Horizon3.ai

Horizon3.ai makes NodeZero, the autonomous penetration-testing platform that executes real attack techniques without persistent agents and without disrupting production, showing exactly how attackers would move, what they could access, how to stop them, and verifying fixes instantly. Built to think and act like an attacker while operating safely in production (with zero downtime across all production tests), NodeZero autonomously discovers and exploits weaknesses, compromising credentials, moving laterally, and escalating privilege, then orchestrates hundreds of offensive tools to chain weaknesses into the impacts attackers actually seek, such as ransomware exposure via a domain-admin compromise. It runs a continuous find, fix, verify loop: teams can schedule pentests to run every day with no user intervention, no need to launch tests or even sign in. It is the first autonomous platform to offer internal and external pentesting in one self-service product, and has extended to cloud pentesting across AWS and Azure, Active Directory password audits, and web application testing at the intersection of apps, identity, and infrastructure. NodeZero learns from hundreds of thousands of autonomous production tests, was the first AI to fully solve the Game of Active Directory benchmark, and is FedRAMP High Authorized for federal use. Founded in 2019 by national-security veterans, Horizon3.ai anchors the offensive/pentest cluster of the security lane alongside XBOW, with an internal-network and production-safe emphasis complementing XBOW's external, bug-bounty-proven approach.