runZero vs ZEST Security
runZero
runzero.comZEST Security
zestsecurity.ioSide by side
| Figure | runZero | ZEST Security |
|---|---|---|
| Price from | Free | Free |
| Free plan | Yes | Yes |
| Free trial | Yes | Yes |
| Open source | — | — |
| Web | Yes | Yes |
| Windows | Yes | — |
| macOS | Yes | — |
| Linux | Yes | — |
| API | Yes | Yes |
| Self-hosted | Yes | — |
| Plans published | 3 | 3 |
| Spec score · Exposure Management Software | 8.5 (#3) | 7.2 (#15) |
| Compliance | runZero announced completion of an independent SOC 2 Type II audit and documents mappings to frameworks including CIS Controls, CMMC, ISO 27001, NERC-CIP, NIST CSF and PCI DSS. | ZEST states that it is SOC 2 compliant. |
| Integrations | Inbound integrations include AWS, Google Cloud, Azure, Prisma, VMware, Wiz, CrowdStrike, Microsoft 365 Defender, Intune, Miradore, SentinelOne, Tanium, MECM and Google Workspace. | The integrations page lists AWS, Azure, GCP, GitHub, GitLab, Terraform, Jira, Slack, ServiceNow, Qualys, Rapid7, Tenable, Snyk, Wiz, and other tools. |
Plans
runZero
- Community EditionFree
- Community EditionFree
- runZero PlatformPriced on request
ZEST Security
- FreeFree
- EnterprisePriced on request
- Security Teams (lean teams)Priced on request
In their own words
runZero
runZero is an attack surface and exposure management platform for inventorying IT, OT, IoT, cloud, mobile, and remote assets. It combines active scanning, passive traffic sampling, and API integrations to keep the inventory updated. Tracked information can include assets, services, screenshots, software, vulnerabilities, certificates, wireless devices, users, and groups. Reports include layer-2 topology maps and asset risk; alerts can appear in-product or arrive by email or webhook, including Slack. The service can run as hosted SaaS or on-premise using Consoles, distributed Explorers, and a command-line tool. runZero says it operates without agents, authentication, or appliances. Prebuilt integrations span cloud providers, EDRs, MDMs, vulnerability scanners, ITSM systems, and detection platforms, with an API and scripts for custom integrations. Community Edition is free for up to 100 assets, one organization, 10 recurring tasks, and 30 days of data retention. The Platform costs what you agree with the maker. Self-hosting the console requires a Platform license with runZero Care explicitly enabled.
ZEST Security
ZEST Security is an exposure management platform focused on resolving vulnerabilities across cloud, code, containers, infrastructure as code, applications, and the supply chain. It simulates fixes and mitigations to identify resolution paths intended to lower risk with less effort. Its listed AI agents cover asset mapping, root cause analysis, prioritization, impact simulation, code generation, policy and guardrail analysis, and resolution building. ZEST supports AWS, Azure, and GCP, and says it has more than 50 integrations across security tools; named integrations include GitHub, GitLab, Terraform, Jira, Slack, ServiceNow, Qualys, Rapid7, Tenable, Snyk, and Wiz. The company says deployment takes minutes through a read-only cloud account and built-in connectors, and that the platform does not directly change cloud environments. It also says each customer has a separate tenant hosted in the US or Europe, customer data is not sent to external AI services, and its in-house language model runs within its AWS infrastructure. ZEST states it is SOC 2 compliant. Pricing is on request, with a 14-day trial; support hours vary by plan.