Tenable Holdings is set to acquire Apex Security, an AI security company, to enhance its ability to help organizations identify and reduce cyber risk in a rapidly evolving world shaped by AI. The acquisition will expand Tenable’s ability to govern usage, enforce policy, and control exposure across both the AI used and built by organizations. Tenable’s acquisition will strengthen Tenable’s strategy of delivering scalable, unified exposure management as AI adoption accelerates. The acquisition will add new risks such as shadow AI apps, AI-generated code, synthetic identities, and ungoverned cloud services.
“AI dramatically expands the attack surface, introducing dynamic, fast-moving risks most organizations aren’t prepared for,” said Steve Vintz, Co-CEO and CFO, Tenable. “Tenable’s strategy has always been to stay ahead of attack surface expansion — not just managing exposures, but eliminating them before they can be exploited.”
“As organizations move quickly to adopt AI, many recognize that now is the moment to get ahead of the risk—before large-scale attacks materialize,” said Mark Thurmond, Co-CEO, Tenable. “Apex delivers the visibility, context, and control security teams need to reduce AI-generated exposure proactively. It will be a powerful addition to the Tenable One platform and a perfect fit for our preemptive approach to cybersecurity.”
Founded in 2023, Apex attracted early interest from CISOs and top investors, including Sam Altman (OpenAI), Clem Delangue (Hugging Face), and venture capital firms Sequoia Capital and Index Ventures. The company quickly emerged as an innovator in securing the use of AI by developers and everyday employees alike, addressing the growing need to manage usage, enforce policy, and ensure compliance at scale.
“The AI attack surface is deeply intertwined with everything organizations are already securing. Treating it as part of exposure management is the most strategic approach. We’re excited to join forces with Tenable to help customers manage AI risk in context — not as a silo, but as part of their broader environment,” said Matan Derman, CEO and Co-Founder of Apex Security.
Following the acquisition close, Tenable expects to deliver integrated capabilities in the second half of 2025 as part of Tenable One — the industry’s first and most comprehensive exposure management platform. The financial terms of the deal were not disclosed. The deal is expected to close later this quarter.
