10-K: Tenable Reports Strong Revenue Growth, Strategic AI Acquisitions

Tenable Holdings, Inc. announced an 11% revenue increase to $999.4 million for fiscal year 2025, alongside strategic acquisitions and a significant boost in operating cash flow.

Summary

• Revenue for fiscal year 2025 increased by 11% to $999.4 million, up from $900.0 million in 2024.
• Net loss improved to $36.1 million in 2025, compared to $36.3 million in 2024 and $78.3 million in 2023.
• Net cash provided by operating activities significantly increased to $266.8 million in 2025, from $217.5 million in 2024.
• Backlog surged to $159.9 million at December 31, 2025, a substantial increase from $33.2 million in 2024.
• The company acquired Apex Security, Inc. for $47.8 million in June 2025 and Vulcan Cyber Ltd. for $148.5 million in February 2025, enhancing its AI security and cyber risk management capabilities.
• Tenable's customer base grew to over 40,000, including approximately 65% of the Fortune 500 and 50% of the Global 2000.
• Customers with annual contract value of $100,000 or greater increased to 2,161 in 2025 from 1,988 in 2024.
• The dollar-based net expansion rate was 106% in 2025, a decrease from 108% in 2024 and 111% in 2023.
• A share repurchase program was increased to a total authorization of $700 million, with $362.4 million purchased through December 31, 2025.
• International revenue accounted for 47% of total revenue in 2025, up from 46% in 2024.

Sentiment

Score: 7

Explanation: StockSavvy.ai views this filing positively due to strong revenue growth, significant improvement in net loss, and robust operating cash flow, coupled with strategic acquisitions in key growth areas like AI security. The declining net expansion rate and cash balance are areas to monitor, but overall operational and strategic execution appears strong.

Positives

• Revenue grew by 11% year-over-year to $999.4 million in 2025, demonstrating continued top-line expansion.
• Net loss significantly narrowed to $36.1 million in 2025, a notable improvement from $78.3 million in 2023, indicating progress towards profitability.
• Operating cash flow increased substantially to $266.8 million in 2025, reflecting strong cash generation from core operations.
• Backlog experienced a dramatic increase to $159.9 million, suggesting robust future revenue visibility and demand for offerings.
• Strategic acquisitions of Apex Security and Vulcan Cyber strengthen the company's position in the critical and evolving AI attack surface and cyber risk management markets.
• Growth in high-value customers, with those having $100,000 or greater in annual contract value increasing to 2,161.
• The company maintains a strong market presence, serving over 40,000 customers globally, including a significant portion of Fortune 500 and Global 2000 companies.
• A substantial share repurchase program of $700 million authorized by the Board of Directors signals confidence in the company's valuation and commitment to returning value to shareholders.

Negatives

• The company continues to report net losses, with a $36.1 million loss in 2025, indicating ongoing challenges to achieve sustained profitability.
• New enterprise platform customer additions slightly decreased to 1,667 in 2025 from 1,689 in 2024 and 1,788 in 2023.
• The dollar-based net expansion rate has been declining, from 111% in 2023 to 106% in 2025, suggesting a slower rate of increased spending from existing customers.
• Cash and cash equivalents decreased significantly to $187.8 million in 2025 from $328.6 million in 2024, partly due to acquisitions and share repurchases.
• Interest income decreased by $7.3 million in 2025, primarily due to lower cash and short-term investments and reduced interest rates.
• The company's R&D teams maintain a significant presence in Tel Aviv, Israel, exposing operations to potential material impact from ongoing hostilities in the region.

Risks

• The company has a history of losses and may not achieve or maintain profitability in the future.
• Global economic, political, and geopolitical tensions, including war, natural disasters, and public health emergencies, could materially adversely affect business, results of operations, and financial condition.
• Intense competition in the cybersecurity market requires continuous innovation to remain competitive.
• The company may not be able to sustain its revenue growth rate in the future.
• Reliability and accuracy of data, solutions, and infrastructure, including those of third parties, are critical; compromises or failures could lead to adverse consequences.
• Incorporation of AI technologies, including generative AI, introduces operational, financial, regulatory, and reputational risks due to newness, potential inaccuracies, and evolving regulatory frameworks.
• Future quarterly results of operations are likely to fluctuate significantly due to various factors, making future results difficult to predict.
• Business and results of operations depend substantially on customer renewals and expansion of subscriptions; any decline would be harmful.
• Reliance on highly skilled personnel, including senior management and technical professionals, and the ability to expand sales and marketing operations are critical for growth.
• Reliance on third parties (e.g., AWS) to maintain and operate network infrastructure poses risks of service interruptions or security incidents.
• The sales cycle is long and unpredictable, particularly with large enterprises, and macroeconomic uncertainty can prolong it further.
• Stringent and changing data privacy and security laws (e.g., CCPA, GDPR, EU AI Act) pose compliance challenges, regulatory investigations, litigation, and financial penalties.
• Reliance on a third-party channel partner network (e.g., Ingram Micro) for a substantial amount of revenue introduces risks if partners favor competitors or experience disruptions.
• A portion of revenue from governmental and heavily regulated organizations is subject to challenges, including competitive bidding, budget cycles, and specific contract terms.
• The pricing model, based on IP addresses or IT assets, may face pressure to reduce prices or require changes to remain competitive.
• Failure of enterprise platform offerings to achieve sufficient market acceptance would harm results of operations and competitive position.
• The strategy of offering solutions in cloud, on-premises, or hybrid environments incurs increased expenses and poses challenges.
• Continued international expansion adds complexity and risks, including increased costs, foreign exchange volatility, and compliance with diverse regulations.
• Failure to provide high-quality customer support could negatively impact renewals and new sales.
• Recent and future acquisitions could disrupt business, divert resources, and introduce unforeseen liabilities or cybersecurity risks.
• Investments in private companies and private equity funds carry risks of partial or complete loss of invested capital and fair value fluctuations.
• The company's ability to use net operating losses to offset future taxable income may be subject to limitations due to ownership changes or statutory/regulatory changes.
• Failure to maintain proper and effective internal controls over financial reporting could adversely affect investor confidence and stock value.
• Unstable market and economic conditions, including inflation and interest rate fluctuations, may have material adverse consequences on business and share price.
• Catastrophic events, including natural disasters, cyberattacks, or pandemics, may disrupt business operations.
• Employees' inability to obtain and maintain required security clearances or failure to maintain a facility security clearance could adversely affect government contracts.
• Failure to protect proprietary technology and intellectual property rights could substantially harm business and operating results.
• Subject to intellectual property rights claims by third parties, which are costly to defend and could limit technology use.
• Use of open source software carries risks of non-compliance with licenses, potentially requiring public release of proprietary code.

Future Outlook

The company expects to continue investing in research and development, sales and marketing, and international expansion to grow its exposure management platform, particularly in AI security. It anticipates continued operating losses in the near term but believes existing cash and investments are sufficient for the foreseeable future. The company also expects seasonality in customer agreements to continue, with potential impacts from macroeconomic conditions and U.S. policy decisions on sales cycles in 2026.

Management Comments

• Management is focused on expanding market leadership in exposure management and scaling the business by capturing large market opportunities with Tenable One, their AI-powered platform, while expanding operating and free cash flow margins.
• The company intends to aggressively pursue new domestic and international customers by strategically investing in sales and marketing and leveraging its network of channel partnerships.
• Management plans to innovate to provide customers with unified visibility, insights, and actions that scale with the complexity of the modern attack surface, including investments in preemptive security and AI security.
• The Chief Security Officer (CSO) is responsible for implementing and maintaining cybersecurity risk assessment and management processes, monitoring the threat environment, and providing regular updates to the executive team, Cybersecurity Committee, and Board of Directors.

Industry Context

StockSavvy.ai notes that Tenable is positioning itself at the forefront of the evolving cybersecurity landscape by emphasizing 'exposure management' as a critical category beyond traditional vulnerability management. The company's focus on AI-powered solutions and strategic acquisitions in AI security (Apex Security) and cyber risk management (Vulcan Cyber) aligns with broader industry trends of increasing attack surface complexity, the rise of AI as both an enabler and a risk, and the need for unified security visibility. Competitors like Qualys, Rapid7, CrowdStrike, Palo Alto Networks, and Wiz are also active in various segments of this market, indicating intense competition. Tenable's strategy to integrate third-party data and offer solutions across hybrid and multi-cloud environments, OT, and identity systems reflects the industry's shift towards comprehensive, platform-based security approaches.

Comparison to Industry Standards

• Tenable's 11% revenue growth in 2025 is competitive within the cybersecurity software sector, which often sees high single to low double-digit growth for established players, though some high-growth SaaS companies may exceed this.
• The improvement in net loss from $78.3 million in 2023 to $36.1 million in 2025, while still a loss, indicates a positive trend in operational efficiency compared to peers that may still be heavily investing in growth at the expense of profitability.
• The significant increase in net cash provided by operating activities to $266.8 million demonstrates strong cash conversion, which is a favorable indicator compared to many software companies that may struggle with cash generation despite revenue growth.
• The dollar-based net expansion rate of 106% is solid, indicating existing customers are increasing their spending, though the declining trend from 111% in 2023 suggests a need to monitor customer upsell and cross-sell effectiveness relative to industry leaders who often maintain higher expansion rates (e.g., 120%+ for top SaaS companies).
• The acquisition strategy, particularly in AI security, positions Tenable to compete with companies like Palo Alto Networks and Wiz, which are also expanding their cloud and AI security portfolios, by integrating advanced capabilities into its Tenable One platform.

Management Changes

Corporate Governance

Legal Proceedings

• Not presently a party to any legal proceedings that would individually or taken together have a material adverse effect on the business, results of operations, financial condition, or cash flows.
• May receive claims from third parties asserting intellectual property rights infringement.
• Currently under tax examination in France for tax years 2019 through 2022.

Stakeholder Impact

• Shareholders: Potential for stock price appreciation due to revenue growth and strategic positioning, but also risk of volatility. Share repurchase program aims to return value. No dividends expected in the foreseeable future.
• Employees: Continued investment in R&D and international expansion suggests job growth. Focus on attracting and retaining highly skilled personnel, with robust compensation and benefits. Exposure to geopolitical risks for international teams (e.g., Israel).
• Customers: Benefit from enhanced exposure management solutions, particularly with AI security capabilities from recent acquisitions. Continued investment in cloud offerings and support aims to improve service reliability and performance. Data privacy and security remain critical concerns.
• Channel Partners: Continued reliance on distributors and resellers for market reach and sales, with efforts to expand the global customer base through these partnerships. Non-exclusive agreements mean partners may also work with competitors.
• Creditors: The company's Term Loan and Revolving Credit Facility are subject to covenants and variable interest rates, impacting debt service obligations. Strong operating cash flow supports debt management.

Next Steps

• Continue to acquire new enterprise platform customers, domestically and internationally, through strategic investments in sales and marketing and leveraging channel partnerships.
• Expand within the existing customer base by targeting additional teams, business units, or geographies and pursuing broad enterprise deployments.
• Invest in the technology platform to innovate and provide unified visibility, insights, and actions, focusing on preemptive security and AI security and remediation.
• Explore acquisition opportunities for complementary businesses, technology, and development personnel.
• Monitor and evaluate the impact of macroeconomic conditions and U.S. policy decisions on sales cycles in 2026.

Key Dates

Recommendation

The company demonstrates strong operational momentum with an 11% revenue increase and a significant improvement in net loss, moving closer to profitability. The substantial increase in operating cash flow and backlog indicates robust underlying business health and future revenue potential. Strategic acquisitions in AI security and cyber risk management position the company well in a rapidly expanding market. While the declining dollar-based net expansion rate and cash balance warrant monitoring, the overall strategic direction, market leadership, and financial improvements suggest a positive outlook for long-term growth-oriented investors.

Keywords

Cybersecurity, Exposure Management, Vulnerability Management, AI Security, Cloud Security, Tenable One, Nessus, Risk Management, Software-as-a-Service, SaaS, Cyber Exposure, Data Privacy, SEC Filing, 10-K, Tenable Holdings