Personal Customer Health Review

This guide helps you evaluate and improve your use of runZero by focusing on three core areas:

• Total Visibility
• Exposure Detection
• Reporting & Ownership.

Each section includes recommended actions and direct links to the Use Case Library and your runZero console.

1) Total Visibility

Achieving full asset visibility is foundational with runZero. Total visibility begins with scanning internal and external environments, automating scan tasks, and integrating existing systems.

1A. Integrations

runZero evaluates inbound integration activity to measure platform adoption.

Recommendations

• Configure integrations for your existing tooling (ex. EDR, vulnerability scanning, cloud platforms, etc.).
• Schedule recurring connector tasks.

Use Cases

• Cloud asset discovery, endpoint protection gaps

Manage connectors in your console

1B. Internal Scanning

Frequent internal scans ensure you maintain a complete and up-to-date asset inventory.

Recommendations

• Use Scan Templates for recurring scans.
• Target scans in RFC 1918 space using the Coverage Report

Use Cases

• Shadow IT discovery, endpoint protection gaps

View scan activity

1C. External Scanning

Identifies exposed assets and internet-facing infrastructure.

Recommendations

• Schedule scans for known public IPs and domains
• Investigate new or unmanaged external services

Use Cases

• Shadow infrastructure detection, external exposure visibility

Start external scans

2) Exposure Detection

Use your inventory to uncover gaps, investigate risk, and prioritize remediation efforts.

2A. Gaps in Integrated Systems

Cross-reference runZero with your tools to detect missing agents or coverage.

Recommendations

• Use queries to detect systems missing security controls

Use Cases

• Endpoint coverage gaps, vulnerability scan visibility

Search for asset gaps Sample searches for endpoint coverage gaps Sample searches for vulnerability scan visibility

2B. Findings Review & Investigation

Built-in findings help identify assets that require follow up within your environment, such as vulnerabilities, internet exposed services, or end of life devices. Example findings include known exploited vulnerabilities, databases that do not require authentication, or devices that are past their extended end of life support date.

Recommendations

• Prioritize findings by severity
• Assign follow-up to responsible teams

Use Cases

• Risky service detection, hardware and OS retirement

View findings Example search leveraging findings data

2C. Asset-Level Pivoting

Investigate anomalies and group assets with flexible filters.

Recommendations

• Build queries to track specific configurations
• Use tags, queries, and saved views to investigate issues

Use Cases

• Asset grouping, investigative workflows

Example queries View outliers in your console

3) Reporting & Ownership

Use dashboards, ownership metadata, and custom tagging to improve transparency and accountability.

3A. Custom Dashboards

Dashboards track hygiene, coverage, and risk trends across environments.

Recommendations

• Build dashboards using key queries and findings
• Share with leadership and technical teams

Use Cases

• Executive reporting, Finding dashboards

Manage dashboards

3B. Asset Criticality

Tag critical assets to prioritize findings and reporting.

Recommendations

• Define criticality by business function or role
• Assign manually or automatically set criticality based on a rule

Use Cases

• Prioritized risk view

Edit criticality

3C. Assigning Ownership

Ownership improves response time and accountability.

Recommendations

• Assign owners by role, business unit, or tag
• Use alerts to notify asset owners

Use Cases

• Ownership tagging

Set ownership

Need Help?

Need help optimizing any of these areas? Book a session with a runZero Customer Success Engineer.

Schedule a working session