See what we're thinking about, working on, & blogging about.

Explore the latest insights, ideas, & opinions from our talented team of experts & researchers.

Building a comprehensive OT asset inventory with CISA guidance and runZero Product

This succinct resource provides a clear, actionable framework for building and maintaining a complete OT asset inventory, which is a foundation for any modern, defensible OT cybersecurity architecture.

Subscribe Now

Get our latest Rapid Responses, insights, and blogs delivered directly to your inbox.

Welcome to the club! Your subscription to our newsletter is successful.

Life at runZero
Employee Spotlight: Lauren Scott
July 1, 2025
Lauren Scott is our forward-thinking Senior Mid-Market Account Manager! She approaches every interaction as a chance to learn and listen, which is...
Rapid Response
How to find Mitsubishi Electric Air Conditioning Systems
June 27, 2025
A critical authentication bypass vulnerability has been disclosed in Mitsubishi Electric air conditioning systems.
Rapid Response
How to find AMI MegaRAC BMCs
June 27, 2025
AMI has disclosed a highly critical vulnerability in its MegaRAC SPx Baseboard Management Controller (BMC). Here's how to find affected assets with...
Rapid Response
How to find Fortinet FortiSwitch assets on your network
June 27, 2025
Fortinet has issued an advisory for its Fortinet FortiSwitch product. This vuln has been assigned CVSS score of 9.3 (extremely critical).
Rapid Response
How to find Brother printer, scanner and label maker devices on your network
June 26, 2025
Rapid7 has disclosed eight vulnerabilities in certain models and versions of Brother printer, scanner and label maker devices. Here's how to find...
runZero Research
Out-of-Band, Part 1: the new generation of IP KVMs and how to find them
June 26, 2025
We begin the series exploring security risks of OoB management devices like BMCs, serial console servers, and IP-enabled KVMs, and share how to...
Rapid Response
How to find Progress MOVEit Transfer installations on your network
June 25, 2025
Progress software disclosed two new vulnerabilities in their MOVEit Gateway product. Here's how to find affected services on your network.
Rapid Response
How to find Aviatrix Controller on your network
June 24, 2025
Mandiant recently disclosed two vulnerabilities in Aviatrix Controller. Here's how to find affected assets on your network.
runZero Research
CVE chaos, MCPs, and the fight for better vulnerability data: a recap of runZero Hour 19
June 24, 2025
On our latest episode of runZero Hour I sat down with Rob King and Jerry Gamblin, Principal Engineer at Cisco, to dig into the state of...
Rapid Response
How to find Langflow installations on your network
June 18, 2025
A vulnerability in Langflow is actively being exploited as part of the Flodrix botnet. Here's how to find potentially vulnerable installs.
runZero Perspective
NSA proposes common-sense fixes to OT security standards
June 17, 2025
NSA has recommended six common-sense security controls for OT/ICS smart controllers in NSS. Learn what they are, why they matter and how runZero...
Product
runZero loves open source: integrating Nuclei
June 11, 2025
runZero now integrates with the open source Nuclei scanner to detect default logins across IoT, OT, IT, and DevOps apps like Tomcat, Jenkins,...