Skip to content

SIDE BY SIDE · FACTS ONLY

JupiterOne vs runZero: asset inventory facts side by side

SHORT ANSWER

JupiterOne describes 2 of the five approaches on the pages we read and runZero describes 3; they differ on Agent-based inventory, CMDB-centred inventory and Exposure management. On collection, JupiterOne works without new agents and runZero works without new agents. Many estates run two of these approaches together, so the question is often which pair, not which one; we do not score either.

By The Inventory Desk · CAASM Finder · Published 2026-10-11

Desk research from public vendor pages read on 27 September and 11 October 2026. Profiles follow our published method; we did not run the products.

How do their approaches compare?

JupiterOne: described for 1 of 5 approaches, with a condition for 1.CAASMConnectdescribeddescribedAGENTCollectnot in sourcesconditionEASMOutside-innot in sourcesnot in sourcesCMDBRecordnot in sourcesconditionEXPOPrioritiseconditionnot in sources
  • Top bar: JupiterOne
  • Lower bar, lighter: runZero
  • Full bar: described on the vendor's pages we read
  • Hatched bar: described with a condition (another product, a higher tier, or part of the approach)
  • Stub: not in our sources (it may exist; we did not find it)
The bars show what each vendor's own pages describe, or how your answers weigh the five approaches. They are not a measure of how well a product works.

What are the facts, side by side?

From each vendor's own pages. Differs marks rows where the recorded status or check value differs.
FactJupiterOnerunZero
Positioning

A cyber asset platform built on a security graph: more than 200 integrations feed assets and their relationships into a graph you can query in plain English or with a pre-built query library.

An asset discovery platform that runZero describes as CAASM: active scanning, passive discovery for fragile OT networks and integrations, with each asset profiled against nearly 1,000 attributes.

Deployment

SaaS with API integrations; useful coverage depends on how many integrations a team configures.

Source: JupiterOne platform · Read 27 Sep 2026

SaaS or on-premises, including air-gapped environments; no agents, authentication or appliances required.

Source: runZero platform · Read 27 Sep 2026

CAASM aggregationDescribed

200+ pre-built integrations feed a security graph of devices, users, networks, applications, data, code repositories, security controls and owners.

Source: JupiterOne platform · Read 27 Sep 2026

Described

Describes itself as CAASM: integrations with ServiceNow, CrowdStrike, Intune, AWS, Azure, Google Cloud, Entra ID, Tenable, Rapid7, Qualys and others combine with its own scan data.

Source: runZero integrations · Read 27 Sep 2026

Agent-based inventoryDiffersNot in our sources

Not described on the pages we read.

With a condition

Collects its own data by active scanning and passive discovery, without agents.

Source: runZero platform · Read 27 Sep 2026

External attack surface managementNot in our sources

Not described on the pages we read.

Not in our sources

Not described on the pages we read.

CMDB-centred inventoryDiffersNot in our sources

Not described on the pages we read.

With a condition

Enriches a ServiceNow CMDB rather than acting as one.

Source: runZero integrations · Read 27 Sep 2026

Exposure managementDiffersWith a condition

Blast radius views on the graph; Unified Vulnerability Management, announced in May 2026, deduplicates findings across tools.

Source: GlobeNewswire: JupiterOne AI system mapping and Unified Vulnerability Management · Read 27 Sep 2026

Not in our sources

Not described on the pages we read.

Servers and network devicesDiffersPartly

Networks are a listed asset class; network devices are not called out.

Source: JupiterOne platform · Read 27 Sep 2026

Matches

Active scanning of IT, OT, IoT, cloud, mobile and remote assets.

Source: runZero platform · Read 27 Sep 2026

Cloud workloadsDiffersPartly

Covered through integrations; cloud workloads are not named as a class on the platform page.

Source: JupiterOne platform · Read 27 Sep 2026

Matches

Cloud assets, with AWS, Azure and Google Cloud integrations.

Source: runZero integrations · Read 27 Sep 2026

SaaS applicationsDiffersPartly

Applications are a listed asset class.

Source: JupiterOne platform · Read 27 Sep 2026

Not in our sources
Identities as assetsDiffersMatches

Users are a listed asset class.

Source: JupiterOne platform · Read 27 Sep 2026

Partly

Entra ID is a listed integration; identities are not described as an asset class.

Source: runZero integrations · Read 27 Sep 2026

Off-network laptopsDiffersPartly

Devices are a listed asset class, through the endpoint tools you integrate.

Source: JupiterOne platform · Read 27 Sep 2026

Matches

Remote assets are a listed class.

Source: runZero platform · Read 27 Sep 2026

OT and IoT devicesDiffersNot in our sourcesMatches

Passive discovery for OT.

Source: runZero platform · Read 27 Sep 2026

Internet-facing discoveryNot in our sourcesNot in our sources
Offers its own agentDiffersNot in our sourcesNot in our sources
Works without new agentsMatches

Builds its graph from API integrations.

Source: JupiterOne platform · Read 27 Sep 2026

Matches

No agents, authentication or appliances.

Source: runZero platform · Read 27 Sep 2026

Merges records from several sourcesDiffersPartly

The graph maps relationships between assets; how duplicate records merge depends on the data each integration supplies.

Source: JupiterOne platform · Read 27 Sep 2026

Matches

Profiles each asset against nearly 1,000 attributes.

Source: runZero homepage · Read 27 Sep 2026

Feeds or updates a CMDBDiffersNot in our sourcesMatches

ServiceNow integration for CMDB enrichment.

Source: runZero integrations · Read 27 Sep 2026

Cross-source queries and reportsDiffersMatches

Graph queries in plain English, a pre-built query library and compliance insights.

Source: JupiterOne platform · Read 27 Sep 2026

Partly

AI-assisted reporting on the Platform plan.

Source: runZero pricing · Read 27 Sep 2026

Workflows, tickets or actionsDiffersPartly

Alerts are documented; write-back actions into other systems are not.

Source: JupiterOne platform · Read 27 Sep 2026

Not in our sources
Price or pricing basis publishedMatches

Annual list prices of $25,000, $50,000 and $100,000 by tier.

Source: JupiterOne pricing · Read 27 Sep 2026

Matches

Community Edition free for 100 or fewer assets; runZero Platform starts at $5,000.

Source: runZero pricing · Read 27 Sep 2026

Free tier or trialDiffersNot in our sourcesMatches

Free, full-featured 21-day trial.

Source: runZero pricing · Read 27 Sep 2026

Platform it is part ofNoneNone
Integrations

200+ pre-built security integrations.

Source: JupiterOne platform · Read 27 Sep 2026

ServiceNow, CrowdStrike, Intune, AWS, Azure, Google Cloud, Entra ID, Tenable, Rapid7, Qualys, VMware, Wiz, SentinelOne, Tanium and Splunk, plus a custom integration SDK.

Source: runZero integrations · Read 27 Sep 2026

Price

Published: Small-Market $25,000 a year; Mid-Market $50,000 for 12 months up to 200,000 data points; Enterprise $100,000 for 12 months up to 400,000 data points; custom above 1 million data points. Priced on data points and term. No free tier or trial mentioned.

Source: JupiterOne pricing · Read 27 Sep 2026

Published: Community Edition free for 100 or fewer assets with 30-day retention; runZero Platform starts at $5,000 with 3-year retention; free 21-day trial.

Source: runZero pricing · Read 27 Sep 2026

Where do they differ?

  • Agent-based inventory: JupiterOne is not in our sources; runZero describes it with a condition.
  • CMDB-centred inventory: JupiterOne is not in our sources; runZero describes it with a condition.
  • Exposure management: JupiterOne describes it with a condition; runZero is not in our sources.
  • Servers and network devices: JupiterOne partly matches; runZero matches.
  • Cloud workloads: JupiterOne partly matches; runZero matches.
  • SaaS applications: JupiterOne partly matches; runZero is not in our sources.
  • Identities as assets: JupiterOne matches; runZero partly matches.
  • Off-network laptops: JupiterOne partly matches; runZero matches.
  • OT and IoT devices: JupiterOne is not in our sources; runZero matches.
  • Merges records from several sources: JupiterOne partly matches; runZero matches.
  • Feeds or updates a CMDB: JupiterOne is not in our sources; runZero matches.
  • Cross-source queries and reports: JupiterOne matches; runZero partly matches.
  • Workflows, tickets or actions: JupiterOne partly matches; runZero is not in our sources.
  • Free tier or trial: JupiterOne is not in our sources; runZero matches.

Can they work together?

Neither vendor's pages we read name the other as an integration. That does not mean they cannot work together; ask both vendors.

Choose JupiterOne if

  • You want to ask relationship questions across assets, users and code
  • You need a published price before a sales call

Choose runZero if

  • You need to find unmanaged devices on the network, including OT, without agents
  • You want a published price and a free tier to start

Which limits should you check?

JupiterOne

  • OT and IoT devices are not listed among its asset classes.
  • Write-back actions into other systems are not documented, and no free tier or trial is mentioned.

runZero

  • SaaS applications are not covered on the pages we read.
  • No workflow or enforcement actions of its own are described; action happens in ServiceNow or other tools.
  • Ownership changed in September 2026 (Dragos acquisition); roadmap effects are not yet published.

Questions people ask

Is JupiterOne or runZero better?

Neither is scored on this site. JupiterOne describes 2 of five approaches and runZero 3 on the pages we read, and they differ on 14 recorded facts. Which fits depends on where your assets live, whether you can install agents, your CMDB and your tools; the finder checks those.

Do JupiterOne and runZero work with a CMDB?

JupiterOne: Not in our sources. runZero: Matches. ServiceNow integration for CMDB enrichment.

Do JupiterOne or runZero publish prices?

JupiterOne: Published: Small-Market $25,000 a year; Mid-Market $50,000 for 12 months up to 200,000 data points; Enterprise $100,000 for 12 months up to 400,000 data points; custom above 1 million data points. Priced on data points and term. No free tier or trial mentioned. runZero: Published: Community Edition free for 100 or fewer assets with 30-day retention; runZero Platform starts at $5,000 with 3-year retention; free 21-day trial.

Read next

One of 45 side-by-sides. All side-by-sides