FullHunt vs runZero
FullHunt
fullhunt.iorunZero
runzero.comSide by side
| Figure | FullHunt | runZero |
|---|---|---|
| Price from | $149/mo | Free |
| Free plan | Yes | Yes |
| Free trial | Yes | Yes |
| Open source | — | — |
| Web | Yes | Yes |
| Windows | — | Yes |
| macOS | — | Yes |
| Linux | — | Yes |
| API | Yes | Yes |
| Self-hosted | — | Yes |
| Plans published | 7 | 3 |
| Spec score · Attack Surface Management Software | 8.8 (#3) | 8.3 (#5) |
| Integrations | Listed integrations include Splunk, Sumo Logic, Cortex XSOAR, FortiSOAR, Mindflow, Jira, ServiceNow, Slack, Microsoft Teams and custom webhooks. | Inbound integrations include AWS, Google Cloud, Azure, Prisma, VMware, Wiz, CrowdStrike, Microsoft 365 Defender, Intune, Miradore, SentinelOne, Tanium, MECM and Google Workspace. |
| Licence | The service terms state that FullHunt owns the platform, scanning methods, algorithms and aggregated intelligence, granting users a limited internal-use licence unless a commercial or OEM agreement applies. | The master subscription agreement says the Services are licensed rather than sold, runZero retains intellectual-property ownership, and third-party open-source components are separately attributed. |
| Rating on Gartner Peer Insights | 3.0 out of 5 from 1 review | 4.6 out of 5 from 38 reviews |
| Security controls | FullHunt says it encrypts personal data in transit and at rest, uses access controls and handles applicable GDPR requests. | runZero states that customer data is logically separated, encrypted in transit and at rest, audited through console events, and protected by hardware MFA for privileged staff. |
| Support | FullHunt states that its support team is available around the clock; Enterprise deployments include a dedicated team with 24/7 support. | runZero offers documentation, API resources, release notes, a Trust Center, and human support through the console or contact form. |
| What it does | FullHunt provides external attack-surface management and internet-intelligence APIs for discovering, monitoring and assessing internet-facing assets. | runZero is an exposure-management platform that combines active scanning, passive traffic discovery and integrations to maintain a continuously updated inventory of IT, OT, IoT, cloud, mobile and remote assets. |
Plans
FullHunt
- FreeFree
- Builder$149 a month
- Scale$1,499 a month
- OEM Starter$5,500 a month
- OEM Growth$9,600 a month
- FullHunt Enterprise$19,000 a year
- OEM EnterprisePrice not published
runZero
- Community EditionFree
- Community EditionFree
- runZero PlatformPriced on request
In their own words
FullHunt
FullHunt provides internet intelligence for security products and external attack surface monitoring, through web access, APIs, data feeds, and MCP. It discovers internet-facing domains, subdomains, IPs, cloud services, ports, technologies, and certificates. Continuous monitoring follows new assets, service and certificate changes, configuration drift, and exposure alerts. Its vulnerability intelligence links CVEs to observed assets with exploit context, EPSS scores, and CISA KEV status. Enterprise workflows also cover compromised credentials, infostealer activity, typosquatting, and phishing infrastructure tied to monitored organizations. Listed integrations include security platforms, ticketing systems, and collaboration tools such as Splunk, Jira, Slack, and Microsoft Teams. Developers can use REST APIs, a Python SDK, and MCP tools; API requests use credits that reset monthly. Plans range from a free option with 10 credits per month to paid plans from $149 a month. A 14-day trial is listed for qualified Enterprise organizations. Users must have lawful authority to monitor submitted assets and use the service for legitimate cybersecurity purposes.
runZero
runZero is an attack surface and exposure management platform for inventorying IT, OT, IoT, cloud, mobile, and remote assets. It combines active scanning, passive traffic sampling, and API integrations to keep the inventory updated. Tracked information can include assets, services, screenshots, software, vulnerabilities, certificates, wireless devices, users, and groups. Reports include layer-2 topology maps and asset risk; alerts can appear in-product or arrive by email or webhook, including Slack. The service can run as hosted SaaS or on-premise using Consoles, distributed Explorers, and a command-line tool. runZero says it operates without agents, authentication, or appliances. Prebuilt integrations span cloud providers, EDRs, MDMs, vulnerability scanners, ITSM systems, and detection platforms, with an API and scripts for custom integrations. Community Edition is free for up to 100 assets, one organization, 10 recurring tasks, and 30 days of data retention. The Platform costs what you agree with the maker. Self-hosting the console requires a Platform license with runZero Care explicitly enabled.