SIDE BY SIDE · FACTS ONLY
Armis vs runZero: asset inventory facts side by side
SHORT ANSWER
Armis describes 4 of the five approaches on the pages we read and runZero describes 3; they differ on CAASM aggregation and Exposure management. On collection, Armis works without new agents and runZero works without new agents. Many estates run two of these approaches together, so the question is often which pair, not which one; we do not score either.
By The Inventory Desk · CAASM Finder · Published 2026-10-11
Desk research from public vendor pages read on 27 September and 11 October 2026. Profiles follow our published method; we did not run the products.
How do their approaches compare?
- Top bar: Armis Centrix
- Lower bar, lighter: runZero
- Full bar: described on the vendor's pages we read
- Hatched bar: described with a condition (another product, a higher tier, or part of the approach)
- Stub: not in our sources (it may exist; we did not find it)
What are the facts, side by side?
| Fact | Armis Centrix | runZero |
|---|---|---|
| Positioning | Armis calls Centrix a Cyber Exposure Management Platform. It builds an inventory of IT, OT, IoT and medical devices from agentless, passive discovery and adds modules for prioritization and remediation. | An asset discovery platform that runZero describes as CAASM: active scanning, passive discovery for fragile OT networks and integrations, with each asset profiled against nearly 1,000 attributes. |
| Deployment | A cloud platform with no on-premises hardware to install or manage for the asset management module. Source: Armis Centrix for Asset Management and Security · Read 11 Oct 2026 | SaaS or on-premises, including air-gapped environments; no agents, authentication or appliances required. Source: runZero platform · Read 27 Sep 2026 |
| CAASM aggregationDiffers | With a condition Builds most of its inventory from its own agentless discovery and enriches it through more than 200 pre-built integrations. Source: Armis Centrix platform · Read 27 Sep 2026 | Described Describes itself as CAASM: integrations with ServiceNow, CrowdStrike, Intune, AWS, Azure, Google Cloud, Entra ID, Tenable, Rapid7, Qualys and others combine with its own scan data. Source: runZero integrations · Read 27 Sep 2026 |
| Agent-based inventory | With a condition Collects its own data without agents: agentless, passive discovery of managed and unmanaged devices. Source: Armis Centrix platform · Read 27 Sep 2026 | With a condition Collects its own data by active scanning and passive discovery, without agents. Source: runZero platform · Read 27 Sep 2026 |
| External attack surface management | Not in our sources Not described on the pages we read. | Not in our sources Not described on the pages we read. |
| CMDB-centred inventory | With a condition Pushes enriched asset data back to your CMDB rather than replacing it. Source: Armis Centrix for Asset Management and Security · Read 11 Oct 2026 | With a condition Enriches a ServiceNow CMDB rather than acting as one. Source: runZero integrations · Read 27 Sep 2026 |
| Exposure managementDiffers | Described Sold as a Cyber Exposure Management Platform, with VIPR-Pro Prioritization and Remediation, Vulnerability Management Detection and Response, and Early Warning modules. Source: Armis Centrix platform · Read 27 Sep 2026 | Not in our sources Not described on the pages we read. |
| Servers and network devices | Matches IT devices, managed or unmanaged, through agentless passive discovery. Source: Armis Centrix for Asset Management and Security · Read 11 Oct 2026 | Matches Active scanning of IT, OT, IoT, cloud, mobile and remote assets. Source: runZero platform · Read 27 Sep 2026 |
| Cloud workloads | Matches Cloud instances and hybrid VMs are covered. Source: Armis Centrix for Asset Management and Security · Read 11 Oct 2026 | Matches Cloud assets, with AWS, Azure and Google Cloud integrations. Source: runZero integrations · Read 27 Sep 2026 |
| SaaS applications | Not in our sources | Not in our sources |
| Identities as assetsDiffers | Not in our sources | Partly Entra ID is a listed integration; identities are not described as an asset class. Source: runZero integrations · Read 27 Sep 2026 |
| Off-network laptopsDiffers | Not in our sources | Matches Remote assets are a listed class. Source: runZero platform · Read 27 Sep 2026 |
| OT and IoT devices | Matches OT and IoT devices, and medical devices through a separate module. Source: Armis Centrix platform · Read 27 Sep 2026 | Matches Passive discovery for OT. Source: runZero platform · Read 27 Sep 2026 |
| Internet-facing discovery | Not in our sources | Not in our sources |
| Offers its own agent | Not in our sources | Not in our sources |
| Works without new agents | Matches Agentless and passive. Source: Armis Centrix platform · Read 27 Sep 2026 | Matches No agents, authentication or appliances. Source: runZero platform · Read 27 Sep 2026 |
| Merges records from several sourcesDiffers | Partly Identifies assets against a knowledgebase of over 6.5 billion assets; how records from integrations merge is not described in detail. Source: Armis Centrix platform · Read 27 Sep 2026 | Matches Profiles each asset against nearly 1,000 attributes. Source: runZero homepage · Read 27 Sep 2026 |
| Feeds or updates a CMDB | Matches Pushes enriched data back to your CMDB. Source: Armis Centrix for Asset Management and Security · Read 11 Oct 2026 | Matches ServiceNow integration for CMDB enrichment. Source: runZero integrations · Read 27 Sep 2026 |
| Cross-source queries and reportsDiffers | Not in our sources | Partly AI-assisted reporting on the Platform plan. Source: runZero pricing · Read 27 Sep 2026 |
| Workflows, tickets or actionsDiffers | Partly Prioritization and remediation sit in the separate VIPR-Pro module. Source: Armis Centrix platform · Read 27 Sep 2026 | Not in our sources |
| Price or pricing basis publishedDiffers | Partly AWS Marketplace listing: Centrix Standard minimum at $3,250 a month on a one-month contract; no price on armis.com. Source: AWS Marketplace: Armis Device Security Platform · Read 11 Oct 2026 | Matches Community Edition free for 100 or fewer assets; runZero Platform starts at $5,000. Source: runZero pricing · Read 27 Sep 2026 |
| Free tier or trialDiffers | Not in our sources | Matches Free, full-featured 21-day trial. Source: runZero pricing · Read 27 Sep 2026 |
| Platform it is part of | None | None |
| Integrations | More than 200 pre-built integrations. Source: Armis Centrix platform · Read 27 Sep 2026 | ServiceNow, CrowdStrike, Intune, AWS, Azure, Google Cloud, Entra ID, Tenable, Rapid7, Qualys, VMware, Wiz, SentinelOne, Tanium and Splunk, plus a custom integration SDK. Source: runZero integrations · Read 27 Sep 2026 |
| Price | No price on armis.com. AWS Marketplace listing: Centrix Standard minimum at $3,250 a month on a one-month contract, with private offers. Source: AWS Marketplace: Armis Device Security Platform · Read 11 Oct 2026 | Published: Community Edition free for 100 or fewer assets with 30-day retention; runZero Platform starts at $5,000 with 3-year retention; free 21-day trial. Source: runZero pricing · Read 27 Sep 2026 |
Where do they differ?
- CAASM aggregation: Armis describes it with a condition; runZero describes it.
- Exposure management: Armis describes it; runZero is not in our sources.
- Identities as assets: Armis is not in our sources; runZero partly matches.
- Off-network laptops: Armis is not in our sources; runZero matches.
- Merges records from several sources: Armis partly matches; runZero matches.
- Cross-source queries and reports: Armis is not in our sources; runZero partly matches.
- Workflows, tickets or actions: Armis partly matches; runZero is not in our sources.
- Price or pricing basis published: Armis partly matches; runZero matches.
- Free tier or trial: Armis is not in our sources; runZero matches.
Can they work together?
Neither vendor's pages we read name the other as an integration. That does not mean they cannot work together; ask both vendors.
Choose Armis if
- Your estate includes OT, IoT or medical devices that cannot take an agent
- You want device discovery and exposure modules from one vendor that is now part of ServiceNow
Choose runZero if
- You need to find unmanaged devices on the network, including OT, without agents
- You want a published price and a free tier to start
Which limits should you check?
Armis
- No price on armis.com; the only public figure is an AWS Marketplace minimum.
- SaaS applications and identities are not described as asset classes on the pages we read.
- Prioritization and remediation sit in separately named modules.
runZero
- SaaS applications are not covered on the pages we read.
- No workflow or enforcement actions of its own are described; action happens in ServiceNow or other tools.
- Ownership changed in September 2026 (Dragos acquisition); roadmap effects are not yet published.
Questions people ask
Is Armis or runZero better?
Neither is scored on this site. Armis describes 4 of five approaches and runZero 3 on the pages we read, and they differ on 9 recorded facts. Which fits depends on where your assets live, whether you can install agents, your CMDB and your tools; the finder checks those.
Do Armis and runZero work with a CMDB?
Armis: Matches. Pushes enriched data back to your CMDB. runZero: Matches. ServiceNow integration for CMDB enrichment.
Do Armis or runZero publish prices?
Armis: No price on armis.com. AWS Marketplace listing: Centrix Standard minimum at $3,250 a month on a one-month contract, with private offers. runZero: Published: Community Edition free for 100 or fewer assets with 30-day retention; runZero Platform starts at $5,000 with 3-year retention; free 21-day trial.
Read next
- Armis Centrix notes
Every recorded fact for Armis.
- runZero notes
Every recorded fact for runZero.
- Armis and Tenable
Another side-by-side.
- runZero and Axonius
Another side-by-side.
- Asset census
Compare two to five vendors in columns.
One of 45 side-by-sides. All side-by-sides