Excellent overall.

Flexibility of deployment, the scanners can run on any platform or hardware. The speed of the scans and the accuracy of results are stupendous.

There are several options for scan frequency but I would like something between daily weekly like every 8 hours or every three days. I am achieving this with multiple scan schedules. It is a minor complaint.

Outstanding. Professional from the start. Does what it says on the tin. Hands-free updates. Complete network, system, and service visibility.

Incredibly easy to acquire, install, and (securely) update. I have the agent installed on multiple nodes and had zero issues with any of them (even macOS Catalina systems with the new, invasive permissions structure). Via the web UX I have quick access to reports and current status. The data download makes it super easy to use in analytics environments. The service is constantly updated with new features and signatures, making it straightforward to identify new devices and services as they emerge. The alerting capability helped identify an IoT device that "went rogue" and installed a telnet service port without permission (that device is now in the town electronics recycling facility). It's one of the few IT and IT security products and services that did what it said on the tin Day 1 and continues to do so without any intervention on my part.

It's honestly difficult to find a serious flaw. Agent releases are paced and come with great features and bug fixes. I think, perhaps, one improvement could be to provide "prompts" or "coaxes" in the UX to help novice users (and those who do not have a steeped background in IT or security) identify ways they could use the service to better manage their infrastructure, identify issues, and be proactive.

Able to view the assets in the organisation

Enumeration of applications of the discovered assets

We are using Rumble to provide an independent check of the services visible on our exposed external network surface, with both fast and slow/comprehensive scans. This provides assurance that network-level and server-level controls are configured appropriately.

It was easy to use Rumble for the targeted job of asset discovery, without having to consider the impact of most products' actual scope of vulnerability detection. By having to provide our own agent for the scanning endpoint, we remain in complete control of the source of the scans, and can integrate it into existing firewall and other protective technologies easily.

Analysing the changes over time isn't very easy in the current system, it highlights changes between current and last scan just fine but other periods are much more difficult. There aren't a lot of facilities for controlling the impact or utilisation of the agent on the scanning machine; I'd like to be able to judge just 'how fast' we can effectively scan from within Rumble's management.

I can always see the inventory and when things are not being used. I can save on licensing and resources if the tools or software are not being turned on at all.

I like the simple interface and the speed with witch it discovers items on the network.

There could be some functionality added to allow easier interacting with the discovered devices. One click remote desktop or some way to add tools like NMap to a menu to further explore devices.

Rapid discovery of assets across large distributed networks.

Out of the box discovery of tons of different protocols.

Nothing so far, I definitely want the ability to run it self hosted at some point

I've used both the agent and the scanner. - agent - is simple to use and setup but required a Web Console hosted by rumble. The web console has a nice way to view data in four different ways plus the high level overview of what was discovered on the network. - scanner - is simple to use and setup. It's also very fast in gathering data on the network and capable of dumping data files locally. I initially index data in .jsonl file with Elasticsearch (ES) It works well with a small dataset, but for large dataset, it fails miserably b/c of the number of fields in the jsonl file. I had to write some code to convert its format to something that I can use with ES. The json field name needs to be consistent for the consumers to use/integrate with other products. It has a mixed of snake_case, camelCase, hyphen, dot, multiple UPPERCASE letters, etc... not friendly to parse for sure, not friendly to use with other products. I did create my own format, something that allows me to view and query for info in ES and kibana.

It's fast and capable of gathering many different types of data, including wifi related data, smart devices, etc.

Using the data to integrate with other products like Elasticsearch

Ease of operationAbility to accurately fingerprint assets with better contextUnauthenticated approach to asset discovery and fingerprinting

Ability to enumerate softwares/applications which are hosted in discovered assets

Rumble was very easy to roll out so that I can keep track of our AWS environment, as well as our various office networks. It's super simple to set up but gives me all the info I need. It also serves as a NIDS to some degree, and ensures that we have an eye on what's running, especially if it's surprising.

Rumble was very easy to roll out so that I can keep track of our AWS environment, as well as our various office networks. It's super simple to set up but gives me all the info I need.

I had to put it on Raspberry Pi's but that's because we are not heavy users of VMware or the like. Having it as a plug-and-play appliance (hardware) might be a nice future enhancement?

Runzero is an exceptional asset discovery tool that allows us to easily discover/track assets, while providing excellent insights into missing AV products or any assets with vulnerabilities.The overall detail Runzero provides is unmatched and it's given us insights into devices that other asset discovery products haven't

N/A, The product is exceptional in every way.

This product is a no brainer. If you need to scan your environment, this is just better than anything else. It doesnt try to solve other problems (vuln. mgmt for expl) and is easy to use and integrate.

Rumble fill a gap most large scale operations have: identify assets. Running the tool is super easy and give you immediate value. The tool doesnt try to force you in a workflow (very typical pitfall), scale very well and is very open with releasr 1.0 comprensive API support. Devices identification opensource signatures is a real bonus.

At this stage, any issue we had have been addressed before we could really think about the impact and we see a very open attitude with feature requests. I have honestly have a hard time to find a problem to raise here.

I've had a great experience with Rumble. I've actually bought it twice now and I've been happy both times.

Rumble is easy to use and deploy. We were up and running with multiple offices within days. It does exactly what we expect it to which is give us insight into what is on our network. We've already used it to identify vulnerable, undocumented services. Search is easy and intuitive. Scans are easy to set up. HD has been great to work with through the contracting, setup, and support process.

It is possible to DoS devices on the network so I've had to be mindful of the packet rate. I typically throttle it down to 250 and I haven't had any issues with it since I did this.

The speed and thoroughness of rumble is beyond compare, it tells me about ALL THE THINGs all the places in a way that i thought i couldn't get for such a reasonable pricing model.

The data could so with a bit more in the form of drill downs/analysis. I love raw data but would be cool if some of this could be inbuilt.

Our discovery process and Asset tracking is less time consuming and easier to setup. We save a significant amount of time compared to our previous tools for this purpose. Those tools were much more expensive and didn't meet our needs as well as Rumble.

We can discover and track assets even without having credentials

Some of the categories of devices are not accurate. As an example, Windows Server 2008 is showing as, "Windows 8". It's pretty easy to determine and work around though.

We have used Rumble to assist in network security assessments in a number of organizations. We continue to deploy it in a wide variety of client networks and it has performed flawlessly, helping us properly identify assets and targets that could be attacked.

Ease of deployment Flexibility of platforms it can be deployed on Rich, accurate and fast results Constantly evolving and improving features Has performed well in both small and large enterprise situations

None so far. The product continues to improve and has surpassed all of our expectations so far.

The visibility that this tool provides is fantastic. It was an easy sell to me for features and an easy sell to my boss as far as cost.

I really like how painless it was to install the scanning agent and how light it is on that server's resource load. The reporting front end on the Rumble website is super responsive and the info on there is exhaustive.

Maybe have a couple of quick templates for alerts. It took less than a minute to set up an alert for newly discovered devices, however a novice sysadmin may benefit from some ready-made use cases for alerts, red flags, etc.

I used Rumble for several client networks as a test and additional information compared to my normal nmap / Nessus / etc scans. Honestly, even the betas of Rumble gave me more actionable intelligence than the others. Today's networks often have single factor authentication services exposed remotely, even when they loudly proclaim that they've moved to 2FA. Finding and categorizing services (Remote Desktop Gateway via HTTPS, OpenVPN Appliance, Exchange, etc.) was really powerful and impressive especially, for quick review of larger environments.

I'm deeply impressed by the depth of protocol knowledge displayed and made available with Rumble. Correlating assets that change IP addresses automatically, loads of support for SNMP... the list goes on and on.

While the interface is pretty good about encouraging natural discovery of features, a guided tour of an example network would be a great use of time to introduce newer users.

It's a solid product for quickly getting a manifest of hosts, services and accompanying metadata and leveraging that information into something useful.

For my organization we use it to keep a handle on what hosts are on the network (both ones that are in our catalog and those we do not know about). We also use it to get an idea on what kind of services are running and version information and to do so quickly. That is one area where this app really excels, it's crazy fast compared to doing common NMAP scans.

I'd like recurring scans to get queued if their time comes and there is another scan in progress (or at least have the option to have them queued). Trying to schedule scans to completely turn over a 10.x.x.x space when you're doing a couple class b subnets at a time is on par with air traffic control as far as difficulty.

We use the product to scan customer networks for asset inventories. It has greatly reduced the amount of technician time necessary to complete those inventories.

Quick and Easy to Implement. The software was able to find assets even with active firewalls. The interface is excellent.

There are a few items (like Asset Tags) that the software can't always detect. However, we were able to quickly work with the support team to get updates that improved the available details.

Rumble augments and validates your system inventory in ways previously not possible with this level of ease. I can quickly look at hosts, OS versions, services, etc and cross-reference with known good inventory to find problems. As an example, I found a printer with an extremely old firmware that had gone un-patched for years.

I like the ease of deployment and the versatility of the agents. I'm running on multiple operating systems and hardware platforms and they all work amazing. I also love the WiFi Scanning for WiFi-enabled agents, and the screen capture function for anything that responds to HTTP requests.

The agent doesn't always correctly discover all the attributes that belong to a host (such as IPs), so it sometimes alerts you to a change that is just a discrepancy in the scan.

The responsiveness of Rumble team and their customer support is incredible! The team follows up on the issues incredibly fast. They listen to customer's wants and desires and, when such wants make sense, implement them into the product. I am more than satisfied with the company and with the product.

Easy to implement, easy to use, very fast, very helpful.

There were some gotchas in the way how product worked, which was expected in the young product. Rumble team has been very responsive in implementing fixes and feature requests.

Shortly after installing: "We have an IP KVM?"

Rumble is outstanding. It does one thing: provides visibility to what's plugged into your network, and it does it well.

Licensing could be a little more granular, but this is a minor gripe and only occurs because we're just under the next tier of pricing.

The things I liked the most about Rumble was the ease of deployment and the depth of discovery.

I don't really have any cons yet. I'm anxiously awaiting to deploy it in production in our client engagements.