Horizon3

Horizon3

San Francisco, California, United States

Penetration TestingOffensive SecurityCloud SecurityIdentity & Access
Founded 2019Serves Enterprise, Public Sector, Critical Infrastructure
Profile last updated: September 1, 2026

About

Founded in 2019, Horizon3 is a cybersecurity company based in San Francisco, United States working in penetration testing, offensive security, cloud security +3 more.

Horizon3 is a proactive security company founded in 2019 and headquartered in San Francisco, California. Its core product, NodeZero, is an autonomous pentesting platform that uses real-world attacks in production environments to show how attackers could move through a network, identify exploitable attack paths, guide remediation and verify that fixes work. The platform covers internal, external, cloud, Active Directory, web application and Kubernetes testing, and is offered to enterprises, MSSPs and MSPs. Horizon3 also provides pentesting services for compliance, delivered by OSCP-certified pentesters, and a FedRAMP High authorized offering, NodeZero Federal, for government agencies and Defense Industrial Base suppliers. The company's team includes former US Special Operations, national security and cybersecurity industry veterans.

Location

San Francisco, United States

Founded

2019

Focus areas

autonomous pentestingcontinuous validationexposure managementattack path validationred teamFedRAMP HighCAPT

Languages

EN

Services & products

Security domains

Penetration TestingOffensive SecurityCloud SecurityIdentity & AccessApplication SecurityThreat Intelligence

How they deliver

SoftwareProfessional Services

Products

NodeZero

Autonomous pentesting platform

Continuous autonomous penetration testing platform that safely runs production-safe attacks across internal, external, cloud and hybrid environments, chaining weaknesses to prove exploitable attack paths and verify remediation.

NodeZero Federal

Autonomous pentesting platform

FedRAMP High authorized version of NodeZero for government agencies and Defense Industrial Base suppliers, supporting continuous pentesting and CMMC-related evidence.

NodeZero MCP Server

AI integration / exploitability data interface

Connects AI tools to verified NodeZero exploitability data, allowing AI systems to query exploit-verified intelligence and launch targeted tests.

NodeZero Tripwires

Deception / detection

Auto-deployed tripwires that detect attacker lateral movement and trigger alerts or SOAR playbooks.

Customers

EnterprisePublic SectorCritical Infrastructure

Industries served

HealthcareFinancial ServicesEnergyManufacturingTransportationDefenseGovernmentEducationPharmaceuticalSemiconductor

Compliance & partners

Compliance frameworks

PCI DSSNIS2CMMCFedRAMPSOC 2NIST SP 800-53Bill C-8

Technology partners

Splunk

Credentials & affiliations

Certifications

FedRAMP High Authorization (NodeZero Federal)

Issued by: FedRAMP

Awards

Fast Company's Most Innovative Companies

Fast Company

Inc. 5000 Fastest Growing Companies

Inc.

Deloitte Technology Fast 500

Deloitte

People

Management & team (5)

+ 1 more

Other cybersecurity companies in United States

View all