Horizon3.ai NodeZero Platform

What do you like best about the product?

The platform capabilities are outstanding. I really like that it's safe to use in production and will prioritise any exploits or weaknesses in your environment. The UI is easy to navigate and provides some in-depth information at every step of a successful attack path. It's fast and can scale to any size; it offers various integrations with certain ticketing systems. Pricing seems very reasonable for what you get, and what it gives back to you is very valuable.

The support has been second to none, and any issues or queries I've made have been resolved in a timely manner.

It doesn't use a lot of AI, which I like, and where it does use it, it's enriching already useful information.

What do you dislike about the product?

Honestly, nothing. I've used it extensively and I can't find anything that I don't like.

What problems is the product solving and how is that benefiting you?

It addresses the discovery of exploits and weaknesses in my environment, so it’s truly tailored to my infrastructure and configurations. It identifies what’s actually exploitable in my setup, which helps me focus on what’s critical and most likely to lead to a breach.

It is also wa central console showing me every discoverable asset in the environment, so you get great visibility into what's actually connected to your network.

What do you like best about the product?

What I like most about NodeZero is that it removes the guesswork from penetration testing. Rather than depending on a point-in-time, manual assessment, it continuously and autonomously identifies exploitable attack paths the way a real attacker would—chaining together weak credentials, misconfigurations, and vulnerabilities to highlight real business risk, not just a long list of CVEs. The findings are prioritized and actionable, which helps our team focus remediation on what truly matters instead of chasing noise. It’s also refreshingly self-service: there are no lengthy scoping calls or waiting around for a vendor’s schedule, and we can launch an operation whenever we need to. That mix of speed, autonomy, and real-world attack validation has made it a genuinely valuable addition to our security program.

What do you dislike about the product?

There isn’t much to dislike. If anything, I’d just like to see a few additional features that make it easier to manage the platform.

What problems is the product solving and how is that benefiting you?

NodeZero addresses the challenge of not knowing our true exposure between annual pentests. By running autonomous pentests on an ongoing basis, it highlights real, exploitable attack paths—not just a list of theoretical vulnerabilities—so we can focus on the fixes that actually matter. It’s saved our team time, accelerated remediation, and given us genuine confidence in our security posture instead of relying on guesswork.

What do you like best about the product?

The autonomous penetration testing architecture safely performs production line exploits without impact and downtime. It leverages accessed Active Directory credentials and local configuration vulnerabilities to create the path of lateral movement.It stitches together compromised Active Directory credentials and local configuration vulnerabilities to produce paths of lateral movement.

What do you dislike about the product?

Until the specialized testing environment is completely provisioned, it takes up to 15 minutes for the containerized node orchestration engine to work. The external network perimeter scanning modules are unable to conduct a deep sub domain scan in very complex multi cloud network setups.

What problems is the product solving and how is that benefiting you?

Long wait times and shallow data coverage from manual red teaming consultants were problematic for our corporate security group. Every time code changes deploy to our production environment, NodeZero deploy full scope infrastructure attack campaigns.

What do you like best about the product?

I like their AI motor that performs VAPT without asking for more details, it just execute the VA and after it decides what it needs to do the pentesting

What do you dislike about the product?

Well, the report could be generated in spanish, we are from Mexico and we need spanish reports.

What problems is the product solving and how is that benefiting you?

The lack of resources to execute the pentesting, the AI robot that has help me to keep few people executing nodezero

What do you like best about the product?

I use NodeZero for internal monthly pentesting, and I appreciate that it shows us our vulnerabilities in real time. I like that it's affordable and that the platform provides the tools needed to run regular pentests without involving a third party. We value the coverage it provides, allowing us to switch from annual to monthly testing and enabling us to do periodic testing on isolated tools. It also integrates well with other tools we use, like MS Defender and Rapid7 IDR.

What do you dislike about the product?

Nothing comes to mind.

What problems is the product solving and how is that benefiting you?

I use NodeZero for internal pentesting. It shows vulnerabilities in real time, adapting to changes regularly. It provides tools for monthly tests without needing a third party, adding coverage and allowing periodic testing of isolated tools.