Licensing

This topic breaks down the Tenable One licensing process and lists the versions and components you can purchase. It also holds a license calculator with which you can estimate your license needs.

To learn how to use and deploy Tenable One, see the Tenable One Deployment Guide.

Licensing Tenable One

To use Tenable One, you purchase licenses for assets: resources identified by—or managed in—your Tenable products. Some Tenable One products use different asset types. For example, in Tenable Web App Scanning, assets are unique fully qualified domain names (FQDNs), while in Tenable Identity Exposure, they are enabled users in your directory service. Once you have purchased licenses, your Tenable representative assigns them to your products based on the asset types you want to scan or manage.

When your environment expands, so does your asset count, so you purchase more licenses to account for the change. Tenable licenses use progressive pricing, so the more you purchase, the lower the per-unit price. For prices, contact your Tenable representative.

You can reallocate your licenses once per 90 days. For example, if you purchase 1,000 licenses and assign 500 each to Tenable Vulnerability Management and Tenable Security Center, you can switch 100 licenses to Tenable Vulnerability Management if your scan profile requires it. To reallocate licenses, contact your Tenable representative.

Tip: To view your current license count and available assets, in the Tenable top navigation bar, click

and then click License Information. To learn more, see License Information Page.

Note: Tenable offers simplified pricing to managed security service providers (MSSPs). To learn more, contact your Tenable representative.

Provision Licenses

To provision licenses for your Tenable One products:

Log into Tenable Account Management portal to provision Tenable One and its product suite.

Tip: For more information, see the Account Management User Guide.

Once the Tenable One instance has been provisioned, the activation code for each individual product can be found under the Products tab in the Account Management Portal. You must be logged into the portal and have product access to view the products and activation codes.

Note: If Tenable One is your only product suite and it is not provisioned, the Products tab is not visible until provisioning is complete.

If you cannot see the Products tab and believe this is in error, contact the Primary Contact (found in the Contacts tab) on your account. Request access to view or manage permissions for one or all of the products on the account.

If you are the Primary Contact and need help or are no longer able to access your account, contact your Customer Success manager.

Third-Party Connector Licensing

To connect to and ingest data from third-party connector assets, you must ensure you have available asset licenses for these assets. You can reallocate your Tenable One licenses or purchase additional licenses.

For more information about third party assets, see the following documentation resources:

Third-Party Connectors Quick Reference Guide
Third-Party Asset Retention in the Tenable Exposure Management User Guide
Third-Party Data Deduplication in the Tenable Exposure Management User Guide

Tenable One Components

Within Tenable One, you can license point products, and then customize these products by purchasing additional add-on components. The table below highlights the products that are included with purchase and their associated add-on components:

Platform	Included with Purchase	Add-on Component	Platform
Tenable One	Tenable Vulnerability Management companion license Tenable Security Center+ companion license + up to 3 consoles Tenable Web App Scanning on-premises companion license OT Security companion license Tenable Attack Surface Management companion license Tenable Cloud Security companion license	Additional Tenable Security Center consoles, if using more than three Tenable Web App Scanning additional concurrency with Tenable cloud scanners Tenable Identity Exposure On-Premises Third-party Connectors Tenable Attack Surface Management Daily Frequency	Tenable One

Tenable One Asset Values

Tenable One has a centralized platform approach, collecting data from many asset types and providing domain-specific security teams (for example, Tenable Vulnerability Management, Tenable Cloud Security) with specialized domain-specific applications. These applications are similar to point products for managing cloud, web applications, OT assets, and so on, enhanced with context from the Tenable One platform.

The value customers derive from Tenable One varies by the type of resource being managed, as does the cost incurred by Tenable. To align Tenable One pricing to value, Tenable converts the number of different resource types (for example, web servers, cloud resources, OT devices) to a number of Tenable One assets based on ratios defined in the following table. In this way we maintain a single price per Tenable One asset no matter the variety of resources being managed.

Reclaiming Licenses

When you purchase Tenable licenses, your total license count is static for the length of your contract unless you purchase more licenses. However, Tenable One products reclaim licenses under some conditions—and then reassign them to new assets in the same product so that you do not run out of licenses.

Exceeding the License Limit

To allow for usage spikes due to hardware refreshes, sudden environment growth, or unanticipated threats, Tenable One licenses are elastic. However, when you scan more assets than you have licensed, Tenable clearly communicates the overage and then reduces functionality in three stages.

Scenario	Result
You scan more assets than are licensed for three consecutive days.	A message appears in Tenable Exposure Management.
You scan more assets than are licensed for 15+ days.	A message and warning about reduced functionality appears in Tenable Exposure Management.
You scan more assets than are licensed for 30+ days.	A message appears in Tenable Exposure Management; scan and export features are disabled.

Tip: Improper scan hygiene or product misconfigurations can cause scan overages, which result in inflated asset counts. To learn more, see Scan Best Practices.

Expired Licenses

The Tenable One licenses you purchase are valid for the length of your contract. 30 days before your license expires, a warning appears in the user interface. During this renewal period, work with your Tenable representative to add or remove products or change your license count.

After your license expires, you can no longer sign in to the Tenable platform.