10-Q: Tenable Holdings Reports Q3 2025 Net Income, Revenue Growth
Quarterly Report
Tenable Holdings, Inc. reported a net income of $2.26 million for the third quarter of 2025, a significant improvement from a net loss in the prior year, driven by strong subscription revenue growth and strategic acquisitions.
Summary
- Achieved a net income of $2.26 million for the three months ended September 30, 2025, a notable improvement from a net loss of $9.21 million in the same period last year.
- Total revenue increased by 11% to $252.44 million in Q3 2025, up from $227.09 million in Q3 2024.
- Subscription revenue, a key driver, grew 11% to $232.21 million in Q3 2025.
- For the nine months ended September 30, 2025, the company reported a net loss of $35.38 million, an improvement from a $38.17 million loss in the prior year period.
- Year-to-date revenue for the nine months ended September 30, 2025, increased 11% to $738.87 million from $664.29 million.
- Strategic acquisitions included Apex Security, Inc. in June 2025 for $47.8 million cash and Vulcan Cyber Ltd. in February 2025 for $148.5 million cash.
- Cash and cash equivalents decreased to $171.85 million at September 30, 2025, from $328.65 million at December 31, 2024.
- Total assets decreased to $1.65 billion from $1.74 billion, while total liabilities decreased to $1.31 billion from $1.34 billion.
- Stockholders' equity decreased to $344.38 million from $399.95 million.
- The company repurchased 1.989 million shares for $59.97 million during Q3 2025 under its stock repurchase program.
- The dollar-based net expansion rate slightly decreased to 106% at September 30, 2025, from 108% at September 30, 2024.
- The number of customers with $100,000 and greater in annual contract value increased by 16% to 2,156.
- New enterprise platform customers added in Q3 2025 increased by 13% to 437.
- General and administrative expense for the nine months ended September 30, 2025, included $15.5 million in termination benefits related to the passing of the Chairman and Chief Executive Officer.
Sentiment
Score: 7
Explanation: The company demonstrated strong revenue growth and a return to net income in Q3, alongside increased operating and free cash flow for the nine-month period. Strategic acquisitions enhance its market position in exposure management. However, significant cash usage for acquisitions and share repurchases, coupled with a decrease in cash and short-term investments, and a slight dip in dollar-based net expansion rate, present areas for careful monitoring. Macroeconomic and regulatory risks, particularly concerning AI and government contracts, are also noted.
Positives
- Achieved net income of $2.26 million in Q3 2025, a significant turnaround from a net loss of $9.21 million in Q3 2024.
- Reported 11% revenue growth for both the three and nine months ended September 30, 2025, demonstrating consistent top-line expansion.
- Subscription revenue, a key recurring metric, grew 11% in Q3 and 12% year-to-date, indicating strong customer adoption and retention for core offerings.
- Professional services and other revenue saw substantial increases of 35% in Q3 and 23% year-to-date, reflecting demand for advisory and training services.
- Income from operations turned positive in Q3 2025, reaching $7.14 million, compared to a loss of $2.08 million in Q3 2024.
- Non-GAAP operating margin improved to 23.3% in Q3 2025 from 19.8% in Q3 2024, indicating enhanced operational efficiency.
- Non-GAAP net income increased to $51.44 million in Q3 2025 from $39.32 million in Q3 2024.
- Net cash provided by operating activities increased significantly to $183.72 million for the nine months ended September 30, 2025, from $136.36 million in the prior year.
- Free cash flow also increased to $169.28 million for the nine months ended September 30, 2025, from $128.50 million in the prior year, demonstrating strong cash generation.
- The number of customers with $100,000 or greater in annual contract value grew by 16% to 2,156, indicating success in attracting and expanding relationships with larger clients.
- New enterprise platform customers added increased by 13% to 437, showing continued market penetration.
- The first lien net leverage ratio was 0.87 at September 30, 2025, well below the 3.5 threshold for mandatory Term Loan prepayments, indicating healthy debt management.
- The Board of Directors increased the share repurchase authorization by $250 million in July 2025, signaling confidence in the company's valuation and future prospects.
Negatives
- Reported a net loss of $35.38 million for the nine months ended September 30, 2025, despite the positive Q3 net income.
- Cash and cash equivalents significantly decreased from $328.65 million at December 31, 2024, to $171.85 million at September 30, 2025.
- Short-term investments also decreased from $248.55 million to $211.72 million over the same period.
- Accounts receivable decreased from $258.73 million to $200.99 million, potentially indicating slower collections or reduced billings.
- Deferred revenue (current and non-current portions combined) decreased from $833.19 million at December 31, 2024, to $810.50 million at September 30, 2025.
- Interest income decreased by 40% in Q3 and 28% year-to-date, attributed to decreased short-term investments and reduced rates of return.
- Other (expense) income, net, shifted to a larger expense of $0.70 million in Q3 2025, primarily due to increased foreign exchange losses.
- The dollar-based net expansion rate slightly decreased to 106% from 108%, suggesting a minor slowdown in expansion from existing customers.
- Significant cash used in investing activities ($170.29 million for the nine months) primarily driven by $196.18 million for business acquisitions.
- Significant cash used in financing activities ($171.21 million for the nine months) largely due to $184.97 million in treasury stock repurchases.
- General and administrative expense for the nine months included $15.5 million in termination benefits related to the passing of the Chairman and Chief Executive Officer, impacting profitability.
Risks
- Incorporation of generative and other AI processes, algorithms, and technologies into products and services may generate inaccurate or flawed output or may not achieve market acceptance, leading to operational, financial, regulatory, and reputational harm.
- AI technologies are new and developing, existing in an emerging regulatory environment, which presents significant privacy, security, litigation, ethical, reputational, operational, and financial risks.
- Difficulty in successfully deploying AI due to operational issues inherent to such technologies, including the development, maintenance, and operation of deep learning datasets.
- Potential legal consequences for violating applicable laws, third-party intellectual property, privacy, or other rights if adequate rights to utilize data for AI technologies are not secured.
- Uncertainty in the legal regulatory regime relating to AI and emerging ethical issues may require significant resources to modify and maintain business practices to comply with U.S. and non-U.S. laws, such as the European Union's Artificial Intelligence Act.
- Risk of sensitive information being leaked or disclosed if input into third-party generative AI platforms, or if AI models reveal other personal or sensitive information generated by the model.
- AI technology features may generate misleading, insecure, inaccurate, harmful, or otherwise flawed output, potentially leading to customer detriment, harm to brand/reputation, competitive harm, or legal liability.
- Reliance on a third-party channel partner network (distributors and resellers) for a substantial amount of revenue (94% for the nine months ended September 30, 2025 and 2024).
- Significant reliance on one distributor, Ingram Micro, which accounted for 32% of revenue for the nine months ended September 30, 2025, and 28% of accounts receivable.
- Any significant interruption to channel partners' systems (e.g., operational failure, cybersecurity incident) could harm the business.
- Channel partners' non-exclusive agreements allow them to work with competitors or offer competing solutions, and they have no obligation to renew agreements.
- A portion of revenue from domestic and foreign governmental entities and highly regulated organizations is subject to challenges, including competitive sales, lengthy sales cycles, and potential funding reductions or delays (e.g., U.S. government shutdown, Department of Government Efficiency initiatives).
- Governmental entities have the authority to terminate contracts at any time for convenience, limiting recovery to costs incurred.
- Government contracts may include preferential pricing terms and broader rights in solutions, and the company is subject to federal contracting regulations (FAR), government audits, and potential liabilities for non-compliance.
- Increased risk of investigations, civil fraud, whistleblower lawsuits, and other legal actions as a U.S. government contractor.
- Exposure to sensitive government information by employees/channel partners could lead to liability and reputational harm.
- Unstable market and economic conditions (e.g., high inflation, high interest rates, economic recession, increased global trade barriers) may adversely affect business, financial condition, and share price.
- A strong U.S. dollar makes products more expensive for international customers, potentially impacting budgets and purchasing decisions.
- Increased inflation rates can raise costs (labor, employee benefits) and reduce customer budgets, leading to reduced demand.
- Tariff actions and escalating trade tensions may cause private-sector customers to defer purchases, extend procurement cycles, and lead to retaliatory trade policies or anti-U.S. sentiment.
- Difficulty obtaining debt or equity financing on favorable terms if equity and credit markets deteriorate.
Future Outlook
The company anticipates that historical seasonality trends in customer agreements will be impacted by current macroeconomic conditions and U.S. policy decisions, potentially lengthening sales cycles in 2025. It expects to continue incurring operating losses in the near term but believes existing cash and investments are sufficient for operating and capital needs for at least the next 12 months and the foreseeable future. Future capital requirements will depend on various factors including revenue growth, subscription renewals, and investment in infrastructure and R&D, with a possibility of needing additional equity or debt financing. Sales and marketing, research and development, and general and administrative expenses are expected to decrease as a percentage of revenue over the long term. The company is also assessing the impact of new FASB accounting standards and expects a $3.2 million interim intraperiod allocation for income tax expense to reverse in Q4 2025.
Management Comments
- "Exposure management is the evolution of vulnerability management, advancing risk assessment and prioritization across the entire attack surface from IT infrastructure to cloud environments to critical infrastructure."
- "Tenable unifies security visibility, insight and action across this attack surface, equipping modern organizations to expose and close the cybersecurity gaps that erode business value, reputation and trust."
- "Tenable One is an AI-powered exposure management platform that gives enterprises a single, unified view of risk across all types of assets and attack pathways."
- "We intend to continue to invest additional resources in our cloud-based platform and customer support team as we grow our business."
- "We intend to continue to make investments in our sales and marketing teams to increase revenue, further penetrate the market and expand our global customer base."
- "We expect our sales and marketing expense to increase in absolute dollars annually and to be our largest operating expense category for the foreseeable future. However, as our revenue increases, we expect our sales and marketing expense to decrease as a percentage of our revenue in the second half of 2025 and over the long term."
- "We expect our research and development expense to continue to increase annually in absolute dollars for the foreseeable future as we continue to invest in research and development efforts to enhance the functionality of our cloud-based platform. However, we expect our research and development expense to decrease as a percentage of our revenue over the long term."
- "We expect our general and administrative expense to continue to increase in absolute dollars and decrease as a percentage of our revenue over the long term."
- "We believe that our existing cash and cash equivalents and short-term investments will be sufficient to fund our operating and capital needs for at least the next 12 months and for the foreseeable future."
Industry Context
The company operates in the dynamic cybersecurity industry, positioning itself at the forefront of 'exposure management' as an evolution of traditional vulnerability management. Its strategic focus on AI-powered platforms like Tenable One, ExposureAI, and Tenable AI Assistant aligns with a broader industry trend of leveraging artificial intelligence and machine learning to enhance threat detection, risk prioritization, and automation. The acquisitions of Apex Security (AI attack surface) and Vulcan Cyber (cyber risk management) demonstrate a proactive strategy to expand capabilities and offer a more comprehensive platform in a rapidly evolving threat landscape. The reliance on a two-tiered channel model is a common strategy for enterprise software companies seeking broad market penetration. The company's discussion of macroeconomic conditions, high interest rates, inflation, and trade tensions reflects widespread industry concerns that impact customer budgets and sales cycles across various sectors. Furthermore, the emerging regulatory environment around AI, exemplified by the EU's Artificial Intelligence Act, highlights a growing industry challenge for companies integrating AI into their offerings. The impact of U.S. government spending and policy decisions, such as those from the Department of Government Efficiency, also underscores the sensitivity of cybersecurity vendors to public sector budgetary cycles.
Comparison to Industry Standards
- The dollar-based net expansion rate of 106% (down from 108% in the prior year) indicates positive expansion from existing customers, though it is slightly below the 120%+ often targeted by high-growth SaaS companies in the cybersecurity sector.
- The gross margin of 78% is generally strong for a software company, suggesting efficient cost management relative to revenue, comparable to leading cybersecurity software providers.
- The shift to net income in Q3 2025 is a positive indicator, contrasting with the prior year's loss, and suggests improving operational leverage, which is a key performance metric for mature software companies.
- The strategic acquisitions of Apex Security and Vulcan Cyber align with a broader industry trend of consolidation and capability expansion, as cybersecurity firms seek to offer more integrated and AI-driven solutions to address complex threat landscapes, similar to moves by competitors like CrowdStrike or Palo Alto Networks in expanding their platform offerings.
Management Changes
| Role | Previous Person | New Person | Effective Date | Reason |
|---|---|---|---|---|
| Chairman and Chief Executive Officer | Unnamed (late CEO) | NA | Prior to September 30, 2025 | Passing of the Chairman and Chief Executive Officer, resulting in $15.5 million in termination benefits. |
| Co-Chief Executive Officer | NA | Stephen A. Vintz | NA | Assumed role following the passing of the previous CEO. |
| Co-Chief Executive Officer | NA | Mark C. Thurmond | NA | Assumed role following the passing of the previous CEO. |
| Chief Financial Officer | NA | Matthew Brown | August 19, 2025 | New employment agreement dated August 19, 2025. |
Legal Proceedings
- Not presently a party to any legal proceedings that, if determined adversely, would individually or taken together have a material adverse effect on the business, results of operations, financial condition, or cash flows.
- May receive claims from third parties asserting intellectual property rights infringement.
- Future litigation may be necessary to defend rights or establish proprietary rights, which could have an adverse impact due to defense and settlement costs, and diversion of management resources.
Stakeholder Impact
- Shareholders: Potential for increased value from strategic acquisitions and share repurchases, but also dilution risk if future capital raises occur. Share price volatility due to macroeconomic conditions and AI-related risks.
- Employees: Increased headcount from acquisitions (Research and Development). Termination benefits for the late CEO. Potential for changes in hiring/retention due to compliance with non-discrimination and regulatory requirements for government contractors.
- Customers: Enhanced product offerings through acquisitions (Apex, Vulcan) and AI integration (Tenable One, ExposureAI, Tenable AI Assistant). Potential for longer sales cycles and reduced budgets due to macroeconomic conditions and government funding policies. Risks of flawed AI output could impact customer trust.
- Suppliers: Commitments to cloud service providers (Microsoft, AWS) for significant future spending.
- Creditors: Compliance with Term Loan covenants (first lien net leverage ratio of 0.87, well below 3.5 threshold).
Next Steps
- Continue investing in the cloud-based platform and customer support team.
- Continue making investments in sales and marketing teams to increase revenue, further penetrate the market, and expand the global customer base.
- Continue investing in research and development efforts to enhance the functionality of the cloud-based platform.
- Assess the impact of new FASB accounting standards (ASU 2023-09, 2024-03, 2025-05, 2025-06) on financial statements and disclosures.
- Monitor macroeconomic conditions, U.S. policy decisions, and tariffs for potential impacts on sales cycles and customer purchasing decisions in 2025.
- Monitor the reversal of a $3.2 million interim intraperiod allocation for income tax expense in Q4 2025.
- Potentially seek additional equity or debt financing if needed to fund operating and capital needs.
- Continue the share repurchase program as authorized by the Board of Directors.
Key Dates
| Date | Description |
|---|---|
| July 2021 | Entered into a credit agreement for a $375.0 million senior secured term loan facility and a $50.0 million senior secured revolving credit facility. |
| November 2023 | Board of Directors authorized the repurchase of up to $100 million of common stock. |
| December 2023 | Entered into a contract with Microsoft for cloud services (February 2024 through January 2027) with a $28.5 million commitment. |
| February 2024 | Start date for Microsoft cloud services contract. |
| July 2024 | Entered into a new contract with Amazon Web Services, Inc. (AWS) for cloud services (August 2024 to July 2027) with a total commitment of $230.3 million. |
| August 2024 | Start date for AWS cloud services contract. |
| September 30, 2024 | End of prior year's third fiscal quarter. |
| October 2024 | Board of Directors increased stock repurchase authorization by $200 million. |
| December 31, 2024 | End of prior fiscal year. |
| January 2025 | Reserved an additional 6.0 million shares under the 2018 Equity Incentive Plan and 1.8 million shares under the 2018 ESPP. |
| January 1, 2025 | Effective date for FASB ASU 2023-09 Income Taxes (Topic 740): Improvements to Income Tax Disclosures for annual periods. |
| February 2025 | Acquired Vulcan Cyber Ltd. for $148.5 million cash, net of cash acquired. |
| June 2025 | Acquired Apex Security, Inc. for $47.8 million cash, net of cash acquired. |
| July 2025 | Board of Directors increased stock repurchase authorization by $250 million. |
| August 19, 2025 | Employment Agreement for Matthew Brown as Chief Financial Officer. |
| September 30, 2025 | End of current reporting period. |
| October 31, 2025 | Number of shares of common stock outstanding was 119,344,266. |
| November 4, 2025 | Date of filing and certifications by Co-Chief Executive Officers and Chief Financial Officer. |
| December 31, 2025 | Expected reversal of $3.2 million interim intraperiod allocation for income tax expense related to foreign jurisdictions. |
| January 1, 2026 | Effective date for FASB ASU 2025-05 Measurement of Credit Loss for Accounts Receivable and Contract Assets for interim and annual reporting periods. |
| July 7, 2026 | Maturity date of Revolving Credit Facility. |
| January 2027 | End date for Microsoft cloud services contract. |
| July 2027 | End date for AWS cloud services contract. |
| January 1, 2027 | Effective date for FASB ASU 2024-03 Income Statement Reporting Comprehensive Income Expense Disaggregation Disclosures (Subtopic 220-40): Disaggregation of Income Statement Expenses for annual periods. |
| July 7, 2028 | Maturity date of Term Loan. |
| January 1, 2028 | Effective date for FASB ASU 2024-03 for interim reporting periods and ASU 2025-06 Targeted Improvements to the Accounting for Internal-Use Software for interim and annual reporting periods. |
| February 2032 | End of sublease term for a portion of corporate headquarters. |
Recommendation
holdTenable Holdings shows promising revenue growth and a return to profitability in Q3, driven by subscription services and strategic acquisitions that enhance its exposure management platform with AI capabilities. The company's strong operating cash flow and free cash flow generation are positive. However, the substantial cash outflow for acquisitions and share repurchases has significantly reduced cash reserves, and the dollar-based net expansion rate has slightly declined. The company also faces notable risks related to the nascent AI regulatory environment, potential flaws in AI output, and macroeconomic headwinds impacting government and enterprise spending. Given the mix of strong operational performance and strategic growth initiatives balanced against significant cash usage and emerging risks, a "Hold" recommendation is appropriate for a seasoned investor to observe how these factors evolve and impact future performance.
Keywords
Cybersecurity, Exposure Management, Vulnerability Management, Tenable One, AI, Machine Learning, Cloud Security, IT Infrastructure, Risk Management, Software Subscriptions, Enterprise Security, SEC Filing, 10-Q, Financial Results, Acquisitions, Stock Repurchase
Disclaimer:The information provided here is for general informational purposes only and does not constitute financial advice, recommendation, or endorsement of any kind. It may contain errors or omissions. You should not rely on this information to make financial decisions. Always seek the advice of a qualified financial professional before making any investment or financial decisions. Use of this information is at your own risk.