Horizon3.ai
A San Francisco company whose NodeZero platform runs continuous, autonomous penetration tests at machine speed for over 6,500 organizations, including the NSA and CISA.
Visit Website ↗ + Add to Compare Claim This CompanyOverview
Horizon3.ai’s NodeZero platform autonomously discovers and exploits vulnerabilities—weak credentials, misconfigurations, exposed services—chaining them into attack paths the way a human penetration tester would, but at machine speed and without custom scripting. The company has since expanded the product line into NodeZero Core, Surface, and Cloud for internal, external, and cloud environments, plus a Resolve module for automated remediation orchestration.
Founded in 2019 by former Splunk CTO Snehal Antani and former U.S. Special Operations Command deputy CTO Anthony Pillitiere, the San Francisco company has grown into one of the most credibly evidenced names in autonomous security validation. It reports more than 6,500 organizations using NodeZero globally, with named customers including the NSA, CISA, four Fortune 10 companies, and multiple multinational banks. Horizon3.ai has raised $428.5 million to date, including a $250 million Series E in August 2026 at a valuation exceeding $2 billion, with reported annual recurring revenue growing 120% year-over-year toward roughly $100 million.
Innovation Matrix Assessment
As a six-year-old company it now iterates steadily (Core/Surface/Cloud/Resolve expansion) rather than moving at startup speed, though product breadth continues to grow.
Continuous, autonomous penetration testing materially reduces reliance on scarce human pentesters for ongoing security validation.
A $250M Series E at a >$2B valuation (Aug 2026), $428.5M raised to date, and reported 120% YoY ARR growth toward ~$100M are strong, independently reported momentum signals.
Shifted penetration testing from periodic manual engagements to continuous automated validation, but the category has since attracted well-funded competitors (Pentera, RunSybil, Terra Security), diluting its earlier uniqueness.
Named customers including the NSA, CISA, and Fortune 10 companies, plus over 6,500 organizations using the platform, represent unusually strong real-world adoption evidence for this review.
Continuous exposure validation aligns with where analyst coverage (Adversarial Exposure Validation) and enterprise demand are both heading.
Why CISOs Should Care
Lets CISOs run continuous, machine-speed penetration tests across internal, external, and cloud environments instead of relying on periodic, resource-constrained manual engagements.
What Makes It Different
Chains real exploitation techniques autonomously at machine speed and scale, rather than scanning for and reporting theoretical vulnerabilities.
The Matrix Verdict
75/100 — MEANINGFUL INNOVATOR
Horizon3.ai is a Meaningful Innovator: among the most credibly evidenced companies reviewed, with named government and Fortune 10 customers and strong funding momentum, but its disruptive edge has narrowed as autonomous pentesting has become a more contested category.
Editorial Note: Claims vs. Verified Findings
Customer counts and named customers are independently reported across multiple outlets; specific ARR growth and total funding figures rely on a single secondary aggregator and should be checked against Horizon3.ai's own press releases.
Sources
Alternatives to Horizon3.ai
Unknown Cyber Inc.
CISO ReviewedMalware genomics platform using automated deep static analysis and code-lineage comparison to identify unseen malware, variants, and supply-chain…
Synack Inc
A penetration-testing-as-a-service platform pairing a vetted researcher community with AI-driven attack surface discovery for continuous security validation.
Horizon3.ai
Autonomous penetration testing company whose NodeZero platform self-attacks networks without persistent agents, aiming to replace annual manual pentests…
Cogent Security
Agentic AI platform that autonomously triages, investigates, and remediates vulnerabilities as a force multiplier for security teams.
Airlock Digital
Application allowlisting (deny-by-default) platform that blocks unapproved executables, scripts, and processes to prevent ransomware and malware execution.
Pentera
Automated security validation platform that safely runs real attack techniques against production environments to prove which exposures are…