NodeZero
NodeZero is a security platform that autonomously runs penetration tests to find exploitable attack paths, guide remediation, and verify fixes.
What NodeZero is
NodeZero is a security platform that autonomously runs penetration tests to find exploitable attack paths, guide remediation, and verify fixes. Its coverage includes internal, external, Kubernetes, and cloud testing, as well as password audits and phishing impact testing. It chains discovered weaknesses, prioritizes findings by demonstrated impact, and provides evidence and remediation guidance. Tests can be scheduled daily for ongoing risk assessment. Internal tests run from a customer-set-up Docker host or OVA, while external tests run from Horizon3’s cloud. Documented manual host requirements include Ubuntu 20.04 LTS or later or RHEL 9+, two CPU cores, 8 GB RAM, and Docker or Podman. Pricing is available on request, and there is no free plan. A 30-day free trial requires company information and a verified company email; the account becomes read-only when the trial ends. Support is included with every subscription, with Standard, Enhanced, and Premier options described. NodeZero suits security and IT teams seeking to assess risks, direct remediation, and check whether fixes work.
Good
- Covers internal, external, Kubernetes, and cloud testing.
- Can schedule tests daily.
- Prioritizes findings by demonstrated impact with proof.
- Provides remediation guidance and fix verification.
- Support is included with every subscription.
Watch out
- Pricing is available on request.
- No free plan; the trial lasts 30 days.
- Trial requires company information and a verified company email.
- Trial account becomes read-only afterward.
Who it suits
NodeZero is for security and IT teams that want recurring penetration testing and remediation guidance. It may suit organizations assessing security across internal, external, cloud, or Kubernetes environments.
Verdict
NodeZero combines multiple forms of penetration testing with prioritized findings and verification of fixes. Prospective users should account for the host requirements and the trial’s company-email requirement; pricing is on request.
Plans and prices
From NodeZero's own pricing page, checked 2 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| NodeZero Core | Priced on request | Continuous autonomous penetration testing · scheduling · threat informed perspectives |
| NodeZero Elite | Priced on request | NodeZero Pro · High-Value Targeting · Advanced Data Pilfering · Threat Actor Intelligence · Vulnerability Prioritization |
| NodeZero Flex | Priced on request | Autonomous episodic penetration testing · core pentesting capabilities |
| NodeZero Pro | Priced on request | NodeZero Core · Rapid Response · Tripwires |
The facts
Each one read from NodeZero's own pages, with the date it was checked.
What it does
- Attack coverage
- The platform offers internal, external, Kubernetes, and cloud pentesting, plus password audits and phishing impact testing.checked 2 Oct 2026
- Deployment
- Internal tests run from a Docker host or OVA that customers set up, while external tests run from Horizon3’s cloud.checked 2 Oct 2026
- Exploit analysis
- NodeZero chains discovered weaknesses and prioritizes results by demonstrated impact, with proof and remediation guidance.checked 2 Oct 2026
- Host requirements
- The documented manual host requirements include Ubuntu 20.04 LTS or later or RHEL 9+, two CPU cores, 8 GB RAM, and Docker or Podman.checked 2 Oct 2026
- Integrations
- Documented integrations include CrowdStrike Falcon Next-Gen SIEM, ServiceNow Vulnerability Response, Jira, Splunk, and Sentinel.checked 2 Oct 2026
- Intended users
- Horizon3 describes NodeZero as supporting security and IT teams, including organizations that want to assess and improve their security posture continuously.checked 2 Oct 2026
- Purpose
- NodeZero autonomously runs penetration tests to find exploitable attack paths, guide remediation, and verify fixes.checked 2 Oct 2026
- Scheduling
- NodeZero tests can be scheduled to run daily for continuous risk assessment.checked 2 Oct 2026
- Security and AI
- Horizon3 says NodeZero does not use GenAI to create or execute exploits and runs GenAI inference through AWS Bedrock without training foundation models on customer data.checked 2 Oct 2026
- Support
- Support is included with every subscription, with Standard, Enhanced, and Premier options described on the packaging page.checked 2 Oct 2026
The company
- Founded
- 2019checked 28 Sep 2026
- Headquarters
- San Francisco, California, United Stateschecked 28 Sep 2026
Money
- Trial terms
- A 30-day free trial requires company information and a verified company email, and the account becomes read-only after the trial.checked 2 Oct 2026
Where it runs
- Web application testing
- NodeZero WebApp Flex is an add-on to any package, while WebApp Continuous is an add-on to Core, Pro, or Elite and provides unlimited testing of each licensed app.checked 2 Oct 2026
Alternatives to NodeZero
- 1
AttackIQ Platform
Free planWebAPILinuxmacOS7.9From $4,995 a month - 2
Kali Linux
Free planOpen sourceAndroidLinuxmacOSSelf-hosted7.6Free plan - 3
OWASP ZAP
Free planOpen sourceAPIExtensionLinuxmacOS7.6Free plan - 4
ImmuniWeb
AndroidiOSWebAPI6.8From €595 a year - 5
Astra Security
WebAPI6.5From $699 a year - 6
Pentest-Tools.com API Scanner
WebAPILinuxmacOS6.5From $95 a month