runZero
runZero, from the creator of Metasploit, builds a unified asset inventory through active scanning, passive discovery, and integrations with existing security tools, fingerprinting devices without agents or credentials. It has a free tier but no downloadable free edition. It is delivered as a web service.
Updated
- Pricing
- Freemium
- License
- Proprietary
- Platforms
- Web
- Category
- Vulnerability Scanning
What Is runZero?
runZero, from the creator of Metasploit, builds a unified asset inventory through active scanning, passive discovery, and integrations with existing security tools, fingerprinting devices without agents or credentials. Exposure management layers vulnerability correlation onto that inventory, and a free Community Edition covers home use and environments with fewer than 100 assets. It was founded in 2018 as Rumble Network Discovery and rebranded in 2022, and Dragos acquired runZero in September 2026.
Use Cases
Establishing the unknown-asset baseline that vulnerability scanning programs actually depend on.
Strengths and Limitations
Strengths
- +Discovery and fingerprinting without agents or credentials.
- +Unifies asset data from scanners, cloud, and EDR.
- +Free Community Edition for environments with fewer than 100 assets.
Limitations
- -Merges vulnerability data from separate vulnerability management platforms through integrations rather than replacing them.
- -Context from EDR, MDM, CMDB, and cloud sources requires configuring separate integrations.
Defensive Use
Complete asset visibility as the foundation for exposure and vulnerability prioritization.
runZero Alternatives
3 tools| Tool | License | Platforms | Pricing |
|---|---|---|---|
| Nessus Tenable vulnerability scanner with more than 300,000 plugins; time-limited free Essentials license. | Proprietary | Linux, macOS, Windows, Web | Commercial |
| Nmap Network discovery scanner and port auditor for discovering live hosts, open ports, running services, and OS fingerprints. | NPSL-0.95 (Nmap Public Source License, not OSI-approved) | Linux, macOS, Windows | Free / Commercial |
| Shodan Search engine for Internet-connected devices that indexes service banners, open ports, and exposed assets across public IP space. | Proprietary (service); MIT (Python client) | Web, Linux, macOS, Windows | Freemium |
Frequently Asked Questions
What is runZero?→
runZero, from the creator of Metasploit, builds a unified asset inventory through active scanning, passive discovery, and integrations with existing security tools, fingerprinting devices without agents or credentials. Exposure management layers vulnerability correlation onto that inventory, and a free Community Edition covers home use and environments with fewer than 100 assets. It was founded in 2018 as Rumble Network Discovery and rebranded in 2022, and Dragos acquired runZero in September 2026.
What is runZero used for?→
Establishing the unknown-asset baseline that vulnerability scanning programs actually depend on.
What are the strengths of runZero?→
- +Discovery and fingerprinting without agents or credentials.
- +Unifies asset data from scanners, cloud, and EDR.
- +Free Community Edition for environments with fewer than 100 assets.
What are the limitations of runZero?→
- +Merges vulnerability data from separate vulnerability management platforms through integrations rather than replacing them.
- +Context from EDR, MDM, CMDB, and cloud sources requires configuring separate integrations.
How is runZero used defensively?→
Complete asset visibility as the foundation for exposure and vulnerability prioritization.