Tenable to buy CNAPP company Ermetic

Tenable announced that it has signed a definitive agreement to acquire Ermetic, a fully integrated cloud-native application protection platform (CNAPP) company, and a provider of cloud infrastructure entitlement management (CIEM). Tenable intends to integrate these capabilities into its Tenable One Exposure Management Platform to deliver market-leading contextual risk visibility, prioritization and remediation across infrastructure and identities, both on-premise and in the cloud. 

Under the terms of the agreement, Tenable will acquire Ermetic for approximately $240 million in cash and $25 million in restricted stock and RSUs, subject to customary purchase price adjustments. The acquisition is expected to close early in the fourth quarter 2023, subject to customary closing conditions. Tenable expects to fund the cash portion of the purchase price with existing cash. 

“We will have an opportunity to put additional market-leading cloud security capabilities into the hands of tens of thousands of customers,” said Amit Yoran, Chairman and Chief Executive Officer, Tenable. “Together, we will be able to deliver a holistic view of the modern attack surface and help organizations reduce exposure and risk, using identity as an essential foundation.” 

The unique combination of Tenable and Ermetic will give customers: 

Unified CNAPP - a unified and agentless solution that automates asset discovery, risk analysis, accelerated remediation and compliance. From shift-left Infrastructure as Code security to agent-based and agentless assessment for runtime environments, broad CNAPP capabilities will be delivered via an elegant user experience that minimizes complexity and speeds adoption. 

Powerful CIEM - a comprehensive solution for managing human and service identities for cloud infrastructure. It visualizes all identities and entitlements, using automated analysis to reveal and prioritize risks. 

Context-aware risk prioritization - context across all cloud and on-premises resources, including workloads, identities and data. Enhanced exposure management will extend visibility across the hybrid, multi-cloud attack surface. 

Simplified remediation - guidance on and automation of the remediation process that enables organizations to make rapid improvements in their security posture. 

“The combination of Tenable’s rich exposure management data and Ermetic’s cloud solutions will provide unprecedented levels of actionable visibility and value. It will remove the complexity that makes managing cloud environments so challenging,” said Shai Morag, CEO and co-founder, Ermetic. “Tenable’s massive install base of customers will enable us to introduce more organizations to the benefits of context-aware risk prioritization to solve problems before they manifest.” 

Founded in 2019, Ermetic is a leader in CIEM and identity centric unified cloud security platform capabilities. The company serves organizations of all sizes, including Fortune 50 companies, to mitigate access risk, secure cloud data, ensure compliance and accelerate organizational security efforts.