Tenable has launched the CyberAgents Exchange, an open-source, vendor-agnostic registry intended to help security teams discover, share and build AI agents, skills, Model Context Protocol (MCP) servers and multi-agent playbooks.
For CISOs, the initiative addresses a practical challenge emerging alongside the rapid adoption of AI in security operations: teams are often developing agents independently, duplicating work and creating tools that may be difficult to assess, maintain or transfer across technology environments.
Tenable said the exchange is designed as a cybersecurity-native alternative to general-purpose AI repositories and vendor-controlled marketplaces.
It provides code-level visibility into who built each component, when it was created and whether it has received support from peers. The platform is free to use, with no fees for listing or using agents.
A trust layer for agentic security
More than 50 AI components are available at launch under open-source licences. They include Navi, a command-line tool using Tenable One Vulnerability Management APIs; a SentinelOne Purple AI MCP server; a Recorded Future skill that maps MITRE ATT&CK techniques against live Tenable findings; and SOC-Hunter, a threat-hunting skill used by Tenable’s internal security operations team.
The immediate attraction for security leaders is not simply the ability to acquire pre-built automation. It is the prospect of examining the underlying code, understanding a component’s provenance and assessing whether it has been tested or supported by a wider practitioner community before deployment.
That does not remove the need for internal governance. CISOs will still need to determine how components are reviewed, what permissions agents receive, how their activity is logged and who remains accountable for automated decisions. However, a shared registry could help security teams move from isolated experimentation towards more repeatable and auditable development.
“The CyberAgents Exchange fills a major and pressing industry need,” said Seth Fogie, director of security at Baptist Memorial Health Care. “Its core philosophy of working together is what made the threat intelligence community so invaluable.”
Tenable CTO Vlad Korsunsky described the exchange as a collaborative “town square” where practitioners can build, test, improve and share agentic defence capabilities. SentinelOne and Recorded Future are expected to contribute agents, integration frameworks, playbooks and threat intelligence.
For CISOs, the broader proposition is a collective defence model in which transparency and shared development become controls for managing the risks of autonomous security tooling.
