Skip to content

Dossier · TENB · Dormant

TENB · Tenable Holdings, Inc. · Stock research

MEDIUM Special situation Catalyst · cybersecurity

Last analysed ·

Current thesis

Legacy vuln-scanner re-rated as an AI beneficiary: Hexa AI GA on Claude at a 60% tier premium, OpenAI Daybreak (2026-06-22), FedRAMP High/IL5 (2026-06-29), and four target raises in two weeks including Scotiabank's $26→$50 upgrade. Price $39.88 sits above the ~$30 consensus target on 7-8% guided growth — the 2026-07-29 Q2 print is the binary that decides whether the multiple is earned.

Invalidation trigger

A weekly close below $33 forfeits the pre-upgrade shelf and the entire 2026-07-06 gap, restoring broken-laggard structure. Secondary: a 2026-07-29 Q2 print that leaves the FY26 guide at $1.068–1.078B with Tenable One flat or below 41% of new business.

Thesis status

Open commitment catalyst in 1dscored if the trigger above fires How this is scored →

Latest analysis and events for TENB —

As of 2026-07-20, orbyd's latest analysis for Tenable Holdings, Inc. (TENB): Legacy vuln-scanner re-rated as an AI beneficiary: Hexa AI GA on Claude at a 60% tier premium, OpenAI Daybreak (2026-06-22), FedRAMP High/IL5 (2026-06-29), and four target raises in two weeks including Scotiabank's $26→$50 upgrade. Price $39.88 sits above the ~$30 consensus target on 7-8% guided growth — the 2026-07-29 Q2 print is the binary that decides whether the multiple is earned.

Invalidation trigger: A weekly close below $33 forfeits the pre-upgrade shelf and the entire 2026-07-06 gap, restoring broken-laggard structure. Secondary: a 2026-07-29 Q2 print that leaves the FY26 guide at $1.068–1.078B with Tenable One flat or below 41% of new business.

Next dated event on file: — catalyst in 1d.

Note: I've drafted this as a public research dossier. Two things worth flagging before it ships: the earnings date in the prior dossier (2026-07-28) was wrong — Tenable's own release says after close Wednesday 2026-07-29 — and the price context the engine passed was empty, so everything below is anchored to the 2026-07-17 close of $39.88 pulled fresh. The stock is roughly 33% above where the last dossier framed it, which changes the read materially.

TENB — Tenable Holdings, Inc.

Current Thesis

Tenable has stopped trading like the laggard of cyber software. The stock closed at $39.88 on 2026-07-17 against a 52-week range of $15.73–$43.67 — roughly 45% above the ~$27.43 June low and within 9% of the high. The driver is not the P&L; it is a re-rating of what Tenable is. Hexa AI, the agentic engine inside Tenable One, reached general availability in Q2 2026 powered by Anthropic's Claude at a 60% price premium on the advanced tier. On 2026-06-22 the company joined OpenAI's Daybreak Cyber Partner Program with GPT-5.5. On 2026-06-29 Tenable One Cloud Exposure cleared FedRAMP High and DoD Impact Level 5, opening federal and defense budget lines that a pure vuln-scanner does not reach.

The sell-side has now moved, and moved violently. Scotiabank's Patrick Colville upgraded to Sector Outperform on 2026-07-06 and took the target from $26 to $50 — a near-doubling in one note — arguing the market is not pricing the AI opportunity and modeling revenue growth of 13% exiting FY26 on Tenable One mix shift. JP Morgan raised to $40 on 2026-06-30. TD Cowen went $38 → $44 and Barclays $28 → $41, both on 2026-07-13. Four target raises inside two weeks is the shape of narrative acceleration, and the theme around it is ACCELERATING, not maturing.

What the tape has not yet been given is a number. Q2 guidance calls for $263–266M in revenue — about 7–8% growth — and FY26 for $1.068–1.078B. The entire move is anticipatory. The 2026-07-29 print after the close is where the AI story either converts into platform mix and ARR or gets re-priced back toward the fundamentals that justified a $26 target eight weeks ago.

Bullish and bearish views on Tenable Holdings, Inc.

The model's bull view on Tenable Holdings, Inc. (TENB), in brief: Sell-side capitulation is underway, not finished. The bear view: Growth is still single-digit at the guide. Both cases follow in full.

Bull Case

  • Sell-side capitulation is underway, not finished. Scotiabank $26 → $50 with an upgrade (2026-07-06), JPM → $40 (2026-06-30), TD Cowen $38 → $44 and Barclays $28 → $41 (both 2026-07-13). The published consensus target still sits near $30 because most of the 23-analyst panel has not refreshed. Stale consensus below a re-rating price is a mechanical source of forward upgrades.
  • Two frontier labs inside one quarter. Anthropic (May 2026, non-public Claude models plus embedded engineering) and OpenAI's Daybreak program with GPT-5.5 (2026-06-22). Hexa is not a wrapper announcement — it shipped to GA in Q2 2026 with a 60% uplift on the advanced tier, which is the pricing lever that can break single-digit growth.
  • FedRAMP High + IL5 on 2026-06-29 is a dated, verifiable expansion of addressable budget. Federal exposure-management spend is sticky and multi-year, and the authorization is a prerequisite competitors must earn separately.
  • Mix shift is already measurable. Tenable One was 41% of new business in Q1 2026, up 8 points YoY (Q1 call, 2026-04-30). Scotiabank's 13%-exit-rate thesis is an extrapolation of a curve that already exists in the disclosure.
  • The financial base funds the pivot. Q1 2026 non-GAAP operating margin 23.6% (+320bps YoY), non-GAAP EPS $0.47, record unlevered FCF $88.6M, 96% recurring revenue, and 6.1M shares repurchased for $130M. Operating leverage is running well ahead of the top line, so a modest revenue acceleration drops through hard.

Bear Case

  • Growth is still single-digit at the guide. Q2 revenue guidance of $263–266M implies roughly 7–8%. TTM revenue of $1.02B grew 10.7%; FY2025 was $999.41M on 11% growth with a $36.12M net loss. CRWD, PANW and ZS are compounding at twice that rate. A 4.4x-revenue multiple on 8% growth is a bet on the next number, not the current one.
  • Price is above almost every target on the board. At $39.88 the stock trades through the ~$30 mean target and above JPM's $40 by a hair. The 11 Buy / 12 Hold split has not flipped — Barclays raised its target 46% while explicitly keeping Equal-Weight, which is a valuation catch-up, not a change of conviction.
  • The move is nine trading days old and unpaused. The Scotiabank upgrade produced a +6% single-session gap on 2026-07-06 and price has held near the highs since. There is no higher-low retest yet, which means anyone entering here owns the full gap as downside.
  • Binary risk lands 2026-07-29. A stock that has re-rated ~45% off its June low into a print carries asymmetric disappointment risk. An in-line quarter with an unchanged FY26 guide would be a negative surprise relative to what the tape has already paid for.
  • Take-private optionality is undated and has failed before. The 2024 "exploring a sale" report ran the stock to a $47.15 close and no deal materialized. At $4.40B market cap the PE math is harder than it was at $3.1B.

Setup & Price Structure

Price closed $39.88 on 2026-07-17, market cap $4.40B, versus a 52-week range of $15.73–$43.67. The structure inverted in six weeks: the chart that spent H1 2026 pinned beneath the 50- and 200-day is now extended above both, with the 2026-07-06 upgrade gap as the defining feature. The relevant shelf is the pre-upgrade consolidation in the $33–34 area — that band was resistance in late June and is the first level where the July re-rating would be structurally undone.

Volume of 2.81M shares on the 2026-07-17 session is consistent with continued institutional accumulation rather than exhaustion. There is no retail-mania signature here — no WSB velocity spike, no options-driven squeeze mechanics. This is a sell-side repricing with real product dates behind it, which historically decays more slowly than a retail impulse.

On the beginner-trap matrix: extension above the moving averages is real and should govern sizing, but extension alone in an accelerating theme is confirmation. The genuine constraint is the calendar. Earnings land 2026-07-29 after the close, meaning the three-trading-day blackout window opens around 2026-07-24. Initiating fresh exposure inside that window converts a narrative trade into a coin flip on a guide.

Catalyst Calendar (next 30 days)

  • 2026-07-29 (confirmed, after market close) — Q2 2026 results for the period ended 2026-06-30. Guide: revenue $263–266M, non-GAAP diluted EPS $0.46–0.48. The numbers that matter are Tenable One as a percentage of new business (41% in Q1, +8pts YoY) and any disclosed Hexa attach or advanced-tier uplift. A raised FY26 revenue guide above the $1.068–1.078B band is the single cleanest confirmation available.
  • 2026-07-29/30 (est.) — Q2 earnings call commentary on FY26 exit-rate growth. Scotiabank's 13% figure is now the number the buy-side will measure management against.
  • Rolling through August 2026 — post-print target revisions from the panel that has not yet moved. Twelve Hold ratings against a $39.88 price is an unstable configuration that a good quarter resolves upward.
  • Undated — any renewed take-private or strategic-review headline. Optionality, not a thesis; do not pay up for it.

Elapsed catalysts

  • ~2026-07-24 (est.) — earnings blackout window opens, three trading days ahead of the print. Fresh entries after this point are binary. (passed 4d ago)

What Would Change Our Mind

A weekly close below $33 forfeits the pre-upgrade shelf and the entire 2026-07-06 gap, returning the chart to the broken-laggard structure it wore for the first half of 2026. That is the price-level break, and it is the one that matters most because the fundamental case has not yet caught up to the quote.

The secondary break is the 2026-07-29 print itself: an FY26 revenue guide left unchanged at $1.068–1.078B, combined with Tenable One flat or lower as a share of new business versus Q1's 41%, would show the AI repositioning generating headlines rather than dollars. A third condition — the cyber theme flipping from ACCELERATING to SATURATED, visible as CRWD/PANW/ZS rolling over while Tenable is sold as a funding source — would remove the cluster support that makes this setup work at all.

Conversely, a guide raise plus disclosed Hexa attach economics would justify treating the $50 Scotiabank case as the working target rather than an outlier.

Correlation Notes

Tenable trades inside the cybersecurity complex and historically underperforms CRWD, PANW and ZS on green tape while getting sold first on rotation days — the classic funding-source profile of a single-digit grower in a 20%-growth group. The July move partially breaks that pattern, which is itself the signal worth tracking: if Tenable now leads the group on up-days rather than lagging, the re-rating is being taken seriously by allocators.

Second-order correlation runs to the AI infrastructure trade. The Anthropic and OpenAI relationships mean Tenable is increasingly priced as an AI-application beneficiary rather than a security-software incumbent, which imports beta from a very different factor. That cuts both ways — a broad AI de-rating would hit TENB harder than its fundamentals warrant, and the federal exposure added by the 2026-06-29 FedRAMP High authorization introduces sensitivity to defense and civilian IT appropriations timing.

Notes

  • Q2 2026 earnings ~late July 2026 (est.) — binary guide event; recheck earnings blackout before any entry.
  • M&A/take-private is the only asymmetric hook; 2024 'exploring a sale' report popped it to a $47.15 close then no deal materialized — treat as undated optionality, not a thesis.
  • Single-digit-growth laggard of the cyber theme: underperforms leaders (CRWD/PANW/ZS) on up-days, sold as funding source on rotation.
  • Q1'26 fundamentals: rev $262.1M (+9.6%), non-GAAP op margin 23.6% (+320bps), non-GAAP EPS $0.47, record unlevered FCF $88.6M, 96% recurring, Tenable One 41% of new business (+8pts).
  • Stephens Equal-Weight, PT $29 (2026-05-26); consensus PT ~$28.85, high $38, low $20 — spot sits at target.
  • Q2 2026 earnings confirmed 2026-07-28 after market close — binary guide/platform-mix event; re-check earnings blackout (≤3 trading days out from ~2026-07-23) before any entry.
  • NEW narrative leg vs prior value-trap framing: Hexa AI agentic exposure-management engine (GA Q2 2026, 60% price premium on advanced tier), Anthropic partnership (non-public Claude models + embedded eng, May 2026), OpenAI Daybreak Cyber Partner Program with GPT-5.5 (2026-06-22). Watch whether this converts to platform-mix/ARR acceleration on the print.
  • Tenable One was 41% of new business in Q1'26 (+8pts YoY) — the platform-mix number to watch on 2026-07-28 for evidence the AI pivot is monetizing.
  • M&A/take-private remains undated optionality, not a thesis; 2024 'exploring a sale' report popped it toward a $47 close then no deal materialized. Don't pay up for a buyout that may never come.
  • Still the laggard of cyber software: +9.6% Q1 rev vs 20%+ at CRWD/PANW/ZS; gets sold as a funding source on rotation days. Mean PT ~$29 (spot ~$30), street high $38, Wells Fargo Hold (June 2026), Stephens Equal-Weight $29 (2026-05-26).
  • EARNINGS DATE CORRECTION: prior dossier carried 2026-07-28. Tenable's own release confirms Q2 2026 results after market close Wednesday 2026-07-29. Blackout window opens ~2026-07-24.
  • Price context was passed EMPTY by the pipeline — all levels anchored to a fresh 2026-07-17 close of $39.88 (52w range $15.73-$43.67, mkt cap $4.40B, volume 2.81M). Prior dossier framed the name near $30; the ~33% gap materially changed the read.
  • Analyst cluster (the acceleration signal): Scotiabank 2026-07-06 upgrade Sector Perform to Sector Outperform, PT $26 to $50, models 13% revenue growth exiting FY26 on Tenable One mix; JPM 2026-06-30 Overweight PT to $40; TD Cowen 2026-07-13 Buy PT $38 to $44; Barclays 2026-07-13 PT $28 to $41 but KEPT Equal-Weight.
  • Published consensus PT still ~$30 (11 Buy / 12 Hold / 0 Sell across 23 analysts) versus a $39.88 quote. Stale consensus below price is a mechanical source of forward upgrades post-print.
  • Q2 2026 guide: revenue $263-266M, non-GAAP diluted EPS $0.46-0.48. FY26 guide $1.068-1.078B. A raise above that band is the cleanest confirmation available on the print.
  • Q1'26 actuals for comparison: revenue $262.1M (+9.6%), non-GAAP op margin 23.6% (+320bps), non-GAAP EPS $0.47, record unlevered FCF $88.6M, 96% recurring, Tenable One 41% of new business (+8pts YoY), 6.1M shares repurchased for $130M.
  • KEY METRIC TO WATCH 2026-07-29: Tenable One as% of new business vs 41% in Q1'26, plus any disclosed Hexa attach rate or advanced-tier uplift realization.
  • Product/partnership dates behind the re-rating: Hexa AI GA in Q2 2026 powered by Anthropic Claude at 60% premium on advanced tier; Anthropic partnership May 2026 (non-public models + embedded engineering); OpenAI Daybreak Cyber Partner Program with GPT-5.5 announced 2026-06-22; FedRAMP High + DoD Impact Level 5 for Tenable One Cloud Exposure 2026-06-29.
  • M&A/take-private remains undated optionality only. The 2024 'exploring a sale' report ran the stock to a $47.15 close with no deal. At $4.40B cap the PE underwriting math is harder than at $3.1B — do not pay up for it.
  • FY2025 baseline: revenue $999.41M (+11%), net loss $36.12M. TTM revenue $1.02B (+10.7%). Still a single-digit-to-low-double-digit grower against 20%+ at CRWD/PANW/ZS.
  • Correlation watch: TENB historically lags the cyber complex on up-days and is sold first on rotation. If it now LEADS CRWD/PANW/ZS on green tape, the re-rating has allocator buy-in. If it reverts to funding-source behaviour, the July move was a squeeze of stale shorts.

Related · shared themes

OKTA

Okta, Inc.

Identity-security re-rating in its second, sell-side-led leg; the upgrade wave is still building nearly two months post-print — Wells Fargo lifted its target to $150 from $100 on 2026-07-20, collapsing the low-end dispersion. Cyber theme ACCELERATING, this leg maturing; open risk is paying up for a stretched 52-week-high tape.

MEDIUM

PANW

Palo Alto Networks, Inc.

AI-security spend narrative accelerating with third-party confirmation: IBM missed Q2 ($17.2B vs $17.86B) on 2026-07-14 and blamed budget migration into cybersecurity — PANW +6.4%, CRWD +10%, BUG +6% same session. New ATH close $357.53 (2026-07-06), 8% flush on 7/07-7/08 fully reclaimed, $359.39 on 2026-07-18. Cluster-confirmed continuation; 291x multiple is the risk, not the signal.

HIGH

FROG

JFrog Ltd.

Software-supply-chain-security plus AI-agent "trust layer" narrative keeps re-rating: the analyst cluster now leads price above $100 (UBS Buy $110 Jul 2, Truist Buy $105 Jul 9), confirming the continuation tell flagged in June. Fundamentals accelerating (Q1 rev +26%, security 10% of ARR), but a fresh long is extended near 52-week highs with the ~Aug 6 Q2 print the next binary.

MEDIUM

KMX

CarMax Inc.

Turnaround re-rating went live in July: KMX broke the $50–$53 shelf to close $57.33 on 2026-07-17 (+17.2% in five sessions) after a Q1 FY27 blowout (EPS $1.31 vs ~$0.95, revenue $8.01B +6.2%), CEO Keith Barr buying 9,400 shares at $53.005 on 2026-06-22, and Stephens flipping to Overweight with a $66 target. Consensus PT is $41.73 — 27% below spot — so the upgrade cycle is only beginning.

MEDIUM