TENB · Tenable Holdings, Inc. · Stock research

Current Thesis

The binary flagged in the prior note resolved on 2026-07-29, and it resolved in the company's favour on the exact metric that mattered. Q2 revenue came in at $268.5M, +8.6% YoY, above the $263–266M guide. Tenable One reached 50% of new business, up from 41% in Q1 2026 — the single number the last dossier named as the thing to watch. Non-GAAP operating income was $66.2M at a 24.7% margin, +540bps YoY; GAAP net income turned positive at $3.8M against a $14.7M loss a year earlier. FY26 guidance was raised to $1.075–1.081B revenue and $1.95–2.00 non-GAAP EPS, with unlevered FCF guided to $289–295M.

What did not follow was the sell-side. The July upgrade wave (Scotiabank $26→$50 on 2026-07-06, JPM $40, TD Cowen $44, Barclays $41) reversed direction after the print: Piper Sandler's Rob Owens downgraded to Neutral and cut to $30 from $35; Jefferies cut $35→$30; UBS $37→$34; Barclays $41→$38; Baird $43→$41. Susquehanna ($26→$36) and Needham ($30→$36) raised into it. The published consensus average sits near $30.30 across 20 analysts, below the 2026-08-14 close of $38.33. On 2026-08-07 The Bear Cave (Hunterbrook Media, with Citrini Research) published "Problems at Tenable (TENB): Cyber Boom Leaves Behind Vulnerability Management," disclosing that Hunterbrook Capital is short TENB and long a basket including CRWD and S.

So the fundamental leg was confirmed and the flow leg was contested in the same fortnight. The narrative is maturing: known, still working, but the marginal buyer now has to pay above where the analyst panel marks the name, with no company-scheduled event dated inside the next 30 days.

Bullish and bearish views on Tenable Holdings, Inc.

The model's bull view on Tenable Holdings, Inc. (TENB), in brief: The mix-shift metric moved 9 points in one quarter. The bear view: Growth is still 8.6%. Q2 revenue $268.5M grew 8.6% YoY against a cohort where CRWD/PANW/ZS compound at materially higher rates. The FY26 guide of $1.075–1.081B against FY2025 revenue of $999.41M keeps the full-year rate under 10% (arithmetic on the disclosed figures). The… Both cases follow in full.

Bull Case

• The mix-shift metric moved 9 points in one quarter. Tenable One went from 41% of new business (Q1 2026) to 50% (Q2 2026, reported 2026-07-29), attributed on the call by Co-CEO Mark Thurmond to simplified pricing/packaging and AI-native capability. Platform mix is the mechanism by which a high-single-digit grower re-accelerates; it is now measured, not projected.
• Profitability inflected, not drifted. Q2 non-GAAP operating margin 24.7%, +540bps YoY, with GAAP net income of $3.8M versus a $14.7M loss in Q2 2025. FY26 unlevered FCF guided $289–295M.
• Guidance was raised on both lines. FY26 revenue $1.075–1.081B versus the prior $1.068–1.078B band, and FY26 non-GAAP EPS $1.95–2.00. Q3 guide $270.0–273.0M revenue, $0.49–0.52 non-GAAP EPS.
• Net dollar expansion improved to 106% from 105% the prior quarter (Q2 2026 call, 2026-07-29) — small, but pointing the right way in a cohort where expansion rates have been compressing.
• Capital return continues. 5.2M shares repurchased for $100.0M in Q2 2026, following 6.1M shares for $130M in Q1 2026.
• The federal and frontier-lab optionality is still unmonetised in the model. FedRAMP High and DoD IL5 for Tenable One Cloud Exposure landed 2026-06-29; the OpenAI Daybreak Cyber Partner Program tie-up was announced 2026-06-22; Hexa AI reached GA in Q2 2026 on Anthropic Claude at a 60% premium on the advanced tier. None of these has a disclosed attach rate yet.

Bear Case

• Growth is still 8.6%. Q2 revenue $268.5M grew 8.6% YoY against a cohort where CRWD/PANW/ZS compound at materially higher rates. The FY26 guide of $1.075–1.081B against FY2025 revenue of $999.41M keeps the full-year rate under 10% (arithmetic on the disclosed figures).
• The analyst panel cut into the beat. Five targets came down after 2026-07-29 (Piper Sandler to $30 with a downgrade to Neutral, Jefferies to $30, UBS to $34, Barclays to $38, Baird to $41) against two raises to $36 (Susquehanna, Needham). Consensus average ~$30.30 across 20 analysts sits under the 2026-08-14 close of $38.33. The prior note's argument — stale consensus below price mechanically produces forward upgrades — did not hold through the print.
• A funded short thesis is now public. The 2026-08-07 Bear Cave report argues vulnerability management is commoditised, cites a reseller predicting Tenable will "lose 50% to CrowdStrike and SentinelOne," and claims a vibe-coded tool the authors built found vulnerabilities Tenable missed (detailed results paywalled). Hunterbrook Capital disclosed a short position in TENB against longs in CRWD and S.
• The cohort comparison is unflattering. The same report marks Rapid7's market cap under $700M, down roughly 90% from peak, versus Qualys near $6.5B and Tenable near $4B. Whatever multiple TENB carries is being underwritten against a group where the weakest member has already de-rated 90%.
• Buyback pace slowed into strength. $100M in Q2 versus $130M in Q1 — the company itself deployed less as the price rose.
• Take-private optionality is undated. The 2024 "exploring a sale" report ran the stock to a $47.15 close with no transaction.

Setup & Price Structure

Last completed daily close $38.33 (2026-08-14), 10.1% below the 52-week high of $42.65, with a three-month return of +78.4% and RSI(14) at 72.5. Price is extended on both axes: momentum-overbought on the oscillator and above the published consensus target of ~$30.30.

Positioning observables, stated without a verdict:

• Distance above consensus. The 2026-08-14 close of $38.33 trades above the ~$30.30 average target across 20 analysts. Scotiabank's $50 (2026-07-06) is the high mark; Piper Sandler's $30 (post-print) and Jefferies' $30 are the low.
• Revision direction flipped. Two weeks of unanimous raises before the print; five cuts and one downgrade after it.
• A disclosed short with a distribution channel. Hunterbrook publishes and trades; the 2026-08-07 report's paywalled testing section leaves a follow-up publication as an open, undated event.
• No dated company catalyst inside the window. The next scheduled disclosure is the Q3 FY26 print; the 2025 comparable fell on 2025-10-22, so a late-October date is the working estimate.
• No insider transactions surfaced in the recent filings feed through 2026-08-14.

Structurally, the level that still matters is the 2026-07-06 upgrade gap. Price has spent five weeks above it, through both the print and the short report. A weekly close back under $33 hands back that gap and returns the name to the zone where the analyst panel marks it.

Catalyst Calendar (next 30 days)

• 2026-08-15 → 2026-09-14: no company-scheduled event on the calendar. The window between the 2026-07-29 print and the Q3 report contains no confirmed earnings, product GA, or guidance event. Anything that moves the stock in this window is exogenous — sector tape, a competitor's print, or a follow-up short publication.
• ~2026-10-21 (est.): Q3 FY26 print. Guide is $270.0–273.0M revenue and $0.49–0.52 non-GAAP EPS; FY26 $1.075–1.081B. The 2025 comparable reported 2025-10-22. Outside the 30-day window, and that vacuum is part of the current setup.

Elapsed catalysts

• Undated, live: Bear Cave follow-up. The 2026-08-07 report's "Untenable" testing detail sits behind a paywall; Hunterbrook's disclosed short remains open. No publication date has been announced. (passed 19d ago)

What Would Change Our Mind

The structural break is the 2026-07-06 upgrade gap, which is what separates the post-re-rating name from the pre-re-rating one. A weekly close below $33 forfeits that gap and puts price back inside the ~$30.30 consensus zone, at which point the July–August advance reads as a repricing that the panel declined to ratify.

The fundamental break is narrower and dated: a Q3 FY26 print (est. late October) that leaves FY26 revenue at or below the current $1.075–1.081B guide while Tenable One's share of new business retreats from 50%, or net dollar expansion falls back below the 106% posted in Q2. That combination would say the Q2 mix jump was a pricing-and-packaging pull-forward rather than a durable platform shift, and the AI-beneficiary framing loses its only quantitative support.

A third condition is flow, not fundamentals: if the revision tape stays net-negative into the Q3 print — more cuts toward the $30 marks than raises toward $44–50 — the theme moves from maturing to saturated, and the gap between price and consensus closes downward rather than upward.

Correlation Notes

• The pair trade is explicit. Hunterbrook disclosed short TENB / long CRWD and S on 2026-08-07. Where TENB previously lagged the cyber complex on up-days as a funding source, it now carries a named relative-value short against the platform vendors. Watch whether TENB underperforms CRWD and S specifically on green cyber tape — that is the pair working, distinct from general sector beta.
• Vuln-management cohort. QLYS and RPD are the read-across group. Per the 2026-08-07 report, Rapid7 sits under $700M market cap, down about 90% from peak, versus Qualys near $6.5B. Any QLYS or RPD guidance event lands on TENB's multiple before it lands on TENB's numbers.
• Agentic-AI sentiment. The Anthropic (May 2026) and OpenAI Daybreak (2026-06-22) tie-ins mean TENB now trades partly with AI-application sentiment rather than purely with security spend. That correlation cuts both directions and has no disclosed revenue attached to it yet.
• Federal budget tape. FedRAMP High and IL5 (2026-06-29) create sensitivity to US federal IT appropriations and continuing-resolution news that a commercial-only scanner would not carry.