No more typing reviews! Try our Samantha, our new voice AI agent.

Cymulate vs The NodeZero Platform by Horizon3.ai comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Feb 8, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cymulate
Ranking in Breach and Attack Simulation (BAS)
2nd
Average Rating
8.4
Reviews Sentiment
6.9
Number of Reviews
6
Ranking in other categories
Threat Intelligence Platforms (TIP) (15th), Attack Surface Management (ASM) (14th), Continuous Threat Exposure Management (CTEM) (5th)
The NodeZero Platform by Ho...
Ranking in Breach and Attack Simulation (BAS)
1st
Average Rating
8.8
Reviews Sentiment
6.1
Number of Reviews
23
Ranking in other categories
Vulnerability Management (8th), Advanced Threat Protection (ATP) (13th), Penetration Testing Services (1st), Risk-Based Vulnerability Management (2nd)
 

Mindshare comparison

As of June 2026, in the Breach and Attack Simulation (BAS) category, the mindshare of Cymulate is 14.9%, down from 21.8% compared to the previous year. The mindshare of The NodeZero Platform by Horizon3.ai is 14.2%, up from 8.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Breach and Attack Simulation (BAS) Mindshare Distribution
ProductMindshare (%)
The NodeZero Platform by Horizon3.ai14.2%
Cymulate14.9%
Other70.9%
Breach and Attack Simulation (BAS)
 

Featured Reviews

SB
Security Architec at Shikun & Binui
Support and integration enhance security posture over three years
I don't know if there's something that could be improved. They surprise me. As I mentioned, I returned a month ago. I haven't fully investigated the complete system yet. I must say that we have been with them for around three years. This is amazing because throughout these three years, they have supported us every week. We meet weekly to review results and fix issues together. Apart from occasional days off, this weekly support has been consistent for three years. It's remarkable because many products are sold and then the product teams forget about you, but this isn't the case with Cymulate.
Brent Hamlin - PeerSpot reviewer
Infrastructure Manager at a construction company with 501-1,000 employees
Continuous threat scanning has improved remediation time and strengthened executive reporting
The best features that The NodeZero Platform by Horizon3.ai offers include the automated scans, which are great to use; you set it, scope it, and let it go, which works really well. The executive reporting feature is impactful for me as a manager, providing a strong foundation to give quarterly and yearly reports to our executives and board to see the state of our infrastructure from a security standpoint. The level of detail and clarity in the executive reports from The NodeZero Platform by Horizon3.ai absolutely helps me communicate effectively with leadership. They are detailed enough for me to extract the necessary information tailored for the executives and to provide a broader perspective on our mitigation efforts or accepted risk stance and where additional controls exist. The NodeZero Platform by Horizon3.ai has positively impacted my organization by giving us a better continuous picture of our security posture, what's exploitable, and what can be used against the organization. It allows us to run scans whenever needed, unlike a single third-party system that only provides a snapshot in time; our processes must be ongoing as the security landscape is dynamic. NodeZero's endpoint security effectiveness feature impacts my understanding of potential security threats by providing a clear picture of both the external and internal landscapes within my organization, enabling me to prioritize and adjust as needed for vulnerabilities such as WordPress plugin issues or user enumerations and software code version assessments. I have built The NodeZero Platform by Horizon3.ai into our weekly and monthly workflows for security CI/CD, and we scan our externally accessible assets every week to address anything quickly if it comes up. That includes our firewalls, websites, and anything that is an external web server, which we scan weekly, while the monthly scans are for internal systems that feed our security CI/CD pipeline, enabling us to action across and prioritize any vulnerabilities caught by The NodeZero Platform by Horizon3.ai.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Cymulate has positively impacted our organization by helping us to take care of the efficacy and reviewing the policies and configuration."
"With Cymulate, the best features are the capacity to test the EDR or malware, anti-malware solution."
"Cymulate is easy to set up, install, and configure."
"The reporting capabilities are very good."
"The security validation feature helps my organization in assessing our security posture."
"The most valuable feature for us is the zero-day."
"I rate the stability of the NodeZero Platform a ten out of ten."
"My favorite feature about The NodeZero Platform is that it's autonomous, and it truly delivers on that promise—it can be set and forgotten while it performs its tasks, and it does exactly what it claims to do."
"The NodeZero Platform's real attack capabilities help in identifying vulnerabilities on our on-prem systems because it provides actual vulnerabilities by attacking our systems."
"We experienced a threat that could have severely crippled us, but we were able to shut it down before it escalated, thanks to internal vulnerability testing and addressing critical vulnerabilities using their tool."
"Otherwise, the solution itself is very fine and I would recommend it as an MSP partner or as a user of the tool to pretty much any company."
"The NodeZero Platform is amazing; what I love most about it is that it's automated and comparable to the manual pen testing we did with a third-party company, but with the added benefit of unlimited retesting to validate fixes."
"Right now, using it for networks is great, and you could really do a lot with their continuous testing, which I thought was a great feature."
"The NodeZero Platform's real attack capabilities help identify vulnerabilities on my on-premise systems by adding an element of validation and offensive security testing on top of known vulnerabilities. The feature that allows security teams to fix and retest vulnerabilities instantly is very useful, even though it may not happen literally 'instantly.' It's a necessary tool for any organization to understand whether vulnerabilities are genuinely exploitable by attackers. With its near-real-time testing capabilities, it's an essential part of any security portfolio."
 

Cons

"The cost can be quite high, and it impacts scalability as more simulations require additional expenses."
"We have had some trouble with the agents."
"The way Cymulate works for EDR could be improved, as it drops payload and requires action from the EDR console for remediation, which can block the whole process of Cymulate execution."
"The reporting process requires significant improvement as it often takes longer than expected and the quality is lacking."
"I will be honest, we have it, but in the last year, I didn't maintain the system until a month ago."
"The product must provide consultancy for initial setup."
"When it comes to the stability of The NodeZero Platform by Horizon3.ai, I would rate it around seven to eight because the stability is not that high initially due to the need for daily updates and modifications as new vulnerabilities appear."
"The areas for improvement for The NodeZero Platform involve integration and automation. It would be beneficial if it could integrate directly with vulnerability management tools that would allow the platform to automatically import data, identify vulnerable systems, and test targets immediately, potentially even enabling automated feedback loops for rescanning since the process is currently manual."
"I encountered challenges with patch management, as we struggled to test and implement patches due to time constraints. This led to our patch management process being ineffective."
"Sometimes even their support doesn't know why we're seeing certain issues."
"The reports are quite useless."
"I think The NodeZero Platform could improve by leveraging GPUs for password cracking, which would be pretty good."
"If we have had problems, that is with the actual licensing style they are using."
"I would like to see an improvement in the notification management."
 

Pricing and Cost Advice

"The product is affordable."
"Cymulate's services are expensive."
Information not available
report
Use our free recommendation engine to learn which Breach and Attack Simulation (BAS) solutions are best for your needs.
896,692 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
15%
Manufacturing Company
9%
Computer Software Company
8%
Comms Service Provider
7%
Comms Service Provider
9%
Manufacturing Company
8%
Government
8%
Computer Software Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business5
Large Enterprise3
By reviewers
Company SizeCount
Small Business14
Midsize Enterprise4
Large Enterprise7
 

Questions from the Community

What is your experience regarding pricing and costs for Cymulate?
I don't know if it's expensive. It depends on the modules that you want, or the time, because they give you a tenant. A tenant for you.
What needs improvement with Cymulate?
I don't know if that helped with quick decision making for my security team because I am the security team and you must have a dedicated team to work with this tool. I don't use the analytics modul...
What advice do you have for others considering Cymulate?
With Cymulate, I have experience using the vulnerability management tools. I don't know if I have used the Continuous Security Validation with Cymulate. I don't have that module licensed with Cymul...
What needs improvement with Horizon3.ai?
The NodeZero Platform by Horizon3.ai could be improved by reducing the elapsed time from identifying a zero-day vulnerability from their QA environment to their production environment.
What is your primary use case for Horizon3.ai?
My main use case for The NodeZero Platform by Horizon3.ai includes pen testing and vulnerability management. I use The NodeZero Platform by Horizon3.ai to run weekly external and internal scans to ...
What advice do you have for others considering Horizon3.ai?
My advice to others looking into using The NodeZero Platform by Horizon3.ai is to do yourself a favor and see what the product will find. The platform's real attack capabilities have helped in iden...
 

Also Known As

No data available
Horizon3.ai
 

Overview

 

Sample Customers

Euronext, YMCA, Telit, Nemours 
Government agencies, Defense Industrial Base organizations, and enterprises in regulated industries such as finance, healthcare, manufacturing, and criticalinfrastructure rely on NodeZero to meet rigorous security and compliance requirements with continuous, scheduled, and on-demand testing.
Find out what your peers are saying about Cymulate vs. The NodeZero Platform by Horizon3.ai and other solutions. Updated: April 2026.
896,692 professionals have used our research since 2012.