runZero Scanner Updates & Data Transparency

|
Updated

Data transparancy is one of the key drivers of Rumble development. We do our best to ensure that any data gathered, transmitted, or downloaded is easy to view, import, export, and reprocess. Data generated by the Rumble Agent can be downloaded and reprocessed by the runZero Scanner. Raw data from the runZero Scanner can be imported into the Rumble Console. This data is consistently formatted and almost always backwards compatible between versions.

runZero Scanner Data

runZero Scanner - version 1.3.1 #

This week we released version 1.3.1 of the runZero Scanner, which adds even more features for working with data and bringing that data back into the cloud console. The new additions include:

  • Support for the --baseline option, which accepts an assets.jsonl file from a previous run, or a JSONL export from the Rumble Console, and uses this as a baseline for normalizing and deduplicating assets. Assets matched against the baseline will carry forward the same UUID values, as well as tags and comments, in the resulting assets.jsonl of the new scan. For folks who primarily use the Scanner (and our OEM integrators), this simplifies the process of asset tracking between scans, allowing the same logic as the cloud backend to be applied to local scan data.

  • Support for the --upload option. The runZero Scanner can now upload data directly to the cloud console. If you want more flexibility for how scans are run, when they are run, and from what systems, the Scanner can now be used as a primary driver of scan data for the console. To use this option, specify an Organization API key for the --api-key parameter and optionally, set the --upload-site name to the Site to populate. If you want to send data to your own endpoint, you can override the --api-host parameter and build your own handler for the Import API.

  • Support for multiple --import options. This change allows the runZero Scanner to consolidate raw scan data (scan.rumble.gz or the raw task data from the console) into a single output. This works with the --baseline option to track and correlate assets and with the --upload option. The import option works with or without new scan parameters. If you would like to import one more previous scans into a remote site, specify each --import file, set the --api-key, and an optional --upload-site.

If you haven't had a chance to try the runZero Scanner yet, you can sign up for a free trial and then download the binary for your platform of choice from the Scanner section of the console. For additional information about the Scanner, including the command-line options, take a look at the documentation. We hope you find these additions useful and would love your feedback about what we can do to make Rumble work even better for your use case.

Happy scanning!

-HD

Written by HD Moore

HD Moore is the founder and CEO of runZero. Previously, he founded the Metasploit Project and served as the main developer of the Metasploit Framework, which is the world's most widely used penetration testing framework.

More about HD Moore
Subscribe Now

Get the latest news and expert insights delivered in your inbox.

Welcome to the club! Your subscription to our newsletter is successful.

Explore more runZero

Product
runZero 5.1 is here: Secure AI workflows, enhanced integrations, and expanded autonomous discovery
runZero 5.1 takes on the heavy lifting across five key areas, enabling you to unmask and remediate exposures with less friction and more speed.
Podcasts
Know Your Adversary with HD Moore
runZero CEO HD Moore breaks down the myth of air-gapped networks, the impact of AI on security, and why asset connectivity is everything.
runZero Perspective
BOD 26-04: A new era of prioritized remediation
A complete breakdown of CISA's BOD 26-04 directive. Learn how the shift to SSVC, risk-based KEV prioritization, and 3-day remediation impacts your...
runZero Perspective
Dawn of the apex agentic adversary
When agentic AI can weaponize exploits in seconds, visibility is everything. Stop the predator with runZero’s exposure management for the AI-attack...
Webcasts
runZero Hour, Ep. 33: Hacker Summer Camp: we survived the Vegas heat (and the bugs)
In this post-Hacker Summer Camp recap, the runZero team break down the research, tools, and trends discussed at BSides Las Vegas, Black Hat and DEF...
Podcasts
The Internet's biggest point of failure
Join Tod Beardsley on Secure & Scale as he explores the future of vulnerability management, CVE fragmentation, and how AI is changing security...
Webcasts
Mind the gaps: securing the modern IT/OT attack surface
In this webcast, HD Moore and GigaOm Analyst Chris Ray discuss key methods for hardening OT defenses and share insights from the new OT report.
Webcasts
runZero Hour, Ep. 32: AI-pocalypse now? Why the 2026 DBIR is actually good news
In this episode of runZero Hour, Tod Beardsley, Brianna Cluck, and Verizon's Alex Pinto broke down 2026 DBIR trends, AI threats, and runZero 5.0.

See Results in Minutes

See & secure your total attack surface. Even the unknowns & unmanageable.