Personal Customer Health Review

View as Markdown

This guide helps you evaluate and improve your use of runZero across three areas:

  • Total visibility
  • Exposure detection
  • Reporting & ownership

Each section lists recommended actions with direct links to the Use Case Library and your runZero console.

1) Total visibility

Full asset visibility is foundational to your use of runZero. It starts with scanning internal and external environments, automating scan tasks, and integrating your existing systems.

1A. Integrations

runZero uses inbound integration activity to measure platform adoption.

Recommendations

  • Configure integrations for your existing tooling, such as EDR, vulnerability scanning, and cloud platforms.
  • Schedule recurring connector tasks.

Use cases

Manage connectors in your console

1B. Internal scanning

Frequent internal scans keep your asset inventory complete and current.

Recommendations

Use cases

View scan activity

1C. External scanning

External scans identify exposed assets and internet-facing infrastructure.

Recommendations

  • Schedule scans for known public IPs and domains.
  • Investigate new or unmanaged external services.

Use cases

Start external scans

2) Exposure detection

Use your inventory to uncover gaps, investigate risk, and prioritize remediation.

2A. Gaps in integrated systems

Cross-reference runZero against your other tools to find missing agents or coverage.

Recommendations

  • Use queries to detect systems missing security controls.

Use cases

Search for asset gaps Sample searches for endpoint coverage gaps Sample searches for vulnerability scan visibility

2B. Findings review & investigation

Built-in findings flag assets in your environment that need follow-up, such as vulnerabilities, internet-exposed services, or end-of-life devices. Examples include known exploited vulnerabilities, databases that do not require authentication, and devices past their extended end-of-life support date.

Recommendations

  • Prioritize findings by severity.
  • Assign follow-up to responsible teams.

Use cases

View findings Example search using findings data

2C. Asset-level pivoting

Investigate anomalies and group assets with flexible filters.

Recommendations

  • Build queries to track specific configurations.
  • Use tags, queries, and saved views to investigate issues.

Use cases

Example queries View outliers in your console

3) Reporting & ownership

Use dashboards, ownership metadata, and custom tagging to improve transparency and accountability.

3A. Custom dashboards

Dashboards track hygiene, coverage, and risk trends across environments.

Recommendations

  • Build dashboards from your most important queries and findings.
  • Share them with leadership and technical teams.

Use cases

Manage dashboards

3B. Asset criticality

Tag critical assets to prioritize findings and reporting.

Recommendations

  • Define criticality by business function or role.
  • Assign criticality manually, or set it automatically with a rule.

Use cases

Edit criticality

3C. Assigning ownership

Ownership improves response time and accountability.

Recommendations

  • Assign owners by role, business unit, or tag.
  • Use alerts to notify asset owners.

Use cases

Set ownership

Getting help

For help improving any of these areas, book a session with a runZero Customer Success Engineer.

Schedule a working session

Updated