Get Started with Tenable One AI Exposure

Overview

AI Exposure extends attack surface protection into the AI landscape, giving you continuous visibility into AI tool usage across your organization. It detects unmanaged shadow AI and tracks user activity across platforms such as ChatGPT Enterprise, Microsoft Copilot, Anthropic Claude, and Google Gemini.

AI Exposure provides visibility into sensitive data within AI prompts, responses, and files. This visibility enables you to enforce policies and prevent data leakage. AI Exposure also identifies misconfigurations in AI models and applications, detects malicious behavior, and risks for runtime interactions with AI.

Tenable recommends following these steps to get started with AI Exposure data and functionality.

Prerequisites

Before you begin configuring and using AI Exposure:

  • Review the Tenable One Deployment Guide.
  • Ensure access to at least one supported AI application, for example, ChatGPT Enterprise or Microsoft Copilot.

License

To use AI Exposure, you purchase licenses for assets. These are resources identified by or managed in your Tenable products. Each product has a different asset type. For more information, see the Tenable One Licensing Quick-Reference Guide.

Tenable offers two versions of Tenable One: Tenable One Foundation and Tenable One Advanced. Both versions include AI Exposure.

  • Tenable One Foundation includes AI Inventory.
  • Tenable One Advanced includes AI Inventory + Posture findings.
  • The Tenable One AI Governance add-on is available for both Foundation/Advanced at an additional cost and includes runtime monitoring (activity detections).

Log In and Configure

To log in and configure AI Exposure:

  1. Log in to the AI Exposure.
  2. Integrate AI applications with AI Exposure.
  3. Connect cloud providers to create resource and software inventories and view posture risk.
  4. Assign the AI Conversations role to view user activity.
  5. Configure predefined Policies to control how AI Exposure monitors your environment.
  6. Configure Activity Rules to detect all AI activities within your environment.

Analyze and Assess

Perform analysis on your data within AI Exposure:

  • Access the AI Dashboard page for a unified view of AI usage and risk, surfaced through key KPIs.
  • Review the Inventory page for a complete list of AI tools, agents, and models discovered across your organization's cloud and SaaS environments.
  • Review the Findings page to resolve posture gaps and misconfigurations detected by evaluating your AI services against configured policies.
  • Review the Activity Detections page to view specific events or activities, such as messages or responses that triggered an activity rule.
  • Review the Activity Issues page to view related detections grouped into a single activity issue for critical and high-severity cases.
  • Review your users' AI Conversations to enforce AI security.

These processes help protect your AI attack surface and ensure your organization's AI use stays within approved policies and standards.