Sold by: Horizon3.ai
Deployed on AWS
The NodeZero Platform by Horizon3.ai is an offensive security platform for continuous, production risk management for organizations worldwide. Customers use autonomous pentesting, emerging threat intelligence, threat detection, and unified risk reporting to stay ahead of bad actors.
4.4
Overview
The NodeZero Platform by Horizon3.ai is an offensive security platform for continuous, production risk management for organizations worldwide. Customers use autonomous pentesting, emerging threat intelligence, threat detection, and unified risk reporting to stay ahead of bad actors.
Highlights
- Suite of autonomous penetration and operational tests: assess risk across on-prem, cloud, and hybrid networks with unlimited scope and frequency.
- NodeZero Tripwires(TM): Use integrated threat deception and detection to auto-drop and alert on decoys against your most critical exposures discovered during tests. NodeZero Rapid Response(TM): Get ahead of emerging threats with proactive alerting on zero- and N-day threats that impact your networks.
- NodeZero Insights(TM): Continuously manage your threat exposure with unified trend data about your security posture, operational KPIs, and security controls efficacy.
Details
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Trust Center
Access real-time vendor security and compliance information through their Trust Center powered by Drata or Vanta. Review certifications and security standards before purchase.
Buyer guide
Gain valuable insights from real users who purchased this product, powered by PeerSpot.
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Description | Cost/12 months |
|---|---|---|
NodeZero Elite Package (500 Assets) - SKU: Pack-ST-Elite | Autonomous Pentesting Platform + Insights + Tripwires + Rapid Response | $42,500.00 |
NodeZero Pro Package (500 Assets) - SKU: Pack-ST-Pro | Autonomous Pentesting Platform + Tripwires + Rapid Response | $32,500.00 |
NodeZero Core Package (500 Assets) - SKU: Pack-ST-Core | Autonomous Pentesting Platform | $25,000.00 |
NodeZero Core to Pro Upgrade (500 Assets) - SKU: Upg-Core-Pro | Upgrade Core Package to Pro adding Tripwires + Rapid Response | $7,500.00 |
NodeZero Core to Elite Upgrade (500 Assets) - SKU: Upg-Core-Elite | Core to Elite Upgrade adding Tripwires + Rapid Response + Insights | $17,500.00 |
NodeZero Pro to Elite Upgrade (500 Assets) - SKU: Upg-Pro-Elite | Pro package upgrade adding Insights | $10,000.00 |
NodeZero Flex (1000 Assets) - SKU: N0-ST-Flex | Autonomous pentest for one-time test of an asset | $15,000.00 |
NodeZero Premium Support Gold (Up to 25K Assets) - SKU: N0-PS-GOLD | 24x7 support, Implementation up to 90 days, Customer Success Monthly | $100,000.00 |
Dimensions summary
You choose from three package tiers sized for 500 assets. The Core Package gives you the autonomous pentesting platform. The Pro Package adds Tripwires and Rapid Response. The Elite Package adds Insights on top of Pro. Three upgrade SKUs let you move up from Core or Pro without repurchasing. NodeZero Flex covers a one-time test of 1000 assets instead of an ongoing package. Premium Support Gold is a separate add-on covering up to 25,000 assets, providing 24x7 support, implementation, and monthly customer success. Each option is priced under a contract commitment.
Top-of-mind questions for buyers
An asset is a host or system in your network that NodeZero tests, such as servers, endpoints, and cloud or hybrid systems. Each package covers 500 assets. Flex covers 1000 assets for a single one-time test rather than an ongoing subscription.
The upgrade SKUs add capabilities without repurchasing your base package. Core to Pro adds Tripwires and Rapid Response. Core to Elite adds Tripwires, Rapid Response, and Insights. Pro to Elite adds Insights. Each upgrade applies to the same 500-asset scope as your package.
Premium Support Gold is a separate add-on covering up to 25,000 assets. It provides 24x7 support, implementation help for up to 90 days, and monthly customer success check-ins. Support requests can be made 24/7 through the platform or a customer support portal.
horizon3.ai+1
Helpful?
Vendor refund policy
All fees are non-cancellable and non-refundable except as required by law.
Custom pricing options
Request a private offer to receive a custom quote.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Resources
Vendor resources
Support
Vendor support
Purchases through AWS Marketplace utilize a self-service onboarding model - you deploy the solution in your AWS account using standard AWS Marketplace workflows and billing. After purchasing via Marketplace, a member of our team will contact you within 2 business days to provide access to your account.
Please reference our quick start guide at Docs.Horizon3.ai for guidance on setting up NodeZero. We offer 24/7 break fix support (https://horizon3.ai/support-policy/ ) for all technical and operational issues with the deployed product.
Should you require professional services - such as implementation guidance, architecture consulting, or custom integrations - please contact us directly at support@horizon3.ai
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
Smarter automation starts with better data. NodeZero MCP Server plugs exploitability intelligence into your existing AI ecosystem. Now your tools can prioritize, orchestrate, and validate based on attack paths proven to be exploitable, not guesswork.
C3 AI Applications for Federal Government include an intelligence integration platform for enhancing public safety
How well will your security hold up against an attack?
Think like an attacker and continuously identify potential security issues by running autonomous penetration tests.
NCC Group’s network penetration tests help you identify external or internal vulnerabilities before threat actors exploit them. As the security landscape evolves, so must our testing approach to simulate and evaluate these evolutions.
We combine the best parts of AI and automation with the expertise of our penetration testing consultants. We offer manual, autonomous, and hybrid testing approaches to adapt to your unique environment, ensuring the most efficient and effective testing for your needs.
Customer reviews
Glenn H.
Secure Reporting with Seamless Jira Integration
Reviewed on Aug 31, 2026
Review provided by G2
What do you like best about the product?
I like that NodeZero from Horizon3.ai runs in the background and gives us very clear reports on the most critical vulnerabilities. It helps us find our most critical vulnerabilities so that we can solve them quickly, like password issues allowing us to change our password policy. I appreciate how it helps us automatically put the issues to resolve into Jira, which aids in project management. The reports are clear and we can go back to them easily. I also like that we can retest fixes and add action items into Jira without any hassle. It helps secure our environment and even brings down the cost of our cyber insurance.
What do you dislike about the product?
I find the speed of running the first test pretty slow. It took us several weeks, maybe even a month or more for the test to complete because we ran every test as a beginning baseline. We also found the initial setup a bit time-consuming, but luckily, we had technicians from Horizon helping us set it up and get it running the first time.
What problems is the product solving and how is that benefiting you?
NodeZero from Horizon3.ai helps us identify and quickly resolve critical vulnerabilities in our network and web apps, reduce cyber insurance costs, and integrate seamlessly with Jira for project management.
Glenn Han
Prioritized testing has reduced critical vulnerabilities and improves our cybersecurity posture
Reviewed on Aug 31, 2026
Review provided by PeerSpot
What is our primary use case?
My main use case for The NodeZero Platform by Horizon3.ai is penetration testing for cybersecurity.
A specific example of how I have used The NodeZero Platform by Horizon3.ai for penetration testing is that we ran a full system test to find all our vulnerabilities, first starting within our network and now we are running web vulnerabilities.
Running these tests does take quite a while to complete for the first time since we are conducting every single test, and it actually took several weeks.
What is most valuable?
The best features The NodeZero Platform by Horizon3.ai offers include its ability to categorize vulnerabilities into critical, high, medium, and other levels, which gives us priority on which vulnerabilities to attack as fixes first.
That prioritization has helped my team in practice by allowing us to create Jira tickets to fix the vulnerabilities based on criticality.
The NodeZero Platform by Horizon3.ai has positively impacted my organization by improving our cybersecurity score; we have reduced many of our vulnerabilities and we are hoping that our cyber insurance will decrease due to the hardening that we have done.
Regarding specific numbers or metrics about our improved cybersecurity score, we probably went from a couple hundred critical vulnerabilities down to maybe just a dozen or so that we are still working on fixing.
What needs improvement?
The NodeZero Platform by Horizon3.ai could be improved if automated fixes could be implemented, which would be fantastic.
I rate it an eight because speeding up the penetration test time for running would get it closer to a ten for me.
For how long have I used the solution?
I have been using The NodeZero Platform by Horizon3.ai for about seven months.
What other advice do I have?
The NodeZero Platform by Horizon3.ai's AI capabilities demonstrate very good governance and security, which I like very much as it has been helpful to my team and it really allows us to tackle the critical vulnerabilities first.
The NodeZero Platform by Horizon3.ai has impressed me so far with the accuracy and reliability of its output; it has been very accurate.
My advice to others looking into using The NodeZero Platform by Horizon3.ai is that it is worth it, and I recommend making sure that when it is done running to go back to the cyber insurance company and let them know the updates made on the cybersecurity front.
I rate The NodeZero Platform by Horizon3.ai an eight overall.
Valerii G.
Transforms Pen Testing with Speed and Precision
Reviewed on Aug 28, 2026
Review provided by G2
What do you like best about the product?
I appreciate that NodeZero from Horizon3.ai is a fast and ongoing internal attack simulation solution that doesn't compromise production infrastructure. The automated proof of exploit capability is great because it generates verifiable attack chains without impacting business operations. I also find it valuable that Docker containers can be quickly deployed locally in minutes, and the impact maps clearly show credential harvesting chains across DC. Additionally, I like how rules applied to a firewall are instantly re-activated by automated re-testing. I find it convenient to push Vuln discovery reports directly into Jira for remediation tickets.
What do you dislike about the product?
I find that legacy subnet routers consume system resources excessively at random when trying to discover devices using an aggressive approach. Also, during network sweeps, the platform should offer fine-grained control over bandwidth.
What problems is the product solving and how is that benefiting you?
I use NodeZero for fast, ongoing internal attack simulations, replacing costly manual tests. It simulates attacks without disrupting operations and quickly deploys Docker containers. Impact maps show credential chains clearly, and firewall rules are verified by re-testing. This improves penetration testing efficiency and reliability.
Arthur G.
Replaced our slow traditional security auditing process completely
Reviewed on Aug 17, 2026
Review provided by G2
What do you like best about the product?
I like that NodeZero from Horizon3.ai is a safe real-exploit execution tool that doesn't crash services. It helps us focus by separating out proven vulnerable routes, making sure fixes for actionable compromises are handled quickly. I also appreciate the platform's step-by-step proof of compromise logs, which include captured hashes and command line outputs for each successful attack. The one-click post remediation verification feature is really handy, allowing us to retest specific targets without needing a full enterprise assessment.
What do you dislike about the product?
If our VLAN is highly segmented, and we have strict rate limits on our firewall, we often experience timeouts with large subnet discovery jobs. In a multi-homed asset scan, when complex host parsing logic is applied, we notice that secondary interfaces are dropped. Additionally, the initial setup was quite hard for us.
What problems is the product solving and how is that benefiting you?
I use NodeZero to automate penetration testing in our network, separating proven vulnerabilities for prompt fixes. It provides step-by-step proof of compromise logs and one-click post remediation verification to retest targets efficiently.
William Mckinley
Automated recurring pen tests have multiplied our small team’s impact and reduced costs
Reviewed on Aug 06, 2026
Review from a verified AWS customer
What is our primary use case?
My main use case for The NodeZero Platform by Horizon3.ai is pen testing.
A quick specific example of how I use The NodeZero Platform by Horizon3.ai for pen testing is pen testing the external IP of store locations.
I primarily use The NodeZero Platform by Horizon3.ai for a spot check and on-the-fly instances; otherwise, we utilize it for recurring scans that happen weekly.
What is most valuable?
The best features The NodeZero Platform by Horizon3.ai offers are the ability to set up recurring scans that are updated automatically based on current trends in the environment, which is taken up by Horizon rather than us having to manually update these scans ourselves if we were to do this on our own.
The automated updating of scans has been a huge value-add for us; we're a small cybersecurity team, so speed to value is the biggest thing to multiply the force of our small team, saving a lot of man-hours.
I trust the results that The NodeZero Platform by Horizon3.ai provides; there have been times where it's found a vulnerability that wasn't in our environment, but that was due to an IP address changing on our side, actually helping me follow up with our sysadmin team to verify that the vulnerability belonged to an IP address that we no longer owned, allowing me to remove it from the platform and assisting with a little bit of housekeeping as well.
The NodeZero Platform by Horizon3.ai improves remediation time; rather than us having to manually do these scans, which take a lot of man-hours, having them run in the background while we complete other work allows us to address other vulnerabilities that we may have in other aspects of our environment, saving us time overall.
What needs improvement?
The setting up of new runners in The NodeZero Platform by Horizon3.ai could be simplified a little bit; currently, it's kind of a three-step process where you have to set up the assets in a separate menu, then a separate menu to set up a template, and then you actually set up the runner, so it would be nice if from the runner creation screen it just took you through the whole process instead of having to navigate to three different tabs.
For how long have I used the solution?
I have been using The NodeZero Platform by Horizon3.ai for seven months.
What do I think about the stability of the solution?
The NodeZero Platform by Horizon3.ai is stable; I've not experienced any downtime other than when there were updates that needed to be pushed, but outside of that, no downtime, as the updates were quick.
What do I think about the scalability of the solution?
The NodeZero Platform by Horizon3.ai seems to be extremely scalable; we're able to add runners as needed, add and remove assets on the fly, and create more scheduled scans whenever needed, appearing to be infinitely scalable for our use case.
How are customer service and support?
Customer support for The NodeZero Platform by Horizon3.ai has been phenomenal; they've been extremely fast to respond to any tickets that I've entered and have been able to provide solutions extremely fast.
I would rate the customer support a 10.
Which solution did I use previously and why did I switch?
We used vPenTest previously, and we switched for better cost savings as well as a wider breadth of features.
How was the initial setup?
My advice to others looking into using The NodeZero Platform by Horizon3.ai is to recommend doing an onboarding if there is not one already included in the pricing for purchasing the platform because it takes a little bit to get things up and running, but once you do, it's extremely smooth sailing and self-sufficient for the most part; however, the initial setup can be a little difficult to do on your own.
What was our ROI?
We would probably need another employee, so ROI could be upwards of $70,000 a year based on how much it would cost to hire an analyst.
The NodeZero Platform by Horizon3.ai has helped reduce our pen testing costs; we had another vendor that we were utilizing before we went with The NodeZero Platform by Horizon3.ai, and it resulted in about a 20% savings.
What's my experience with pricing, setup cost, and licensing?
I joined the organization after this contract was in place but was involved in the next round regarding pricing, setup cost, and licensing.
Which other solutions did I evaluate?
Before choosing The NodeZero Platform by Horizon3.ai, I evaluated only vPenTest.
What other advice do I have?
On a scale of 1 to 10, I would rate The NodeZero Platform by Horizon3.ai probably an eight, sometimes a nine.
I choose an eight because the UI for setting up a new runner, as I discussed previously, just making that a little smoother would definitely get it up to a nine, and although there have been a few times where I've needed support's intervention, support has been extremely speedy in both their response and also resolution of issues, so I'm not going to dock more points for that; they've been great.
Regarding The NodeZero Platform by Horizon3.ai's AI capabilities, I haven't used those too much in particular, other than what's automatically integrated into the platform, which automatically detects potential vulnerabilities in whatever particular environment I'm pitting it against, making it super helpful since it's analyzing things at a much faster rate than a human could.
The NodeZero Platform by Horizon3.ai's endpoint security effectiveness feature gives a nice breakdown of what threat it's displaying, allowing me to do further research into it; we've had a couple of issues that have sprung up related to IP cameras, discovering again that we don't have those cameras in our environment due to an IP address that no longer belonged to us.
The NodeZero Platform by Horizon3.ai's real attack capabilities have mainly shown that we're 100% clean, which is great to hear, primarily used to show that we have a clean report to our C-suite, essentially demonstrating that all the cybersecurity measures we have in place are appropriately protecting us from threats that are active in the landscape.
I have not utilized the solution's feature that allows security teams to fix and retest vulnerabilities instantly yet.
I rate The NodeZero Platform by Horizon3.ai an overall score of eight out of ten.
Which deployment model are you using for this solution?
Public Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Amazon Web Services (AWS)