Website User Terms

Third-Party Software

This webpage contains links to third-party software, agents, skills, MCP servers, and playbooks (together, "Agents") hosted on external repositories (such as GitHub). These Agents are developed, owned, and maintained by third-party publishers. Tenable does not host, license, control, or modify these Agents. Your download, installation, and use of any third-party Agents are governed solely by the license agreement between you and the respective publisher. Please note that if you discover any issues with an Agent listed herein, please provide any and all feedback directly to the contributor pursuant to the Github Repository Security Advisories page set forth in the following URL (or successor location): https://docs.github.com/en/code-security/concepts/vulnerability-reporting-and-management/repository-security-advisories

Classification Levels

Agents marked as "Contributed" have undergone a baseline review to confirm adherence to structural and coding standards and to identify overtly malicious, deceptive, or unauthorized behavior. This initial review process is performed on or about the time of initial submission only and is not reperformed as industry standards evolve over time. Further, this review does not constitute a comprehensive security audit and should not be interpreted as an assurance that the component is free from defects, vulnerabilities, or unintended functionality. Tenable may include additional review standards and/or submission tiers in the future.

Disclaimer

While Tenable employs certain efforts to evaluate compatibility or facilitate community feedback, any Tenable classifications or tiers are provided strictly "AS IS" and for convenience only. Tenable makes no representations, warranties, or guarantees, express, implied, or statutory, regarding the security, safety, integrity, compliance, or reliability of any Agent listed on this page. A higher classification level does not eliminate security risks, nor does it imply a comprehensive security audit has been performed. Introducing any third-party Agent into your environment carries inherent risks, including but not limited to data exposure, system vulnerabilities, and operational disruptions. You are solely responsible for conducting your own independent security evaluation, code review, and due diligence prior to deploying any Agent. You should vet each Agent with the same rigor you would apply to any unverified software introduced into your production or development environments.