AttackIQ Platform vs runZero
AttackIQ Platform
attackiq.comrunZero
runzero.comSide by side
| Figure | AttackIQ Platform | runZero |
|---|---|---|
| Price from | $4,995/mo | Free |
| Free plan | Yes | Yes |
| Free trial | Yes | Yes |
| Open source | — | — |
| Web | Yes | Yes |
| Windows | Yes | Yes |
| macOS | Yes | Yes |
| Linux | Yes | Yes |
| API | Yes | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 9 | 3 |
| Spec score · Attack Surface Management Software | 9.4 (#1) | 8.3 (#5) |
| Spec score · Exposure Management Software | 9.5 (#1) | 8.5 (#3) |
| Documentation and support | AttackIQ provides a support portal, email and phone support, private Slack support, knowledge-base articles, blueprints, bi-weekly release notes and Academy training. | The help center provides user-guide and API PDFs, an HTML API package, SBOM, training, release notes and human support through the console or contact form. |
| Integrations | Published integration materials name Microsoft 365, Palo Alto Panorama, ServiceNow, Splunk, Elastic, IBM QRadar, LogRhythm, Azure Sentinel, Okta, Qualys, Tenable and AWS-related services. | Inbound integrations include AWS, Google Cloud, Azure, Prisma, VMware, Wiz, CrowdStrike, Microsoft 365 Defender, Intune, Miradore, SentinelOne, Tanium, MECM and Google Workspace. |
| Purpose | AttackIQ describes its platform as a CTEM platform for modeling adversary behavior, prioritizing attack paths, validating controls, and measuring security improvement. | runZero is an attack surface and exposure management platform covering IT, OT, IoT, cloud, mobile, and remote assets. |
| Rating on G2 | 4.5 out of 5 from 1 review | 4.0 out of 5 from 1 review |
| Rating on Gartner Peer Insights | 4.5 out of 5 from 141 reviews | 4.6 out of 5 from 38 reviews |
| Rating on GetApp | 0 out of 5 from 0 reviews | 4.9 out of 5 from 37 reviews |
| Support | AttackIQ offers customer support through its portal, email, phone, a private Slack channel, knowledge base, and blueprints. | runZero offers documentation, API resources, release notes, a Trust Center, and human support through the console or contact form. |
| System requirements | The UK government listing specifies Chrome, Edge, Firefox and Safari support, compatibility with Linux or Unix, macOS and Windows, and a web-based interface; it says mobile use is not supported. | Explorer guidance calls for a 2.0 GHz processor, 16 GiB RAM (8 GiB for small environments) and 1 GB free storage; supported examples include Windows Server 2016+, Windows 10 build 1604+, Linux kernel 3.2+ and macOS 11+. |
| What it does | AttackIQ is a continuous threat exposure management platform that links vulnerabilities, configurations, identities and detections to adversary-validated attack paths. | runZero is an exposure-management platform that combines active scanning, passive traffic discovery and integrations to maintain a continuously updated inventory of IT, OT, IoT, cloud, mobile and remote assets. |
Plans
AttackIQ Platform
- Flex FreeFree
- FreeFree
- Flex Pay-as-you-go$300, paid once
- Pay-as-you-go$300, paid once
- Flex Monthly$4,995 a month
- Monthly$4,995 a month
- AttackIQ EnterprisePriced on request
- Flex YearlyPrice not published
- YearlyPriced on request
runZero
- Community EditionFree
- Community EditionFree
- runZero PlatformPriced on request
In their own words
AttackIQ Platform
AttackIQ Platform has no write-up on Specifiction yet; its figures are above.
runZero
runZero is an attack surface and exposure management platform for inventorying IT, OT, IoT, cloud, mobile, and remote assets. It combines active scanning, passive traffic sampling, and API integrations to keep the inventory updated. Tracked information can include assets, services, screenshots, software, vulnerabilities, certificates, wireless devices, users, and groups. Reports include layer-2 topology maps and asset risk; alerts can appear in-product or arrive by email or webhook, including Slack. The service can run as hosted SaaS or on-premise using Consoles, distributed Explorers, and a command-line tool. runZero says it operates without agents, authentication, or appliances. Prebuilt integrations span cloud providers, EDRs, MDMs, vulnerability scanners, ITSM systems, and detection platforms, with an API and scripts for custom integrations. Community Edition is free for up to 100 assets, one organization, 10 recurring tasks, and 30 days of data retention. The Platform costs what you agree with the maker. Self-hosting the console requires a Platform license with runZero Care explicitly enabled.