Runecast Solutions
Runecast Solutions, a Dynatrace subsidiary, builds Runecast Analyzer — a virtual appliance for automated configuration auditing, vulnerability detection, and continuous compliance validation across VMware, hybrid, and multi-cloud environments, serving enterprise security and compliance teams against 14+ regulatory frameworks.
- Company typePrivate
- Founded2014
- HeadquartersLondon, United Kingdom
- Headcount51–100
- GTM typeB2B
- OfferingSoftware
What Runecast Solutions does
Runecast Solutions Ltd. is a UK-based, privately-held software vendor (founded 2014, London) that builds Runecast Analyzer, a virtual-appliance platform for automated configuration auditing, vulnerability detection, and continuous compliance assessment across VMware vSphere, hybrid, and multi-cloud environments (AWS, Azure, GCP, Kubernetes). The product is delivered as a virtual appliance (OVA), AWS EC2 instance, or Kubernetes deployment and validates infrastructure posture against 14+ regulatory frameworks including DISA STIG, PCI DSS v4.0, HIPAA/HITRUST, NIST 800-53/171, ISO 27001, CIS Benchmarks, BSI IT-Grundschutz/C5, TISAX, DORA, GDPR, Essential Eight, KVKK, and CISA. Its technology stack combines a virtual appliance running on Ubuntu with osquery-based OS agents and a Fleet service, an automated configuration auditing engine, agentless OS vulnerability scanning for Windows/Linux on vSphere and AWS (industry-first, covering 5,000+ CVEs), a Hardware Compatibility List (HCL) analyzer with ESXi version simulation, capacity management, and a Kubernetes validating admission webhook. Runecast was acquired by Dynatrace LLC (NYSE: DT) in 2022 and is now operated as a subsidiary, with Runecast Analyzer marketed as part of the Dynatrace platform and compliance findings ingested into Dynatrace's Grail data lakehouse via OpenPipeline.
The business operates on a subscription/annual-license revenue model with quote-based enterprise pricing (no publicly disclosed tiers) and has historically targeted VMware and multi-cloud security/compliance teams via direct enterprise field sales and partner-led webinars (Power Demo). Post-acquisition, the primary distribution channel is Dynatrace's global enterprise sales motion, with complementary self-service via the Runecast customer portal (portal.runecast.com). Integration partners include Dynatrace (flagship), ServiceNow, Jira, Kubernetes admission controllers, and the broader Dynatrace platform ecosystem. Customer segments are enterprise IT security and compliance teams, vSphere operators, and regulated-vertical buyers (financial services, automotive, healthcare, US federal/defense, payment processing). Pre-acquisition disclosed funding totaled approximately $4M (OPIFER 2014; Credo Ventures and Limerock Fund Manager 2017; Horizon 2020 EU grant 2019). Leadership comprises CEO Stanimir Markov and Co-founder/CTO Aylin Sali.
Runecast Solutions firmographics
Firmographics- Name
- Runecast Solutions
- Legal name
- Runecast Solutions Ltd.
- Website
- https://runecast.com
- Company type
- Private
- Founded year
- 2014
- Operating status
- Operating
- Headcount range
- 51–100 employees
- Short description
- Runecast Solutions, a Dynatrace subsidiary, builds Runecast Analyzer — a virtual appliance for automated configuration auditing, vulnerability detection, and continuous compliance validation across VMware, hybrid, and multi-cloud environments, serving enterprise security and compliance teams against 14+ regulatory frameworks.
- Ownership category
- akta.pro rank
Runecast Solutions industry classification
Industry- Product category
- Cloud Security and Compliance Software
- NAICS
- Computer Systems Design and Related Services (54151), Testing Laboratories and Services (541380)
- SIC
- Services-Computer Programming Services (7371)
- akta.pro primary industry
- Runtime Application Self-Protection & In-App Detection (HDADACAI)
Keywords
Where Runecast Solutions is headquartered
LocationHeadquarters
- HQ city
- London
- HQ country
- United Kingdom
- HQ region
- Europe
Markets served
Runecast Solutions business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Infrastructure, Operations
Revenue model
- Software License/Subscription: Runecast Analyzer deployed as a virtual appliance requiring license activation. Licenses are managed through the Settings > Licenses page. The product is positioned as part of Dynatrace's platform offering.
- Dynatrace Platform Integration: Integration with Dynatrace enables ingestion of compliance findings via OpenPipeline, allowing Dynatrace customers to extend their platform with Runecast configuration and compliance intelligence.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | Enterprise licensing model with quote-based pricing |
Go-to-market motion1 record
Distribution channels4 records
Marketing channels5 records
Runecast Solutions product offering
Product offeringCore offering
Runecast Solutions develops and sells Runecast Analyzer, an AI-powered virtual appliance that performs agentless security, compliance, configuration, and capacity analysis for VMware and multi-cloud environments (AWS, Azure, GCP, Kubernetes). The product scans infrastructure for vulnerabilities, misconfigurations, and regulatory non-compliance against 14+ frameworks (CIS, NIST, PCI DSS, HIPAA, GDPR, ISO 27001, BSI, TISAX, DISA STIG, VMware Hardening Guidelines), and is targeted at enterprise IT operations, security, and compliance teams.
Product overview
Runecast Analyzer by Dynatrace is a unified compliance and security intelligence platform delivered as a virtual appliance. The core Runecast Analyzer product provides automated configuration auditing, vulnerability detection, and compliance assessment across VMware vSphere, hybrid, and multi-cloud environments (AWS, Azure, Google Cloud). The platform validates against 14+ regulatory frameworks including DISA STIG, PCI DSS, HIPAA, CIS, NIST, GDPR, ISO 27001, TISAX, DORA, and others. Key capabilities include: continuous configuration and compliance insights with runtime context prioritization, automated remediation workflows (PowerCLI, Ansible, AWS CLI, GCP CLI), hardware compatibility list (HCL) checking, capacity management for vSphere, container image scanning with Kubernetes admission controller integration, and log analysis. The product integrates natively with Dynatrace (via OpenPipeline), ServiceNow, Jira, and supports enterprise authentication via Active Directory, LDAP, and OpenID Connect (including Okta and Azure AD).
Differentiator
Problem solved
Functional benefit
Products and services
- Runecast Analyzer AI-powered virtual appliance that performs agentless security, compliance, configuration, and capacity analysis for VMware vSphere and multi-cloud environments (AWS, Azure, GCP, Kubernetes), covering 14+ regulatory and best-practice frameworks and integrating with Dynatrace, ServiceNow, Jira, and Kubernetes admission webhooks; intended for enterprise IT security, compliance, and infrastructure operations teams.
Quantifiable outcome
- Validate against 14+ regulatory frameworks automatically
- +2 more outcomes
Companies that use Runecast Solutions
Customer profileSegments3 records
Ideal customer profiles2 records
Runecast Solutions technology and API
TechnologyAPI detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
Integration5 records
AI capability3 records
Feature7 records
Runecast Solutions partnerships and signals
Strategic signalPartnerships
One partnership is on record.
- DynatraceflagshipDynatrace acquired Runecast Solutions and integrated Runecast Analyzer into the Dynatrace platform. The integration enables Dynatrace customers to extend their observability platform with configuration and compliance intelligence enriched with runtime context. Compliance findings are ingested via OpenPipeline into Dynatrace's Grail unified data lakehouse for unified security posture management.
Scale indicators3 records
Recent moves6 records
Expansion highlights6 records
Runecast Solutions competitors and assessment
Company assessmentDirect peers
- Wiz: Wiz is a leading cloud security posture management platform with agentless scanning across multi-cloud environments. Directly comparable to Runecast's agentless vulnerability and posture scanning capabilities, though Wiz is much broader in scope and significantly larger in scale.
- Orca Security: Orca Security pioneered agentless cloud security with its SideScanning technology, providing vulnerability management, compliance, and posture management across AWS, Azure, and GCP. Closely comparable to Runecast's agentless scanning approach for cloud workloads.
- Tenable: Tenable provides enterprise vulnerability management (Nessus) and cloud security (Tenable Cloud Security) with extensive CVE coverage and compliance reporting. Comparable to Runecast on the vulnerability scanning and compliance validation dimensions, though focused on broader enterprise environments.
- Qualys: Qualys is a long-standing cloud-based vulnerability management and compliance platform covering infrastructure, cloud, and web applications. Directly comparable on vulnerability scanning and compliance framework coverage (PCI, HIPAA, CIS, etc.).
- Rapid7 InsightCloudSec: Rapid7 offers cloud security posture management and vulnerability management as part of its Insight platform, covering AWS, Azure, and GCP. Comparable to Runecast on compliance validation and infrastructure scanning for enterprise customers.
- Lacework: Lacework provides automated cloud security and compliance posture management with anomaly detection across multi-cloud workloads. Comparable to Runecast on compliance frameworks, vulnerability detection, and cloud posture visibility.
Broad incumbents
- Palo Alto Prisma Cloud: Prisma Cloud is Palo Alto Networks' comprehensive cloud native security platform covering CSPM, CIEM, CWPP, and compliance. Broader than Runecast but directly overlapping on multi-cloud compliance validation and posture management for enterprise customers.
- CrowdStrike Falcon Cloud Security: CrowdStrike's cloud security module provides agentless CSPM, vulnerability management, and compliance across multi-cloud. Comparable to Runecast on agentless posture scanning, though bundled within CrowdStrike's broader endpoint and identity security platform.
- Microsoft Defender for Cloud: Microsoft Defender for Cloud offers CSPM, workload protection, and compliance across Azure, AWS, GCP, and hybrid environments, with regulatory compliance frameworks. Highly comparable feature set to Runecast, especially given Azure focus alignment.
- Trend Micro Cloud One: Trend Micro Cloud One is a security platform for cloud builders with workload security, posture management, and compliance capabilities. Comparable to Runecast on multi-cloud compliance and posture management, particularly for VMware-adjacent enterprise customers.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks6 records
Key highlights6 records
Customer concentration
Runecast Solutions social profiles
Digital presenceRunecast Solutions compliance and trust
Trust signalCompliance14 records
Runecast Solutions financial estimates
Financial estimateRevenue estimate
Valuation estimate
Runecast Solutions leadership team
Management profileNumber of profiles
Profiles2 records
Runecast Solutions funding detail
Funding detailFunding overview
Funding rounds3 records
Investors4 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Runecast Solutions M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Runecast Solutions
What does Runecast Solutions do?
Runecast Solutions develops and sells Runecast Analyzer, an AI-powered virtual appliance that performs agentless security, compliance, configuration, and capacity analysis for VMware and multi-cloud environments (AWS, Azure, GCP, Kubernetes). The product scans infrastructure for vulnerabilities, misconfigurations, and regulatory non-compliance against 14+ frameworks (CIS, NIST, PCI DSS, HIPAA, GDPR, ISO 27001, BSI, TISAX, DISA STIG, VMware Hardening Guidelines), and is targeted at enterprise IT operations, security, and compliance teams.
Is Runecast Solutions a public or private company?
Runecast Solutions is a private company. It is classified as corporate owned and is currently operating.
When was Runecast Solutions founded?
Runecast Solutions was founded in 2014. It employs 51 to 100 people.
Where is Runecast Solutions based?
Runecast Solutions is headquartered in London, United Kingdom, in the Europe region.
How does Runecast Solutions make money?
Two revenue lines are on record. Software License/Subscription is the primary driver. The others are dynatrace Platform Integration.
Who are Runecast Solutions's main competitors?
Direct peers on record are Wiz, Orca Security, Tenable, Qualys, Rapid7 InsightCloudSec and Lacework. Broad incumbents are Palo Alto Prisma Cloud, CrowdStrike Falcon Cloud Security, Microsoft Defender for Cloud and Trend Micro Cloud One.
Does Runecast Solutions have an API?
Yes. Full REST API for custom integration, configuration, and reporting. Access tokens can be generated via the UI (Settings > API Access Tokens) or via POST request to /api/v1/users/local//tokens. Bearer token authentication required. API browser available via 'Explore API Documentation' link. Supports vCenter management (/rc2/api/v1/vcenters), analysis reports, and more. Also supports webhook API for Kubernetes admission controller at /rc2/api/v2/k8s-admission-policy-review/policy/{policyId}. Developer documentation is at docs.runecast.com.
What industry is Runecast Solutions in?
Runecast Solutions's product category is Cloud Security and Compliance Software. Its primary akta.pro industry code is HDADACAI, Runtime Application Self-Protection & In-App Detection. Its NAICS code is 54151 and its SIC code is 7371.