🎉 Celebrate with us on December 11 for a special anniversary episode of runZero Hour! Register Now

Achieve complete visibility & uncover exposures in minutes — across IT, OT, & IoT.

No credentials, agents, hardware, or sales call required.

Start a 21-day free trial of the runZero Platform with full functionality for up to 100,000 assets, and then convert it to our free Community Edition afterward — perfect for personal use or environments with fewer than 100 devices.

  • Discover IT, OT, IoT, and mobile assets everywhere: on-prem, in the cloud, and remote
  • Fingerprint every asset with unprecedented detail
  • Get insights into your attack surface, inside and out
  • Find risky devices you didn’t even know you had
  • Uncover unauthorized subnets and network bridges
  • Identify gaps in security controls and segmentation issues

And much more!

Background Image

See & secure everything on your networks, including risky unmanaged assets, unknown subnets, & outliers

runZero delivers the fastest, most complete security visibility possible across your assets and internal and external attack surfaces, so you can mitigate exposures before they can be compromised.

The runZero Platform is the only CAASM (cyber asset attack surface management) solution that combines powerful proprietary active scanning, native passive discovery, and API integrations. Unifying these discovery approaches makes our platform unique in its ability to discover and provide accurate, detailed fingerprinting for all IT, OT, and IoT devices across on-prem, cloud, and remote environments.

Explore Further
Background Image

Three Powerful Approaches

Our unique combination of discovery approaches delivers the best depth & accuracy.

Proprietary Active Scanning
runZero's world-class active scanning technology delivers an unparalleled depth of data, discovering everything — including unknowns. Designed to creatively extract asset details that will exceed your expectations, runZero delivers superior, in-depth fingerprinting and insights into OSs, services, hardware, and installed software.

Native Passive Discovery
Our novel approach to passive discovery is more efficient, easier to implement, and delivers results faster than other approaches. It provides always-on discovery and coverage for fragile OT environments where active scanning is not permitted, leveraging the same detailed fingerprinting techniques as active scanning.

Pre-built API Integrations + Custom SDK
Integrations for leading cloud providers, EDRs, MDMs, and vuln scanners enable you to correlate data and enrich asset details to ensure you have a single source of truth across complex environments. Egress integrations minimize siloes and seamlessly integrate insights into existing workflows. And, a custom SDK ensures you can build your own integrations regardless of what's in your tech stack.

All the bells and whistles

Community Edition Features

Our Community Edition ensures everyone can benefit from runZero regardless of their budget.

Get started
Platform
Asset limit Maximum number of assets per license. 100
SaaS console Access the runZero console in the cloud.
Organizations Organize your data by business unit, department, or end customer, with RBAC for each organization. 1
Recurring tasks Maximum number of recurring tasks for passive scans, passive discovery, and integrations. 10
Data retention Data retention period for audits or investigations (days). 30
Active Scanning
Self-hosted Explorers Deploy your own scan engines for discovering internal and external attack surfaces.
runZero-hosted Explorers Scan all your external assets with a runZero-managed Explorer.
Concurrent scans Conduct concurrent scans on the same Explorer (not available on Windows). 3
Scan range limit Maximum number of IP addresses per scan. 8,192
Scan rate limit Maximum number of packets sent from the Explorer per second. 5,000
Passive Discovery
Traffic sampling Discover your OT environment through passive traffic sampling.
runZero Integrations
Amazon Web Services Connect to AWS to merge assets into the inventory.
Azure Connect to Azure to merge virtual machines into the inventory.
Azure Active Directory Connect to Azure AD to sync assets, users, and groups in the inventory.
Censys Connect to Censys to merge externally-facing details of assets into the inventory.
CrowdStrike Connect to the CrowdStrike Falcon API to merge EDR-protected assets into the inventory.
Google Cloud Platform Connect to GCP to merge virtual machines into the inventory.
Google Workspace Connect to Google Workspace to sync assets, users, and groups in the inventory.
Microsoft 365 Defender Connect to Microsoft 365 Defender to sync assets in the inventory.
Microsoft Active Directory Connect to Active Directory via LDAP to sync assets, users, and groups in the inventory.
Microsoft Intune Connect to Microsoft Intune to sync assets in the inventory.
Miradore Connect to Miradore to merge managed mobile devices into the inventory.
Qualys Connect to Qualys to enrich your inventory with vulnerability data.
Rapid7 Connect to InsightVM or Nexpose to enrich your inventory with vulnerability data.
SentinelOne Sync and enrich your asset inventory, as well as gain visibility into the software installed on SentinelOne assets.
ServiceNow ITOM Update the CMDB with runZero data.
Shodan Connect to Shodan Search to enrich your asset inventory with external asset data.
Splunk Bring runZero data into Splunk.
Tenable Connect to Tenable.io or Nessus to enrich your inventory with vulnerability data.
VMware Connect to VMware to merge virtual machines into the inventory.
Risk Management
Risky assets Track risk and criticality of your assets.
Goal tracking Track progress towards your security goals.
Advanced reports Generate advanced security assessment reports, including vulnerabilities, outliers, asset route pathing, site comparisons, and external assets.
Automation
Export API Automate data exports.
Asset ownership Automatically assign asset owners.
Admin & Security
User limit Maximum number of users per account. Unlimited
MFA Use physical 2FA hardware keys (WebAuthn).
SSO Integrate with SAML2-compatible single sign on (SSO).
RBAC Restrict user access by organizations (role-based access control).
Bulk user management Import and update users in at scale.
Temporary groups Provide elevated privileges to groups for a limited time.
SSO group mappings Automatically provision roles based on SSO attributes.

Join the runZero Community

See what's on your network with the free version of runZero.

Get Community Edition
© Copyright 2024 runZero, Inc. All Rights Reserved