Tenable Web App Scanning 2025 Release Notes

Tenable is thrilled to announce that GraphQL API Assessment is now live in Tenable WAS! The addition of this feature gets the WAS Scanner that much closer to becoming a truly modern application scanner.

Use Case and Impact:

• APIs are the foundation of modern web applications, and a high-value target for attackers.

• While Tenable already supports scanning RESTful APIs, an increasing number of applications now use GraphQL, a modern and flexible query language.

• With the addition of GraphQL scanning, Tenable now provides broader coverage across the modern API attack surface, helping customers secure both REST and GraphQL-based applications.

• To get an idea of the rising popularity, both Tenable OT and Tenable CloudSecurity are GraphQL API's!

For more information, see Scan Templates and Launch an API Scan in the Tenable Web App Scanning User Guide.

Tenable is thrilled to announce some significant enhancements to your cloud product Workspace! We've redesigned the workspace to provide you with better visibility and access to Tenable products:

• Improved Product Overview — You can now easily see both the products you've purchased and a range of other products available for exploration.

• Detailed Product Information — Access More Details to demo the product, giving you in-depth knowledge about each product.

• Product Utilization — We’ve added a utilization feature that shows the percentage of how much you’re using the subscribed products. It allows you to quickly direct you to the License Information page.

• Trial Status Visibility — If you are currently evaluating a product or have done so within the past year, you will now see the status of the trial (In Trial or Trial Expired) directly in your workspace.

These changes are designed to help you get the most out of your Tenable solutions and discover new ways to enhance your security posture. To learn more, access the Workspace page via any Tenable cloud application.

Tenable Web App Scanning now supports Pause Windows, giving you precise control over when scans can run. This is ideal for production environments where scanning during peak hours could impact performance. Define windows of time when scans should automatically pause, and they’ll resume right where they left off—no more restarting from scratch or breaking scans into pieces.

This release also includes manual Pause and Resume controls, available via both the user interface and API. Pause Windows and Pause/Resume both support multi-FQDN scans, helping ensure broader coverage with less disruption.

For more information, see the Tenable Web App Scanning documentation.

You can now integrate Tenable Web App Scanning with Tenable Attack Surface Management to provide continuous external attack surface monitoring and deliver real-time data for ingestion into the platform. The ingested data enhances Tenable Web App Scanning data with External Attack Surface Context, and allows you to perform web application scans against these discoveries. In return, you are empowered to know the security risk present in exposed vulnerabilities and provided with a workflow for managing vulnerability findings.

For video walkthroughs, refer to the following resources:

• Value Focus

• Configuration Overview

For more information, see the Integrate with Tenable Web App Scanning documentation.