PLATFORM NOTES · RUNZERO, ACQUIRED BY DRAGOS IN SEPTEMBER 2026

runZero: CAASM and asset inventory facts (2026)

SHORT ANSWER

runZero describes itself as CAASM: active scanning and passive OT discovery with no agents or credentials, combined with integrations from Tenable, Rapid7, Qualys, CrowdStrike, Intune and ServiceNow, and each asset profiled against nearly 1,000 attributes. It publishes a $5,000 starting price, a free tier and a 21-day trial. SaaS apps are not covered, no workflow actions of its own are described, and Dragos acquired runZero in September 2026.

By The Inventory Desk · CAASM Finder · Published 2026-10-11

Desk research from public vendor pages read on 27 September and 11 October 2026. Profiles follow our published method; we did not run the products.

Visit runZero's site

Which approaches does runZero describe?

Full bar: described on the vendor's pages we read
Hatched bar: described with a condition (another product, a higher tier, or part of the approach)
Stub: not in our sources (it may exist; we did not find it)

The bars show what each vendor's own pages describe, or how your answers weigh the five approaches. They are not a measure of how well a product works.

From runZero's own pages.
Approach	Status	What the pages say	Source
CAASM aggregation	Described	Describes itself as CAASM: integrations with ServiceNow, CrowdStrike, Intune, AWS, Azure, Google Cloud, Entra ID, Tenable, Rapid7, Qualys and others combine with its own scan data.	Source: runZero integrations · Read 27 Sep 2026
Agent-based inventory	With a condition	Collects its own data by active scanning and passive discovery, without agents.	Source: runZero platform · Read 27 Sep 2026
External attack surface management	Not in our sources	Not described on the pages we read.	None
CMDB-centred inventory	With a condition	Enriches a ServiceNow CMDB rather than acting as one.	Source: runZero integrations · Read 27 Sep 2026
Exposure management	Not in our sources	Not described on the pages we read.	None

Which parts of an estate does runZero cover?

Estate coverage described on runZero's pages.
Servers and network devices	Matches Active scanning of IT, OT, IoT, cloud, mobile and remote assets. Source: runZero platform · Read 27 Sep 2026
Cloud workloads	Matches Cloud assets, with AWS, Azure and Google Cloud integrations. Source: runZero integrations · Read 27 Sep 2026
SaaS applications	Not in our sources
Identities as assets	Partly Entra ID is a listed integration; identities are not described as an asset class. Source: runZero integrations · Read 27 Sep 2026
Off-network laptops	Matches Remote assets are a listed class. Source: runZero platform · Read 27 Sep 2026
OT and IoT devices	Matches Passive discovery for OT. Source: runZero platform · Read 27 Sep 2026
Internet-facing discovery	Not in our sources

How does runZero collect and reconcile data?

Collection and reconciliation described on runZero's pages.
Deployment	SaaS or on-premises, including air-gapped environments; no agents, authentication or appliances required. Source: runZero platform · Read 27 Sep 2026
Offers its own agent	Not in our sources
Works without new agents	Matches No agents, authentication or appliances. Source: runZero platform · Read 27 Sep 2026
Merges records from several sources	Matches Profiles each asset against nearly 1,000 attributes. Source: runZero homepage · Read 27 Sep 2026
Integrations	ServiceNow, CrowdStrike, Intune, AWS, Azure, Google Cloud, Entra ID, Tenable, Rapid7, Qualys, VMware, Wiz, SentinelOne, Tanium and Splunk, plus a custom integration SDK. Source: runZero integrations · Read 27 Sep 2026

What does runZero do with the inventory?

What runZero's pages describe doing with asset data.
Feeds or updates a CMDB	Matches ServiceNow integration for CMDB enrichment. Source: runZero integrations · Read 27 Sep 2026
Cross-source queries and reports	Partly AI-assisted reporting on the Platform plan. Source: runZero pricing · Read 27 Sep 2026
Workflows, tickets or actions	Not in our sources
Platform it is part of	None
Platforms it connects to	ServiceNow: ServiceNow integration for CMDB enrichment. Source: runZero integrations · Read 27 Sep 2026 Tenable: Tenable is a listed integration. Source: runZero integrations · Read 27 Sep 2026 Rapid7: Rapid7 is a listed integration. Source: runZero integrations · Read 27 Sep 2026 Microsoft: Intune, Azure and Entra ID are listed integrations. Source: runZero integrations · Read 27 Sep 2026

What does runZero cost?

Published: Community Edition free for 100 or fewer assets with 30-day retention; runZero Platform starts at $5,000 with 3-year retention; free 21-day trial.

Source: runZero pricing · Read 27 Sep 2026

Free tier or trial Matches Free, full-featured 21-day trial.

Source: runZero pricing · Read 27 Sep 2026

Where is runZero strong, and where are its limits?

Strengths and limits come from the vendor's own pages and our sources; a limit can be something we did not find.

Strengths

Finds devices by scanning: active scanning plus passive discovery for fragile OT, with no agents or credentials.
A published starting price ($5,000), a free tier up to 100 assets and a 21-day trial.
Integrations with Tenable, Rapid7, Qualys, CrowdStrike, Intune and ServiceNow combine with its own scan data.

Limits

SaaS applications are not covered on the pages we read.
No workflow or enforcement actions of its own are described; action happens in ServiceNow or other tools.
Ownership changed in September 2026 (Dragos acquisition); roadmap effects are not yet published.

What does runZero say about itself?

No vendor figures are quoted in these notes.

What has runZero announced recently?

2026-09-21
Dragos announced it had acquired runZero and NetRise to extend its xOT security platform; runZero CEO HD Moore leads integration work while existing customers continue to be served. No deal terms were disclosed.
Source: Dragos press release: Dragos acquires NetRise and runZero · Read 27 Sep 2026
2026-09-10
runZero 5.1 lets users generate and adapt integration scripts, written in Starlark, with an AI provider of their choice; scripts run in a sandbox on runZero Explorers.
Source: runZero blog: AI-assisted custom integrations · Read 27 Sep 2026

Who should shortlist runZero?

Consider runZero if you need to find unmanaged devices on the network, including OT, without agents, or if you want a published price and a free tier to start.

In our example finder profiles, runZero is in the first group for: mixed estate, many tools, a CMDB nobody trusts and serviceNow shop with a working CMDB.

Run the finder with your answers

How does runZero compare with each other vendor?

Questions people ask

Does runZero need an agent?

Own agent: Not in our sources. Works without new agents: Matches. No agents, authentication or appliances.

Does runZero work with a CMDB?

Matches. ServiceNow integration for CMDB enrichment.

Does runZero publish its prices?