Tenable Attack Surface Management 2025 Release Notes

Tip: You can subscribe to receive alerts for Tenable documentation updates.

These release notes are listed in reverse chronological order.

June 2, 2025

Cloud Connector Manager Role

Tenable Attack Surface Management now includes a Cloud Connector Manager role for integrations. This role allows users to manage, add, modify, and delete cloud connectors in addition to the Active User permissions. The Cloud Connector Manager role is mapped to Scan Operator in Tenable Vulnerability Management.

Note: You must enable the Cloud Connector Manager role for editing cloud connectors.

For more information, see Tenable-provided Roles and Privileges and Tenable Attack Surface Management Roles.

May 28, 2025

Integrate with Google Cloud Platform

You can now integrate Tenable Attack Surface Management with Google Cloud Platform (GCP) to add assets from your GCP accounts. For more information, see Integrate with Google Cloud Platform.

Integrate with AWS, Azure, and GCP using Keyless Authentication

Tenable Attack Surface Management now supports integration with AWS, Azure, and Google Cloud Platform accounts using keyless authentication. For more information, see the following:

May 8, 2025

Tenable is thrilled to announce some significant enhancements to your cloud product Workspace! We've redesigned the workspace to provide you with better visibility and access to Tenable products:

  • Improved Product Overview — You can now easily see both the products you've purchased and a range of other products available for exploration.

  • Detailed Product Information — Access More Details to demo the product, giving you in-depth knowledge about each product.

  • Product Utilization — We’ve added a utilization feature that shows the percentage of how much you’re using the subscribed products. It allows you to quickly direct you to the License Information page.

  • Trial Status Visibility — If you are currently evaluating a product or have done so within the past year, you will now see the status of the trial (In Trial or Trial Expired) directly in your workspace.

These changes are designed to help you get the most out of your Tenable solutions and discover new ways to enhance your security posture. To learn more, access the Workspace page via any Tenable cloud application.

April 9, 2025

Bug Fix
The loading state now appears correctly on the Activity Logs page.
For IP ranges, Tenable Attack Surface Management now supports both the hyphen (-) and the longer versions of a dash: the en dash (–) and the em dash (—).

March 6, 2025

Bug Fix

Tenable Attack Surface Management now allows you to export assets that match a valid filter.

Tenable Attack Surface Management now validates filter expressions on both the front-end and back-end. Additionally, it shows an error message whenever a user error occurs.

February 18, 2025

Bug Fix
Tenable Attack Surface Management now ensures that elements in the Suggestion blocklist items list can be readded after deletion.

February 4, 2025

Improvement
The CVEs on the asset details page now links to Common Vulnerabilities and Exposures (CVEs).
Tenable Attack Surface Management now shows improved CVE data according to descriptions and scoring.
Tenable Attack Surface Management now features enhanced Common Platform Enumeration (CPE) resolutions for CVEs, ensuring more consistent and accurate CVE findings using Tenable sources.
Bug Fix
The Reports page in Tenable Attack Surface Management displays correctly.
Clicking the close button in the Tenable MSSP Portal impersonation overlay within Tenable Attack Surface Management now redirects to Tenable Vulnerability Management.

January 14, 2025

Bug Fix
Tenable Attack Surface Management now ensures that the Suggestion Rules details text correctly displays UTF-8 (non-ASCII) characters.
The Workspace launcher now functions correctly when accessing Tenable Identity Exposure from Tenable Attack Surface Management.
Links present in Subscription Alerts no longer show access-related errors if a user has proper access and permissions to the inventory.