Support for Apple macOS Agents & Scanners

|
Updated

Fresh on the heels on Beta 3, we are excited to announce support for the Apple macOS platform. To install the Rumble macOS Agent, copy the download link from the Agents page, download a local copy, and install it using the command line:

$ curl -o agent.bin https://console.runzero.com/download/agent/[unique-id-here]/[timestamp]/runzero-agent-darwin-amd64.bin
$ chmod u+x agent.bin
$ sudo ./agent.bin

macOS Agent

For a quick rundown on how to use the command-line scanner, take a look at the scanner documentation. The macOS scanner uses /dev/bpf devices for raw socket support and requires root access to run ARP and TCP SYN scans as a result.

The macOS Agent and Scanner do not use the Apple code signing mechanism yet, but they do include embedded signatures from us. For information on how to validate the internal signature, head over to the binary verification documentation.

As always, if you have any feedback, run into any issues, or just want to say hello, drop us a line.

Written by HD Moore

HD Moore is the founder and CEO of runZero. Previously, he founded the Metasploit Project and served as the main developer of the Metasploit Framework, which is the world's most widely used penetration testing framework.

More about HD Moore
Subscribe Now

Get the latest news and expert insights delivered in your inbox.

Welcome to the club! Your subscription to our newsletter is successful.


Explore more

Webcasts
The Unreasonable Effectiveness of Inside Out Attack Surface Management
HD Moore, founder of runZero (and previously Metasploit), presents new research that will forever redefine how you approach attack surface...
Webcasts
Safeguarding OT/ICS Assets: Insights from the U.S. Department of Energy
Security experts from the National Renewable Energy Lab’s (NREL) Clean Energy Cybersecurity Accelerator™ (CECA) program join runZero to discuss...
runZero Insights
Ensure compliance with DORA’s ICT risk framework using runZero
Learn how to uncover unmanaged and unknown assets— including IT, OT, and IoT— to meet DORA's hidden risk requirements using runZero.
Talks
DEF CON 32: SSHamble: Unexpected Exposures in SSH (Video)
This talk digs deep into SSH, the lesser-known implementations, many of the surprising security issues found along the way, and how to exploit them.

See Results in Minutes

Get complete visibility into IT, OT, & IoT — without agents, credentials, or hardware.

© Copyright 2025 runZero, Inc. All Rights Reserved