runZero
Asset inventory and exposure management platform with agentless discovery across IT, OT, and cloud.
Technical Architecture & Overview
runZero, from the creator of Metasploit, builds a unified asset inventory through active scanning, passive traffic sampling, and integrations with existing security tools, fingerprinting devices without agents or credentials. Exposure management layers vulnerability correlation onto that inventory, and a permanent free Community Edition covers small environments up to 100 assets. It grew out of the Rumble asset discovery product.
Targeted Technical Use Cases
Establishing the unknown-asset baseline that vulnerability scanning programs actually depend on.
Evaluation & Trade-offs
Core Strengths
- +Fast unauthenticated discovery with deep fingerprinting.
- +Unifies asset data from scanners, cloud, and EDR.
- +Free Community Edition for up to 100 assets.
Trade-Offs & Limitations
- -Not itself a deep vulnerability scanner; it correlates.
- -Full value requires feeding it existing tool data.
Defensive Security Application
Complete asset visibility as the foundation for exposure and vulnerability prioritization.
Frequently Asked Questions
What is runZero?→
runZero, from the creator of Metasploit, builds a unified asset inventory through active scanning, passive traffic sampling, and integrations with existing security tools, fingerprinting devices without agents or credentials. Exposure management layers vulnerability correlation onto that inventory, and a permanent free Community Edition covers small environments up to 100 assets. It grew out of the Rumble asset discovery product.
What is runZero used for?→
Establishing the unknown-asset baseline that vulnerability scanning programs actually depend on.
What are the strengths of runZero?→
- +Fast unauthenticated discovery with deep fingerprinting.
- +Unifies asset data from scanners, cloud, and EDR.
- +Free Community Edition for up to 100 assets.
What are the limitations of runZero?→
- +Not itself a deep vulnerability scanner; it correlates.
- +Full value requires feeding it existing tool data.
How is runZero used defensively?→
Complete asset visibility as the foundation for exposure and vulnerability prioritization.