NodeZero

Free trial APILinuxSelf-hostedWeb

What NodeZero is

NodeZero is a paid security platform from Horizon3 that autonomously runs penetration tests to find exploitable attack paths, guide remediation, and verify fixes. It covers internal, external, Kubernetes, and cloud environments, along with password audits and phishing impact testing. NodeZero chains discovered weaknesses, ranks results by demonstrated impact, and supplies proof and remediation guidance. Tests can run daily for continuous risk assessment. Internal testing uses a Docker host or OVA set up by the customer, while external testing runs from Horizon3’s cloud. The platform supports web application, API, and network testing, finding management, and evidence capture. Listed integrations include CrowdStrike Falcon Next-Gen SIEM, ServiceNow Vulnerability Response, Jira, Splunk, and Sentinel. Manual host requirements include Ubuntu 20.04 LTS or later or RHEL 9+, two CPU cores, 8 GB RAM, and Docker or Podman. Pricing is available on request. There is no free plan, but a 30-day trial is available with company information and a verified company email; the account becomes read-only afterward. Support is included with subscriptions.

Who it suits

NodeZero suits security and IT teams that want recurring penetration testing, prioritized findings, remediation guidance, and fix verification. It fits organizations able to provide the documented host setup for internal tests.

What it does well

Covers internal, external, Kubernetes, and cloud testing
Can schedule tests daily
Prioritizes findings by demonstrated impact
Includes remediation guidance and evidence
Offers integrations with listed security and IT platforms

What to know first

Pricing is available only on request
No free plan is offered
Trial accounts become read-only after 30 days
Internal tests require a customer-managed Docker host or OVA

Plans

Plan	Billed and limits	Price
NodeZero Core	Continuous autonomous penetration testing · scheduling · threat informed perspectives	On request
NodeZero Flex	Autonomous episodic penetration testing · core pentesting capabilities	On request
NodeZero Pro	NodeZero Core · Rapid Response · Tripwires	On request
NodeZero Elite	NodeZero Pro · High-Value Targeting · Advanced Data Pilfering · Threat Actor Intelligence · Vulnerability Prioritization	On request

As horizon3.ai lists them, read 2 Oct 2026. The maker's own page has the final word.

Verdict

NodeZero combines autonomous testing with attack-path analysis, evidence, and remediation direction. Its broad testing coverage and daily scheduling are useful for teams that can meet its deployment requirements and paid subscription terms.

Facts from NodeZero's own pages

Attack coverage: The platform offers internal, external, Kubernetes, and cloud pentesting, plus password audits and phishing impact testing. · horizon3.ai, 2 Oct 2026
Deployment: Internal tests run from a Docker host or OVA that customers set up, while external tests run from Horizon3’s cloud. · horizon3.ai, 2 Oct 2026
Exploit analysis: NodeZero chains discovered weaknesses and prioritizes results by demonstrated impact, with proof and remediation guidance. · horizon3.ai, 2 Oct 2026
Founded: 2019 · horizon3.ai, 28 Sept 2026
Headquarters: San Francisco, California, United States · horizon3.ai, 28 Sept 2026
Host requirements: The documented manual host requirements include Ubuntu 20.04 LTS or later or RHEL 9+, two CPU cores, 8 GB RAM, and Docker or Podman. · docs.horizon3.ai, 2 Oct 2026
Integrations: Documented integrations include CrowdStrike Falcon Next-Gen SIEM, ServiceNow Vulnerability Response, Jira, Splunk, and Sentinel. · docs.horizon3.ai, 2 Oct 2026
Intended users: Horizon3 describes NodeZero as supporting security and IT teams, including organizations that want to assess and improve their security posture continuously. · horizon3.ai, 2 Oct 2026
Purpose: NodeZero autonomously runs penetration tests to find exploitable attack paths, guide remediation, and verify fixes. · horizon3.ai, 2 Oct 2026
Scheduling: NodeZero tests can be scheduled to run daily for continuous risk assessment. · horizon3.ai, 2 Oct 2026
Security and AI: Horizon3 says NodeZero does not use GenAI to create or execute exploits and runs GenAI inference through AWS Bedrock without training foundation models on customer data. · horizon3.ai, 2 Oct 2026
Support: Support is included with every subscription, with Standard, Enhanced, and Premier options described on the packaging page. · horizon3.ai, 2 Oct 2026
Trial terms: A 30-day free trial requires company information and a verified company email, and the account becomes read-only after the trial. · docs.horizon3.ai, 2 Oct 2026
Web application testing: NodeZero WebApp Flex is an add-on to any package, while WebApp Continuous is an add-on to Core, Pro, or Elite and provides unlimited testing of each licensed app. · horizon3.ai, 2 Oct 2026

Where NodeZero stands on Freedom251

Offensive Security#10 of 22
Penetration Testing Software#22 of 34