Tenable’s AI Aware Helps Enterprises Surface Unauthorized AI Usage and Vulnerabilities

Tenable, the exposure management company, is debuting AI Aware, a new detection capability that surfaces exposure insights for AI applications, libraries, and plugins. As part of Tenable Vulnerability Management, AI Aware brings transparency to AI initiatives, shedding light on potential risk without interrupting business operations.

The continuous push for AI has simultaneously put a spotlight on cybersecurity and compliance, where the era of AI brings with it a new ageof security risk. Challenges such as vulnerability, detection, remediation, and unauthorized usage plague many AI initiatives and prevent positive business outcomes.

According to Tenable Research, more than one-third of security teams found usage of AI applications in their environment that might not have been provisioned through formal processes. With unmonitored, unprovisioned AI usage comes great cybersecurity risk, further compounded by the increasing volume of AI vulnerabilities, according to Tenable.

Engineered to deliver proactive AI security, Tenable’s AI Aware capability utilizes agents, passive network monitoring, dynamic application security testing, and distributed scan engines to locate approved and unapproved AI software, libraries, and browser plugins, as well as any associated vulnerabilities. AI Aware’s in-depth, dynamic assessment method serves to mitigate against the risks of exploitation, data leakage, and unauthorized resource consumption, according to Tenable.

“In an effort to keep pace with the sea change introduced by AI, organizations around the world ran full speed ahead, potentially bypassing countless cybersecurity, privacy, and compliance red flags,” said Shai Morag, chief product officer, Tenable. “Perhaps more so than with any other new technology we’ve seen, there are many risk factors to consider, especially with rushed development and deployment. Tenable AI Aware empowers organizations to deploy AI confidently, ensuring their security measures keep pace with the rapid evolution of AI technologies.”

AI Aware offers the following capabilities:

• Dashboard Views, a snapshot of the most common AI software discovered in the ecosystem, providing details about AI vulnerabilities and its most common communication ports
• Shadow Software Development Detection which surfaces the unexpected existence of AI building blocks within the environment, ensuring that business initiatives align with best practices
• Filter Findings for AI Detections, empowering teams to center their attention on AI-related findings when reviewing vulnerability assessment results, which can be further paired with Tenable Vulnerability Prioritization Rating (VPR) to effectively assess and prioritize vulnerabilities
• Asset-Centric AI Inventory, a complete inventory of AI-related packages, libraries, and browser plugins

To learn more about AI Aware, please visit https://www.tenable.com/.