runZero

Implementing runZero is designed to be a frictionless process, often described as 'zero-to-visibility in minutes.' The journey typically begins with a 21-day full-featured trial. To start discovery, a user downloads and installs a runZero 'Explorer' on a standard workstation or server within the network. Because the Explorer is agentless and does not require administrative credentials to scan, it can be deployed immediately without complex provisioning. The first active scan can be configured and launched within five minutes. For larger enterprise environments, the process involves deploying multiple Explorers across different network segments or VPCs and setting up API connectors for cloud providers (AWS/Azure) and EDR platforms. Most organizations achieve a comprehensive, unified asset inventory within the first 48 to 72 hours of deployment, with no impact on network performance or end-user productivity.

runZero offers extensive customization capabilities to fit specific organizational needs. At the data collection level, users can create 'Custom Fingerprints' using a simple matching syntax to identify proprietary hardware or unique software versions. The platform's 'Explorer' can be extended with 'Starlark-based' custom integrations, allowing users to write Python-like scripts to pull data from any legacy database or niche security tool. For visualization, the runZero Dashboard is fully modular; users can create custom widgets based on any inventory query, such as 'assets missing CrowdStrike' or 'exposed printers.' The API is also highly flexible, providing full CRUD (Create, Read, Update, Delete) access to all inventory data, enabling teams to build custom workflows, automate reporting, or integrate discovery results into their own internal portals.

runZero's pricing is designed to be all-inclusive for the assets licensed. There are no additional costs for the number of users, the number of scan Explorers deployed, or the frequency of scans. Basic security features like SAML SSO, MFA, and RBAC are included even in the free edition. However, there are a few areas where additional costs may apply. Organizations that choose the 'self-hosted' console option (instead of SaaS) are required to purchase the 'runZero Care' support package, which covers the additional maintenance and update support for the on-prem infrastructure. For very large enterprises or those requiring specialized assistance, 'Premium Support' packages with faster SLA response times and dedicated Customer Success Engineers are available for an additional fee. There are no hidden 'per-connector' fees for integrations.

runZero provides a comprehensive learning ecosystem to ensure users can maximize the platform's value. New customers have access to the 'runZero 101' (Basics) and 'runZero 201' (Advanced) training courses, which cover everything from deployment planning and scan optimization to complex query building and integration setup. The company maintains a deep knowledge base filled with technical documentation, 'how-to' videos, and step-by-step guides. For enterprise customers, runZero offers sessions with Customer Success Engineers who provide architectural reviews and use-case consulting. The monthly 'runZero Hour' webcasts also serve as a form of ongoing training, keeping users updated on new features and advanced research techniques. Additionally, a public 'Playbook' library offers pre-built queries and strategies for common compliance and security tasks.

Security is built into the core of runZero's architecture. The 'Explorer' scan engine is written in Go, providing inherent memory safety, and does not require administrative privileges on the host machine. All Explorer binaries are digitally signed and verified by the Console before execution. Communication between Explorers and the Console is encrypted via TLS, with no inbound ports required—the Explorer initiates an outbound connection to the Console. For the SaaS offering, data is encrypted at rest and in transit. runZero does not store network credentials or passwords within its platform, as its primary discovery method is unauthenticated. For highly sensitive environments, the self-hosted option allows organizations to keep all asset data within their own perimeter. Regular third-party penetration tests are conducted, and results are available to enterprise customers upon request.

runZero follows a continuous release cadence, with updates to the SaaS console and fingerprinting engine happening several times a month. One of the platform's standout features is its automated Explorer update process: when the Console is updated, it automatically pushes the new version to all linked Explorers. This ensures that the latest discovery techniques and fingerprints are always in use without manual intervention from the IT team. The update process includes integrity checks and signature verification to ensure the new binary is authentic. Major version releases (like the recent 4.0) are accompanied by detailed release notes and often a 'What's New' webinar. For self-hosted customers, updates are provided through a streamlined installer that handles the database and application upgrades in a single process.

runZero maintains a clear and customer-centric data ownership policy. All asset inventory data collected by the platform remains the exclusive property of the customer. runZero does not sell or share this data with third parties. Customers can export their entire data set at any time via the web interface or the robust Export API in multiple formats, including JSON, CSV, and XML. There is no 'data lock-in'; if a customer decides to cancel their subscription, they can easily take their inventory history with them. For SaaS customers, data retention periods are configurable, with the Platform edition supporting up to three years of historical data. In the case of service termination, runZero follows strict data deletion protocols to ensure all customer information is purged from their systems within a specified timeframe.

The runZero architecture is built for extreme scalability, currently managing millions of assets for global enterprises. Because the 'Explorers' are lightweight and perform discovery locally, the platform avoids the network bottlenecks common with centralized scanners. Organizations can deploy hundreds of Explorers across thousands of remote sites without performance degradation. The central Console (whether SaaS or self-hosted) is designed to ingest and process large volumes of data concurrently, supporting up to 100,000 assets per scan task. For global organizations, the 'Organization' and 'Site' structures allow for logical segmentation of data, making it manageable even at a massive scale. The platform also includes 'Explorer Groups' for load balancing and high availability, ensuring that discovery remains continuous even in the event of a single node failure.

runZero typically operates on an annual subscription basis, with contracts billed based on the 'Recently Seen Asset' count. Standard terms include a 30-day notice period for renewals or cancellations. The 'runZero Platform' agreement covers service level commitments (SLAs) for the SaaS console, ensuring high availability and support response times. It also includes comprehensive data processing addendums (DPA) to satisfy legal requirements for privacy. For larger enterprises, runZero supports custom legal terms and 'Care' packages for those needing self-hosted installations. The 'Community Edition' is governed by a simpler set of online terms designed for individual and non-commercial use. All paid plans include a standard level of support, with 'Premium' options available for those requiring faster, 24/7 business-day response times and dedicated account management.

runZero is an essential tool for meeting the asset inventory requirements of major compliance frameworks like SOC 2, ISO 27001, HIPAA, GDPR, and PCI DSS. The company itself is SOC 2 Type II compliant, demonstrating a rigorous commitment to the security, availability, and confidentiality of its service. For its customers, runZero provides pre-built 'Compliance Reports' and dashboards that map discovered assets directly to control requirements, such as 'CIS Control 1: Inventory and Control of Enterprise Assets.' The platform's ability to maintain a historical audit trail of every asset ever seen on the network is crucial for regulatory audits. Additionally, runZero helps European customers comply with GDPR through localized data hosting in Germany and features that identify systems containing potentially sensitive personal information based on their service fingerprints.