Tenable Vuln Management · Continuous Assessment available for Windows
Source Reddit Cybersecurity
Rated by Threat Radar
Data as of 30 Jun 2026, 17:21 UTC
What to do
AI-suggested
No specific mitigation is required as this is a new scanning feature rather than a vulnerability. Users should configure Continuous Assessment scanning alongside standard agent scans to ensure comprehensive vulnerability coverage. There is no indication of security issues or patches related to this feature. Follow Tenable's documentation for proper configuration and compatibility considerations, such as NIAP mode restrictions.
Discussion
Tenable Vulnerability Management introduced a Continuous Assessment scanning module for Windows agents that continuously monitors software inventory changes on hosts. This scanning method provides ongoing detection of vulnerabilities related to software version changes but does not cover malware, remote system checks, or database enumerations. It complements standard agent scans to reduce scan impact while maintaining vulnerability visibility. The feature requires a dedicated system user and is not compatible with NIAP mode. No known exploits or patches are indicated.
r/cybersecurity (opens in a new tab)u/3sysadmin30 points0 comments
Any Windows Tenable users here that have turned on the toggle for "Enable Continuous Assessment module" in their agent profile(s) and willing to provide any feedback? It was released for Windows about a month ago.
Enabling continuous assessment scanning on an agent provides a continuous monitoring solution for software inventory changes on the host the agent is installed on. Agents run an initial baseline scan to capture the full software inventory on the host and re-run these baseline scans every x amount of days, depending how you configure your agent profile. In between baseline scans, the agent monitors the software inventory on the host and reports any vulnerabilities associated with inventory changes as they occur (for example, when new software is installed or existing software is uninstalled).
Although continuous assessment scanning offers the convenience of continuous vulnerability monitoring, the vulnerability coverage differs from standard agent scanning. Continuous assessment scanning detects vulnerabilities found in the software versions installed on the host the agent resides on; it does not provide coverage for malware, remote system checks, or database enumerations.
In addition to continuous assessment scanning, Tenable recommends running a standard agent scan at your desired cadence to cover any checks that are not supported in continuous assessment scanning. Configuring a combination of continuous assessment scanning and standard agent scanning allows you to reduce your organization's scan impact while continuously monitoring your assets for software inventory vulnerabilities.