a quarter like we just did in Q1, which is 9.6%, obviously, the averages are going to work out such that there's something less than 7.4 to get to that number.

Gray Powell: Like, are there any underlying metrics we should be focused on, going forward to prove out the bull case thesis? I hope that is okay.

Speaker #12: But the takeaway is, as we sit here a quarter later, net-net, we're in a better position now than we were a quarter ago, feeling more bullish.

Matthew Brown: Sure, I think the way to think of it is that we came in over the top of guidance for revenue in Q1, then we're raising for the full year, which should hopefully communicate a level of conviction that we have on the rest of the year. At the midpoint, we took it up. Well, actually, across the entire range, we took up the full year revenue guide. The reason we're able to do that is 'cause of a lot of the commentary that you've heard here. It gives us that confidence.

Matt Brown: Sure, I think the way to think of it is that we came in over the top of guidance for revenue in Q1, then we're raising for the full year, which should hopefully communicate a level of conviction that we have on the rest of the year. At the midpoint, we took it up. Well, actually, across the entire range, we took up the full year revenue guide. The reason we're able to do that is 'cause of a lot of the commentary that you've heard here. It gives us that confidence.

Speaker #12: We're feeling more convicted on the year. And that is what has allowed us to raise the guide for the full year.

Speaker #8: That's really helpful. Thank you.

Speaker #12: Sure.

Speaker #1: Our next question comes from Junaid Siddiqui with True Securities. Please proceed with your question.

Matthew Brown: Of course, when you have, you know midpoint of the guide for revenue at 7.4%, and you have a quarter like we just did in Q1, which is 9.6%, obviously the averages are gonna work out such that they're something less than 7.4 to get to that number. The takeaway is, you know, as we sit here a quarter later, net-net, we're in a better position now than we were a quarter ago. We're feeling more bullish, we're feeling more convicted on the year, and that is what has allowed us to raise the guide for the full year.

Matt Brown: Of course, when you have, you know midpoint of the guide for revenue at 7.4%, and you have a quarter like we just did in Q1, which is 9.6%, obviously the averages are gonna work out such that they're something less than 7.4 to get to that number. The takeaway is, you know, as we sit here a quarter later, net-net, we're in a better position now than we were a quarter ago. We're feeling more bullish, we're feeling more convicted on the year, and that is what has allowed us to raise the guide for the full year.

Speaker #13: Great. Thank you for taking my question. You've talked about remediation as the next major chapter in exposure management in a large greenfield opportunity. With the launch of Hexa.AI, how do you position Tenable One as a system of action, not just inside and?

Speaker #13: Where do you believe Tenable can establish a durable leadership position in driving measurable remediation outcomes versus other exposure management platforms?

Speaker #5: Yes. Over the years, this is Steve. We've evolved from helping customers understand risk to helping customers reduce it. And now, in the agentic era, to do that in a very deterministic way.

Gray Powell: That's really helpful. Thank you.

Speaker #5: Moving at machine speed. We're not in the business of building the bigger to build the bigger telescope to watch the meteor hit. We're in the business of helping our customers reduce risk.

Matthew Brown: Sure.

Matt Brown: Sure.

Operator: Our next question comes from Junaid Siddiqui with Truist Securities. Please proceed with your question.

Speaker #5: And it all starts with the data, which we talked about earlier. But a little more color, really, on Hexa. It'll generally be available here in the second quarter.

Junaid Siddiqui: Great. Thank you for taking my question. You've talked about remediation as the next major chapter in exposure management and a large greenfield opportunity. With the launch of Hexa AI, how do you position Tenable One as a system of action, not just insight? Where do you believe Tenable can establish a durable leadership position in driving measurable remediation outcomes versus other exposure management platforms?

Speaker #5: Hexa automates complex multi-step workflows. And leverages our exposure data. And turns it into action. I mean, there's a couple of types of action here.

Speaker #5: And pain points that we're solving for our customers. Number one, reducing the manual toil and the drudgery, as we would say, for security practitioners.

Steve Vintz: Yes. Like, over the years, this is Steve, we've evolved from helping customers understand risk to helping customers reduce it, and now in the agentic era, to do that in a very deterministic way, moving at machine speed. You know, we're not in the business of to build the bigger telescope to watch the meteor hit. We're in the business of helping our customers reduce risk. It all starts with the data, which we talked about earlier. A little more color really on Hexa. It'll generally be available here in Q2. Hexa automates complex multi-step workflows and leverages our exposure data and turns it into action. I mean, there's a couple of types of action here and pain points that we're solving for our customers.

Speaker #5: What a line rate on a wide range of manual tasks such as grouping and tagging. Things that just take extraordinary amount of time, but may take weeks here, days.

Speaker #5: We can do it in shorter order, even in minutes. And more importantly—and this is really the bigger mandate for us—we can take action via pre-built agents or custom agents that practitioners can build, either to patch or change configs or apply a compensating control, to reduce risk.

Speaker #5: It's the action here that really matters. And really, depending on the maturity and the sophistication of the customer, we can do that autonomously with guardrails.

Speaker #5: We can do that with a human in the loop to ensure that the action is taken in the right manner. But in the agentic era, it's really the fewest actions with the biggest impact that really matters.

Steve Vintz: Number one, reducing the manual toil and the drudgery, as we would say, for security practitioners on a wide range of manual tasks such as grouping and tagging. Things that just take an extraordinary amount of time, but may take weeks, days, we can do in short order, even in minutes. More importantly, this is really the bigger mandate for us, which is we can take action via pre-built agents or custom agents that practitioners can build either to patch, or change configs, or apply a compensating control to reduce risk. It's the action here that really matters, and really depending on the maturity and the sophistication of the customer, we can do that autonomously with guardrails.

Speaker #5: And that's our mandate. That's been our mandate since day one. This is exposure management's a category that we've created. It's one we're continuing to refine and evolve.

Speaker #5: And we are the unequivocal leader here. So excited about the opportunity, and what AI means for us and the ability to solve the bigger problem for our customer.

Speaker #1: Our next question comes from Todd Wheeler with Stevens. Please proceed with your question.

Steve Vintz: We can do that with a human in the loop to ensure that the action is taken in the right manner. In the agentic era, it's really the fewest actions with the biggest impact that really matters, and that's our mandate. That's been our mandate since day one. Exposure management's a category that we've created. It's one we're continuing to refine and evolve, and we are the unequivocal leader here. Excited about the opportunity and what AI means for us and the ability to solve the bigger problem for our customer.

Speaker #14: Thanks for the question. Steve, to piggyback on that question, could you talk about how Hexa.AI is packaged and priced? Just trying to get a sense of the monetization strategy for it.

Speaker #14: Thank you.

Speaker #5: Yeah. So as I mentioned earlier, we have customers that have been using it with great success. And we're getting some tremendous feedback on it.

Speaker #5: It will be generally available here. In the quarter, we have launched new pricing and packaging here. We have a foundational package. We have an advanced package.

Speaker #5: And Hexa will be available either in full form in the advanced model. We want customers to be able to use it. Perhaps with greater tokenized access with Hexa in the advanced model.

Operator: Our next question comes from Todd Weller with Stephens. Please proceed with your question.

Speaker #5: But Hexa will play an important role here in helping us drive our ASPs higher, develop better engagement, and create better outcomes for our customers.

Todd Weller: Thanks for the question. Steve, to piggyback on that question, could you talk about how Hexa AI is packaged and priced? Just trying to get a sense of kind of the monetization strategy for it. Thank you.

Speaker #5: And certainly, solving the exposure management problem. So more to come on that. Something we'll talk about really probably over the ensuing weeks. But we're excited about bringing Hexa to the market.

Steve Vintz: Yeah. As I mentioned earlier, we have customers that have been using it with great success, and we're getting some, you know, tremendous feedback on it. It will be generally available here in the quarter. We have launched new pricing and packaging here. We have a foundational package, we have an advanced package, and Hexa will be available, you know, full form in the advanced model. We want customers to be able to use it, perhaps, with greater tokenized access, with Hexa in the advanced model. Hexa will play an important role here in helping us drive our ASPs higher, in developing better engagement and creating better outcomes for our customers and certainly solving the exposure management problem. You know, more to come on that.

Speaker #1: Our next question comes from Jonathan Ho with William Blair. Please proceed with your question.

Speaker #15: Hi. Good afternoon. And congrats on the strong results. One thing I wanted to understand a little bit better is how are you partnering with Anthropic and OpenAI today?

Speaker #15: And can you maybe help us understand how that partnership might differ from Project Glasswing or some of the other broader platform players? Thank you.

Steve Vintz: Hexa will play an important role here in helping us drive our ASPs higher, in developing better engagement and creating better outcomes for our customers and certainly solving the exposure management problem. You know, more to come on that. Something we'll talk about really probably over the ensuing weeks. We're excited about bringing Hexa to market.

Speaker #5: Yeah. I mean, listen, I'll kind of kick it off and Steve might have one or two comments. But listen, what we can say is we have a very good close relationship with both Anthropic and with OpenAI.

Steve Vintz: Something we'll talk about really probably over the ensuing weeks. We're excited about bringing Hexa to market.

Speaker #5: So we're working with these folks on a bunch of different fronts. We're obviously using their technology to actually build Tenable One and build Hexa.

Speaker #5: We're taking actually their product. We're building Claude into Hexa. So there's a great partnership opportunity there. And so this is something that we've been working on for a while.

Operator: Our next question comes from Jonathan Ho with William Blair. Please proceed with your question.

Jonathan Ho: Hi, good afternoon, and congrats on the strong results. You know, one thing I wanted to understand a little bit better is how are you partnering with Anthropic and OpenAI today? Can you maybe help us understand, you know, how that partnership might differ from Project Glasswing or some of the other broader platform players? Thank you.

Speaker #5: We'll continue to work and continue to expand that relationship as they continue to expand their partner program and their partnering with different cybersecurity vendors.

Speaker #5: So this is something that we're extremely optimistic about. And the attitude that they're coming to us with where it is truly partnering, right? It isn't this combative situation that I think a lot of people have in their minds.

Mark Thurmond: Yeah. I mean, listen, I'll kind of kick it off, and Steve might have one or two comments. Listen, you know, what we can say is we have a very good close relationship with both Anthropic and with OpenAI. We're working with these folks on a bunch of different fronts. We're obviously using their technology to actually build Tenable One and build Hexa. We're taking actually their product. We're building Claude into Hexa, so there's a great partnership opportunity there. This is something that we've been working on for a while. We'll continue to work and continue to expand that relationship as they continue to expand their partner program and their partnering with different cybersecurity vendors. This is something that we're extremely optimistic about.

Speaker #5: That they're coming after and trying to take over all of software. I mean, they're working with us, partnering with us. They've got embedded engineers.

Speaker #5: We're going to be working with our engineering teams. There's just a massive amount of partnering that is going to be a huge benefit to the cybersecurity industry.

Speaker #5: Not just Tenable, but the entire industry. So we're going to continue to drive it. And we're off to a great start with both OpenAI and Anthropic.

Speaker #15: Yeah. And the one thing I would add there, just to play off what Mark said, which is we can't comment on all the specifics, but what we can say is Mark mentions that we're an active and ongoing conversation with Anthropic and OpenAI on a wide range of initiatives.

Mark Thurmond: You know, the attitude, you know, that they're coming to us with, where it is truly partnering, right? It isn't this combative situation that I think a lot of people have in their minds, that they're coming after and trying to, you know, take over all of software. I mean, they're working with us, partnering with us. You know, they've got embedded engineers, you know, that we're gonna be working with our engineering teams. There's just a massive amount of partnering that is gonna be a huge benefit to the cybersecurity industry. Not just Tenable, but the entire industry. We're gonna continue to drive it and we're off to a great start with both OpenAI and Anthropic.

Speaker #15: That gives us access to non-public models. We can say we're partners of OpenAI's TAC program, which is the Trusted Access for Cyber program. So that will empower our researchers to be able to do greater, higher levels of innovation.

Speaker #15: And do that more efficiently. So the takeaway here is we're doing joint research with the Frontier Model companies. To help defenders leverage the most sophisticated models.

Speaker #15: To fight AI with AI. And we're bringing that technology to market in our technology stack by embedding it in every layer of our platform.

Steve Vintz: Yeah. The one thing I would add there, just to play off what Mark said, which is, you know, we can't comment on all the specifics, but what we can say, as Mark mentioned, is that we're in active and ongoing conversations with Anthropic and OpenAI on a wide range of initiatives that gives us access to non-public models. We can say we're partners of OpenAI's TAC program, which is the Trusted Access for Cyber program, that will empower our researchers to be able to do greater, higher levels of innovation and do that more efficiently.

Speaker #15: So certainly excited about the opportunity to continue to work with them.

Speaker #1: Our next question comes from Joshua Tilton with Wolf Research. Please proceed with your question.

Speaker #16: Hey, guys. Thanks for sneaking me in here. Maybe just one on my end. I totally appreciate and understand all the commentary around the urgency you're hearing from your customers.

Speaker #16: As everybody, I guess, sort of freaks out ahead of this mythos launch. I guess what we're trying to reconcile and the question that we're getting from investors is just help us bridge that sense of urgency and everything that you're hearing from your customers with the short-term bookings growth this quarter of 0%.

Steve Vintz: You know, the takeaway here is we're doing joint research with the frontier model companies, to help defenders leverage the most sophisticated models, to fight AI with AI, and we're bringing that technology to market in our technology stack, by embedding it in every layer of our platform. Certainly excited about the opportunity to continue to work with them.

Speaker #16: I think you addressed some of that around timing in an earlier question. But any incremental color that you can help us with there would be very helpful.

Speaker #16: Thank you so much.

Speaker #17: Sure. Yeah. Josh, I'll take that. This is Matt. The short-term bookings growth, if you're referring to CCB, that was up 9.2% this quarter, year over year.

Operator: Our next question comes from Joshua Tilton with Wolfe Research. Please proceed with your question.

Joshua Tilton: Hey, guys. Thanks for sneaking me in here. Maybe just one on my end. I totally appreciate and understand all the commentary around the urgency you're hearing from your customers, as everybody, I guess, sort of freaks out ahead of this Mythos launch. I guess what we're trying to reconcile and the question that we're getting from investors, just help us bridge that sense of urgency and everything that you're hearing from your customers, with the short-term bookings growth, this quarter of 0%. I think you addressed some of that around timing in an earlier question, but any incremental color that you can help us with there would be very helpful. Thank you so much.

Speaker #17: But I think to the broader comment around, hey, when is this going to show up in the numbers? This is still early, right? So it does take time for some of this to play out.

Speaker #17: I think the takeaway and what we're trying to communicate here is though it's early, we're seeing all the signs that point to it being a massive opportunity for us.

Speaker #17: And the takeaway is that as more vulnerabilities are exposed, exposure management becomes that much more important. For our customers to be able to put those vulnerabilities in the context of their own environment.

Matthew Brown: Sure. Yeah, Josh, I'll take that. This is Matt. The short-term bookings growth, if you're referring to CCB, that was up 9.2% this quarter year over year. I think to the broader comment around, you know, when is this gonna show up in the numbers? This is still early, right? It does take time for some of this to play out. I think the takeaway and what we're trying to communicate here is, though it's early, we're seeing all the signs that point to it being a massive opportunity for us.

Matt Brown: Sure. Yeah, Josh, I'll take that. This is Matt. The short-term bookings growth, if you're referring to CCB, that was up 9.2% this quarter year over year. I think to the broader comment around, you know, when is this gonna show up in the numbers? This is still early, right? It does take time for some of this to play out. I think the takeaway and what we're trying to communicate here is, though it's early, we're seeing all the signs that point to it being a massive opportunity for us.

Speaker #17: And how that impacts them. And then prioritize what to fix. That's really critical. So for us, the takeaway is, look, exposure management is never been more important.

Speaker #17: It will continue to be increasingly important. As some of these models continue to discover more vulnerabilities. And of course, that ultimately the idea that ultimately that makes its way to the numbers, of course.

Speaker #18: Any incremental color on the CRPO bookings growth?

Speaker #19: No. Nothing more than what I've said. I guess I can say it came in line with expectations. So it was not a surprise to us.

Matthew Brown: The takeaway is that as more vulnerabilities are exposed, exposure management becomes that much more important for our customers to be able to put those vulnerabilities in the context of their own environment and how that impacts them, and then prioritize what to fix. That's really critical. For us, the takeaway is, look, exposure management is has never been more important. It will continue to be increasingly important as some of these models continue to discover more vulnerabilities. Of course, that ultimately the idea that ultimately that makes its way to the numbers.

Matt Brown: The takeaway is that as more vulnerabilities are exposed, exposure management becomes that much more important for our customers to be able to put those vulnerabilities in the context of their own environment and how that impacts them, and then prioritize what to fix. That's really critical. For us, the takeaway is, look, exposure management is has never been more important. It will continue to be increasingly important as some of these models continue to discover more vulnerabilities. Of course, that ultimately the idea that ultimately that makes its way to the numbers.

Speaker #19: It will continue to, like I said, fluctuate in the delta between CCB and CRPO. But no, it came in line with expectations. And again, it's what gave us confidence to be able to raise the full year revenue guide.

Speaker #19: So we feel good about it.

Speaker #18: Super helpful. Thank you so much.

Speaker #19: Yeah. Thanks, Josh.

Speaker #1: Our next question comes from Sreenik Kothari with Robert Baird. Please proceed with your question.

Speaker #20: Yeah. Thanks for taking my question. So really great to see the hundreds of early customer conversations around Frontier Model. What are we discovering? You did announce the flex-style pricing and how it can be central in removing procurement and budgeting friction.

Joshua Tilton: Any incremental color on the CRPO bookings growth?

Matthew Brown: No, nothing more than what I've said. I guess I can say it came in line with expectations, so it was not a surprise to us. It will continue to, like I said, fluctuate in the delta between CCB and CRPO. But no, it came in line with expectations and again, it's what gave us confidence to be able to raise the full year revenue guide. We feel good about it.

Matt Brown: No, nothing more than what I've said. I guess I can say it came in line with expectations, so it was not a surprise to us. It will continue to, like I said, fluctuate in the delta between CCB and CRPO. But no, it came in line with expectations and again, it's what gave us confidence to be able to raise the full year revenue guide. We feel good about it.

Speaker #20: So just curious, how do you think about the unlock opportunity here? And do you see a clear shift in confidence from customers that they are now excited to kind of scale spending and utilization, especially in light of this AI-driven tsunami as you described without having to sort of rebuy that budget conversation?

Joshua Tilton: Super helpful. Thank you so much.

Matthew Brown: Yeah. Thanks, Josh.

Matt Brown: Yeah. Thanks, Josh.

Operator: Our next question comes from Shrenik Kothari with Robert W. Baird. Please proceed with your question.

Speaker #20: Just any comments on that and timing-wise, how do you see that unlock play out? Thank you.

Shrenik Kothari: Yeah, thanks for taking my question. Really great to see the hundreds of early customer conversations around frontier model vulnerability discovery. You did announce the flex style pricing and how it can be central in removing procurement and budgeting friction. Just curious, how do you think about the unlock opportunity here? Do you see like a clear shift in confidence from customers that they are now excited to kind of scale spending and utilization, especially in light of this AI-driven tsunami as you described, without having to sort of rebuy that budget conversation? Just any comments on that and timing-wise, how do you see that unlock play out? Thank you.

Speaker #19: Sure. Yeah. No, I mean, it's been extremely, extremely well received. We put out a press release announcing the pricing change. We've obviously been working with our channel partners.

Speaker #19: We're a 100% channel-driven company. And so we gave early access to a bunch of our partners, got tremendous feedback. And yeah, we absolutely view this as something that is going to allow customers to expand with us very, very easily.

Speaker #19: The way we now have taken out some of the complexity around our older pricing model and really having just one price per asset and a single licensed model we view is going to be able to drive expansion of asset types.

Speaker #19: So, kind of think about if you were just a VM customer, using OT. You now have a one-licensed pricing model, where you can easily be able to expand with not a lot of heavy lift from procurement—to add cloud, to add AI, to add web application scanning, to add attack surface management.

Mark Thurmond: Sure. Yeah, I mean, it's been extremely well received. We put a press release announcing the pricing change. We obviously have been working with our channel partners. We're a 100%, channel-driven company. We gave early access to a bunch of our partners, got tremendous feedback. Yeah, we absolutely view this as something that is gonna allow customers to expand with us very easily. The way we now have taken out some of the complexity around our older pricing model and really having just 1 price per asset and a single license model, we view is gonna be able to drive expansion of asset types.

Steve Vintz: Sure. Yeah, I mean, it's been extremely well received. We put a press release announcing the pricing change. We obviously have been working with our channel partners. We're a 100%, channel-driven company. We gave early access to a bunch of our partners, got tremendous feedback. Yeah, we absolutely view this as something that is gonna allow customers to expand with us very easily. The way we now have taken out some of the complexity around our older pricing model and really having just 1 price per asset and a single license model, we view is gonna be able to drive expansion of asset types.

Speaker #19: And be able to spend that up and down based on where you see demand. So this was a big initiative within Tenable. And this was very much a collaborative effort with our partner community and our customer base to make sure we dialed this in correctly.

Speaker #19: And so yeah, we are very optimistic this will remove a lot of friction. And we'll drive expansion within the base.

Speaker #20: Got it. Thanks a lot.

Mark Thurmond: kind of think about if you were just a VM customer using OT, you now have a one license pricing model where you can easily be able to expand with not a lot of heavy lift from procurement to add, you know, cloud, to add AI, to add web application scanning, to add attack surface management, and be able to spin that up and down based on where you see demand. This was a big initiative within Tenable, and this was very much a collaborative effort with our partner community and our customer base to make sure we dial this in correctly. Yeah, we are very optimistic this will remove a lot of friction and will drive expansion within the base.

Steve Vintz: Kind of think about if you were just a VM customer using OT, you now have a one license pricing model where you can easily be able to expand with not a lot of heavy lift from procurement to add, you know, cloud, to add AI, to add web application scanning, to add attack surface management, and be able to spin that up and down based on where you see demand. This was a big initiative within Tenable, and this was very much a collaborative effort with our partner community and our customer base to make sure we dial this in correctly. Yeah, we are very optimistic this will remove a lot of friction and will drive expansion within the base.

Speaker #1: Our next question comes from Roger Boyd with UBS. Please proceed with your question.

Speaker #21: Great. Thanks for taking the question. I wanted to touch on the buyback. A pretty substantial step up there for cash flow generation remains strong.

Speaker #21: Matt, I appreciate your commentary here. But we'd love for you to kind of expand on how the buyback factors into capital allocation in the current environment, and how you're thinking about that relative to M&A and other organic investment.

Speaker #21: I know Steve talked about investing in the Salesforce earlier as well, too. So yeah. And any thoughts there would be great. Thanks.

Speaker #22: Sure. Yeah. Yeah. We were pleased to be able to lean in to the share buyback this quarter. As we announced last quarter, we had an increase to the share repurchase authorization.

Speaker #22: And we've been accelerating the pace of repurchases. So in Q1, we were purchased 6.1 million shares. For 130 million dollars, and that's because we believe that the stock is trading at a price that doesn't represent true value.

Shrenik Kothari: Got it. Thanks a lot.

Operator: Our next question comes from Roger Boyd with UBS. Please proceed with your question.

Roger Boyd [Director of Research: Great. Thanks for taking the question. I wanted to touch on the buyback, a pretty substantial step up there. Free cash flow generation remains strong. Matt, I appreciate your commentary here, but would love for you to kind of expand on how the buyback factors into capital allocation in the current environment and how you're thinking about that relative to M&A and other organic investment. I know Steve talked about investing in the sales force earlier as well too. Yeah. Any thoughts there would be great. Thanks.

Roger Boyd: Great. Thanks for taking the question. I wanted to touch on the buyback, a pretty substantial step up there. Free cash flow generation remains strong. Matt, I appreciate your commentary here, but would love for you to kind of expand on how the buyback factors into capital allocation in the current environment and how you're thinking about that relative to M&A and other organic investment. I know Steve talked about investing in the sales force earlier as well too. Yeah. Any thoughts there would be great. Thanks.

Speaker #22: We continue to believe that share buybacks are a good use of capital, and so we're going to continue to repurchase shares. We maintain, though, the capacity for opportunistic M&A as well.

Speaker #22: We've got a very strong balance sheet cash position is strong. We've got access to debt. And so should the right thing come along, of course, we can be opportunistic there.

Mark Thurmond: Sure. Yeah. We were pleased to be able to lean in to the share buyback this quarter. As we announced last quarter, we had an increase to the share repurchase authorization, and we've been accelerating the pace of repurchases. In Q1, we repurchased 6.1 million shares for $130 million. That's because we believe that the stock is trading at a price that doesn't represent true value. We continue to believe that share buybacks are a good use of capital, we're gonna continue to repurchase shares. We maintain though the capacity for opportunistic M&A as well. We've got a very strong balance sheet. Cash position is strong.

Matt Brown: Sure. Yeah. We were pleased to be able to lean in to the share buyback this quarter. As we announced last quarter, we had an increase to the share repurchase authorization, and we've been accelerating the pace of repurchases. In Q1, we repurchased 6.1 million shares for $130 million. That's because we believe that the stock is trading at a price that doesn't represent true value. We continue to believe that share buybacks are a good use of capital, we're gonna continue to repurchase shares. We maintain though the capacity for opportunistic M&A as well. We've got a very strong balance sheet. Cash position is strong.

Speaker #22: So this in no way limits that. But we do believe that this is the best use of capital right now just simply because of where our share price is trading.

Speaker #20: Cool. Thanks very much.

Speaker #1: We have reached the end of our question and answer session, which concludes today's teleconference. You may disconnect your lines at this time. Thank you for your participation.

Mark Thurmond: Got access to debt. Should the right thing come along, of course, we can be opportunistic there. This in no way limits that, but we do believe that this is the best use of capital right now, just simply because of where our share price is trading.

Matt Brown: Got access to debt. Should the right thing come along, of course, we can be opportunistic there. This in no way limits that, but we do believe that this is the best use of capital right now, just simply because of where our share price is trading.

Roger Boyd [Director of Research: Cool. Thanks very much.

Roger Boyd: Cool. Thanks very much.

Operator: We have reached the end of our question and answer session, which concludes today's teleconference. You may disconnect your lines at this time. Thank you for your participation.

Q1 2026 Tenable Holdings Inc Earnings Call

Request DemoDemo

Tenable Holdings

Earnings