Tenable Attack Surface Management 2026 Release Notes

Tip: You can subscribe to receive alerts for Tenable documentation updates.

These release notes are listed in reverse chronological order.

July 1, 2026

Automatic Elastic Asset Handling

Tenable Attack Surface Management now automatically treats certain hostnames as Elastic Assets when they cause an inventory to grow unexpectedly due to a large number of associated IP addresses. As with sources configured as Elastic sources, Tenable Attack Surface Management omits the IP addresses for these hosts. The following hostnames are affected:

  • autodiscover.*

  • *.google.com

  • *.googlemail.com

  • *.mail.protection.outlook.com

  • *.olc.protection.outlook.com

For more information, see Add a Source.

Improvement
Tenable Attack Surface Management now consolidates cloud scanner IP addresses into a smaller set of CIDR blocks to improve readability.

June 18, 2026

Bug Fix

Tenable Attack Surface Management no longer supports a set of deprecated columns in both the legacy and new user interfaces. These columns contained outdated data that had not been updated for an extended period. Existing data for these columns continues to be returned by the API for at least 30 days. The following columns are affected:

  • bd.tenable_was_asset_id

  • bd.tenable_nessus_asset_id

  • bd.tenable_nessus_findings

  • bd.tenable_was_findings

  • bd.tenable_last_was_scan

  • bd.tenable_last_nessus_scan

  • bd.tenable_was_acr_score

  • bd.tenable_was_exposure_score

  • bd.tenable_nessus_acr_score

  • bd.tenable_nessus_exposure_score

  • bd.tenable_nessus_scan_status

  • bd.tenable_was_scan_status

March 31, 2026

Set a Default Inventory

Tenable Attack Surface Management now allows you to specify a default inventory, ensuring your preferred data set automatically loads every time you log in. You can easily designate your default view by selecting the star icon next to an inventory name in the dropdown menu, allowing for faster access to your most important assets.

For more information, see Set a Default Inventory.

January 20, 2026

Bug Fix

Tenable Attack Surface Management now correctly validates empty values in filters on the new UI.
Tenable Attack Surface Management resolves an issue where copying custom dashboards failed if they contained data from subscriptions with names exceeding 50 characters.