runZero
Asset inventory and exposure management platform with agentless discovery across IT, OT, and cloud.
Technical Architecture & Overview
runZero, from the creator of Metasploit, builds a unified asset inventory through active scanning, passive discovery, and integrations with existing security tools, fingerprinting devices without agents or credentials. Exposure management layers vulnerability correlation onto that inventory, and a free Community Edition covers home use and environments with fewer than 100 assets. It was founded in 2018 as Rumble Network Discovery and rebranded in 2022, and Dragos acquired runZero in September 2026.
Targeted Technical Use Cases
Establishing the unknown-asset baseline that vulnerability scanning programs actually depend on.
Evaluation & Trade-offs
Core Strengths
- +Discovery and fingerprinting without agents or credentials.
- +Unifies asset data from scanners, cloud, and EDR.
- +Free Community Edition for environments with fewer than 100 assets.
Trade-Offs & Limitations
- -Merges vulnerability data from separate vulnerability management platforms through integrations rather than replacing them.
- -Context from EDR, MDM, CMDB, and cloud sources requires configuring separate integrations.
Defensive Security Application
Complete asset visibility as the foundation for exposure and vulnerability prioritization.
Frequently Asked Questions
What is runZero?→
runZero, from the creator of Metasploit, builds a unified asset inventory through active scanning, passive discovery, and integrations with existing security tools, fingerprinting devices without agents or credentials. Exposure management layers vulnerability correlation onto that inventory, and a free Community Edition covers home use and environments with fewer than 100 assets. It was founded in 2018 as Rumble Network Discovery and rebranded in 2022, and Dragos acquired runZero in September 2026.
What is runZero used for?→
Establishing the unknown-asset baseline that vulnerability scanning programs actually depend on.
What are the strengths of runZero?→
- +Discovery and fingerprinting without agents or credentials.
- +Unifies asset data from scanners, cloud, and EDR.
- +Free Community Edition for environments with fewer than 100 assets.
What are the limitations of runZero?→
- +Merges vulnerability data from separate vulnerability management platforms through integrations rather than replacing them.
- +Context from EDR, MDM, CMDB, and cloud sources requires configuring separate integrations.
How is runZero used defensively?→
Complete asset visibility as the foundation for exposure and vulnerability prioritization.