Access all runZero features for 21 days, then choose the plan that works best for you
Home and small networks that have less than 256 assets
Security features like single sign-on (SSO) and multi-factor authentication (MFA) are included at no additional cost
Consultants and organizations that have medium to large sized networks, and don't need self-hosting or advanced integrations
Everything in Starter plus:
Any sized organization that needs advanced integrations or self-hosting
Our team can help you with any questions you have about enterprise pricing
Everything in Professional plus:
|High-fidelity fingerprinting Identifying asset hardware and running services with unparalleled accuracy.|
|Screenshots Capture rendered screens of HTTP/HTTPS-based services.|
|Unlimited ExplorersDeploy as many Explorers as you need.|
|Recurring scansSet up a scan to run continuously, only pausing for Explorer updates.||2||Unlimited||Unlimited|
|Command line scannerScan without the runZero Explorer, for air-gapped environments.|
|Custom integrationsConnect a custom data source to merge data from your entire IT and security stack.|
|Amazon Web ServicesConnect to AWS to merge assets into the inventory.|
|Azure Active DirectoryConnect to Azure AD to sync assets, users, and groups in the inventory.|
|CensysConnect to Censys to merge externally-facing details of assets into the inventory.|
|CrowdStrikeConnect to the CrowdStrike Falcon API to merge EDR-protected assets into the inventory.|
|Google Cloud PlatformConnect to GCP to merge virtual machines into the inventory.|
|Google WorkspaceConnect to Google Workspace to sync assets, users, and groups in the inventory.|
|Microsoft 365 DefenderConnect to Microsoft 365 Defender to sync assets in the inventory.|
|Microsoft Active DirectoryConnect to Active Directory via LDAP to sync assets, users, and groups in the inventory.|
|Microsoft AzureConnect to Azure to merge virtual machines into the inventory.|
|Microsoft IntuneConnect to Microsoft Intune to sync assets in the inventory.|
|MiradoreConnect to Miradore to merge managed mobile devices into the inventory.|
|QualysConnect to Qualys to enrich your inventory with vulnerability data.|
|Rapid7Connect to InsightVM or Nexpose to enrich your inventory with vulnerability data.|
|SentinelOneSync and enrich your asset inventory, as well as gain visibility into the software installed on SentinelOne assets.|
|ServiceNow ITOMUpdate the CMDB with runZero data.|
|ShodanConnect to Shodan Search to enrich your asset inventory with external asset data.|
|SplunkBring runZero data into Splunk.|
|TenableConnect to Tenable.io or Nessus to enrich your inventory with vulnerability data.|
|VMwareConnect to VMware to merge virtual machines into the inventory.|
|Unlimited sitesInventory all your assets, no matter how many overlapping networks you might have.|
|SaaSLower your cost of ownership by using a runZero console in the cloud.|
|OrganizationsInventory all your assets by business unit, department, or end customer.||1||Unlimited||Unlimited|
|ProjectsInventory 5x the number of assets that become read-only after 30 days and deleted after 90 days. Great for consulting projects.||Unlimited||Unlimited|
|Basic reportsExamine your asset inventory through visualizations such as switch topology.|
|Subnet discoveryDiscover massive IP ranges quickly.|
|Advanced reportsOutlier Overview Report, Specific Outlier Report, Asset Route Pathing Report, Site Comparison|
|Asset ownershipAutomatically track and assign ownership to assets|
|SearchSearch through your asset inventory with an intuitive query language.|
|Recently seen assetsSize your inventory to fit your network.||256||Pricing varies based on asset count||Pricing varies based on asset count|
|Data retentionRetain scan data for audits or investigations.||90 days||365 days||3 years|
|Rules & alertsGet notified only when you want. Kick off workflows automatically for repeatable tasks.|
|Export APIExport assets to another system.|
|Organization APIProgrammatically script runZero Explorers or import scans.|
|Account APIAutomate cross-organization management tasks.|
|Admin and security||Starter||Professional||Enterprise|
|Unlimited number of usersSupports small business and large enterprises.|
|MFASupports 2FA. Physical hardware keys are supported via the WebAuthn standard.|
|SSOSupports SAML2-compatible single sign on (SSO) implementation.|
|RBACSupports differentiated roles to suit the needs of most organizations.|
|Bulk user managementBulk user imports and updates.|
|Temporary groupsProvide elevated privileges to certain for a limited time.|
|SSO group mappingsAutomatically provision roles based on SSO attributes.|
|SLOGet help when you need it.||5 day||1 day|
|Custom legal termsTalk to our lawyers.|
Still have questions, check out our docs
Yes, you can contact email@example.com for help with the product. You can also visit our documentation.
After your trial ends, you can convert to the Starter edition or purchase the Professional or Enterprise edition.
runZero bases pricing on recently seen asset counts and optional features.
Any asset that has been “seen” in the last 30 days. If an asset originated from a runZero Explorer, “seen” means when the asset was last scanned. Otherwise, if the asset was brought in from an integration, “seen” is whatever is reported by the integration.
Users of the Professional and Enterprise editions can use 5x of their licensed recently seen assets as project assets. Unlike organizations, which are permanent entities in runZero, projects are temporary entities that remain writeable for 30 days and automatically delete after 90 days. They are a great option for short-term projects, such as consulting engagements, M&A activities, or scoping exercising for MSP customers. After you delete a project, you have the original project asset amount available for your next project.
You will need to delete assets or increase your license count before you can scan again. Contact us to expand your license.
runZero uses AWS (us-east-2) for all infrastructure. All storage is encrypted at rest using AWS-managed keys. User credentials are hashed using bcrypt and encrypted using AES-256 in GCM mode with an encryption key stored separately from the database.
runZero Enterprise edition customers can also self-host in their own environment.
runZero can scan VPN subnets from the corporate side to keep track of connected home users working remotely. It can also scan through a VPN connection, but there may be some issues:
To capture devices on home networks, we recommend using an API-based integration with your EDR or MDM solution. These integrations are available in the Enterprise edition.
No, you can deploy runZero on your own. You will need to deploy at least one Explorer in your environment to enable network and asset discovery for runZero. Some factors, like your network topology, will impact the number of explorers you need to deploy. Check out the runZero documentation.
runZero is an asset inventory solution that discovers your network and identifies your assets and services. runZero performs active discovery, requires no credentials, scales across all types of environments, and works with CMDBs, EDRs, MDMs, and cloud solutions.
runZero uses proprietary scanning technology that goes deeper than other solutions. It is safe to use in OT environments. For example, our customers use runZero in their manufacturing plants, hospitals, and in power generation.
No credit card needed
Build your asset inventory in minutesTry runZero for free Contact sales