Horizon3.ai

Horizon3.ai sells NodeZero, an autonomous penetration testing platform the company markets as an AI hacker. It runs continuously against production environments, mapping the attack surface and chaining exploitable vulnerabilities, misconfigurations, harvested credentials, and insecure defaults into real attack paths, then proving exploitability in a safe, controlled way so teams fix what matters instead of triaging scanner noise. It is agentless: a small runner VM or container acts as the launch point, and tests cover internal and external infrastructure, cloud (AWS, Azure, GCP), identity and Active Directory, data, and web applications.

In July 2026 Horizon3 extended NodeZero with AI-powered web application pentesting aimed at the wave of AI-generated 'vibe-coded' apps, chaining web flaws through credential theft, lateral movement, and cloud pivots to data exposure. NodeZero Federal is FedRAMP High Authorized for US government use, and in October 2026 the company expanded its Pax8 partnership to bring the platform to managed service providers across Europe. The platform also ships Cortex XSOAR and SIEM integrations, and findings map to MITRE ATT&CK-style tactics so teams can prioritize by business impact. As with any autonomous pentest product, the value depends on scoping and the false-positive rate on your own estate, but the proof-of-exploit model is a genuine differentiator over pure scanners.

1. Sign up for NodeZero at horizon3.ai and deploy the runner (small VM or container) in scope.
2. Define scope and safety controls for the autonomous test.
3. Schedule continuous operations across infrastructure, cloud, identity, and web apps.
4. Work the prioritized, proof-based findings and re-run to verify fixes closed the paths.