External Asset Report

Platform

The External Asset Report captures a point-in-time snapshot of the external asset data within your organization and sites. The report organizes data from your asset inventory into relevant sections and summarizes the major findings. The External Asset Report is useful for sharing with teams and leaders who may not have access to runZero and need an at-a-glance look into their public-facing assets.

The report helps you quickly assess high-level metrics across multiple categories for external assets in your organization and sites, such as asset types, operating systems, hardware, protocols, and products. The report also includes a summary of top Certificate Authorities and GeoIP countries. For organizations with less than 50,000 assets, you can include additional information from your inventory via asset details and screenshots.

You can schedule the report to run at a specified start time and at a specified frequency. This report can run once, daily, weekly, monthly, or on the Nth weekday of each month. When a report is configured to run recurrently, one or more email addresses can be notified when the report has run.

runZero generates this report in HTML, but you can use your browser’s Print to PDF feature to save the file as a PDF for distribution.

Generating the External Asset Report

1. Go to the Reports page.
2. Open the External Asset Report configuration form.
3. Enable Include asset details if you want additional information about each asset. The asset details will include the asset type, operating system, hardware, outlier score, first seen date, last seen date, site, addresses, names, MAC addresses, protocols, products, and services. This option only applies to organizations with less than 50,000 assets.
4. Enable Include screenshots if you want to see captured screenshots in the report. This option only applies to organizations with less than 50,000 assets.
5. Enable Include unscanned subnet details if you want to see results from external subnets that have not been scanned by runZero.
6. Enable Include TLS certificate details if you want to see details gathered about TLS certificates.
7. Use the External IP exlusions if you are using public IP address space internally and do not want those assets included in the report.
8. Configure Start time and Report frequency if you want the report to run at a specified time or on a recurring schedule.
9. Provide one or more email addresses in the Email addresses field if you want email notifications when the report is run.
10. Generate the report. When the report generation completes, it automatically opens in your browser. Save the report as a PDF to share and distribute as needed.

Email notifications

You can include a comma-separated list of email addresses when configuring the report to run on a schedule. The specified email addresses will receive notifications when the report has finished each run of the configured schedule. The notification email will contain a link to the report in the runZero Console. Please note that only registered users with access to the relevant organization will be able to access the completed report.