{"@context":"https://certreports.com/llms.txt","vendor":{"slug":"tenable","name":"Tenable","domain":"tenable.com","category":"Security","one_liner":null,"trust_center_url":null,"security_page_url":null,"url":"https://certreports.com/vendors/tenable/security","last_verified_at":"2026-09-18T00:00:00.000Z","claimed":false,"verified_profile":false},"attestations":[{"framework":"fedramp","framework_name":"FedRAMP","state":"verified_registry","state_label":"Verified","sentence":"Listed in the FedRAMP Marketplace as of 18 Sep 2026.","kind":"authorization","status_text":"FedRAMP Authorized","issued_at":"2021-09-22","expires_at":null,"period_start":null,"period_end":null,"auditor":"Emagine IT","impact_level":"Moderate","as_of":"2026-09-18","under_review":false,"source":"fedramp","url":"https://certreports.com/vendors/tenable/fedramp","evidence":[{"source_type":"registry","source_name":"FedRAMP Marketplace","url":"https://www.fedramp.gov/marketplace/products/FR1814276801","fetched_at":"2026-09-18 22:35:17.44827+00","content_hash":"db2d03fa40cba0e5287b9cc7361e71b7c30c7ca9d51efb7b540477105fb30c7b","wayback_url":null,"quote":"Tenable Public Sector (TPS) - Tenable Government Solutions: FedRAMP Authorized","confidence":1},{"source_type":"registry","source_name":"FedRAMP Marketplace","url":"https://www.fedramp.gov/marketplace/products/FR1814276801","fetched_at":"2026-09-17 15:44:39.301965+00","content_hash":"395e7ad35dd25d1c547414140161c47ec22827b7ffae3bdbbd5256c38a3b940f","wayback_url":null,"quote":"Tenable Public Sector (TPS) - Tenable Government Solutions: FedRAMP Authorized","confidence":1}]},{"framework":"csa-star","framework_name":"CSA STAR","state":"verified_registry","state_label":"Verified","sentence":"Listed in the CSA STAR registry as of 17 Sep 2026.","kind":"self_assessment","status_text":"STAR Level 1 self-assessment (CAIQ), Trusted Cloud Provider","issued_at":"2018-05-20","expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"csa_star","url":"https://certreports.com/vendors/tenable/csa-star","evidence":[{"source_type":"registry","source_name":"CSA STAR registry","url":"https://cloudsecurityalliance.org/star/registry/tenable-inc","fetched_at":"2026-09-17 15:44:42.254747+00","content_hash":"e7f124247f5399c92ba048620a83c0b6cca1f9a2f97419f32566e462a3b1bda7","wayback_url":null,"quote":"tenable, inc.: STAR Level 1 self-assessment (CAIQ), Trusted Cloud Provider","confidence":1}]},{"framework":"dpf","framework_name":"EU-US Data Privacy Framework","state":"verified_registry","state_label":"Verified","sentence":"Listed in the Data Privacy Framework list as of 17 Sep 2026.","kind":"listing","status_text":"Active: EU-US Certification, SW-US Certification, UK Extension Certification","issued_at":"2017-07-27","expires_at":"2026-11-04","period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"dpf","url":"https://certreports.com/vendors/tenable/security","evidence":[{"source_type":"registry","source_name":"Data Privacy Framework list","url":"https://www.dataprivacyframework.gov/participant/5551","fetched_at":"2026-09-17 15:49:02.734361+00","content_hash":"63fdd1e65160fe0e55d070ad559601a94df220556460cc76058270f64287394e","wayback_url":null,"quote":"Tenable, Inc.: Active: EU-US Certification, SW-US Certification, UK Extension Certification","confidence":1}]}],"brief":{"summary":"As of 17 Sep 2026, Tenable is listed in the FedRAMP registry as FedRAMP Authorized, with authorization issued 26 Mar 2025 and audited by Emagine IT. As of 17 Sep 2026, Tenable is listed in the CSA STAR registry at Level 1 (CAIQ self-assessment, Trusted Cloud Provider), with entry issued 20 May 2018. As of 17 Sep 2026, Tenable is listed in the EU-US Data Privacy Framework registry as Active for EU-US, SW-US, and UK Extension Certifications, with initial issuance 27 Jul 2017 and an expiry date of 4 Nov 2026. No public evidence found for SOC 2 as of 17 Sep 2026. No public evidence found for HIPAA as of 17 Sep 2026.","bullets":["FedRAMP: listed in FedRAMP registry as Authorized (issued 26 Mar 2025, auditor Emagine IT, as of 17 Sep 2026)","CSA STAR: listed in CSA STAR registry at Level 1 self-assessment, Trusted Cloud Provider (issued 20 May 2018, as of 17 Sep 2026)","EU-US Data Privacy Framework: listed in DPF registry as Active (EU-US, SW-US, UK Extension), issued 27 Jul 2017, expires 4 Nov 2026 (as of 17 Sep 2026)"],"model":"claude-sonnet-5","generated_at":"2026-09-17 18:35:59.299033+00"},"legal_docs":[],"subprocessors":[],"disclaimer":"CertReports indexes public evidence. A missing framework means no public evidence was found at the last check, not that the vendor is non-compliant. SOC 2 is a report, not a certification; HIPAA has no certification.","generated_at":"2026-09-18T23:24:48.590Z"}