Third Party Index

Snapshot 48127

Document
Security page
URL
https://www.runzero.com/legal/security/
Fetched
HTTP status
200
Content type
text/html
Fetch mode
static
Size
262129 bytes
SHA-256 (raw)
d661a94bc34c93a1c59620781ad26296b95b3e824e21d0988bbeced3430f6354
SHA-256 (normalized text)
f37090801c272b1f024eb6d6637d0a0f8d2eb6948dfaa00818e52c65547b65df

Normalized text

Scripts and page chrome removed; this is what change detection compares.

runZero is now a Dragos company. Read the press release →
runZero is now a Dragos company. Read the press release →
See what others miss. Secure what others can't.
Exposure Management Platform
Complete security visibility across IT, OT, IoT, cloud, mobile, and remote assets.
Total Attack Surface Visibility
Full-Spectrum Exposure Detection
Risk Prioritization & Insights
Compliance, Reporting, & KPIs
Fast Deployment & Scalability
Asset Fingerprinting & Contextualization
runZero employs a multi-faceted approach to perform high-fidelity fingerprinting for IT, OT, and IoT assets – no agents or credentials required.
Integrations
runZero seamlessly integrates with a wide variety of tools, enhancing network visibility, enriching asset data, and uncovering control gaps.
Community Edition
Our completely free version of the runZero Platform is ideal for home use and environments with fewer than 100 assets.
Secure AI workflows on your terms. Accelerate defense with runZero 5.1
With our latest update, runZero 5.1 introduces AI workflows — including natural language searches, dashboard and report creation, autonomous discovery, and AI-assisted custom integrations. Plus, our native Dragos integration brings deep OT context directly into the runZero platform.
Read the Blog
Security begins with visibility — and ends with control.
Solutions
Gain visibility, control the unknowns, and ensure compliance with confidence.
Incident Response
Unmanaged & Unknowns
Vulnerability Management
Mergers & Acquisitions
Compliance & Insurance
Regulatory Compliance
Ensure compliance and stay resilient against evolving cyber threats.
CSRB
DORA
NIST CSF & 800-171
NIS2
NYDFS
PCI DSS
runZero Hour: Dragos and the Research Cinematic Universe
Join us on October 21 for runZero Hour! We'll talk about what will get released by our expanded team in the coming year, what each company brings to the table with our collective OT, IT, and firmware expertise, and most importantly, what this all means for our shared customers, partners, and YOU!
Register Now
Explore the latest in modern exposure management.
Resource Center
Dive into a treasure trove of resources to expand your exposure management knowledge.
Reports
Webcasts
Solution Briefs
runZero Research
Explore the world of exposure management through the runZero lens.
Research Blogs
Rapid Responses
runZero Hour
runZero Blog
See what's happening at runZero and read up on the latest ideas, opinions, and articles from our experts and researchers.
Support Resources
Everything you need to maximize your experience with the runZero Platform.
Documentation
REST API
Open Source
CxO Brief: Exposure Management for the Modern Attack Surface
GigaOm’s CxO Decision Brief highlights how runZero eliminates blind spots across converged IT, OT, and IoT environments. By uncovering unmanaged assets, EOL systems, and attack paths before exploitation occurs, runZero enables security leaders to transition from reactive patching to proactive exposure management.
Read the Report
See why the brands you know & love trust runZero.
Our Customers
Our customers are everything. We're super proud to be trusted by leading organizations around the globe to help them improve their security.
Case Studies
See how runZero has empowered security teams to take control of their networks, uncover their unknowns, and save significant time and money.
North Carolina K-12
Topcon
Capgemini
Presidio
York University
Testimonials
Read reviews of the runZero Platform and see how teams have improved their security with our technology.
Case Study: How runZero established North Carolina’s K–12 exposure management program
Learn how runZero became the foundation for exposure management across 343 North Carolina Public School Units.
Read the Case Study
We're on a mission to create new solutions to solve persistent problems. Let's shake things up.
About Us
Wondering who the heck are these people? Meet the team and get the story behind runZero... once upon a time called Rumble.
Events
Track down runZero Yetis in the wild! Join us in-person or virtually at one of our upcoming events.
Investors
Meet the cybersecurity investors, trailblazers, and innovators who help us navigate our journey and the evolving security landscape.
Newsroom
Read the latest articles, announcements, and press releases from runZero.
Careers
Want to join our forces? We're looking for bright minds and passionate souls who want to write the next chapter in exposure management.
Analyst Report: GigaOm Radar for Operational Technology Security
Evaluating security solutions tailored for industrial settings, this report highlights purpose-built capabilities that can be safely deployed in fragile OT environments without disrupting operations. Within this landscape, runZero is recognized as a Challenger and Fast Mover in the Innovation/Platform Play quadrant.
Read the Full Report
Believe customers always come first? Into innovation & the unconventional? We might be great partners.
Infinity Partner Program
See how we can work together to provide best-in-class security solutions and outcomes for our joint customers.
Partner Directory
Explore our directory of trusted (and awesome) partners.
Partner Sign In
Sign in to our Infinity Partner Portal.
Join our Infinity Partner Program
Designed with a partner-first mindset, the runZero Infinity Partner Program offers incredibly valuable resources, relationships, and rewards to partners who choose to grow their business with us.
Become a runZero Partner
Report a security issue #
If you have identified a security issue in the runZero platform or related infrastructure (including assets under the rumble.run domain), please get in touch by email via [email protected]. To encrypt the contents of your message, please use PGP Key ID 60EBAAE9AEF08C6D.
SOC 2 Type II certification #
runZero achieved SOC 2 compliance with the completion of a Type 2 audit. This rigorous, independent assessment of its internal security controls validates its dedication and adherence to the highest standards for security. If you would like to request a copy of our latest report, or copies of any of our other security documentation, please visit the runZero Trust Center.
TLS encryption #
runZero encrypts all data in-transit between the runZero Explorer and the cloud infrastructure using TLS v1.2 or later*. You can find the SSL Labs report cards for critical services below:
runZero Console
runZero Website
Legacy domain names:
Rumble Console
Rumble Website
* Note that while TLS 1.3 is considered stronger than TLS 1.2, it is not backwards compatible with all clients, and our TLS 1.2 configuration uses similarly strong ciphers to TLS 1.3. If you would like to force TLS 1.3 for runZero, you can do so in your client configuration (browser, Explorer, API clients), and on the server-side when self-hosting.
Binary verification #
runZero uses an Extended Validation Authenticode certificate associated with Rumble, Inc (our previous name) to sign all Windows executables. All runZero executables also contain an embedded ED25519 signature, which can be verified with the runZero Verifier.
Multi-factor authentication #
runZero supports multi-factor authentication (MFA) for the runZero Console through FIDO2-compatible (WebAuthn) security tokens, such as the Yubico YubiKey and the Google Titan key. This support extends to Windows Hello and mobile platform mechanisms such as fingerprint and face unlock.
Single sign-on #
runZero supports single sign-on (SSO) via SAML/2.0 and has been tested with Okta, Auth0, GSuite, Office365, and Shibboleth. SSO is available to all customers at no additional cost.
Data location & encryption #
runZero uses AWS (us-east-2 & eu-central-1) for all infrastructure. All storage is encrypted at rest using AWS-managed keys. User credentials are hashed using argon2id and encrypted using AES-256 in GCM mode with an encryption key stored separately from the database.
Application security #
runZero has been developed with security best practices in mind. For additional details about the platform architecture and to see the executive summary of our last penetration test, please contact us by email at [email protected].
Disclosure policy #
For vulnerabilities identified by runZero, please see our vulnerability disclosure policy.
Anything else? #
Reach our security team by email at [email protected]. If you are looking for additional documentation or copies of our current certifications or security assessments, please visit the runZero Trust Center.
© Copyright 2026 runZero, Inc. All Rights Reserved