10-Q: Tenable Reports Q2 Growth Amid Acquisitions & AI Risks

Tenable Holdings, Inc. reported increased revenue and strong non-GAAP performance for Q2 2025, driven by strategic acquisitions, despite a higher GAAP net loss and new risks related to AI integration and economic conditions.

Summary

• Revenue for the three months ended June 30, 2025, increased by 12% to $247.3 million, up from $221.2 million in the prior year period.
• Subscription revenue grew by 13% to $228.0 million for the quarter.
• Net loss for the quarter was $(14.7) million, a slight increase from $(14.6) million in the same period last year.
• Non-GAAP income from operations increased by 11.5% to $47.7 million for the quarter, maintaining a 19% non-GAAP operating margin.
• Free cash flow for the six months ended June 30, 2025, significantly increased by 55.2% to $117.6 million, compared to $75.8 million in the prior year period.
• The company acquired Apex Security, Inc. in June 2025 for $47.8 million and Vulcan Cyber Ltd. in February 2025 for $148.5 million, totaling $196.2 million in cash for acquisitions during the six-month period.
• The number of customers with $100,000 and greater in annual contract value increased by 18% to 2,118 at June 30, 2025.
• The dollar-based net expansion rate was 107% at June 30, 2025, a decrease from 109% in the prior year.
• New enterprise platform customers added in Q2 2025 decreased by 10% to 367, down from 408 in Q2 2024.
• The company's cash and cash equivalents stood at $175.0 million, with short-term investments of $211.5 million as of June 30, 2025.
• A stock repurchase program was expanded in July 2025 by an additional $250 million, bringing total authorization to $550 million, with $239.9 million already utilized through June 30, 2025.

Sentiment

Score: 6

Explanation: The sentiment is moderately positive. While the company shows strong non-GAAP financial performance, significant free cash flow, and strategic acquisitions, the increasing GAAP net loss, decrease in new customer additions, and the substantial cash outflow for acquisitions and share repurchases introduce some caution. The identified risks related to AI integration and macroeconomic conditions also temper the overall positive outlook.

Positives

• Strong revenue growth of 12% for the quarter and 11% for the six months, primarily driven by subscription revenue.
• Significant increase in free cash flow by 55.2% for the six-month period, indicating improved cash generation from operations.
• Non-GAAP income from operations and non-GAAP net income showed healthy growth, demonstrating underlying operational efficiency when excluding certain non-cash and acquisition-related expenses.
• Successful strategic acquisitions of Apex Security, Inc. and Vulcan Cyber Ltd. are expected to strengthen the Tenable One Exposure Management platform and expand capabilities in AI attack surface security and cyber risk management.
• An 18% increase in customers with $100,000 or greater in annual contract value highlights success in securing larger enterprise clients.
• The company's first lien net leverage ratio of 0.88 is well below the 3.5 covenant, indicating strong financial health and compliance with debt agreements.
• The expanded stock repurchase program signals management's confidence in the company's valuation and commitment to returning capital to shareholders.

Negatives

• GAAP net loss increased to $(14.7) million for the quarter and $(37.6) million for the six months, indicating continued unprofitability on a GAAP basis.
• The number of new enterprise platform customers added in the quarter decreased by 10%, suggesting a slowdown in new customer acquisition.
• The dollar-based net expansion rate slightly decreased from 109% to 107%, indicating a minor reduction in expansion from existing customers.
• Cash and cash equivalents decreased significantly from $328.6 million at December 31, 2024, to $175.0 million at June 30, 2025, largely due to cash used for acquisitions and stock repurchases.
• Interest income decreased due to a decrease in short-term investments, impacting overall profitability.
• General and administrative expenses increased significantly by 34% for the six months, partly due to $15.5 million in termination benefits related to the passing of the former Chairman and CEO.

Risks

• Incorporation of generative AI processes and technologies into products and services may generate inaccurate or flawed output, leading to operational, financial, regulatory, and reputational harm.
• The use of generative AI at scale presents significant privacy and security risks, especially if sensitive information is used to train third-party AI models or if models reveal other personal/sensitive information.
• An emerging and uncertain regulatory environment for AI, including new laws like the EU Artificial Intelligence Act, may impose obligations and increase regulatory enforcement and litigation risks.
• Reliance on a two-tiered channel partner network (distributors and resellers) means any significant interruption to their systems, such as cybersecurity incidents (e.g., Ingram Micro ransomware attack), could disrupt product distribution.
• Channel partners are non-exclusive and may work with competitors or prioritize their own solutions, potentially adversely affecting the company's ability to grow its business and sell solutions.
• Sales to governmental and highly regulated entities are competitive, expensive, and time-consuming, subject to public sector budgetary cycles, funding reductions (e.g., Department of Government Efficiency), and potential contract terminations for convenience.
• Government contracts may include terms that grant broader rights to solutions, allow early termination, or include preferential pricing, and non-compliance could lead to significant liabilities or debarment.
• Unstable market and economic conditions, including high inflation, interest rate fluctuations, and increased global trade barriers, may increase operating costs, reduce customer budgets, lengthen sales cycles, and decrease demand.
• Retaliatory trade policies or anti-U.S. sentiment in certain regions could lead to increased preference for local competitors, heightened regulatory scrutiny, and difficulties in attracting and retaining international customers.

Future Outlook

The company anticipates that historical seasonality trends, particularly increased customer agreements in Q3 (U.S. government) and Q4 (large enterprise), will be impacted by current macroeconomic conditions and U.S. policy decisions related to government funding and tariffs. These factors may lengthen purchasing and approval phases of the sales cycle in 2025, potentially leading to fewer contract opportunities or reduced funding for existing initiatives. The company expects to continue incurring operating losses in the near term but believes existing cash and investments will be sufficient for at least the next 12 months and the foreseeable future. Research and development expenses are expected to increase annually in absolute dollars as the company invests in enhancing its cloud-based platform, while sales and marketing expenses are expected to decrease as a percentage of revenue in the second half of 2025 and over the long term.

Management Comments

• Exposure management is the evolution of vulnerability management, advancing risk assessment and prioritization across the entire attack surface from IT infrastructure to cloud environments to critical infrastructure.
• Tenable unifies security visibility, insight and action across this attack surface, equipping modern organizations to expose and close the cybersecurity gaps that erode business value, reputation and trust.
• Tenable One is an AI-powered exposure management platform that gives enterprises a single, unified view of risk across all types of assets and attack pathways.
• The platform leverages AI and machine learning, rapidly analyzing and interpreting vast data sets to pinpoint priority weaknesses and high-risk attack paths, deliver recommendations and automate routine tasks.
• We intend to continue to make investments in our sales and marketing teams to increase revenue, further penetrate the market and expand our global customer base.
• We expect our sales and marketing expense to decrease as a percentage of our revenue in the second half of 2025 and over the long term.
• We expect our research and development expense to continue to increase annually in absolute dollars for the foreseeable future as we continue to invest in research and development efforts to enhance the functionality of our cloud-based platform.
• We expect our general and administrative expense to continue to increase in absolute dollars and decrease as a percentage of our revenue over the long term.

Industry Context

Tenable operates in the rapidly evolving cybersecurity industry, specifically in exposure and vulnerability management. The company's strategic acquisitions of Apex Security (AI attack surface) and Vulcan Cyber (cyber risk management) align with the broader industry trend of integrating AI and machine learning into security solutions to provide more comprehensive and proactive threat detection and remediation. The emphasis on a unified 'exposure management' platform (Tenable One) reflects the industry's shift from reactive vulnerability scanning to a more holistic, risk-based approach across diverse IT, cloud, and OT environments. The noted slowdown in new enterprise customer additions and slight dip in dollar-based net expansion rate, alongside concerns about macroeconomic conditions and government spending, suggest a competitive and potentially tightening market, consistent with broader economic uncertainties impacting enterprise software spending.

Comparison to Industry Standards

• The company's gross margin of 78% is generally competitive within the software and cybersecurity industry, indicating efficient delivery of its core services.
• The dollar-based net expansion rate of 107% is solid, though a slight decrease from 109% in the prior year. Leading SaaS companies often aim for 120%+ net expansion, suggesting Tenable has room for improvement in driving additional sales from existing customers, especially compared to high-growth peers in the cybersecurity space.
• The increase in customers with $100,000+ ACV by 18% is a positive indicator of enterprise adoption, comparable to growth seen by other established cybersecurity vendors expanding their footprint within large organizations.
• The decrease in new enterprise platform customers by 10% could signal increased competition or market saturation in certain segments, contrasting with some newer, rapidly expanding cybersecurity startups.
• The significant cash used for acquisitions ($196.2 million) reflects a common strategy among mature cybersecurity firms to acquire specialized technologies (like AI security from Apex and risk management from Vulcan) to enhance platform capabilities and maintain competitive edge, similar to moves by larger players like Palo Alto Networks or CrowdStrike in expanding their portfolios.

Management Changes

Corporate Governance

Legal Proceedings

• The company is not currently a party to any legal proceedings that would individually or collectively have a material adverse effect on its business, results of operations, financial condition, or cash flows.
• The company has received, and may continue to receive, claims from third parties asserting intellectual property rights infringement, which may necessitate future litigation for defense or to establish proprietary rights.

Stakeholder Impact

• **Shareholders**: The expanded stock repurchase program could increase shareholder value by reducing share count. However, the increased GAAP net loss and significant cash used for acquisitions and repurchases could impact short-term profitability and liquidity. The slight decrease in dollar-based net expansion rate and new enterprise customer additions might raise concerns about future growth momentum.
• **Employees**: The company's continued investment in research and development and sales and marketing suggests ongoing job opportunities and growth. The $15.5 million in termination benefits related to the former CEO's passing highlights the financial impact of executive transitions. Amendments to Co-CEO employment agreements provide enhanced security for top leadership.
• **Customers**: Strategic acquisitions of Apex Security and Vulcan Cyber are intended to enhance the Tenable One platform, offering customers improved AI-powered exposure management and cyber risk capabilities. However, potential impacts from macroeconomic conditions and government funding changes could affect customer purchasing decisions and sales cycles.
• **Suppliers**: The company's significant commitments to cloud service providers like Microsoft ($28.5M) and AWS ($230.3M) indicate stable and substantial business for these key suppliers. The reliance on channel partners means their operational stability directly impacts the company's ability to deliver products to end-users.
• **Creditors**: The company's first lien net leverage ratio of 0.88 is well below the 3.5 covenant, indicating strong compliance with debt obligations and a healthy financial position from a creditor's perspective. The Term Loan is being amortized as scheduled.

Next Steps

• Continue to invest in sales and marketing teams to increase revenue and expand the global customer base.
• Further invest in research and development efforts to enhance the functionality of the cloud-based platform and detect new network vulnerabilities.
• Assess the impact of recently issued accounting pronouncements (ASU 2023-09 and ASU 2024-03) on consolidated financial statements and disclosures.
• Monitor and manage contractual commitments for cloud services with Microsoft and Amazon Web Services.
• Continue to execute the expanded stock repurchase program, with an additional $250 million authorized in July 2025.
• Finalize the allocation of purchase price for Vulcan and Apex acquisitions as additional information becomes available.
• Monitor and adapt to the evolving regulatory environment for AI and machine learning technologies.

Key Dates

Recommendation

Tenable's Q2 2025 filing presents a mixed financial picture. While non-GAAP metrics, revenue growth, and free cash flow are strong, indicating solid operational performance and strategic execution through acquisitions, the increasing GAAP net loss and a slowdown in new enterprise customer additions are areas of concern. The significant cash outflow for acquisitions and share repurchases, while strategic, has reduced cash reserves. Furthermore, the company highlights new and evolving risks related to AI integration and broader macroeconomic uncertainties, which could impact future performance. Given the strong underlying operational performance offset by GAAP losses, cash burn, and emerging risks, a 'hold' recommendation is appropriate. Investors should monitor the integration of acquired technologies, the impact of AI-related risks, and the company's ability to convert non-GAAP profitability into sustainable GAAP net income.

Keywords

Cybersecurity, Exposure Management, Vulnerability Management, AI Security, Cloud Security, Cyber Risk Management, SaaS, Software, Enterprise Security, SEC Filing, 10-Q, Financial Results