OOBscan is now available!

OOBscan enumerates BMCs, serial-port servers, IP-KVMs, PDUs, and other out-of-band management surfaces for protocol exposures, pre-auth information leakage, default credentials, and known-vulnerable firmware. The BMC/IPMI coverage ships enabled by default and drives the "Lights Out" Black Hat USA 2026 research.

runZero Research
Out-of-Band, Part 1: the new generation of IP KVMs and how to find them
We begin the series exploring security risks of OoB management devices like BMCs, serial console servers, and IP-enabled KVMs, and share how to...
runZero Perspective
The network you think you have isn't the one you actually have
The air gap is dead, and the illusion of segmentation is very much alive. Learn why segmentation fails, and how to actually secure your network.
Rapid Response
BMC vulnerabilities - runZero Research
runZero has identified multiple vulnerabilities across major BMC implementations that expose BMC management subsystems to unauthorized control or...
Podcasts
Risky Biz Interview: Breaking apart OT protocols
runZero's Rob King on the how and why of reverse engineering for active discovery

Experience the runZero Platform

Get complete visibility into IT, OT, & IoT — without agents, credentials, or hardware.