What this means
Open source AI agents vetted for production. Exchange Inspector combines frontier assessment using OpenAI GPT cyber models, skills inspection powered by Tenable One AI Exposure, and expert review from Tenable researchers.
AI component inspection is powered by Tenable One AI Exposure — the same skills inspection technology that can secure the agents already running across your enterprise.
Remediation Priority & Impact Agent
Prioritizes daily vulnerability fixes using Tenable exposure data, CISA KEV exploitation, MITRE ATT&CK and attack paths
Vetted at the commit linked above. The review covers that commit only, not later changes to the repository. Learn more about our security review process.
Powered by Hexa AI, Part of Tenable One
Remediation Priority & Impact Agent is powered by Tenable Hexa AI
Hexa AI is the agentic engine of Tenable One — the AI-powered exposure management platform. See it in action.
Request a Demo →A Claude Code skill that answers “What should I fix today?” by pulling live data from Tenable (Tenable One / Exposure Management and Vulnerability Management) and producing a prioritized remediation briefing.
What it does
- Ranks your most exposed assets by Tenable’s Asset Exposure Score (AES)
- Confirms real exploited-in-the-wild status from plugin exploit-intelligence (CISA KEV, exploited-by-malware, in-the-news, exploit frameworks) — not inferred from VPR
- Layers MITRE ATT&CK and Attack Path Analysis, sourced from Tenable’s own APA where available, then CVE→tactic mapping
- Scores each remediation with a composite of AES, confirmed-exploit tier, VPR, asset criticality, attack-path position and blast radius
- Surfaces the actual fix — verbatim Tenable remediation (exact KBs, package versions, registry keys) plus interim mitigations
- Renders an interactive dashboard (priority table, ATT&CK heatmap, batched remediation groups, risk-reduction forecast) and a “Fix FIRST / NEXT / SOON” plan
- Generates ready-to-paste change tickets per host on request
How it works
Invoked with /fix-today, the skill works through gather → confirm-exploitation → ATT&CK/attack-path mapping → prioritize phases, calling the Tenable MCP tools. It treats VPR as a ranking input only, confirming actual exploitation at the plugin level, and queries Tenable’s Attack Path Analysis directly to flag the assets that sit on real attack paths (including identity/privilege pivots that patching won’t fix). The output leads with what attackers are actually using, on the assets that matter most.