How to Mitigate the Risk from AI-Generated Apps Built by Your 'Citizen Coder' Employees
Tenable, Tuesday, October 6th, 2026
Tenable shares the governance framework it uses to let non-technical 'citizen coder' employees build AI-generated apps securely.
Tenable warns that apps built by non-technical employees with AI tools often skip QA and security review, becoming shadow AI assets with vulnerabilities, misconfigurations and weak data protection.
It argues that governance works better than blanket bans, which simply push the activity out of sight.
In Tenable's own multi-tiered framework, departmental AI leaders oversee tool approvals, manage app request queues and track ROI, while citizen coders receive mandatory security and compliance training.