tenb-20260402

SCHEDULE 14A INFORMATION

Proxy Statement Pursuant to Section 14(a) of the Securities Exchange Act of 1934

Filed by the Registrant ý

Filed by a Party other than the Registrant ¨

Check the appropriate box:

¨ Preliminary Proxy Statement

¨ Confidential, for Use of the Commission Only (as permitted by Rule 14a-6(e)(2))

ý Definitive Proxy Statement

¨ Definitive Additional Materials

¨ Soliciting Material Pursuant to § 240.14a-12

Tenable Holdings, Inc.

(Name of Registrant as Specified In Its Charter)

Payment of Filing Fee (Check the appropriate box)

ý No fee required.

¨ Fee paid previously with preliminary materials.

¨ Fee computed on table in exhibit required by Item 25(b) per Exchange Act Rules 14a-6(i)(1) and 0-11.


NOTICE OF ANNUAL MEETING OF STOCKHOLDERS


WHEN	WHERE	RECORD DATE
Wednesday, May 13, 2026	Via Webcast	March 17, 2026
1:00 pm Eastern Time	https://www.proxydocs.com/TENB	Only stockholders of record at the close of business on that date may vote at the Annual Meeting or any adjournment thereof.


ITEMS OF BUSINESS	BOARD VOTING RECOMMENDATION		PAGE REFERENCE
Electing the Board of Directors’ nominees, John C. Huffard, Jr., A. Brooke Seawell, and Raymond Vicks, Jr., to the Board of Directors to hold office until the 2029 Annual Meeting of Stockholders.		FOR each director nominee	18
Ratifying the selection by the Audit Committee of the Board of Directors of Ernst & Young LLP as the independent registered public accounting firm of the Company for the year ending December 31, 2026.		FOR	37
Approving, on a non-binding advisory basis, the compensation of the Company's Named Executive Officers as disclosed in this proxy statement.		FOR	39
Indicating, on a non-binding advisory basis, the preferred frequency of future stockholder advisory votes on the compensation of the Company's Named Executive Officers.		ONE YEAR	40
Conducting any other business properly brought before the Annual Meeting, including any adjournments or postponements of the meeting.

Each of these items of business is more fully described in the proxy statement accompanying this notice.


Important Notice Regarding the Availability of Proxy Materials for the Virtual Stockholders' Meeting to Be Held on Wednesday, May 13, 2026 at 1:00 p.m. Eastern Time.
The proxy statement and annual report to shareholders are available at https://www.proxydocs.com/TENB.

By Order of the Board of Directors,

Michelle VonderHaar
Chief Legal Officer and Corporate Secretary

Columbia, MD
April 2, 2026


You are cordially invited to attend the virtual annual meeting. Whether or not you expect to attend the meeting, please vote over the telephone or the Internet as instructed in these materials as promptly as possible in order to ensure your representation at the meeting. Even if you have voted by proxy, you may still vote online if you attend the virtual annual meeting. Please note, however, that if your shares are held of record by a broker, bank or other nominee and you wish to vote at the meeting, you must obtain a proxy issued in your name from that record holder.


CONTENTS
			Page
QUESTIONS AND ANSWERS ABOUT THESE PROXY MATERIALS AND VOTING			10
PROPOSAL 1 ELECTION OF DIRECTORS			18
Information Regarding the Board of Directors and Corporate Governance			25
Independence of the Board of Directors			25
Role of the Board in Risk Oversight			26
Meetings of the Board of Directors			27
Information Regarding Committees of the Board of Directors			27
Audit Committee			28
Compensation Committee			29
Nominating and Corporate Governance Committee			32
Cybersecurity Risk Management Committee			34
Stockholder Communications with the Board of Directors			35
Code of Ethics			35
Insider Trading Policy			35
PROPOSAL 2 RATIFICATION OF SELECTION OF INDEPENDENT REGISTERED PUBLIC ACCOUNTING FIRM			37
Fees and Services			37
Pre-Approval Policies and Procedures			38
PROPOSAL 3 ADVISORY VOTE TO APPROVE THE NAMED EXECUTIVE OFFICER COMPENSATION			39
PROPOSAL 4 ADVISORY VOTE ON FREQUENCY OF FUTURE STOCKHOLDER ADVISORY VOTES ON NAMED EXECUTIVE OFFICER COMPENSATION			40
Corporate Social Responsibility			41
Executive Officers			46
Security Ownership of Certain Beneficial Owners and Management			47
Delinquent Section 16(a) Reports			49
Executive Compensation			50
Executive Summary			50
Executive Compensation Philosophy and Objectives			53
Compensation Elements			55
Compensation-Setting Process			64
Employment Arrangements			67
Post-Employment Compensation			67
Other Compensation Policies			68
Tax and Accounting Considerations			68
Summary Compensation Table			69
Grants of Plan-Based Awards			70
Outstanding Equity Awards			72
Options Exercised and Stock Vested			74
Employment Agreements with Our Named Executive Officers			74
Potential Payments Upon Termination or Change in Control			76
CEO Pay Ratio			77
Policies and Practices Related to the Grant of Certain Equity Awards Close in Time to the Release of Material Nonpublic Information			78
Pay versus Performance			79
Director Compensation			83
Securities Authorized for Issuance Under Equity Compensation Plans			86
Transactions With Related Persons and Indemnification			88


Related-Person Transactions Policy and Procedures			88
Certain Related Person Transactions			89
Indemnification			89
Householding of Proxy Materials			90
Other Matters			91
Appendix: Reconciliation of Non-GAAP Measures			92

Cautionary Note Regarding Forward-Looking Statements

This proxy statement contains forward-looking statements within the meaning of Section 27A of the Securities Act of 1933, as amended, and Section 21E of the Securities Exchange Act of 1934, as amended. All statements regarding performance, events, developments or achievements that we expect or anticipate will occur in the future, including statements expressing our general views about future operating results and our corporate social responsibility and diversity and inclusion progress, plans and goals, are forward-looking statements. The inclusion of environmental, diversity and social-related statements is not an indication that these are material to investors or required to be disclosed in our filings with the SEC. In addition, such statements may be based on standards for measuring progress that are still developing, processes that continue to evolve and assumptions that are subject to change in the future.

Forward-looking statements are subject to certain risks and uncertainties that could cause our actual results to differ materially from historical experience and our present expectations or projections. These risks and uncertainties include, but are not limited to, those described in Item 1A, Risk Factors, in our Annual Report on Form 10-K for the year ended December 31, 2025 and those set forth in our future filings with the SEC. We disclaim and do not undertake any obligation to update, revise, or withdraw any forward-looking statements, whether as a result of new information, future events, or otherwise, except as required by applicable law or regulation.

To Our Stockholders,

Fiscal 2025 was a year of significant change and display of resilience in our company. We began the year coping with the tragic passing of our beloved Chief Executive Officer Amit Yoran, and since that time adopted a Co-Chief Executive Officer structure to lead the company, and made significant additions to our executive team with a new Chief Product Officer, Chief Financial Officer, Chief Technology Officer, and Chief Revenue Officer. Since our inception, and specifically through this transition, our mission from day one has been clear and consistent: empower organizations to understand and reduce their cybersecurity risk. We have stayed focused on this mission and as a result we had approximately $1 billion in revenue in 2025 and have received recognition across major industry analysts for our exposure management platform.

This focus and mandate is particularly important as the industry has been shifting away from reactive detection and response toward a preemptive security approach, and we are leading this transformation with our exposure management platform, Tenable One. That mission has become more critical—and more complex—than ever before. The rapid adoption of AI and LLMs has dramatically reshaped the threat landscape, creating an "invisible" attack surface that most organizations are not yet equipped to manage. We have positioned Tenable One as the essential platform for this new reality. Our customers and partners are no longer just looking to find vulnerabilities; they are looking to anticipate attacks and reduce risk before it becomes a crisis.

Our commitment to our customers and partners

We aim to be in lockstep with our customers, ensuring we address their most pressing cybersecurity challenges: securing the cloud, managing the convergence of IT and OT, and securing the AI attack surface.

In 2025, we continued to see a significant shift in how our customers are wanting to consume security. They are moving away from fragmented, siloed solutions and consolidating on Tenable One, our exposure management platform. This platform approach is designed to allow them to unify visibility, insight, and action across their entire environment. As a result of this transition, we exited the year with Tenable One representing a record 46% of our new business.

We also moved quickly to address the risks associated with Generative AI. Through the launch of Tenable AI Exposure, we now empower organizations to discover and secure AI usage across their enterprise, providing a complete view of where AI operates and where exposure is created. We are proud to be recognized as a leader in this space, helping our customers navigate the AI era with confidence.

Our commitment to our employees

As a company, we believe that when we work together, we win together. 2025 was a year of strategic evolution for our leadership and our team. Our Co-Chief Executive Officer structure has allowed us to effectively balance operational rigor with strategic expansion. We also welcomed key leaders to our executive team, including Eric Doerr as Chief Product Officer, Matthew Brown as Chief Financial Officer, Vlad Korsunsky as Chief Technology Officer, and Dino DiMarino as Chief Revenue Officer, to help drive our next phase of growth and innovation.

To maintain our leadership position, we must remain agile. In 2025, we invested heavily in innovation, specifically in Tenable One and AI security. Our employees are dedicated to focusing on the initiatives that deliver impact and value to our customers. We remain committed to supporting our team with the tools, benefits, and culture they need to excel in a fast-paced industry.

Our commitment to our stockholders

Our stockholders play a vital role in our success, and we remain committed to fostering strong, transparent relationships. We are proud of our disciplined approach to balanced growth, which has allowed us to drive significant margin expansion even as we invest in critical areas like AI and cloud security.

In 2025, we achieved significant financial milestones:

•Calculated Current Billings (CCB): $1.049 billion, surpassing the $1 billion milestone for the first time.

•Revenue: $999.4 million, an 11% increase year-over-year

•Non-GAAP Operating Margin: 21.9%, an expansion of 140 basis points year-over-year.

•Unlevered Free Cash Flow: $277.0 million, a 16.5% increase year-over-year.

We are also committed to returning capital to our shareholders. As of December 31, 2025, we have repurchased 10.6 million shares for approximately $362 million, and we have increased our repurchase authorization to accelerate this program, reflecting our confidence in Tenable’s long-term value.

Our commitment to corporate social responsibility

We take pride in the communities where we live and work. As we scale, we continue to prioritize environmental stewardship and the cultivation of an inclusive culture. Our work in securing critical infrastructure and AI—from national electric grids to educational consortiums—ensures that the essential services our society relies on remain safe and operational. We recognize that building a safer digital world goes hand-in-hand with building a sustainable and inclusive future for all.

Conclusion

While 2025 was a year of change, it was also a year of validation. The market has embraced exposure management, and Tenable is leading the way with approximately $1 billion in revenue, a customer base with over 40,000 customers and an industry leading platform. As we look to the remainder of 2026 and beyond, we believe we are setting the foundation for accelerating growth, driven by the continued adoption of Tenable One and the vast opportunities in AI security.

We are energized by the opportunities ahead and look forward to keeping our stakeholders informed as we reach new heights.

Sincerely,



Stephen Vintz			Mark Thurmond
Co-Chief Executive Officer			Co-Chief Executive Officer

Refer to the Appendix for reconciliations of non-GAAP measures to comparable GAAP measures.

Business Overview - 2025 Highlights

We are a leading provider of exposure management solutions. Exposure management is an increasingly critical category that extends foundational vulnerability management capabilities to advance risk assessment and prioritization across the entire attack surface - from IT infrastructure and cloud environments to critical infrastructure and artificial intelligence ("AI"). Tenable unifies security visibility, insight and action across this attack surface, equipping modern organizations to quickly identify and close the cybersecurity gaps that erode business value, reputation and trust.

Our 2025 business and financial highlights were as follows:

•Acquired Vulcan Cyber Ltd. ("Vulcan"), an innovator in cyber risk management, and Apex Security, Inc. ("Apex"), an innovator in securing the rapidly expanding AI attack surface.

•Launched Tenable Patch Management, an autonomous patch management solution built to quickly and effectively close vulnerability exposures.

•Released Identity 360 and Exposure Center, two capabilities designed to help organizations pinpoint identity risks and take swift, targeted action to prevent identity-based attacks.

•Achieved FedRAMP moderate authorization of Tenable One and Tenable Cloud Security.

•Launched Tenable One connectors and advanced risk dashboard, designed to seamlessly combine data from third-party security tools with our native sensor data for a comprehensive and actionable view of organizational risk.

•Launched Tenable AI Exposure, a comprehensive solution designed to see, manage and control the risks identified by generative and agentic AI.

•Released the next evolution of industry-leading Tenable Vulnerability Priority Rating (VPR), sharpening precision and enabling organizations to focus on risks that pose the greatest threat.

•Published the 2025 Cloud AI Risk Report, which examined the state of security risks in cloud AI development tools and frameworks and in AI services offered by the three major cloud providers and the 2025 Cloud Security Risk Report, which delivered in-depth, real-world insights into the most pressing security challenges organizations face.

•Awarded numerous industry and partner recognitions including: named a "Major Player" in IDC's inaugural MarketScape report for Cloud-Native Application Platforms (CNAPP); awarded two AI-powered security awards from the 2025 Globee Awards and 2025 Cyber Excellence Awards; ranked first in device vulnerability management market share for the seventh consecutive year by IDC; awarded a coveted five star rating for the Tenable Assure Partner Program by CRN and recognized as one of the top performers in cloud security in the 2025 CRN Annual Report Card Awards; named a "Leader" in both Worldwide Vulnerability and Exposure Management by IDC and Unified Vulnerability Management by Forrester; named a Leader in the 2025 Gartner® Magic Quadrant™ for Exposure Assessment Platforms and named a Customers’ Choice in the 2025 Gartner® Peer Insights™ Voice of the Customer for Cloud-Native Application Protection Platforms; and named as the company to beat for AI-Powered Exposure Assessment (EAP) in the 2025 Gartner® AI-Powered Exposure Assessment.

•S&P upgraded our credit rating to BB from B- in November 2025.

•Announced that our Board of Directors approved the repurchase of up to an additional $250 million of our common stock, increasing our stock repurchase program to $550 million in the aggregate.

•Appointed key leaders to our executive team, including, veteran technology leader Eric Doerr as Chief Product Officer, industry veteran Matthew Brown as Chief Financial Officer, and Microsoft cloud and AI security veteran Vlad Korsunsky as Chief Technology Officer.

•Revenue was $999.4 million, an 11% increase year-over-year.

•Calculated current billings was $1.049 billion, an 8% increase year-over-year.

•GAAP loss from operations was $9.2 million, compared to $6.9 million in 2024.

•Non-GAAP income from operations was $219.0 million, compared to $184.1 million in 2024.

•GAAP net loss was $36.1 million, compared to $36.3 million in 2024.

•GAAP net loss per share was $0.30, compared to $0.31 in 2024.

•Non-GAAP net income was $194.4 million, compared to $158.6 million in 2024.

•Non-GAAP diluted earnings per share was $1.59, compared to $1.29 in 2024.

•Cash and cash equivalents and short-term investments were $402.2 million at December 31, 2025, compared to $577.2 million at December 31, 2024.

•Net cash provided by operating activities was $266.8 million, compared to $217.5 million in 2024.

•Unlevered free cash flow was $277.0 million, compared to $237.8 million in 2024.

•Repurchased 7.9 million shares of our common stock for $247.5 million.

Refer to the Appendix for reconciliations of non-GAAP measures to comparable GAAP measures.

TENABLE HOLDINGS, INC.

6100 Merriweather Drive, 12th Floor

Columbia, Maryland 21044

PROXY STATEMENT

FOR THE 2026 ANNUAL MEETING OF STOCKHOLDERS

May 13, 2026

QUESTIONS AND ANSWERS ABOUT THESE PROXY MATERIALS AND VOTING

Why did I receive a notice regarding the availability of proxy materials on the Internet?

Pursuant to rules adopted by the Securities and Exchange Commission (the “SEC” or the "Commission"), we have elected to provide access to our proxy materials over the Internet. Accordingly, we have sent you a Notice of Internet Availability of Proxy Materials (the “Notice”) because the Board of Directors (the "Board of Directors" or the "Board") of Tenable Holdings, Inc. (sometimes referred to as the “Company” or “Tenable”) is soliciting your proxy to vote at the 2026 Annual Meeting of Stockholders (the "Annual Meeting"), including at any adjournments or postponements of the meeting. All stockholders will have the ability to access the proxy materials on the website referred to in the Notice or request to receive a printed set of the proxy materials. Instructions on how to access the proxy materials over the Internet or to request a printed copy may be found in the Notice.

We intend to mail the Notice on or about April 2, 2026 to all stockholders of record entitled to vote at the Annual Meeting.

Will I receive any other proxy materials by mail?

We may, at our discretion, elect to send you a proxy card. We may also send you a second Notice on or after April 14, 2026.

How do I attend the Annual Meeting?

The Annual Meeting will be a virtual stockholder meeting through which you can listen to the meeting and vote online. The Annual Meeting can be accessed by visiting https://www.proxydocs.com/TENB and entering your control number which is included in the proxy materials mailed to you. Upon completing your registration, you will receive further instructions via email, including a unique link that will allow you access to the Annual Meeting. We recommend that you log in a few minutes before the Annual Meeting to ensure that you are logged in when the meeting starts. Online check-in will begin at approximately 12:45 p.m. Eastern Time. Information on how to vote online during the Annual Meeting is discussed below.

Stockholders attending the virtual meeting will be afforded the same rights and opportunities to participate as they would at an in-person meeting; however, any questions will need to be submitted in advance of the meeting. In accordance with the rules of conduct, we ask that you limit your submission to one brief question or comment prior to the meeting that is relevant to the Annual Meeting or our business and that such remarks are respectful of your fellow stockholders and meeting participants.

Who can vote at the Annual Meeting?

Only stockholders of record at the close of business on March 17, 2026 (the "Record Date") will be entitled to vote at the Annual Meeting. On the Record Date, there were 114,530,327 shares of the Company's common stock outstanding and entitled to vote.

Stockholder of Record: Shares Registered in Your Name

If on March 17, 2026 your shares were registered directly in your name with Tenable’s transfer agent, Fidelity Stock Transfer Solutions LLC, then you are a stockholder of record with respect to those shares and the Notice was sent directly to you by the Company. As a stockholder of record, you may vote online during the meeting or vote by proxy. Whether or not you plan to attend the Annual Meeting, we urge you to vote by proxy using a proxy card that you may request or that we may elect to deliver at a later time or vote by proxy over the telephone or Internet as instructed below to ensure your vote is counted.

Beneficial Owner: Shares Registered in the Name of a Broker or Bank

If on March 17, 2026 your shares were held, not in your name, but rather in an account at a brokerage firm, bank or other similar organization, then you are the beneficial owner of shares held in “street name” and the Notice is being forwarded to you by that organization. The organization holding your account is considered to be the stockholder of record for purposes of voting at the Annual Meeting. As a beneficial owner, you have the right to direct that organization on how to vote the shares in your account. You will receive instructions from the organization that you must follow in order to submit your voting instructions and have your shares voted at the Annual Meeting. You are also invited to attend the Annual Meeting. However, since you are not the stockholder of record, you may not vote your shares online during the Annual Meeting unless you request and obtain a valid proxy from the organization.

What am I voting on?

There are four matters scheduled for a vote:

•Election of three directors (Proposal 1);

•Ratification of selection by the Audit Committee of the Board of Directors of Ernst & Young LLP as independent registered public accounting firm of the Company for the year ending December 31, 2026 (Proposal 2);

•Advisory approval, on a non-binding basis, of the compensation of our Named Executive Officers as disclosed in this proxy statement (Proposal 3); and

•Advisory indication of the preferred frequency of future stockholder advisory votes on the compensation of our Named Executive Officers (Proposal 4).

What if another matter is properly brought before the meeting?

The Board of Directors knows of no other matters that will be presented for consideration at the Annual Meeting. If any other matters are properly brought before the meeting, it is the intention of the persons named in the accompanying proxy to vote on those matters in accordance with their best judgment.

How do I vote?

You may either vote “For” all the nominees to the Board of Directors or you may “Withhold” your vote for any nominee you specify. For Proposals 2 and 3, you may vote “For” or “Against” or "Abstain" from voting. With regard to your advisory vote on how frequently we should solicit stockholder approval of Named Executive Officer compensation, you may vote for any of the following: "One Year", "Two Years" or "Three Years", or you may "Abstain" from voting on that matter.

Stockholder of Record: Shares Registered in Your Name

If you are a stockholder of record, you may vote online during the Annual Meeting, vote by proxy using a proxy card that you may request or that we may elect to deliver at a later time, vote by proxy over the telephone or vote by proxy through the Internet. Whether or not you plan to attend the meeting, we urge you to vote by proxy to ensure your vote is counted. You may still attend the meeting and vote online during the meeting even if you have already voted by proxy.

•To vote online during the meeting, access the Annual Meeting by visiting www.proxypush.com/TENB and entering your control number which is included in the proxy materials mailed to you. Please have your Notice in hand when you access the website and follow the instructions.

•To vote using the proxy card, simply complete, sign and date the proxy card that may be delivered and return it promptly in the envelope provided. If you return your signed proxy card to us before the Annual Meeting, we will vote your shares as you direct.

•To vote over the telephone, dial toll-free 866-230-6244 using a touch-tone phone and follow the recorded instructions. You will be asked to provide the control number from the Notice. To ensure your vote is counted, your telephone vote must be received either prior to the start of the meeting or, if you are attending the meeting, before the polls close during the meeting.

•To vote through the Internet, go to www.proxypush.com/TENB to complete an electronic proxy card. You will be asked to provide the control number from the Notice. To ensure your vote is counted, your Internet vote must be received either prior to the start of the meeting or, if you are attending the meeting, before the polls close during the meeting.

Beneficial Owner: Shares Registered in the Name of Broker or Bank

If you are a beneficial owner of shares registered in the name of your broker, bank or other agent, you should have received a Notice containing voting instructions from that organization rather than from Tenable. Simply follow the voting instructions in the Notice to ensure that your vote is counted. To vote online during the Annual Meeting, you must obtain a valid proxy from your broker, bank or other agent. Follow the instructions from your broker, bank or other agent included with these proxy materials, or contact that organization to request a proxy form.


Internet proxy voting will be provided to allow you to vote your shares online, with procedures designed to ensure the authenticity and correctness of your proxy vote instructions. However, please be aware that you must bear any costs associated with your Internet access, such as usage charges from Internet access providers and telephone companies.

How many votes do I have?

On each matter to be voted upon, you have one vote for each share of common stock you own as of March 17, 2026.

If I am a stockholder of record and I do not vote, or if I return a proxy card or otherwise vote without giving specific voting instructions, what happens?

If you are a stockholder of record and do not vote by completing your proxy card, by telephone, through the Internet or online during the Annual Meeting, your shares will not be voted.

If you return a signed and dated proxy card or otherwise vote without marking voting selections, your shares will be voted, as applicable, “For” the election of all nominees for director, “For” the ratification of Ernst & Young LLP as independent auditors for the year ending December 31, 2026, "For" the approval of, on a non-binding advisory basis, the compensation of our Named Executive Officers, and for "One Year" as the preferred frequency of advisory votes to approve Named Executive Officer compensation. If any other matter is properly presented at the meeting, your proxy holder (one of the individuals named on your proxy card) will vote your shares using his or her best judgment.

If I am a beneficial owner of shares held in street name and I do not provide my broker or bank with voting instructions, what happens?

If you are a beneficial owner of shares held in street name and you do not instruct your broker, bank or other agent how to vote your shares, your broker, bank or other agent may still be able to vote your shares in its discretion. In this regard, brokers, banks and other securities intermediaries may use their discretion to vote your “uninstructed” shares with respect to matters considered to be “routine” under applicable rules, but not with respect to “non-routine” matters. Proposals 1, 3 and 4 are considered to be “non-routine” under applicable rules, meaning that your broker may not vote your shares on those proposals in the absence of your voting instructions. However, Proposal 2 is considered to be “routine” under applicable rules, meaning that if you do not return voting instructions to your broker by its deadline, your shares may be voted by your broker in its discretion on Proposal 2.

If you are a beneficial owner of shares held in street name, in order to ensure your shares are voted in the way you would prefer, you must provide voting instructions to your broker, bank or other agent by the deadline provided in the materials you receive from your broker, bank or other agent.

Who is paying for this proxy solicitation?

We will pay for the entire cost of soliciting proxies. In addition to these proxy materials, our directors and employees may also solicit proxies in person, by telephone or by other means of communication. Directors and employees will not be paid any additional compensation for soliciting proxies. We may also reimburse brokerage firms, banks and other agents for the cost of forwarding proxy materials to beneficial owners.

What does it mean if I receive more than one Notice?

If you receive more than one Notice, your shares may be registered in more than one name or in different accounts. Please follow the voting instructions on the Notice to ensure that all of your shares are voted.

Can I change my vote after submitting my proxy?

Stockholder of Record: Shares Registered in Your Name

Yes. You can revoke your proxy at any time before the final vote at the Annual Meeting. If you are the record holder of your shares, you may revoke your proxy in any one of the following ways:

•You may submit another properly completed proxy card with a later date.

•You may grant a subsequent proxy by telephone or through the Internet.

•You may send a timely written notice that you are revoking your proxy to Tenable Holdings, Inc., Attention: Corporate Secretary at 6100 Merriweather Drive, 12th Floor, Columbia, Maryland 21044.

•You may attend the Annual Meeting and vote online. Simply attending the Annual Meeting will not, by itself, revoke your proxy.

Your most current proxy card or telephone or Internet proxy is the one that is counted.

Beneficial Owner: Shares Registered in the Name of Broker or Bank

If your shares are held by your broker, bank or other agent, you should follow the instructions provided by your broker, bank or other agent.

When are stockholder proposals and director nominations due for next year’s Annual Meeting?

To be considered for inclusion in next year’s proxy materials, your proposal must be submitted in writing by December 3, 2026, to our Corporate Secretary c/o Tenable Holdings, Inc., 6100 Merriweather Drive, 12th Floor, Columbia, Maryland 21044. If you wish to nominate an individual for election at, or bring business other than through a stockholder proposal before, the 2027 Annual Meeting of Stockholders, you must deliver your notice to our Corporate Secretary at the address above between January 13, 2027 and February 12, 2027. Your notice to the Corporate Secretary must set forth information specified in our Second Amended and Restated Bylaws (the "Bylaws"), including your name and address and the class and number of shares of our stock that you beneficially own. In addition to satisfying the foregoing requirements under Tenable's Bylaws, to comply with the universal proxy rules, stockholders who intend to solicit proxies in support of director nominees other than Tenable's nominees must provide notice that sets forth the information required by Rule 14a-19(b) under the Securities Exchange Act of 1934, as amended (the "Exchange Act").

In the event we hold the 2027 Annual Meeting of Stockholders more than 30 days before or more than 30 days after the one-year anniversary of the 2026 Annual Meeting of Stockholders, then, for notice by the stockholder to be timely, it must be received by the Secretary not earlier than the close of business on the 120th day prior to such annual meeting and not later than the close of business on the later of the 90th day prior to such annual meeting, or the 10th day following the day on which public announcement of the date of such annual meeting is first made.

If you propose to bring business before an annual meeting of stockholders other than a director nomination, your notice must also include, as to each matter proposed, the following: (1) a brief description of the business desired to be brought before such annual meeting, (2) the text of the proposal or business (including the text of any resolutions proposed for consideration and in the event

that such business includes a proposal to amend the Bylaws, the language of the proposed amendment), (3) the reasons for conducting that business at the annual meeting, and (4) any material interest you have in that business. If you propose to nominate an individual for election as a director, your notice must also include, as to each person you propose to nominate for election as a director, the following: (1) the name, age, business address and residence address of the person, (2) the principal occupation or employment of the person, (3) the class and number of shares of our stock that are owned of record and beneficially owned by the person, (4) the date or dates on which the shares were acquired and the investment intent of the acquisition; (5) a questionnaire with respect to the background, qualifications, stock ownership and independence of the person and a written representation or agreement that the person is not and will not become a party to any voting commitment, and (6) any other information concerning the person as would be required to be disclosed in a proxy statement soliciting proxies for the election of that person as a director in an election contest (even if an election contest is not involved and whether or not proxies are being or will be solicited), or that is otherwise required to be disclosed or provided to the Company pursuant to Section 14 of the Exchange Act, and the rules and regulations promulgated under the Exchange Act, including the person's written consent to being named in a proxy statement, associated proxy card and other filings as a nominee and to serving as a director if elected. We may require any proposed nominee to furnish other information as we may reasonably require to determine the eligibility of the proposed nominee to serve as an independent director or that could be material to a reasonable stockholder's understanding of the independence, or lack of independence, of the proposed nominee.

For more information, and more detailed requirements about advance notice of stockholder proposals and director nominations, please refer to our Second Amended and Restated Bylaws, filed as Exhibit 3.1 to our Current Report on Form 8-K (File No. 001-38600), filed with the SEC on November 15, 2023.

How are votes counted?

Votes will be counted by the inspector of election appointed for the meeting, who will separately count, for Proposal 1, the proposal to elect directors, votes “For,” “Withhold” and broker non-votes (described below); for Proposal 2, the proposal to ratify our independent auditors, votes “For,” “Against” and “Abstain”; for Proposal 3, the proposal to approve, on a non-binding advisory basis, the compensation of our Named Executive Officers, “For," "Against," and “Abstain,” and broker non-votes; and for Proposal 4, the proposal regarding the frequency of future stockholder advisory votes to approve the compensation of our Named Executive Officers, votes for frequencies of "One Year," "Two Years," "Three Years," "Abstain," and broker non-votes. If you “Abstain,” it will be counted towards the vote total for Proposals 2, 3 and 4. For Proposals 2 and 3, it will have the same effect as “Against” votes, and for Proposal 4, it will have the same effect as votes against each of the proposed voting frequencies. Broker non-votes on Proposals 1, 3 and 4 will have no effect and will not be counted toward the vote total for those proposals. We do not expect broker non-votes on Proposal 2.

What are “broker non-votes”?

A "broker non-vote" occurs when your broker submits a proxy for the meeting with respect to "routine" matters but does not vote on "non-routine" matters because you did not provide voting instructions on such "non-routine" matters. These un-voted shares with respect to the "non-routine matters" are counted as “broker non-votes.” Proposals 1, 3 and 4 are considered to be “non-routine” under applicable rules, and we therefore expect broker non-votes on these proposals. However, as Proposal 2 is considered “routine” under applicable rules, we do not expect broker non-votes on this proposal.

As a reminder, if you are a beneficial owner of shares held in street name, in order to ensure your shares are voted in the way you would prefer, you must provide voting instructions to your broker, bank or other agent by the deadline provided in the materials you receive from your broker, bank or other agent.

How many votes are needed to approve each proposal?

For Proposal 1, the election of directors, the three nominees receiving the most “For” votes from the holders of shares present online at the meeting or represented by proxy and entitled to vote on the election of directors will be elected. Only votes “For” will affect the outcome. Broker non-votes will have no effect.

To be approved, Proposal 2, ratification of the selection of Ernst & Young LLP as the Company’s independent registered public accounting firm for 2026, must receive “For” votes from the holders of a majority of shares present online at the meeting or represented by proxy and entitled to vote on the matter. If you “Abstain” from voting, it will have the same effect as an “Against” vote. Since brokers have the authority to vote on your behalf with respect to Proposal 2, we do not expect broker non-votes on this proposal.

For Proposal 3, advisory approval of the compensation of our Named Executive Officers will be considered to be approved if it receives "For" votes from the holders of a majority of the shares present online at the meeting or represented by proxy and entitled to vote thereon to be approved. If you “Abstain” from voting, it will have the same effect as an “Against” vote on this proposal. Broker non-votes will have no effect.

For Proposal 4, the advisory vote on the frequency of future stockholder advisory votes on Named Executive Officer compensation, the frequency receiving the votes of the holders of a majority of shares present online at the meeting or represented by proxy and entitled to vote on this proposal will be considered the frequency preferred by stockholders. If you "Abstain" from voting, it will have the same effect as an "Against" vote on each of the proposed frequencies. Broker non-votes will have no effect.

What is the quorum requirement?

A quorum of stockholders is necessary to hold a valid meeting. A quorum will be present if stockholders holding at least a majority of the voting power of the outstanding shares entitled to vote are present online at the meeting or represented by proxy. On the Record Date, there were 114,530,327 shares outstanding and entitled to vote. Thus, the holders of 57,265,164 shares must be present online at the meeting or represented by proxy at the meeting to have a quorum.

Abstentions and broker non-votes will be counted towards the quorum requirement. If there is no quorum, the chairperson of the meeting or the holders of a majority of shares present online at the meeting or represented by proxy may adjourn the meeting to another date.

Will a list of record stockholders as of the Record Date be available?

Upon request, a list of our record stockholders as of the close of business on the Record Date will be made available to stockholders. In addition, for the ten days ending the day prior to the Annual Meeting, the list will be available upon request for examination by any stockholder of record for a legally valid purpose. To access the list of record stockholders beginning May 3, 2026 and until the Annual Meeting, stockholders should email David Bartholomew, Deputy General Counsel, at dbartholomew@tenable.com.

How do I ask a question at the Annual Meeting?

Only stockholders of record as of March 17, 2026 may submit questions or comments in advance of the virtual stockholders meeting, not during. If you would like to submit a question or comment, you may do so prior to 5:00 p.m. Eastern Time on May 11, 2026 by following the instructions in your registration documents on https://www.proxydocs.com/TENB.

To help ensure that we have a productive and efficient meeting, and in fairness to all stockholders in attendance, you will also find posted our rules of conduct for the Annual Meeting when you log in prior to the start of the Annual Meeting. Our management may group pre-submitted questions by topic with a representative question read aloud and answered. In addition, questions may be ruled out of order if they are, among other things, irrelevant to our business, related to pending or threatened litigation, disorderly, repetitious of statements already made, or in furtherance of the speaker's own personal, political or business interests. Questions will be addressed in the "Question and Answer" portion of the Annual Meeting.

What do I do if I have technical difficulties in connection with the Annual Meeting?

If you encounter any difficulties accessing the virtual meeting during the check-in or meeting time, please call the technical support number that will be posted on the Annual Meeting login page. Technical support will be available beginning at approximately 12:00 p.m. Eastern Time on May 13, 2026.

How can I find out the results of the voting at the Annual Meeting?

Preliminary voting results will be announced at the Annual Meeting. In addition, final voting results will be published in a current report on Form 8-K, which we expect to file within four business days after the Annual Meeting. If final voting results are not available to us in time to file a Form 8-K within four business days after the meeting, we intend to file a Form 8-K to publish preliminary results and, within four business days after the final results are known to us, file an additional Form 8-K to publish the final results.

PROPOSAL 1

ELECTION OF DIRECTORS

Tenable’s Board of Directors is divided into three classes, with each class serving a three-year term. Vacancies on the Board may be filled only by persons elected by a majority of the remaining directors. A director elected by the Board to fill a vacancy in a class, including vacancies created by an increase in the number of directors, shall serve for the remainder of the full term of that class and until the director’s successor is duly elected and qualified.

The Board of Directors currently consists of ten members. There are three directors in the class whose term of office expires in 2026. Messrs. Huffard, Seawell and Vicks were previously elected by the stockholders, and each of them has been nominated by the Nominating and Corporate Governance Committee for election as Class II directors at this Annual Meeting. If elected at the Annual Meeting, each of these nominees would serve until the 2029 Annual Meeting of Stockholders and until their successor has been duly elected and qualified, or, if sooner, until the director’s death, resignation or removal. It is the Company’s policy to invite and encourage directors and nominees for director to attend each annual meeting of stockholders. In 2025, all of our then-serving directors attended the Annual Meeting.

Directors are elected by a plurality of the votes of the holders of shares present online at the meeting or represented by proxy and entitled to vote on the election of directors. Accordingly, the three nominees receiving the highest number of affirmative votes will be elected. Shares represented by executed proxies will be voted, if authority to do so is not withheld, for the election of the three nominees named below. If any nominee becomes unavailable for election as a result of an unexpected occurrence, shares that would have been voted for that nominee will instead be voted for the election of a substitute nominee proposed by the Board. Each person nominated for election has agreed to serve if elected. The Company’s management has no reason to believe that any nominee will be unable to serve.

The following table lists the skills and experience that our Nominating and Corporate Governance Committee and Board consider important for our directors to have given our current business and future market opportunities and the directors who we believe possess them:

Coviello

Higgins

Howe

Huffard

Keane

Seawell

Thurmond

Tosheff

Vicks

Vintz

Cybersecurity Experience

✔

Enterprise SaaS Experience

✔

CEO/COO Management Experience

✔

Operations Experience

✔

Business Development Experience

✔

Moving Innovation Through to Commercialization

✔

Relationships with the DoD and/or other Relevant Agencies

✔

Capital Markets Experience

✔

Financial Reporting, Accounting and Internal Controls Experience

✔

Board/Corporate Governance Experience

✔

Human Resources/Executive Compensation

✔

Legal and/or Risk Management Experience

✔

CLASS II NOMINEES FOR ELECTION FOR A THREE-YEAR TERM EXPIRING AT THE 2029 ANNUAL MEETING

The following is a brief biography of each nominee for director and a discussion of the specific experience, qualifications, attributes or skills of each nominee that led the Nominating and Corporate Governance Committee of the Board of Directors to recommend that person as a nominee for director, as of the date of this proxy statement.

The Nominating and Corporate Governance Committee seeks to assemble a board of directors that, as a whole, possesses the appropriate balance of professional and industry knowledge, financial expertise and high-level management experience necessary to oversee and direct the Company’s business. To that end, the Committee has identified and evaluated nominees in the broader context of the Board’s overall composition, with the goal of recruiting members who complement and strengthen the skills of other members and who also exhibit integrity, collegiality, sound business judgment and other qualities that the Committee views as critical to the effective functioning of the Board. To provide a mix of experience and perspective on the Board, the Committee also takes into account age, skills, talent, expertise, background, differences in viewpoints and such other factors as it deems appropriate, including diversity (including gender, racial, and ethnic diversity). The brief biographies below include information, as of the date of this proxy statement, regarding the specific and particular experience, qualifications, attributes or skills of each director or nominee that led the Committee to believe that that nominee should continue to serve on the Board.


			John C. Huffard, Jr., age 58 John C. Huffard, Jr. has served as a member of our Board since 2002. Mr. Huffard served as our Chief Operating Officer from May 2018 through December 2019. Prior to that, he served as our President and Chief Operating Officer from November 2008 to May 2018, and he co-founded our company in 2002. Mr. Huffard has also served as a member of the board of directors of Norfolk Southern Corporation since February 2020. Mr. Huffard received a B.S. in Business Administration from Washington and Lee University and an M.B.A. from Babson College. Our Board believes that Mr. Huffard is qualified to serve as a director based on his in-depth knowledge of our company and our products due to his role as our co-founder and subsequent role as our Chief Operating Officer.

			A. Brooke Seawell, age 78 A. Brooke Seawell has served as a member of our Board since October 2017. Mr. Seawell is a Venture Partner at New Enterprise Associates Inc., a position he has held since January 2005. Mr. Seawell has served on the board of directors of NVIDIA Corporation, an accelerated computing company, since December 1997. He previously served on the board of directors of Eargo, Inc., a medical device company, from September 2020 to December 2022, and Tableau Software, Inc., a business intelligence software company, from November 2011 to August 2019. Mr. Seawell received both a B.A. in Economics and an M.B.A. in Finance from Stanford University. Our Board believes that Mr. Seawell is qualified to serve as a director based on his extensive experience in technology finance and operations, including having served as the chief financial officer of two public companies and his experience as a director of public technology companies.

			Raymond Vicks, Jr., age 66 Raymond Vicks, Jr. has served as a member of our Board since January 2022. Mr. Vicks has served on the board of directors of Bowman Consulting Group Ltd. since May 2022. Mr. Vicks previously served as Managing Partner at the BMV Group, a position he held from August 2015 until his retirement in 2019. Concurrent with that role, Mr. Vicks also served as the Chief Financial Officer of the HSC Health Care System from 2015 to 2018. Prior to that, Mr. Vicks served in roles of increasing responsibility at PricewaterhouseCoopers LLP from 1995 to 2014, where at the time of his departure, he was a Partner. Mr. Vicks is a Certified Public Accountant and received a B.S. in Accounting from Virginia Tech. Our Board believes that Mr. Vicks is qualified to serve as a director based on his extensive experience in public accounting and management.

THE BOARD OF DIRECTORS RECOMMENDS A VOTE IN FAVOR OF EACH NAMED NOMINEE.

CLASS III DIRECTORS CONTINUING IN OFFICE UNTIL THE 2027 ANNUAL MEETING


			Arthur W. Coviello, Jr., age 72 Arthur W. Coviello, Jr. has served as a member of our Board since February 2018, and as the Chairman of our Board since January 2025. Mr. Coviello previously served as our Lead Independent Director from February 2022 to January 2025. Since June 2021, Mr. Coviello has served as Managing Partner of Syn Ventures, a venture capital fund. Mr. Coviello has served on the board of directors of Synchrony Financial ("Synchrony") since November 2015. Mr. Coviello was previously a venture partner at Rally Ventures, LLC, a position he held from May 2015 to July 2022, and previously was on the boards of directors of FireEye/Mandiant, Inc. from December 2020 to October 2022, and Epiphany Technology Acquisition Corp. from November 2020 to January 2023. Mr. Coviello received a B.B.A. with a concentration in Accounting from the University of Massachusetts. Our Board believes that Mr. Coviello is qualified to serve as a director based on his extensive experience in the security industry and management, as well as his experience serving as a director of public technology companies.

			George Alexander Tosheff, age 59 George Alexander Tosheff has served as a member of our Board since September 2022. Mr. Tosheff has served as a Venture Partner of Syn Ventures, a venture capital fund, since January 2025. Mr. Tosheff served as Senior Vice President, Chief Security Officer of VMware, Inc. (acquired by Broadcom) from February 2022 to April 2024, following his promotion from Vice President, Chief Security Officer, a position he held since 2014. Mr. Tosheff served as a member of our Customer Advisory Board from 2017 until September 2022. Mr. Tosheff received a B.S. in Physics from California State University. Our Board believes that Mr. Tosheff is qualified to serve as a director based on his extensive cybersecurity expertise and management experience.

			Margaret Keane, age 66 Margaret Keane has served as a member of our Board since June 2023. Ms. Keane serves on the board of directors for the Allstate Corporation, an insurance company, a position she has held since April 2018. Ms. Keane is the former Executive Chair of the board of directors of Synchrony, a position she held from April 2021 to April 2023. Ms. Keane was a member of Synchrony's board of directors from 2013 to April 2023. Ms. Keane served as Synchrony’s Chief Executive Officer from February 2014 to March 2021 and President from February 2014 to May 2019. She previously served as the Chief Executive Officer and President of the North American retail finance business of the General Electric Company from April 2011 to February 2014. Ms. Keane earned a B.A. in Government and Politics and an M.B.A. from St. John’s University. Our Board believes that Ms. Keane is qualified to serve as a director based on her extensive management experience.

CLASS I DIRECTORS CONTINUING IN OFFICE UNTIL THE 2028 ANNUAL MEETING


			Stephen A. Vintz, age 57 Stephen A. Vintz has served as our Co-Chief Executive Officer since April 2025 and as a member of our Board since May 2025. Mr. Vintz previously served as our interim Co-Chief Executive Officer from December 2024 to April 2025. From October 2014 until the appointment of his successor in August 2025, Mr. Vintz served as our Chief Financial Officer. Before joining Tenable, Mr. Vintz served as Executive Vice President and Chief Financial Officer of Vocus, Inc., a publicly traded public relations software company, from January 2001 to June 2014. Before Vocus, he served as Vice President of Strategic Planning and Analysis at Snyder Communications, Inc. and began his career as an Audit Manager at Ernst & Young LLP. Mr. Vintz received a B.B.A. in Accounting from Loyola University Maryland and is a Certified Public Accountant. Our Board believes that Mr. Vintz is qualified to serve as a director based on his deep institutional knowledge of Tenable and operational experience with technology growth companies, his extensive financial expertise, and his leadership role as our Co-Chief Executive Officer.

			Mark Thurmond, age 56 Mark Thurmond has served as our Co-Chief Executive Officer since April 2025 and as a member of our Board since May 2025. Previously, Mr. Thurmond served as our interim Co-Chief Executive Officer from December 2024 to April 2025 and as our Chief Operating Officer ("COO") from February 2020 to April 2025. Before joining Tenable, Mr. Thurmond served as COO of Turbonomic, Inc., a turbulent workload management software company, from September 2017 to February 2020. From August 2015 to 2017, he served as Executive Vice President of Worldwide Sales and Services at Qlik Technologies Inc. Mr. Thurmond also held several global sales and operations leadership positions at Dell EMC, including Senior Vice President of Worldwide Sales for the VCE and RSA divisions. Mr. Thurmond received a B.S. in Psychology from Hofstra University. Our Board believes that Mr. Thurmond is qualified to serve as a director based on his extensive operational experience in the cybersecurity and cloud industries, his deep understanding of global go-to-market strategy, and his leadership role as our Co-Chief Executive Officer.


			Niloofar Razi Howe, age 57 Niloofar Razi Howe has served as a member of our Board since May 2021. Ms. Howe has been the President of the Stratham Group, an alternative asset management firm since January 2025 and an Operating Partner of Capitol Meridian Partners, a private investment firm, since June 2022. Ms. Howe served as a Senior Operating Partner at Energy Impact Partners, a venture capital fund from May 2019 to January 2024. Ms. Howe served on the board of directors of Composecure, Inc. from December 2021 to October 2024 and currently serves on the board of directors of a number of private technology companies. Ms. Howe received a B.A. in English Literature from Columbia College and holds a Juris Doctor degree from Harvard Law School. Our Board believes that Ms. Howe is qualified as a director based on her extensive cybersecurity and management experience and her experience as a director of technology companies.

			Linda Zecher Higgins, age 72 Linda Zecher Higgins has served as a member of our Board since August 2019. Ms. Higgins is the Chief Executive Officer and Managing Director of Cyber Knowledge Partners (formerly the Barkley Group), a consulting firm focused on effective digital transformation, and has held such position since January 2017. In July 2023, Ms. Higgins was hired as the Chief Executive Officer of IronNet, Inc., a cybersecurity company ("IronNet"), to assist in its restructuring efforts. In October 2023, IronNet filed a voluntary Chapter 11 restructuring plan with the U.S. Bankruptcy Court for the District of Delaware, which was completed in February 2024. Ms. Higgins departed IronNet in May 2024. Ms. Higgins served as a member of the board of directors of Hasbro, Inc. from October 2014 to May 2024 and C5 Acquisition Corp from January 2022 to October 2023. Ms. Higgins received a B.S. in Earth Science from The Ohio State University. Our Board believes that Ms. Higgins is qualified to serve as a director based on her extensive management experience with technology companies and her experience as a director of public companies.

INFORMATION REGARDING THE BOARD OF DIRECTORS AND CORPORATE GOVERNANCE

Independence of the Board of Directors

As required under the Nasdaq Stock Market (“Nasdaq”) listing standards, a majority of the members of a listed company’s Board of Directors must qualify as “independent,” as affirmatively determined by the Board of Directors. The Board consults with the Company’s counsel to ensure that the Board’s determinations are consistent with relevant securities and other laws and regulations regarding the definition of “independent,” including those set forth in pertinent listing standards of Nasdaq, as in effect from time to time.

Our Board determines the independence of each director based on their business and personal activities that might affect us and our management. Each director completes a detailed questionnaire on an annual basis that provides information about relationships that might affect their independence. The Board, with support from our counsel, then evaluates all known relevant facts and circumstances concerning any identified relationship and assesses whether any such relationship would interfere with the independent judgment of the director in carrying out their responsibilities. Consistent with these considerations, after review of all relevant identified transactions or relationships between each director, or any of their family members, and the Company, its senior management and its independent registered public accounting firm, the Board has affirmatively determined that the following eight of our current directors are independent directors within the meaning of the applicable Nasdaq listing standards: Arthur W. Coviello, Jr., Linda Zecher Higgins, Niloofar Razi Howe, John C. Huffard, Jr., Margaret Keane, A. Brooke Seawell, George Alexander Tosheff, and Raymond Vicks, Jr. In making this determination, the Board found that none of our directors or nominees for director had a material or other disqualifying relationship with the Company. Messrs. Vintz and Thurmond are not independent directors because they currently serve as our Co-Chief Executive Officers ("Co-CEOs").

Board Leadership Structure

The Board does not have a fixed policy regarding the combination or separation of the positions of Board Chair and Chief Executive Officer(s). The Board believes that it should maintain the flexibility to combine or separate these offices in the future if deemed to be in the best interest of the Company. The Board believes that this flexibility is in the best interest of the Company and that a one-size-fits-all approach to corporate governance, with a mandated independent Chair, would not result in better governance or oversight.

The Board is currently chaired by Mr. Coviello, who is an independent, non-employee director. The Board believes Mr. Coviello's experience, breadth of knowledge and contributions to the Board position him well to provide strong leadership and oversight of ongoing Board matters and to contribute valuable insight with respect to Tenable's business. The Board believes that Mr. Coviello is highly qualified to assist the Board in overseeing the identification, assessment and management of the Company's exposure to various risks as a result of his extensive management and cybersecurity experience.

Mr. Coviello's responsibility is to ensure that our Board functions properly and to work with our Co-CEOs to set the Board's agenda. Accordingly, he has substantial ability to shape the work of the Board. We expect him to facilitate communications among our directors and between the Board and senior management. While Mr. Coviello provides independent leadership, he also works closely with our Co-CEOs to ensure that our directors receive the information they need to perform their responsibilities, including discussing and providing critical review of the matters that come before the Board and assessing management's performance. As a result, the Board currently believes that such separation can enhance the effectiveness of our Board as a whole. The Board believes that the

leadership structure of our Board is appropriate and enhances its ability to effectively carry out its roles and responsibilities on behalf of our stockholders.

Role of the Board in Risk Oversight

One of the Board’s key functions is informed oversight of Tenable’s risk management process. The Board does not have a standing risk management committee, but rather administers this oversight function directly through the Board as a whole, as well as through various Board standing committees that address risks inherent in their respective areas of oversight. In particular, our Board is responsible for monitoring and assessing strategic risk exposure, including determining the nature and level of risk appropriate for the Company.

The Audit Committee of our Board ("Audit Committee") has the responsibility to consider and discuss our major financial risk exposures and the steps our management has taken to monitor and control these exposures, including risks pertaining to financial accounting, investments and cash management, and disclosure controls and procedures. The Audit Committee also monitors compliance with legal and regulatory requirements and oversees the performance of our internal audit function and the performance and independence of external auditors.

The Nominating and Corporate Governance Committee of our Board (the "Nominating and Corporate Governance Committee") monitors the effectiveness of our Corporate Governance Guidelines, including as it relates to regulatory changes and other developments. The Nominating and Corporate Governance Committee also oversees our environmental, social and governance programs, stockholder engagement, and board and committee composition and refreshment.

The Compensation Committee of our Board (the "Compensation Committee") assesses and monitors whether any of our compensation policies and programs has the potential to encourage excessive risk-taking, and risks associated with human capital management, including recruiting, retention, diversity and inclusion.

The Cybersecurity Risk Management Committee of our Board (the "Cybersecurity Risk Management Committee") assists the Board in fulfilling its oversight responsibility with respect to the management of risks related to our information technology use and protection, cybersecurity, and product security.

The Board, primarily through the Audit Committee’s general oversight of the Company’s enterprise risk assessment and risk management policies, oversees the Company’s risk management processes related to AI. Additionally, our Cybersecurity Risk Management Committee assists the Board in fulfilling its oversight responsibilities regarding AI risks specifically as they relate to the Company's cybersecurity, information technology use, and product security.

To support the Board and its committees in managing AI-related risks and opportunities, the Company established two cross-functional internal bodies: the AI Governance Board and AI Factories.

•AI Governance Board: Our AI Governance Board is responsible for fostering the secure, safe, and ethical innovative use of emerging AI technologies for internal employee usage and within our products. This group, which includes representatives from Research, Digital Solutions, Information Security, Legal, and Product/Engineering, manages our enterprise AI Usage Policy, mitigates risks associated with unregulated AI tools, and frames internal and external communications regarding our AI deployment.

•AI Factories: Comprising cross-functional working groups with representation from across all business units, the AI Factories serve as the Company’s centralized delivery engine for artificial intelligence. While the AI Governance Board establishes policy, the AI Factories provide strategic execution—identifying, evaluating, piloting, and deploying high-impact AI technologies. The AI Factories ensure that our AI initiatives are built upon a secure, unified architectural foundation, align with our strategic organizational goals, and drive measurable operational efficiency and financial value, all while fostering innovation and strictly adhering to our governance and risk management frameworks.

Typically, the entire Board meets with members of management responsible for risk management at least annually, and the applicable Board committees meet at least annually with the employees responsible for risk management in the committees’ respective areas of oversight. Both the Board as a whole and the various standing committees receive periodic reports from members of management responsible for risk management, as well as incidental reports as matters may arise. It is the responsibility of the committee chairs to report findings regarding material risk exposures to the Board as quickly as possible.

Meetings of the Board of Directors

The Board of Directors met eleven times during 2025. All directors attended at least 75% of the aggregate number of meetings of the Board and of each of the committees on which they served, held during the portion of the last year for which they were directors or committee members, respectively.

Information Regarding Committees of the Board of Directors

The Board has four committees: an Audit Committee, a Compensation Committee, a Cybersecurity Risk Management Committee, and a Nominating and Corporate Governance Committee. The following table provides the current membership of each of the Board committees, and identifies the chairperson of each committee and the number of committee meetings held in 2025:

Name

Audit

Compensation

Cybersecurity Risk Management

Nominating and Corporate Governance

Arthur W. Coviello, Jr.

Linda Zecher Higgins

Niloofar Razi Howe

John C. Huffard, Jr.

Margaret Keane

A. Brooke Seawell

George Alexander Tosheff

Raymond Vicks, Jr.

Total meetings in 2025

_____________

* Committee Chairperson

Below is a description of each committee of the Board of Directors. Each of the committees has the authority to engage legal counsel or other experts or consultants, as it deems appropriate to carry out its responsibilities. The Board of Directors has determined that each member of each committee

meets the applicable Nasdaq rules and regulations regarding “independence” and each member is free of any relationship that would impair their individual exercise of independent judgment with regard to the Company.

Audit Committee

The Audit Committee was established by the Board in accordance with Section 3(a)(58)(A) of the Exchange Act to oversee the Company’s corporate accounting and financial reporting processes and audits of its financial statements. For this purpose, the Audit Committee performs several functions. The principal duties and responsibilities of our audit committee include, among other things:

•selecting a qualified firm to serve as the independent registered public accounting firm to audit our financial statements;

•approving (or, as permitted, pre-approving) all audit and all permissible non-audit services to be performed by the independent registered public accounting firm;

•helping to ensure the independence and performance of the independent registered public accounting firm;

•obtaining and reviewing a report by the independent registered public accounting firm at least annually, that describes its internal quality-control procedures, any material issues with such procedures, and any steps taken to deal with such issues when required by applicable law;

•discussing the scope and results of the audit with the independent registered public accounting firm, and reviewing, with management and the independent registered public accounting firm, our interim and year-end operating results, including a review of our disclosures under "Management's Discussion and Analysis of Financial Condition and Results of Operations";

•reviewing and discussing with management and the independent registered public accounting firm any earnings press releases, other financial information, and guidance provided to the public or rating agencies;

•evaluating management's cooperation with the independent registered public accounting firm during their audit examination and resolving any conflicts or disagreements regarding financial reporting;

•reviewing our policies on risk identification, assessment and management;

•overseeing the organization and performance of the Company's internal audit function;

•developing procedures for employees to submit concerns anonymously about questionable accounting or audit matters;

•reviewing related party transactions;

•reviewing the Company's investment philosophy and policies and adherence thereto;

•reviewing with management legal and regulatory compliance and any actual, pending, or threatened legal or financial matters that could significantly affect the Company's business or financial statements; and

•meeting in executive session with management, internal audit, and the Company's independent registered public accountants.

The Audit Committee is currently composed of four directors: Messrs. Seawell, Huffard, Tosheff, and Vicks. The Audit Committee met eight times during 2025. The Board has adopted a written Audit Committee charter that is available to stockholders on our website at www.investors.tenable.com.

The Board reviews the Nasdaq listing standards definition of independence for Audit Committee members on an annual basis and has determined that all of the current members of the Audit

Committee are independent (as independence is currently defined in Rule 5605(c)(2)(A)(i) and (ii) of the Nasdaq listing rules and under Rule 10A-3 under the Exchange Act).

The Board has also determined that Messrs. Seawell and Vicks each qualify as an “audit committee financial expert,” as defined in applicable SEC rules. The Board made a qualitative assessment of Messrs. Seawell's and Vicks' level of knowledge and experience based on a number of factors, including their formal education, Mr. Seawell's experience as a chief financial officer of public reporting companies and Mr. Vicks' public accounting experience.

Report of the Audit Committee of the Board of Directors*

The Audit Committee has reviewed and discussed the audited financial statements for the year ended December 31, 2025 with management of the Company. The Audit Committee has discussed with the independent registered public accounting firm the matters required to be discussed by the applicable requirements of the Public Company Accounting Oversight Board (“PCAOB”) and SEC. The Audit Committee has also received the written disclosures and the letter from the independent registered public accounting firm required by applicable requirements of the PCAOB regarding the independent registered public accounting firm's communications with the Audit Committee concerning independence, and has discussed with the independent registered public accounting firm the accounting firm’s independence. Based on the foregoing, the Audit Committee recommended to the Board of Directors that the audited financial statements be included in the Company’s Annual Report on Form 10-K for the year ended December 31, 2025.

A. Brooke Seawell, Chair

John C. Huffard, Jr.

George Alexander Tosheff

Raymond Vicks, Jr.

*The material in this report is not "soliciting material," is not deemed "filed" with the Commission and is not to be incorporated by reference in any filing of the Company under the Securities Act or the Exchange Act, whether made before or after the date hereof and irrespective of any general incorporation language in any such filing.

Compensation Committee

The Compensation Committee acts on behalf of the Board to review, modify and oversee the Company’s compensation strategy, policies, plans and programs. The principal duties and responsibilities of our Compensation Committee include, among other things:

•reviewing the Company's practices and policies of employee compensation as they relate to risk management and risk-taking incentives;

•establishing corporate and individual performance objectives relevant to the compensation of our executive officers, directors and other senior management and evaluation of performance in light of these stated objectives;

•reviewing and approving the compensation and other terms of employment or service, including severance and change-in-control arrangements, of our Chief Executive Officer(s), the other executive officers and other senior management;

•reviewing and recommending to the Board for approval the type and amount of compensation to be paid or awarded to our directors;

•administering our equity compensation plans, bonus plans, benefit plans and other similar plans and programs;

•providing recommendations to the Board on compensation-related proposals to be considered at the Company's annual meeting to stockholders, and consider the results of any advisory vote on executive compensation;

•reviewing and discussing the "Compensation Discussion and Analysis" disclosure with management and prepare the related committee report;

•overseeing the Company's clawback or similar policies;

•reviewing and approving the list of companies to be included in the Company's compensation peer group;

•reviewing and evaluating with the Chief Executive Officer(s) the succession plan for the Company's executive officers and make recommendations to the Board; and

•reviewing and discussing with management the Company's policies and practices related to the management of human capital resources, including talent development, retention, overall employee wellness, and engagement.

The Compensation Committee is currently composed of three directors: Mses. Higgins, Howe, and Keane. All members of the Company’s Compensation Committee are independent (as independence is currently defined in Rule 5605(d)(2) of the Nasdaq listing rules). The Compensation Committee met six times during 2025. The Board has adopted a written Compensation Committee charter that is available to stockholders on our website at www.investors.tenable.com.

Compensation Committee Processes and Procedures

Typically, the Compensation Committee meets quarterly and with greater frequency when necessary. The agenda for each meeting is usually developed by the Chair of the Compensation Committee, and in consultation with our Co-CEOs, Chief People and Culture Officer and Compensia, Inc. ("Compensia"), the compensation consultant engaged by the Compensation Committee. The Compensation Committee meets regularly in executive session. In addition to our Co-CEOs, our Chief People and Culture Officer and Deputy General Counsel also regularly attend meetings at the invitation of the Compensation Committee and take part in discussions about executive compensation. From time to time, various members of management and other employees, as well as outside advisors or consultants, may be invited by the Compensation Committee to make presentations, to provide financial or other background information or advice or to otherwise participate in Compensation Committee meetings. Our Co-CEOs do not participate in, and are not present during, any deliberations or determinations of the Compensation Committee regarding their compensation or individual performance objectives. The charter of the Compensation Committee grants the Compensation Committee full access to all books, records, facilities and personnel of the Company. In addition, under its charter, the Compensation Committee has the authority to obtain, at the expense of the Company, advice and assistance from compensation consultants and internal and external legal, accounting or other advisors and other external resources that the Compensation Committee considers necessary or appropriate in the performance of its duties. The Compensation Committee has direct responsibility for the oversight of the work of any consultants or advisers engaged for the purpose of advising the Committee. In particular, the Compensation Committee has the sole authority to retain, in its sole discretion, compensation consultants to assist in its evaluation of executive and director compensation, including the authority to approve the consultant’s reasonable fees and other retention terms. Under the charter, the Compensation Committee may select, or receive advice from, a compensation consultant, legal counsel or other adviser to the compensation committee, other than in-house legal counsel and certain other types of advisers, only after taking into consideration six factors prescribed by the SEC and Nasdaq, that bear upon the adviser’s independence; however, there is no requirement that any adviser be independent.

During the past calendar year, after taking into consideration the six factors prescribed by the SEC and Nasdaq described above, the Compensation Committee retained Compensia as its compensation consultant. Our Compensation Committee identified Compensia based on Compensia's general reputation in the industry. As part of its engagement, Compensia was requested by the Compensation Committee to review and update the group of companies that we use for comparative purposes and to perform an analysis of competitive performance and compensation levels for that group. The specific determinations of the Compensation Committee with respect to executive compensation for the year ended December 31, 2025, as well as the role of the compensation consultant in assisting with those determinations, are described in greater detail in the “Compensation Discussion and Analysis” section of this proxy statement.

Under its charter, the Compensation Committee may form and delegate authority to subcommittees as appropriate. In 2025, the Compensation Committee delegated authority to Mr. Vintz, in his capacity as our Co-CEO, to grant, without any further action required by the Compensation Committee, stock awards to certain employees who are not his direct reports or officers of the Company, up to and including employees at the senior vice president level. The purpose of this delegation of authority is to enhance the flexibility of equity award administration within the Company and to facilitate the timely grant of stock awards to employees, particularly new employees and promoted employees, within specified limits approved by the Compensation Committee. The number of shares underlying awards approved by Mr. Vintz for on-hire, annual, promotion, and retention-and-merit-based awards, are subject to certain limitations and guidelines approved by the Compensation Committee from time to time. As part of its oversight function, the Compensation Committee reviews on a quarterly basis the list of grants made by Mr. Vintz. The Compensation Committee reviews the delegated authority periodically and amends it as necessary. During 2025, Mr. Vintz exercised his authority to grant a total of 3,734,493 restricted stock units ("RSUs") to qualifying employees. No other equity awards were granted pursuant to the delegated authority during 2025.

The Compensation Committee typically makes adjustments to annual compensation, approves changes to the key financial metric targets and formulas used to determine annual bonus payments, approves additional equity awards and establishes new performance objectives at one or more meetings held during the first quarter of the year. However, the Compensation Committee also considers matters related to individual compensation, such as compensation for new executive hires, as well as high-level strategic issues, such as the alignment of the Company’s compensation strategy with its business strategy, potential modifications to enhance this alignment and new trends, plans or approaches to compensation, at various meetings throughout the year. Generally, the Compensation Committee’s process comprises two related elements: the determination of compensation levels and the establishment of performance objectives for the current year. For executives other than the Co-CEOs, the Compensation Committee solicits and considers evaluations and recommendations submitted to the Committee by our Co-CEOs. In the case of our Co-CEOs, the evaluation of their performance is conducted by the Compensation Committee, which determines any adjustments to their compensation as well as awards to be granted. For all executives and directors as part of its deliberations, the Compensation Committee may review and consider, as appropriate, materials such as financial reports and projections, operational data, tax and accounting information, tally sheets that set forth the total compensation that may become payable to executives in various hypothetical scenarios, executive and director stock ownership information, company stock performance data, analyses of historical executive compensation levels and current company-wide compensation levels and recommendations of the Compensation Committee’s compensation consultant, including analyses of executive and director compensation paid at other companies identified by the consultant.

Compensation Committee Interlocks and Insider Participation

None of the current members of our Compensation Committee has ever been an executive officer or employee of ours. None of our executive officers currently serves, or has served during the last completed year, on the compensation committee or board of directors of any other entity that has one or more executive officers serving as a member of our Board or Compensation Committee.

Report of the Compensation Committee of the Board of Directors*

The Compensation Committee has reviewed and discussed with management the Compensation Discussion and Analysis (“CD&A”) contained in this proxy statement. Based on this review and discussion, the Compensation Committee has recommended to the Board that the CD&A be included in this proxy statement and incorporated into the Company’s Annual Report on Form 10-K for the year ended December 31, 2025.

Linda Zecher Higgins, Chair

Niloofar Razi Howe

Margaret Keane

*The material in this report is not “soliciting material,” is furnished to, but not deemed “filed” with, the Commission, and is not deemed to be incorporated by reference in any filing of the Company under the Securities Act or the Exchange Act, other than the Company’s Annual Report on Form 10‑K, where it shall be deemed to be “furnished,” whether made before or after the date hereof and irrespective of any general incorporation language in any such filing.

Nominating and Corporate Governance Committee

The Nominating and Corporate Governance Committee is responsible for helping the Board oversee the Company's corporate governance functions; developing, updating as necessary, and recommending to the Board the governance principles applicable to the Company; identifying, evaluating, and recommending candidates qualified to become Board members or nominees for directors; and making other recommendations to the Board relating to the directors of the Company. The principal duties and responsibilities of our Nominating and Corporate Governance Committee include, among other things:

•identifying, reviewing and evaluating candidates to serve as directors of the Company (consistent with criteria approved by the Board), including the nomination of incumbent directors for reelection and nominees recommended by stockholders;

•periodically reviewing the performance of the Board, including Board committees and management, and assessing the independence of directors;

•overseeing the Board's committee structure, and making recommendations to the Board regarding the membership of the committees of the Board;

•reviewing the adequacy of the certificate of incorporation and Bylaws and recommending proposed amendments as conditions dictate;

•instituting plans or programs for the continuing education of directors and orientation of new directors;

•developing a set of corporate governance principles for the Company, assessing the Company's corporate governance, and evaluating developments in corporate governance and shareholder engagement;

•providing general oversight of the Company's corporate environmental, social and governance programs, policies, and disclosures;

•reviewing and making recommendations regarding directors' and officers' indemnification and insurance matters; and

•overseeing the annual self-assessment process for the Board and its committees.

The Nominating and Corporate Governance Committee is currently composed of three directors: Mr. Coviello and Mses. Higgins and Howe. All members of the Nominating and Corporate Governance Committee are independent (as independence is currently defined in Rule 5605(a)(2) of the Nasdaq listing rules). The Nominating and Corporate Governance Committee met ten times during 2025. The Board has adopted a written Nominating and Corporate Governance Committee charter that is available to stockholders on our website at www.investors.tenable.com.

The Nominating and Corporate Governance Committee believes that candidates for director should have certain minimum qualifications, including the ability to read and understand basic financial statements and having the highest personal integrity and ethics. The Nominating and Corporate Governance Committee also intends to consider such factors as possessing relevant expertise upon which to be able to offer advice and guidance to management, having sufficient time to devote to the affairs of the Company, demonstrated excellence in their field, having the ability to exercise sound business judgment and having the commitment to rigorously represent the long-term interests of the Company’s stockholders. However, the Nominating and Corporate Governance Committee retains the right to modify these qualifications from time to time. Candidates for director nominees are reviewed in the context of the current composition of the Board, the operating requirements of the Company and the long-term interests of stockholders. In conducting this assessment, the Nominating and Corporate Governance Committee typically considers age, skills, talent, expertise, background and differences in viewpoints and such other factors as it deems appropriate, including diversity (including gender, racial and ethnic diversity), given the current needs of the Board and the Company, to maintain a balance of knowledge, experience and capability.

The Nominating and Corporate Governance Committee appreciates the value of thoughtful Board refreshment, and regularly identifies and considers qualities, skills and other director attributes that would enhance the composition of the Board. In the case of incumbent directors whose terms of office are set to expire, the Nominating and Corporate Governance Committee will review these directors’ overall service to the Company during their terms, including the number of meetings attended, level of participation, quality of performance and any other relationships and transactions that might impair the directors’ independence. The Committee also takes into account the results of the Board’s self-evaluation, conducted by outside counsel annually on a group and individual basis. In the case of new director candidates, the Nominating and Corporate Governance Committee also determines whether the nominee is independent for Nasdaq purposes, which determination is based upon applicable Nasdaq listing standards, applicable SEC rules and regulations and the advice of counsel, if necessary. The Nominating and Corporate Governance Committee then uses its network of contacts to compile a list of potential candidates, but also engages professional search firms from time to time to assist in identifying potential candidates. The Nominating and Corporate Governance Committee conducts any appropriate and necessary inquiries into the backgrounds and qualifications of possible candidates after considering the function and needs of the Board. The Nominating and Corporate Governance Committee meets to discuss and consider the candidates’ qualifications and then selects a nominee for recommendation to the Board by majority vote.

The Nominating and Corporate Governance Committee will consider director candidates recommended by stockholders. The Nominating and Corporate Governance Committee does not intend to alter the manner in which it evaluates candidates, including the minimum criteria set forth above, based on whether or not the candidate was recommended by a stockholder. Stockholders who wish to recommend individuals for consideration by the Nominating and Corporate Governance Committee to become nominees for election to the Board may do so by delivering a written

recommendation to the Nominating and Corporate Governance Committee at the following address: Tenable Holdings, Inc., Attention: Corporate Secretary, 6100 Merriweather Drive, 12th Floor, Columbia, Maryland 21044, at least 90 days, but not more than 120 days prior to the anniversary date of the preceding year's annual meeting of stockholders; provided, however, that in the event that the date of the annual meeting is advanced more than 30 days prior to or delayed by more than 30 days after the anniversary of the preceding year's annual meeting, or if no annual meeting was held (or deemed to have been held), notice by the stockholder to be timely must be so received not earlier than the close of business on the 120th day prior to such annual meeting and not later than the close of business on the later of the 90th day prior to such annual meeting or the 10th day following the day on which public announcement of the date of such meeting is first made. Submissions must include the name and address of the stockholder on whose behalf the submission is made, the number of shares of Tenable stock owned beneficially by such stockholder on the date of the submission, the full name of the proposed nominee, a description of the proposed nominee’s business experience for at least the previous five years, complete biographical information and a description of the proposed nominee's qualifications as a director. Any submission must be accompanied by the written consent of the proposed nominee to be named as a nominee and to serve as a director if elected.

Cybersecurity Risk Management Committee

The Cybersecurity Risk Management Committee assists the Board in fulfilling its oversight responsibility with respect to the management of risks related to the Company's information technology use and protection, cybersecurity, and product security. The principal duties and responsibilities of our Cybersecurity Risk Management Committee include, among other things:

•overseeing the quality and effectiveness of policies and procedures governing information technology and network systems, including relating to encryption, network security, data security, access control, vendor cybersecurity risk management and incident detection;

•overseeing the technology senior management teams' priorities for its information technology and engineering security functions;

•reviewing and providing oversight on incident response policies and procedures, and reviewing management's performance in response to significant cybersecurity incidents;

•reviewing periodically with management the Company's disaster recovery, business continuity, and business resiliency capabilities;

•overseeing the management of compliance risks and audits related to its information technology and network systems and discussing with management risk mitigation in connection with strategic business initiatives;

•reviewing and overseeing the preparation of the Company's disclosures in its SEC filings related to its information technology and network systems; and

•reviewing the Company's cyber insurance policies periodically to ensure appropriate coverage.

The Cybersecurity Risk Management Committee is currently composed of three directors: Mr. Huffard, Ms. Keane and Mr. Tosheff. All members of the Cybersecurity Risk Management Committee are independent (as independence is currently defined in Rule 5605(a)(2) of the Nasdaq listing rules). The Cybersecurity Risk Management Committee met seven times during 2025. The Board has adopted a written Cybersecurity Risk Management Committee charter that is available to stockholders on our website at www.investors.tenable.com.

In addition to one of our Co-CEOs, our Chief Security Officer and our Chief Legal Counsel regularly attend meetings at the invitation of the Cybersecurity Risk Management Committee. The Cybersecurity Risk Management Committee also has direct access to our Chief Security Officer and

evaluates his performance. From time to time, various members of management and other employees as well as outside advisors may be invited by the Cybersecurity Risk Management Committee to brief the committee members on the current threat landscape and cybersecurity efforts. Under its charter, the Cybersecurity Risk Management Committee is granted authority to retain independent advisors and investigate matters brought to its attention.

Stockholder Communications with the Board of Directors

All stockholders and other interested parties are welcome to communicate with our non-management directors through an established process for stockholder communication. For communication directed to our non-management directors, please contact our Corporate Secretary or Legal Department in writing at the address listed below.

Tenable Holdings, Inc.

6100 Merriweather Drive, 12th Floor

Columbia, MD 21044

Attn: Corporate Secretary or Legal Department

Our Corporate Secretary or Legal Department will review all incoming stockholder communications and determine whether the communication should be presented to the Board or the appropriate director or committee. The purpose of this screening is to allow the Board to avoid having to consider irrelevant or inappropriate communications, such as mass mailings, product complaints or inquiries, job inquiries, business solicitations and patently offensive or otherwise inappropriate material. The screening procedures have been approved by a majority of our independent directors. All communications directed to the Audit Committee in accordance with the Company’s whistleblower policy that relate to questionable accounting or auditing matters involving the Company will be promptly and directly forwarded to the Audit Committee.

Code of Ethics

We have adopted the Tenable Code of Business Conduct and Ethics that applies to all officers, directors, employees and independent contractors. The Code of Business Conduct and Ethics is available on our website at www.investors.tenable.com. If we make any substantive amendments to the Code of Business Conduct and Ethics or grant any waiver from a provision of the Code to any executive officer or director, we will promptly disclose the nature of the amendment or waiver on our website.

Insider Trading Policy

We have adopted an Insider Trading Policy that governs the purchase, sale, and other disposition of Company securities and applies to all Tenable personnel, including directors, officers, employees, and other covered persons. The Company also follows procedures for the repurchase of its securities. We believe our Insider Trading Policy and repurchase procedures are reasonably designed to promote compliance with insider trading laws, rules and regulations, and listing standards applicable to the Company. A copy of the Insider Trading Policy was filed as Exhibit 19.1 to our Annual Report on Form 10-K for the year ended December 31, 2024.

Hedging

Our Insider Trading Policy prohibits our employees, including our executive officers, and the non-employee members of our Board of Directors from engaging in short sales, transactions in put or call

options, hedging transactions, using margin accounts, pledges, or other inherently speculative transactions involving our equity securities.

PROPOSAL 2

RATIFICATION OF SELECTION OF INDEPENDENT REGISTERED PUBLIC ACCOUNTING FIRM

The Audit Committee of the Board of Directors has selected Ernst & Young LLP as the Company’s independent registered public accounting firm for the year ending December 31, 2026 and has further directed that management submit the selection of its independent registered public accounting firm for ratification by the stockholders at the Annual Meeting. Ernst & Young LLP has audited the Company’s financial statements since 2014. Representatives of Ernst & Young LLP are expected to be present online at the Annual Meeting. They will have an opportunity to make a statement if they so desire and will be available to respond to appropriate questions.

Neither the Company’s Bylaws nor other governing documents or laws require stockholder ratification of the selection of Ernst & Young LLP as the Company’s independent registered public accounting firm. However, the Audit Committee of the Board is submitting the selection of Ernst & Young LLP to the stockholders for ratification as a matter of good corporate practice. If the stockholders fail to ratify the selection, the Audit Committee of the Board will reconsider whether or not to retain that firm. Even if the selection is ratified, the Audit Committee of the Board in its discretion may direct the appointment of a different independent registered public accounting firm at any time during the year if it determines that such a change would be in the best interests of the Company and its stockholders.

The affirmative vote of the holders of a majority of the shares present online at the meeting or represented by proxy and entitled to vote on the matter at the Annual Meeting will be required to ratify the selection of Ernst & Young LLP.

Fees and Services

The following table represents aggregate fees billed to the Company by Ernst & Young LLP, the Company’s principal accountant.


	Year Ended December 31,
(in thousands)	2025		2024
Audit Fees(1)	$	1,902	$	1,740
Audit-Related Fees(2)	455		397
Tax fees(3)	113		59
All Other Fees(4)	8		8
Total Fees	$	2,478	$	2,204

_____________

(1) Audit fees consisted of fees billed for professional services provided in connection with the audits of our annual consolidated financial statements and our internal control over financial reporting, the review of our quarterly condensed consolidated financial statements, related procedures and audit services that are normally provided by the independent registered public accounting firm in connection with regulatory filings and business combinations.

(2) Audit-related fees consisted of professional services provided in connection with attestation reports for service organizations, acquisition accounting consultations and due diligence. In 2025, audit-related fees included fees related to enterprise risk management and the evaluation of non-financial performance indicators.

(3) Tax fees included fees for permissible tax advisory services.

(4) All other fees included fees for access to online accounting and tax research software.

All fees and services described above were pre-approved by the Audit Committee.

Pre-Approval Policies and Procedures

The Audit Committee has adopted a policy and procedures for the pre-approval of audit and non-audit services rendered by the Company’s independent registered public accounting firm, Ernst & Young LLP. The policy generally pre-approves specified services in the defined categories of audit services, audit-related services and tax services up to specified amounts. Pre-approval may also be given as part of the Audit Committee’s approval of the scope of the engagement of the independent registered public accounting firm or on an individual, explicit, case-by-case basis before the independent registered public accounting firm is engaged to provide each service. The Chair of the Audit Committee has been delegated authority to pre-approve certain audit and non-audit services, but the decision must be reported to the full Audit Committee at its next scheduled meeting.

The Audit Committee has determined that the non-audit services rendered by Ernst & Young LLP are compatible with maintaining the principal accountant’s independence.

THE BOARD OF DIRECTORS RECOMMENDS A VOTE IN FAVOR OF PROPOSAL 2.

PROPOSAL 3

ADVISORY VOTE TO APPROVE THE NAMED EXECUTIVE OFFICER COMPENSATION

The Dodd-Frank Wall Street Reform and Consumer Protection Act and Section 14A of the Exchange Act enable our stockholders to approve, on an advisory non-binding basis, the compensation of our Named Executive Officers as disclosed in this proxy statement. This proposal, commonly known as a "Say-on-Pay" proposal, gives our stockholders the opportunity to express their views on our Named Executive Officers' compensation as a whole. The vote is not intended to address any specific item of compensation or any specific Named Executive Officer, but rather the overall compensation of all our Named Executive Officers and the philosophy, policies and practices described in this proxy statement. At the 2020 Annual Meeting of Stockholders, the stockholders indicated their preference that the Company solicit a Say-on-Pay vote every year. The Board has adopted a policy that is consistent with that preference. In accordance with that policy, this year, we are asking stockholders to approve, on an advisory basis, the compensation of our Named Executive Officers as disclosed in this proxy statement in accordance with SEC rules.

The Say-on-Pay vote is advisory, and therefore is not binding on us, the Compensation Committee or the Board. The Say-on-Pay vote will, however, provide information to us regarding investor sentiment about our executive compensation philosophy, policies and practices, which the Compensation Committee will be able to consider when determining executive compensation for the remainder of the current year and beyond. The Board and our Compensation Committee value the opinions of our stockholders and to the extent there is any significant vote against the Named Executive Officer compensation as disclosed in this proxy statement, we will endeavor to communicate with stockholders to better understand the concerns that influenced the vote, consider our stockholders’ concerns and the Compensation Committee will evaluate whether any actions are necessary to address those concerns.

The compensation of our Named Executive Officers subject to the vote is disclosed in the Compensation Discussion and Analysis section, the compensation tables and the related narrative disclosure contained in this proxy statement. As discussed in those disclosures, we believe that our compensation policies and decisions are aligned with our stockholders’ interests to support long-term value creation and enable us to attract and retain talented executives.

Accordingly, the Board is asking the stockholders to indicate their support for the compensation of our Named Executive Officers as described in this proxy statement by casting a non-binding advisory vote “FOR” the following resolution:

“RESOLVED, that the compensation paid to the Company’s Named Executive Officers, as disclosed pursuant to Item 402 of Regulation S-K, including the Compensation Discussion and Analysis, compensation tables and narrative discussion is hereby APPROVED.”

Advisory approval of this proposal requires the vote of the holders of a majority of the shares present online or represented by proxy and entitled to vote on the matter at the annual meeting. Unless the Board decides to modify its policy regarding the frequency of soliciting Say-on-Pay votes, the next scheduled Say-on-Pay vote will be at the 2027 Annual Meeting.

THE BOARD OF DIRECTORS RECOMMENDS A VOTE IN FAVOR OF PROPOSAL 3.

PROPOSAL 4

ADVISORY VOTE ON THE FREQUENCY OF SOLICITATION OF FUTURE ADVISORY STOCKHOLDER APPROVAL OF NAMED EXECUTIVE OFFICER COMPENSATION

The Dodd-Frank Wall Street Reform and Consumer Protection Act and Section 14A of the Exchange Act also enable our stockholders, at least once every six years, to indicate their preference regarding how frequently we should solicit a non-binding advisory vote on the compensation of our Named Executive Officers, as disclosed pursuant to the SEC’s compensation disclosure rules, such as Proposal 3 above. In accordance with the Dodd-Frank Act, we are asking stockholders to indicate whether they would prefer a non-binding advisory vote on the compensation of our Named Executive Officers every one, two or three years. Alternatively, stockholders may abstain from casting a vote.

After considering the benefits and consequences of each alternative, the Board recommends that the advisory vote on the compensation of our Named Executive Officers be submitted to stockholders each year.

The Board believes that an annual advisory vote on the compensation of our Named Executive Officers is the most appropriate policy for us at this time. While our executive compensation program is designed to promote the creation of stockholder value over the long term, the Board recognizes that executive compensation disclosures are made annually, and holding an annual advisory vote on the compensation of our Named Executive Officers provides us with more direct and immediate feedback on our executive compensation program, policies and practices. However, stockholders should note that because a proposed annual advisory vote would occur well after the beginning of the compensation year, and because the different elements of our executive compensation programs are designed to operate in an integrated manner and to complement one another, in many cases it may not be appropriate or feasible to change our compensation plans and arrangements for our executive officers in consideration of any single year’s advisory vote by the time of the following year’s annual meeting of stockholders. We believe, however, that an annual advisory vote on the compensation of our Named Executive Officers is consistent with our practice of seeking input and engaging in dialogue with our stockholders on corporate governance matters.

While the Board believes that its recommendation is appropriate at this time, the stockholders are not voting to approve or disapprove that recommendation, but are instead being asked to indicate their preference, on an advisory basis, as to whether the non-binding advisory vote on the approval of the compensation of our Named Executive Officers should be held every year, every other year or every three years. The option among those choices that receives the votes of the holders of a majority of shares present online at the Annual Meeting or represented by proxy and entitled to vote at the Annual Meeting will be deemed to be the frequency preferred by the stockholders.

The Board values the opinions of the stockholders in this matter and, to the extent there is any significant vote in favor of one frequency over the other options, even if less than a majority, the Board will consider the stockholders’ concerns and evaluate any appropriate next steps. However, because this vote is advisory and, therefore, not binding on the Board or us, the Board may decide that it is in the best interests of the stockholders that we hold an advisory vote on Named Executive Officer compensation more or less frequently than the option preferred by the stockholders. The vote will not be construed to create or imply any change or addition to the fiduciary duties of the Company or the Board.

THE BOARD OF DIRECTORS RECOMMENDS A VOTE IN FAVOR OF "ONE YEAR" FOR PROPOSAL 4.

CORPORATE SOCIAL RESPONSIBILITY

We believe good governance at all levels is necessary to drive corporate responsibility, which in turn promotes the long-term interests of our stockholders and strengthens Board and management accountability. We focus our efforts in the following key areas:

•Governance;

•Environmental stewardship; and

•Social responsibility in: cybersecurity and data privacy, inclusion, employee engagement, and community involvement.


			Governance

Our Board sets high standards for the Company's employees, officers, and directors. Implicit in this philosophy is the importance of sound corporate governance. It is the duty of the Board to serve as a prudent fiduciary for stockholders and to oversee the management of the Company's business. The Board adheres to our corporate governance guidelines, which are designed to give directors and management a flexible framework for effectively pursuing the Company's objectives for the benefit of its stockholders.

In the risk management process, risk oversight is one of the Board’s key functions. The Board does not have a standing risk management committee but rather administers this oversight function directly through the Board as a whole, as well as through various Board standing committees that address risks inherent in their respective areas of oversight. In particular, our Board is responsible for monitoring and assessing strategic risk exposure, including a determination of the nature and level of risk appropriate for the Company.

In addition to our governance best practices, we consider environmental and social issues in our operations. We believe that socially responsible operating practices go hand in hand with generating value for our stockholders, providing cybersecurity solutions for our clients, being good neighbors within our communities, and being a good employer to our employees. In our view, our corporate governance is more effective when we consider environmental and social issues as part of our oversight of corporate strategy, key risks, and our operations more generally.

We are committed to the promotion of ethical business practices and the implementation of measures to reduce the risk of corruption. We believe strongly in human rights, including, but not limited to, supporting our workforce and promoting equality of opportunity and treatment in hiring, training, promotions and working conditions. As such, our Human Rights Policy and Supplier Code of Conduct articulate our commitments and values regarding such matters as ethical business practices, labor practices (including child labor and human trafficking), data privacy, diversity and non-discrimination, and whistleblower protections, and our related expectations regarding supplier, vendor, and contractor practices.


			Environmental Stewardship

Our Board and management team recognize that we have a role to play in environmental stewardship. Given that the Company is a software company, our energy consumption and usage

within our data centers is an important component of the day-to-day operations of our business. We outsource our data center needs to Amazon Web Services (“AWS”). In addition to carefully choosing data center locations to mitigate environmental risks, AWS has a long-term commitment to using 100 percent renewable energy.

Aside from data center needs, we believe that we can still play a part through environmentally sound practices. Consequently, we have invested in software to manage our environmental impact factors, enabling us to track and calculate our scope 1 and scope 2 footprint.

Our corporate headquarters is a LEED Certified Gold for Core Construction. We continue to implement environmental stewardship in our daily lives including: recycling in our offices; offering biodegradable to-go boxes to reduce food waste; enforcing a strict policy for disposing of hardware; and utilizing a travel portal that provides detail on our carbon footprint.

Tenable and our employees have donated time and money to important environmental causes such as healthy waterways and other clean-up efforts, recycling, carbon footprint mitigation and protection of threatened wildlife. At Tenable, we believe our employees are our most critical catalysts for change. Our Green Initiatives group continues to gain traction as a way for employees to share best practices for an environmentally conscious lifestyle, building global support within the Company, and lead campaigns such as trash clean-ups, sustainable lifestyle pledges, and tree-planting initiatives. Partnering within our Tenable CARES program - detailed later in this section - the Green Initiatives group curates easy-to-implement actions and measures our collective impact.

Our regional Green Initiatives leaders build engagement and momentum by hosting regular community check-ins and information sessions and building camaraderie among members. Through their shared passion for environmentalism, participants inspire one another to take action for a greener and cleaner tomorrow. Our 2026 theme, "Sustainable Resource Management Through Recycling and Composting," focuses on reducing waste and conserving natural resources by promoting effective recycling and composting practices. The Green Initiatives group will spearhead collection drives, local recycling and waste reduction efforts and trash cleanups.


			Cybersecurity and Data Privacy

We take great pride in assisting our customers with enhancing their security posture through the use of our services and products. We understand that customers must trust and have confidence in an organization to use its service offerings for managing their exposure data. As such, we take the overall security of our products and their supporting infrastructure very seriously.

We align our information security and risk management program to the National Institute of Standards and Technology Cybersecurity Framework and have implemented an information security management system to protect the confidentiality, integrity, and availability of assets against threats and vulnerabilities. We achieved ISO/IEC 27001:2022 certification, recognizing our proven commitment to the highest level of information security management.

As a leader in cybersecurity, and with our focus on sound governance, we believe adding oversight at the board level is important, which is why we elevated the Cybersecurity Risk Management Committee from a subcommittee of the Audit Committee to a separate fully functioning committee of the Board in November of 2022. The Cybersecurity Risk Management Committee assists the Board in fulfilling its oversight responsibility for managing risks related to the Company’s information technology use and protection, cybersecurity, and product security. For additional details

on the Committee's oversight responsibilities see "Cybersecurity Risk Management Committee" above.

Data privacy protection and cybersecurity require diligence and a community effort. We enable the community through our employees, customers, and products by bringing security awareness to everything we do. As an enterprise security company, we consistently look for ways to improve our security posture to maintain data privacy and protect sensitive information for our employees and customers.

Thousands of customers, including financial services organizations, healthcare providers, retailers, educational institutions, and government agencies, trust Tenable with their exposure data, digital identities and exposure insights in our cloud platform. Security is core to our corporate ethos and we allocate significant investment to protect the confidentiality, integrity, and availability of all customer data. One of our top priorities is preventing any non-customers or bad actors from accessing, disclosing, or violating the privacy and protection of data stored in the Tenable cloud platform. Using a combination of preventative and detective controls, environment segregation, automation, granular data access controls, modern identity and access management practices, and data localization, our products are built to protect data and help meet privacy obligations. We continuously assess and implement additional measures to help improve our security program and address the ever-changing threat landscape.


			Engagement and Inclusion

We believe an inclusive culture drives employee engagement, sparks innovation and delivers exceptional business results. Tenable’s people strategy aspires to create a positive and rewarding experience for new, prospective and current employees across all aspects of employee connection — recruiting, onboarding, career growth, wellness and compensation. Our total rewards package — which includes abundant development options — recognizes employees for their contributions, gives them the opportunity for continued growth and provides resources to support well-being both inside and outside the workplace.

At Tenable, we strive to be a career destination in which employees from all backgrounds are welcomed and empowered, treated with fairness and respect, presented with opportunities to make a difference and provided with resources to enable them to grow.

Tenable's Engagement & Inclusion (E&I) mission aligns all initiatives with three pillars—Workforce, Workplace, and Community—to enhance the overall employee value proposition and propel our success. It emphasizes that an inclusive culture fosters a diversity of opinions, drives employee engagement, fuels innovation, and yields outstanding business results. We strive to be a career destination where employees from all backgrounds, regardless of race, gender, ethnicity, sexual orientation or disability, can do their best work.

Our E&I strategy at Tenable is aligned to three major objectives:

•Workforce: Attract, retain, and develop top talent through partnerships with external organizations, employer branding, and inclusive engagement and development opportunities for all employees.

•Workplace: Cultivate an inclusive, high-performance environment where all employees feel they belong and are given the support they need to thrive.

•Community: Increase our commitment to supporting the next generation of science technology, engineering and mathematics (STEM) talent.

To support our initiatives, we are strengthening collaboration with external organizations to expand our outreach and establish Tenable as a recognized brand within all communities. We are rolling out initiatives that foster global connections through inclusive programming. Finally, we are focused on empowering our employees by enhancing programs to ensure all employees feel valued and supported, focusing on professional growth, leadership development, and opportunities to make meaningful contributions to our success.


			Employee Engagement

Our ability to fulfill core values depends on how well we listen to our employees. We consistently ask employees what they need to do their best work and we act on their input. We have several different methods of soliciting employee feedback to ensure we hear from all parts of the business. We also create regular opportunities for two-way communication with our executives to help our people better understand how decisions are made. Our methods include the following:

•conducting an annual employee engagement survey combined with periodic division - or region-specific check-ins;

•soliciting employee feedback at various stages of their employment cycle, from onboarding to offboarding;

•holding frequent executive "coffee chat" sessions during which employees can engage with our senior leaders to exchange information, provide feedback and brainstorm ideas in small-group settings;

•staging monthly company-wide All Hands meetings led by our Co-CEOs, with an open question-and-answer period;

•empowering departmental, regional or team leaders to host their own town halls for their direct reports;

•encouraging people managers to hold regular check-in meetings with their direct reports where they can focus on real-time feedback, recognition, coaching, and professional development; and

•ensuring executive sponsorship of each Employee Resource Group, providing each cohort with a direct path to communicate with senior leadership.

We believe professional development is a continuous and iterative process and encourage employees to think of refining and redefining their development goals and plans as a path or direction, rather than pursuing a specific job position or promotion. Tenable promotes and supports employee development and organizational effectiveness by providing numerous high-quality learning and development options. Employees and their managers work together to create development plans for increasing business acumen and building on the skills and knowledge each employee needs to excel in their current position and to grow professionally. Our professional development offerings include mentorship and networking opportunities, tuition reimbursement and professional development funds, access to industry-leading tools for learning and building skills, a management development program, career development and learning events.

We expect our employees to respect and adhere to the highest standards of business conduct, including as set forth in our Code of Business Conduct and Ethics. All employees are expected to

complete certain compliance training requirements annually. Topics include information security, data privacy, harassment prevention, anti-bribery and insider trading.


			Community Involvement and Public Advocacy

We invest in social good in alignment with our company values. Tenable demonstrates that we care by striving to make a positive difference in everything that we do — in our work, with our customers and colleagues and in our communities. We are proud to contribute to charities, initiatives and programs that strengthen our industry and impact our employees and communities.

Our people strive to create a better tomorrow by giving back to their communities globally through our internal giving and volunteerism program, Tenable CARES. Tenable CARES is designed to make it easier for our employees to support the charitable organizations that are important to them. The program offers employees one day of paid leave per year to participate in volunteer activities. In addition, we match employee donations to a predetermined amount to their preferred organizations and give each employee an opportunity to nominate a cause that is important to them to be selected as Tenable's global cause of the year. Through Tenable CARES, we aim to unite our employees around our missions and use our programs and tools to help spread the word about their charitable passions and work.

Just as volunteering in our communities is an important aspect of our corporate culture, we encourage our employees to express their voices in local, state, and national public policy. Employees are given a total of one day off per year to exercise their right to vote. We are also focused on advocating for policies that impact Tenable and the cybersecurity industry as a whole. We regularly engage with U.S. federal, state, and local government entities to provide expertise and thought leadership to policymakers as they shape policies and regulations that directly impact our customers and cybersecurity as a whole. But our efforts are not limited to the U.S. government. We engage governments, policymakers and partners around the world to advocate on important issues affecting our business, our customers, our partners, and the communities in which we operate.

We also lend our expertise to promote cybersecurity resilience and help inform the development of cybersecurity standards. We participate in numerous public private partnerships such as the IT Sector Coordinating Council and the National Institute for Standards and Technology's National Cybersecurity Center of Excellence - to provide cybersecurity and technology insight to policymakers and government officials.

These engagements have led to opportunities to provide official testimony at congressional hearings on topics ranging from securing critical infrastructure to creating the Office of the National Cybersecurity Director. Tenable participates in a range of conferences, events, and summits that collectively advance our public policy goals. In addition, we conduct lobbying activities aimed at supporting policies that enhance cybersecurity and digital resilience. These activities are reported publicly in accordance with the Lobbying Disclosure Act and all subsequent amendments to the law.

Complementary to our policy advocacy, we are engaged in cyber threat intelligence information sharing and operational collaboration with multiple organizations, including the Cybersecurity and Infrastructure Security Agency's (CISA) Joint Cyber Defense Collaborative (JCDC) and the IT Information Sharing and Analysis Center (IT-ISAC). We are members of numerous associations, including the Alliance for Digital Innovation (ADI), the Cybersecurity Coalition, the Information Technology Industry Council (ITI), the Operational Technology Cybersecurity Coalition (OTCC), DigiAmericas Alliance, and the National Association of State Chief Information Officers (NASCIO).

In addition, our Political Action Committee ("PAC"), allows eligible employees to pool their voluntary, personal contributions to help support and elect pro-technology and pro-cybersecurity lawmakers to Congress. Tenable's PAC does not advance a partisan or social agenda, but instead ensures public policies promote sound cybersecurity policies and growth for our business, our employees and our customers. You can find all disbursements for the Tenable PAC by visiting the Federal Election Commission website.

EXECUTIVE OFFICERS

Our executive officers, and their respective ages as of April 2, 2026, are as follows:

Name

Age

Position(s)

Executive Officers

Stephen A. Vintz

Co-Chief Executive Officer and Former Chief Financial Officer

Mark Thurmond

Co-Chief Executive Officer and Former Chief Operating Officer

Matthew Brown

Chief Financial Officer


			Stephen A. Vintz Stephen A. Vintz has served as our Co-Chief Executive Officer since April 2025. For Mr. Vintz's biography, please see the section above entitled "Class I Directors Continuing in Office Until the 2028 Annual Meeting."

			Mark Thurmond Mark Thurmond has served as our Co-Chief Executive Officer since April 2025. For Mr. Thurmond's biography, please see the section above entitled "Class I Directors Continuing in Office Until the 2028 Annual Meeting."

			Matthew Brown Matthew Brown has served as our Chief Financial Officer since August 2025. Prior to joining Tenable, Mr. Brown served as the Chief Financial Officer and Principal Financial Officer of Altair Engineering Inc. from January 2021 to March 2025. His previous experience includes finance leadership roles, such as Interim Chief Financial Officer at NortonLifeLock, a leading consumer cyber safety company, from November 2019 to July 2020, and prior to that as Chief Accounting Officer at Symantec, a leading provider of enterprise security software. Mr. Brown is a Certified Public Accountant and holds a B.S. in Business Administration from the Walter A. Haas School of Business at the University of California, Berkeley.

SECURITY OWNERSHIP OF

CERTAIN BENEFICIAL OWNERS AND MANAGEMENT

The following table sets forth certain information regarding the ownership of the Company’s common stock as of March 17, 2026 by: (i) each director and nominee for director; (ii) each of the executive officers named in the Summary Compensation Table; (iii) all executive officers and directors of the Company as a group; and (iv) all those known by the Company to be beneficial owners of more than five percent of its common stock.


	Beneficial Ownership(1)
Beneficial Owner	Number of Shares	Percent of Total
5% or greater stockholders:
The Vanguard Group(2)	14,962,471	13.1%
BlackRock, Inc.(3)	10,524,434	9.2%
Ameriprise Financial, Inc.(4)	6,466,182	5.6%

Named executive officers and directors:
Stephen A. Vintz(5)	957,885	*
Mark Thurmond(6)	169,087	*
Matthew Brown(7)	18,541	*
Arthur W. Coviello, Jr.(8)	57,793	*
John C. Huffard, Jr.(9)	502,667	*
Linda Zecher Higgins(10)	11,022	*
Niloofar Razi Howe(11)	29,839	*
A. Brooke Seawell(12)	145,292	*
Raymond Vicks, Jr.(13)	26,828	*
George Alexander Tosheff(14)	31,344	*
Margaret Keane(15)	17,043	*
All current executive officers and directors as a group (11 persons)(16)	1,967,341	1.7%

_____________

* Represents beneficial ownership of less than 1%.

(1) This table is based upon information supplied by officers, directors and principal stockholders and Schedules 13D and 13G filed with the SEC. Unless otherwise indicated in the footnotes to this table and subject to community property laws where applicable, the Company believes that each of the stockholders named in this table has sole voting and investment power with respect to the shares indicated as beneficially owned. Applicable percentages are based on 114,530,327 shares outstanding on March 17, 2026, adjusted as required by rules promulgated by the SEC.

(2) As reported in a Schedule 13G/A filed with the Securities and Exchange Commission on October 31, 2025, which states that The Vanguard Group, Inc. has sole dispositive power with respect to 13,971,532 of the shares, shared dispositive power with respect to 990,939 of the shares and shared voting power with respect to 834,196 of the shares. The Vanguard Group, Inc. is the parent holding company of Vanguard Asset Management, Limited, Vanguard Fiduciary Trust Company, Vanguard Global Advisors, LLC, Vanguard Group (Ireland) Limited, Vanguard Investments Australia Ltd, Vanguard Investments Canada Inc., Vanguard Investments Hong Kong Limited and Vanguard Investments UK, Limited, which act as investment advisers to registered investment

companies and separate accounts that own the reported shares. The principal business address of The Vanguard Group, Inc. is 100 Vanguard Boulevard, Malvern, Pennsylvania 19355.

(3) As reported in a Schedule 13G/A filed with the Securities and Exchange Commission on January 25, 2024, which states that BlackRock, Inc. has sole dispositive power with respect to all of the shares and sole voting power with respect to 10,333,404 of the shares. BlackRock, Inc. is the parent holding company of BlackRock Life Limited, BlackRock Advisors, LLC, Aperio Group, LLC, BlackRock (Netherlands) B.V., BlackRock Institutional Trust Company, National Association, BlackRock Asset Management Ireland Limited, BlackRock Financial Management, Inc., BlackRock Japan Co., LLC, BlackRock Asset Management Schweiz AG, BlackRock Investment Management, LLC, BlackRock Investment Management (UK) Limited, BlackRock Asset Management Canada Limited, BlackRock Investment Management (Australia) Limited, BlackRock Fund Advisors and BlackRock Fund Managers Ltd, which act as investment advisers to registered investment companies and separate accounts that own the reported shares. The principal business address of BlackRock, Inc. is 50 Hudson Yards, New York, New York 10001.

(4) As reported in a Schedule 13G filed with the Securities and Exchange Commission on August 14, 2025, which states that Ameriprise Financial, Inc. ("Ameriprise Financial") has shared dispositive power with respect to 6,466,182 of the shares and shared voting power with respect to 6,058,433 of the shares. The shares reported by Ameriprise Financial include 6,221,404 shares beneficially owned by Columbia Management Investment Advisers, LLC ("Columbia Management"). Ameriprise Financial, as the parent company of Columbia Management, may be deemed to beneficially own the shares reported by Columbia Management. Columbia Management reported shared voting power with respect to 6,058,433 shares and shared dispositive power with respect to 6,221,404 shares. Each of Ameriprise Financial and Columbia Management disclaims beneficial ownership of any shares reported on the Schedule 13G. The principal business address of Ameriprise Financial is 145 Ameriprise Financial Center, Minneapolis, MN 55474. The principal business address of Columbia Management is 290 Congress Street, Boston, MA 02210.

(5) Consists of (a) 429,451 shares of common stock held by Mr. Vintz directly and (b) 528,434 shares of common stock issuable upon the exercise of outstanding options exercisable within 60 days of March 17, 2026.

(6) Consists of 169,087 shares of common stock held by Mr. Thurmond directly.

(7) Consists of 18,541 shares of common stock held by Mr. Brown directly.

(8) Consists of (a) 51,731 shares of common stock held by Mr. Coviello directly and (b) 6,062 shares of common stock issuable upon the vesting and settlement of outstanding RSUs within 60 days of March 17, 2026.

(9) Consists of (a) 31,847 shares of common stock held by Mr. Huffard’s spouse in the Mary Kathryn Braden Huffard Revocable Trust U/T/A dated March 2, 2012, (b) 390,183 shares of common stock held by Mary Kathryn Braden Huffard and Jonathan M. Forster, as Trustees of The Three Suns 2019 Non-Exempt Irrevocable Trust U/T/A dated November 15, 2019, (c) 74,575 shares of common stock held by Mr. Huffard and Mary Kathryn Braden Huffard, as Trustees of The John Cloyd Huffard Jr Revocable Trust U/T/A dated March 2, 2012 and (d) 6,062 shares of common stock issuable upon the vesting and settlement of outstanding RSUs within 60 days of March 17, 2026.

(10) Consists of (a) 4,960 shares of common stock held by Ms. Higgins directly and (b) 6,062 shares of common stock issuable upon the vesting and settlement of outstanding RSUs within 60 days of March 17, 2026.

(11) Consists of (a) 23,777 shares of common stock held by Ms. Howe directly and (b) 6,062 shares of common stock issuable upon the vesting and settlement of outstanding RSUs within 60 days of March 17, 2026.

(12) Consists of (a) 9,230 shares of common stock held by Mr. Seawell directly, (b) 15,000 shares of common stock held by Mr. Seawell as Trustee of the Alexander Brooke Seawell Revocable Trust, (c) 115,000 shares of common stock issuable upon the exercise of outstanding options exercisable within 60 days of March 17, 2026 and (d) 6,062 shares of common stock issuable upon the vesting and settlement of outstanding RSUs within 60 days of March 17, 2026.

(13) Consists of (a) 16,266 shares of common stock held by Mr. Vicks directly, (b) 4,500 shares of common stock held in a custodial account established pursuant to the Uniform Transfer to Minors Act for which Mr. Vicks serves as custodian and (c) 6,062 shares of common stock issuable upon the vesting and settlement of outstanding RSUs within 60 days of March 17, 2026.

(14) Consists of (a) 25,282 shares of common stock held by Mr. Tosheff directly and (b) 6,062 shares of common stock issuable upon the vesting and settlement of outstanding RSUs within 60 days of March 17, 2026.

(15) Consists of (a) 10,981 shares of common stock held by Ms. Keane directly and (b) 6,062 shares of common stock issuable upon the vesting and settlement of outstanding RSUs within 60 days of March 17, 2026.

(16) Consists of (a) 1,275,411 shares of common stock, (b) 643,434 shares of common stock issuable upon the exercise of outstanding options exercisable within 60 days of March 17, 2026 and (c) 48,496 shares of common stock issuable upon the vesting and settlement of outstanding RSUs within 60 days of March 17, 2026.

DELINQUENT SECTION 16(A) REPORTS

Section 16(a) of the Exchange Act requires the Company's directors, officers, and persons who own more than ten percent of a registered class of the Company's equity securities, to file with the SEC initial reports of ownership and reports of changes in ownership of common stock and other equity securities of the Company. Officers, directors and greater than ten percent stockholders are required by SEC regulation to furnish the Company with copies of all Section 16(a) forms they file.

To the Company's knowledge, based solely on a review of the copies of such reports furnished to the Company and written representations that no other reports were required, during the year ended December 31, 2025, all Section 16(a) filing requirements applicable to its officers, directors and greater than ten percent beneficial owners were complied with, except that one report covering one transaction was inadvertently filed late on behalf of Mr. Barron Anschutz by the Company, one report covering one transaction was inadvertently filed late on behalf of Mr. Thurmond by the Company, and one report covering one transaction was inadvertently filed late on behalf of Mr. Vintz by the Company.

EXECUTIVE COMPENSATION

COMPENSATION DISCUSSION AND ANALYSIS

This Compensation Discussion and Analysis reviews the material elements of our 2025 executive compensation program, philosophy, policies and practices, and discusses compensation earned by our named executive officers in 2025. Our named executive officers for the year ended December 31, 2025 and their respective titles are set forth in the table below (our “Named Executive Officers”). No other individuals served as executive officers of the Company during 2025.


Name						Position
Stephen A. Vintz						Co-Chief Executive Officer
Mark Thurmond						Co-Chief Executive Officer
Matthew Brown						Chief Financial Officer

As previously disclosed, on April 16, 2025, the Company announced that the Board unanimously appointed Messrs. Vintz and Thurmond as Co-CEOs on a permanent basis. Mr. Vintz continued to serve as the Company's Chief Financial Officer until Mr. Brown joined the Company on August 21, 2025.

Executive Summary

Who We Are

We are a leading provider of exposure management solutions. Exposure management is an increasingly critical category that extends foundational vulnerability management capabilities to advance risk assessment and prioritization across the entire attack surface – from IT infrastructure and cloud environments to critical infrastructure and AI. Tenable unifies security visibility, insight and action across this attack surface, equipping modern organizations to quickly identify and close the cybersecurity gaps that erode business value, reputation and trust.

2025 Financial Highlights

SEC Form DEF 14A filed by Tenable Holdings Inc.