Tenable adds always-on AI routines to Hexa platform

Tenable has added always-on functions to Tenable Hexa AI, expanding its exposure management platform with persistent autonomous workflows.

The new functions let Tenable Hexa AI retain environmental context across sessions, schedule recurring tasks and co-ordinate multi-step remediation work for security teams. Tenable describes Hexa AI as the agentic engine within its Tenable One exposure management platform.

The system is designed to move beyond AI tools that require analysts to repeatedly enter prompts or manually start workflows. Instead, it stores risk context, priorities and settings, allowing it to continue routine work without fresh instructions each time.

This approach centres on what Tenable calls a connected fleet of agents, intended to work together on security tasks spanning detection, triage, remediation and reporting.

Routine tasks

Examples include daily reviews of critical exposures, followed by analysis and triage based on exploitability and reachability. The software can then trigger remediation steps and verify whether patches have been applied correctly.

The system can also run weekly drift analysis to identify vulnerabilities linked to identity exposures and create tickets for critical deviations. Another use case is weekly executive and compliance reporting, with briefings intended to reflect current security and compliance conditions across multiple domains.

The update comes as security suppliers increasingly position AI tools as a way to reduce analysts' manual workload. Tenable argues that many existing products still depend on on-demand use, limiting the speed and consistency they can offer when threats are moving quickly.

By adding persistent memory and scheduled routines, Tenable is trying to make AI systems operate more like standing processes than one-off assistants. The aim is to let security teams oversee automated work rather than repeatedly launch and manage it.

Eric Doerr, Chief Product Officer at Tenable, framed the release as a response to scale problems inside security operations teams.

"Security teams can't scale if they're confined to a chatbot or a disjointed, highly-specific agent," Doerr said.

"Tenable Hexa AI delivers on the autonomous promise of AI with a fleet of agents that all work together, rather than in silos, to help customers advance security goals. Only Tenable offers this level of agentic autonomy at scale, eliminating repetitive operational bottlenecks and delivering a continuous, machine-speed defense."

Platform context

The new functions draw on Tenable's Exposure Data Fabric, which it describes as a repository of contextualised exposure data and intelligence. That data layer underpins the memory function that tracks an organisation's risk environment and operational settings over time.

The new routines are aimed at three operational goals: reducing repetitive analyst work, maintaining security processes outside office hours and cutting mean time to remediation. In practice, that means automating recurring workflows, running tasks overnight or at weekends and checking whether patching actions have worked once an IT ticket is closed.

The changes will be available to customers on the Tenable One Foundation and Advanced tiers in August 2026. Tenable added that Hexa AI sits alongside Tenable AI Exposure, a separate offering focused on helping organisations understand and secure their use of artificial intelligence.

Tenable's broader position is that security teams need both to govern AI adoption and to use AI to handle operational work at greater scale. It says the combination of those products inside Tenable One is intended to support that dual approach.

The release highlights a wider shift in cybersecurity software towards autonomous agents that can carry out tasks across multiple tools and domains. For suppliers, the challenge is to show that these systems can do more than generate recommendations, and can instead carry through actions with enough continuity and context to be useful in daily operations.

For buyers, the practical test is likely to be whether such products reduce labour-intensive processes without introducing new oversight burdens. Tenable's latest update is built around that promise of continuity, with software that keeps context between sessions and follows set routines without waiting for a user to restart the process.