Their support has been extremely fast. I have only had to reach out to them on a few occassions in the last year. But each time they got back to me faster than almost any other vendor that we partner with. On top of that their resolution time was also speedy. I also like the flexibility of virtual and local hosted runners. This allows for more flexibility and a wider range of pen tests can be ran. Review collected by and hosted on G2.com.

It can be a little confusing at first to set up a scan for the first time. You have to update assets then create a template then actually set up the runner. Rather than getting an error. It would be nice if from the runner creation section it took you through the whole process. Review collected by and hosted on G2.com.

The platform capabilities are outstanding. I really like that it's safe to use in production and will prioritise any exploits or weaknesses in your environment. The UI is easy to navigate and provides some in-depth information at every step of a successful attack path. It's fast and can scale to any size; it offers various integrations with certain ticketing systems. Pricing seems very reasonable for what you get, and what it gives back to you is very valuable.

The support has been second to none, and any issues or queries I've made have been resolved in a timely manner.

It doesn't use a lot of AI, which I like, and where it does use it, it's enriching already useful information. Review collected by and hosted on G2.com.

Honestly, nothing. I've used it extensively and I can't find anything that I don't like. Review collected by and hosted on G2.com.

I like that NodeZero from Horizon3.ai runs in the background and gives us very clear reports on the most critical vulnerabilities. It helps us find our most critical vulnerabilities so that we can solve them quickly, like password issues allowing us to change our password policy. I appreciate how it helps us automatically put the issues to resolve into Jira, which aids in project management. The reports are clear and we can go back to them easily. I also like that we can retest fixes and add action items into Jira without any hassle. It helps secure our environment and even brings down the cost of our cyber insurance. Review collected by and hosted on G2.com.

I find the speed of running the first test pretty slow. It took us several weeks, maybe even a month or more for the test to complete because we ran every test as a beginning baseline. We also found the initial setup a bit time-consuming, but luckily, we had technicians from Horizon helping us set it up and get it running the first time. Review collected by and hosted on G2.com.

I appreciate how NodeZero from Horizon3.ai automates penetration testing and reduces the waiting time for finding network vulnerabilities compared to manual security audits. The automated attack path chaining is really useful to find complex lateral movement opportunities within interconnected domain controllers. It's also great that I can verify proof of exploits with screenshots to provide undeniable evidence for compliance. Additionally, the host discoverability engine quickly identifies unmanaged IoT devices right after deployment, which is super useful for security assessments. I also find it easy to integrate real-time exploit information with Splunk for immediate SOC incident responses. The initial setup was easy, which is definitely a plus. Review collected by and hosted on G2.com.

When large network topology graphs are displayed in a web application during an active assessment, the interface completely freezes. Additionally, the critical port data gets lost when exporting summaries using the default report templates. Also, sensitive modules for password spraying should be throttled more granularly to prevent overwhelming the identity provider with requests, which compromises the effectiveness of the password sprayer. Review collected by and hosted on G2.com.

I appreciate that NodeZero from Horizon3.ai is a fast and ongoing internal attack simulation solution that doesn't compromise production infrastructure. The automated proof of exploit capability is great because it generates verifiable attack chains without impacting business operations. I also find it valuable that Docker containers can be quickly deployed locally in minutes, and the impact maps clearly show credential harvesting chains across DC. Additionally, I like how rules applied to a firewall are instantly re-activated by automated re-testing. I find it convenient to push Vuln discovery reports directly into Jira for remediation tickets. Review collected by and hosted on G2.com.

I find that legacy subnet routers consume system resources excessively at random when trying to discover devices using an aggressive approach. Also, during network sweeps, the platform should offer fine-grained control over bandwidth. Review collected by and hosted on G2.com.

I honestly don’t know of another product on the market that delivers this same level of overall value. This product is helping change the way we think about and approach vulnerabilities, shifting the mindset from simply identifying them to taking meaningful action to address them. Review collected by and hosted on G2.com.

Currently, I don't have any dislikes about NodeZero. Review collected by and hosted on G2.com.

I like that NodeZero from Horizon3.ai is a safe real-exploit execution tool that doesn't crash services. It helps us focus by separating out proven vulnerable routes, making sure fixes for actionable compromises are handled quickly. I also appreciate the platform's step-by-step proof of compromise logs, which include captured hashes and command line outputs for each successful attack. The one-click post remediation verification feature is really handy, allowing us to retest specific targets without needing a full enterprise assessment. Review collected by and hosted on G2.com.

If our VLAN is highly segmented, and we have strict rate limits on our firewall, we often experience timeouts with large subnet discovery jobs. In a multi-homed asset scan, when complex host parsing logic is applied, we notice that secondary interfaces are dropped. Additionally, the initial setup was quite hard for us. Review collected by and hosted on G2.com.

What I like most about NodeZero is that it removes the guesswork from penetration testing. Rather than depending on a point-in-time, manual assessment, it continuously and autonomously identifies exploitable attack paths the way a real attacker would—chaining together weak credentials, misconfigurations, and vulnerabilities to highlight real business risk, not just a long list of CVEs. The findings are prioritized and actionable, which helps our team focus remediation on what truly matters instead of chasing noise. It’s also refreshingly self-service: there are no lengthy scoping calls or waiting around for a vendor’s schedule, and we can launch an operation whenever we need to. That mix of speed, autonomy, and real-world attack validation has made it a genuinely valuable addition to our security program. Review collected by and hosted on G2.com.

There isn’t much to dislike. If anything, I’d just like to see a few additional features that make it easier to manage the platform. Review collected by and hosted on G2.com.

I like that NodeZero behaves like a real attacker by automatically discovering, pivoting, and chaining issues, instead of simply listing vulnerabilities. It also presents clear, proven attack paths tied to business impact, so we know exactly what to prioritize and fix first. On top of that, it requires minimal setup and no agents, which makes it easier for us to move from an occasional pentest to a continuous testing cycle. Review collected by and hosted on G2.com.

At our firm, the main pain points with our NodeZero deployment have been around reporting depth, some operational friction, and the limits of scope and coverage.

From a reporting standpoint, we have found that some of the outputs are still too generic or high level when what we really need is clean, per asset detail that we can hand directly to the operations team without a lot of massaging. We do get solid attack path narratives, but if I want very granular, host by host views or highly tailored executive ready decks, I still have to augment the out of the box reports.

Finally, we have seen that results are only as good as how we scope in our environment. If we are conservative with IP ranges or segment placement, NodeZero simply can’t discover or chain certain attack paths, and the output can look underwhelming. That is not a flaw in the engine so much as a practical limitation, but it does mean we have to be intentional about scoping if we want the kind of attackers eye view we are expecting. Review collected by and hosted on G2.com.

NodeZero from Horizon3.ai impresses me with its proactive approach to cybersecurity testing. I appreciate how it automates advanced attack simulations, helping organizations identify vulnerabilities before malicious actors can exploit them. Its ease of use, comprehensive reporting, and continuous learning capabilities make it a powerful tool for strengthening security posture. Review collected by and hosted on G2.com.

One potential drawback of NodeZero from Horizon3.ai is that, like any automated security tool, it may generate false positives or overlook some nuanced vulnerabilities. Additionally, some users might find the setup or integration process complex depending on their existing infrastructure. It's important to ensure proper configuration and continuous monitoring for optimal resul Review collected by and hosted on G2.com.