Sold by: Horizon3.ai
Deployed on AWS
The NodeZero Platform by Horizon3.ai is an offensive security platform for continuous, production risk management for organizations worldwide. Customers use autonomous pentesting, emerging threat intelligence, threat detection, and unified risk reporting to stay ahead of bad actors.
4.5
Overview
The NodeZero Platform by Horizon3.ai is an offensive security platform for continuous, production risk management for organizations worldwide. Customers use autonomous pentesting, emerging threat intelligence, threat detection, and unified risk reporting to stay ahead of bad actors.
Highlights
- Suite of autonomous penetration and operational tests: assess risk across on-prem, cloud, and hybrid networks with unlimited scope and frequency.
- NodeZero Tripwires(TM): Use integrated threat deception and detection to auto-drop and alert on decoys against your most critical exposures discovered during tests. NodeZero Rapid Response(TM): Get ahead of emerging threats with proactive alerting on zero- and N-day threats that impact your networks.
- NodeZero Insights(TM): Continuously manage your threat exposure with unified trend data about your security posture, operational KPIs, and security controls efficacy.
Details
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Trust Center
Access real-time vendor security and compliance information through their Trust Center powered by Drata or Vanta. Review certifications and security standards before purchase.
Buyer guide
Gain valuable insights from real users who purchased this product, powered by PeerSpot.
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Description | Cost/12 months |
|---|---|---|
NodeZero Elite Package (500 Assets) - SKU: Pack-ST-Elite | Autonomous Pentesting Platform + Insights + Tripwires + Rapid Response | $42,500.00 |
NodeZero Pro Package (500 Assets) - SKU: Pack-ST-Pro | Autonomous Pentesting Platform + Tripwires + Rapid Response | $32,500.00 |
NodeZero Core Package (500 Assets) - SKU: Pack-ST-Core | Autonomous Pentesting Platform | $25,000.00 |
NodeZero Core to Pro Upgrade (500 Assets) - SKU: Upg-Core-Pro | Upgrade Core Package to Pro adding Tripwires + Rapid Response | $7,500.00 |
NodeZero Core to Elite Upgrade (500 Assets) - SKU: Upg-Core-Elite | Core to Elite Upgrade adding Tripwires + Rapid Response + Insights | $17,500.00 |
NodeZero Pro to Elite Upgrade (500 Assets) - SKU: Upg-Pro-Elite | Pro package upgrade adding Insights | $10,000.00 |
NodeZero Flex (1000 Assets) - SKU: N0-ST-Flex | Autonomous pentest for one-time test of an asset | $15,000.00 |
NodeZero Premium Support Gold (Up to 25K Assets) - SKU: N0-PS-GOLD | 24x7 support, Implementation up to 90 days, Customer Success Monthly | $100,000.00 |
NodeZero WebApp | NodeZero WebApp | $10,000.00 |
Dimensions summary
This listing offers three main packages sized for 500 assets: Core gives you the Autonomous Pentesting Platform, Pro adds Tripwires and Rapid Response, and Elite adds Insights on top of Pro. Three upgrade SKUs let you move up between tiers—Core to Pro, Core to Elite, or Pro to Elite—by adding the missing capabilities. Separate options include Flex, a one-time test covering 1,000 assets, and the WebApp product for web application testing. Premium Support Gold covers up to 25,000 assets with 24x7 support and onboarding. You pick packages, upgrades, and support based on asset counts and needs.
Top-of-mind questions for buyers
An asset is a device or host NodeZero can discover and test in your network, such as servers and endpoints. The Core, Pro, and Elite packages each cover up to 500 assets. Flex covers a one-time test of up to 1,000 assets. Premium Support Gold scales up to 25,000 assets.
Flex is a one-time autonomous pentest covering up to 1,000 assets, meant for a single test of an asset. The Core, Pro, and Elite packages provide ongoing platform access for up to 500 assets, letting you schedule and run tests continuously rather than testing just once.
The Core to Pro upgrade adds Tripwires and Rapid Response. The Core to Elite upgrade adds Tripwires, Rapid Response, and Insights. The Pro to Elite upgrade adds Insights only. Each upgrade covers 500 assets and layers the missing capabilities onto your existing package rather than replacing it.
horizon3.ai+3
Helpful?
Vendor refund policy
All fees are non-cancellable and non-refundable except as required by law.
Custom pricing options
Request a private offer to receive a custom quote.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Resources
Vendor resources
Support
Vendor support
Purchases through AWS Marketplace utilize a self-service onboarding model - you deploy the solution in your AWS account using standard AWS Marketplace workflows and billing. After purchasing via Marketplace, a member of our team will contact you within 2 business days to provide access to your account.
Please reference our quick start guide at Docs.Horizon3.ai for guidance on setting up NodeZero. We offer 24/7 break fix support (https://horizon3.ai/support-policy/ ) for all technical and operational issues with the deployed product.
Should you require professional services - such as implementation guidance, architecture consulting, or custom integrations - please contact us directly at support@horizon3.ai
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
Smarter automation starts with better data. NodeZero MCP Server plugs exploitability intelligence into your existing AI ecosystem. Now your tools can prioritize, orchestrate, and validate based on attack paths proven to be exploitable, not guesswork.
C3 AI Applications for Federal Government include an intelligence integration platform for enhancing public safety
How well will your security hold up against an attack?
Think like an attacker and continuously identify potential security issues by running autonomous penetration tests.
NCC Group’s network penetration tests help you identify external or internal vulnerabilities before threat actors exploit them. As the security landscape evolves, so must our testing approach to simulate and evaluate these evolutions.
We combine the best parts of AI and automation with the expertise of our penetration testing consultants. We offer manual, autonomous, and hybrid testing approaches to adapt to your unique environment, ensuring the most efficient and effective testing for your needs.
Customer reviews
Chris Lammering
Continuous pentesting has transformed our services and now delivers measurable risk reduction
Reviewed on Sep 27, 2026
Review provided by PeerSpot
What is our primary use case?
We use The NodeZero Platform by Horizon3.ai to perform pentests for our customers, and we have built services around it so that customers can book a one-off pentest or continuous pentesting with us. We call that Pitas or label it Security Validation as a Service, and that way customers get quarterly feedback with a 'to-fix' list from us with recommended actions. We can also run pentests on a monthly basis. We have built many services around The NodeZero Platform by Horizon3.ai and actively use it as a component for our pentesting services.
We had a customer who got a new network and had a huge infrastructure overhaul, and just wanted to know how effective everything we had done actually was. We placed The NodeZero Platform by Horizon3.ai as a so-called runner, then carried out a pentest, and also played through various scenarios, such as grey-box testing—for example, how far can I get if I have credentials of an admin, or how far can I get if I have credentials of a normal user. We also did black-box testing, where we simply plugged ourselves in, got an IP address, and then saw how far we could get. We have also used it in customer projects to see how good the Active Directory password strength is—that is, how good the password policies are configured in an infrastructure. We did that with the ADPA, the Active Directory Password Assessment. We have already used it in various scenarios and in different variants. The overall experience is always positive, and the feedback is always positive.
We always offer it in different flavors for the customer. We also really listen to the customer and ask them what they really want. Do they want an internal pentest, do they want an external pentest? Maybe they also want a phishing assessment. It is really based on how the customer would like to have it for themselves at that moment.
How has it helped my organization?
The NodeZero Platform by Horizon3.ai has had a positive effect on our company and our customers in that, firstly, we can save the customer a lot of money, because a single pentest is also very expensive. We can react relatively quickly to customer requirements. If a customer wants a pentest, we can manage to start one within fifteen minutes, assuming the customer is correspondingly flexible. By running continuous pentests with The NodeZero Platform by Horizon3.ai and thanks to the functionality and logic behind it, we can cover a lot of scenarios, and that in turn creates added value for the customer, because if they use it continuously they always know at any given time how their attack surface is shifting.
We had a concrete example with a customer where we really started from a very catastrophic state, and they had a lot of vulnerabilities. I remember that we had about 2,300 findings. We then created a report, sat down with the customer and basically said, 'We now need to harden your environment.' After the first retest, we still had about 1,000 of those vulnerabilities, because a lot could already be fixed. After the third retest we were down to just ten vulnerabilities, where these ten vulnerabilities were also due to the fact that there had been another patch day or that some new vulnerabilities had been published and we and the customer had not yet had the opportunity to patch them because the vendor had not provided a patch yet. We were able to harden a customer environment relatively quickly and also to see whether everything we had done was actually bearing fruit.
What is most valuable?
The best features of The NodeZero Platform by Horizon3.ai are that Horizon3 AI is simply very good because it is deployable on pretty low-level hardware. We can deploy it in a VM and integrate it into an infrastructure relatively quickly. Another really good point is its simplicity. We can run a pentest again and again. One of the most useful features that Horizon3 AI offers us is the so-called One-Click Verify. If we have tested something and the customer has a vulnerability, we can verify with one click, once they have fixed it, whether this fix actually took effect—whether we have been able to turn off the corresponding attack graphs and all of that. Another advantage is the presentation and the explanation. We do not just hand the customer a pentest report, but we also really give the customer an understanding of the impact on their business. How severe is the whole thing? If I have a vulnerability with a score of ten point zero, how badly will that hit? Or perhaps another vulnerability with a score of four point zero is actually twice as bad. That is basically the advantage for the customer.
For my day-to-day work, I would say the clear, well-structured reports from The NodeZero Platform by Horizon3.ai are excellent. As already mentioned, we can really tell the customer, 'You have a problem there, and this problem has this or that weight,' and it is not just a matter of throwing raw vulnerabilities at them. Instead, the customer truly knows how bad the whole thing actually is.
What is also really good is the huge range of functions that we get for the price with The NodeZero Platform by Horizon3.ai. If we compare it with competitors, we get quite a lot for our money. With other competitors, we have to buy one base license first, and then we have to buy a lot of additional licenses. With The NodeZero Platform by Horizon3.ai, it is different. We get a large feature set right away, and at a pretty good price.
What needs improvement?
In my opinion, The NodeZero Platform by Horizon3.ai could be improved by continuing to add new features, such as cloud pentesting, which is currently one of the buzzwords. Kubernetes has just been added. I think what is important for Horizon is simply that the vendor continues to be so committed to providing a platform that is that advanced. I think that is the only point where Horizon can continue to evolve. Everything is already very good as it is.
The small things that I had with The NodeZero Platform by Horizon3.ai have now been fixed, so everything is good. I also think it is very good that we can configure and adjust so many things ourselves.
For how long have I used the solution?
We have been a partner of Horizon3 AI for just under a year, and we have been actively using The NodeZero Platform by Horizon3.ai for about a year to a year and a half. Before that, we had taken a look at it several times.
What do I think about the stability of the solution?
So far with The NodeZero Platform by Horizon3.ai, we have not been able to identify any instabilities. Everything has always run stably.
What do I think about the scalability of the solution?
The scalability of The NodeZero Platform by Horizon3.ai is very good because if we have purchased licenses, we can also buy additional licenses. It is scalable. We can scale it by IPs, so to speak. That means we have a way to bundle a package for every company. We can go from ten or more. The scaling is really very good. We can simply buy one license per asset, and if we grow, we can grow our licenses. If we become smaller, we can of course scale down.
How are customer service and support?
My experience with The NodeZero Platform by Horizon3.ai's customer support has been very good. We almost always get an answer relatively quickly, and we also quickly have someone on the phone if something breaks or if we have a question. I really cannot say anything negative about that.
Which solution did I use previously and why did I switch?
We previously used another solution that was similar—that was Pentera in this case. We simply changed partners because we also wanted to go to market with a new solution.
How was the initial setup?
So far, everything with The NodeZero Platform by Horizon3.ai has actually been positive. The dashboards and all the overviews we have are really just very good and very detailed. We always get a contact person at our side who guides us through everything. We have had a lot of tech demos and also many discussions with Horizon, so that we were then able to use the cloud platform relatively quickly.
What was our ROI?
Since we use The NodeZero Platform by Horizon3.ai with our customers, I cannot give any concrete figures yet. The feedback from customers is indeed always positive in that regard.
What's my experience with pricing, setup cost, and licensing?
The licensing of The NodeZero Platform by Horizon3.ai is actually relatively simple: one asset equals one license, or one IP equals one license. The pricing is good and is always positively received by our customers.
Which other solutions did I evaluate?
We did evaluate other solutions before deciding on The NodeZero Platform by Horizon3.ai. These were Pico Security and Pentest Tools, and Horizon ended up winning because we realized that the approach with the simple deployment and the pricing are better than with the competitors. Also, Horizon puts a lot of focus on AI, which simply shows that the solution is future-proof.
What other advice do I have?
I would actually give The NodeZero Platform by Horizon3.ai a ten out of ten.
I am giving it a ten because we have come from other vendors that do something similar, and we simply noticed that the collaboration with The NodeZero Platform by Horizon3.ai or Horizon3 AI is really very good. We are in regular contact. Especially as a partner or as a customer, we really have the feeling that we are heard by the partner. That is really worth a lot. If we have real technical problems, we always get support immediately. We just write to our contact at Horizon about a problem, and we get feedback right away. I have experienced it differently before, so this positive experience has really stuck with me.
The NodeZero Platform by Horizon3.ai can only be used as a cloud Software as a Service solution. That is really very good, also from an architectural perspective, because we are mostly with our customers in Germany and in the EU. It is very good that a tenant is only in Europe, so that we have data sovereignty in terms of GDPR. That is definitely a very big advantage for our German customers, for example, that the data is stored in Frankfurt. The general way data is handled is very interesting. They have really thought everything through down to the smallest detail, so that a pentest report or the data that exists for a pentest is very confidential, and we really have to ensure that the data is also removed again relatively quickly and cleanly afterwards.
We actually use the tool provided by The NodeZero Platform by Horizon3.ai.
I would say about The NodeZero Platform by Horizon3.ai: take a look at the solution and look at it for yourselves, and then you will be just as excited as we are. I am rating this product a ten because the collaboration with Horizon3 AI is really very good, and we have received excellent support throughout our partnership.
Robert F.
Essential internal threat assessment
Reviewed on Sep 17, 2026
Review provided by G2
What do you like best about the product?
I appreciate how NodeZero from Horizon3.ai automates penetration testing and reduces the waiting time for finding network vulnerabilities compared to manual security audits. The automated attack path chaining is really useful to find complex lateral movement opportunities within interconnected domain controllers. It's also great that I can verify proof of exploits with screenshots to provide undeniable evidence for compliance. Additionally, the host discoverability engine quickly identifies unmanaged IoT devices right after deployment, which is super useful for security assessments. I also find it easy to integrate real-time exploit information with Splunk for immediate SOC incident responses. The initial setup was easy, which is definitely a plus.
What do you dislike about the product?
When large network topology graphs are displayed in a web application during an active assessment, the interface completely freezes. Additionally, the critical port data gets lost when exporting summaries using the default report templates. Also, sensitive modules for password spraying should be throttled more granularly to prevent overwhelming the identity provider with requests, which compromises the effectiveness of the password sprayer.
What problems is the product solving and how is that benefiting you?
I use NodeZero from Horizon3.ai to avoid waiting months for manual security audits by automating penetration testing. It identifies vulnerabilities without disrupting servers, provides undeniable evidence for compliance, and discovers unmanaged IoT devices quickly.
Tom Kofoed-Frederiksen
Real-time attack simulations have accelerated our sales cycle and increased customer trust
Reviewed on Sep 13, 2026
Review provided by PeerSpot
What is our primary use case?
My main use case for The NodeZero Platform by Horizon3.ai is to demonstrate the product for customers.
For my customer demonstrations, we use a paid dummy company with AI and conduct penetration testing on that company to show that we perform a real-time scan of the company's data and infrastructure using Horizon3.ai.
Customers typically react with amazement when they see the real-time scan in action, and their questions vary considerably as they are impressed by the quality, quantity, and speed of the test.
How has it helped my organization?
The NodeZero Platform by Horizon3.ai has positively impacted my organization as we resell it to customers, and when we conduct a demo, customers are satisfied and want to purchase. This is our main purpose for using the platform. We do not have a large infrastructure ourselves since we work from home and are only three people in the company.
Using The NodeZero Platform by Horizon3.ai has helped us close more deals and speed up our sales cycle, as it is well-known that we sell to customers within the Horizon company through the partner portal and deal registration.
What is most valuable?
The best features that The NodeZero Platform by Horizon3.ai offers are the manageability of the product, the overview, and the report.
What stands out to me about the overview and the report features is the clarity on what to do as the first step to minimize the attack surface.
What needs improvement?
I do not know how The NodeZero Platform by Horizon3.ai can be improved at this point, as it is a very comprehensive product, and I cannot say that I am missing anything.
For how long have I used the solution?
I have been using The NodeZero Platform by Horizon3.ai for a little over a year.
What do I think about the stability of the solution?
The NodeZero Platform by Horizon3.ai is stable.
What do I think about the scalability of the solution?
The scalability of The NodeZero Platform by Horizon3.ai is simple, and it is easy to scale up.
How are customer service and support?
We have not had any need for customer support.
Which solution did I use previously and why did I switch?
We did not previously use a different solution.
What was our ROI?
We have seen a return on investment with increased sales. I cannot provide specific numbers, but we do have increased sales.
What's my experience with pricing, setup cost, and licensing?
My experience with pricing, setup cost, and licensing has been that we do not have any cost as we are resellers.
Which other solutions did I evaluate?
We did not evaluate other options before choosing The NodeZero Platform by Horizon3.ai.
What other advice do I have?
My advice for others looking into using The NodeZero Platform by Horizon3.ai is to develop a good plan for your IP addresses and infrastructure and place The NodeZero Platform by Horizon3.ai in the correct subnet at the beginning to get the most information from the machines. I would rate this product a 10 out of 10.
Glenn Han
Prioritized testing has reduced critical vulnerabilities and improves our cybersecurity posture
Reviewed on Aug 31, 2026
Review provided by PeerSpot
What is our primary use case?
My main use case for The NodeZero Platform by Horizon3.ai is penetration testing for cybersecurity.
A specific example of how I have used The NodeZero Platform by Horizon3.ai for penetration testing is that we ran a full system test to find all our vulnerabilities, first starting within our network and now we are running web vulnerabilities.
Running these tests does take quite a while to complete for the first time since we are conducting every single test, and it actually took several weeks.
What is most valuable?
The best features The NodeZero Platform by Horizon3.ai offers include its ability to categorize vulnerabilities into critical, high, medium, and other levels, which gives us priority on which vulnerabilities to attack as fixes first.
That prioritization has helped my team in practice by allowing us to create Jira tickets to fix the vulnerabilities based on criticality.
The NodeZero Platform by Horizon3.ai has positively impacted my organization by improving our cybersecurity score; we have reduced many of our vulnerabilities and we are hoping that our cyber insurance will decrease due to the hardening that we have done.
Regarding specific numbers or metrics about our improved cybersecurity score, we probably went from a couple hundred critical vulnerabilities down to maybe just a dozen or so that we are still working on fixing.
What needs improvement?
The NodeZero Platform by Horizon3.ai could be improved if automated fixes could be implemented, which would be fantastic.
I rate it an eight because speeding up the penetration test time for running would get it closer to a ten for me.
For how long have I used the solution?
I have been using The NodeZero Platform by Horizon3.ai for about seven months.
What other advice do I have?
The NodeZero Platform by Horizon3.ai's AI capabilities demonstrate very good governance and security, which I like very much as it has been helpful to my team and it really allows us to tackle the critical vulnerabilities first.
The NodeZero Platform by Horizon3.ai has impressed me so far with the accuracy and reliability of its output; it has been very accurate.
My advice to others looking into using The NodeZero Platform by Horizon3.ai is that it is worth it, and I recommend making sure that when it is done running to go back to the cyber insurance company and let them know the updates made on the cybersecurity front.
I rate The NodeZero Platform by Horizon3.ai an eight overall.
Valerii G.
Transforms Pen Testing with Speed and Precision
Reviewed on Aug 28, 2026
Review provided by G2
What do you like best about the product?
I appreciate that NodeZero from Horizon3.ai is a fast and ongoing internal attack simulation solution that doesn't compromise production infrastructure. The automated proof of exploit capability is great because it generates verifiable attack chains without impacting business operations. I also find it valuable that Docker containers can be quickly deployed locally in minutes, and the impact maps clearly show credential harvesting chains across DC. Additionally, I like how rules applied to a firewall are instantly re-activated by automated re-testing. I find it convenient to push Vuln discovery reports directly into Jira for remediation tickets.
What do you dislike about the product?
I find that legacy subnet routers consume system resources excessively at random when trying to discover devices using an aggressive approach. Also, during network sweeps, the platform should offer fine-grained control over bandwidth.
What problems is the product solving and how is that benefiting you?
I use NodeZero for fast, ongoing internal attack simulations, replacing costly manual tests. It simulates attacks without disrupting operations and quickly deploys Docker containers. Impact maps show credential chains clearly, and firewall rules are verified by re-testing. This improves penetration testing efficiency and reliability.