Runecast vs VMware Aria Automation comparison

Runecast and Broadcom are both solutions in the Cloud Security Posture Management (CSPM) category. Runecast is ranked #49, while Broadcom is ranked #19 with an average rating of 7.9. Runecast holds a 0.4% mindshare in CSPM, compared to Broadcom’s 0.6% mindshare. Additionally, 100% of Runecast users are willing to recommend the solution, compared to 94% of Broadcom users who would recommend it.

Runecast

Read 1 Runecast review

898 Views
251 Comparison Views

100% willing to recommend

VMware Aria Automation

Read 172 VMware Aria Automation reviews

9,092 Views
636 Comparison Views

94% willing to recommend

Runecast

VMware Aria Automation

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between Runecast and VMware Aria Automation based on real PeerSpot user reviews.

Find out what your peers are saying about Wiz, Palo Alto Networks, SentinelOne and others in Cloud Security Posture Management (CSPM).

To learn more, read our detailed Cloud Security Posture Management (CSPM) Report (Updated: February 2026).

Buyer's Guide

Cloud Security Posture Management (CSPM)

February 2026

Download the complete report

Helped 884,873 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Runecast

Ranking in Cloud Security Posture Management (CSPM)

49th

Average Rating

9.0

Reviews Sentiment

7.0

Number of Reviews

Ranking in other categories

GRC (61st), Vulnerability Management (82nd), Container Security (52nd), Cloud Workload Protection Platforms (CWPP) (44th), Cloud-Native Application Protection Platforms (CNAPP) (35th), Compliance Management (47th)

VMware Aria Automation

Ranking in Cloud Security Posture Management (CSPM)

19th

Average Rating

8.0

Reviews Sentiment

6.8

Number of Reviews

172

Ranking in other categories

Cloud Management (3rd), Configuration Management (8th), Network Automation (6th), Cloud Infrastructure Entitlement Management (CIEM) (5th)

Mindshare comparison

As of March 2026, in the Cloud Security Posture Management (CSPM) category, the mindshare of Runecast is 0.4%, up from 0.1% compared to the previous year. The mindshare of VMware Aria Automation is 0.6%, up from 0.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Cloud Security Posture Management (CSPM) Mindshare Distribution
Product	Mindshare (%)
VMware Aria Automation	0.6%
Runecast	0.4%
Other	99.0%

Cloud Security Posture Management (CSPM)

Featured Reviews

Burak AKCAGUN

Business Development Manager at Axoft Ukraine

Helps with risk assessments for containers, assessing security, and ensuring container compliance

I rate the overall product a nine out of ten. Customers can conveniently view all companies in a single dashboard if they have different companies. This feature eliminates the need for different solutions and separate installations. Moreover, the solution extends beyond servers, encompassing various platforms such as VMware and Kubernetes. Additionally, end-users can install the solution from their client's perspective.

Read full review

VasilisGiannitsiotis

Senior IT at ITSolutions

Automation has streamlined complex financial workflows but still needs more intuitive orchestration

Something to improve in VMware Aria Automation would be related to VCF 9, as I do not know what it is trying to bring because they exposed it as the solution of everything. So VCF 9 will bring VCF Automation and VCF Operations, the new product line of VMware. I have not seen what this brings or what else it includes. Maybe in the area of vRealize Orchestrator, this would be beneficial because VRO can do everything. Perhaps a more user-friendly way to use that tool would be helpful because the possibilities there are endless. I am looking for more user-friendly navigation in VMware Aria Automation.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Runecast is a good partner for VMware. Once we have installed it, we can see all the problems and issues. It also has VMware knowledge-based articles."

"usability; It's very user-friendly. It is not hard to go and find things. There is a one-click Help that you can use to find all the documentation you need to manage it."

"Scalability is probably the best part about it. You can take things that you've already defined, that you've already built once, and build them again multiple times, without significant effort."

"The customer can set up multiple machine blueprints. Therefore, we are able to customize the template of three machines, then the customer can deploy without knowing anything about the IT business."

"vRA provides that single pane of glass for our cloud tenants to deploy, monitor, access, and manage their VMs/guest operating systems."

"The automation part is most valuable. Because it is a VMware product, the automation capabilities that come with vRA are pretty extensive. We can integrate and build a lot of features on top of it, which makes it extremely useful for us."

"The most valuable features are the metrics and reporting aspects. The historical data and extraction enable us to tell where the trends are and where contentions may exist in the future."

"It provides visibility into the VM space."

"The benefits are that it gives you a heads-up display and dashboard of the way everything's running. The ability to automate around those tasks is really where we get the value."

More VMware Aria Automation pros

Cons

"The product lacks network assessment capabilities. We cannot view our network assets or scan switches, routers, or IPs for vulnerabilities and issues."

"The initial setup is very complex because we have a bunch of customization workflows. They were built-in features that we had to program as code with Orchestration."

"They should concentrate on navigation and service improvements."

"I want to see HTML5. I want to get rid of JavaScript... we have a lot of issues with Java crashing when we're using vCenter. I obviously don't want that to happen with the vRealize Automation and Orchestrator side."

"It does go down from time to time. We have some issues with the appliances sometimes and we have to do reboots in the middle of the day. That affects the ability for them to deploy."

"The upgrade experience is horrible. It's not straightforward, there are a lot of failures, a lot of support interactions. It's not something that we are able to pull off ourselves. I've been with vRA since it was termed vCSA. We've gone through multiple rounds, and it has never been easy."

"Maintaining the product requires effort and a good understanding of the environment, including how to set up the codes and other configurations. Pricing needs to be improved to improve the customer penetration."

"It is difficult to set up."

"The back-end has a steep learning curve."

More VMware Aria Automation cons

Pricing and Cost Advice

"Runecast's pricing is cheaper than that of its competitors."

"The solution is pretty expensive but provides good workload management."

"So much can be done with the Open Source side, and especially for smaller shops. I personally think the pricing for Enterprise is hard to justify."

"We have seen significant ROI. We used to have physical servers, it took 90 days to get a server, order it, buy it, and get it in. We have it down to 10 minutes, building a server with virtualization, and now that's too slow. So, we let the customer do it at their speed. Therefore, it is pretty much up in a couple of minutes and they have a server."

"The cost of the solution is reasonable for us. Although it is relatively high, we prioritize stability and integration over cost."

"I'm very interested in the integration with Puppet. However, my organization doesn't have the funding for something like Puppet right now. If VMware would integrate that feature set (Puppet) into vRA. That would be very awesome."

"From a budget point of view, the pricing is a bit on the higher side."

"Better pricing is always handy, but I feel it's at the right price point."

"There is confusion between licensing levels. There are three different licensed versions of vRealize Automation, and there are different things which can happen in each of them."

More VMware Aria Automation pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Cloud Security Posture Management (CSPM) solutions are best for your needs.

See recommendations

884,873 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

No data available

Financial Services Firm

11%

Manufacturing Company

10%

Computer Software Company

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

No data available

By reviewers
Company Size	Count
Small Business	33
Midsize Enterprise	24
Large Enterprise	130

Questions from the Community

Ask a question

Earn 20 points

What's the difference between VMware vRA (automation) and vROps (operations)?

vROP is a virtualization management solution from VMWare. It is efficient and easy to manage. You can find anything you need from the software interface. It provides complete visibility over applic...

See all answers

Is there any way to try VMware Aria Automation for free?

When it comes to VMware Aria Automation, you have three choices for free runs: Hands-on Lab (HOL) Advanced lab A free trial I cannot describe in detail the second and third options as my company ...

See all answers

Which sectors can benefit the most from VMware Aria Automation?

I was looking at VMware Aria Automation case studies recently and I got the impression that three main kinds of companies were using it most often: Social organizations Financial institutions and ...

See all answers

Comparisons

Orca Security vs Runecast

Compared 12% of the time

Wiz vs Runecast

Compared 11% of the time

Snyk vs Runecast

Compared 10% of the time

Chainguard Containers vs Runecast

Compared 9% of the time

Tenable Security Center vs Runecast

Compared 9% of the time

More Runecast Competitors

Red Hat Ansible Automation Platform vs VMware Aria Automation

Compared 11% of the time

Morpheus vs VMware Aria Automation

Compared 6% of the time

VMware Aria Operations vs VMware Aria Automation

Compared 6% of the time

Nutanix Cloud Manager (NCM) vs VMware Aria Automation

Compared 3% of the time

HashiCorp Terraform vs VMware Aria Automation

Compared 3% of the time

More VMware Aria Automation Competitors

Product Reports

Buyer's Guide

Cloud-Native Application Protection Platforms (CNAPP)

February 2026

Download Runecast product report

Buyer's Guide

VMware Aria Automation

February 2026

Download VMware Aria Automation product report

Also Known As

Runecast Analyzer

VMware vRealize Automation, vRA, VMware DynamicOps Cloud Suite, SaltStack

Overview

Runecast is an enterprise IT platform that saves your Security and Operations teams time and resources by enabling a proactive approach to ITOM, CSPM, and compliance. Its agentless scanning capability ensures efficient and in-depth assessment of your infrastructure without imposing additional load on your servers.

It automates vulnerability assessment, configuration drift management, and continuous compliance – for VMware, Cloud, and Containers.

Runecast helps reduce operational overhead, increase transparency, and easily assess and remediate infrastructure vulnerabilities. It simplifies managing regulatory compliance, making it an ideal solution for your infrastructure security needs.

It provides continuous audits against vendor best practices, common security standards, and frameworks such as BSI IT-Grundschutz, CIS, Cyber Essentials, DISA STIG, DORA, Essential 8, GDPR, HIPAA, ISO 27001, KVKK, NIST, PCI DSS, TISAX, VMware Security Hardening Guidelines, and the CISA KEVs catalog.

Your team can do more with less via a single platform that checks all your cloud infrastructure, for increased visibility, security, and time-saving. Security teams benefit from simplified vulnerability management and regulatory compliance, across multiple standards and technologies. Operations teams are able to reduce operational overheads and increase clarity, enabling you to be proactive and return to the valuable work you want to be doing.

Runecast has been recognized with Frost & Sullivan's 2023 European New Product Innovation Award in the CNAPP industry for its strong overall performance and commitment to user experience.

Get to know Runecast: www.runecast.com/

Read Customer Success Stories: www.runecast.com/case-studies

Runecast

VMware Aria Automation is a cloud management tool that allows companies to simplify their cloud experience through a modern automation platform. The solution is designed to deliver self-service clouds, multi-cloud automation with governance, and DevOps-based security and infrastructure management. It helps organizations improve IT agility, efficiency, and productivity through its various features.

VMware Aria Automation has multiple use cases that include the following:

Self-service multi-cloud: VMware Aria Automation can be used to deliver consistent self-service consumption. Another use case in this area is for delivering infrastructure across VMware Clouds as well as public clouds.
Multi-cloud governance: The solution can be used to manage cost, performance, networking, configuration, and security at scale for multi-cloud environments. VMware Aria Automation offers all this with an everything-as-code approach.
DevOps for infrastructure: Through VMware Aria Automation, companies can enable a powerful infrastructure as code platform with support for iterative development and infrastructure pipelining.
Kubernetes automation: Users can utilize VMware Aria Automation to automate the management of Kubernetes clusters and namespaces with support for vSphere with Tanzu.
Security operations: VMware Aria Automation facilitates event-driven automation to deliver full-service IT system compliance enforcement and vulnerability remediation.

VMware Aria Automation Features

VMware Aria Automation has various features that allow users to easily perform operations. Some of the solution's capacities include:

VMware Cloud agnostic template: This feature allows organizations to use a single cloud template to deploy with Infrastructure as a Code. Deployment options include VMware Cloud as well as major public cloud platforms such as Amazon AWS, Microsoft Azure, Google Cloud, and more.
Extensibility and customization: This VMware Aria Automation feature allows users to get full extensibility and customization. This can be achieved through Aria Automation Orchestrator, Action-Based Extensibility (ABX), and built-in integrations with common third-party tools.
Self-service multi-cloud: This feature enables users to request and provision infrastructure resources. It can be done across clouds using a unified and consistent Infrastructure as a Service (IaaS) consumption layer, idempotent REST API, and self-service catalog.
Centralized policies and governance: VMware Aria Automation offers a feature for users to manage multiple clouds with templatized cloud and policy definition, automated remediation, and cloud environment visibility.
Configuration management: Through this feature of the product, day 1 and 2 control can be achieved for virtualized and cloud environments. This can be done with intuitive configuration automation, compliance enforcement, and vulnerability remediation.
Infrastructure pipelining: Through this feature, organizations can access user-friendly release automation pipelines. They can be specifically tailored for CI/CD in infrastructure use cases.

VMware Aria Automation Benefits

VMware Aria Automation offers its users various benefits. Some of the biggest advantages that the solution brings to companies that utilize it include:

VMware Aria Automation provides faster time to market for companies through offloading manual tasks with advanced workflows and agile templating.
The solution offers high levels of security and control.
This product is suitable for beginners, as it offers a self-service consumption experience for users.
VMware Aria Automation accelerates innovation through Infrastructure as Code and DevOps principles.
The product provides users with flexibility, as it is compatible with the most popular public cloud solutions.
The solution offers fast deployment because of all natively integrated functions.

Reviews from Real Users

Awais J., CTO/CEO at a tech services company, likes VMware Aria Automation because it saves a lot of time, provides more visibility, and has extensive automation capabilities.

An IT consultant at a government rates VMware Aria Automation highly because the product gives you flexibility to analyze and consume resources.

Broadcom

Sample Customers

Our customers tell us regularly how Runecast benefits CIOs, CISOs, and both Security and Operations teams across verticals with a proactive approach that results in major time and cost savings, increased uptime and security standards complianceSuccess Highlight 75-85% troubleshooting time savings – Kiel Municipal Hospital90% time savings on reactive troubleshooting – Near East Bank90% time savings in upgrade planning– FLEXdata80% reduction in monthly incidents and issues – University of St Andrews78,000 EUR/year minimum annual cost savings – Notino100s of hours saved on security compliance with remediation scripts alone – Kiel Municipal Hospital75% time saved on troubleshooting and root cause analysis – de Volksbank

Rent-a-Center, Amway, Vistra Energy, Liberty Mutual

Buyer's Guide

Cloud Security Posture Management (CSPM)

February 2026

Download Free Report

Find out what your peers are saying about Wiz, Palo Alto Networks, SentinelOne and others in Cloud Security Posture Management (CSPM). Updated: February 2026.

DOWNLOAD NOW

884,873 professionals have used our research since 2012.

See our list of best Cloud Security Posture Management (CSPM) vendors.

We monitor all Cloud Security Posture Management (CSPM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.