runzero

runZero provides an exposure management platform that delivers visibility across IT, OT, IoT, cloud, mobile, and remote assets. The company was founded in 2018 by HD Moore, creator of Metasploit, to address the persistent problem of organizations being compromised through unknown assets and undetected exposures. The platform combines proprietary active scanning, native passive discovery, and API integrations to identify and catalog assets without requiring credentials. This agentless approach enables organizations to discover unmanaged and unknown assets across their entire attack surface. The platform detects full-spectrum exposures, prioritizes risks, and provides compliance reporting capabilities. runZero addresses multiple use cases including incident response, vulnerability management, mergers and acquisitions, and regulatory compliance. The platform supports various compliance frameworks including CSRB, DORA, NIST CSF, NIS2, NYDFS, and PCI DSS. It integrates with existing security tools to enhance network visibility, enrich asset data, and identify control gaps. The company offers a Community Edition for environments with fewer than 100 assets. In 2025, runZero expanded its capabilities to focus on exposure management, moving beyond traditional vulnerability management approaches. The platform aims to help organizations uncover exposures across their attack surface and focus on the most exploitable issues. runZero serves enterprises, consultants, and security teams across various industries including education, manufacturing, and professional services.