The NodeZero Platform by Horizon3.ai is an offensive security platform for continuous, production risk management for organizations worldwide. Customers use autonomous pentesting, emerging threat intelligence, threat detection, and unified risk reporting to stay ahead of bad actors.
The NodeZero Platform by Horizon3.ai is an offensive security platform for continuous, production risk management for organizations worldwide. Customers use autonomous pentesting, emerging threat intelligence, threat detection, and unified risk reporting to stay ahead of bad actors.
Highlights
Suite of autonomous penetration and operational tests: assess risk across on-prem, cloud, and hybrid networks with unlimited scope and frequency.
NodeZero Tripwires(TM): Use integrated threat deception and detection to auto-drop and alert on decoys against your most critical exposures discovered during tests.
NodeZero Rapid Response(TM): Get ahead of emerging threats with proactive alerting on zero- and N-day threats that impact your networks.
NodeZero Insights(TM): Continuously manage your threat exposure with unified trend data about your security posture, operational KPIs, and security controls efficacy.
Access real-time vendor security and compliance information through their Trust Center powered by Drata or Vanta. Review certifications and security standards before purchase.
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
You choose from three package tiers sized for 500 assets. The Core Package gives you the autonomous pentesting platform. The Pro Package adds Tripwires and Rapid Response. The Elite Package adds Insights on top of Pro. Three upgrade SKUs let you move up from Core or Pro without repurchasing. NodeZero Flex covers a one-time test of 1000 assets instead of an ongoing package. Premium Support Gold is a separate add-on covering up to 25,000 assets, providing 24x7 support, implementation, and monthly customer success. Each option is priced under a contract commitment.
Top-of-mind questions for buyers
What counts as one asset for the 500-asset packages and the 1000-asset Flex option?
An asset is a host or system in your network that NodeZero tests, such as servers, endpoints, and cloud or hybrid systems. Each package covers 500 assets. Flex covers 1000 assets for a single one-time test rather than an ongoing subscription.
How do the upgrade SKUs work if I already own a Core or Pro package?
The upgrade SKUs add capabilities without repurchasing your base package. Core to Pro adds Tripwires and Rapid Response. Core to Elite adds Tripwires, Rapid Response, and Insights. Pro to Elite adds Insights. Each upgrade applies to the same 500-asset scope as your package.
What does the Premium Support Gold add-on cover, and does it require a package?
Premium Support Gold is a separate add-on covering up to 25,000 assets. It provides 24x7 support, implementation help for up to 90 days, and monthly customer success check-ins. Support requests can be made 24/7 through the platform or a customer support portal.
horizon3.ai+1
Helpful?
Vendor refund policy
All fees are non-cancellable and non-refundable except as required by law.
Request a private offer to receive a custom quote.
How can we make this page better?
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Purchases through AWS Marketplace utilize a self-service onboarding model - you deploy the solution in your AWS account using standard AWS Marketplace workflows and billing. After purchasing via Marketplace, a member of our team will contact you within 2 business days to provide access to your account.
Please reference our quick start guide at Docs.Horizon3.ai for guidance on setting up NodeZero.
We offer 24/7 break fix support (https://horizon3.ai/support-policy/) for all technical and operational issues with the deployed product.
Should you require professional services - such as implementation guidance, architecture consulting, or custom integrations - please contact us directly at support@horizon3.ai
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Smarter automation starts with better data. NodeZero MCP Server plugs exploitability intelligence into your existing AI ecosystem. Now your tools can prioritize, orchestrate, and validate based on attack paths proven to be exploitable, not guesswork.
How well will your security hold up against an attack?
Think like an attacker and continuously identify potential security issues by running autonomous penetration tests.
High Plains Computing (HPC) offers custom generative AI solutions by fine-tuning pre-existing language models with your proprietary data and seamlessly integrating them into applications to enhance your company's performance and innovation. Additionally, HPC ensures the security of your private data during and after training, reducing the risk of leakage.
Real-time attack simulations have accelerated our sales cycle and increased customer trust
Reviewed on Sep 13, 2026
Review provided by PeerSpot
What is our primary use case?
My main use case for The NodeZero Platform by Horizon3.ai is to demonstrate the product for customers.
For my customer demonstrations, we use a paid dummy company with AI and conduct penetration testing on that company to show that we perform a real-time scan of the company's data and infrastructure using Horizon3.ai.
Customers typically react with amazement when they see the real-time scan in action, and their questions vary considerably as they are impressed by the quality, quantity, and speed of the test.
How has it helped my organization?
The NodeZero Platform by Horizon3.ai has positively impacted my organization as we resell it to customers, and when we conduct a demo, customers are satisfied and want to purchase. This is our main purpose for using the platform. We do not have a large infrastructure ourselves since we work from home and are only three people in the company.
Using The NodeZero Platform by Horizon3.ai has helped us close more deals and speed up our sales cycle, as it is well-known that we sell to customers within the Horizon company through the partner portal and deal registration.
What is most valuable?
The best features that The NodeZero Platform by Horizon3.ai offers are the manageability of the product, the overview, and the report.
What stands out to me about the overview and the report features is the clarity on what to do as the first step to minimize the attack surface.
What needs improvement?
I do not know how The NodeZero Platform by Horizon3.ai can be improved at this point, as it is a very comprehensive product, and I cannot say that I am missing anything.
For how long have I used the solution?
I have been using The NodeZero Platform by Horizon3.ai for a little over a year.
What do I think about the stability of the solution?
The NodeZero Platform by Horizon3.ai is stable.
What do I think about the scalability of the solution?
The scalability of The NodeZero Platform by Horizon3.ai is simple, and it is easy to scale up.
How are customer service and support?
We have not had any need for customer support.
Which solution did I use previously and why did I switch?
We did not previously use a different solution.
What was our ROI?
We have seen a return on investment with increased sales. I cannot provide specific numbers, but we do have increased sales.
What's my experience with pricing, setup cost, and licensing?
My experience with pricing, setup cost, and licensing has been that we do not have any cost as we are resellers.
Which other solutions did I evaluate?
We did not evaluate other options before choosing The NodeZero Platform by Horizon3.ai.
What other advice do I have?
My advice for others looking into using The NodeZero Platform by Horizon3.ai is to develop a good plan for your IP addresses and infrastructure and place The NodeZero Platform by Horizon3.ai in the correct subnet at the beginning to get the most information from the machines. I would rate this product a 10 out of 10.
Glenn H.
Secure Reporting with Seamless Jira Integration
Reviewed on Aug 31, 2026
Review provided by G2
What do you like best about the product?
I like that NodeZero from Horizon3.ai runs in the background and gives us very clear reports on the most critical vulnerabilities. It helps us find our most critical vulnerabilities so that we can solve them quickly, like password issues allowing us to change our password policy. I appreciate how it helps us automatically put the issues to resolve into Jira, which aids in project management. The reports are clear and we can go back to them easily. I also like that we can retest fixes and add action items into Jira without any hassle. It helps secure our environment and even brings down the cost of our cyber insurance.
What do you dislike about the product?
I find the speed of running the first test pretty slow. It took us several weeks, maybe even a month or more for the test to complete because we ran every test as a beginning baseline. We also found the initial setup a bit time-consuming, but luckily, we had technicians from Horizon helping us set it up and get it running the first time.
What problems is the product solving and how is that benefiting you?
NodeZero from Horizon3.ai helps us identify and quickly resolve critical vulnerabilities in our network and web apps, reduce cyber insurance costs, and integrate seamlessly with Jira for project management.
Glenn Han
Prioritized testing has reduced critical vulnerabilities and improves our cybersecurity posture
Reviewed on Aug 31, 2026
Review provided by PeerSpot
What is our primary use case?
My main use case for The NodeZero Platform by Horizon3.ai is penetration testing for cybersecurity.
A specific example of how I have used The NodeZero Platform by Horizon3.ai for penetration testing is that we ran a full system test to find all our vulnerabilities, first starting within our network and now we are running web vulnerabilities.
Running these tests does take quite a while to complete for the first time since we are conducting every single test, and it actually took several weeks.
What is most valuable?
The best features The NodeZero Platform by Horizon3.ai offers include its ability to categorize vulnerabilities into critical, high, medium, and other levels, which gives us priority on which vulnerabilities to attack as fixes first.
That prioritization has helped my team in practice by allowing us to create Jira tickets to fix the vulnerabilities based on criticality.
The NodeZero Platform by Horizon3.ai has positively impacted my organization by improving our cybersecurity score; we have reduced many of our vulnerabilities and we are hoping that our cyber insurance will decrease due to the hardening that we have done.
Regarding specific numbers or metrics about our improved cybersecurity score, we probably went from a couple hundred critical vulnerabilities down to maybe just a dozen or so that we are still working on fixing.
What needs improvement?
The NodeZero Platform by Horizon3.ai could be improved if automated fixes could be implemented, which would be fantastic.
I rate it an eight because speeding up the penetration test time for running would get it closer to a ten for me.
For how long have I used the solution?
I have been using The NodeZero Platform by Horizon3.ai for about seven months.
What other advice do I have?
The NodeZero Platform by Horizon3.ai's AI capabilities demonstrate very good governance and security, which I like very much as it has been helpful to my team and it really allows us to tackle the critical vulnerabilities first.
The NodeZero Platform by Horizon3.ai has impressed me so far with the accuracy and reliability of its output; it has been very accurate.
My advice to others looking into using The NodeZero Platform by Horizon3.ai is that it is worth it, and I recommend making sure that when it is done running to go back to the cyber insurance company and let them know the updates made on the cybersecurity front.
I rate The NodeZero Platform by Horizon3.ai an eight overall.
Valerii G.
Transforms Pen Testing with Speed and Precision
Reviewed on Aug 28, 2026
Review provided by G2
What do you like best about the product?
I appreciate that NodeZero from Horizon3.ai is a fast and ongoing internal attack simulation solution that doesn't compromise production infrastructure. The automated proof of exploit capability is great because it generates verifiable attack chains without impacting business operations. I also find it valuable that Docker containers can be quickly deployed locally in minutes, and the impact maps clearly show credential harvesting chains across DC. Additionally, I like how rules applied to a firewall are instantly re-activated by automated re-testing. I find it convenient to push Vuln discovery reports directly into Jira for remediation tickets.
What do you dislike about the product?
I find that legacy subnet routers consume system resources excessively at random when trying to discover devices using an aggressive approach. Also, during network sweeps, the platform should offer fine-grained control over bandwidth.
What problems is the product solving and how is that benefiting you?
I use NodeZero for fast, ongoing internal attack simulations, replacing costly manual tests. It simulates attacks without disrupting operations and quickly deploys Docker containers. Impact maps show credential chains clearly, and firewall rules are verified by re-testing. This improves penetration testing efficiency and reliability.
Arthur G.
Replaced our slow traditional security auditing process completely
Reviewed on Aug 17, 2026
Review provided by G2
What do you like best about the product?
I like that NodeZero from Horizon3.ai is a safe real-exploit execution tool that doesn't crash services. It helps us focus by separating out proven vulnerable routes, making sure fixes for actionable compromises are handled quickly. I also appreciate the platform's step-by-step proof of compromise logs, which include captured hashes and command line outputs for each successful attack. The one-click post remediation verification feature is really handy, allowing us to retest specific targets without needing a full enterprise assessment.
What do you dislike about the product?
If our VLAN is highly segmented, and we have strict rate limits on our firewall, we often experience timeouts with large subnet discovery jobs. In a multi-homed asset scan, when complex host parsing logic is applied, we notice that secondary interfaces are dropped. Additionally, the initial setup was quite hard for us.
What problems is the product solving and how is that benefiting you?
I use NodeZero to automate penetration testing in our network, separating proven vulnerabilities for prompt fixes. It provides step-by-step proof of compromise logs and one-click post remediation verification to retest targets efficiently.