Tenable One AI Exposure 2026 Q4 Release Notes

Tip: You can subscribe to receive these release notes by email or RSS.

These release notes are listed in reverse chronological order.

November 8, 2026 (Release 1.229)

New Features

The following features were added in this release:

Feature	Details
Microsoft 365 Copilot Agent Discovery	AI Exposure now discovers and lists the agents in your Microsoft 365 Copilot environment alongside your Microsoft Copilot Studio agents. You can view which AI agents are active across your organization, who owns them, and who can access them. Each agent displays its name, description, owner, last update timestamp, host Microsoft 365 applications, and the users or groups with whom it is shared. Agents also display the following metadata: - Agent Type: Custom, Shared, Microsoft, or External - Availability: Allowed for All, Allowed for Some, or Allowed for None. Availability corresponds to the agent Access Level: Public, Custom, or Private. Note: To discover Microsoft 365 Copilot agents, you must edit your existing Microsoft 365 Copilot integration and rerun the setup script. The updated script grants the Tenable connector application the CopilotPackages.Read.All permission. Until you rerun the script, the integration displays a Missing permissions warning. All other Copilot data continues to synchronize normally.
Shared Users Field in AI Asset Inventory	AI Exposure now displays a Shared Users field in the AI asset inventory for OpenAI GPTs and Claude Projects that are shared with specific users. The field lists the users an asset is shared with and appears in both the card view and the grid view. For OpenAI GPTs, the field appears when the Vendor Visibility is Invite Only. This field allows you to quickly identify who has access to an invite-only AI asset, which helps you assess exposure and review access to AI assets across your organization. The field is consistent with the existing Shared Users field for Gemini Gems.

Feature

Details

Microsoft 365 Copilot Agent Discovery

AI Exposure now discovers and lists the agents in your Microsoft 365 Copilot environment alongside your Microsoft Copilot Studio agents. You can view which AI agents are active across your organization, who owns them, and who can access them.

Each agent displays its name, description, owner, last update timestamp, host Microsoft 365 applications, and the users or groups with whom it is shared. Agents also display the following metadata:

- Agent Type: Custom, Shared, Microsoft, or External
- Availability: Allowed for All, Allowed for Some, or Allowed for None. Availability corresponds to the agent Access Level: Public, Custom, or Private.

Note: To discover Microsoft 365 Copilot agents, you must edit your existing Microsoft 365 Copilot integration and rerun the setup script. The updated script grants the Tenable connector application the CopilotPackages.Read.All permission. Until you rerun the script, the integration displays a Missing permissions warning. All other Copilot data continues to synchronize normally.

Shared Users Field in AI Asset Inventory

AI Exposure now displays a Shared Users field in the AI asset inventory for OpenAI GPTs and Claude Projects that are shared with specific users. The field lists the users an asset is shared with and appears in both the card view and the grid view. For OpenAI GPTs, the field appears when the Vendor Visibility is Invite Only.

This field allows you to quickly identify who has access to an invite-only AI asset, which helps you assess exposure and review access to AI assets across your organization. The field is consistent with the existing Shared Users field for Gemini Gems.

November 1, 2026 (Release 1.228)

New Features

The following features were added in this release:

Feature	Details
Custom Dashboards in AI Exposure	AI Exposure now supports custom dashboards. Previously, the application displayed only the built-in AI dashboard. You can now create, duplicate, and manage your own dashboards, and the All Dashboards page shows the AI built-in dashboard together with your AI custom dashboards. The widget library provides widgets that apply to AI Exposure, including the AI Activity Issues Trend widget and query and metric widgets. You can set default and favorite dashboards for each application. Your choices in AI Exposure do not affect your settings in Tenable One Cloud Exposure. In AI Exposure, you can set any dashboard as your default and mark dashboards as favorites. Favorites appear in the navigation menu, and the application opens your default dashboard. By default, AI Exposure opens the built-in AI dashboard. You can also select AI custom dashboards when you create reports. For more information, see Dashboards.

Feature

Details

Custom Dashboards in AI Exposure

AI Exposure now supports custom dashboards. Previously, the application displayed only the built-in AI dashboard. You can now create, duplicate, and manage your own dashboards, and the All Dashboards page shows the AI built-in dashboard together with your AI custom dashboards. The widget library provides widgets that apply to AI Exposure, including the AI Activity Issues Trend widget and query and metric widgets.

You can set default and favorite dashboards for each application. Your choices in AI Exposure do not affect your settings in Tenable One Cloud Exposure. In AI Exposure, you can set any dashboard as your default and mark dashboards as favorites. Favorites appear in the navigation menu, and the application opens your default dashboard. By default, AI Exposure opens the built-in AI dashboard.

You can also select AI custom dashboards when you create reports.

For more information, see Dashboards.

October 11, 2026 (Release 1.225)

New Features

The following features were added in this release:

Feature	Details
Masking sensitive values in AI Exposure	You can enable data masking to hide sensitive values from displaying in the console. AI Exposure replaces each masked value with the fixed placeholder, which appears throughout the product. AI Exposure masks sensitive values that contain personally identifiable information (PII), payment card industry (PCI) data, and access data. It masks these values in the following areas: Activity Detections Activity Issues Conversations Findings generated from PII, PCI, or access data Assets, such as agents and skills, where sensitive data (PII, PCI, or access data) is identified Note: Masking is available only with the Tenable One Advanced license or the AI Governance (add-on). Masking is disabled by default. To turn masking on, go to Settings > Security > Data and enable the AI Sensitive data masking option. The masking setting applies differently to Activity and Posture: Activity (messages, files, and detections): Masking is not retroactive. When you enable masking, AI Exposure masks only new activity detected after you save the setting. When you disable masking, only new activity appears unmasked. Existing activity remains unchanged. Posture — Masking is retroactive. When you enable or disable masking, the change applies to all Posture data, including sensitive data detected before the change. For more information, see Configure Data Masking.

Feature

Details

Masking sensitive values in AI Exposure

You can enable data masking to hide sensitive values from displaying in the console. AI Exposure replaces each masked value with the fixed placeholder, which appears throughout the product.

AI Exposure masks sensitive values that contain personally identifiable information (PII), payment card industry (PCI) data, and access data. It masks these values in the following areas:

Activity Detections
Activity Issues
Conversations
Findings generated from PII, PCI, or access data
Assets, such as agents and skills, where sensitive data (PII, PCI, or access data) is identified

Note: Masking is available only with the Tenable One Advanced license or the AI Governance (add-on).

Masking is disabled by default. To turn masking on, go to Settings > Security > Data and enable the AI Sensitive data masking option.

The masking setting applies differently to Activity and Posture:

Activity (messages, files, and detections): Masking is not retroactive. When you enable masking, AI Exposure masks only new activity detected after you save the setting. When you disable masking, only new activity appears unmasked. Existing activity remains unchanged.
Posture — Masking is retroactive. When you enable or disable masking, the change applies to all Posture data, including sensitive data detected before the change.

For more information, see Configure Data Masking.

October 4, 2026 (Release 1.224)

New Features

The following features were added in this release:

Feature	Details
Tenable One Vulnerability Management software data in AI Exposure	Tenable One Vulnerability Management now sends all software components detected in your environment to the Software page in AI Exposure. This creates a unified software inventory that includes components detected on cloud workloads and hosts monitored by Tenable One Vulnerability Management, when you install and connect the relevant sensors. This release establishes AI Exposure as a centralized view for all AI security data and insights within the Tenable One platform: Org-wide visibility — The Software page provides a unified view of all AI-related software that Tenable detects, including both sanctioned and unsanctioned components. Shadow AI detection: AI Exposure identifies unsanctioned AI libraries and packages installed on hosts and cloud workloads, expanding your overall application coverage. Reduced context switching — When you track AI software risk, you no longer need to switch between Tenable One Vulnerability Management and AI Exposure to view the complete AI software inventory. Important: AI Exposure imports this data into the Self-Managed scope. However, AI Exposure does not automatically import the RBAC configured for this data. To prevent unintended access, Tenable removes AI Exposure access from all custom roles in Tenable One that include it as part of this release. To restrict access for users who require limited data visibility, you must reconfigure RBAC in AI Exposure and then manually restore access. Note: Tenable One Vulnerability Management sends only new findings to AI Exposure. Allow up to 30 days for the findings in both applications to reach full parity. For more information, see Tenable One Data in AI Exposure.
Amazon Bedrock model activity monitoring	AI Exposure monitors Amazon Bedrock model invocation logs, which provide visibility into prompts and model responses resulting from interactions with chat assistants, agents, and custom applications that use Amazon Bedrock to invoke an LLM. AI Exposure catalogs the interactions captured in these logs and surfaces security risks in the AI Exposure console. These risks include sensitive data exposure (such as personally identifiable information (PII), credentials, and financial information), prompt injection and jailbreak attempts, and sensitive use cases (such as automated decision-making). AI Exposure attributes detections to the specific AWS IAM role responsible for the activity and can route detections to existing workflow tools, such as Jira, ServiceNow, or email. To enable monitoring, configure Amazon Bedrock model invocation logging for each monitored AWS region and grant the connector role read access to the Amazon S3 bucket that receives the logs. Note: Amazon Bedrock activity monitoring is a runtime capability that completes the AI Security posture management (AI-SPM) coverage for Amazon Bedrock and Bedrock assets in AI Exposure. Amazon Bedrock activity monitoring is currently available at no additional cost with the AI Governance add-on license. For more information, see Enable Amazon Bedrock Activity Monitoring.
Claude organization security posture checks	AI Exposure now evaluates the administrative settings of your connected Claude organizations and generates findings for configurations that can expose your organization to security risks. AI Exposure creates one finding per Claude organization for each identified risk. When you correct a setting in your Claude organization, AI Exposure automatically resolves the corresponding finding on the next scan. Findings appear on the Findings page alongside other posture findings. Each finding includes a detailed description, organization details, and remediation steps. Note: To collect organization settings, the Claude organization must have the Claude Compliance API enabled and the connection must have the required permissions. This feature requires a Tenable One Advanced or Tenable One AI Governance license.
Support for OpenAI skills created in the Microsoft Office applications	AI Exposure now discovers skills that you create or upload directly in BasisPoints. BasisPoints is OpenAI's Microsoft Office add-on for PowerPoint. These skills appear in the inventory with the corresponding product type.