IT-Security Consultant at a tech services company with 51-200 employees
Real User
Top 10
Sep 27, 2026
We use The NodeZero Platform by Horizon3.ai to perform pentests for our customers, and we have built services around it so that customers can book a one-off pentest or continuous pentesting with us. We call that Pitas or label it Security Validation as a Service, and that way customers get quarterly feedback with a 'to-fix' list from us with recommended actions. We can also run pentests on a monthly basis. We have built many services around The NodeZero Platform by Horizon3.ai and actively use it as a component for our pentesting services. We had a customer who got a new network and had a huge infrastructure overhaul, and just wanted to know how effective everything we had done actually was. We placed The NodeZero Platform by Horizon3.ai as a so-called runner, then carried out a pentest, and also played through various scenarios, such as grey-box testing—for example, how far can I get if I have credentials of an admin, or how far can I get if I have credentials of a normal user. We also did black-box testing, where we simply plugged ourselves in, got an IP address, and then saw how far we could get. We have also used it in customer projects to see how good the Active Directory password strength is—that is, how good the password policies are configured in an infrastructure. We did that with the ADPA, the Active Directory Password Assessment. We have already used it in various scenarios and in different variants. The overall experience is always positive, and the feedback is always positive. We always offer it in different flavors for the customer. We also really listen to the customer and ask them what they really want. Do they want an internal pentest, do they want an external pentest? Maybe they also want a phishing assessment. It is really based on how the customer would like to have it for themselves at that moment.
Manager, Information Technology at C R & R Recycling Ct
Real User
Top 20
Aug 31, 2026
My main use case for The NodeZero Platform by Horizon3.ai is penetration testing for cybersecurity. A specific example of how I have used The NodeZero Platform by Horizon3.ai for penetration testing is that we ran a full system test to find all our vulnerabilities, first starting within our network and now we are running web vulnerabilities. Running these tests does take quite a while to complete for the first time since we are conducting every single test, and it actually took several weeks.
Lead Security Engineer at a healthcare company with 10,001+ employees
Real User
Top 20
Jul 28, 2026
My main use case for The NodeZero Platform by Horizon3.ai is to run automated penetration tests and remediate findings. We run our penetration test on a scheduled basis, specifically every two months against our data centers, and then we take the results, create incidents in ServiceNow for teams to remediate the findings. When they believe they have remediated the findings, we retest The NodeZero Platform by Horizon3.ai to verify. If the findings are discovered to be mitigated, we close the incidents. If the findings are not mitigated, then we leave the incidents open and coordinate future remediations with the teams.
Manager, Cybersecurity Operations at a transportation company with 1,001-5,000 employees
Real User
Top 20
Jun 12, 2026
My main use case for The NodeZero Platform by Horizon3.ai is autonomous and continuous penetration testing. A specific example of how I use The NodeZero Platform by Horizon3.ai for autonomous and continuous penetration testing is testing web applications for vulnerabilities as new releases come out. I run these tests weekly or depending upon when it is necessary for different applications.
Managing Director Chief Technology Officer And CISO at a insurance company with 51-200 employees
Real User
Top 10
Apr 14, 2026
My main use case for The NodeZero Platform by Horizon3.ai includes pen testing and vulnerability management. I use The NodeZero Platform by Horizon3.ai to run weekly external and internal scans to identify configuration issues, software vulnerabilities, or misconfigurations.
The main use case for The NodeZero Platform by Horizon3.ai is internal network testing, as we put up a few runners in the customer environment and then we scan and test the environment.
Learn what your peers think about The NodeZero Platform by Horizon3.ai. Get advice and tips from experienced pros sharing their opinions. Updated: October 2026.
The primary use case for the NodeZero platform by Horizon3.ai is to deliver penetration testing as a service to our clients, enabling us to support their security assurance, risk reduction, and compliance obligations.
My main use case for The NodeZero Platform by Horizon3.ai is to demo the platform to our channel partners and any end-user customers that they bring us, and also for my own benefit, as we look at our own pentests that we do on the business, both weekly and monthly, and speak to our technical SE Manager to discuss the weaknesses, vulnerabilities, and remediations that Horizon provides with the tasks. When we conducted this for a customer within a POV, a proof of value, The NodeZero Platform by Horizon3.ai managed to run a pentest very quickly, rather than them doing a manual test that takes weeks to get the reports which are at a point in time. What we found was a weakness within the infrastructure, but it also provided step-by-step remediation instructions and showed how to address the issues, verifying remediation with one-click verification. One thing I would add about The NodeZero Platform by Horizon3.ai features is how easy it is to follow on the platform at your fingertips, making it accessible and uncomplicated, even for non-technical users such as myself who can run a pentest on the infrastructure.
Chief Information Officer at a construction company with 1,001-5,000 employees
Real User
Top 20
Oct 21, 2025
For us, The NodeZero Platform is literally the single best security solution we have because the way that it works is we're able to scan every part of our network, both internally and externally, and then get completely actionable feedback that doesn't matter if it's for an application developer or a network admin. The way that the feedback is presented leaves no room for what is the problem. Our use cases are internal network scans, external penetration tests, and then all of the remediation that goes along with those two results. The final use case that we use is we actively scan every single network password and make sure that no one has password reuse, duplication, or any of the things that have gotten a lot of other companies in trouble. This is one of their easiest features to start with. That is the primary use case.
I use The NodeZero Platform as a consultant on penetration testing engagements for various customers. This might be different than some of their more common use cases where companies use it internally. The primary use case is for penetration testing engagements, and the main driver for having The NodeZero Platform is that it's a force multiplier for me as an individual to perform more penetration testing without additional human resources.
The primary use case that we have for The NodeZero Platform is for scanning the environment and identifying vulnerabilities. The tool prioritizes vulnerabilities, focusing on the most critical ones.
The primary use case for the NodeZero Platform is as an extension to existing vulnerability management systems. Initially, it complemented solutions like Qualys or Tenable. However, there has been a shift towards using NodeZero to replace existing vulnerability management solutions altogether. The motivations include cost savings and addressing issues that traditional vulnerability managers might report but do not actually affect system security.
To meet standards, I am required to do penetration testing periodically. This is something I can do on-demand anytime I choose, or I can set it up to recur on a recurring schedule.
NodeZero by Horizon3.ai is an offensive security platform that enables users to adopt an attacker’s perspective, reveal vulnerabilities, and verify defense effectiveness with evidence-backed insights.
NodeZero provides autonomous pentesting, showing how attackers exploit misconfigurations, credentials, and exposures into attack paths. It helps focus on real risks rather than hypothetical ones, integrating seamlessly into existing IT and security workflows to streamline processes. The platform...
We use The NodeZero Platform by Horizon3.ai to perform pentests for our customers, and we have built services around it so that customers can book a one-off pentest or continuous pentesting with us. We call that Pitas or label it Security Validation as a Service, and that way customers get quarterly feedback with a 'to-fix' list from us with recommended actions. We can also run pentests on a monthly basis. We have built many services around The NodeZero Platform by Horizon3.ai and actively use it as a component for our pentesting services. We had a customer who got a new network and had a huge infrastructure overhaul, and just wanted to know how effective everything we had done actually was. We placed The NodeZero Platform by Horizon3.ai as a so-called runner, then carried out a pentest, and also played through various scenarios, such as grey-box testing—for example, how far can I get if I have credentials of an admin, or how far can I get if I have credentials of a normal user. We also did black-box testing, where we simply plugged ourselves in, got an IP address, and then saw how far we could get. We have also used it in customer projects to see how good the Active Directory password strength is—that is, how good the password policies are configured in an infrastructure. We did that with the ADPA, the Active Directory Password Assessment. We have already used it in various scenarios and in different variants. The overall experience is always positive, and the feedback is always positive. We always offer it in different flavors for the customer. We also really listen to the customer and ask them what they really want. Do they want an internal pentest, do they want an external pentest? Maybe they also want a phishing assessment. It is really based on how the customer would like to have it for themselves at that moment.
My main use case for The NodeZero Platform by Horizon3.ai is penetration testing for cybersecurity. A specific example of how I have used The NodeZero Platform by Horizon3.ai for penetration testing is that we ran a full system test to find all our vulnerabilities, first starting within our network and now we are running web vulnerabilities. Running these tests does take quite a while to complete for the first time since we are conducting every single test, and it actually took several weeks.
My main use case for The NodeZero Platform by Horizon3.ai is to run automated penetration tests and remediate findings. We run our penetration test on a scheduled basis, specifically every two months against our data centers, and then we take the results, create incidents in ServiceNow for teams to remediate the findings. When they believe they have remediated the findings, we retest The NodeZero Platform by Horizon3.ai to verify. If the findings are discovered to be mitigated, we close the incidents. If the findings are not mitigated, then we leave the incidents open and coordinate future remediations with the teams.
My main use case for The NodeZero Platform by Horizon3.ai is autonomous and continuous penetration testing. A specific example of how I use The NodeZero Platform by Horizon3.ai for autonomous and continuous penetration testing is testing web applications for vulnerabilities as new releases come out. I run these tests weekly or depending upon when it is necessary for different applications.
My main use case for The NodeZero Platform by Horizon3.ai includes pen testing and vulnerability management. I use The NodeZero Platform by Horizon3.ai to run weekly external and internal scans to identify configuration issues, software vulnerabilities, or misconfigurations.
The main use case for The NodeZero Platform by Horizon3.ai is internal network testing, as we put up a few runners in the customer environment and then we scan and test the environment.
The primary use case for the NodeZero platform by Horizon3.ai is to deliver penetration testing as a service to our clients, enabling us to support their security assurance, risk reduction, and compliance obligations.
My main use case for The NodeZero Platform by Horizon3.ai is to demo the platform to our channel partners and any end-user customers that they bring us, and also for my own benefit, as we look at our own pentests that we do on the business, both weekly and monthly, and speak to our technical SE Manager to discuss the weaknesses, vulnerabilities, and remediations that Horizon provides with the tasks. When we conducted this for a customer within a POV, a proof of value, The NodeZero Platform by Horizon3.ai managed to run a pentest very quickly, rather than them doing a manual test that takes weeks to get the reports which are at a point in time. What we found was a weakness within the infrastructure, but it also provided step-by-step remediation instructions and showed how to address the issues, verifying remediation with one-click verification. One thing I would add about The NodeZero Platform by Horizon3.ai features is how easy it is to follow on the platform at your fingertips, making it accessible and uncomplicated, even for non-technical users such as myself who can run a pentest on the infrastructure.
We use The NodeZero Platform for control validation and we are also looking for the likelihood of vulnerabilities.
For us, The NodeZero Platform is literally the single best security solution we have because the way that it works is we're able to scan every part of our network, both internally and externally, and then get completely actionable feedback that doesn't matter if it's for an application developer or a network admin. The way that the feedback is presented leaves no room for what is the problem. Our use cases are internal network scans, external penetration tests, and then all of the remediation that goes along with those two results. The final use case that we use is we actively scan every single network password and make sure that no one has password reuse, duplication, or any of the things that have gotten a lot of other companies in trouble. This is one of their easiest features to start with. That is the primary use case.
I use The NodeZero Platform as a consultant on penetration testing engagements for various customers. This might be different than some of their more common use cases where companies use it internally. The primary use case is for penetration testing engagements, and the main driver for having The NodeZero Platform is that it's a force multiplier for me as an individual to perform more penetration testing without additional human resources.
The primary use case that we have for The NodeZero Platform is for scanning the environment and identifying vulnerabilities. The tool prioritizes vulnerabilities, focusing on the most critical ones.
The primary use case for the NodeZero Platform is as an extension to existing vulnerability management systems. Initially, it complemented solutions like Qualys or Tenable. However, there has been a shift towards using NodeZero to replace existing vulnerability management solutions altogether. The motivations include cost savings and addressing issues that traditional vulnerability managers might report but do not actually affect system security.
To meet standards, I am required to do penetration testing periodically. This is something I can do on-demand anytime I choose, or I can set it up to recur on a recurring schedule.
The solution is used for penetration testing.