CyberAgents Exchange

CyberAgents Exchange is a community-driven registry built and maintained by Tenable’s Agentic AI Accelerator practice. It organizes cybersecurity components into four main surfaces: agents that automate security tasks, modular skills, MCP servers that connect AI models to security tools and data, and playbooks that chain components into larger workflows. Listings can be browsed and filtered through the web directory, while the actual code remains in contributor-controlled public GitHub repositories. ¹²³

The model is deliberately vendor-neutral. Tenable states that listed components can work with Tenable, CrowdStrike, SentinelOne and other security stacks rather than requiring a Tenable-only environment. Contributors submit listing metadata through a pull-request workflow, so the Exchange functions more like an open registry and discovery layer than a conventional SaaS marketplace or execution platform. ¹²

The Exchange is free to browse, use and contribute to. Tenable states that there are no tiers, paywalls or fees to list components, and users do not need to be Tenable customers. ¹²

There is therefore no conventional subscription value calculation. The practical cost is operational rather than monetary: users remain responsible for reviewing, configuring and running the individual open-source components they choose. Because code is hosted in external contributor repositories, deployment requirements, licenses, dependencies and infrastructure needs vary by component. ¹

The strongest trust property is source transparency. Each Exchange asset links to its source repository, and Tenable explicitly avoids bundling opaque binaries. That makes provenance and code inspection easier than on a closed marketplace and gives security teams more control over their own acceptance threshold. ¹²

That transparency should not be overstated. The Exchange-wide trust model does not establish that every listed component has passed independent penetration testing, secure-code review or production validation. Tenable’s own guidance places responsibility on users to inspect the code and choose an appropriate trust threshold. ¹

Tenable launched the Exchange on August 4, 2026 with more than 50 open-source components and reported in early September that the catalog had grown beyond 100 community-submitted components. On September 3, Tenable announced Exchange Inspector, a planned review process combining OpenAI GPT cyber models, Tenable security tooling and researcher review. Tenable said it expected Inspector to become available during September; until that happens, it is roadmap/current-development evidence rather than a deployed Exchange-wide safeguard. ⁴⁵

Independent product-quality evidence remains thin. The completed fixed-source audit found no exact current independent numeric review corpus for the Exchange itself. That absence is not negative evidence, but it limits confidence in claims about usability, reliability, curation quality and the security of the overall catalog. ⁶

CyberAgents Exchange is most relevant to security engineers, SOC teams, security researchers and AI-security practitioners who want reusable open-source building blocks rather than a closed vendor marketplace. It is particularly useful for teams that are comfortable evaluating GitHub-hosted code and assembling their own workflows from agents, skills and MCP integrations. ¹²

It is less suitable for buyers looking for a turnkey managed product with standardized support, uniform deployment requirements and a single vendor accepting responsibility for every listed component. Organizations with strict supply-chain governance should treat each repository as a separate software dependency and apply their own security-review and approval processes. ¹