runZero
What it is
runZero is an attack surface and exposure management platform for discovering and tracking IT, OT, IoT, cloud, mobile, and remote assets. It combines active scanning, passive traffic sampling, and API integrations to maintain an updated inventory that can include assets, services, screenshots, software, vulnerabilities, certificates, wireless devices, users, and groups. Reports include layer-2 topology maps and asset risk; alerts can appear in the product or arrive by email or webhook, including Slack. The platform is available as hosted SaaS or on-premise through Consoles, distributed Explorers, and a command-line tool. runZero says it operates without agents, authentication, or appliances. Prebuilt integrations cover cloud providers, EDRs, MDMs, vulnerability scanners, ITSM systems, and detection platforms, with an API and scripts for custom connections. Community Edition is free for up to 100 assets, with one organization and 30 days of data retention. The Platform starts at $5,000 by contract. Self-hosting the console requires a Platform license and runZero Care.
For and against
For
- Discovers IT, OT, IoT, cloud, mobile, and remote assets.
- Combines active scanning, passive sampling, and APIs.
- Operates without agents, authentication, or appliances.
- Alerts can arrive by email or webhook, including Slack.
- Free Community Edition covers up to 100 assets.
Against
- Community Edition retains data for 30 days.
- Community Edition is limited to one organization.
- Self-hosting requires Platform and runZero Care.
- Platform price is $5,000 by contract.
The verdict
runZero combines asset discovery, inventory, reporting, and alerts across a broad set of environments. Community Edition has a 100-asset limit, while self-hosting requires the Platform license and runZero Care.
Who it suits
Community Edition is intended for small businesses, individuals, and security researchers with 100 or fewer assets. The Platform is built for enterprises.
Plans and prices
Community Edition
100 recent assets · 1 organization · 10 recurring tasks · 30 days data retention
Read 15 Oct 2026 · capterra.com
runZero Platform
Contract asset limit · unlimited organizations · self-hosted console requires Platform plus runZero Care
Read 15 Oct 2026 · runzero.com
On the record
- Active scanning
- Its proprietary active scanner fingerprints operating systems, services, hardware and software and is designed for IT, OT and IoT environments.runzero.com · read 15 Oct 2026
- Agent requirements
- runZero states that it operates without agents, authentication, or appliances.runzero.com · read 30 Sep 2026
- API security
- API access supports API keys or OAuth-style API clients, configurable IP allowlists and a documented limit of 2,000 requests per five minutes per source IP.help.runzero.com · read 15 Oct 2026
- Company facts
- LinkedIn lists Austin, Texas headquarters, 51–200 employees, private ownership and a 2018 founding year.linkedin.com · read 15 Oct 2026
- Company identity
- Crunchbase lists the legal name as runZero, Inc., formerly Rumble Network Discovery, and says it was acquired by Dragos.crunchbase.com · read 15 Oct 2026
- Compliance
- runZero announced completion of an independent SOC 2 Type II audit and documents mappings to frameworks including CIS Controls, CMMC, ISO 27001, NERC-CIP, NIST CSF and PCI DSS.runzero.com · read 15 Oct 2026
- Custom extensibility
- Customers can build integrations with the Custom Integration API, custom scripts and a runZero Python SDK.help.runzero.com · read 15 Oct 2026
- Data protection
- runZero states that customer data is logically separated and encrypted at rest and in transit.runzero.freshdesk.com · read 30 Sep 2026
- Deployment model
- runZero can run as a hosted SaaS service or on-premise with Consoles, distributed Explorers, and a command-line tool.help.runzero.com · read 30 Sep 2026
- Discovery
- The platform combines high-speed active scanning, passive traffic sampling, and API integrations into a continuously updated inventory.help.runzero.com · read 30 Sep 2026
- Documentation and support
- The help center provides user-guide and API PDFs, an HTML API package, SBOM, training, release notes and human support through the console or contact form.runzero.com · read 15 Oct 2026
- Explorer deployment
- Explorers install as services on Windows, Linux, macOS and BSD, require administrator or root privileges, and can also run in containers with raw-network access.help.runzero.com · read 15 Oct 2026
- Exposure management
- The platform identifies vulnerabilities and other exposures through query logic, active scans and vulnerability or endpoint-management integrations, then recalculates findings and asset risk during task processing.help.runzero.com · read 15 Oct 2026
- Funding history
- runZero’s history page says Rumble raised $5 million in 2021 and $15 million in a 2022 Series A led by Decibel Partners.runzero.com · read 15 Oct 2026
- Integrations
- Inbound integrations include AWS, Google Cloud, Azure, Prisma, VMware, Wiz, CrowdStrike, Microsoft 365 Defender, Intune, Miradore, SentinelOne, Tanium, MECM and Google Workspace.help.runzero.com · read 15 Oct 2026
- Inventory
- The inventory tracks assets, services, screenshots, software, vulnerabilities, certificates, wireless devices, users, and groups.help.runzero.com · read 30 Sep 2026
- Licence
- The master subscription agreement says the Services are licensed rather than sold, runZero retains intellectual-property ownership, and third-party open-source components are separately attributed.runzero.com · read 15 Oct 2026
- Limit: reporting depth
- A GetApp reviewer wanted more built-in presentation of the raw data and reporting or analysis capabilities.getapp.co.uk · read 15 Oct 2026
