ProgrammableMarketing/tenable.com (opens in a new tab)
PDF

Views

  • Plan
  • Roadmap
  • Research

On this page

  • The brief
  • Start here
  • Idea portfolio
  • Effort vs impact
  • This week · 6
  • This quarter · 9
  • Big bets · 3
  • Wildcards · 3
  • How we can help
Generated Oct 22, 2026
  1. Programmable
  2. Playbooks
  3. Tenable
Tenable logo

growth playbook · Oct 22, 2026

tenable.com (opens in a new tab)

Tenable growth playbook

Diagnosis

Tenable is a public company growing about 9% a year with over $1 billion in revenue, and its hiring points at sharper growth marketing: an integrated search manager for paid, technical SEO and prompt share, a content director with a GEO-first mandate, a cloud and OT product marketing director, a motion designer, more SDRs and territory managers, a Canada country manager and an AWS alliance architect.

The biggest quick win is commercial: Tenable's CVE and plugin pages, where security teams land on every new vulnerability, offer no path to a scan, trial or demo and are missing from the sitemaps.

This playbook adds that path, rapid-response search, prompt-share tracking and timed Nessus upgrades first, then council research, SDR signals, Canada and AWS motions, and bigger bets on a free AI exposure check and a public exposure index.

Growth Score

7/10

Biggest Opportunity

Turn Tenable's research reach (CVE pages, advisories, FAQs) into trials and pipeline, and make it the source AI assistants cite on exposure management.

Biggest Risk

Platform rivals (Wiz, CrowdStrike, Qualys, Rapid7, Microsoft) bundle exposure features, and single-digit growth leaves little room to wait for content to pay off.

01

Start here

The three moves to make first. Each one is written up in full below.

  1. 1

    Give every CVE page a "check if you are exposed" path: today it links to no product at all

    Add the module to the 100 most-visited CVE pages and compare trial starts with the month before.

    High impact First result in 1 month
  2. 2

    A rapid-response search playbook: ads on a new CVE's name within hours of the FAQ post

    Build the campaign template and approval path now.

    High impact First result in 1 week
  3. 3

    A weekly prompt-share report for 50 buyer questions against Qualys, Rapid7, Wiz and CrowdStrike

    Write the 50 prompts with product marketing.

    High impact First result in 2 weeks

02

Your idea portfolio

21 ideas, grouped by when to run them. Open any idea for how to run it: the steps, who to approach, copy you can use, and how to measure it.

  • 8 ideas are marked Unexpected: plays you are unlikely to have tried.

Every idea placed by the effort it takes against the impact it could have. Quick wins sit top left; select a number to open that idea. The filters below narrow the list by status, timing, category and what Programmable can build.

Effort vs impactEach number is an idea. Select one to open it.
Impact →
Quick wins · 2Big bets · 9Fill-ins · 5Reconsider · 5
Effort →

Showing 21 of 21 ideas

This week 6

Quick wins with a clear first action.

  • 01

    Tenable's new search manager is measured on pipeline and asked to test "alternative lead capture mechanisms" and fix "crawlability, indexability". Tenable's CVE pages are where security teams land when a new vulnerability breaks, which is the moment they need a scanner. Yet a CVE page such as CVE-2024-3094 has a title that is only the ID, no structured data, and no link to Nessus, a trial, a demo or Tenable One: just research menus, references and one blog post. The matching plugin page has no product link either, and none of the /cve or /plugins pages are in Tenable's sitemaps.

    High impactMedium effort First result in 1 month Marketing Manager

    First action

    Add the module to the 100 most-visited CVE pages and compare trial starts with the month before.

    How to measure it

    Trial starts from research pages

    Now
    –
    Target
    from near zero to 500 a month
    By
    90 days

    Steps

    1. 1

      Baseline

      Traffic, entrances and conversions on /cve and /plugins.

      Marketing Manager, Integrated Search & Google Media 2 days

    2. 2

      Design the module

      Detecting plugins, three paths, customer deep link.

      Senior Design Manager, Brand & Motion 1 week

    3. 3

      Build

      Template change in the research app.

      Web Team Lead 1 week

    4. 4

      Titles and schema

      Descriptive titles; structured data per CVE.

      Senior Manager, SEO/GEO 1 week

    5. 5

      Sitemaps

      Add /cve and /plugins sitemaps; submit.

      Senior Manager, SEO/GEO 2 days

    6. 6

      Route leads

      Marketo source and SDR follow-up for trials.

      Marketing Operations Manager 3 days

    7. 7

      Test

      CTA wording and placement A/B.

      Marketing Manager, Integrated Search & Google Media 4 weeks

    8. 8

      Report

      Research pages as a pipeline channel.

      Marketing Manager, Integrated Search & Google Media monthly

    First result
    1 month
    Cost
    Web team time
    Owner
    Marketing Manager, Integrated Search & Google Media

    Smallest test

    Add a "scan for this" link to the top 20 CVE pages this week.

    Why it works

    Add one module to every CVE and plugin page: "Check whether you are exposed", naming the Nessus plugins that detect it, with three paths: a Nessus Professional trial for practitioners, a Tenable One demo for enterprises, and "already a customer? open this in Tenable One". Write titles as "CVE-ID: product, type and severity". Add structured data and sitemaps for /cve and /plugins. Track trial starts and demo requests from these pages as their own channel.

    The visitor arrives with an urgent, specific need that Tenable's product answers; a single module on pages that already exist turns research traffic into trials without new content.

    Ready to use

    CopyCVE page module

    Check whether you are exposed to {CVE-ID}
    Detected by: Nessus plugins {IDs} (updated {date})
    [Start a Nessus Professional trial]  [See it in Tenable One - request a demo]
    Already a customer? [Open {CVE-ID} in Tenable One]
    Related: {FAQ blog}  {Research advisory}

    Risks and how to handle them

    • Research users dislike sales pressure

      Keep the module small, factual and below the description.

    • Sitemap size

      Split by year and include only pages with content.

    Evidence

    • Your websiteCVE pages (checked October 21, 2026, e.g. CVE-2024-3094): the title is only the CVE ID ("CVE-2024-3094 | Tenable®"), there is no structured data, and the page links only to research navigation, references and one related blog post. It has no link to Nessus, a trial, a demo or Tenable One, and no "check whether you are exposed" step. The matching Nessus plugin page has a descriptive title ("Potential exposure to XZ Utils SSH Backdoor (CVE-2024-3094)") but also no product or trial link.Source
    • Your websiteSitemap (6,598 URLs in four files, October 21, 2026): 3,265 blog posts (28 "frequently asked questions" CVE explainers), 888 research advisories, 707 press releases, 389 webinars, 261 Security Center dashboards, 59 case studies; but none of the /cve, /plugins, /audits or /indicators pages are in any sitemap. robots.txt allows them, and an llms.txt describes products and solutions.Source
    • HiringMarketing Manager, Integrated Search & Google Media (posted October 5, 2026, Columbia MD or Boston): owns Google Search, Bing, YouTube and YouTube TV campaigns tied to theater pipeline targets; builds "structured testing frameworks to optimize ad performance, landing page experiences, and alternative lead capture mechanisms"; performs technical SEO "to ensure high crawlability, indexability, and keyword alignment"; works with the Senior Manager, SEO/GEO on "incremental lift analysis" and "cannibalization risks"; tracks "competitor SERP dominance, keyword gaps, and prompt share" and "GEO/Prompt tracking across AI search platforms".Source
    • Your websiteBuy page: Nessus Professional "1 year license / $4,790", Nessus Expert $6,790, Tenable One Vulnerability Management "$3,700" a year for 100 assets, purchasable online "for up to 250 assets", and Web App Scanning $6,790 for 5 FQDNs; other products by custom quote. Nessus Essentials is free for non-commercial use with up to 5 IPs and a 30-day delay on plugin updates; Essentials Plus (up to 20 IPs) is for hobbyists, students and educators via the Nessus for Education program.Source
  • 02

    Tenable publishes "frequently asked questions" posts on major CVEs (28 so far) and the content director must "quickly generate blog copy, especially for rapid response". Searches for a new CVE spike for days, with little paid competition early.

    High impactLow effort First result in 1 week Marketing Manager

    First action

    Build the campaign template and approval path now.

    How to measure it

    Conversions per campaign

    Now
    –
    Target
    50
    By
    1 quarter

    Steps

    1. 1

      Template

      Campaign, ads, negative keywords.

      Marketing Manager, Integrated Search & Google Media 2 days

    2. 2

      Trigger

      Research alert to marketing.

      Tenable Research Lead 1 day

    3. 3

      Approve

      Fast legal and brand check.

      Director, Content Marketing 1 day

    4. 4

      Launch

      Within hours of the FAQ.

      Marketing Manager, Integrated Search & Google Media per event

    5. 5

      Retire

      When search volume drops.

      Marketing Manager, Integrated Search & Google Media per event

    6. 6

      Review

      Cost per trial by event.

      Marketing Manager, Integrated Search & Google Media monthly

    First result
    1 week
    Cost
    Ad budget per event
    Owner
    Marketing Manager, Integrated Search & Google Media

    Smallest test

    Run it for the next critical CVE.

    Why it works

    When Research flags a critical CVE, launch a pre-built Google and Bing campaign on the CVE ID and its nickname within hours, landing on the FAQ post with the exposure module from idea 1. Close it when searches fall.

    It buys the most urgent search moments at low cost and shows Tenable as first to answer.

    Risks and how to handle them

    • Seen as exploiting incidents

      Lead with the free guidance, not a sales message.

    Builds on

    Evidence

    • HiringDirector, Content Marketing (open since August 18, updated October 13, 2026): "Implement a GEO-first approach to all external marketing content" for "citation potential across AI-powered answer engines"; run "the global Exposure Management Leadership Council" and turn CISO discussions into "regular original reports and content"; influence "the research calendar" with Tenable Research; "quickly generate blog copy, especially for rapid response"; map "derivative content strategies to the buyer journey"; report "organic visibility, engagement and pipeline contribution".Source
    • Your websiteSitemap (6,598 URLs in four files, October 21, 2026): 3,265 blog posts (28 "frequently asked questions" CVE explainers), 888 research advisories, 707 press releases, 389 webinars, 261 Security Center dashboards, 59 case studies; but none of the /cve, /plugins, /audits or /indicators pages are in any sitemap. robots.txt allows them, and an llms.txt describes products and solutions.Source
    • HiringMarketing Manager, Integrated Search & Google Media (posted October 5, 2026, Columbia MD or Boston): owns Google Search, Bing, YouTube and YouTube TV campaigns tied to theater pipeline targets; builds "structured testing frameworks to optimize ad performance, landing page experiences, and alternative lead capture mechanisms"; performs technical SEO "to ensure high crawlability, indexability, and keyword alignment"; works with the Senior Manager, SEO/GEO on "incremental lift analysis" and "cannibalization risks"; tracks "competitor SERP dominance, keyword gaps, and prompt share" and "GEO/Prompt tracking across AI search platforms".Source
  • 03

    Both new marketing hires are tasked with GEO: the search manager tracks "prompt share" and the content director wants "citation potential across AI-powered answer engines". A baseline makes that measurable.

    High impactLow effort First result in 2 weeks Senior Manager

    First action

    Write the 50 prompts with product marketing.

    How to measure it

    Tenable citation share

    Now
    –
    Target
    +15 points
    By
    2 quarters

    Steps

    1. 1

      Write prompts

      50 buyer questions.

      Director of Product Marketing, Cloud & OT Security 2 days

    2. 2

      Baseline

      Run in four assistants.

      Senior Manager, SEO/GEO 2 days

    3. 3

      Tooling

      Automate weekly runs.

      Senior Manager, SEO/GEO 1 week

    4. 4

      Find gaps

      Missing or wrong answers.

      Director, Content Marketing weekly

    5. 5

      Fix pages

      Answer-first updates.

      Director, Content Marketing ongoing

    6. 6

      Report

      Monthly share vs rivals.

      Senior Manager, SEO/GEO monthly

    First result
    2 weeks
    Cost
    Tool cost
    Owner
    Senior Manager, SEO/GEO

    Smallest test

    Run ten prompts by hand this week.

    Why it works

    Pick 50 buyer prompts (exposure management platform, CNAPP for mid-market, OT security for utilities, Nessus alternatives), run them weekly in the main assistants, and record who is cited and which Tenable page. Feed gaps into the content calendar.

    What is measured gets fixed, and it shows which pages earn citations.

    Risks and how to handle them

    • Answers vary

      Run each prompt several times.

    Evidence

    • HiringMarketing Manager, Integrated Search & Google Media (posted October 5, 2026, Columbia MD or Boston): owns Google Search, Bing, YouTube and YouTube TV campaigns tied to theater pipeline targets; builds "structured testing frameworks to optimize ad performance, landing page experiences, and alternative lead capture mechanisms"; performs technical SEO "to ensure high crawlability, indexability, and keyword alignment"; works with the Senior Manager, SEO/GEO on "incremental lift analysis" and "cannibalization risks"; tracks "competitor SERP dominance, keyword gaps, and prompt share" and "GEO/Prompt tracking across AI search platforms".Source
    • HiringDirector, Content Marketing (open since August 18, updated October 13, 2026): "Implement a GEO-first approach to all external marketing content" for "citation potential across AI-powered answer engines"; run "the global Exposure Management Leadership Council" and turn CISO discussions into "regular original reports and content"; influence "the research calendar" with Tenable Research; "quickly generate blog copy, especially for rapid response"; map "derivative content strategies to the buyer journey"; report "organic visibility, engagement and pipeline contribution".Source
    • Competitor researchRivals' own homepages: Qualys, "Enterprise Cyber Risk and Security Platform"; Rapid7, "the only endpoint to cloud, unified cybersecurity platform" with 24/7 MDR; Wiz, "one agentic cybersecurity platform" across code, cloud and runtime; CrowdStrike, "AI-native Cybersecurity" for endpoints, cloud, identities and data.Source
    • Your websiteHomepage: Tenable One, "the leading AI-powered exposure management platform", with Tenable Hexa AI agentic orchestration and AI, cloud, OT and identity exposure; cites leadership in the 2025 Gartner Magic Quadrant for Exposure Assessment Platforms and the IDC MarketScape for exposure management. The llms.txt says Tenable helps "more than 40,000 organizations worldwide".Source
  • 04

    The search manager must run "incremental lift analysis" with SEO and watch "cannibalization risks". Tenable and Nessus rank first organically for their own names.

    Medium impactLow effort First result in 1 month Marketing Manager

    First action

    Pick matched regions.

    How to measure it

    Brand spend reallocated

    Now
    –
    Target
    30%
    By
    1 quarter

    Steps

    1. 1

      Pick regions

      Matched pairs.

      Marketing Manager, Integrated Search & Google Media 2 days

    2. 2

      Pause

      Brand ads in test regions.

      Marketing Manager, Integrated Search & Google Media 4 weeks

    3. 3

      Watch rivals

      Competitor bids on brand.

      Marketing Manager, Integrated Search & Google Media weekly

    4. 4

      Measure

      Total clicks and pipeline.

      Marketing Operations Manager 1 week

    5. 5

      Decide

      Keep or cut by region.

      Performance Marketing Theater Lead 1 week

    6. 6

      Reinvest

      Non-brand and CVE.

      Marketing Manager, Integrated Search & Google Media 1 month

    First result
    1 month
    Cost
    $0
    Owner
    Marketing Manager, Integrated Search & Google Media

    Smallest test

    Pause brand ads in one region.

    Why it works

    Pause brand ads in matched regions for four weeks, compare total clicks, trials and pipeline with control regions, and keep brand ads only where rivals bid or lift is proven. Move savings to non-brand and CVE campaigns.

    Brand spend often buys clicks that would come anyway; a clean test frees budget.

    Risks and how to handle them

    • Rivals take brand clicks

      Resume where they bid.

    Evidence

    • HiringMarketing Manager, Integrated Search & Google Media (posted October 5, 2026, Columbia MD or Boston): owns Google Search, Bing, YouTube and YouTube TV campaigns tied to theater pipeline targets; builds "structured testing frameworks to optimize ad performance, landing page experiences, and alternative lead capture mechanisms"; performs technical SEO "to ensure high crawlability, indexability, and keyword alignment"; works with the Senior Manager, SEO/GEO on "incremental lift analysis" and "cannibalization risks"; tracks "competitor SERP dominance, keyword gaps, and prompt share" and "GEO/Prompt tracking across AI search platforms".Source
    • Your websiteBuy page: Nessus Professional "1 year license / $4,790", Nessus Expert $6,790, Tenable One Vulnerability Management "$3,700" a year for 100 assets, purchasable online "for up to 250 assets", and Web App Scanning $6,790 for 5 FQDNs; other products by custom quote. Nessus Essentials is free for non-commercial use with up to 5 IPs and a 30-day delay on plugin updates; Essentials Plus (up to 20 IPs) is for hobbyists, students and educators via the Nessus for Education program.Source
  • 05

    Nessus Essentials is free for up to 5 IPs with a 30-day plugin delay, and Nessus Professional costs $4,790 a year online. Essentials users who reach the limit, or scan for a new CVE their delayed plugins cannot yet detect, are showing purchase intent.

    High impactMedium effort First result in 1 month Nessus Product Marketing Mana…

    First action

    Count Essentials users hitting the IP limit monthly.

    How to measure it

    Essentials-to-Pro rate

    Now
    –
    Target
    +25%
    By
    2 quarters

    Steps

    1. 1

      Find triggers

      IP limit and delayed plugins.

      Nessus Product Marketing Manager 1 week

    2. 2

      Design offer

      In-product and email.

      Senior Design Manager, Brand & Motion 1 week

    3. 3

      Build

      Product messages.

      Nessus Product Manager 1 month

    4. 4

      Route

      Business domains to SDRs.

      Marketing Operations Manager 1 week

    5. 5

      Test

      Holdout.

      Nessus Product Marketing Manager 6 weeks

    6. 6

      Scale

      All Essentials users.

      Nessus Product Marketing Manager 1 quarter

    First result
    1 month
    Cost
    Product time
    Owner
    Nessus Product Marketing Manager

    Smallest test

    Email users who hit the limit last month.

    Why it works

    Show an in-product and email offer at those moments: the exact plugin they are missing or the IPs they could not scan, a Pro trial, and a link to buy. For business email domains, route to an SDR.

    Upgrades timed to a felt limit convert far better than general nurture.

    Risks and how to handle them

    • Students and hobbyists annoyed

      Exclude education accounts.

    Evidence

    • Your websiteBuy page: Nessus Professional "1 year license / $4,790", Nessus Expert $6,790, Tenable One Vulnerability Management "$3,700" a year for 100 assets, purchasable online "for up to 250 assets", and Web App Scanning $6,790 for 5 FQDNs; other products by custom quote. Nessus Essentials is free for non-commercial use with up to 5 IPs and a 30-day delay on plugin updates; Essentials Plus (up to 20 IPs) is for hobbyists, students and educators via the Nessus for Education program.Source
    • Your websiteCVE pages (checked October 21, 2026, e.g. CVE-2024-3094): the title is only the CVE ID ("CVE-2024-3094 | Tenable®"), there is no structured data, and the page links only to research navigation, references and one related blog post. It has no link to Nessus, a trial, a demo or Tenable One, and no "check whether you are exposed" step. The matching Nessus plugin page has a descriptive title ("Potential exposure to XZ Utils SSH Backdoor (CVE-2024-3094)") but also no product or trial link.Source
    • HiringSales hiring: Sales Development Representatives (October 13) who make "50+ calls per day", follow up inbound inquiries and must "Generate a minimum of 7 new meetings or demos per week"; Commercial Territory Managers (October 16) doing "outbound cold calling" and Webex demos; a Country Manager, Canada (September 16) to build a tiered sales team and "Develop go to market plan for the specific region" with channel partners; and a Federal Territory Account Manager.Source
  • 06

    The new Director of Product Marketing will build "distinct buyer personas" for cloud security and OT. Tenable already has NERC CIP, water-industry and "vs OT security vendors" pages, but a cloud buyer (CNAPP) and a plant engineer need different first steps.

    High impactMedium effort First result in 1 month Director of Product Marketing

    First action

    Map today's pages for each persona.

    How to measure it

    Cloud and OT pipeline

    Now
    –
    Target
    +20%
    By
    2 quarters

    Steps

    1. 1

      Personas

      Cloud and OT buyers.

      Director of Product Marketing, Cloud & OT Security 2 weeks

    2. 2

      Map pages

      Existing assets per stage.

      Director of Product Marketing, Cloud & OT Security 1 week

    3. 3

      Fill gaps

      Proof and first steps.

      Director, Content Marketing 1 month

    4. 4

      Nurture

      Separate tracks.

      Marketing Operations Manager 2 weeks

    5. 5

      SDR scripts

      Per persona.

      SDR Manager 1 week

    6. 6

      Measure

      Pipeline by journey.

      Marketing Operations Manager monthly

    First result
    1 month
    Cost
    Staff time only
    Owner
    Director of Product Marketing, Cloud & OT Security

    Smallest test

    Build the OT utilities path first.

    Why it works

    Build two short journeys: cloud (CNAPP vs Wiz-style platforms, a free cloud posture assessment, cloud case studies) and OT (utilities and manufacturing, safe passive discovery, a site assessment with a partner). Give each its own nurture and SDR script.

    Persona-specific paths raise conversion and give the new PMM measurable launches.

    Risks and how to handle them

    • Platform message diluted

      Tie both to Tenable One.

    Evidence

    • HiringDirector of Product Marketing, Cloud & OT Security (posted September 2, 2026): build "distinct buyer personas, solution messaging, and content strategy for the cloud security market and the OT security market", lead launches, find "technology partnership / co-marketing opportunities and new routes to market", and enable sales and partners; OT-heavy industries named are "manufacturing and utilities". A Senior Design Manager, Brand & Motion (October 1) joins "a small, three-person team responsible for all design and communications".Source
    • Your websiteExisting OT and Canada content: NERC CIP and water-industry OT solution pages, a "Tenable vs OT security vendors" page and an OT Security Specialist course; for Canada, a solution brief on Bill C-8 (CCSPA) with Tenable One OT Exposure, a CyberNB critical-infrastructure partnership and blogs on ITSG-33.Source
    • Competitor researchRivals' own homepages: Qualys, "Enterprise Cyber Risk and Security Platform"; Rapid7, "the only endpoint to cloud, unified cybersecurity platform" with 24/7 MDR; Wiz, "one agentic cybersecurity platform" across code, cloud and runtime; CrowdStrike, "AI-native Cybersecurity" for endpoints, cloud, identities and data.Source
    • Your websiteHomepage: Tenable One, "the leading AI-powered exposure management platform", with Tenable Hexa AI agentic orchestration and AI, cloud, OT and identity exposure; cites leadership in the 2025 Gartner Magic Quadrant for Exposure Assessment Platforms and the IDC MarketScape for exposure management. The llms.txt says Tenable helps "more than 40,000 organizations worldwide".Source

This quarter 9

The core plays for the next three months.

  • 07

    The content director runs the global Exposure Management Leadership Council and is asked to turn CISO discussions into "regular original reports". Original peer data is the most citable content for AI answer engines and press.

    High impactMedium effort First result in 1 quarter Director

    First action

    Draft five questions with council members.

    How to measure it

    Downloads per report

    Now
    –
    Target
    5,000
    By
    3 quarters

    Steps

    1. 1

      Questions

      Five per quarter.

      Director, Content Marketing 1 week

    2. 2

      Survey

      Council members.

      Director, Content Marketing 2 weeks

    3. 3

      Analyze

      With Research.

      Tenable Research Lead 2 weeks

    4. 4

      Design

      Report and charts.

      Senior Design Manager, Brand & Motion 2 weeks

    5. 5

      Launch

      PR, social, ads.

      Director, Content Marketing 2 weeks

    6. 6

      Sales use

      Talk tracks.

      Director of Product Marketing, Cloud & OT Security ongoing

    First result
    1 quarter
    Cost
    Staff time only
    Owner
    Director, Content Marketing

    Smallest test

    Publish one chart from the next council meeting.

    Why it works

    Survey council members each quarter on five questions (time to remediate, AI exposure, OT incidents, budget, tool consolidation), publish an anonymized report with Research analysis, and use it in ads, sales and executive events.

    Peer CISO data earns press and citations and gives sales a reason to call.

    Risks and how to handle them

    • Small sample

      Add a broader survey panel.

    Evidence

    • HiringDirector, Content Marketing (open since August 18, updated October 13, 2026): "Implement a GEO-first approach to all external marketing content" for "citation potential across AI-powered answer engines"; run "the global Exposure Management Leadership Council" and turn CISO discussions into "regular original reports and content"; influence "the research calendar" with Tenable Research; "quickly generate blog copy, especially for rapid response"; map "derivative content strategies to the buyer journey"; report "organic visibility, engagement and pipeline contribution".Source
    • Your websiteHomepage: Tenable One, "the leading AI-powered exposure management platform", with Tenable Hexa AI agentic orchestration and AI, cloud, OT and identity exposure; cites leadership in the 2025 Gartner Magic Quadrant for Exposure Assessment Platforms and the IDC MarketScape for exposure management. The llms.txt says Tenable helps "more than 40,000 organizations worldwide".Source
    • Investor relationsSecond quarter 2026 (reported July 29, 2026): revenue $268.5 million, up 8.6%; full-year guidance raised to about $1.08 billion; 381 new enterprise platform customers and 32 net new six-figure customers; management credited Tenable One momentum, simplified pricing and packaging, Hexa and AI Exposure.Source
  • 08

    The content director must map "derivative content" to the buyer journey, and the new design manager joins a three-person team for all design. Tenable has 888 research advisories and 3,265 blog posts.

    Medium impactMedium effort First result in 1 quarter Senior Design Manager

    First action

    Make templates for the five formats.

    How to measure it

    Formats per major advisory

    Now
    –
    Target
    5
    By
    1 quarter

    Steps

    1. 1

      Templates

      Five formats.

      Senior Design Manager, Brand & Motion 1 month

    2. 2

      Workflow

      Brief to publish.

      Director, Content Marketing 2 weeks

    3. 3

      AI drafts

      First versions.

      Director, Content Marketing 2 weeks

    4. 4

      Pilot

      Three advisories.

      Senior Design Manager, Brand & Motion 1 month

    5. 5

      Measure

      Reach per format.

      Marketing Operations Manager monthly

    6. 6

      Refine

      Drop weak formats.

      Director, Content Marketing quarterly

    First result
    1 quarter
    Cost
    Design time
    Owner
    Senior Design Manager, Brand & Motion

    Smallest test

    Make the kit for the next advisory.

    Why it works

    For each major advisory, produce a fixed kit from templates: FAQ post, LinkedIn carousel, 60-second motion explainer, a webinar segment and a sales one-pager. Use AI for first drafts; design owns templates.

    Templates let three designers keep pace with research and spread each finding across channels.

    Risks and how to handle them

    • Quality slips

      Research review before release.

    Evidence

    • HiringDirector, Content Marketing (open since August 18, updated October 13, 2026): "Implement a GEO-first approach to all external marketing content" for "citation potential across AI-powered answer engines"; run "the global Exposure Management Leadership Council" and turn CISO discussions into "regular original reports and content"; influence "the research calendar" with Tenable Research; "quickly generate blog copy, especially for rapid response"; map "derivative content strategies to the buyer journey"; report "organic visibility, engagement and pipeline contribution".Source
    • HiringDirector of Product Marketing, Cloud & OT Security (posted September 2, 2026): build "distinct buyer personas, solution messaging, and content strategy for the cloud security market and the OT security market", lead launches, find "technology partnership / co-marketing opportunities and new routes to market", and enable sales and partners; OT-heavy industries named are "manufacturing and utilities". A Senior Design Manager, Brand & Motion (October 1) joins "a small, three-person team responsible for all design and communications".Source
    • Your websiteSitemap (6,598 URLs in four files, October 21, 2026): 3,265 blog posts (28 "frequently asked questions" CVE explainers), 888 research advisories, 707 press releases, 389 webinars, 261 Security Center dashboards, 59 case studies; but none of the /cve, /plugins, /audits or /indicators pages are in any sitemap. robots.txt allows them, and an llms.txt describes products and solutions.Source
  • 09

    SDRs must make 50+ calls a day and book 7 meetings a week. Companies that read several CVE or advisory pages in a week are working a live problem.

    High impactMedium effort First result in 1 month SDR Manager

    First action

    Pilot with one SDR pod.

    How to measure it

    Meeting rate on research-signal accounts

    Now
    –
    Target
    2x cold
    By
    1 quarter

    Steps

    1. 1

      Signal

      Account-level visits.

      Marketing Operations Manager 2 weeks

    2. 2

      Plays

      Per CVE theme.

      SDR Manager 1 week

    3. 3

      Pilot

      One pod.

      SDR Manager 1 month

    4. 4

      Privacy check

      Company-level only.

      Legal 1 week

    5. 5

      Measure

      Meeting rate.

      Marketing Operations Manager weekly

    6. 6

      Scale

      All pods.

      SDR Manager 1 quarter

    First result
    1 month
    Cost
    Tool cost
    Owner
    SDR Manager

    Smallest test

    Give one SDR 20 signal accounts.

    Why it works

    Use company-level visit data (not individuals) to flag target accounts reading research pages, and give SDRs a short play: the CVE, how Tenable detects it, and an offer of a free exposure check. Measure meeting rates against cold lists.

    Calls tied to a live problem are more welcome and convert better.

    Risks and how to handle them

    • Seen as creepy

      Never mention tracking; lead with the advisory.

    Builds on

    Evidence

    • HiringSales hiring: Sales Development Representatives (October 13) who make "50+ calls per day", follow up inbound inquiries and must "Generate a minimum of 7 new meetings or demos per week"; Commercial Territory Managers (October 16) doing "outbound cold calling" and Webex demos; a Country Manager, Canada (September 16) to build a tiered sales team and "Develop go to market plan for the specific region" with channel partners; and a Federal Territory Account Manager.Source
    • Your websiteCVE pages (checked October 21, 2026, e.g. CVE-2024-3094): the title is only the CVE ID ("CVE-2024-3094 | Tenable®"), there is no structured data, and the page links only to research navigation, references and one related blog post. It has no link to Nessus, a trial, a demo or Tenable One, and no "check whether you are exposed" step. The matching Nessus plugin page has a descriptive title ("Potential exposure to XZ Utils SSH Backdoor (CVE-2024-3094)") but also no product or trial link.Source
    • Your websiteSitemap (6,598 URLs in four files, October 21, 2026): 3,265 blog posts (28 "frequently asked questions" CVE explainers), 888 research advisories, 707 press releases, 389 webinars, 261 Security Center dashboards, 59 case studies; but none of the /cve, /plugins, /audits or /indicators pages are in any sitemap. robots.txt allows them, and an llms.txt describes products and solutions.Source
  • 10

    The new Country Manager must build a team and a regional go-to-market plan with channel partners. Tenable already has a Bill C-8 (CCSPA) solution brief, a CyberNB partnership and ITSG-33 content.

    High impactMedium effort First result in 1 quarter Country Manager

    First action

    List Canadian customers willing to be referenced.

    How to measure it

    Canada pipeline

    Now
    –
    Target
    +30%
    By
    3 quarters

    Steps

    1. 1

      Canada page

      Regulation and proof.

      Director of Product Marketing, Cloud & OT Security 1 month

    2. 2

      Partner kit

      Co-marketing assets.

      Country Manager, Canada 1 month

    3. 3

      Stories

      Two Canadian customers.

      Director, Content Marketing 1 quarter

    4. 4

      Events

      Critical infrastructure.

      Country Manager, Canada quarterly

    5. 5

      SDR sequence

      Canadian accounts.

      SDR Manager 2 weeks

    6. 6

      Measure

      Pipeline by partner.

      Marketing Operations Manager monthly

    First result
    1 quarter
    Cost
    Event budget
    Owner
    Country Manager, Canada

    Smallest test

    Run one partner webinar.

    Why it works

    Package it into a Canada page, a partner co-marketing kit, two Canadian customer stories and an event series for critical-infrastructure sectors, with a dedicated SDR sequence.

    A ready kit lets the new team sell in its first quarter instead of building collateral.

    Risks and how to handle them

    • Regulatory timing uncertain

      Lead with risk reduction, not deadlines.

    Evidence

    • HiringSales hiring: Sales Development Representatives (October 13) who make "50+ calls per day", follow up inbound inquiries and must "Generate a minimum of 7 new meetings or demos per week"; Commercial Territory Managers (October 16) doing "outbound cold calling" and Webex demos; a Country Manager, Canada (September 16) to build a tiered sales team and "Develop go to market plan for the specific region" with channel partners; and a Federal Territory Account Manager.Source
    • Your websiteExisting OT and Canada content: NERC CIP and water-industry OT solution pages, a "Tenable vs OT security vendors" page and an OT Security Specialist course; for Canada, a solution brief on Bill C-8 (CCSPA) with Tenable One OT Exposure, a CyberNB critical-infrastructure partnership and blogs on ITSG-33.Source
    • HiringDirector of Product Marketing, Cloud & OT Security (posted September 2, 2026): build "distinct buyer personas, solution messaging, and content strategy for the cloud security market and the OT security market", lead launches, find "technology partnership / co-marketing opportunities and new routes to market", and enable sales and partners; OT-heavy industries named are "manufacturing and utilities". A Senior Design Manager, Brand & Motion (October 1) joins "a small, three-person team responsible for all design and communications".Source
  • 11

    Tenable is hiring a Principal SA to run AWS co-sell, AWS Marketplace pipeline and integrations with Amazon Bedrock, and it sells AI Exposure. Buyers with AWS commitments prefer Marketplace purchases.

    High impactMedium effort First result in 2 quarters Principal Solutions Architect

    First action

    List open deals where the buyer has an AWS commitment.

    How to measure it

    AWS Marketplace bookings

    Now
    –
    Target
    +40%
    By
    3 quarters

    Steps

    1. 1

      Find deals

      AWS-committed buyers.

      Principal Solutions Architect (AWS Technical Alliances) 2 weeks

    2. 2

      Private offers

      Standard terms.

      Principal Solutions Architect (AWS Technical Alliances) 1 month

    3. 3

      Architecture

      Bedrock agent security.

      Principal Solutions Architect (AWS Technical Alliances) 1 month

    4. 4

      Enable AWS sellers

      Briefings.

      Principal Solutions Architect (AWS Technical Alliances) monthly

    5. 5

      Workshops

      Co-funded.

      Performance Marketing Theater Lead quarterly

    6. 6

      Measure

      Co-sell pipeline.

      Marketing Operations Manager monthly

    First result
    2 quarters
    Cost
    Co-marketing funds
    Owner
    Principal Solutions Architect (AWS Technical Alliances)

    Smallest test

    Close one private offer.

    Why it works

    Create a Marketplace private-offer motion with AWS sellers for Tenable One and Cloud Exposure, publish a joint architecture for securing Bedrock-based agents, and run co-funded workshops for AWS customers.

    Marketplace buying shortens procurement, and the AI story gives AWS sellers a reason to bring Tenable in.

    Risks and how to handle them

    • Channel conflict

      Clear rules with resellers.

    Evidence

    • HiringPartner and education hiring: a Principal Solutions Architect (AWS Technical Alliances) to run AWS co-sell, "AWS Marketplace" pipeline and integrations "with Amazon Bedrock and agentic frameworks"; a Senior Manager, Services Portfolio & Learning Architecture to direct the "Training Subscription and track its adoption"; and a Creative eLearning Developer for training video and a "house style" overhaul.Source
    • Your websiteHomepage: Tenable One, "the leading AI-powered exposure management platform", with Tenable Hexa AI agentic orchestration and AI, cloud, OT and identity exposure; cites leadership in the 2025 Gartner Magic Quadrant for Exposure Assessment Platforms and the IDC MarketScape for exposure management. The llms.txt says Tenable helps "more than 40,000 organizations worldwide".Source
    • News coverageMay 21, 2026: Tenable launched OPEN, its partner exchange network built on "more than 330 validated integrations", with an Open Connector to bring third-party telemetry into Tenable One; Tenable describes a strategic partnership with Anthropic, with Hexa AI powered in part by Claude.Source
  • 12

    The new learning lead must direct the Training Subscription "and track its adoption". Trained customers use more of the platform and renew.

    Medium impactMedium effort First result in 2 quarters Senior Manager

    First action

    Compare renewal rates for trained and untrained accounts.

    How to measure it

    Training completion in new accounts

    Now
    –
    Target
    60%
    By
    3 quarters

    Steps

    1. 1

      Analyze

      Training vs renewal.

      Senior Manager, Services Portfolio & Learning Architecture 2 weeks

    2. 2

      Bundle

      Starter path.

      Senior Manager, Services Portfolio & Learning Architecture 1 month

    3. 3

      Badges

      Shareable credentials.

      Creative eLearning Developer 1 month

    4. 4

      CS alerts

      Low completion.

      Customer Success Lead 2 weeks

    5. 5

      Promote

      In-product.

      Senior Manager, Services Portfolio & Learning Architecture 1 month

    6. 6

      Measure

      Renewals.

      Marketing Operations Manager quarterly

    First result
    2 quarters
    Cost
    Content time
    Owner
    Senior Manager, Services Portfolio & Learning Architecture

    Smallest test

    Bundle training for one month's new customers.

    Why it works

    Bundle a starter training path with every new Tenable One customer, issue shareable certification badges, and report training completion per account to customer success with alerts for low completion.

    Skills turn into usage, and usage into renewals and expansion.

    Risks and how to handle them

    • Low uptake

      Short modules in the product.

    Evidence

    • HiringPartner and education hiring: a Principal Solutions Architect (AWS Technical Alliances) to run AWS co-sell, "AWS Marketplace" pipeline and integrations "with Amazon Bedrock and agentic frameworks"; a Senior Manager, Services Portfolio & Learning Architecture to direct the "Training Subscription and track its adoption"; and a Creative eLearning Developer for training video and a "house style" overhaul.Source
    • Investor relationsSecond quarter 2026 (reported July 29, 2026): revenue $268.5 million, up 8.6%; full-year guidance raised to about $1.08 billion; 381 new enterprise platform customers and 32 net new six-figure customers; management credited Tenable One momentum, simplified pricing and packaging, Hexa and AI Exposure.Source
  • 13

    Tenable One Vulnerability Management is sold online for up to 250 assets at $3,700 a year for 100. Buyers above that must contact sales, and Commercial Territory Managers are hired to prospect and quote.

    Medium impactLow effort First result in 1 month Commercial Territory Manager

    First action

    Count buy-page visitors who leave after the asset selector.

    How to measure it

    Meetings from the buy page

    Now
    –
    Target
    +30%
    By
    1 quarter

    Steps

    1. 1

      Design

      Slider and handoff.

      Senior Design Manager, Brand & Motion 1 week

    2. 2

      Build

      Buy page.

      Web Team Lead 2 weeks

    3. 3

      Routing

      By territory.

      Marketing Operations Manager 1 week

    4. 4

      Calendars

      Territory managers.

      Commercial Territory Manager 1 week

    5. 5

      Test

      A/B.

      Marketing Manager, Integrated Search & Google Media 4 weeks

    6. 6

      Review

      Conversion.

      Marketing Operations Manager monthly

    First result
    1 month
    Cost
    Web time
    Owner
    Commercial Territory Manager

    Smallest test

    Add the booking link above 250 assets.

    Why it works

    Add an asset-count slider showing price up to 250 assets and, above that, an instant booking link with the local territory manager, prefilled with the asset count.

    It captures buyers at the limit instead of losing them to a form.

    Risks and how to handle them

    • Price anchoring

      Show per-asset price drops.

    Evidence

    • Your websiteBuy page: Nessus Professional "1 year license / $4,790", Nessus Expert $6,790, Tenable One Vulnerability Management "$3,700" a year for 100 assets, purchasable online "for up to 250 assets", and Web App Scanning $6,790 for 5 FQDNs; other products by custom quote. Nessus Essentials is free for non-commercial use with up to 5 IPs and a 30-day delay on plugin updates; Essentials Plus (up to 20 IPs) is for hobbyists, students and educators via the Nessus for Education program.Source
    • HiringSales hiring: Sales Development Representatives (October 13) who make "50+ calls per day", follow up inbound inquiries and must "Generate a minimum of 7 new meetings or demos per week"; Commercial Territory Managers (October 16) doing "outbound cold calling" and Webex demos; a Country Manager, Canada (September 16) to build a tiered sales team and "Develop go to market plan for the specific region" with channel partners; and a Federal Territory Account Manager.Source
  • 14

    Tenable has 389 webinar pages. Video alone is hard for search and AI engines to quote.

    Medium impactLow effort First result in 1 quarter Director

    First action

    Pick 50 webinars by views.

    How to measure it

    Webinar page organic entrances

    Now
    –
    Target
    +50%
    By
    2 quarters

    Steps

    1. 1

      Pick

      Top 50.

      Director, Content Marketing 1 week

    2. 2

      Transcribe

      AI transcripts.

      Director, Content Marketing 1 week

    3. 3

      Summarize

      Key points and FAQs.

      Director, Content Marketing 1 month

    4. 4

      Markup

      Video and FAQ schema.

      Senior Manager, SEO/GEO 1 week

    5. 5

      Link

      Products and CVEs.

      Senior Manager, SEO/GEO 2 weeks

    6. 6

      Measure

      Entrances and citations.

      Senior Manager, SEO/GEO monthly

    First result
    1 quarter
    Cost
    Writer time
    Owner
    Director, Content Marketing

    Smallest test

    Summarize ten webinars.

    Why it works

    For the 50 most-viewed webinars, publish a summary with key points, a transcript excerpt and FAQs, marked up as video and FAQ content, and link them from related products and CVEs.

    Summaries turn webinars into citable answers and new organic entrances.

    Risks and how to handle them

    • Outdated webinars

      Skip older than two years.

    Evidence

    • Your websiteSitemap (6,598 URLs in four files, October 21, 2026): 3,265 blog posts (28 "frequently asked questions" CVE explainers), 888 research advisories, 707 press releases, 389 webinars, 261 Security Center dashboards, 59 case studies; but none of the /cve, /plugins, /audits or /indicators pages are in any sitemap. robots.txt allows them, and an llms.txt describes products and solutions.Source
    • HiringDirector, Content Marketing (open since August 18, updated October 13, 2026): "Implement a GEO-first approach to all external marketing content" for "citation potential across AI-powered answer engines"; run "the global Exposure Management Leadership Council" and turn CISO discussions into "regular original reports and content"; influence "the research calendar" with Tenable Research; "quickly generate blog copy, especially for rapid response"; map "derivative content strategies to the buyer journey"; report "organic visibility, engagement and pipeline contribution".Source
  • 15

    OPEN has more than 330 validated integrations and an Open Connector, and the cloud and OT PMM should find "new routes to market". Most integrations are listed, not marketed.

    Medium impactMedium effort First result in 2 quarters Director of Product Marketing

    First action

    Rank integrations by customer usage.

    How to measure it

    Partner-sourced pipeline

    Now
    –
    Target
    +25%
    By
    3 quarters

    Steps

    1. 1

      Rank

      By usage.

      Director of Product Marketing, Cloud & OT Security 2 weeks

    2. 2

      Sign ten

      Joint plans.

      Alliances Lead 1 month

    3. 3

      Joint pages

      Use cases.

      Director, Content Marketing 1 month

    4. 4

      Webinars

      One per partner.

      Director, Content Marketing quarterly

    5. 5

      Campaigns

      Partner lists.

      Performance Marketing Theater Lead quarterly

    6. 6

      Measure

      Pipeline.

      Marketing Operations Manager monthly

    First result
    2 quarters
    Cost
    Co-marketing funds
    Owner
    Director of Product Marketing, Cloud & OT Security

    Smallest test

    Run one joint webinar.

    Why it works

    Pick the ten integrations most used by customers, build joint pages and webinars with each partner, and run joint campaigns to the partner's customer base.

    Partners bring audiences that already trust them, and integrations make the platform story concrete.

    Risks and how to handle them

    • Uneven partner effort

      Fund only measured campaigns.

    Evidence

    • News coverageMay 21, 2026: Tenable launched OPEN, its partner exchange network built on "more than 330 validated integrations", with an Open Connector to bring third-party telemetry into Tenable One; Tenable describes a strategic partnership with Anthropic, with Hexa AI powered in part by Claude.Source
    • HiringDirector of Product Marketing, Cloud & OT Security (posted September 2, 2026): build "distinct buyer personas, solution messaging, and content strategy for the cloud security market and the OT security market", lead launches, find "technology partnership / co-marketing opportunities and new routes to market", and enable sales and partners; OT-heavy industries named are "manufacturing and utilities". A Senior Design Manager, Brand & Motion (October 1) joins "a small, three-person team responsible for all design and communications".Source

Big bets 3

Larger plays that can change the trajectory.

  • 16

    Tenable sells AI Exposure to find shadow AI and agent risks, and management credits AI features with customer conversions. Most organisations do not know which AI tools their staff use.

    High impactHigh effort First result in 3 quarters Director of Product Marketing

    First action

    Define what the free check covers.

    How to measure it

    Assessment-to-opportunity rate

    Now
    –
    Target
    30%
    By
    3 quarters

    Steps

    1. 1

      Scope

      What is scanned.

      Director of Product Marketing, Cloud & OT Security 1 month

    2. 2

      Build

      Assessment flow.

      Product Manager, AI Exposure 1 quarter

    3. 3

      Report

      CISO summary.

      Senior Design Manager, Brand & Motion 1 month

    4. 4

      Launch

      Campaign and SDRs.

      Performance Marketing Theater Lead 1 month

    5. 5

      Follow up

      Territory managers.

      Commercial Territory Manager ongoing

    6. 6

      Measure

      Conversion.

      Marketing Operations Manager monthly

    First result
    3 quarters
    Cost
    Product time
    Owner
    Director of Product Marketing, Cloud & OT Security

    Smallest test

    Run ten manual assessments with partners.

    Why it works

    Offer a time-limited free assessment that reports AI tools in use, risky integrations and exposed keys in one cloud account or network segment, with a summary for the CISO and a path to Tenable One.

    A free, concrete finding on a hot topic opens executive conversations.

    Risks and how to handle them

    • Data concerns

      Clear scope and deletion terms.

    Evidence

    • Your websiteHomepage: Tenable One, "the leading AI-powered exposure management platform", with Tenable Hexa AI agentic orchestration and AI, cloud, OT and identity exposure; cites leadership in the 2025 Gartner Magic Quadrant for Exposure Assessment Platforms and the IDC MarketScape for exposure management. The llms.txt says Tenable helps "more than 40,000 organizations worldwide".Source
    • Investor relationsSecond quarter 2026 (reported July 29, 2026): revenue $268.5 million, up 8.6%; full-year guidance raised to about $1.08 billion; 381 new enterprise platform customers and 32 net new six-figure customers; management credited Tenable One momentum, simplified pricing and packaging, Hexa and AI Exposure.Source
    • News coverageMay 21, 2026: Tenable launched OPEN, its partner exchange network built on "more than 330 validated integrations", with an Open Connector to bring third-party telemetry into Tenable One; Tenable describes a strategic partnership with Anthropic, with Hexa AI powered in part by Claude.Source
  • 17

    Tenable helps more than 40,000 organisations and publishes deep research. An index of how long exposures stay open, by industry and severity, would be quoted across the industry.

    High impactHigh effort First result in 4 quarters Tenable Research Lead

    First action

    Check which metrics privacy review allows.

    How to measure it

    Media and AI citations

    Now
    –
    Target
    200 a quarter
    By
    4 quarters

    Steps

    1. 1

      Define metrics

      Five measures.

      Tenable Research Lead 1 month

    2. 2

      Privacy review

      Aggregation rules.

      Legal 1 month

    3. 3

      Build pipeline

      Quarterly data.

      Data Engineering 1 quarter

    4. 4

      Publish

      Index page and report.

      Director, Content Marketing 1 month

    5. 5

      Benchmark tool

      Prospect comparison.

      Web Team Lead 1 quarter

    6. 6

      Promote

      PR and ads.

      Director, Content Marketing quarterly

    First result
    4 quarters
    Cost
    Data team time
    Owner
    Tenable Research Lead

    Smallest test

    Publish one metric as a blog chart.

    Why it works

    Publish an anonymized quarterly index with Research: median days to remediate critical vulnerabilities by industry and region, AI and OT exposure trends, and the top exploited CVEs. Offer a free benchmark comparison to prospects.

    An authoritative number earns citations, links and press, and a benchmark gives sales a reason to engage.

    Risks and how to handle them

    • Customer data concerns

      Aggregate and suppress small groups.

    Evidence

    • Your websiteHomepage: Tenable One, "the leading AI-powered exposure management platform", with Tenable Hexa AI agentic orchestration and AI, cloud, OT and identity exposure; cites leadership in the 2025 Gartner Magic Quadrant for Exposure Assessment Platforms and the IDC MarketScape for exposure management. The llms.txt says Tenable helps "more than 40,000 organizations worldwide".Source
    • HiringDirector, Content Marketing (open since August 18, updated October 13, 2026): "Implement a GEO-first approach to all external marketing content" for "citation potential across AI-powered answer engines"; run "the global Exposure Management Leadership Council" and turn CISO discussions into "regular original reports and content"; influence "the research calendar" with Tenable Research; "quickly generate blog copy, especially for rapid response"; map "derivative content strategies to the buyer journey"; report "organic visibility, engagement and pipeline contribution".Source
    • Your websiteSitemap (6,598 URLs in four files, October 21, 2026): 3,265 blog posts (28 "frequently asked questions" CVE explainers), 888 research advisories, 707 press releases, 389 webinars, 261 Security Center dashboards, 59 case studies; but none of the /cve, /plugins, /audits or /indicators pages are in any sitemap. robots.txt allows them, and an llms.txt describes products and solutions.Source
  • 18

    Tenable runs regional sites (Korean, Italian, Latin American Spanish and others) but the CVE and plugin pages are English. Security teams in those markets search for CVEs too.

    Medium impactHigh effort First result in 3 quarters Senior Manager

    First action

    Pick one region and its top 200 CVEs.

    How to measure it

    Regional CVE entrances

    Now
    –
    Target
    +100,000 a month
    By
    4 quarters

    Steps

    1. 1

      Pick region

      Highest pipeline.

      Senior Manager, SEO/GEO 1 week

    2. 2

      Translate

      Top CVEs.

      Localization Manager 1 month

    3. 3

      Review

      Native security reviewers.

      Regional Marketing 1 month

    4. 4

      hreflang

      All versions.

      Web Team Lead 2 weeks

    5. 5

      Module

      Localized CTA.

      Web Team Lead 2 weeks

    6. 6

      Measure

      Entrances and trials.

      Marketing Manager, Integrated Search & Google Media monthly

    First result
    3 quarters
    Cost
    Translation costs
    Owner
    Senior Manager, SEO/GEO

    Smallest test

    Translate 200 CVEs for one region.

    Why it works

    Machine-translate and review the descriptions and the exposure module for the top 1,000 CVEs on each regional site, with hreflang to the English page.

    It extends the CVE channel to regions where fewer English sources compete.

    Risks and how to handle them

    • Translation errors

      Keep technical terms and IDs in English.

    Builds on

    Evidence

    • Your websiteCVE pages (checked October 21, 2026, e.g. CVE-2024-3094): the title is only the CVE ID ("CVE-2024-3094 | Tenable®"), there is no structured data, and the page links only to research navigation, references and one related blog post. It has no link to Nessus, a trial, a demo or Tenable One, and no "check whether you are exposed" step. The matching Nessus plugin page has a descriptive title ("Potential exposure to XZ Utils SSH Backdoor (CVE-2024-3094)") but also no product or trial link.Source
    • Your websiteSitemap (6,598 URLs in four files, October 21, 2026): 3,265 blog posts (28 "frequently asked questions" CVE explainers), 888 research advisories, 707 press releases, 389 webinars, 261 Security Center dashboards, 59 case studies; but none of the /cve, /plugins, /audits or /indicators pages are in any sitemap. robots.txt allows them, and an llms.txt describes products and solutions.Source

Wildcards 3

Unexpected experiments, each with a cheap way to test it.

  • 19

    Nessus Essentials Plus serves students and educators through Nessus for Education, and Tenable runs training and certifications. Today's students are tomorrow's buyers.

    Medium impactLow effort First result in 2 quarters Senior Manager

    First action

    Partner with five universities.

    How to measure it

    Student certifications

    Now
    –
    Target
    2,000 a year
    By
    4 quarters

    Steps

    1. 1

      Design path

      Course to exam.

      Senior Manager, Services Portfolio & Learning Architecture 1 month

    2. 2

      Badges

      Shareable.

      Creative eLearning Developer 1 month

    3. 3

      Universities

      Five to start.

      Senior Manager, Services Portfolio & Learning Architecture 1 quarter

    4. 4

      Job partners

      Security employers.

      Senior Manager, Services Portfolio & Learning Architecture 1 quarter

    5. 5

      Stay in touch

      Career emails.

      Marketing Operations Manager ongoing

    6. 6

      Measure

      Trials later.

      Marketing Operations Manager yearly

    First result
    2 quarters
    Cost
    Exam costs
    Owner
    Senior Manager, Services Portfolio & Learning Architecture

    Smallest test

    Offer free exams to one university.

    Why it works

    Offer students a free certification exam after a course, a badge, and a job-board partnership; keep in touch as they start work, with a professional trial.

    It builds loyalty years before the purchase and grows the Nessus community.

    Risks and how to handle them

    • Long payback

      Keep costs small.

    Evidence

    • Your websiteBuy page: Nessus Professional "1 year license / $4,790", Nessus Expert $6,790, Tenable One Vulnerability Management "$3,700" a year for 100 assets, purchasable online "for up to 250 assets", and Web App Scanning $6,790 for 5 FQDNs; other products by custom quote. Nessus Essentials is free for non-commercial use with up to 5 IPs and a 30-day delay on plugin updates; Essentials Plus (up to 20 IPs) is for hobbyists, students and educators via the Nessus for Education program.Source
    • HiringPartner and education hiring: a Principal Solutions Architect (AWS Technical Alliances) to run AWS co-sell, "AWS Marketplace" pipeline and integrations "with Amazon Bedrock and agentic frameworks"; a Senior Manager, Services Portfolio & Learning Architecture to direct the "Training Subscription and track its adoption"; and a Creative eLearning Developer for training video and a "house style" overhaul.Source
  • 20

    The Brand & Motion hire brings motion graphics, and critical CVEs get wide attention for a few days. Short video spreads faster on LinkedIn and YouTube than posts.

    Medium impactLow effort First result in 1 month Senior Design Manager

    First action

    Build the template.

    How to measure it

    Average views

    Now
    –
    Target
    20,000
    By
    2 quarters

    Steps

    1. 1

      Template

      Motion and voice.

      Senior Design Manager, Brand & Motion 2 weeks

    2. 2

      Script

      From the FAQ.

      Director, Content Marketing per event

    3. 3

      Review

      Research check.

      Tenable Research Lead per event

    4. 4

      Publish

      LinkedIn and YouTube.

      Director, Content Marketing per event

    5. 5

      Promote

      Paid boost.

      Marketing Manager, Integrated Search & Google Media per event

    6. 6

      Measure

      Views and visits.

      Marketing Operations Manager monthly

    First result
    1 month
    Cost
    Design time
    Owner
    Senior Design Manager, Brand & Motion

    Smallest test

    Make one for the next critical CVE.

    Why it works

    Make a template for a 60-second explainer (what it is, who is affected, how to check) and publish within a day of the FAQ post, linking to the CVE page.

    Fast, clear video makes Tenable the face of each big vulnerability.

    Risks and how to handle them

    • Speed vs accuracy

      Research signs off on every script.

    Evidence

    • HiringDirector of Product Marketing, Cloud & OT Security (posted September 2, 2026): build "distinct buyer personas, solution messaging, and content strategy for the cloud security market and the OT security market", lead launches, find "technology partnership / co-marketing opportunities and new routes to market", and enable sales and partners; OT-heavy industries named are "manufacturing and utilities". A Senior Design Manager, Brand & Motion (October 1) joins "a small, three-person team responsible for all design and communications".Source
    • HiringDirector, Content Marketing (open since August 18, updated October 13, 2026): "Implement a GEO-first approach to all external marketing content" for "citation potential across AI-powered answer engines"; run "the global Exposure Management Leadership Council" and turn CISO discussions into "regular original reports and content"; influence "the research calendar" with Tenable Research; "quickly generate blog copy, especially for rapid response"; map "derivative content strategies to the buyer journey"; report "organic visibility, engagement and pipeline contribution".Source
    • Your websiteCVE pages (checked October 21, 2026, e.g. CVE-2024-3094): the title is only the CVE ID ("CVE-2024-3094 | Tenable®"), there is no structured data, and the page links only to research navigation, references and one related blog post. It has no link to Nessus, a trial, a demo or Tenable One, and no "check whether you are exposed" step. The matching Nessus plugin page has a descriptive title ("Potential exposure to XZ Utils SSH Backdoor (CVE-2024-3094)") but also no product or trial link.Source
  • 21

    Tenable sponsors events, and SDRs promote webinars and events. Practitioners engage more with hands-on challenges than booths.

    Medium impactMedium effort First result in 2 quarters Performance Marketing Theater…

    First action

    Build five challenges.

    How to measure it

    CTF player trials

    Now
    –
    Target
    300 per event
    By
    2 quarters

    Steps

    1. 1

      Build labs

      Five challenges.

      Senior Manager, Services Portfolio & Learning Architecture 1 month

    2. 2

      Leaderboard

      Event app.

      Web Team Lead 2 weeks

    3. 3

      Run

      Two events.

      Performance Marketing Theater Lead per event

    4. 4

      Follow up

      SDR outreach.

      SDR Manager 1 week

    5. 5

      Content

      Write-ups.

      Director, Content Marketing 2 weeks

    6. 6

      Measure

      Trials and pipeline.

      Marketing Operations Manager monthly

    First result
    2 quarters
    Cost
    Event costs
    Owner
    Performance Marketing Theater Lead

    Smallest test

    Run a CTF at one regional event.

    Why it works

    Run a short CTF at two major conferences using Nessus and Tenable One labs, with a leaderboard, prizes and a follow-up trial for players.

    Hands-on play produces engaged practitioners and qualified trials.

    Risks and how to handle them

    • Low turnout

      Promote before the event.

    Evidence

    • HiringSales hiring: Sales Development Representatives (October 13) who make "50+ calls per day", follow up inbound inquiries and must "Generate a minimum of 7 new meetings or demos per week"; Commercial Territory Managers (October 16) doing "outbound cold calling" and Webex demos; a Country Manager, Canada (September 16) to build a tiered sales team and "Develop go to market plan for the specific region" with channel partners; and a Federal Territory Account Manager.Source
    • Your websiteBuy page: Nessus Professional "1 year license / $4,790", Nessus Expert $6,790, Tenable One Vulnerability Management "$3,700" a year for 100 assets, purchasable online "for up to 250 assets", and Web App Scanning $6,790 for 5 FQDNs; other products by custom quote. Nessus Essentials is free for non-commercial use with up to 5 IPs and a 30-day delay on plugin updates; Essentials Plus (up to 20 IPs) is for hobbyists, students and educators via the Nessus for Education program.Source
    • HiringPartner and education hiring: a Principal Solutions Architect (AWS Technical Alliances) to run AWS co-sell, "AWS Marketplace" pipeline and integrations "with Amazon Bedrock and agentic frameworks"; a Senior Manager, Services Portfolio & Learning Architecture to direct the "Training Subscription and track its adoption"; and a Creative eLearning Developer for training video and a "house style" overhaul.Source

03

How Programmable can help

Where an idea in this playbook is something Programmable builds or runs, it's listed here with what we'd do. Everything else is yours to run.

ProgrammableTalk

Fill the events in this plan

These ideas are events. Talk gets registrants for them and tells you who's coming and what their company does before the day.

Plan an event (opens programmable.talk in a new tab)
ProgrammableDigital

Show it, don't just describe it

These ideas need something to show: a demo, a video, an animation, graphics or a deck. Digital turns screenshots or the site into all of them, in the company's own brand.

Make a demo (opens programmable.digital in a new tab)
More example playbooks and reviews

More growth playbooks

Other companies we have researched, each read from what they are hiring for.

  • Stable growth strategyAn AI-powered business address and virtual mailbox: permanent street addresses in 37 US cities, mail scanning, forwarding, check deposit…21 growth ideas
  • Lemma Lift growth strategyA small performance marketing agency for Shopify brands: conversion rate optimisation and A/B testing, paid search (including Google…22 growth ideas
  • Envoy growth strategyA workplace platform for physical security, safety and compliance: visitor management, threat detection and emergency response (Response)…21 growth ideas
  • Ketone-IQ growth strategyDrinkable ketone shots, with and without caffeine, sold as "brain fuel" for focus and energy, direct on ketone.com by subscription and in…21 growth ideas
  • Lantern growth strategyA data and AI consulting firm and managed Microsoft and GitHub partner: AI strategy and foundations, Azure AI apps, Copilot and business…21 growth ideas
  • Passage Health growth strategyAn all-in-one clinical and practice management platform for ABA and autism care providers: mobile data collection, session notes and…20 growth ideas
  • Pave growth strategyAn AI-native compensation platform: real-time market data from its integrated clients, market pricing, compensation planning, total…20 growth ideas
  • Hawthorne Residential Partners growth strategyA Greensboro-based multifamily operator and third-party property manager: 64,000+ units across 275+ properties in eight states, with…20 growth ideas

See every playbook and website review

Independent research. Programmable wrote this playbook from public sources, as they stood on October 22, 2026, and cites them throughout. Tenable did not commission, review or endorse it, and Programmable is not affiliated with Tenable. Company and product names are trademarks of their owners, used only to identify them. The ideas are suggestions and opinion, not professional, legal or financial advice, and not statements about how Tenable runs its business.

Something wrong, or do you represent Tenable? Email [email protected] and we will correct it or take it down.

30/60/90 roadmap

What to focus on in each month, and the ideas that carry it.

  1. Days 1 to 306 ideas

    Exposure module on CVE and plugin pages, rapid-response search, prompt-share tracking, a brand-search lift test, Essentials upgrades and the cloud and OT journeys.

  2. Days 31 to 6010 ideas

    Council report, derivative content kits, SDR research signals, Canada kit, AWS Marketplace, training adoption, buy-page handoff, webinar summaries and partner co-marketing; motion explainers.

  3. Days 61 to 905 ideas

    Commit to the free AI exposure check, the public exposure index and regional CVE pages; pilot the student path and an event CTF.

The research behind the plan

3 research areas, each summarised in a few lines. Open any of them for the full detail.

Customers

What customers say

Customers value nessus accuracy and plugin coverage. The most cited problem: too many findings to fix.

  • Broad visibility across IT, cloud, OT and identity
  • Tool sprawl across security domains
  • In their words: “exposure”

Market

Competitive landscape

4 competitors compared: Qualys, Rapid7, Wiz and CrowdStrike.

  • Gap to exploit: A clear path from vulnerability research to action
  • Qualys: Less OT depth
  • Rapid7: Broad focus beyond exposure

Hiring signals

Tenable is hiring to make marketing measurable and search-led.

  • Marketing Manager, Integrated Search & Google Media: Paid, technical SEO, lift tests and prompt share. Ideas 1, 2, 3, 4.
  • Director, Content Marketing: GEO-first content, CISO council, rapid response. Ideas 2, 7, 8, 14.
  • Director of Product Marketing, Cloud & OT Security: Separate cloud and OT personas and launches. Ideas 6, 15.

From the team that wrote this playbook

All products
  • ProgrammableAgencyWorking AI systems in days, not quarters (opens programmable.agency in a new tab)
  • ProgrammableInfoAn agent that finds, researches and asks first (opens programmable.info in a new tab)
  • ProgrammableDigitalScreenshots in, an animated product demo out (opens programmable.digital in a new tab)
  • ProgrammableWatchKnow the day a supplier falls out of compliance (opens programmable.watch in a new tab)
  • ProgrammableTalkGet registrants for your events, and know who’s coming (opens programmable.talk in a new tab)
  • ProgrammablePageText what you need, your customer gets a page that works (opens programmable.page in a new tab)
  • ProgrammableCommunityForums with labelled AI members, never empty (opens programmable.community in a new tab)
ProgrammableMarketing
ExamplesLeaderboardsProductsTermsPrivacyCookiesDPALegalContact

© 2026 AI-Powered Growth Intelligence