Horizon3.ai NodeZero Platform logo

    Horizon3.ai NodeZero Platform

    The NodeZero Platform by Horizon3.ai is an offensive security platform for continuous, production risk management for organizations worldwide. Customers use autonomous pentesting, emerging threat intelligence, threat detection, and unified risk reporting to stay ahead of bad actors.

    Ratings and reviews

    4.5
    68 ratings
    74%
    22%
    3%
    0%
    1%
    9 AWS reviews
    |
    59 external reviews
    External reviews are from G2  and PeerSpot .

    Filters

    Review type

    AWS Marketplace reviews
    External reviews
    Reviews (68)
    Fonzo L.

    NodeZero the Hero

    Reviewed on Sep 30, 2026
    Review provided by G2
    What do you like best about the product?
    I honestly don’t know of another product on the market that delivers this same level of overall value. This product is helping change the way we think about and approach vulnerabilities, shifting the mindset from simply identifying them to taking meaningful action to address them.
    What do you dislike about the product?
    Currently, I don't have any dislikes about NodeZero.
    What problems is the product solving and how is that benefiting you?
    One of the biggest challenges it helps solve is prioritizing the work that matters most. By focusing on vulnerabilities that are actually exploitable, we can direct our time and resources toward the risks that have the greatest real-world impact.
    Chris Lammering

    Continuous pentesting has transformed our services and now delivers measurable risk reduction

    Reviewed on Sep 27, 2026
    Review provided by PeerSpot

    What is our primary use case?

    We use The NodeZero Platform by Horizon3.ai to perform pentests for our customers, and we have built services around it so that customers can book a one-off pentest or continuous pentesting with us. We call that Pitas or label it Security Validation as a Service, and that way customers get quarterly feedback with a 'to-fix' list from us with recommended actions. We can also run pentests on a monthly basis. We have built many services around The NodeZero Platform by Horizon3.ai and actively use it as a component for our pentesting services.

    We had a customer who got a new network and had a huge infrastructure overhaul, and just wanted to know how effective everything we had done actually was. We placed The NodeZero Platform by Horizon3.ai as a so-called runner, then carried out a pentest, and also played through various scenarios, such as grey-box testing—for example, how far can I get if I have credentials of an admin, or how far can I get if I have credentials of a normal user. We also did black-box testing, where we simply plugged ourselves in, got an IP address, and then saw how far we could get. We have also used it in customer projects to see how good the Active Directory password strength is—that is, how good the password policies are configured in an infrastructure. We did that with the ADPA, the Active Directory Password Assessment. We have already used it in various scenarios and in different variants. The overall experience is always positive, and the feedback is always positive.

    We always offer it in different flavors for the customer. We also really listen to the customer and ask them what they really want. Do they want an internal pentest, do they want an external pentest? Maybe they also want a phishing assessment. It is really based on how the customer would like to have it for themselves at that moment.

    How has it helped my organization?

    The NodeZero Platform by Horizon3.ai has had a positive effect on our company and our customers in that, firstly, we can save the customer a lot of money, because a single pentest is also very expensive. We can react relatively quickly to customer requirements. If a customer wants a pentest, we can manage to start one within fifteen minutes, assuming the customer is correspondingly flexible. By running continuous pentests with The NodeZero Platform by Horizon3.ai and thanks to the functionality and logic behind it, we can cover a lot of scenarios, and that in turn creates added value for the customer, because if they use it continuously they always know at any given time how their attack surface is shifting.

    We had a concrete example with a customer where we really started from a very catastrophic state, and they had a lot of vulnerabilities. I remember that we had about 2,300 findings. We then created a report, sat down with the customer and basically said, 'We now need to harden your environment.' After the first retest, we still had about 1,000 of those vulnerabilities, because a lot could already be fixed. After the third retest we were down to just ten vulnerabilities, where these ten vulnerabilities were also due to the fact that there had been another patch day or that some new vulnerabilities had been published and we and the customer had not yet had the opportunity to patch them because the vendor had not provided a patch yet. We were able to harden a customer environment relatively quickly and also to see whether everything we had done was actually bearing fruit.

    What is most valuable?

    The best features of The NodeZero Platform by Horizon3.ai are that Horizon3 AI is simply very good because it is deployable on pretty low-level hardware. We can deploy it in a VM and integrate it into an infrastructure relatively quickly. Another really good point is its simplicity. We can run a pentest again and again. One of the most useful features that Horizon3 AI offers us is the so-called One-Click Verify. If we have tested something and the customer has a vulnerability, we can verify with one click, once they have fixed it, whether this fix actually took effect—whether we have been able to turn off the corresponding attack graphs and all of that. Another advantage is the presentation and the explanation. We do not just hand the customer a pentest report, but we also really give the customer an understanding of the impact on their business. How severe is the whole thing? If I have a vulnerability with a score of ten point zero, how badly will that hit? Or perhaps another vulnerability with a score of four point zero is actually twice as bad. That is basically the advantage for the customer.

    For my day-to-day work, I would say the clear, well-structured reports from The NodeZero Platform by Horizon3.ai are excellent. As already mentioned, we can really tell the customer, 'You have a problem there, and this problem has this or that weight,' and it is not just a matter of throwing raw vulnerabilities at them. Instead, the customer truly knows how bad the whole thing actually is.

    What is also really good is the huge range of functions that we get for the price with The NodeZero Platform by Horizon3.ai. If we compare it with competitors, we get quite a lot for our money. With other competitors, we have to buy one base license first, and then we have to buy a lot of additional licenses. With The NodeZero Platform by Horizon3.ai, it is different. We get a large feature set right away, and at a pretty good price.

    What needs improvement?

    In my opinion, The NodeZero Platform by Horizon3.ai could be improved by continuing to add new features, such as cloud pentesting, which is currently one of the buzzwords. Kubernetes has just been added. I think what is important for Horizon is simply that the vendor continues to be so committed to providing a platform that is that advanced. I think that is the only point where Horizon can continue to evolve. Everything is already very good as it is.

    The small things that I had with The NodeZero Platform by Horizon3.ai have now been fixed, so everything is good. I also think it is very good that we can configure and adjust so many things ourselves.

    For how long have I used the solution?

    We have been a partner of Horizon3 AI for just under a year, and we have been actively using The NodeZero Platform by Horizon3.ai for about a year to a year and a half. Before that, we had taken a look at it several times.

    What do I think about the stability of the solution?

    So far with The NodeZero Platform by Horizon3.ai, we have not been able to identify any instabilities. Everything has always run stably.

    What do I think about the scalability of the solution?

    The scalability of The NodeZero Platform by Horizon3.ai is very good because if we have purchased licenses, we can also buy additional licenses. It is scalable. We can scale it by IPs, so to speak. That means we have a way to bundle a package for every company. We can go from ten or more. The scaling is really very good. We can simply buy one license per asset, and if we grow, we can grow our licenses. If we become smaller, we can of course scale down.

    How are customer service and support?

    My experience with The NodeZero Platform by Horizon3.ai's customer support has been very good. We almost always get an answer relatively quickly, and we also quickly have someone on the phone if something breaks or if we have a question. I really cannot say anything negative about that.

    Which solution did I use previously and why did I switch?

    We previously used another solution that was similar—that was Pentera in this case. We simply changed partners because we also wanted to go to market with a new solution.

    How was the initial setup?

    So far, everything with The NodeZero Platform by Horizon3.ai has actually been positive. The dashboards and all the overviews we have are really just very good and very detailed. We always get a contact person at our side who guides us through everything. We have had a lot of tech demos and also many discussions with Horizon, so that we were then able to use the cloud platform relatively quickly.

    What was our ROI?

    Since we use The NodeZero Platform by Horizon3.ai with our customers, I cannot give any concrete figures yet. The feedback from customers is indeed always positive in that regard.

    What's my experience with pricing, setup cost, and licensing?

    The licensing of The NodeZero Platform by Horizon3.ai is actually relatively simple: one asset equals one license, or one IP equals one license. The pricing is good and is always positively received by our customers.

    Which other solutions did I evaluate?

    We did evaluate other solutions before deciding on The NodeZero Platform by Horizon3.ai. These were Pico Security and Pentest Tools, and Horizon ended up winning because we realized that the approach with the simple deployment and the pricing are better than with the competitors. Also, Horizon puts a lot of focus on AI, which simply shows that the solution is future-proof.

    What other advice do I have?

    I would actually give The NodeZero Platform by Horizon3.ai a ten out of ten.

    I am giving it a ten because we have come from other vendors that do something similar, and we simply noticed that the collaboration with The NodeZero Platform by Horizon3.ai or Horizon3 AI is really very good. We are in regular contact. Especially as a partner or as a customer, we really have the feeling that we are heard by the partner. That is really worth a lot. If we have real technical problems, we always get support immediately. We just write to our contact at Horizon about a problem, and we get feedback right away. I have experienced it differently before, so this positive experience has really stuck with me.

    The NodeZero Platform by Horizon3.ai can only be used as a cloud Software as a Service solution. That is really very good, also from an architectural perspective, because we are mostly with our customers in Germany and in the EU. It is very good that a tenant is only in Europe, so that we have data sovereignty in terms of GDPR. That is definitely a very big advantage for our German customers, for example, that the data is stored in Frankfurt. The general way data is handled is very interesting. They have really thought everything through down to the smallest detail, so that a pentest report or the data that exists for a pentest is very confidential, and we really have to ensure that the data is also removed again relatively quickly and cleanly afterwards.

    We actually use the tool provided by The NodeZero Platform by Horizon3.ai.

    I would say about The NodeZero Platform by Horizon3.ai: take a look at the solution and look at it for yourselves, and then you will be just as excited as we are. I am rating this product a ten because the collaboration with Horizon3 AI is really very good, and we have received excellent support throughout our partnership.

    Robert F.

    Essential internal threat assessment

    Reviewed on Sep 17, 2026
    Review provided by G2
    What do you like best about the product?
    I appreciate how NodeZero from Horizon3.ai automates penetration testing and reduces the waiting time for finding network vulnerabilities compared to manual security audits. The automated attack path chaining is really useful to find complex lateral movement opportunities within interconnected domain controllers. It's also great that I can verify proof of exploits with screenshots to provide undeniable evidence for compliance. Additionally, the host discoverability engine quickly identifies unmanaged IoT devices right after deployment, which is super useful for security assessments. I also find it easy to integrate real-time exploit information with Splunk for immediate SOC incident responses. The initial setup was easy, which is definitely a plus.
    What do you dislike about the product?
    When large network topology graphs are displayed in a web application during an active assessment, the interface completely freezes. Additionally, the critical port data gets lost when exporting summaries using the default report templates. Also, sensitive modules for password spraying should be throttled more granularly to prevent overwhelming the identity provider with requests, which compromises the effectiveness of the password sprayer.
    What problems is the product solving and how is that benefiting you?
    I use NodeZero from Horizon3.ai to avoid waiting months for manual security audits by automating penetration testing. It identifies vulnerabilities without disrupting servers, provides undeniable evidence for compliance, and discovers unmanaged IoT devices quickly.
    Tom Kofoed-Frederiksen

    Real-time attack simulations have accelerated our sales cycle and increased customer trust

    Reviewed on Sep 13, 2026
    Review provided by PeerSpot

    What is our primary use case?

    My main use case for The NodeZero Platform by Horizon3.ai is to demonstrate the product for customers.

    For my customer demonstrations, we use a paid dummy company with AI and conduct penetration testing on that company to show that we perform a real-time scan of the company's data and infrastructure using Horizon3.ai.

    Customers typically react with amazement when they see the real-time scan in action, and their questions vary considerably as they are impressed by the quality, quantity, and speed of the test.

    How has it helped my organization?

    The NodeZero Platform by Horizon3.ai has positively impacted my organization as we resell it to customers, and when we conduct a demo, customers are satisfied and want to purchase. This is our main purpose for using the platform. We do not have a large infrastructure ourselves since we work from home and are only three people in the company.

    Using The NodeZero Platform by Horizon3.ai has helped us close more deals and speed up our sales cycle, as it is well-known that we sell to customers within the Horizon company through the partner portal and deal registration.

    What is most valuable?

    The best features that The NodeZero Platform by Horizon3.ai offers are the manageability of the product, the overview, and the report.

    What stands out to me about the overview and the report features is the clarity on what to do as the first step to minimize the attack surface.

    What needs improvement?

    I do not know how The NodeZero Platform by Horizon3.ai can be improved at this point, as it is a very comprehensive product, and I cannot say that I am missing anything.

    For how long have I used the solution?

    I have been using The NodeZero Platform by Horizon3.ai for a little over a year.

    What do I think about the stability of the solution?

    The NodeZero Platform by Horizon3.ai is stable.

    What do I think about the scalability of the solution?

    The scalability of The NodeZero Platform by Horizon3.ai is simple, and it is easy to scale up.

    How are customer service and support?

    We have not had any need for customer support.

    Which solution did I use previously and why did I switch?

    We did not previously use a different solution.

    What was our ROI?

    We have seen a return on investment with increased sales. I cannot provide specific numbers, but we do have increased sales.

    What's my experience with pricing, setup cost, and licensing?

    My experience with pricing, setup cost, and licensing has been that we do not have any cost as we are resellers.

    Which other solutions did I evaluate?

    We did not evaluate other options before choosing The NodeZero Platform by Horizon3.ai.

    What other advice do I have?

    My advice for others looking into using The NodeZero Platform by Horizon3.ai is to develop a good plan for your IP addresses and infrastructure and place The NodeZero Platform by Horizon3.ai in the correct subnet at the beginning to get the most information from the machines. I would rate this product a 10 out of 10.

    Glenn Han

    Prioritized testing has reduced critical vulnerabilities and improves our cybersecurity posture

    Reviewed on Aug 31, 2026
    Review provided by PeerSpot

    What is our primary use case?

    My main use case for The NodeZero Platform by Horizon3.ai is penetration testing for cybersecurity.

    A specific example of how I have used The NodeZero Platform by Horizon3.ai for penetration testing is that we ran a full system test to find all our vulnerabilities, first starting within our network and now we are running web vulnerabilities.

    Running these tests does take quite a while to complete for the first time since we are conducting every single test, and it actually took several weeks.

    What is most valuable?

    The best features The NodeZero Platform by Horizon3.ai offers include its ability to categorize vulnerabilities into critical, high, medium, and other levels, which gives us priority on which vulnerabilities to attack as fixes first.

    That prioritization has helped my team in practice by allowing us to create Jira tickets to fix the vulnerabilities based on criticality.

    The NodeZero Platform by Horizon3.ai has positively impacted my organization by improving our cybersecurity score; we have reduced many of our vulnerabilities and we are hoping that our cyber insurance will decrease due to the hardening that we have done.

    Regarding specific numbers or metrics about our improved cybersecurity score, we probably went from a couple hundred critical vulnerabilities down to maybe just a dozen or so that we are still working on fixing.

    What needs improvement?

    The NodeZero Platform by Horizon3.ai could be improved if automated fixes could be implemented, which would be fantastic.

    I rate it an eight because speeding up the penetration test time for running would get it closer to a ten for me.

    For how long have I used the solution?

    I have been using The NodeZero Platform by Horizon3.ai for about seven months.

    What other advice do I have?

    The NodeZero Platform by Horizon3.ai's AI capabilities demonstrate very good governance and security, which I like very much as it has been helpful to my team and it really allows us to tackle the critical vulnerabilities first.

    The NodeZero Platform by Horizon3.ai has impressed me so far with the accuracy and reliability of its output; it has been very accurate.

    My advice to others looking into using The NodeZero Platform by Horizon3.ai is that it is worth it, and I recommend making sure that when it is done running to go back to the cyber insurance company and let them know the updates made on the cybersecurity front.

    I rate The NodeZero Platform by Horizon3.ai an eight overall.

    Valerii G.

    Transforms Pen Testing with Speed and Precision

    Reviewed on Aug 28, 2026
    Review provided by G2
    What do you like best about the product?
    I appreciate that NodeZero from Horizon3.ai is a fast and ongoing internal attack simulation solution that doesn't compromise production infrastructure. The automated proof of exploit capability is great because it generates verifiable attack chains without impacting business operations. I also find it valuable that Docker containers can be quickly deployed locally in minutes, and the impact maps clearly show credential harvesting chains across DC. Additionally, I like how rules applied to a firewall are instantly re-activated by automated re-testing. I find it convenient to push Vuln discovery reports directly into Jira for remediation tickets.
    What do you dislike about the product?
    I find that legacy subnet routers consume system resources excessively at random when trying to discover devices using an aggressive approach. Also, during network sweeps, the platform should offer fine-grained control over bandwidth.
    What problems is the product solving and how is that benefiting you?
    I use NodeZero for fast, ongoing internal attack simulations, replacing costly manual tests. It simulates attacks without disrupting operations and quickly deploys Docker containers. Impact maps show credential chains clearly, and firewall rules are verified by re-testing. This improves penetration testing efficiency and reliability.
    Arthur G.

    Replaced our slow traditional security auditing process completely

    Reviewed on Aug 17, 2026
    Review provided by G2
    What do you like best about the product?
    I like that NodeZero from Horizon3.ai is a safe real-exploit execution tool that doesn't crash services. It helps us focus by separating out proven vulnerable routes, making sure fixes for actionable compromises are handled quickly. I also appreciate the platform's step-by-step proof of compromise logs, which include captured hashes and command line outputs for each successful attack. The one-click post remediation verification feature is really handy, allowing us to retest specific targets without needing a full enterprise assessment.
    What do you dislike about the product?
    If our VLAN is highly segmented, and we have strict rate limits on our firewall, we often experience timeouts with large subnet discovery jobs. In a multi-homed asset scan, when complex host parsing logic is applied, we notice that secondary interfaces are dropped. Additionally, the initial setup was quite hard for us.
    What problems is the product solving and how is that benefiting you?
    I use NodeZero to automate penetration testing in our network, separating proven vulnerabilities for prompt fixes. It provides step-by-step proof of compromise logs and one-click post remediation verification to retest targets efficiently.
    William Mckinley

    Automated recurring pen tests have multiplied our small team’s impact and reduced costs

    Reviewed on Aug 06, 2026
    Review from a verified AWS customer

    What is our primary use case?

    My main use case for The NodeZero Platform by Horizon3.ai is pen testing.

    A quick specific example of how I use The NodeZero Platform by Horizon3.ai for pen testing is pen testing the external IP of store locations.

    I primarily use The NodeZero Platform by Horizon3.ai for a spot check and on-the-fly instances; otherwise, we utilize it for recurring scans that happen weekly.

    What is most valuable?

    The best features The NodeZero Platform by Horizon3.ai offers are the ability to set up recurring scans that are updated automatically based on current trends in the environment, which is taken up by Horizon rather than us having to manually update these scans ourselves if we were to do this on our own.

    The automated updating of scans has been a huge value-add for us; we're a small cybersecurity team, so speed to value is the biggest thing to multiply the force of our small team, saving a lot of man-hours.

    I trust the results that The NodeZero Platform by Horizon3.ai provides; there have been times where it's found a vulnerability that wasn't in our environment, but that was due to an IP address changing on our side, actually helping me follow up with our sysadmin team to verify that the vulnerability belonged to an IP address that we no longer owned, allowing me to remove it from the platform and assisting with a little bit of housekeeping as well.

    The NodeZero Platform by Horizon3.ai improves remediation time; rather than us having to manually do these scans, which take a lot of man-hours, having them run in the background while we complete other work allows us to address other vulnerabilities that we may have in other aspects of our environment, saving us time overall.

    What needs improvement?

    The setting up of new runners in The NodeZero Platform by Horizon3.ai could be simplified a little bit; currently, it's kind of a three-step process where you have to set up the assets in a separate menu, then a separate menu to set up a template, and then you actually set up the runner, so it would be nice if from the runner creation screen it just took you through the whole process instead of having to navigate to three different tabs.

    For how long have I used the solution?

    I have been using The NodeZero Platform by Horizon3.ai for seven months.

    What do I think about the stability of the solution?

    The NodeZero Platform by Horizon3.ai is stable; I've not experienced any downtime other than when there were updates that needed to be pushed, but outside of that, no downtime, as the updates were quick.

    What do I think about the scalability of the solution?

    The NodeZero Platform by Horizon3.ai seems to be extremely scalable; we're able to add runners as needed, add and remove assets on the fly, and create more scheduled scans whenever needed, appearing to be infinitely scalable for our use case.

    How are customer service and support?

    Customer support for The NodeZero Platform by Horizon3.ai has been phenomenal; they've been extremely fast to respond to any tickets that I've entered and have been able to provide solutions extremely fast.

    I would rate the customer support a 10.

    Which solution did I use previously and why did I switch?

    We used vPenTest previously, and we switched for better cost savings as well as a wider breadth of features.

    How was the initial setup?

    My advice to others looking into using The NodeZero Platform by Horizon3.ai is to recommend doing an onboarding if there is not one already included in the pricing for purchasing the platform because it takes a little bit to get things up and running, but once you do, it's extremely smooth sailing and self-sufficient for the most part; however, the initial setup can be a little difficult to do on your own.

    What was our ROI?

    We would probably need another employee, so ROI could be upwards of $70,000 a year based on how much it would cost to hire an analyst.

    The NodeZero Platform by Horizon3.ai has helped reduce our pen testing costs; we had another vendor that we were utilizing before we went with The NodeZero Platform by Horizon3.ai, and it resulted in about a 20% savings.

    What's my experience with pricing, setup cost, and licensing?

    I joined the organization after this contract was in place but was involved in the next round regarding pricing, setup cost, and licensing.

    Which other solutions did I evaluate?

    Before choosing The NodeZero Platform by Horizon3.ai, I evaluated only vPenTest.

    What other advice do I have?

    On a scale of 1 to 10, I would rate The NodeZero Platform by Horizon3.ai probably an eight, sometimes a nine.

    I choose an eight because the UI for setting up a new runner, as I discussed previously, just making that a little smoother would definitely get it up to a nine, and although there have been a few times where I've needed support's intervention, support has been extremely speedy in both their response and also resolution of issues, so I'm not going to dock more points for that; they've been great.

    Regarding The NodeZero Platform by Horizon3.ai's AI capabilities, I haven't used those too much in particular, other than what's automatically integrated into the platform, which automatically detects potential vulnerabilities in whatever particular environment I'm pitting it against, making it super helpful since it's analyzing things at a much faster rate than a human could.

    The NodeZero Platform by Horizon3.ai's endpoint security effectiveness feature gives a nice breakdown of what threat it's displaying, allowing me to do further research into it; we've had a couple of issues that have sprung up related to IP cameras, discovering again that we don't have those cameras in our environment due to an IP address that no longer belonged to us.

    The NodeZero Platform by Horizon3.ai's real attack capabilities have mainly shown that we're 100% clean, which is great to hear, primarily used to show that we have a clean report to our C-suite, essentially demonstrating that all the cybersecurity measures we have in place are appropriately protecting us from threats that are active in the landscape.

    I have not utilized the solution's feature that allows security teams to fix and retest vulnerabilities instantly yet.

    I rate The NodeZero Platform by Horizon3.ai an overall score of eight out of ten.

    Which deployment model are you using for this solution?

    Public Cloud

    If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

    Amazon Web Services (AWS)
    William M.

    Lightning-Fast Support and Flexible Hosted Runners

    Reviewed on Aug 06, 2026
    Review provided by G2
    What do you like best about the product?
    Their support has been extremely fast. I have only had to reach out to them on a few occassions in the last year. But each time they got back to me faster than almost any other vendor that we partner with. On top of that their resolution time was also speedy. I also like the flexibility of virtual and local hosted runners. This allows for more flexibility and a wider range of pen tests can be ran.
    What do you dislike about the product?
    It can be a little confusing at first to set up a scan for the first time. You have to update assets then create a template then actually set up the runner. Rather than getting an error. It would be nice if from the runner creation section it took you through the whole process.
    What problems is the product solving and how is that benefiting you?
    It is saving man hours. We are a small Cyber Security shop so speed to value is huge for us. Anything that allows us to force multiple is a huge win. Rather than having to set up repeatative scans and do the manual work of updating them. Horizon stays on top of the latest trends and works them into our scans on a continious basis.
    reviewer2881101

    Automated penetration testing has improved continuous vulnerability discovery and remediation

    Reviewed on Jul 28, 2026
    Review from a verified AWS customer

    What is our primary use case?

    My main use case for The NodeZero Platform by Horizon3.ai is to run automated penetration tests and remediate findings.

    We run our penetration test on a scheduled basis, specifically every two months against our data centers, and then we take the results, create incidents in ServiceNow for teams to remediate the findings. When they believe they have remediated the findings, we retest The NodeZero Platform by Horizon3.ai to verify. If the findings are discovered to be mitigated, we close the incidents. If the findings are not mitigated, then we leave the incidents open and coordinate future remediations with the teams.

    What is most valuable?

    The best features of The NodeZero Platform by Horizon3.ai are the attack configurations. For internal penetration tests, you are able to select what specific vulnerabilities or exploits you want to check for and deselect those that are more likely to have negative effects on the devices that are pen-tested. Additionally, for external pen tests, it is beneficial to have a tool that can regularly and frequently test your environment to let you know of any recent exploits that are discovered.

    Those attack configuration options have helped my team as we frequently encounter zero days, which are critically and recently discovered vulnerabilities. The NodeZero Platform by Horizon3.ai implements exploits to find those vulnerabilities in our environment, so we have tuned attack configurations to check only for those zero day vulnerabilities to quickly get results back on what we are affected by.

    The NodeZero Platform by Horizon3.ai has allowed us to quickly and easily identify the exploits in our environment that are greatly increasing our risk. It has simplified that process and also our remediation process, allowing us to more easily work with teams to show how it is exploitable and what they need to do to fix those issues. This has allowed us to significantly improve our finding discovery and remediation process of vulnerabilities, overall decreasing our risk.

    My impression of The NodeZero Platform by Horizon3.ai's feature that allows security teams to fix and retest vulnerabilities instantly is fantastic. Those features really simplify our penetration test process and allow us to quickly know if exploits were fixed or not and what can be done to fix them.

    The platform's real attack capabilities have greatly helped us in identifying vulnerabilities in our on-prem systems by providing the proof on how the vulnerability was exploited and what could be done to fix it. With penetration testers, you do not always receive that guaranteed proof, nor is it written in a way that is easily digestible by all parties. It has been a great leverage for us.

    The effectiveness feature of The NodeZero Platform by Horizon3.ai's endpoint security greatly helps me understand potential security threats, as it tells you what attackers are likely to exploit the vulnerabilities found in your environment. This insight helps prioritize which teams should focus on mitigating first to decrease their risk.

    What needs improvement?

    The NodeZero Platform by Horizon3.ai could greatly improve their feature request and product suggestions process. There is not an easy way to see what the status is of product suggestions, and from personal experience, many of the product suggestions and feature requests I have submitted have not been implemented. Having better reflection on the status of feature requests, along with an improved process for that, would greatly enhance the product.

    One feature in particular that could greatly improve The NodeZero Platform by Horizon3.ai is load balancing penetration tests. For large environments, it can take a significant amount of time for a penetration test to complete, but if that pen test could be load balanced on more than one system, I believe The NodeZero Platform by Horizon3.ai could leverage that system and complete penetration tests in a much quicker time frame, providing quicker results to customers.

    For how long have I used the solution?

    I have been using The NodeZero Platform by Horizon3.ai for over three years.

    What do I think about the stability of the solution?

    The NodeZero Platform by Horizon3.ai is extremely stable.

    What do I think about the scalability of the solution?

    The NodeZero Platform by Horizon3.ai's scalability is easily manageable, as you can deploy as many penetration test servers as needed, and they are very easy to deploy.

    How are customer service and support?

    The customer support for The NodeZero Platform by Horizon3.ai is great. They have a quick chat feature that makes their support easily accessible, as well as an AI chatbot for simple questions and a case submission system for when neither of those options is available or if they cannot answer your questions.

    Which solution did I use previously and why did I switch?

    We did not previously use a different solution.

    Which other solutions did I evaluate?

    We did not evaluate other options before choosing The NodeZero Platform by Horizon3.ai.

    What other advice do I have?

    The advice I would give to others looking into using The NodeZero Platform by Horizon3.ai is to assess their environments to run penetration tests and get an idea of the amount of IPs or assets they have, thereby knowing how many licenses they should acquire for The NodeZero Platform by Horizon3.ai. I would rate this product an eight out of ten.

    Which deployment model are you using for this solution?

    Hybrid Cloud

    If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

    Amazon Web Services (AWS)