What is NodeZero?
NodeZero is Horizon3.ai's autonomous penetration testing platform. It runs self-directed tests that chain weaknesses into attack paths, shows proof of impact, gives remediation guidance and lets teams re-check fixes with Quick Verify. Internal tests run from a Docker host or OVA appliance that reports to the NodeZero Portal, and external tests run from Horizon3.ai's cloud.
Who it's for
Security and IT teams and pentesters who want to test internal, external, cloud, Kubernetes, Active Directory and web app environments, once or on a schedule. The vendor also lists federal and compliance-related pages, and a partner portal and tech alliances program.
Pros & cons
Strengths
- Horizon3.ai says internal tests run from a free Docker host or OVA appliance with an execution script, and external tests run automatically from its cloud with no local setup.
- The packaging page lists Flex features such as internal, external, cloud, Kubernetes, AD password audit, insider threat and phishing impact testing, plus Fix Actions with one-click verify.
- The vendor says it uses graph-based reasoning for attack planning, classical ML to classify files, and scoped GenAI for tasks such as High-Value Targeting, next-step suggestions, file content analysis, web app logic checks and a chat over a live test.
- The vendor says NodeZero never uses GenAI to create or execute exploits, that every action is deterministic and pre-validated, and that GenAI runs on models hosted in AWS Bedrock.
- Horizon3.ai's data-handling factsheet says customer data is not shared with model providers or used to train models, data is encrypted in transit with mutually authenticated TLS, and sensitive test data is scrubbed within 5 business days.
- The packaging page lists Premium Support options (Standard included with every subscription) and a WebApp pentesting add-on, and the NodeZero page links an MCP Server product page.
Limitations
- Pricing is per asset and sold by quote. Packaging page list prices are $15 (Flex), $50 (Core), $65 (Pro) and $85 (Elite) per asset, in USD, and actual contract terms are set through sales.
- The packaging page labels Core, Pro and Elite prices 'per asset, per test' but its text says each asset counts once a year however often it is tested, and Flex counts assets each time they are tested. The page does not reconcile the two.
- Scheduling and Threat Informed Perspectives start at Core, Tripwires and Rapid Response at Pro, and Risk-Based Exposure Management, High-Value Targeting, Advanced Data Pilfering and threat actor intelligence at Elite.
- Web app pentesting is a separate add-on: WebApp Flex is $10,000 per app on a 12-month prepaid pool, and WebApp Continuous is per-app custom pricing. Enhanced support is 10% of the annual subscription ($7,500 minimum) and Premier is 20% ($25,000 minimum).
- The factsheet says only anonymized, aggregated telemetry is used in AI analysis and training, and raw logs are kept up to 5 business days. It names no regions or certifications, and the AI page does not name model vendors.
Plans and pricing
- Free trial: $0. The NodeZero page links a free trial sign-up. Length and limits could not be read on an official page, and the homepage and packaging page show no trial. Not a free plan.
- Flex: $15 per asset, per test. Episodic, 12-month term. Assets are counted each time they are tested. Internal, external, cloud, Kubernetes, AD password audit, insider threat and phishing impact testing, Fix Actions.
- Core: $50 per asset. Annual subscription, continuous, unlimited pentests. Flex plus scheduling and Threat Informed Perspectives. Page label says 'per test' but text says each asset counts once a year.
- Pro: $65 per asset. Annual subscription. Core plus Tripwires and Rapid Response. Same per-test label conflict as Core.
- Elite: $85 per asset. Annual subscription. Pro plus Risk-Based Exposure Management, Vulnerability Prioritization, High-Value Targeting, Advanced Data Pilfering and threat actor intelligence.
- WebApp Flex (add-on): $10,000 per app. Episodic web app pentesting on a 12-month prepaid pool. Available as an add-on or standalone.
- WebApp Continuous (add-on): Custom, per app. Unlimited testing of each licensed app, with volume pricing. Available as an add-on or standalone.
Prices were read from the official packaging page, which lists them in USD per asset and links 'Get a quote' and 'Book a demo'. The page conflicts with itself on whether Core, Pro and Elite are charged per test or once per asset per year, and the trial terms could not be read on an official page. Confirm on the live pricing page.
Details checked October 2026 against the vendor's own pages. Prices and limits change, so confirm before you buy. Official pricing page ↗
Sources
This profile was compiled from these public pages. We have not run hands-on tests.
NodeZero — at a glance
NodeZero is Horizon3.ai's autonomous penetration testing platform. It runs self-directed tests that chain weaknesses into attack paths, shows proof of impact, gives remediation guidance and lets teams re-check fixes with Quick Verify. Internal tests run from a Docker host or OVA appliance that reports to the NodeZero Portal, and external tests run from Horizon3.ai's cloud.
Try NodeZero →