runZero

Asset Discovery has never been easier

Kommentare: Excellent overall.

Vorteile:

Flexibility of deployment, the scanners can run on any platform or hardware. The speed of the scans and the accuracy of results are stupendous.

Nachteile:

There are several options for scan frequency but I would like something between daily weekly like every 8 hours or every three days. I am achieving this with multiple scan schedules. It is a minor complaint.

Gain complete visibility and control of your network

Kommentare: Outstanding. Professional from the start. Does what it says on the tin. Hands-free updates. Complete network, system, and service visibility.

Vorteile:

Incredibly easy to acquire, install, and (securely) update. I have the agent installed on multiple nodes and had zero issues with any of them (even macOS Catalina systems with the new, invasive permissions structure). Via the web UX I have quick access to reports and current status. The data download makes it super easy to use in analytics environments. The service is constantly updated with new features and signatures, making it straightforward to identify new devices and services as they emerge. The alerting capability helped identify an IoT device that "went rogue" and installed a telnet service port without permission (that device is now in the town electronics recycling facility). It's one of the few IT and IT security products and services that did what it said on the tin Day 1 and continues to do so without any intervention on my part.

Nachteile:

It's honestly difficult to find a serious flaw. Agent releases are paced and come with great features and bug fixes. I think, perhaps, one improvement could be to provide "prompts" or "coaxes" in the UX to help novice users (and those who do not have a steeped background in IT or security) identify ways they could use the service to better manage their infrastructure, identify issues, and be proactive.

Visibility to the blind spots

Vorteile:

Able to view the assets in the organisation

Nachteile:

Enumeration of applications of the discovered assets

Assurance for the external attack surface

Kommentare: We are using Rumble to provide an independent check of the services visible on our exposed external network surface, with both fast and slow/comprehensive scans. This provides assurance that network-level and server-level controls are configured appropriately.

Vorteile:

It was easy to use Rumble for the targeted job of asset discovery, without having to consider the impact of most products' actual scope of vulnerability detection. By having to provide our own agent for the scanning endpoint, we remain in complete control of the source of the scans, and can integrate it into existing firewall and other protective technologies easily.

Nachteile:

Analysing the changes over time isn't very easy in the current system, it highlights changes between current and last scan just fine but other periods are much more difficult. There aren't a lot of facilities for controlling the impact or utilisation of the agent on the scanning machine; I'd like to be able to judge just 'how fast' we can effectively scan from within Rumble's management.

Rumble is the way

Kommentare: I can always see the inventory and when things are not being used. I can save on licensing and resources if the tools or software are not being turned on at all.

Vorteile:

I like the simple interface and the speed with witch it discovers items on the network.

Nachteile:

There could be some functionality added to allow easier interacting with the discovered devices. One click remote desktop or some way to add tools like NMap to a menu to further explore devices.

An accurate way to discover your attack surface

Kommentare: Rapid discovery of assets across large distributed networks.

Vorteile:

Out of the box discovery of tons of different protocols.

Nachteile:

Nothing so far, I definitely want the ability to run it self hosted at some point

An Exceptional Asset Discovery Tool

Vorteile:

Runzero is an exceptional asset discovery tool that allows us to easily discover/track assets, while providing excellent insights into missing AV products or any assets with vulnerabilities.The overall detail Runzero provides is unmatched and it's given us insights into devices that other asset discovery products haven't

Nachteile:

N/A, The product is exceptional in every way.

Great CAASM tool for Asset discovery and context

Vorteile:

Ease of operationAbility to accurately fingerprint assets with better contextUnauthenticated approach to asset discovery and fingerprinting

Nachteile:

Ability to enumerate softwares/applications which are hosted in discovered assets

Very happy - easy to use, provides info

Kommentare: Rumble was very easy to roll out so that I can keep track of our AWS environment, as well as our various office networks. It's super simple to set up but gives me all the info I need. It also serves as a NIDS to some degree, and ensures that we have an eye on what's running, especially if it's surprising.

Vorteile:

Rumble was very easy to roll out so that I can keep track of our AWS environment, as well as our various office networks. It's super simple to set up but gives me all the info I need.

Nachteile:

I had to put it on Raspberry Pi's but that's because we are not heavy users of VMware or the like. Having it as a plug-and-play appliance (hardware) might be a nice future enhancement?

Cutting through complexity assets management and shadow IT

Kommentare: Amazing

Vorteile:

Ease of use; very simple, in one shot you're able to identify Shadow IT and Network Bridges

Nachteile:

I know it's not a vulnerability manager, but would be great to include a risk score, regarding the assets, due old operating system

Rumble Asset Discovery

Kommentare: We’ve been incredibly impressed with what Rumble is able to deliver considering how easy it is deploy and how little resources it requires. Our organization has around 10,000 assets across 50 locations and the complete configuration and deployment took about one day of work. One other item to mention is how incredible support is. We’ve had a few questions and issues along the way and support has been the most responsive I’ve ever experienced. We regularly get not only responses but actual deployed product updates quicker than it sometimes takes to get a response from my own staff. I’m talking hours and in some cases minutes.

Vorteile:

Ease of use and speed of deployment are standout features. Prior to Rumble we did not have a comprehensive network based asset identification tool. We used a home grown set of bash scripts and scheduled tasks to identify devices as they connected to the network. While this gave us point in time changes it lacked any sense of historical view of our network. Rumble uses bleeding edge techniques for identifying network connected devices, many of which the team itself has created, which provides two huge benefits. First, it provides extremely accurate asset identification. Second, and probably even more important, is that all of the data gathered by scanning an asset is added to the database and can be queried. This data is extremely useful for our security operations team when attempting to quantify the impact of a newly published vulnerability. The web interface is also incredibly quick to search render. Very impressive considering the amount of data generated by the scanners.

Nachteile:

What makes Rumble so good could also been seen as a slight drawback, its laser focus on asset identification. Rumble is by no means an asset management tool, nor does it claim to be, but what it provides is the foundation of all asset management systems. It would be nice to expand it into that type of system.

Simple, focused, flexible, no brainer

Kommentare: This product is a no brainer. If you need to scan your environment, this is just better than anything else. It doesnt try to solve other problems (vuln. mgmt for expl) and is easy to use and integrate.

Vorteile:

Rumble fill a gap most large scale operations have: identify assets. Running the tool is super easy and give you immediate value. The tool doesnt try to force you in a workflow (very typical pitfall), scale very well and is very open with releasr 1.0 comprensive API support. Devices identification opensource signatures is a real bonus.

Nachteile:

At this stage, any issue we had have been addressed before we could really think about the impact and we see a very open attitude with feature requests. I have honestly have a hard time to find a problem to raise here.

Data Format

Kommentare: I've used both the agent and the scanner.
- agent - is simple to use and setup but required a Web Console hosted by rumble. The web console has a nice way to view data in four different ways plus the high level overview of what was discovered on the network. - scanner - is simple to use and setup. It's also very fast in gathering data on the network and capable of dumping data files locally. I initially index data in .jsonl file with Elasticsearch (ES) It works well with a small dataset, but for large dataset, it fails miserably b/c of the number of fields in the jsonl file. I had to write some code to convert its format to something that I can use with ES. The json field name needs to be consistent for the consumers to use/integrate with other products. It has a mixed of snake_case, camelCase, hyphen, dot, multiple UPPERCASE letters, etc... not friendly to parse for sure, not friendly to use with other products. I did create my own format, something that allows me to view and query for info in ES and kibana.

Vorteile:

It's fast and capable of gathering many different types of data, including wifi related data, smart devices, etc.

Nachteile:

Using the data to integrate with other products like Elasticsearch

Rumble is Awesome

Kommentare: Overall, my experience has been pretty great and HD is very responsive and takes every issue into full consideration. A lot of these software giants will take ages to do what HD has done in a few days. This is an awesome piece of software and is making my managers happy.

Vorteile:

In our use case, it provides us with quick discovery of all assets in our internal network and shows us running services based on common open ports. It is much quicker than other tools I've used and the fact that it is agentless is also a huge pro.

Nachteile:

It would be great if they could add on more features in the future, especially security features such as CVE scanning. It already allows you to export the scan results though which is cool, but would be nice to have this function built in.

High ROI Endpoint intelligence tool

Vorteile:

Incredibly easy to set up. When we did have issues, the team at Rumble resolved incredibly quickly. I don't believe I ever waited more than a few hours. Used to scan a fairly large network (/8) and the intel it gathers has become vital to my groups ability to not only identify issues proactively, but also respond quicker to events. Really great value, puts competitors ROI figures to shame.

Nachteile:

earlier versions fingerprinting wasn't perfect, but has since gotten far better.

A must have tool for all security teams.

Vorteile:

It provides a rich insight into your environment with very little effort. It’s profiling capabilities are great considering there is no agent on the endpoint. It’s simple to configure and manage. The support team is very responsive and the product development team turn around feature requests in very short time frame.

Nachteile:

There is nothing I can say that I disliked.

Rumble: Wired, nmap: Tired

Vorteile:

After a long run owning the network inventory space, Rumble has stepped up the scanning and inventory game with a disruptive technology and business model.

Nachteile:

Nothing really missing at this point, enjoying the constant improvements!

The discovery tool I would build

Kommentare: this is the product that I would build if I was going to need to understand any given network from the ground up.

Vorteile:

You can't go wrong with RUMBLE. Out of the box, it is the single most powerful discovery, management and fingerprinting technology out there. Built by cybersecurity professionals by other cybersecurity professionals, RUMBLE is the next generation of products that are going to make better sense of "what is in your network"

Nachteile:

there are a ton of features that I wish I could use. way too powerful

Happy (2X) customer

Kommentare: I've had a great experience with Rumble. I've actually bought it twice now and I've been happy both times.

Vorteile:

Rumble is easy to use and deploy. We were up and running with multiple offices within days. It does exactly what we expect it to which is give us insight into what is on our network. We've already used it to identify vulnerable, undocumented services. Search is easy and intuitive. Scans are easy to set up. HD has been great to work with through the contracting, setup, and support process.

Nachteile:

It is possible to DoS devices on the network so I've had to be mindful of the packet rate. I typically throttle it down to 250 and I haven't had any issues with it since I did this.

Rumble Discovers more, faster

Vorteile:

The speed and thoroughness of rumble is beyond compare, it tells me about ALL THE THINGs all the places in a way that i thought i couldn't get for such a reasonable pricing model.

Nachteile:

The data could so with a bit more in the form of drill downs/analysis. I love raw data but would be cool if some of this could be inbuilt.

Discovery tool and Asset Tracking

Kommentare: Our discovery process and Asset tracking is less time consuming and easier to setup. We save a significant amount of time compared to our previous tools for this purpose. Those tools were much more expensive and didn't meet our needs as well as Rumble.

Vorteile:

We can discover and track assets even without having credentials

Nachteile:

Some of the categories of devices are not accurate. As an example, Windows Server 2008 is showing as, "Windows 8". It's pretty easy to determine and work around though.

Rumble Network Discovery - The Best Asset Discovery and Management System

Kommentare: Asset discovery and classification. Part of our vulnerability management program.

Vorteile:

This is hands down the best Asset Discovery and Inventory Management software available presently. It's extremely fast, feature complete and accurate. Software support is responsive, swift and very complete.

Nachteile:

I have no issues with this software. I wish other software teams would learn from it.

An incredible asset discovery tool

Kommentare: We have used Rumble to assist in network security assessments in a number of organizations. We continue to deploy it in a wide variety of client networks and it has performed flawlessly, helping us properly identify assets and targets that could be attacked.

Vorteile:

Ease of deployment Flexibility of platforms it can be deployed on Rich, accurate and fast results Constantly evolving and improving features Has performed well in both small and large enterprise situations

Nachteile:

None so far. The product continues to improve and has surpassed all of our expectations so far.

finds everything, clean ui, just works

Kommentare: The visibility that this tool provides is fantastic. It was an easy sell to me for features and an easy sell to my boss as far as cost.

Vorteile:

I really like how painless it was to install the scanning agent and how light it is on that server's resource load. The reporting front end on the Rumble website is super responsive and the info on there is exhaustive.

Nachteile:

Maybe have a couple of quick templates for alerts. It took less than a minute to set up an alert for newly discovered devices, however a novice sysadmin may benefit from some ready-made use cases for alerts, red flags, etc.

Rumble is like nmap on steroids; actionable intelligence fed daily

Kommentare: I used Rumble for several client networks as a test and additional information compared to my normal nmap / Nessus / etc scans. Honestly, even the betas of Rumble gave me more actionable intelligence than the others. Today's networks often have single factor authentication services exposed remotely, even when they loudly proclaim that they've moved to 2FA. Finding and categorizing services (Remote Desktop Gateway via HTTPS, OpenVPN Appliance, Exchange, etc.) was really powerful and impressive especially, for quick review of larger environments.

Vorteile:

I'm deeply impressed by the depth of protocol knowledge displayed and made available with Rumble. Correlating assets that change IP addresses automatically, loads of support for SNMP... the list goes on and on.

Nachteile:

While the interface is pretty good about encouraging natural discovery of features, a guided tour of an example network would be a great use of time to introduce newer users.