Company record · security vendor
runZero
Where runZero appears on the record (41)
Every page on CISO Tribune and its network that carries this company, 41 in all.
- Compared with (38)
vs Arctic Wolf, vs Attaxion, vs Axonius, vs Bishop Fox, vs Bitsight, vs BreachLock, vs Brinqa, vs Censys, vs ConnectSecure, vs Cyble, vs CyCognito, vs Detectify, vs Escape, vs Flashpoint, vs Group-IB, vs Guardare, vs Hadrian, vs Halo Security, vs Hive Pro, vs Intruder, vs IONIX, vs JupiterOne, vs Kai, vs Lansweeper, vs NCC Group, vs NetSPI, vs Outpost24, vs Qualys, vs Rapid7, vs Reach Security, vs Recorded Future, vs Red Sift, vs ReliaQuest, vs SOCRadar, vs Tenable, vs UpGuard, vs Zafran Security, vs ZeroFox
- In the vendor directory (3)
- Cyber asset inventory (CAASM) vendors · primary category
- External attack surface management vendors · category
- External threat management vendors: who they are and how CISOs compare them · vendor guide
What the company sells
runZero is a security company that sells the runZero Platform, which provides security visibility across IT, OT, IoT, cloud, mobile and remote assets.
runZero says that agents only see what they are installed on, and that scans relying on credentials leave blind spots when credentials change or fail. runZero describes its approach as high-fidelity fingerprinting for IT, OT and IoT assets with no agents or credentials required. The company says its platform combines safe active scanning, passive discovery, API integrations and advanced fingerprinting, and that it profiles each asset against nearly 1,000 attributes.
On the discovery side, runZero says its passive discovery provides always-on coverage for fragile OT environments where active scanning is not permitted. runZero also says its active scanning uses advanced fingerprinting to extract insights into operating systems, services, hardware and installed software.
runZero says it integrates with a wide variety of tools, enhancing network visibility, enriching asset data and uncovering control gaps. The integrations pages describe a CrowdStrike integration that syncs and enriches the asset inventory, and a Microsoft Active Directory integration that syncs data about assets, users and groups from a domain controller via LDAP. Where a tool has no integration, Platform and Community users can add asset data from custom sources with the custom integrations feature.
runZero 5.1 introduces AI workflows, including natural language searches, dashboard and report creation, autonomous discovery and AI-assisted custom integrations. runZero also describes a native Dragos integration that brings deep OT context directly into the runZero platform.
runZero offers a free version of the runZero Platform, which it calls ideal for home use and environments with fewer than 100 assets. The pricing page also describes an optional self-hosted console that requires a Platform license.
runZero was founded in 2018 by HD Moore, who is known as the creator of Metasploit. runZero was once called Rumble. Rumble raised a $15 million Series A round led by Decibel Partners, and rebranded to runZero in August 2022. runZero is now a Dragos company, joining Dragos along with NetRise. runZero is headquartered in Austin, Texas, and its team is 100% remote within the USA.
runZero describes a case study in which runZero became the foundation for exposure management across 343 North Carolina Public School Units.[1][4][6][7][8][9]
- Categories
- Headquarters
- Not established from our sources
- Founded
- Not established from our sources
- CISO on record
- Not yet on our record. Send a verified source
- Website
- runzero.com
Products and services
Product names as the company writes them; what each does, in our words, from the company's own product pages. Never how well it does it.
An exposure management platform that combines active scanning, passive discovery and integrations with advanced fingerprinting.
runZero 5.1[3]
A runZero release that adds AI workflows.
runZero 5.1 introduces AI workflows, including natural language searches, dashboard and report creation, autonomous discovery and AI-assisted custom integrations. It also adds a native Dragos integration that brings deep OT context into the platform.
Competitors and alternatives
The other companies on our record filed under the same categories, category by category: first those that lead with that category and share more of runZero's categories, then alphabetical. A list from the record, never a ranking.
On cyber asset inventory (caasm), runZero competes with JupiterOne, Lansweeper, Axonius, Brinqa and Guardare.
On external attack surface management, runZero competes with Attaxion, Censys, CyCognito, Hadrian, IONIX, JupiterOne, Lansweeper, Arctic Wolf, Bishop Fox, Bitsight and 25 more.
What review platforms show
The headline rating and review count each platform showed in public search results on the day we looked, with the link. We do not read or reproduce the reviews, and a rating is the platform's, not ours.
References
Every fact above cites one of these by number. Tier A is the company itself, a regulator or a filing; tier B is trade or business press.
- [1]AboutrunZero · runzero.com · undated page, accessed September 27, 2026 · Tier A: the company, a regulator or a filing
- [2]Dragos completes netrise and runzero acquisitions following accenture dealSecurityWeek · securityweek.com · published September 21, 2026 · Tier B: trade or business press
- [3]runZero: Exposure Management for the AI-attack erarunZero · undated page, accessed October 28, 2026 · Tier A: the company, a regulator or a filing
- [4]Community Edition - runZerorunZero · undated page, accessed October 28, 2026 · Tier A: the company, a regulator or a filing
- [5]runZero Reviews 2026: Details, Pricing, & Features - G2G2 · undated page, accessed October 28, 2026 · Tier C
- [6]Exposure Management Platform - runZerorunZero · undated page, accessed November 5, 2026 · Tier A: the company, a regulator or a filing
- [7]Integrations - runZerorunZero · undated page, accessed November 5, 2026 · Tier A: the company, a regulator or a filing
- [8]Inbound integrationsrunZero · undated page, accessed November 5, 2026 · Tier A: the company, a regulator or a filing
- [9]runZero Pricing - Get Started in Minutes with a Free TrialrunZero · undated page, accessed November 5, 2026 · Tier A: the company, a regulator or a filing
- [10]About Us - runZerorunZero · undated page, accessed November 5, 2026 · Tier A: the company, a regulator or a filing
- [11]Careers - Join the team! - runZerorunZero · undated page, accessed November 5, 2026 · Tier A: the company, a regulator or a filing
Last verified November 2, 2026. Our code found the quoted passage behind each fact on its source page when the fact was recorded, and re-checks every record against its sources each month.
Recorded September 27, 2026, expanded November 5, 2026 from the references above.
Work for runZero? Suggest a correction to a fact on this page (with a source on your own domain), or claim this entry by publishing a small file on your domain.
Security leadership
CISO Tribune has not yet recorded who holds the top security seat at runZero. We add a seat only from a verified source; if you have one, send it to the desk.
Questions CISOs ask about runZero
- What does runZero sell?
- runZero sells runZero Platform and runZero 5.1. runZero Platform: An exposure management platform that combines active scanning, passive discovery and integrations with advanced fingerprinting. runZero 5.1: A runZero release that adds AI workflows.
- How does CISO Tribune file runZero?
- CISO Tribune files runZero under Cyber asset inventory (CAASM), with External attack surface management as a secondary category.
- Who owns runZero?
- runZero is owned by Dragos, which acquired it in 2026.
Related guides

CISO Reporting Structure, the Five Models and What the Filings Show
Most security chiefs report into technology leadership (64%), the rest to business leaders. The five models, their trade-offs and what 10-K filings show.

CISO News: Tracking Every Appointment and Departure in the Top Security Seat
CISO Tribune records every CISO appointment and departure as a sourced, dated entry, not a column: 466 moves to date, each with a primary source and a confirmed-or-reported label.

CISO, CSO, VP of Security, Head of Security: What the Titles Mean and What the Record Shows
A chief information security officer (CISO) owns information security. A chief security officer (CSO) usually adds physical security and investigations.