runZero is now a Dragos company. Read the press release →

runZero CAASM

We're all in this together. That's why we offer both free & licensed versions of runZero.

Background Image

Over the last few years, runZero has transformed from an innovative asset inventory and network discovery product to a total attack surface and exposure management solution. This evolution has been made possible by the invaluable feedback and support from our customers and community.

We believe in the power of our community and that everyone deserves great technology to improve their security, so we provide both free and licensed versions of runZero and hope that, in doing so, we have a positive impact for organizations of all sizes.

Start your runZero journey with a free, full-featured 21-day trial, then choose to continue with our free Community Edition or upgrade to the runZero Platform!

Try runZero for Free

runZero Versions

Compare Community Edition & runZero Platform

Community Edition

Free

Designed for small businesses, individuals, and security researchers who have 100 or fewer assets.

runZero Platform

Starts at $5,000

Built for enterprises of all sizes who need powerful exposure management features and complete visibility across IT, OT, IoT, cloud, mobile, and remote assets.
Platform Description Community Platform
Asset limit Maximum number of assets per license. 100 Contract
SaaS console Lower your cost of ownership by using a runZero console in the cloud.
Self-hosted console Self-host your own runZero console (optional). This requires a Platform license with the additional runZero Care support package, which must be explicitly enabled for your account. For more details, please reach out to a runZero sales representative. N/A
Organizations Organize your data by business unit, department, or end customer, with RBAC for each organization. 1 Unlimited
Projects Set up Projects for short-term assessments. Data becomes read-only after 30 days (90-day data retention). Project asset limit is 5x general asset limit (in addition to organization asset limit). N/A Unlimited
Recurring tasks Maximum number of recurring tasks for passive scans, passive discovery, and integrations. 10 Unlimited
Data retention Data retention period for audits or investigations. 30 days 3 years
AI-assisted custom reports Translate natural-language queries into visual dashboards, compliance reports, and tailored security insights.
Active Scanning Description Community Platform
Self-hosted Explorers Deploy your own scan engines for discovering internal and external attack surfaces.
runZero-hosted Explorers Scan all your external assets with a runZero-managed Explorer.
Concurrent scans Conduct concurrent scans on the same Explorer (not available on Windows). 3 15
Scan range limit Maximum number of IP addresses per scan. 8,192 Unlimited
Scan rate limit Maximum number of packets sent from the Explorer per second. 5,000 Unlimited
Passive Discovery Description Community Platform
Traffic sampling Discover your OT environment through passive network sniffing.
runZero Integrations Community Platform
AI-assisted custom integrations Leverage user-selected LLMs and sandboxed execution environments to rapidly translate natural-language prompts into secure, maintainable data connectors. This capability enables security teams to seamlessly ingest bespoke, legacy, or niche asset data into runZero without custom software engineering overhead.
Inbound integrations runZero integrates with several sources of asset data so you can enrich your asset inventory and find assets and subnets that aren’t effectively managed or protected.
Outbound integrations Beyond pulling in data from your other IT and security tools, the runZero platform has egress integrations with several platforms. Through product APIs and export/import, runZero can add asset context to those tools.
Discovery Description Community Platform
External Attack Surface Discover and monitor public-facing assets, services, and risks across your external perimeter, including cloud-hosted infrastructure and remote access points.
Internal Attack Surface Gain comprehensive visibility into internal assets, services, and security risks within your on-prem, hybrid, and cloud environments.
IT Services and Assets Identify, track, and manage all IT assets and services, including endpoints, servers, cloud instances, mobile devices, and network infrastructure.
OT Services and Assets Safely discover and map OT environments, identifying industrial control systems (ICS), SCADA devices, PLCs, and building automation systems.
IoT Services and Assets Detect, classify, and assess IoT devices and services, uncovering security gaps across smart devices, access control systems, cameras, and cyber-physical systems.
Shadow IT Uncover unsanctioned, unmanaged, or rogue IT assets and services, including unauthorized cloud instances, unapproved SaaS applications, personal file-sharing platforms, and hidden Wi-Fi access points.
Unknown and Unmanageable Devices Identify and track unknown, rogue, or unmanageable devices that evade traditional security tools.
Risk Management Description Community Platform
Attack Path Mapping Visualize how attackers can move laterally across your IT and OT networks, exposing hidden segmentation failures without requiring endpoint agents or credentials.
Risk Findings Dashboards Identify and track specific risks, aggregating affected assets, services, and trends over time.
Contextual Risk Scoring Prioritize threats with risk scoring based on exploitability, exposure, and asset attributes like location, connectivity, and business criticality.
Easy Query Builder Easily search, filter, and customize asset queries with intuitive controls and prebuilt options—all without the need for rescanning.
Advanced Reports Generate advanced security assessment reports, including vulnerabilities, outliers, asset route pathing, site comparisons, and external assets.
Goal Building Set objectives and track progress towards your security goals.
Automation Description Community Platform
Export API Automate data exports.
Organization API Automate discovery tasks. N/A
Account API Automate management tasks on an account level. N/A
Custom integration SDK Connect a custom data source to merge data from your entire IT and security stack.
Command-line scanner Use command-line scanners for airgapped networks, manual scanning, or scripted scans. N/A
Asset ownership Automatically assign asset owners.
Rules & alerts Notify team members and automate workflows based on queries and other triggers. N/A
Admin & Security Description Community Platform
User limit Maximum number of users per account. Unlimited Unlimited
MFA Use physical 2FA hardware keys (WebAuthn).
SSO Integrate with SAML2-compatible single sign on (SSO).
RBAC Restrict user access by organizations (role-based access control).
Bulk user management Import and update users at scale.
Temporary groups Provide elevated privileges to groups for a limited time.
SSO group mappings Automatically provision roles based on SSO attributes.

See Results in Minutes

See & secure your total attack surface. Even the unknowns & unmanageable.

Try runZero for Free
runZero CAASM
© Copyright 2026 runZero, Inc. All Rights Reserved