Name: NodeZero
Rating: 4.7 (142 reviews)

Overview

Product Information on NodeZero

Updated 26th January 2024

What is NodeZero?

Horizon3.ai's NodeZero platform empowers your organization to continuously find, fix, and verify your exploitable attack surface. Reduce your security risk by autonomously finding weaknesses in your network, knowing how to prioritize and fix them, and immediately verifying that your fixes work. NodeZero delivers production-safe autonomous pentests and other key assessment operations that scale across your largest internal, external, cloud, and hybrid cloud environments. No required agents, no code to write, and no consultants to hire.

Overall experience with NodeZero

Analyst

250M - 500M USD, Insurance (except health)

FAVORABLE

“Cloud-Based Security Tool Enhances Functionality but Raises Compliance Concerns”

4.0

Apr 7, 2026

Competent tool that is a good assistance in the security testing of the company network that uses mainly open source tools with extensive functionality.

CHIEF INFORMATION OFFICER

500M - 1B USD, Services (non-Government)

CRITICAL

“Capable Product for Continued Pen Testing at a Reasonable Cost.”

3.0

Aug 21, 2024

Overall experiance has been good. Might be a little negative due to the partner we are working with. There are some scheduling issues and results of tests that do not make sense that I think could be handled better.

Badges

Gartner Peer Insights recognizes vendors who meet or exceed both the market average Overall Experience and the market average User Interest and Adoption score through a Customers’ Choice distinction.

For Market:
Adversarial Exposure Validation

About Company

Company Description

Horizon3.ai is a fusion of former U.S. Special Operations cyber operators, startup engineers, and formerly frustrated cybersecurity practitioners. We're committed to helping solve our common security problems: ineffective security tools, false positives resulting in alert fatigue, blind spots, "checkbox” security culture, cybersecurity skills shortage, and the long lead time and expense of hiring outside consultants. Founded in 2019, Horizon3.ai is headquartered in San Francisco, CA.

Company Details

Company type

Private

Year Founded

2019

Head office location

San Francisco, United States

Number of employees

51 - 200

Website

https://www.horizon3.ai

Do You Manage Peer Insights at Horizon3.ai?

Access Vendor Portal to update and manage your profile.

Key Insights

A Snapshot of What Matters - Based on Validated User Reviews

User Sentiment About NodeZero

Reviewer Insights for: NodeZero

Deciding Factors: NodeZero Vs. Market Average

Performance of NodeZero Across Market Features

NodeZero Likes & Dislikes

The solution is deployed in the cloud which provides great flexibility and eases the roll-out of the service in different parts of the company network. The product also gives proof-of-concept commands that can be run to verify the claimed findings. Since it uses mainly open source tooling, it is possible to audit the tool's code which is appreciated in comparison with running lots of proprietary programs.

The ability to see flaws in the system and perform pen tests at our own pace all year long. The product does uncover a lot of good information.

What I like the most is the ability to deploy the NodeZero runner for a variety of Pen Test scans that allow the improvement of our security posture. Whether it be for confirming password compliance or external testing, it is a single solution tool to test your environment.

Even though a cloud-based deployment has its benefits, it is an issue out of compliance reasons since sensitive data is stored in an environment outside your control. Sometimes one can get quite the difference in terms of port scan results when comparing the product with e.g. masscan and since the port scan methodology of the solution is not entirely known, it can be a bit confusing regarding which data is correct. As all similar solutions it is quite expensive.

Cannot schedule a job to only run once and how it interprets accounts sharing passwords. There seems to be a bug where it assumes many accounts are sharing the same password.

I dislike that there isn't a simple ability to compare between 2 or 3 Pen Test results on the dashboard. Hopefully in the works.

Top NodeZero Alternatives

Peer Discussions

NodeZero Reviews and Ratings

Recommended Gartner Insights

Market Guide for Adversarial Exposure Validation

50M-1B USD

Insurance (except health)

Review Source

Cloud-Based Security Tool Enhances Functionality but Raises Compliance Concerns

It Security Administrator

Gov't/PS/Ed

Government

Preemptive security tool that allows additional visibility to improve your security posture.

5.0

Apr 20, 2026

The main reason for my overall experience rating is that having the Horizon3.ai tool that allows for scanning for IOCs with the Rapid Response is an exceptional security feature to deploy in a production environment. The ability to Find, Fix, and Verify with step-by-step instructions is an excellent plus to the platform.

Senior Database Administrator

Education

Enhancing Network Security with Regular PEN Tests through NodeZero

PEN tests are an essential part of keeping our network safe. NodeZero allows us to do this on a regular schedule...something we've not been able to do due to costs. Lest you think we're getting a false sense of security, this is not the case. It finds security flaws nearly every time we and gives clear instructions on how to mitigate them.

Director Of It

<50M USD

Travel and Hospitality

Reduced Integration Scale Helps Address High Cost for Smaller Organizations

Mar 9, 2026

The system is easy to set up and the assessments are intuitive. We use it in conjunction with other vulnerability tools to test our patching and mitigation processes. The support and install support were better than expected. Great team to work with.

VP, IT Security and Risk Management

Banking

Powerful, autonomous penetration testing with realistic attack simulation.

Apr 8, 2026

The overall experience has been positive, in terms of providing realistic pen test scenarios.